{
    "1892256": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Kath19634/calcium/refs/heads/main/dissuade",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 03:18:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1892255": [
        {
            "ioc_value": "0qepx6f4.cdn-jbgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 03:11:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892254": [
        {
            "ioc_value": "exjui68915.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 03:10:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892253": [
        {
            "ioc_value": "cdn-jbgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 03:09:36",
            "last_seen_utc": "2026-09-01 03:09:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "1September2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892252": [
        {
            "ioc_value": "63ksxix5.shop-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 03:09:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892251": [
        {
            "ioc_value": "shop-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 03:08:11",
            "last_seen_utc": "2026-09-01 03:08:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "1September2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892250": [
        {
            "ioc_value": "111.230.143.136:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-09-01 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892249": [
        {
            "ioc_value": "218.244.142.4:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-09-01 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892248": [
        {
            "ioc_value": "bumilago.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 02:58:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892247": [
        {
            "ioc_value": "nivovubo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 02:57:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892246": [
        {
            "ioc_value": "8skntjcxvt.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 02:56:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892245": [
        {
            "ioc_value": "rkny771c.shop-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 02:41:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892244": [
        {
            "ioc_value": "shop-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 02:40:46",
            "last_seen_utc": "2026-09-01 02:40:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "1September2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892243": [
        {
            "ioc_value": "pdejstkd.shop-neuro-sharp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 02:35:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892242": [
        {
            "ioc_value": "fdtujzrt.shop-lipovive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 02:33:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892241": [
        {
            "ioc_value": "shop-neuro-sharp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 02:32:50",
            "last_seen_utc": "2026-09-01 02:32:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "1September2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892240": [
        {
            "ioc_value": "shop-lipovive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 02:32:36",
            "last_seen_utc": "2026-09-01 02:32:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "1September2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892239": [
        {
            "ioc_value": "zyzimy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 02:24:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892238": [
        {
            "ioc_value": "45.221.118.139:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-09-01 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892237": [
        {
            "ioc_value": "tamagewu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 02:02:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892236": [
        {
            "ioc_value": "sanujedu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 02:02:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892234": [
        {
            "ioc_value": "ea7d601bfe326ab75da0c8f597a2f161b3b23dbc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892235": [
        {
            "ioc_value": "6ff791183aa5afb344d75f98369a4612",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892230": [
        {
            "ioc_value": "68bbb1ec14eca9697d31887f35e5d378c40294316273659f766705a7989b5f5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892231": [
        {
            "ioc_value": "c1cedc0a39636edb00504b28615cd3f7570e9ef2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892232": [
        {
            "ioc_value": "71ed0c438010f5a1175e0aecf651f11f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892233": [
        {
            "ioc_value": "5df4e83737ada213b9d0ebd4c10cd133a51a58651eef0c16a6d855427f3f91e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892226": [
        {
            "ioc_value": "9bca93708a030800083c3b6ee80026ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892227": [
        {
            "ioc_value": "63cfd11a7b698ba5094402d2cbf90e218deffc7d5b47c88a7a4b7c72f4ce577c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892228": [
        {
            "ioc_value": "1258038999ea052b51517bfb55a76d17f1f6ea0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892229": [
        {
            "ioc_value": "7b682ccd1c64772c008771cf7f82ecf8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892222": [
        {
            "ioc_value": "ecc260c95b9e029000425314f6d8303f9770d00f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892223": [
        {
            "ioc_value": "073c356c4632b6a4ce38aab8a9002c55",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892224": [
        {
            "ioc_value": "d0a3edffb419f2843f421e9f9568fafe7e77e39dc19c6530ea054c074f346a61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892225": [
        {
            "ioc_value": "f86d68ac842f22e6a89c9cdf26a76ff2874767ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892221": [
        {
            "ioc_value": "336b3fc46fb10b237b02898203558f045633bdb4585f229551ac1d417f2c93f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892219": [
        {
            "ioc_value": "ba1c940b7c347428daa23ecdf7163a5a7014e4b0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892220": [
        {
            "ioc_value": "d0e5a09b69aee403443d0955c2854f2e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892215": [
        {
            "ioc_value": "8445c3ed00e07796952e38bf0166c75b75731ed54932494c9f23eba1abd412f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892216": [
        {
            "ioc_value": "0538c0ba8a7aef1c21ab5a3daf7a090882e526fa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892217": [
        {
            "ioc_value": "c1cde39427003b35637d9b0fbf84736a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892218": [
        {
            "ioc_value": "4f7c36d52411d5fdcd7f1a61467427ac5fee7a635d7a4093910689992e747c70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892212": [
        {
            "ioc_value": "d3d1814edbe02d75491b343b12f73c21dd18c92f49d4dfd0cd9ec80bbac0feb6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892213": [
        {
            "ioc_value": "4742f5786c483e6c0d6a7078893490720229d5fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892214": [
        {
            "ioc_value": "18d8f8825f4ad24425d203b3939c4d9c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892209": [
        {
            "ioc_value": "88ad46d7a638c75e69aa8edb4b63ac561482ff3f9ca43f84eab5988559acf4c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892210": [
        {
            "ioc_value": "e023025c9c4b6e9622d9204b17d89b216eb03c0c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892211": [
        {
            "ioc_value": "28a0abc188af0e3b2bbc69c26d3cbbf1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892206": [
        {
            "ioc_value": "1310707e4fccab2010978787d73efd899d3fd74c11ad3fa79c91f66a8aa4f093",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892207": [
        {
            "ioc_value": "b3a9c3b3308ab91bd226aaeb8f751e9418752190",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892208": [
        {
            "ioc_value": "787986de847dad6a56e0c27002e80105",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892202": [
        {
            "ioc_value": "ad4920ffdf4d4b8efa6abff1498e825a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892203": [
        {
            "ioc_value": "0a954e02c5c334fced26459329feccbe9750614c0bdb1cb26e9196d5a2d7044b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892204": [
        {
            "ioc_value": "9bf92b9d01e1098f4348618b4dcde1bd267f98c9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892205": [
        {
            "ioc_value": "4395fd8f9936515d32b58b0f4b9be533",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892200": [
        {
            "ioc_value": "8c021fb1ebd1dc551c0586023d756dfa820dd59f57e469483a5ad96669a69bf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892201": [
        {
            "ioc_value": "9320916ff2f4bf5016d3e82511c3269fc297f778",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892199": [
        {
            "ioc_value": "7f1150a2bdb3a6cc564b52731b3b73ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892196": [
        {
            "ioc_value": "d9d4986756a307a9a687e8c0ee85b93f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892197": [
        {
            "ioc_value": "5a92f7194f4840889dd8c460d1f3d4816e351bc546f1a6af7492ef9709e1f8db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892198": [
        {
            "ioc_value": "9a4743f14712e549f2ce62fda4a192c71086bc6d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892192": [
        {
            "ioc_value": "5ccba3f31bf3a7e9885216d553a2781e11e7e318",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892193": [
        {
            "ioc_value": "374f2b34ce189ad4699f3ea27a513824",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892194": [
        {
            "ioc_value": "c753da5052ca60ceea81311f839c6475ace338e63161e66a53424e3c96982663",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892195": [
        {
            "ioc_value": "ccd115e3c75affd4b584f1187bf3a9de7a873659",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892189": [
        {
            "ioc_value": "83285c9d2feefbf21f4713c3a9d6b045b3729eb7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892190": [
        {
            "ioc_value": "156612f475b300e786de37a7e7b721df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892191": [
        {
            "ioc_value": "ab343ecdaeeb63ba165e55c5d00a5315a4c3dea63b9f04475acdfcaaf86b9e30",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892186": [
        {
            "ioc_value": "eb571e2601e4093d4ae640926e4d00558b60b52d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892187": [
        {
            "ioc_value": "986a6f3196df6e70386ff769cf9b8c50",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892188": [
        {
            "ioc_value": "063199a63746acf6177d01b4e7926c29474c3c9b1efd6379c776270db15e4eed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892185": [
        {
            "ioc_value": "1b19773586273476f120ccf8d4f4e708b028c31208d629745af55146fea7cca0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892183": [
        {
            "ioc_value": "d4d9d3621158928b518f846e6d2750444aa03a09",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892184": [
        {
            "ioc_value": "e5b2bdd7b41f34655a18dc64b1dfd5c2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892180": [
        {
            "ioc_value": "2c853c0960aaec22de8854c64788600186145c7a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892181": [
        {
            "ioc_value": "5afec43f5c24170974cea4812eb4aa1a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892182": [
        {
            "ioc_value": "b399ae436261981a3028c8cd2afbb74f2f3ee67802dfd9e9b115b50d0e2e4586",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892176": [
        {
            "ioc_value": "fb78571c836bd14c37d13ee7df27e7f14f5cafbe14803a963e0cb8d4c3404afb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892177": [
        {
            "ioc_value": "c4f964b58073aa299162d30368dd1cb1aef438cd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892178": [
        {
            "ioc_value": "11e741893c0d27194267569eaba78a6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892179": [
        {
            "ioc_value": "4cf020840b9c56b72cff2a39d5d43e4d94c3d923f3972c81a6cf307be47894b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892175": [
        {
            "ioc_value": "3ce91f4b8ef19a3b05dada4e383d947a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892173": [
        {
            "ioc_value": "9cd3b9489195bdf198212c1525f035d91b1f5056020434892a3f0b8709c03369",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892174": [
        {
            "ioc_value": "b40154f9b7619056c54d78f09e6f2f8675ff8356",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892170": [
        {
            "ioc_value": "70aebaa150deabc425c59c16847ac5f808a6dca0a694ba6731039519722fc927",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892171": [
        {
            "ioc_value": "05237b174fc707fdf9d784c84f85fe9747dd354d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892172": [
        {
            "ioc_value": "5939d604339034532319a5f5dde7d440",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:41:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892166": [
        {
            "ioc_value": "17ffd9f15fde1f6745336904de98f7f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892167": [
        {
            "ioc_value": "7ef6d19cbe7749f9af0e07f4ee9ff888dc521b86d92c6d2c96e05d23c8285a2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892168": [
        {
            "ioc_value": "dd9a29c32763084a28eb1ef2a15bbca86c7f64c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892169": [
        {
            "ioc_value": "d5c466a742d8a3a43740ac6b1b23edf8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892162": [
        {
            "ioc_value": "d729429f3de4b590f7288af6c25e52b791c274a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892163": [
        {
            "ioc_value": "87c4cc6038de755b2f92a6170f996e76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892164": [
        {
            "ioc_value": "a8b04cd55da5c1e39226c438e3135535c4b59fd09923793adca8f4e423d5da68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892165": [
        {
            "ioc_value": "953b83696684fa80364b20a234ea5c4d2932d752",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892159": [
        {
            "ioc_value": "1415b8c88e32671ad160f304ebcf6ca8ee7e66f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892160": [
        {
            "ioc_value": "dc35612daa6b90f8a43f1c227b9098f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892161": [
        {
            "ioc_value": "be39c7d6f0dcfcab1cada0b3c00de9120c620d9dd70ae705a44a5c090af2dc6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892156": [
        {
            "ioc_value": "cc2a3cff77510c33812d3c6640fba457f0be6bfd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892157": [
        {
            "ioc_value": "8199bc5927704382b1c979647164d7d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892158": [
        {
            "ioc_value": "707a0a8e815cc25a627070089409d0d53da58d08d9a262d0d1e4268d0b15a728",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892152": [
        {
            "ioc_value": "3100d0767cc791b6b83a87efdf0b1c45c7bc9f2a5107449f48631cd0b50467b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892153": [
        {
            "ioc_value": "869888dce1dc0f6fb02ada26ca2f1783c6315a5e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892154": [
        {
            "ioc_value": "aaabbc1075a27b11770a0852ebe95732",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892155": [
        {
            "ioc_value": "1f2e4e6ca760efe31ce90a1fb75d886cbc88d6f57fcd868649f5712b761be8ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892149": [
        {
            "ioc_value": "a1d1d77408b0f885e83953e9e73a64f59333997c1a352739903381d6adf9d6b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892150": [
        {
            "ioc_value": "d4bcef132fa91aa07ccd82f40433cfda1f8192a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892151": [
        {
            "ioc_value": "4c92a36b3568f29fdc1c2a18d11bc3b6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892147": [
        {
            "ioc_value": "a0fade7e52ce271bcba5041c76ca48055bffc441",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892148": [
        {
            "ioc_value": "a6a805492262d48a585c61bf3949ec62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892146": [
        {
            "ioc_value": "236af436fd7fff6ed0f093b1cee2aa98951dba51b0211539edc68e42cfb6ce0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892144": [
        {
            "ioc_value": "7ecbe5b6fd42e5d1d20add93750e9dab6fda88ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892145": [
        {
            "ioc_value": "9b34dee116e885bdeb52e12473ef5bc2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892140": [
        {
            "ioc_value": "b0e750d6df4bcc84452967dcb61c1c831234b6fd4f8cb18d428502dde92bbc62",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892141": [
        {
            "ioc_value": "6a35d430b68f8d14774ad774c5c441d6eb6f9395",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892142": [
        {
            "ioc_value": "7de419b49133d63738b5d6c552c0f094",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892143": [
        {
            "ioc_value": "a15725bfb1d9de416fdbd7eeea577b4f328417cbb401ba91a1ea91f244e9a0c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892139": [
        {
            "ioc_value": "98d169463f862d086bf02ae8b5cd1d86",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892137": [
        {
            "ioc_value": "db6fc0b9be85dad1cc11daab495cae26f719979f01f491bfb3c71aee2bec39a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892138": [
        {
            "ioc_value": "caf04575e05bc9179007ed5f4c6e0f8263fcd828",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892134": [
        {
            "ioc_value": "7bb9468d71453ddce9e6ebaa63c308ee33f100c4498b70f4b04aba23f5234a89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892135": [
        {
            "ioc_value": "69af9a0f82f023b26c3ed108b0eea9b9c9d611ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892136": [
        {
            "ioc_value": "ea7e4d8d746116a93ca6b92cf8e4869f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892132": [
        {
            "ioc_value": "1477adf1fbd8d9e55c3114689934819f524b5b57",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892133": [
        {
            "ioc_value": "3f84ee612332dcafeff3e5f5cfafc1de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892128": [
        {
            "ioc_value": "b2b7a4513002ef7e08a53440f1c57801c0f6113e7f22363f929e39c37188f6b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892129": [
        {
            "ioc_value": "47504e79dafbe091e6f77908292e2b6c6249d503",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892130": [
        {
            "ioc_value": "aae740360ec8cfe8c2573863f85d98be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892131": [
        {
            "ioc_value": "386aece5751535acf2c60a1cec037ec18da94d6a10237117debccbc0cf8ceaa7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892124": [
        {
            "ioc_value": "1d58f29c8364caeaa015c3e27b01eb21",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892125": [
        {
            "ioc_value": "f3c278a83619ade385ba939891d1455bd3f8eceb4e94566be2f5d1ef1289586d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.golroted",
            "malware_alias": null,
            "malware_printable": "Golroted",
            "first_seen_utc": "2026-09-01 01:40:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892126": [
        {
            "ioc_value": "32a57e231e48fd3018bf01bfccadb3e16dd1eb5b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.golroted",
            "malware_alias": null,
            "malware_printable": "Golroted",
            "first_seen_utc": "2026-09-01 01:40:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892127": [
        {
            "ioc_value": "8266795c498edf5cd5463065e74faade",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.golroted",
            "malware_alias": null,
            "malware_printable": "Golroted",
            "first_seen_utc": "2026-09-01 01:40:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892121": [
        {
            "ioc_value": "c367f434aa20c7309783ad1853f7260d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892122": [
        {
            "ioc_value": "35180caf222c793b7aedf582b8c55035777b34ccc46e6bcf9bde71b78aa62d24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892123": [
        {
            "ioc_value": "d125d550e41997ec64f46a43031554c30a8649a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892117": [
        {
            "ioc_value": "35956c8badaade31e0f19f3ab49dfaa399982b4f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892118": [
        {
            "ioc_value": "ab6ab7c69d532b0a30664b1eae3179c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892119": [
        {
            "ioc_value": "a0aaa48a09b7de1757174e1d71f2f971ebacb0b519df482fb31a490d03038941",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892120": [
        {
            "ioc_value": "ad72caca510a6133f9053c007398271b7479b37c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892113": [
        {
            "ioc_value": "c01666d1403c50854435c95febd48bc93d1a176f1d446dd58186ed102f1c2a20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892114": [
        {
            "ioc_value": "f03c9290411b85f93f5ddeff9b853f0a36bbd111",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892115": [
        {
            "ioc_value": "07013ad4ee3f650891656fb801449be9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892116": [
        {
            "ioc_value": "0fc490d3f43950b3119adb44e367a1f4c79a7361f0ce9569db7908651ebebe0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892110": [
        {
            "ioc_value": "1178349ef0c3277ab0b197b219eab20ef234d5ed72ac8e102f1e802855d9a6a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892111": [
        {
            "ioc_value": "92be9e0c60548a8b4ff7c30c8a7f44574e959f1b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892112": [
        {
            "ioc_value": "3bf4daa72f54daa9d817b6b2feeb53be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892106": [
        {
            "ioc_value": "0b33bdca8e40807365c6f12be0643ee9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-09-01 01:40:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892107": [
        {
            "ioc_value": "49dc5155cd50447bbdf92da2045d501ed3424cbd6763f976934430441c23552f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-09-01 01:40:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892108": [
        {
            "ioc_value": "b37c0045a65f7a33d25dc0a19b7b57ff7b9bba94",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-09-01 01:40:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892109": [
        {
            "ioc_value": "08a689a9093f3c81904933456f8d3618",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-09-01 01:40:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892103": [
        {
            "ioc_value": "47f2ce28e9aa42fa8fbb912bdfd854fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892104": [
        {
            "ioc_value": "58107ef0590387ecd7870993f6f7166002e92f600238f070f11ff3413cafa800",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-09-01 01:40:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892105": [
        {
            "ioc_value": "5e8956dfe321a14dc054b07daf1159be723519ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-09-01 01:40:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892099": [
        {
            "ioc_value": "9abed7ab82f16c8d5efffde0e1a0d24c115fc109",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892100": [
        {
            "ioc_value": "fdf655fb4cec2475d255915507a358e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892101": [
        {
            "ioc_value": "ef88d67603efeb33fc269bf6c924ad1afbaf2c36099a7b5247a1bca171b15a6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892102": [
        {
            "ioc_value": "6d638fc53e9414357e75fb65aa8906a0d1289f8e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892096": [
        {
            "ioc_value": "a9d26b8cbe5e6bda085f59f30a6330b052bba582",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892097": [
        {
            "ioc_value": "9bc7883951f10740c7609f06ba192156",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892098": [
        {
            "ioc_value": "876e6dcdcdca4e322f44ffcdcf3c0746297e335a21a55856d021b92ab9311d2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892093": [
        {
            "ioc_value": "0e30b33acd596bd37ed8c0c5774fe5c1b5e88af2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892094": [
        {
            "ioc_value": "e7c515d44e5a53d4f695cee4d9ae67b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892095": [
        {
            "ioc_value": "25689a084aaf0f67f61ada67250e3090319daadad24d0b85bae46334677dbe40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 01:40:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892089": [
        {
            "ioc_value": "79b3612d856a4949395de781b875c1625ff8bd1c9cb8790209bfb4819a2240d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-09-01 01:40:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892090": [
        {
            "ioc_value": "33759ebbbc586e2f574838c7fdba7421862e4689",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-09-01 01:40:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892091": [
        {
            "ioc_value": "1807503a422d180ea91f0a23cbd76962",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-09-01 01:40:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892092": [
        {
            "ioc_value": "2bd9ba7932c288d4b2f8a1ef48e4628c04f8ed12c340d775b4765fbaaff61869",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892086": [
        {
            "ioc_value": "6374eb353f02c7b26e00697a32f4a4f613402ca0296f5f10afdb3243f729c1b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892087": [
        {
            "ioc_value": "98bf6e4cfe91f5a1154ae0e168437b81318dd24b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892088": [
        {
            "ioc_value": "a56af1b76500fad38edb4958e6a29399",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892083": [
        {
            "ioc_value": "d70fc0b690b491762a0f861cd129786e9e54c4a79dff6f7bd0b3a14c90b6ec24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-09-01 01:40:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892084": [
        {
            "ioc_value": "05985936885fb7a0e70f4ea74aa5049695879952",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-09-01 01:40:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892085": [
        {
            "ioc_value": "33970f0d2d3ba1f4d505dec41eb157e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-09-01 01:40:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892080": [
        {
            "ioc_value": "609996da0ee3ae21db2ecc8c98c656994723fc8359410a118a2042c418b53f03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-09-01 01:40:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892081": [
        {
            "ioc_value": "10956e3f7ca522e8c0c0841446d883f7f65a9c70",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-09-01 01:40:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892082": [
        {
            "ioc_value": "6947fe506ee83239c32a4213a91e1365",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-09-01 01:40:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892077": [
        {
            "ioc_value": "21ca7ea24b9faedcc3d82d803f71f3d61d407d518dd503b6da5ea9b8dac3d0bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892078": [
        {
            "ioc_value": "ffdbb80d7302f58a6b44cde7b7c390afe99487f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892079": [
        {
            "ioc_value": "548c6c4912046e948df0e2578cf4dd89",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-09-01 01:40:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892074": [
        {
            "ioc_value": "00c4603f074afb652780bb8b3e703ae093c5644652b81954ec6d0fb983e79203",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892075": [
        {
            "ioc_value": "bc451286285ba16909ec5c884bcfec381a17c91e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892076": [
        {
            "ioc_value": "7dde3aa953a54b22666dcadc568a870e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-09-01 01:40:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1892073": [
        {
            "ioc_value": "dyhisyde.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 01:24:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892072": [
        {
            "ioc_value": "oj21eac49y.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 01:19:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892071": [
        {
            "ioc_value": "cuxegulu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 01:17:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892070": [
        {
            "ioc_value": "e784kfx8.shop-powerbite.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 01:08:17",
            "last_seen_utc": "2026-09-01 01:08:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892069": [
        {
            "ioc_value": "49.232.183.87:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-09-01 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892067": [
        {
            "ioc_value": "kulike.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 01:01:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892065": [
        {
            "ioc_value": "hkd.138sportlogin.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 00:50:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1892066": [
        {
            "ioc_value": "https://hkd.138sportlogin.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-09-01 00:50:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1892064": [
        {
            "ioc_value": "pygukocy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 00:43:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892062": [
        {
            "ioc_value": "www.tuerenportal.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 00:40:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892063": [
        {
            "ioc_value": "speedimmo.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-09-01 00:40:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892060": [
        {
            "ioc_value": "magewusi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 00:20:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892059": [
        {
            "ioc_value": "pavmx58620.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-09-01 00:07:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892058": [
        {
            "ioc_value": "fusydiri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:49:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892057": [
        {
            "ioc_value": "1.94.65.9:2147",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 23:46:43",
            "last_seen_utc": "2026-09-01 02:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1892056": [
        {
            "ioc_value": "jjfdd99870.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:43:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892054": [
        {
            "ioc_value": "dtoba44481.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:14:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892053": [
        {
            "ioc_value": "c16xfxw4.shop-enerflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 23:10:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892052": [
        {
            "ioc_value": "jojorivo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:09:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892051": [
        {
            "ioc_value": "bdyfs84973.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:07:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892050": [
        {
            "ioc_value": "shop-enerflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 23:07:10",
            "last_seen_utc": "2026-08-31 23:07:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892049": [
        {
            "ioc_value": "qewolasi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:04:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892048": [
        {
            "ioc_value": "hehytiru.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 23:03:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892046": [
        {
            "ioc_value": "ecuador.embajada.gob.ve",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:35:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892045": [
        {
            "ioc_value": "edpartnerspk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:34:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892044": [
        {
            "ioc_value": "dalotypi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 22:34:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892043": [
        {
            "ioc_value": "electroste99.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:33:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892042": [
        {
            "ioc_value": "ecortiella.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:32:24",
            "last_seen_utc": "2026-08-31 23:00:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892039": [
        {
            "ioc_value": "dynalarme.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:26:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892038": [
        {
            "ioc_value": "9ngdq1sh.shop-cogniclear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 22:25:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892037": [
        {
            "ioc_value": "shop-cogniclear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 22:21:52",
            "last_seen_utc": "2026-08-31 22:21:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892036": [
        {
            "ioc_value": "fafupixi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 22:19:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892034": [
        {
            "ioc_value": "cliff-bell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892033": [
        {
            "ioc_value": "chrgasa.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 22:10:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892032": [
        {
            "ioc_value": "http://cdire.shop:9048/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 22:10:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892029": [
        {
            "ioc_value": "http://nopxs.shop:8839/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 21:55:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892030": [
        {
            "ioc_value": "http://cdire.shop:9048/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 21:55:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892028": [
        {
            "ioc_value": "bloguc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:49:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892026": [
        {
            "ioc_value": "http://oceanvw.click:3215/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 21:49:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892027": [
        {
            "ioc_value": "http://cdire.shop:9048/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 21:49:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892025": [
        {
            "ioc_value": "pyxole.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 21:44:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892024": [
        {
            "ioc_value": "mwks2u0x.shop-burnblend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 21:43:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892023": [
        {
            "ioc_value": "shop-burnblend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 21:40:28",
            "last_seen_utc": "2026-08-31 21:40:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892022": [
        {
            "ioc_value": "tttfuwyry2.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 21:33:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892021": [
        {
            "ioc_value": "qqzl80cb.shop-biodentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 21:32:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892020": [
        {
            "ioc_value": "shop-biodentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 21:31:25",
            "last_seen_utc": "2026-08-31 21:31:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892019": [
        {
            "ioc_value": "xifeki.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 21:30:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892018": [
        {
            "ioc_value": "autoescolalp.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:29:20",
            "last_seen_utc": "2026-09-01 00:02:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892017": [
        {
            "ioc_value": "coqydy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 21:27:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892016": [
        {
            "ioc_value": "shaltaypi.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:17:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892015": [
        {
            "ioc_value": "apartsearcher.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:16:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892014": [
        {
            "ioc_value": "h6a927ks.shop-eloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 21:09:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892013": [
        {
            "ioc_value": "agricropmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:09:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892012": [
        {
            "ioc_value": "hedwig583.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 21:08:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892011": [
        {
            "ioc_value": "3dtailorplugin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:07:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892010": [
        {
            "ioc_value": "shop-eloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 21:06:44",
            "last_seen_utc": "2026-08-31 21:06:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1892009": [
        {
            "ioc_value": "vitamindpi55.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 21:05:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1892007": [
        {
            "ioc_value": "88.119.169.216:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892008": [
        {
            "ioc_value": "137.220.151.95:2096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1892006": [
        {
            "ioc_value": "fozyce.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 21:00:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892003": [
        {
            "ioc_value": "mifxf64983.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 20:35:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1892002": [
        {
            "ioc_value": "http://cdire.shop:9048/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 20:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892001": [
        {
            "ioc_value": "http://oceanvw.click:3215/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 20:20:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1892000": [
        {
            "ioc_value": "sotvn86027.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 20:07:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891998": [
        {
            "ioc_value": "195.177.94.101:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-31 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891999": [
        {
            "ioc_value": "47.115.34.48:1082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891997": [
        {
            "ioc_value": "149.104.21.33:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891996": [
        {
            "ioc_value": "vygumi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 19:57:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891995": [
        {
            "ioc_value": "81h5z9681x.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 19:52:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891994": [
        {
            "ioc_value": "rbxow04849.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 19:49:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891993": [
        {
            "ioc_value": "94.26.3.17:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:47:07",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891992": [
        {
            "ioc_value": "51.250.17.147:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-31 19:46:33",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891991": [
        {
            "ioc_value": "5.175.182.184:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:46:32",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891990": [
        {
            "ioc_value": "45.88.91.50:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-31 19:46:26",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891989": [
        {
            "ioc_value": "45.142.31.82:52125",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-31 19:46:18",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891988": [
        {
            "ioc_value": "217.217.97.164:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-31 19:45:47",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891987": [
        {
            "ioc_value": "199.231.191.3:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:44:53",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891986": [
        {
            "ioc_value": "195.177.94.101:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-31 19:44:47",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891985": [
        {
            "ioc_value": "154.13.7.183:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:43:48",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891983": [
        {
            "ioc_value": "136.0.213.135:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891984": [
        {
            "ioc_value": "136.0.213.135:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891982": [
        {
            "ioc_value": "105.158.184.163:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:43:18",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891981": [
        {
            "ioc_value": "104.143.46.142:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:43:13",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891980": [
        {
            "ioc_value": "104.143.46.142:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-31 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891979": [
        {
            "ioc_value": "102.220.160.198:7001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-31 19:43:05",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891978": [
        {
            "ioc_value": "93.152.223.161:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 19:30:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891977": [
        {
            "ioc_value": "finnancialpl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 19:30:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891976": [
        {
            "ioc_value": "interactivsbroker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-31 19:30:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891975": [
        {
            "ioc_value": "priscoral.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 19:23:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891974": [
        {
            "ioc_value": "185.227.69.72:1417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-31 19:15:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891971": [
        {
            "ioc_value": "ewrca1qqxb.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 19:11:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891970": [
        {
            "ioc_value": "7po1l9nh.shop-echofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 19:08:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891969": [
        {
            "ioc_value": "shop-echofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 19:06:38",
            "last_seen_utc": "2026-08-31 19:06:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891966": [
        {
            "ioc_value": "kingkong-mag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891967": [
        {
            "ioc_value": "totalforcegym.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891968": [
        {
            "ioc_value": "theoriginbeachsoul.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891965": [
        {
            "ioc_value": "www.weoptic.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891962": [
        {
            "ioc_value": "167.17.47.14:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891963": [
        {
            "ioc_value": "167.17.47.14:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891964": [
        {
            "ioc_value": "102.117.174.216:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 19:05:06",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891960": [
        {
            "ioc_value": "167.17.47.14:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891961": [
        {
            "ioc_value": "167.17.47.14:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891958": [
        {
            "ioc_value": "gaz.138sportlogin.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 19:00:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891959": [
        {
            "ioc_value": "https://gaz.138sportlogin.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 19:00:45",
            "last_seen_utc": "2026-09-01 03:42:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891956": [
        {
            "ioc_value": "awillicontractors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 18:55:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891957": [
        {
            "ioc_value": "ero-corp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 18:55:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891954": [
        {
            "ioc_value": "gaz.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 18:50:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891955": [
        {
            "ioc_value": "https://gaz.12naga.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 18:50:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891953": [
        {
            "ioc_value": "vijaduqe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 18:45:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891952": [
        {
            "ioc_value": "www.mahayanti.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 18:45:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891951": [
        {
            "ioc_value": "zilaju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 18:24:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891950": [
        {
            "ioc_value": "pk4vxmqyz7.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 18:21:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891949": [
        {
            "ioc_value": "locageje.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 18:13:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891948": [
        {
            "ioc_value": "noi403e7.shop-cardioslim-tea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 18:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891947": [
        {
            "ioc_value": "shop-cardioslim-tea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 18:10:56",
            "last_seen_utc": "2026-08-31 18:11:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891946": [
        {
            "ioc_value": "lyfoqy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 18:09:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891945": [
        {
            "ioc_value": "fwu2zba9n3.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 18:09:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891943": [
        {
            "ioc_value": "r.v-panel.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 18:00:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "g0njxa"
        }
    ],
    "1891944": [
        {
            "ioc_value": "https://r.v-panel.asia/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 18:00:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "g0njxa"
        }
    ],
    "1891927": [
        {
            "ioc_value": "167.71.38.182:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 17:54:04",
            "last_seen_utc": "2026-09-01 00:41:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891937": [
        {
            "ioc_value": "07ddbbe2c71c45577a7a4fbcdba0df91",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 17:54:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/valleyrat-backdoor-disguised-as-signed-adware-197dbde1",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1891938": [
        {
            "ioc_value": "8a626d844943da3456b044f38deae3a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 17:54:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/valleyrat-backdoor-disguised-as-signed-adware-197dbde1",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1891939": [
        {
            "ioc_value": "c24e99f9437feacaa63766a3cde3fe3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 17:54:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/valleyrat-backdoor-disguised-as-signed-adware-197dbde1",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1891942": [
        {
            "ioc_value": "qusala.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 17:36:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891941": [
        {
            "ioc_value": "tokozeto.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 17:11:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891940": [
        {
            "ioc_value": "iuhdcqg0.shop-dentilock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 17:08:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891936": [
        {
            "ioc_value": "shop-dentilock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 17:05:59",
            "last_seen_utc": "2026-08-31 17:06:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891935": [
        {
            "ioc_value": "pupevivo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 17:03:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891933": [
        {
            "ioc_value": "gen.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 17:00:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891934": [
        {
            "ioc_value": "https://gen.12naga.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 17:00:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891932": [
        {
            "ioc_value": "debicyki.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 16:41:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891931": [
        {
            "ioc_value": "sxohnfj3.shop-blinzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 16:40:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891930": [
        {
            "ioc_value": "shop-blinzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 16:39:49",
            "last_seen_utc": "2026-08-31 16:39:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891929": [
        {
            "ioc_value": "shop-gutlite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 16:39:32",
            "last_seen_utc": "2026-08-31 16:41:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891928": [
        {
            "ioc_value": "kohyhe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 16:35:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891926": [
        {
            "ioc_value": "mqduizlq.shop-biodentex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 16:31:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891925": [
        {
            "ioc_value": "shop-biodentex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 16:30:34",
            "last_seen_utc": "2026-08-31 16:31:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891924": [
        {
            "ioc_value": "riisw09472.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 16:29:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891923": [
        {
            "ioc_value": "https://privetbelvedere.net/proxy/legacy-thread.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-31 16:11:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1891922": [
        {
            "ioc_value": "privetbelvedere.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-31 16:11:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1891921": [
        {
            "ioc_value": "https://89.167.19.220",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 16:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3692f7f99d26b8ed39d82909f44c5ac4628fcc434ff13248fe6eac8e595b485/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891920": [
        {
            "ioc_value": "n9jwqx0b32.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 16:04:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891919": [
        {
            "ioc_value": "qoxyjymy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 15:55:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891914": [
        {
            "ioc_value": "http://uygprdfkttn6xhsvngx3yjn2sa5mef6czptzkxnutgo7satsjqlo5pqd.onion:50051",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 15:46:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,goldengate,gRPC,NodeJS-MaaS,RAT,TOR",
            "anonymous": 0,
            "reporter": "Evwaldo"
        }
    ],
    "1891915": [
        {
            "ioc_value": "r2vpglmz42fs5762tchek55bg4kdg3c6ozipg7wqs2ghzbhsdtwkzmyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 15:46:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1891916": [
        {
            "ioc_value": "rz5lecsm2re5ec4im362jnalrypxylxsdobuibuotbovvs4d3ctrcoyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 15:46:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1891917": [
        {
            "ioc_value": "hhj2nouojnatg6gvhfgrcqdanoe244gf26pixpnrcoxs7jiqu4atvzyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 15:46:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1891918": [
        {
            "ioc_value": "193.187.91.120:51842",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 15:46:44",
            "last_seen_utc": "2026-09-01 01:43:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Buffalo,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891908": [
        {
            "ioc_value": "67.205.132.147:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 15:29:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891913": [
        {
            "ioc_value": "quvehuzo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 15:24:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891912": [
        {
            "ioc_value": "http://cdire.shop:9048/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 15:15:36",
            "last_seen_utc": "2026-08-31 23:40:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e2bb18135f11abb5afa22fcd607183ff5cc5d2d499f8924a9a09dbe32ce7ecb9/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891911": [
        {
            "ioc_value": "y1w1e9yu.shop-dentavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 15:08:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891910": [
        {
            "ioc_value": "shop-dentavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 15:05:49",
            "last_seen_utc": "2026-08-31 15:05:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891909": [
        {
            "ioc_value": "hyhibe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 14:54:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891907": [
        {
            "ioc_value": "7444aquamarine.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 14:49:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891906": [
        {
            "ioc_value": "cyrilipu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 14:43:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891905": [
        {
            "ioc_value": "jobebosy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 14:26:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891894": [
        {
            "ioc_value": "134.209.176.36:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:16",
            "last_seen_utc": "2026-09-01 03:32:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891895": [
        {
            "ioc_value": "167.71.38.182:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:16",
            "last_seen_utc": "2026-09-01 02:50:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891897": [
        {
            "ioc_value": "188.166.163.166:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:15",
            "last_seen_utc": "2026-09-01 03:32:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891898": [
        {
            "ioc_value": "165.232.36.145:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:15",
            "last_seen_utc": "2026-09-01 03:31:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891899": [
        {
            "ioc_value": "188.166.160.153:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:14",
            "last_seen_utc": "2026-09-01 03:31:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891901": [
        {
            "ioc_value": "165.232.112.16:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:14",
            "last_seen_utc": "2026-09-01 03:27:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891900": [
        {
            "ioc_value": "165.245.209.216:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:13",
            "last_seen_utc": "2026-09-01 03:24:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891902": [
        {
            "ioc_value": "157.245.41.38:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:12",
            "last_seen_utc": "2026-09-01 03:31:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891903": [
        {
            "ioc_value": "178.128.201.199:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:12",
            "last_seen_utc": "2026-09-01 03:31:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891904": [
        {
            "ioc_value": "46.101.160.192:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 14:24:12",
            "last_seen_utc": "2026-09-01 03:32:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891896": [
        {
            "ioc_value": "ninjabattlearena.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_webinject",
            "malware_alias": null,
            "malware_printable": "Unknown Webinject",
            "first_seen_utc": "2026-08-31 14:19:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Cloudflare",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891893": [
        {
            "ioc_value": "217.60.195.82:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 14:17:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7ba1b23c6f80a0eb315b22da0dd3bcf1f91c0bf642c8132910a8f735dc264010/",
            "tags": "RAT,RemcosRAt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891892": [
        {
            "ioc_value": "102.220.160.87:7009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-31 14:15:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/df7f2d3fcb2314e884d582e93c2a18176bfec79436fa48c17be7d0b5be53f2fc/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891882": [
        {
            "ioc_value": "137.220.158.91:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-31 14:10:51",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1891889": [
        {
            "ioc_value": "https://hrrrison.sbs/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 14:10:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891891": [
        {
            "ioc_value": "pa-upd.mariomilan.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-31 14:10:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117190520737892112",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891890": [
        {
            "ioc_value": "109.122.18.182:50062",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-31 14:10:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eb1b0e969062136b3dcac00ea22d67ac6cd9a462cc99adb670c9692eff7274f0/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891888": [
        {
            "ioc_value": "150.242.246.106:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891887": [
        {
            "ioc_value": "101.42.136.73:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891886": [
        {
            "ioc_value": "softcrate.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-31 14:03:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891885": [
        {
            "ioc_value": "bbtidwyn.shop-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 14:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891884": [
        {
            "ioc_value": "shop-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 14:01:09",
            "last_seen_utc": "2026-08-31 14:01:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891883": [
        {
            "ioc_value": "supexire.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 14:00:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891881": [
        {
            "ioc_value": "pilakama.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 13:55:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891877": [
        {
            "ioc_value": "103.45.66.18:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 13:47:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://securelist.com/valleyrat-backdoor-adware/121175/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891878": [
        {
            "ioc_value": "103.45.66.18:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 13:47:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://securelist.com/valleyrat-backdoor-adware/121175/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891879": [
        {
            "ioc_value": "192.253.225.173:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 13:47:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://securelist.com/valleyrat-backdoor-adware/121175/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891880": [
        {
            "ioc_value": "192.253.225.173:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 13:47:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://securelist.com/valleyrat-backdoor-adware/121175/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891876": [
        {
            "ioc_value": "103.45.66.18:441",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 13:47:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://securelist.com/valleyrat-backdoor-adware/121175/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891870": [
        {
            "ioc_value": "https://swewart.sbs/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 13:46:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891874": [
        {
            "ioc_value": "8.210.93.39:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-31 13:46:06",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1891875": [
        {
            "ioc_value": "47.83.128.111:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-31 13:46:05",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1891873": [
        {
            "ioc_value": "sakurinos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-31 13:15:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "discord,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891872": [
        {
            "ioc_value": "rkhud95517.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 13:12:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891871": [
        {
            "ioc_value": "noxumo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 13:11:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891869": [
        {
            "ioc_value": "9mrz5b66.shop-dentalprime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 13:06:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891867": [
        {
            "ioc_value": "175.43.223.199:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891868": [
        {
            "ioc_value": "1.117.77.166:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891866": [
        {
            "ioc_value": "101.42.136.73:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891865": [
        {
            "ioc_value": "129.204.11.247:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891864": [
        {
            "ioc_value": "shop-dentalprime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 13:05:03",
            "last_seen_utc": "2026-08-31 13:05:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891863": [
        {
            "ioc_value": "pihiqoku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 13:03:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891851": [
        {
            "ioc_value": "142.11.244.124:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-31 12:58:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://tria.ge/260831-n5mezs1djc/behavioral1",
            "tags": "danabot",
            "anonymous": 0,
            "reporter": "dll"
        }
    ],
    "1891856": [
        {
            "ioc_value": "43.129.180.120:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 12:58:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891857": [
        {
            "ioc_value": "earl.afghankabobgrill.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 12:58:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1891862": [
        {
            "ioc_value": "nylefe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 12:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891861": [
        {
            "ioc_value": "www.groupe-elemen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 12:53:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891860": [
        {
            "ioc_value": "earl.afghankabobgrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 12:51:04",
            "last_seen_utc": "2026-08-31 12:53:44",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891859": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Christa6547/davidrun/refs/heads/main/pull2395",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 12:48:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891858": [
        {
            "ioc_value": "qylofihi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 12:41:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891855": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Christa6547/davidrun",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 12:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891854": [
        {
            "ioc_value": "o5kevt4l0w.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 12:11:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891853": [
        {
            "ioc_value": "129.204.11.247:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891852": [
        {
            "ioc_value": "207.148.64.94:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891849": [
        {
            "ioc_value": "http://flreaow.click:6527/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 11:55:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891850": [
        {
            "ioc_value": "http://cdire.shop:9048/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 11:55:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891848": [
        {
            "ioc_value": "hitdw76155.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 11:50:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891847": [
        {
            "ioc_value": "64.224.17.88:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 11:45:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891846": [
        {
            "ioc_value": "pjp9p9qh.teamgetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 11:44:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891845": [
        {
            "ioc_value": "inckz61wke.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 11:43:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891844": [
        {
            "ioc_value": "wo2n2gl5.shop-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 11:32:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891843": [
        {
            "ioc_value": "dascu18032.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 11:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891842": [
        {
            "ioc_value": "shop-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 11:30:31",
            "last_seen_utc": "2026-08-31 11:30:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891841": [
        {
            "ioc_value": "lehyba.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 11:25:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891840": [
        {
            "ioc_value": "https://for.12naga.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 11:05:45",
            "last_seen_utc": "2026-09-01 03:40:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891838": [
        {
            "ioc_value": "106.55.25.253:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891839": [
        {
            "ioc_value": "106.55.25.253:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891837": [
        {
            "ioc_value": "106.55.25.253:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 11:05:05",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891833": [
        {
            "ioc_value": "131.226.2.95:40038",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 10:49:45",
            "last_seen_utc": "2026-08-31 20:14:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891836": [
        {
            "ioc_value": "fukokuto.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 10:49:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891835": [
        {
            "ioc_value": "intratechsa.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 10:49:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891834": [
        {
            "ioc_value": "xuliluma.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 10:24:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891832": [
        {
            "ioc_value": "147.124.223.53:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 10:10:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891831": [
        {
            "ioc_value": "kap-engineering.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 10:09:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891830": [
        {
            "ioc_value": "hbupgtkx49.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 10:07:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891828": [
        {
            "ioc_value": "106.55.25.253:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891829": [
        {
            "ioc_value": "106.55.25.253:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891827": [
        {
            "ioc_value": "106.55.25.253:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891826": [
        {
            "ioc_value": "cw91bzc2fb.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 10:00:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891825": [
        {
            "ioc_value": "http://cdire.shop:9048/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 09:55:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891824": [
        {
            "ioc_value": "dvtwn44396.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 09:51:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891823": [
        {
            "ioc_value": "r339jk17.mertre.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 09:50:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891822": [
        {
            "ioc_value": "es0jh7f31p.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 09:47:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891821": [
        {
            "ioc_value": "192.99.70.186:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-31 09:45:32",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891820": [
        {
            "ioc_value": "144.172.84.7:6688",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 09:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1891819": [
        {
            "ioc_value": "157.254.194.45:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-31 09:44:14",
            "last_seen_utc": "2026-09-01 02:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891818": [
        {
            "ioc_value": "129.80.106.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 09:43:42",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891817": [
        {
            "ioc_value": "krbst56779.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 09:33:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891815": [
        {
            "ioc_value": "secure-loadfile28.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891816": [
        {
            "ioc_value": "vault-image.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891809": [
        {
            "ioc_value": "docstore-s6.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891810": [
        {
            "ioc_value": "exp-partner-statement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891811": [
        {
            "ioc_value": "photo-hub.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891812": [
        {
            "ioc_value": "photonet-drive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891813": [
        {
            "ioc_value": "pic-vault.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891814": [
        {
            "ioc_value": "secur3vault.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-31 09:25:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891794": [
        {
            "ioc_value": "213.152.162.29:13309",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 09:15:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,ScarB",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891805": [
        {
            "ioc_value": "176.65.139.206:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-31 09:15:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1891806": [
        {
            "ioc_value": "hrrrison.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 09:15:21",
            "last_seen_utc": "2026-09-01 02:11:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891807": [
        {
            "ioc_value": "https://hrrrison.sbs/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 09:15:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891808": [
        {
            "ioc_value": "https://hrrrison.sbs/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 09:15:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891804": [
        {
            "ioc_value": "vyw0demm.gluccotrust--bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 09:06:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891803": [
        {
            "ioc_value": "4402inherent.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 09:06:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891801": [
        {
            "ioc_value": "154.91.180.246:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 09:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891802": [
        {
            "ioc_value": "154.91.180.246:18082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 09:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891800": [
        {
            "ioc_value": "117.72.202.93:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891799": [
        {
            "ioc_value": "31.76.102.46:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-31 09:05:06",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891798": [
        {
            "ioc_value": "8.148.26.139:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891797": [
        {
            "ioc_value": "ftp.ckzafetyztres.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-31 09:01:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b3772c27111fa7cf9e97440a3bfbf5971097c5b273658fb697d4af68b98db787/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891796": [
        {
            "ioc_value": "leriqilu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 09:01:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891795": [
        {
            "ioc_value": "64.89.160.45:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-31 08:56:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6d2ae73f2bfc722707576fda2165a72ca620c26599b3bc63bec5b4e97ebdbc3a/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891793": [
        {
            "ioc_value": "ycphj84084.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 08:51:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891792": [
        {
            "ioc_value": "123.253.32.82:5025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 08:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891790": [
        {
            "ioc_value": "31.177.110.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-31 08:40:31",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b54378e29cdea0b95f1dd513269b16af061d1e4a40162dd8b71e19796237cc27/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891791": [
        {
            "ioc_value": "92.118.206.129:7006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-31 08:40:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b8a3d16ad9e28103999357b592b517d14751308339f18845939f2766b7a6d488/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891789": [
        {
            "ioc_value": "217.60.103.4:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 08:40:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8007179162a4f90597bf20a6088bb4f4589b0b220f80cb365ccb8b7f16a7da56/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891779": [
        {
            "ioc_value": "185.181.8.182:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891780": [
        {
            "ioc_value": "46.224.87.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891781": [
        {
            "ioc_value": "62.238.126.31:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891782": [
        {
            "ioc_value": "185.229.225.31:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891783": [
        {
            "ioc_value": "2.29.15.172:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891784": [
        {
            "ioc_value": "2.28.53.167:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891785": [
        {
            "ioc_value": "168.119.61.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891786": [
        {
            "ioc_value": "91.98.236.89:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891787": [
        {
            "ioc_value": "77.42.69.149:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891788": [
        {
            "ioc_value": "2.28.55.31:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891768": [
        {
            "ioc_value": "62.238.117.133:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891769": [
        {
            "ioc_value": "2.28.51.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891770": [
        {
            "ioc_value": "46.29.26.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891771": [
        {
            "ioc_value": "46.29.26.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891772": [
        {
            "ioc_value": "103.13.210.168:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891773": [
        {
            "ioc_value": "5.223.57.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891774": [
        {
            "ioc_value": "95.217.223.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891775": [
        {
            "ioc_value": "194.146.39.66:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891776": [
        {
            "ioc_value": "178.104.215.65:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891777": [
        {
            "ioc_value": "46.29.26.32:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891778": [
        {
            "ioc_value": "46.29.26.41:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891763": [
        {
            "ioc_value": "168.119.60.33:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891764": [
        {
            "ioc_value": "5.78.91.236:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891765": [
        {
            "ioc_value": "168.119.56.135:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891766": [
        {
            "ioc_value": "2.28.48.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891767": [
        {
            "ioc_value": "46.29.26.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891761": [
        {
            "ioc_value": "172.245.92.217:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-31 08:35:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a01d8ca7114e093f110c832ffec0c3a33a078390524635810ad73edd7bf82d88/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891762": [
        {
            "ioc_value": "209.54.103.151:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-31 08:35:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bca14eb5f340706f9f48dae0b5395d7a5b1ba2b4889f8576b8b79913e0bb1773/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891743": [
        {
            "ioc_value": "rmv.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891744": [
        {
            "ioc_value": "vcd.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891745": [
        {
            "ioc_value": "tak.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891746": [
        {
            "ioc_value": "eos.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891747": [
        {
            "ioc_value": "uza.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891748": [
        {
            "ioc_value": "jij.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891749": [
        {
            "ioc_value": "x0x.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891750": [
        {
            "ioc_value": "hh3.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891751": [
        {
            "ioc_value": "jre.sm188dvlv.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891752": [
        {
            "ioc_value": "rrr.sm188dvlv.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891753": [
        {
            "ioc_value": "zca.sm188dvlv.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891754": [
        {
            "ioc_value": "chi.sm188dvlv.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891755": [
        {
            "ioc_value": "tra.sm188dvlv.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891756": [
        {
            "ioc_value": "nsn.sm188dvlv.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891757": [
        {
            "ioc_value": "jre.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": "2026-08-31 08:35:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891758": [
        {
            "ioc_value": "rrr.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891759": [
        {
            "ioc_value": "zca.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891760": [
        {
            "ioc_value": "tra.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891739": [
        {
            "ioc_value": "ley.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891740": [
        {
            "ioc_value": "sha.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891741": [
        {
            "ioc_value": "rsc.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891742": [
        {
            "ioc_value": "bnb.sm188dvlv.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891738": [
        {
            "ioc_value": "https://2.28.53.167/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891734": [
        {
            "ioc_value": "https://46.29.26.41/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:46",
            "last_seen_utc": "2026-09-01 03:38:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891735": [
        {
            "ioc_value": "https://185.181.8.182/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891736": [
        {
            "ioc_value": "https://62.238.126.31/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891737": [
        {
            "ioc_value": "https://2.29.15.172/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891730": [
        {
            "ioc_value": "https://46.29.26.42/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891731": [
        {
            "ioc_value": "https://103.13.210.168/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891732": [
        {
            "ioc_value": "https://5.223.57.239/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891733": [
        {
            "ioc_value": "https://178.104.215.65/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891727": [
        {
            "ioc_value": "https://62.238.117.133/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891728": [
        {
            "ioc_value": "https://2.28.51.112/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891729": [
        {
            "ioc_value": "https://46.29.26.43/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891726": [
        {
            "ioc_value": "https://tra.12naga.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891722": [
        {
            "ioc_value": "https://chi.sm188dvlv.lat/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891723": [
        {
            "ioc_value": "https://tra.sm188dvlv.lat/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891724": [
        {
            "ioc_value": "https://nsn.sm188dvlv.lat/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891725": [
        {
            "ioc_value": "https://rrr.12naga.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891716": [
        {
            "ioc_value": "https://jij.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891717": [
        {
            "ioc_value": "https://x0x.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891718": [
        {
            "ioc_value": "https://hh3.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891719": [
        {
            "ioc_value": "https://jre.sm188dvlv.lat/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891720": [
        {
            "ioc_value": "https://rrr.sm188dvlv.lat/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891721": [
        {
            "ioc_value": "https://zca.sm188dvlv.lat/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891710": [
        {
            "ioc_value": "https://bnb.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891711": [
        {
            "ioc_value": "https://rmv.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891712": [
        {
            "ioc_value": "https://vcd.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891713": [
        {
            "ioc_value": "https://tak.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891714": [
        {
            "ioc_value": "https://eos.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891715": [
        {
            "ioc_value": "https://uza.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891706": [
        {
            "ioc_value": "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=EMqJL",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:39",
            "last_seen_utc": "2026-08-31 16:09:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891707": [
        {
            "ioc_value": "https://ley.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891708": [
        {
            "ioc_value": "https://sha.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891709": [
        {
            "ioc_value": "https://rsc.sm188dvlv.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 08:34:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1891705": [
        {
            "ioc_value": "pyremy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 08:24:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891704": [
        {
            "ioc_value": "http://bravplo.click:7713/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 08:15:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d9f8bfbb716f94e359f88cbe21d23f7d48cd7a24cadf71207e5a2eafbb91cf4b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891703": [
        {
            "ioc_value": "172.94.111.195:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 08:15:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/be592d36972e47ba32ba4a1cd82e2450249fd07e0752289c844e61c6dc568715/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891700": [
        {
            "ioc_value": "swewart.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 08:13:14",
            "last_seen_utc": "2026-08-31 23:10:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891701": [
        {
            "ioc_value": "https://swewart.sbs/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 08:13:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891702": [
        {
            "ioc_value": "https://swewart.sbs/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-31 08:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1891699": [
        {
            "ioc_value": "ira240.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 08:08:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891696": [
        {
            "ioc_value": "31.76.102.46:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-31 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891697": [
        {
            "ioc_value": "31.76.102.46:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-31 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891698": [
        {
            "ioc_value": "1.117.77.166:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891695": [
        {
            "ioc_value": "91.92.43.15:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 07:55:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba5b5e1cedf641a8c3281e631a2034b5e4ab4f0153dafead21d76164ed717d5b/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891694": [
        {
            "ioc_value": "xiviju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 07:52:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891518": [
        {
            "ioc_value": "pnd.onlineturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/orlof_v/status/2094133947362091245?s=20",
            "tags": "Validin,Vidar",
            "anonymous": 0,
            "reporter": "orlof_v"
        }
    ],
    "1891519": [
        {
            "ioc_value": "nsn.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:15",
            "last_seen_utc": "2026-08-31 11:05:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/orlof_v/status/2094133947362091245?s=20",
            "tags": "Validin,Vidar",
            "anonymous": 0,
            "reporter": "orlof_v"
        }
    ],
    "1891520": [
        {
            "ioc_value": "ley.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/orlof_v/status/2094133947362091245?s=20",
            "tags": "Validin,Vidar",
            "anonymous": 0,
            "reporter": "orlof_v"
        }
    ],
    "1891521": [
        {
            "ioc_value": "chi.12naga.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:13",
            "last_seen_utc": "2026-08-31 08:35:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/orlof_v/status/2094133947362091245?s=20",
            "tags": "Validin,Vidar",
            "anonymous": 0,
            "reporter": "orlof_v"
        }
    ],
    "1891524": [
        {
            "ioc_value": "104.248.41.207:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 07:47:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891548": [
        {
            "ioc_value": "167.99.128.245:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 07:47:09",
            "last_seen_utc": "2026-08-31 11:07:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891567": [
        {
            "ioc_value": "https://91.98.236.89",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:08",
            "last_seen_utc": "2026-09-01 03:42:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9fe37432b96b1f873dc66a38a261ef70,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891577": [
        {
            "ioc_value": "192.159.99.121:2580",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 07:47:07",
            "last_seen_utc": "2026-09-01 03:41:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "@,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891579": [
        {
            "ioc_value": "192.159.99.121:25800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 07:47:07",
            "last_seen_utc": "2026-08-31 22:40:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "@,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891583": [
        {
            "ioc_value": "https://95.217.223.130",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:06",
            "last_seen_utc": "2026-09-01 03:38:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8e3a74868d6a5ab24c7948fba102cc52,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891599": [
        {
            "ioc_value": "131.226.2.95:4920",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 07:47:03",
            "last_seen_utc": "2026-08-31 19:16:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891609": [
        {
            "ioc_value": "174.138.30.59:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 07:47:02",
            "last_seen_utc": "2026-08-31 17:06:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891619": [
        {
            "ioc_value": "https://46.224.87.76",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:01",
            "last_seen_utc": "2026-09-01 03:41:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "37a059228277b5942abd0dd5db874fd2,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891621": [
        {
            "ioc_value": "https://jre.12naga.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 07:47:00",
            "last_seen_utc": "2026-09-01 03:39:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0760b4f10cfeaeccbae17783b4b59360,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891622": [
        {
            "ioc_value": "196.251.121.183:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 07:46:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "18811,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1891626": [
        {
            "ioc_value": "216.203.20.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 07:46:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "1828,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1891647": [
        {
            "ioc_value": "167.99.194.254:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-31 07:46:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891660": [
        {
            "ioc_value": "163.245.199.241:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 07:46:57",
            "last_seen_utc": "2026-08-31 20:15:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,NzQ1NzI2ODI5NzM5Mw==,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891661": [
        {
            "ioc_value": "31.97.133.166:4812",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 07:46:57",
            "last_seen_utc": "2026-08-31 10:20:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a465cd808ed9cca800749a734b591a42,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891672": [
        {
            "ioc_value": "http://153.117.32.130:49657/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-31 07:46:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.32.130",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891673": [
        {
            "ioc_value": "http://175.107.3.244:55339/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-31 07:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.3.244",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891674": [
        {
            "ioc_value": "http://124.94.244.212:33038/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-31 07:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.94.244.212",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891675": [
        {
            "ioc_value": "http://203.101.186.212:33774/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-31 07:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/203.101.186.212",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891677": [
        {
            "ioc_value": "172.111.163.174:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 07:46:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Nexus 27-08-26,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891685": [
        {
            "ioc_value": "172.111.163.162:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-31 07:46:52",
            "last_seen_utc": "2026-08-31 17:26:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Crypters&tools,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891693": [
        {
            "ioc_value": "pumykuja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 07:24:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891692": [
        {
            "ioc_value": "zedypyqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 07:21:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891691": [
        {
            "ioc_value": "pujavi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 07:16:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891690": [
        {
            "ioc_value": "hafagu-ce1.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 07:11:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891688": [
        {
            "ioc_value": "8.148.26.139:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891689": [
        {
            "ioc_value": "8.148.26.139:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891686": [
        {
            "ioc_value": "8.148.26.139:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891687": [
        {
            "ioc_value": "8.148.26.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891684": [
        {
            "ioc_value": "conectao.com.do",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 06:54:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891683": [
        {
            "ioc_value": "https://telegram.me/nag0a",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-31 06:53:53",
            "last_seen_utc": "2026-08-31 08:34:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b19bd93bc95ba908f8d13cf9e7e69776d2d82722f325d9290550aed155e56bd/",
            "tags": "o0oi1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891682": [
        {
            "ioc_value": "dpiwraps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 06:49:08",
            "last_seen_utc": "2026-08-31 06:50:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891681": [
        {
            "ioc_value": "xesevy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 06:45:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891680": [
        {
            "ioc_value": "gebbxexd.shop-alphaboostpro.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 06:42:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891679": [
        {
            "ioc_value": "consultinggetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 06:39:39",
            "last_seen_utc": "2026-08-31 06:39:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891678": [
        {
            "ioc_value": "441k40w4.shop-bellyflush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 06:33:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891676": [
        {
            "ioc_value": "shop-bellyflush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 06:30:19",
            "last_seen_utc": "2026-08-31 06:30:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891671": [
        {
            "ioc_value": "duvokufi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 06:15:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891670": [
        {
            "ioc_value": "fyhoqo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 06:08:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891667": [
        {
            "ioc_value": "http://uiccvbk.click:8839/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 06:02:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891668": [
        {
            "ioc_value": "http://shhsift.click:7647/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 06:02:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891669": [
        {
            "ioc_value": "http://cdire.shop:9048/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 06:02:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891666": [
        {
            "ioc_value": "yhztr74434.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 05:41:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891665": [
        {
            "ioc_value": "dixibahy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 05:37:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891664": [
        {
            "ioc_value": "wdccb3xe.home-power-shield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 05:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891663": [
        {
            "ioc_value": "muziwawy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 05:34:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891662": [
        {
            "ioc_value": "vyivy22522.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 05:18:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891659": [
        {
            "ioc_value": "106.15.10.2:5672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891658": [
        {
            "ioc_value": "fyjilowu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 05:04:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891657": [
        {
            "ioc_value": "prgfeg84.getdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 05:03:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891656": [
        {
            "ioc_value": "rlltn52176.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 04:52:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891655": [
        {
            "ioc_value": "http://flreaow.click:6527/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-31 04:33:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891654": [
        {
            "ioc_value": "cenoci.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 04:28:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891653": [
        {
            "ioc_value": "fekajyzy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 04:08:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891650": [
        {
            "ioc_value": "123.56.83.34:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891651": [
        {
            "ioc_value": "106.15.10.2:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891652": [
        {
            "ioc_value": "106.15.10.2:4369",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891649": [
        {
            "ioc_value": "pikeryri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 04:04:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891648": [
        {
            "ioc_value": "f0n95tk64n.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 03:57:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891646": [
        {
            "ioc_value": "xocosyke.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 03:39:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891645": [
        {
            "ioc_value": "wequgucu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 03:21:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891644": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Christa6547/fling/refs/heads/main/scoop",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 03:13:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891643": [
        {
            "ioc_value": "dphx1pvb.en-us-glucotrustt-bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 03:06:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891640": [
        {
            "ioc_value": "117.72.202.93:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891641": [
        {
            "ioc_value": "117.72.202.93:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891642": [
        {
            "ioc_value": "106.54.41.209:21118",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-31 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891639": [
        {
            "ioc_value": "netiqu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 02:53:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891638": [
        {
            "ioc_value": "vewiqy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 02:52:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891637": [
        {
            "ioc_value": "dyveku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 02:31:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891636": [
        {
            "ioc_value": "gybyce.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 02:27:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891635": [
        {
            "ioc_value": "vucaw13958.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 02:21:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891634": [
        {
            "ioc_value": "xeryxo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 02:11:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891633": [
        {
            "ioc_value": "cixife.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 01:50:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891632": [
        {
            "ioc_value": "bp3mtp82.shop-aizenpower.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 01:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891631": [
        {
            "ioc_value": "qa5c8tze.www-glucotrust-bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 01:29:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891630": [
        {
            "ioc_value": "m3c33sfv.rtinaclear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 01:25:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891629": [
        {
            "ioc_value": "rtinaclear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 01:24:06",
            "last_seen_utc": "2026-08-31 01:24:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "31August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891628": [
        {
            "ioc_value": "pkigp79697.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 01:18:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891627": [
        {
            "ioc_value": "lixytala.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 01:07:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891624": [
        {
            "ioc_value": "101.42.136.73:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891625": [
        {
            "ioc_value": "47.105.114.163:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-31 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891623": [
        {
            "ioc_value": "101.42.136.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891620": [
        {
            "ioc_value": "353qfu36.en-trump-token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 01:02:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891618": [
        {
            "ioc_value": "156.251.11.58:935",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 00:55:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891617": [
        {
            "ioc_value": "156.251.11.58:936",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-31 00:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891616": [
        {
            "ioc_value": "sysyki.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 00:51:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891615": [
        {
            "ioc_value": "1oplympr3m.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 00:51:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891614": [
        {
            "ioc_value": "wuhola.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 00:48:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891613": [
        {
            "ioc_value": "www.forumeciv-afriquecentrale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-31 00:36:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891612": [
        {
            "ioc_value": "dybecyvu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-31 00:14:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891611": [
        {
            "ioc_value": "150.158.102.111:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-31 00:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891610": [
        {
            "ioc_value": "varygo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 23:54:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891607": [
        {
            "ioc_value": "112.213.103.17:1217",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 23:50:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6f7dbd6561e7ee6ba7e6abffdb1e5de01bf511318aade34825d888e99db645f/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891608": [
        {
            "ioc_value": "112.213.103.58:5812",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 23:50:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9109d9bd117f540aed9afa6f293c1396cc18ed979056eadca97c69e3f957c14d/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891605": [
        {
            "ioc_value": "101.42.136.73:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 23:46:41",
            "last_seen_utc": "2026-09-01 02:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891606": [
        {
            "ioc_value": "101.42.136.73:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 23:46:41",
            "last_seen_utc": "2026-09-01 02:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891604": [
        {
            "ioc_value": "nifibe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 23:35:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891603": [
        {
            "ioc_value": "http://gofkaxz.click:8137/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 23:25:18",
            "last_seen_utc": "2026-08-31 01:00:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71cdf126636c50a3a2b71fa730ddc3f3ab03791a35a70aa774de8652ca96a174/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891602": [
        {
            "ioc_value": "http://cdire.shop:9048/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 23:25:17",
            "last_seen_utc": "2026-08-31 01:00:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71cdf126636c50a3a2b71fa730ddc3f3ab03791a35a70aa774de8652ca96a174/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891601": [
        {
            "ioc_value": "jycajame.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 23:16:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891600": [
        {
            "ioc_value": "nswpk62437.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 23:14:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891598": [
        {
            "ioc_value": "nerotywo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 23:07:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891597": [
        {
            "ioc_value": "228dione.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 23:05:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891596": [
        {
            "ioc_value": "150.158.102.111:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 23:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891595": [
        {
            "ioc_value": "150.158.102.111:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 23:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891594": [
        {
            "ioc_value": "150.158.102.111:85",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 23:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891593": [
        {
            "ioc_value": "109.236.50.145:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 23:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891592": [
        {
            "ioc_value": "h5xluule.barbashat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 23:01:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891591": [
        {
            "ioc_value": "http://urbandm.click:4812/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 22:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891590": [
        {
            "ioc_value": "mumyqowi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 22:34:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891589": [
        {
            "ioc_value": "lacygenetic.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 22:15:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891588": [
        {
            "ioc_value": "http://cdire.shop:9048/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 22:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891587": [
        {
            "ioc_value": "uey2bqd5os.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 22:08:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891585": [
        {
            "ioc_value": "150.158.102.111:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891586": [
        {
            "ioc_value": "150.158.102.111:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891584": [
        {
            "ioc_value": "150.158.102.111:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 22:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891582": [
        {
            "ioc_value": "kahule.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 21:44:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891581": [
        {
            "ioc_value": "dyfaqymo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 21:38:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891580": [
        {
            "ioc_value": "lerubizi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 21:31:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891578": [
        {
            "ioc_value": "zqjoz45628.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 21:16:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891576": [
        {
            "ioc_value": "0qa0xgkt.retinaclr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 21:14:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891575": [
        {
            "ioc_value": "retinaclr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 21:13:04",
            "last_seen_utc": "2026-08-30 21:14:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891574": [
        {
            "ioc_value": "mail.ded7845.inmotionhosting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 21:06:39",
            "last_seen_utc": "2026-08-30 21:06:39",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891573": [
        {
            "ioc_value": "104.168.102.116:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891572": [
        {
            "ioc_value": "104.168.102.116:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 21:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891570": [
        {
            "ioc_value": "104.168.102.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 21:05:05",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891571": [
        {
            "ioc_value": "104.168.102.116:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891569": [
        {
            "ioc_value": "xnjbjf7o.shop-aquapeace.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 21:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891568": [
        {
            "ioc_value": "shop-aquapeace.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 21:00:08",
            "last_seen_utc": "2026-08-30 21:01:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891566": [
        {
            "ioc_value": "http://cdire.shop:9048/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 20:56:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891565": [
        {
            "ioc_value": "dypocemy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 20:53:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891564": [
        {
            "ioc_value": "29l1b9y1.shop-aeroslim.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 20:40:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891563": [
        {
            "ioc_value": "pu8gkxg57y.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 20:40:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891562": [
        {
            "ioc_value": "http://cdire.shop:9048/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 20:25:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891561": [
        {
            "ioc_value": "p0iqkjuq.usen-glucotrust-bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 20:20:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891560": [
        {
            "ioc_value": "usen-glucotrust-bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 20:19:34",
            "last_seen_utc": "2026-08-31 01:29:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891559": [
        {
            "ioc_value": "toqima.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 20:14:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891558": [
        {
            "ioc_value": "109.236.50.145:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891556": [
        {
            "ioc_value": "109.236.50.145:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891557": [
        {
            "ioc_value": "109.236.50.145:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891554": [
        {
            "ioc_value": "109.236.50.145:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891555": [
        {
            "ioc_value": "109.236.50.145:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891553": [
        {
            "ioc_value": "http://cc893886.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-30 20:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891552": [
        {
            "ioc_value": "tv7dug0hg6.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 20:02:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891551": [
        {
            "ioc_value": "nzasn96104.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 19:57:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891550": [
        {
            "ioc_value": "kadazyci.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 19:56:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891549": [
        {
            "ioc_value": "bezamy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 19:52:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891547": [
        {
            "ioc_value": "lbxpg68375.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 19:47:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891546": [
        {
            "ioc_value": "check1.judicica1n",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 19:46:45",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891545": [
        {
            "ioc_value": "94.228.166.168:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:46:39",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891544": [
        {
            "ioc_value": "91.219.239.81:972",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 19:46:33",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891543": [
        {
            "ioc_value": "45.225.135.156:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:45:59",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891541": [
        {
            "ioc_value": "217.60.195.109:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:45:29",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891542": [
        {
            "ioc_value": "217.60.195.109:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:45:29",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891539": [
        {
            "ioc_value": "195.177.94.188:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:44:37",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891540": [
        {
            "ioc_value": "195.177.94.188:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:44:37",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891538": [
        {
            "ioc_value": "194.59.30.96:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-30 19:44:35",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891537": [
        {
            "ioc_value": "185.112.59.115:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:44:14",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891536": [
        {
            "ioc_value": "172.86.122.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:44:04",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891535": [
        {
            "ioc_value": "162.243.160.70:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-30 19:43:52",
            "last_seen_utc": "2026-09-01 02:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891534": [
        {
            "ioc_value": "160.119.69.30:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 19:43:51",
            "last_seen_utc": "2026-09-01 02:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891531": [
        {
            "ioc_value": "144.31.6.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891532": [
        {
            "ioc_value": "144.31.6.6:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891533": [
        {
            "ioc_value": "144.31.6.6:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891529": [
        {
            "ioc_value": "144.31.106.168:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-30 19:43:36",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891530": [
        {
            "ioc_value": "144.31.106.168:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-30 19:43:36",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891528": [
        {
            "ioc_value": "102.117.167.19:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 19:05:04",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891527": [
        {
            "ioc_value": "eelsq5rh.shop-aquaburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 19:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891526": [
        {
            "ioc_value": "shop-aquaburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 18:59:54",
            "last_seen_utc": "2026-08-30 19:00:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891525": [
        {
            "ioc_value": "nelinura.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 18:55:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891523": [
        {
            "ioc_value": "zalyxi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 18:52:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891522": [
        {
            "ioc_value": "dosydi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 18:47:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891517": [
        {
            "ioc_value": "l9hmkvn2xm.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 18:31:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891516": [
        {
            "ioc_value": "vi28v3xsvo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 18:14:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891515": [
        {
            "ioc_value": "cc.nhancute.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-30 18:09:21",
            "last_seen_utc": "2026-08-30 18:09:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1bf4366ad6b382991c6b8c68b4863e9bafcc8e9533867b0e17b1d5825689c143/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891514": [
        {
            "ioc_value": "160.250.181.124:47925",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-30 18:09:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1bf4366ad6b382991c6b8c68b4863e9bafcc8e9533867b0e17b1d5825689c143/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891513": [
        {
            "ioc_value": "zoxycada.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 18:08:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891512": [
        {
            "ioc_value": "87.120.104.147:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 18:00:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82bee273347b6e752d229b8fd3e5fed68cfc49f0f7145a8e457bf3ca0c91b5df/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891439": [
        {
            "ioc_value": "http://36.255.33.242:53631/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 17:40:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.33.242",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891440": [
        {
            "ioc_value": "http://103.148.128.156:45276/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 17:39:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.148.128.156",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891441": [
        {
            "ioc_value": "http://103.237.157.163:56063/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 17:39:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.237.157.163",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891442": [
        {
            "ioc_value": "http://153.117.32.82:36030/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 17:39:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.32.82",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891443": [
        {
            "ioc_value": "http://124.29.214.104:35063/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 17:39:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.214.104",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891444": [
        {
            "ioc_value": "http://139.135.40.153:53926/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 17:39:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.40.153",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891461": [
        {
            "ioc_value": "167.99.128.245:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 17:39:56",
            "last_seen_utc": "2026-08-31 14:21:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891473": [
        {
            "ioc_value": "45.142.30.152:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 17:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/devmihaylov/status/2093987929282560285",
            "tags": "angel-panel,clipper,multiablo,stealer,telegram",
            "anonymous": 0,
            "reporter": "devmihaylov"
        }
    ],
    "1891475": [
        {
            "ioc_value": "159.89.24.55:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 17:39:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891491": [
        {
            "ioc_value": "https://zca.12naga.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 17:39:54",
            "last_seen_utc": "2026-09-01 03:41:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "b8546d0712608b893c6c87d32a5986c5,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891492": [
        {
            "ioc_value": "https://2.28.55.31",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 17:39:54",
            "last_seen_utc": "2026-09-01 03:42:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4811e2fc839a15fdbf489521544e9eb9,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891511": [
        {
            "ioc_value": "qumilaga.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 17:35:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891510": [
        {
            "ioc_value": "jizegumy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 17:24:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891509": [
        {
            "ioc_value": "nonikiri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 17:20:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891508": [
        {
            "ioc_value": "gygaqila.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 17:17:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891507": [
        {
            "ioc_value": "zavemo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 17:11:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891506": [
        {
            "ioc_value": "sahowi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 17:09:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891505": [
        {
            "ioc_value": "http://cdire.shop:9048/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 17:07:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891504": [
        {
            "ioc_value": "7109hvuj.retinaclier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 17:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891503": [
        {
            "ioc_value": "retinaclier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 17:03:07",
            "last_seen_utc": "2026-08-30 17:03:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891502": [
        {
            "ioc_value": "lf2qo513.shop-aquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 17:00:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891501": [
        {
            "ioc_value": "shop-aquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 16:59:25",
            "last_seen_utc": "2026-08-30 17:00:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891500": [
        {
            "ioc_value": "shop-alphatonic.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 16:57:46",
            "last_seen_utc": "2026-08-30 16:58:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891499": [
        {
            "ioc_value": "glyco--free.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 16:54:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891498": [
        {
            "ioc_value": "ryduzoxe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 16:49:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891496": [
        {
            "ioc_value": "http://cdire.shop:9048/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 16:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891497": [
        {
            "ioc_value": "http://cdire.shop:9048/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 16:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891495": [
        {
            "ioc_value": "http://flreaow.click:6527/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 16:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891494": [
        {
            "ioc_value": "pucotihy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 16:19:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891493": [
        {
            "ioc_value": "www.maxmetalpackage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 16:06:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891490": [
        {
            "ioc_value": "http://zonxh.shop:7728/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 15:55:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44fbba738f24e417236317f4efd260be890bcc745d6d9919a91b7015f84c402f/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891489": [
        {
            "ioc_value": "http://kupzovo.shop:7567/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 15:55:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44fbba738f24e417236317f4efd260be890bcc745d6d9919a91b7015f84c402f/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891488": [
        {
            "ioc_value": "nolacu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 15:51:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891487": [
        {
            "ioc_value": "7ytwphx3.purabst.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 15:35:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891486": [
        {
            "ioc_value": "fppanzb0p4.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 15:34:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891485": [
        {
            "ioc_value": "purabst.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 15:33:32",
            "last_seen_utc": "2026-08-30 15:34:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891484": [
        {
            "ioc_value": "cxgsu17653.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 15:31:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891483": [
        {
            "ioc_value": "kuhekybi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 15:30:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891482": [
        {
            "ioc_value": "ryqagywe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 15:21:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891481": [
        {
            "ioc_value": "quzerydu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 15:08:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891480": [
        {
            "ioc_value": "2uehzspm.prosta-fense.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 15:06:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891479": [
        {
            "ioc_value": "prosta-fense.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 15:02:03",
            "last_seen_utc": "2026-08-30 15:02:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891478": [
        {
            "ioc_value": "zyo61rgc.shop-alphasurge.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 14:58:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891477": [
        {
            "ioc_value": "shop-alphasurge.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 14:57:14",
            "last_seen_utc": "2026-08-30 14:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891476": [
        {
            "ioc_value": "mdd0cs6ycy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 14:43:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891474": [
        {
            "ioc_value": "molylasu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 14:21:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891472": [
        {
            "ioc_value": "yvjqs79906.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 14:07:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891470": [
        {
            "ioc_value": "160.250.128.197:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 14:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891471": [
        {
            "ioc_value": "145.79.143.166:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 14:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891469": [
        {
            "ioc_value": "106.53.172.234:30092",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891468": [
        {
            "ioc_value": "121.127.253.146:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-30 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891467": [
        {
            "ioc_value": "sitykyly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 13:55:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891466": [
        {
            "ioc_value": "http://cdire.shop:9048/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 13:50:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891465": [
        {
            "ioc_value": "http://flreaow.click:6527/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 13:50:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891464": [
        {
            "ioc_value": "gmla8hmqnc.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 13:47:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891463": [
        {
            "ioc_value": "lufytiqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 13:43:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891462": [
        {
            "ioc_value": "demuqyle.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 13:24:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891460": [
        {
            "ioc_value": "http://uiccvbk.click:8839/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 13:10:21",
            "last_seen_utc": "2026-08-30 14:20:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7a1ecb216f5fb09d8290fb0a5136c118b82f5e264043f839f0259775b05c0c29/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891459": [
        {
            "ioc_value": "http://cdire.shop:9048/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 13:10:18",
            "last_seen_utc": "2026-08-30 14:20:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c06a85f0ad8b1fca254994fc3a0953f903aa28027f165d79214bbe3363332939/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891458": [
        {
            "ioc_value": "http://cdire.shop:9048/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 13:10:16",
            "last_seen_utc": "2026-08-30 14:20:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7a1ecb216f5fb09d8290fb0a5136c118b82f5e264043f839f0259775b05c0c29/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891456": [
        {
            "ioc_value": "121.127.253.146:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-30 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891457": [
        {
            "ioc_value": "121.127.253.146:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-30 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891455": [
        {
            "ioc_value": "121.127.253.146:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-30 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891454": [
        {
            "ioc_value": "pdrlxmneon.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 13:04:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891453": [
        {
            "ioc_value": "eq7rkug7.shop-alphastreamplus.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:58:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891452": [
        {
            "ioc_value": "glucotrust-bites.us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:57:22",
            "last_seen_utc": "2026-09-01 03:17:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891451": [
        {
            "ioc_value": "shop-alphastreamplus.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:56:47",
            "last_seen_utc": "2026-08-30 12:57:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891450": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Kath19634/ural3495/refs/heads/main/fds5412",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891449": [
        {
            "ioc_value": "84pa4isp.retinaclearofficials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:55:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891448": [
        {
            "ioc_value": "retinaclearofficials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:52:06",
            "last_seen_utc": "2026-08-30 12:52:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891446": [
        {
            "ioc_value": "lbsa.nova-dev.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:41:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891447": [
        {
            "ioc_value": "woodfield.global",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:41:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891445": [
        {
            "ioc_value": "toruseli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 12:35:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891438": [
        {
            "ioc_value": "ciqyzo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 12:15:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891437": [
        {
            "ioc_value": "jficfycgrz.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 12:14:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891436": [
        {
            "ioc_value": "poqakybe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 12:05:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891435": [
        {
            "ioc_value": "102.129.165.177:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891433": [
        {
            "ioc_value": "lywixeha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 12:01:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891434": [
        {
            "ioc_value": "hendersonlawjax.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 12:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891430": [
        {
            "ioc_value": "46.101.179.59:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 11:55:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891432": [
        {
            "ioc_value": "wazabe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 11:38:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891431": [
        {
            "ioc_value": "cuzurejo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 11:31:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891429": [
        {
            "ioc_value": "4u4hidmw.shop-alphaboostpro.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:57:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891428": [
        {
            "ioc_value": "shop-alphaboostpro.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:56:53",
            "last_seen_utc": "2026-08-31 06:41:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891427": [
        {
            "ioc_value": "199.85.8.183:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-30 10:55:16",
            "last_seen_utc": "2026-09-01 03:17:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b0f2fe074f097302568a247237554fb52e8001997671a3aa88adfff25e620ac1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891426": [
        {
            "ioc_value": "hegitylo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 10:54:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891425": [
        {
            "ioc_value": "3pynvhuk.ultralightlondon.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:54:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891424": [
        {
            "ioc_value": "ultralightlondon.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:53:12",
            "last_seen_utc": "2026-08-30 10:53:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891423": [
        {
            "ioc_value": "yzcza03457.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 10:50:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891422": [
        {
            "ioc_value": "36.255.97.175:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-30 10:50:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7404b53e27b9a0c6a53a6f01f57874b64acec513ebc90abc38f7f8096bc91cb0/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891420": [
        {
            "ioc_value": "45.55.191.196:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 10:43:05",
            "last_seen_utc": "2026-09-01 00:46:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891421": [
        {
            "ioc_value": "64.89.160.222:65481",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-08-30 10:43:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1891419": [
        {
            "ioc_value": "zqnro91792.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 10:34:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891418": [
        {
            "ioc_value": "1jtxup9c.pura--boost.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:34:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891417": [
        {
            "ioc_value": "pura--boost.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:33:25",
            "last_seen_utc": "2026-08-30 10:33:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891416": [
        {
            "ioc_value": "gebasaje.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 10:30:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891415": [
        {
            "ioc_value": "xylucyzo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 10:23:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891414": [
        {
            "ioc_value": "smtp.freshtlemanbarbershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 10:06:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891413": [
        {
            "ioc_value": "111.230.143.136:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891412": [
        {
            "ioc_value": "111.230.143.136:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891411": [
        {
            "ioc_value": "curly7588.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 10:04:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891410": [
        {
            "ioc_value": "uehky4jw.prosta--fense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 10:02:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891409": [
        {
            "ioc_value": "bufepy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 09:47:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891408": [
        {
            "ioc_value": "80.190.77.86:2414",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 09:47:12",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891407": [
        {
            "ioc_value": "64.177.112.21:50",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 09:47:00",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891406": [
        {
            "ioc_value": "46.151.182.98:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-30 09:46:48",
            "last_seen_utc": "2026-09-01 02:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891405": [
        {
            "ioc_value": "45.156.87.215:1111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 09:46:38",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891404": [
        {
            "ioc_value": "37.244.243.56:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-30 09:46:25",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891403": [
        {
            "ioc_value": "31.57.38.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 09:46:20",
            "last_seen_utc": "2026-09-01 02:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891402": [
        {
            "ioc_value": "217.60.195.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 09:46:06",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891401": [
        {
            "ioc_value": "2.91.185.72:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-30 09:45:14",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891400": [
        {
            "ioc_value": "194.59.30.96:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-30 09:44:54",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891399": [
        {
            "ioc_value": "172.174.128.128:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-30 09:44:14",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891397": [
        {
            "ioc_value": "166.88.95.90:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-30 09:44:09",
            "last_seen_utc": "2026-09-01 02:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891398": [
        {
            "ioc_value": "166.88.95.90:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-30 09:44:09",
            "last_seen_utc": "2026-09-01 02:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891396": [
        {
            "ioc_value": "104.250.180.85:56013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-30 09:43:17",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891395": [
        {
            "ioc_value": "piwola.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 09:24:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891394": [
        {
            "ioc_value": "distrosummit.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-30 09:19:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891393": [
        {
            "ioc_value": "xy08z5pm.shop-aizenpower.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 09:01:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891392": [
        {
            "ioc_value": "48dodie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 08:57:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891391": [
        {
            "ioc_value": "shop-aizenpower.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 08:55:52",
            "last_seen_utc": "2026-08-31 01:40:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891390": [
        {
            "ioc_value": "gfzatydyf8.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 08:54:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891389": [
        {
            "ioc_value": "bixaky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 08:51:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891388": [
        {
            "ioc_value": "cjbwc69441.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 08:27:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891380": [
        {
            "ioc_value": "103.153.183.25:3231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-30 08:16:51",
            "last_seen_utc": "2026-08-31 08:55:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891382": [
        {
            "ioc_value": "152.42.255.118:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 08:16:51",
            "last_seen_utc": "2026-08-31 10:10:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891387": [
        {
            "ioc_value": "qwxeh11866.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 08:08:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891386": [
        {
            "ioc_value": "111.230.143.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 08:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891384": [
        {
            "ioc_value": "38.55.200.183:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891385": [
        {
            "ioc_value": "111.230.143.136:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891383": [
        {
            "ioc_value": "172.245.91.44:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891381": [
        {
            "ioc_value": "injured304.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 07:58:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891379": [
        {
            "ioc_value": "lyvoha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 07:41:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891375": [
        {
            "ioc_value": "demahapa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 07:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891374": [
        {
            "ioc_value": "gawipavy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 07:21:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891373": [
        {
            "ioc_value": "5462elka.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 07:14:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891088": [
        {
            "ioc_value": "69.167.11.148:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-30 07:09:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,Start-Asegurar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891091": [
        {
            "ioc_value": "190.123.46.208:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-30 07:09:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/193ea99089cfef206c47bf4e8e335546bdadc3f146374f6ef7489ae8fce4208c",
            "tags": "cowrie,honeypot",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1891106": [
        {
            "ioc_value": "shift-api-control.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-30 07:09:45",
            "last_seen_utc": "2026-08-30 08:25:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md",
            "tags": "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1891107": [
        {
            "ioc_value": "176.65.144.127:3847",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-30 07:09:44",
            "last_seen_utc": "2026-08-30 08:25:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md",
            "tags": "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1891108": [
        {
            "ioc_value": "api-configuard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-30 07:09:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md",
            "tags": "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1891127": [
        {
            "ioc_value": "45.74.7.158:4332",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-30 07:09:43",
            "last_seen_utc": "2026-08-30 19:15:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,tor25t",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891109": [
        {
            "ioc_value": "82.25.63.146:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-30 07:09:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md",
            "tags": "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1891131": [
        {
            "ioc_value": "http://103.26.82.216:35366/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 07:09:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.82.216",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891132": [
        {
            "ioc_value": "http://139.135.42.31:43969/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 07:09:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.42.31",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891190": [
        {
            "ioc_value": "134.122.124.236:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:40",
            "last_seen_utc": "2026-09-01 03:25:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891191": [
        {
            "ioc_value": "45.55.191.196:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:39",
            "last_seen_utc": "2026-09-01 03:25:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891192": [
        {
            "ioc_value": "152.42.255.118:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:39",
            "last_seen_utc": "2026-09-01 03:26:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891193": [
        {
            "ioc_value": "167.99.128.245:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:38",
            "last_seen_utc": "2026-09-01 03:26:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891194": [
        {
            "ioc_value": "67.205.132.147:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:38",
            "last_seen_utc": "2026-09-01 03:27:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891197": [
        {
            "ioc_value": "174.138.30.59:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:37",
            "last_seen_utc": "2026-09-01 03:25:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891195": [
        {
            "ioc_value": "165.22.191.159:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:36",
            "last_seen_utc": "2026-09-01 03:26:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891196": [
        {
            "ioc_value": "104.248.27.128:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:35",
            "last_seen_utc": "2026-09-01 03:26:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891198": [
        {
            "ioc_value": "165.22.122.89:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891231": [
        {
            "ioc_value": "https://daskljtitaskastvv.pro/dsasfd555.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-08-30 07:09:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/10-hunts/HUNT-0005%20-%20ClickFix%20WordPress%20Delivery%20Network%20Hunt.md",
            "tags": "clickfix,evalusion,fake-captcha,merry-florist,netsupport,unc2190,wordpress-injection",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1891234": [
        {
            "ioc_value": "http://116.109.33.252:33235/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 07:09:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/116.109.33.252",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891235": [
        {
            "ioc_value": "http://112.25.235.194:60134/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 07:09:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/112.25.235.194",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891236": [
        {
            "ioc_value": "http://175.107.0.8:44034/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 07:09:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.0.8",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891243": [
        {
            "ioc_value": "https://chi.12naga.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 07:09:31",
            "last_seen_utc": "2026-09-01 03:41:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "268d1539fef7aab0b99f0b10cc2693b0,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891242": [
        {
            "ioc_value": "https://ley.123ful.net",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 07:09:30",
            "last_seen_utc": "2026-09-01 03:40:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9e42080fd45ba9f402718ea0d28bb085,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891245": [
        {
            "ioc_value": "185.195.65.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 07:09:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "57169,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1891250": [
        {
            "ioc_value": "141.94.96.195:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-30 07:09:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptojacking,docker-api,monero,xmrig",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1891253": [
        {
            "ioc_value": "165.22.191.159:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:28",
            "last_seen_utc": "2026-09-01 01:17:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891294": [
        {
            "ioc_value": "104.248.247.126:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891306": [
        {
            "ioc_value": "174.138.30.59:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:27",
            "last_seen_utc": "2026-08-31 23:11:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891311": [
        {
            "ioc_value": "167.99.194.254:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891312": [
        {
            "ioc_value": "104.248.27.128:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:26",
            "last_seen_utc": "2026-09-01 01:18:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891313": [
        {
            "ioc_value": "67.205.132.147:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891314": [
        {
            "ioc_value": "134.122.124.236:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:25",
            "last_seen_utc": "2026-08-31 05:49:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891315": [
        {
            "ioc_value": "188.166.234.214:7528",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 07:09:25",
            "last_seen_utc": "2026-09-01 01:59:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891321": [
        {
            "ioc_value": "167.99.128.245:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891331": [
        {
            "ioc_value": "log.afghankabobgrill.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1891345": [
        {
            "ioc_value": "http://153.117.37.70:33874/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-30 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.37.70",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891364": [
        {
            "ioc_value": "152.42.255.118:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:21",
            "last_seen_utc": "2026-08-31 17:41:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891365": [
        {
            "ioc_value": "159.65.50.202:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-30 07:09:21",
            "last_seen_utc": "2026-08-30 08:31:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891372": [
        {
            "ioc_value": "47.113.179.196:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891370": [
        {
            "ioc_value": "123.254.106.168:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891371": [
        {
            "ioc_value": "118.99.55.153:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891369": [
        {
            "ioc_value": "significant615.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 07:03:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891368": [
        {
            "ioc_value": "quy30mlr.shop-aeroslim.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 06:59:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891367": [
        {
            "ioc_value": "levulibo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 06:57:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891366": [
        {
            "ioc_value": "shop-aeroslim.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 06:55:19",
            "last_seen_utc": "2026-08-30 20:39:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891363": [
        {
            "ioc_value": "s0bhultx.thirtyonehat.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 06:43:00",
            "last_seen_utc": "2026-08-30 06:43:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891362": [
        {
            "ioc_value": "jyxali.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 06:41:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891360": [
        {
            "ioc_value": "http://flreaow.click:6527/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 06:40:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891361": [
        {
            "ioc_value": "http://shhsift.click:7647/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 06:40:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891359": [
        {
            "ioc_value": "boyenspray.arrow-it.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 06:40:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891356": [
        {
            "ioc_value": "1c250ac3db43c8379591c0a1e8e428b972c1adda38eec2fb46376fb905e0a5e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-30 06:34:01",
            "last_seen_utc": "2026-09-01 01:40:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891357": [
        {
            "ioc_value": "a7306d1131fc113334101d30db8b5b0fa376665b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-30 06:34:01",
            "last_seen_utc": "2026-09-01 01:40:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891358": [
        {
            "ioc_value": "df436f62af38b7a5bcd8a3368a9f110a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-30 06:34:01",
            "last_seen_utc": "2026-09-01 01:40:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891354": [
        {
            "ioc_value": "6daf41bd96b45d41c4a6c149efda326e5baf663e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-30 06:34:00",
            "last_seen_utc": "2026-09-01 01:40:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891355": [
        {
            "ioc_value": "f6db29a1c53467f9d613666064785e98",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-30 06:34:00",
            "last_seen_utc": "2026-09-01 01:40:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891351": [
        {
            "ioc_value": "5d1307ffad96536894481fead93401448cc6adac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 06:33:59",
            "last_seen_utc": "2026-09-01 01:40:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891352": [
        {
            "ioc_value": "99ad52820bd7ae090c578610e367fcdb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 06:33:59",
            "last_seen_utc": "2026-09-01 01:40:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891353": [
        {
            "ioc_value": "95dc20449c307be8bad1541a3fbf53ee6c9a107f9add5811f744ee33e344b63d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-30 06:33:59",
            "last_seen_utc": "2026-09-01 01:40:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891348": [
        {
            "ioc_value": "d313053982390ae6a4707aeba20451cfc13fc88e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-30 06:33:58",
            "last_seen_utc": "2026-09-01 01:40:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891349": [
        {
            "ioc_value": "70f6dff404b94d943db1514648700cfa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-30 06:33:58",
            "last_seen_utc": "2026-09-01 01:40:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891350": [
        {
            "ioc_value": "916cf18c98363cf3419b4d51e9635dd1c610adb3b6d6264aac3f52a02b77541a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 06:33:58",
            "last_seen_utc": "2026-09-01 01:40:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891347": [
        {
            "ioc_value": "507bbce068c50bc2e2c3907debe65c3bf974ac1c2ace16d15c952bd3a72c15f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-30 06:33:57",
            "last_seen_utc": "2026-09-01 01:40:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891346": [
        {
            "ioc_value": "xutegaje.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 06:23:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891344": [
        {
            "ioc_value": "boqoca.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 06:10:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891342": [
        {
            "ioc_value": "172.245.91.44:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891343": [
        {
            "ioc_value": "172.245.91.44:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891341": [
        {
            "ioc_value": "172.245.91.44:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891340": [
        {
            "ioc_value": "188.212.158.203:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-30 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891339": [
        {
            "ioc_value": "xuqyzy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 05:52:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891338": [
        {
            "ioc_value": "ztsuw61048.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 05:47:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891337": [
        {
            "ioc_value": "ln20gg35dp.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 05:44:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891336": [
        {
            "ioc_value": "pamole.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 05:37:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891335": [
        {
            "ioc_value": "76fz7fl1.thegvgalleryco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 05:35:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891334": [
        {
            "ioc_value": "log.afghankabobgrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 05:35:04",
            "last_seen_utc": "2026-08-30 08:18:04",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891333": [
        {
            "ioc_value": "thegvgalleryco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 05:32:35",
            "last_seen_utc": "2026-08-30 05:33:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891332": [
        {
            "ioc_value": "niwosatu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 05:27:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891330": [
        {
            "ioc_value": "waducako.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 05:09:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891329": [
        {
            "ioc_value": "89.126.249.219:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-30 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891328": [
        {
            "ioc_value": "raspberryhillsshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 05:01:49",
            "last_seen_utc": "2026-08-30 05:01:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891327": [
        {
            "ioc_value": "jbyn0h7d.shop-abundancegoddess.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 04:56:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891326": [
        {
            "ioc_value": "shop-abundancegoddess.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 04:55:21",
            "last_seen_utc": "2026-08-30 04:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891325": [
        {
            "ioc_value": "migelabu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:55:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891324": [
        {
            "ioc_value": "cudww89511.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:47:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891323": [
        {
            "ioc_value": "vtfpy96040.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:42:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891322": [
        {
            "ioc_value": "biqyhiny.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:40:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891320": [
        {
            "ioc_value": "yellingevey.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:29:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891319": [
        {
            "ioc_value": "134.122.185.201:6685",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 04:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891318": [
        {
            "ioc_value": "134.122.185.201:6698",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 04:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891317": [
        {
            "ioc_value": "byrehu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:14:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891316": [
        {
            "ioc_value": "mo6zthwbal.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 04:13:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891310": [
        {
            "ioc_value": "kexelado.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 03:56:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891309": [
        {
            "ioc_value": "y63nxzlm5a.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 03:40:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891308": [
        {
            "ioc_value": "http://cdire.shop:9048/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 03:38:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891307": [
        {
            "ioc_value": "http://flreaow.click:6527/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 03:38:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891305": [
        {
            "ioc_value": "ksqbbc27ir.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 03:19:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891304": [
        {
            "ioc_value": "http://mountat.click:7528/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 03:11:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891303": [
        {
            "ioc_value": "rqytbre182.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 03:07:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891302": [
        {
            "ioc_value": "wenoty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 03:03:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891301": [
        {
            "ioc_value": "gertrudachocolate.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 02:51:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891300": [
        {
            "ioc_value": "rm9jpaae.themertraa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 02:37:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891299": [
        {
            "ioc_value": "himenuzi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 02:32:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891298": [
        {
            "ioc_value": "themertraa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 02:32:09",
            "last_seen_utc": "2026-08-30 02:32:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891297": [
        {
            "ioc_value": "bubaqupu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 02:18:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891296": [
        {
            "ioc_value": "mqa24zcwc6.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 02:07:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891295": [
        {
            "ioc_value": "43.136.76.42:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-30 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891293": [
        {
            "ioc_value": "shec1y17p3.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 01:48:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891292": [
        {
            "ioc_value": "vcabw71270.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 01:41:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891291": [
        {
            "ioc_value": "mbond38982.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 01:39:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891288": [
        {
            "ioc_value": "a1bde6f032dc7452a8e447e9750a3b14a1e5c7e3803420e8919831fe67b338b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891289": [
        {
            "ioc_value": "3dd25cbfe76db155615283f905992030468f3da9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891290": [
        {
            "ioc_value": "fb472c15a793251aeeb03b38bd4a678f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891287": [
        {
            "ioc_value": "8bbbf6e8040d137c142bbf1775be770c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:45",
            "last_seen_utc": "2026-08-30 06:34:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891285": [
        {
            "ioc_value": "db4a45d88c943be3f60bf216bb6ac8a2d3b70dfa13e9669e402f11e2aaea1b74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:44",
            "last_seen_utc": "2026-08-30 06:34:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891286": [
        {
            "ioc_value": "0d5f36f78a1cbf922f9e33c348c5693e93e24c06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:44",
            "last_seen_utc": "2026-08-30 06:34:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891282": [
        {
            "ioc_value": "30550319146db843b5987e3bd4f3befcd5dd77ec3f24862db2d0703f5998667c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:28",
            "last_seen_utc": "2026-08-30 06:34:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891283": [
        {
            "ioc_value": "eb5e1454e3edc95f364b74c3db91c12c21ad0902",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:28",
            "last_seen_utc": "2026-08-30 06:34:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891284": [
        {
            "ioc_value": "d9c681a726183af26a21128279ef0ced",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:28",
            "last_seen_utc": "2026-08-30 06:34:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891278": [
        {
            "ioc_value": "d6016c0b8acc0c4d73d27019ed290ba5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:27",
            "last_seen_utc": "2026-08-30 06:34:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891279": [
        {
            "ioc_value": "1a71cf44e6bf88acc3009341875a6ac584f70f1d8f02517ad08090b6d9c94f84",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:27",
            "last_seen_utc": "2026-08-30 06:34:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891280": [
        {
            "ioc_value": "b6294d17310ca94f96e129d0ad8901252c8556a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:27",
            "last_seen_utc": "2026-08-30 06:34:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891281": [
        {
            "ioc_value": "28318ef8d982d051f7ea8987ea303075",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:27",
            "last_seen_utc": "2026-08-30 06:34:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891276": [
        {
            "ioc_value": "c4476378ccde96e2bcbb413e42d7df500c56b577b3a8a58c5318df96201e0b02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:26",
            "last_seen_utc": "2026-08-30 06:34:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891277": [
        {
            "ioc_value": "c639de6cf192fd1f6a1edf72537d92e744bc764b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-30 01:34:26",
            "last_seen_utc": "2026-08-30 06:34:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891273": [
        {
            "ioc_value": "9c927df9fdd83af1b57810daa6cc7712a238d31a860bb8d33c6dacb03f53584d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-30 01:34:25",
            "last_seen_utc": "2026-09-01 01:41:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891274": [
        {
            "ioc_value": "ca3229c74dd6ac34f0f7e2469229865d58dfc89d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-30 01:34:25",
            "last_seen_utc": "2026-09-01 01:41:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891275": [
        {
            "ioc_value": "7e03150e97b7d8e181ae4092c55b3b27",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-30 01:34:25",
            "last_seen_utc": "2026-09-01 01:41:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891270": [
        {
            "ioc_value": "0f1af10b96c08c9aeecf28c2fa238542e667d218df65ce51701aaaeb7dcc75b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:22",
            "last_seen_utc": "2026-09-01 01:41:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891271": [
        {
            "ioc_value": "94c1d86395777db22933c0d97cac2b535d543c87",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:22",
            "last_seen_utc": "2026-09-01 01:41:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891272": [
        {
            "ioc_value": "0b130d9fec6bb8f9b80b13e110d4e0b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:22",
            "last_seen_utc": "2026-09-01 01:41:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891266": [
        {
            "ioc_value": "e7905f19dc5cebd37e3f9e2f65368b04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-30 01:34:21",
            "last_seen_utc": "2026-09-01 01:41:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891267": [
        {
            "ioc_value": "b434022c41d8380221ddd621eaae69b0f0eb2503ac53069ef7f932f45cdf81d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 01:34:21",
            "last_seen_utc": "2026-09-01 01:41:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891268": [
        {
            "ioc_value": "8cced0e041a11e7d0d85c3c9b7595e70004b7414",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 01:34:21",
            "last_seen_utc": "2026-09-01 01:41:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891269": [
        {
            "ioc_value": "c3fb146a44516f025122c71348c36b0e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 01:34:21",
            "last_seen_utc": "2026-09-01 01:41:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891262": [
        {
            "ioc_value": "1b8bee90a24f2303b3e30d5cbd0d0bb2f7dba242",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-30 01:34:20",
            "last_seen_utc": "2026-09-01 01:41:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891263": [
        {
            "ioc_value": "c5c38ba91507353b7b68c0086fe53274",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-30 01:34:20",
            "last_seen_utc": "2026-09-01 01:41:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891264": [
        {
            "ioc_value": "0960a25a046f08f30489bce5f7cc6e83af9b21989f8e937c57722cafe00b2dca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-30 01:34:20",
            "last_seen_utc": "2026-09-01 01:41:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891265": [
        {
            "ioc_value": "12da85ebf11415b0837c4930af8ae1f46194e8cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-30 01:34:20",
            "last_seen_utc": "2026-09-01 01:41:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891258": [
        {
            "ioc_value": "117dc9528d518447ab50ba8114b5a47fd06a7c251ade9e90162df66fcb7fd279",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:19",
            "last_seen_utc": "2026-09-01 01:40:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891259": [
        {
            "ioc_value": "b38e013a2139f76614c42147befaa2d357ab56ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:19",
            "last_seen_utc": "2026-09-01 01:40:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891260": [
        {
            "ioc_value": "7399b202c9c2fe7479680505e1f55e89",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-30 01:34:19",
            "last_seen_utc": "2026-09-01 01:40:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891261": [
        {
            "ioc_value": "0970ea5b4f55b1cfee90c06e00ed48dbc861f5eac590b144d4a911b62942abbc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-30 01:34:19",
            "last_seen_utc": "2026-09-01 01:41:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891255": [
        {
            "ioc_value": "11ae2d71c9ccae0fa60dc80eedf85ebf784267c28ca42e9c14fffa06515e097a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 01:34:18",
            "last_seen_utc": "2026-09-01 01:40:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891256": [
        {
            "ioc_value": "0e6e9304c236469d4e8a62ac9bcbfca6ca7a1114",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 01:34:18",
            "last_seen_utc": "2026-09-01 01:40:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891257": [
        {
            "ioc_value": "7d7fd1e5a3ef87809b2e82e000f835c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-30 01:34:18",
            "last_seen_utc": "2026-09-01 01:40:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1891254": [
        {
            "ioc_value": "gwshh85519.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 01:32:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891251": [
        {
            "ioc_value": "http://shhsift.click:7647/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 01:25:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891252": [
        {
            "ioc_value": "http://cdire.shop:9048/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 01:25:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891248": [
        {
            "ioc_value": "dutylama.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 01:19:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891246": [
        {
            "ioc_value": "161.35.173.98:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891247": [
        {
            "ioc_value": "161.35.173.98:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-30 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891244": [
        {
            "ioc_value": "n9tgy4rfiy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 01:00:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891241": [
        {
            "ioc_value": "skybap.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:47:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891240": [
        {
            "ioc_value": "cw5afior.satoshinakamotoco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:36:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891239": [
        {
            "ioc_value": "ot1ewu6jyq.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:36:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891238": [
        {
            "ioc_value": "satoshinakamotoco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:32:18",
            "last_seen_utc": "2026-08-30 00:32:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891237": [
        {
            "ioc_value": "kusuhuti.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:26:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891233": [
        {
            "ioc_value": "suhyjypy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:08:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891232": [
        {
            "ioc_value": "tbs46zz6.nurve-alive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:07:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891230": [
        {
            "ioc_value": "http://flreaow.click:6527/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-30 00:05:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891229": [
        {
            "ioc_value": "silver6749.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:04:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891228": [
        {
            "ioc_value": "nurve-alive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:04:27",
            "last_seen_utc": "2026-08-30 00:05:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891227": [
        {
            "ioc_value": "nklav1nt.raspberryhillsco.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:03:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891226": [
        {
            "ioc_value": "powulapi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:01:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891225": [
        {
            "ioc_value": "raspberryhillsco.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-30 00:01:10",
            "last_seen_utc": "2026-08-30 00:01:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "30August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891224": [
        {
            "ioc_value": "v9gh4nz9ty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:01:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891223": [
        {
            "ioc_value": "sizype.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-30 00:00:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891222": [
        {
            "ioc_value": "47.86.9.253:10982",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 23:47:01",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891221": [
        {
            "ioc_value": "161.35.173.98:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 23:46:50",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891220": [
        {
            "ioc_value": "154.94.237.203:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 23:46:49",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891219": [
        {
            "ioc_value": "161-35-173-98.sslip.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 23:46:33",
            "last_seen_utc": "2026-09-01 02:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891218": [
        {
            "ioc_value": "round60.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 23:42:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891217": [
        {
            "ioc_value": "http://xightne.click:7242/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 23:39:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891216": [
        {
            "ioc_value": "http://fezm.website:9048/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 23:33:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891215": [
        {
            "ioc_value": "ailenerobust.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 23:27:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891214": [
        {
            "ioc_value": "baami.development.tee.education",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 23:17:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891213": [
        {
            "ioc_value": "mkvmd28439.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 23:15:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891212": [
        {
            "ioc_value": "hyvugu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 22:59:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891211": [
        {
            "ioc_value": "kedide.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 22:41:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891210": [
        {
            "ioc_value": "qpfql84049.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 22:33:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891209": [
        {
            "ioc_value": "arohr77201.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 22:28:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891208": [
        {
            "ioc_value": "mwr6ykxb.thegvgalleryy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 22:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891207": [
        {
            "ioc_value": "miwyti.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 22:23:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891206": [
        {
            "ioc_value": "thegvgalleryy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 22:22:12",
            "last_seen_utc": "2026-08-29 22:22:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891205": [
        {
            "ioc_value": "gyjuha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 22:20:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891204": [
        {
            "ioc_value": "o98orlmh.nurosarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 22:08:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891203": [
        {
            "ioc_value": "nurosarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 22:03:56",
            "last_seen_utc": "2026-08-29 22:04:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891201": [
        {
            "ioc_value": "tappancsrendelo.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 22:02:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891202": [
        {
            "ioc_value": "rossinsuranceplans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 22:02:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891200": [
        {
            "ioc_value": "ymc04wy61g.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 21:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891199": [
        {
            "ioc_value": "kekyhu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 21:58:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891189": [
        {
            "ioc_value": "nugiwy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 21:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891188": [
        {
            "ioc_value": "pm4y2dogij.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 21:20:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891187": [
        {
            "ioc_value": "semuxo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 21:15:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891186": [
        {
            "ioc_value": "gwtrading.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 21:02:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891185": [
        {
            "ioc_value": "qobemyjo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:56:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891184": [
        {
            "ioc_value": "sjkdf91029.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:56:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891183": [
        {
            "ioc_value": "hbiar54800.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:51:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891182": [
        {
            "ioc_value": "98candide.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:48:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891181": [
        {
            "ioc_value": "0u2eowjgwm.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:37:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891180": [
        {
            "ioc_value": "ryzabymy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:25:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891179": [
        {
            "ioc_value": "pt0h0z5vzo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 20:16:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891178": [
        {
            "ioc_value": "http://spareon.click:8811/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 20:05:27",
            "last_seen_utc": "2026-08-29 20:34:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0970ea5b4f55b1cfee90c06e00ed48dbc861f5eac590b144d4a911b62942abbc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891177": [
        {
            "ioc_value": "gs870sms.nuerovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 20:04:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891176": [
        {
            "ioc_value": "nuerovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 20:03:54",
            "last_seen_utc": "2026-08-29 20:04:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891175": [
        {
            "ioc_value": "jrzan65776.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:55:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891174": [
        {
            "ioc_value": "94.228.166.168:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:47:14",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891173": [
        {
            "ioc_value": "54.199.206.9:21672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 19:46:41",
            "last_seen_utc": "2026-09-01 02:46:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891172": [
        {
            "ioc_value": "52.196.79.161:21672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 19:46:40",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891171": [
        {
            "ioc_value": "46.246.93.245:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 19:46:36",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891170": [
        {
            "ioc_value": "45.192.169.254:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-29 19:46:25",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891168": [
        {
            "ioc_value": "38.60.252.124:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-29 19:46:17",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891169": [
        {
            "ioc_value": "38.60.252.124:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-29 19:46:17",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891167": [
        {
            "ioc_value": "38.180.250.214:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-29 19:46:14",
            "last_seen_utc": "2026-09-01 02:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891165": [
        {
            "ioc_value": "31.76.100.3:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-29 19:46:07",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891166": [
        {
            "ioc_value": "31.76.100.3:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-29 19:46:07",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891164": [
        {
            "ioc_value": "3.113.147.16:21672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 19:46:03",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891163": [
        {
            "ioc_value": "196.251.121.124:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:44:52",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891162": [
        {
            "ioc_value": "195.20.115.80:52203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:44:51",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891160": [
        {
            "ioc_value": "194.9.6.35:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:44:48",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891161": [
        {
            "ioc_value": "194.9.6.35:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:44:48",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891159": [
        {
            "ioc_value": "168.222.97.92:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:44:04",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891158": [
        {
            "ioc_value": "132.226.72.227:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 19:43:33",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891157": [
        {
            "ioc_value": "128.90.171.209:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 19:43:30",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891156": [
        {
            "ioc_value": "128.90.105.118:8624",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-29 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891155": [
        {
            "ioc_value": "104.250.180.85:55010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 19:43:15",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891154": [
        {
            "ioc_value": "103.98.18.238:8660",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-29 19:43:10",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891153": [
        {
            "ioc_value": "1.69.201.249:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-29 19:43:02",
            "last_seen_utc": "2026-09-01 02:43:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891152": [
        {
            "ioc_value": "wizawytu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:40:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891151": [
        {
            "ioc_value": "icindh6d.saintvanityllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 19:34:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891150": [
        {
            "ioc_value": "saintvanityllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 19:31:33",
            "last_seen_utc": "2026-08-29 19:31:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891149": [
        {
            "ioc_value": "laxmisynthetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 19:22:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891148": [
        {
            "ioc_value": "dteug87599.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:22:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891147": [
        {
            "ioc_value": "nrgtg63932.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:20:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891146": [
        {
            "ioc_value": "biqyxihu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:18:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891145": [
        {
            "ioc_value": "lyzazusu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:14:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891144": [
        {
            "ioc_value": "38lhdq9v9t.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 19:05:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891143": [
        {
            "ioc_value": "159.198.75.180:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891142": [
        {
            "ioc_value": "43.163.88.35:445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891141": [
        {
            "ioc_value": "https://clickzona.net/embed/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-29 19:02:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891140": [
        {
            "ioc_value": "3agcohuj.peaceinwarr.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 19:02:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891139": [
        {
            "ioc_value": "portfolio-r211.alexandreguillet.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 19:02:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891138": [
        {
            "ioc_value": "peaceinwarr.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 19:00:46",
            "last_seen_utc": "2026-08-29 19:00:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891136": [
        {
            "ioc_value": "www.demenagements-delage-perigueux.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 18:51:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891137": [
        {
            "ioc_value": "www.kmag.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 18:51:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891135": [
        {
            "ioc_value": "hwxyl07635.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 18:45:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891134": [
        {
            "ioc_value": "seo.mogacode.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 18:41:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891133": [
        {
            "ioc_value": "vaxabaja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 18:38:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891130": [
        {
            "ioc_value": "7q9i0yalnt.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 18:15:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891129": [
        {
            "ioc_value": "jjqnwf6c.mertraa.org.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 18:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891128": [
        {
            "ioc_value": "mertraa.org.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 18:11:42",
            "last_seen_utc": "2026-08-29 18:11:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891126": [
        {
            "ioc_value": "flhq6iyb.neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 18:07:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891125": [
        {
            "ioc_value": "holuri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:58:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891124": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Christa6547/unopened/refs/heads/main/matchbox",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:56:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891123": [
        {
            "ioc_value": "sdxzz21626.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:44:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891122": [
        {
            "ioc_value": "c82yhw7bs7.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:43:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891119": [
        {
            "ioc_value": "https://bestcloudservicesupport.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:39:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891120": [
        {
            "ioc_value": "https://bestguardservicesupport.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:39:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891121": [
        {
            "ioc_value": "https://bigdealjournal.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:39:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891116": [
        {
            "ioc_value": "bestcloudservicesupport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:39:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891117": [
        {
            "ioc_value": "bestguardservicesupport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:39:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891118": [
        {
            "ioc_value": "bigdealjournal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 17:39:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891115": [
        {
            "ioc_value": "qs0sd7xjfm.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:35:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891114": [
        {
            "ioc_value": "nomalipo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:35:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891113": [
        {
            "ioc_value": "zfpij29832.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:18:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891112": [
        {
            "ioc_value": "osd9uavwa9.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 17:10:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891111": [
        {
            "ioc_value": "http://shhsift.click:7647/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 17:05:15",
            "last_seen_utc": "2026-08-29 18:14:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/11142fc49721aed0381514a9fb813cbe1143e05c2a3f5e1180995eda4cc4d005/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891110": [
        {
            "ioc_value": "http://piarl.site:9048/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 17:05:12",
            "last_seen_utc": "2026-08-29 18:14:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/11142fc49721aed0381514a9fb813cbe1143e05c2a3f5e1180995eda4cc4d005/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891105": [
        {
            "ioc_value": "bmrpo37305.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:49:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891104": [
        {
            "ioc_value": "puemr96226.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:43:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891103": [
        {
            "ioc_value": "forecast-chaos.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-29 16:34:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate,la02",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1891102": [
        {
            "ioc_value": "lesemi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:18:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891101": [
        {
            "ioc_value": "ambitious56.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:08:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891100": [
        {
            "ioc_value": "45.192.105.141:60001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891099": [
        {
            "ioc_value": "43.163.88.35:139",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 16:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891098": [
        {
            "ioc_value": "wlwdk84865.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:04:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891097": [
        {
            "ioc_value": "kdjik001.neuro-wave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 16:03:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891096": [
        {
            "ioc_value": "neuro-wave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 16:02:29",
            "last_seen_utc": "2026-08-29 16:03:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891095": [
        {
            "ioc_value": "qefepaky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:02:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891094": [
        {
            "ioc_value": "invisibleharrie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 16:01:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891093": [
        {
            "ioc_value": "sound-obstacle.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-29 16:00:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate,la02",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1891092": [
        {
            "ioc_value": "meta.study-run.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-29 15:58:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891090": [
        {
            "ioc_value": "kylatyni.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 15:35:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891089": [
        {
            "ioc_value": "maritsaaqua.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 15:15:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891085": [
        {
            "ioc_value": "45.140.213.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-29 15:05:05",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891086": [
        {
            "ioc_value": "45.140.213.2:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-29 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891087": [
        {
            "ioc_value": "102.117.162.133:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 15:05:05",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891084": [
        {
            "ioc_value": "0p1a6v5vih.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:59:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891083": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Kath19634/landowner/refs/heads/main/target",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:53:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891082": [
        {
            "ioc_value": "gluccotrust--bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:51:53",
            "last_seen_utc": "2026-08-31 09:04:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891081": [
        {
            "ioc_value": "rexilafu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:44:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891080": [
        {
            "ioc_value": "volokyli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:34:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891079": [
        {
            "ioc_value": "nhq4h9ts.mertre.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:32:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891078": [
        {
            "ioc_value": "mertre.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:31:11",
            "last_seen_utc": "2026-08-31 09:50:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891077": [
        {
            "ioc_value": "levakike.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:30:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891076": [
        {
            "ioc_value": "tocawyso.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:29:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891075": [
        {
            "ioc_value": "bacujura.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:22:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891074": [
        {
            "ioc_value": "lolykeco.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 14:17:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891021": [
        {
            "ioc_value": "https://playmounthdom.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-29 14:08:52",
            "last_seen_utc": "2026-09-01 03:11:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,printer,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891034": [
        {
            "ioc_value": "https://46.225.92.123",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-29 14:08:51",
            "last_seen_utc": "2026-09-01 03:42:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "052d95aa0b0505a149188acc00af5b78,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1891043": [
        {
            "ioc_value": "http://203.101.186.166:41052/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-29 14:08:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/203.101.186.166",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1891073": [
        {
            "ioc_value": "qmoz0g9m.werighteus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:05:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891072": [
        {
            "ioc_value": "45.140.213.2:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-29 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891070": [
        {
            "ioc_value": "43.163.88.35:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891071": [
        {
            "ioc_value": "45.140.213.2:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-29 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891069": [
        {
            "ioc_value": "43.163.88.35:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891068": [
        {
            "ioc_value": "mkfbo763.jadedlondon.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:04:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891067": [
        {
            "ioc_value": "werighteus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:01:51",
            "last_seen_utc": "2026-08-29 14:02:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891066": [
        {
            "ioc_value": "xp0re0bg.oucloud.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:01:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891065": [
        {
            "ioc_value": "jadedlondon.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 14:01:02",
            "last_seen_utc": "2026-08-29 14:01:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891064": [
        {
            "ioc_value": "oucloud.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 13:59:37",
            "last_seen_utc": "2026-08-29 13:59:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891063": [
        {
            "ioc_value": "20kari.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 13:52:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891062": [
        {
            "ioc_value": "7ti.li",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 13:14:03",
            "last_seen_utc": "2026-08-30 15:41:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1891061": [
        {
            "ioc_value": "www.hobbyegge.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 13:11:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891059": [
        {
            "ioc_value": "43.163.88.35:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891060": [
        {
            "ioc_value": "43.163.88.35:137",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891058": [
        {
            "ioc_value": "43.163.88.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891057": [
        {
            "ioc_value": "dewocyki.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 13:04:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891056": [
        {
            "ioc_value": "caroleparodi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 13:01:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891055": [
        {
            "ioc_value": "linywahe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:58:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891054": [
        {
            "ioc_value": "luckywheels.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:52:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891053": [
        {
            "ioc_value": "lulugyqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:49:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891052": [
        {
            "ioc_value": "bbxi4lykw4.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:43:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891051": [
        {
            "ioc_value": "c75aknnyxf.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:39:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891049": [
        {
            "ioc_value": "https://fish-planet.online",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:39:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891050": [
        {
            "ioc_value": "https://online-park.online",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:39:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891047": [
        {
            "ioc_value": "fish-planet.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:39:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891048": [
        {
            "ioc_value": "online-park.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:39:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891046": [
        {
            "ioc_value": "legexuca.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:27:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891044": [
        {
            "ioc_value": "http://flreaow.click:6527/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 12:25:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891045": [
        {
            "ioc_value": "http://piarl.site:9048/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 12:25:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891042": [
        {
            "ioc_value": "4151amalia.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:18:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891041": [
        {
            "ioc_value": "tin.tokyo77hit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-29 12:13:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891040": [
        {
            "ioc_value": "fmui74n9.bottegadesiresstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:05:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891038": [
        {
            "ioc_value": "151.245.230.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891039": [
        {
            "ioc_value": "151.245.230.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891037": [
        {
            "ioc_value": "45.192.105.141:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891036": [
        {
            "ioc_value": "grace352.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 12:03:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891035": [
        {
            "ioc_value": "bottegadesiresstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 12:01:17",
            "last_seen_utc": "2026-08-29 12:01:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891033": [
        {
            "ioc_value": "162.251.92.64:448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 11:48:21",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891032": [
        {
            "ioc_value": "calmriverflowing.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-29 11:39:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891031": [
        {
            "ioc_value": "uylwd48175.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 11:39:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891030": [
        {
            "ioc_value": "pfaz89ummq.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 11:33:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891029": [
        {
            "ioc_value": "piomilokao.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-29 11:32:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891028": [
        {
            "ioc_value": "vailora231.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-29 11:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891027": [
        {
            "ioc_value": "s95r07sbgv.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 11:12:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891026": [
        {
            "ioc_value": "4013kimmy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 11:12:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891025": [
        {
            "ioc_value": "lubotoko.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 11:10:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891024": [
        {
            "ioc_value": "151.245.230.21:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891023": [
        {
            "ioc_value": "151.245.230.21:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891022": [
        {
            "ioc_value": "hemipaxo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 11:05:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891020": [
        {
            "ioc_value": "doxise.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 10:44:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891019": [
        {
            "ioc_value": "muwlx00405.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 10:37:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891018": [
        {
            "ioc_value": "www.breezdanubemaritimecity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 10:31:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891017": [
        {
            "ioc_value": "nynashanti.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 10:21:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891016": [
        {
            "ioc_value": "953sensible.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 10:20:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891015": [
        {
            "ioc_value": "tuqewyla.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 10:07:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891014": [
        {
            "ioc_value": "151.245.230.21:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891013": [
        {
            "ioc_value": "8.135.18.143:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-29 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891012": [
        {
            "ioc_value": "165.154.226.87:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-29 10:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891011": [
        {
            "ioc_value": "nexo3n5e.born-x-raised.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 10:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891010": [
        {
            "ioc_value": "born-x-raised.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 10:00:48",
            "last_seen_utc": "2026-08-29 10:01:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1891009": [
        {
            "ioc_value": "cmbhbf32su.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 09:53:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1891008": [
        {
            "ioc_value": "rqz74grh.home-power-shield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 09:52:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1891006": [
        {
            "ioc_value": "http://flreaow.click:6527/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 09:51:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891007": [
        {
            "ioc_value": "http://piarl.site:9048/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 09:51:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1891005": [
        {
            "ioc_value": "94.250.167.221:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-29 09:47:13",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891004": [
        {
            "ioc_value": "94.184.37.68:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-29 09:47:12",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891003": [
        {
            "ioc_value": "80.190.77.86:10700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 09:46:52",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891002": [
        {
            "ioc_value": "46.109.235.15:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 09:46:31",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891001": [
        {
            "ioc_value": "45.61.177.135:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-29 09:46:28",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890999": [
        {
            "ioc_value": "45.125.67.196:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-29 09:46:20",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1891000": [
        {
            "ioc_value": "45.125.67.196:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-29 09:46:20",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890998": [
        {
            "ioc_value": "220.154.128.196:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 09:45:55",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890997": [
        {
            "ioc_value": "204.152.217.122:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-29 09:45:09",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890996": [
        {
            "ioc_value": "172.111.198.212:56013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 09:44:10",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890995": [
        {
            "ioc_value": "169.58.180.142:30300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 09:44:07",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890994": [
        {
            "ioc_value": "163.5.210.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-29 09:44:04",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890993": [
        {
            "ioc_value": "144.172.117.108:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-29 09:43:41",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890992": [
        {
            "ioc_value": "103.98.18.238:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-29 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890991": [
        {
            "ioc_value": "103.116.52.203:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-29 09:43:05",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890990": [
        {
            "ioc_value": "uuvtq10338.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 09:41:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890989": [
        {
            "ioc_value": "xyqulyme.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 09:36:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890988": [
        {
            "ioc_value": "gogetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 09:30:46",
            "last_seen_utc": "2026-08-31 11:04:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890987": [
        {
            "ioc_value": "http://piarl.site:9048/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 09:30:24",
            "last_seen_utc": "2026-08-29 11:11:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30cf47caf9700a74a8ea4a728b8b7c88cb1f8e22261b4ac01575b112c1e224ca/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890986": [
        {
            "ioc_value": "z2svmka7bc.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 09:30:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890985": [
        {
            "ioc_value": "dorree8903.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 09:24:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890984": [
        {
            "ioc_value": "sodyruzu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 09:08:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890983": [
        {
            "ioc_value": "115.159.226.190:54321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890982": [
        {
            "ioc_value": "e5wy6a5o.oncloudllc.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 09:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890981": [
        {
            "ioc_value": "oncloudllc.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 08:59:23",
            "last_seen_utc": "2026-08-29 08:59:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890980": [
        {
            "ioc_value": "getdsmmarketing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 08:57:57",
            "last_seen_utc": "2026-08-29 08:58:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890979": [
        {
            "ioc_value": "letygoji.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 08:54:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890978": [
        {
            "ioc_value": "womose.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 08:31:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890977": [
        {
            "ioc_value": "xaucs09664.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 08:30:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890976": [
        {
            "ioc_value": "lzoao88779.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 08:13:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890975": [
        {
            "ioc_value": "45.192.105.141:18317",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890974": [
        {
            "ioc_value": "45.192.105.141:8317",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 08:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890972": [
        {
            "ioc_value": "45.192.105.141:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890973": [
        {
            "ioc_value": "45.192.105.141:4000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890971": [
        {
            "ioc_value": "45.192.105.141:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890970": [
        {
            "ioc_value": "ak1n41aj.berlinc.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 08:04:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890969": [
        {
            "ioc_value": "berlinc.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 08:00:19",
            "last_seen_utc": "2026-08-29 08:01:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890968": [
        {
            "ioc_value": "dgs6sfnxy1.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 07:58:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890967": [
        {
            "ioc_value": "dozuvime.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 07:55:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890966": [
        {
            "ioc_value": "jikiwesi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 07:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890965": [
        {
            "ioc_value": "fvqyq70147.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 07:38:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890964": [
        {
            "ioc_value": "ekvm8w7naz.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 07:25:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890962": [
        {
            "ioc_value": "http://cryptovectorhub3.lol:5478/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 07:23:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890963": [
        {
            "ioc_value": "http://fresok.top:9048/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 07:23:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890961": [
        {
            "ioc_value": "bosa.skillsbeam.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 07:16:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890959": [
        {
            "ioc_value": "45.192.105.141:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890960": [
        {
            "ioc_value": "45.192.105.141:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890958": [
        {
            "ioc_value": "45.192.105.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890957": [
        {
            "ioc_value": "106.53.122.24:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-29 07:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890956": [
        {
            "ioc_value": "brd55i3s5p.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 07:04:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890954": [
        {
            "ioc_value": "mtg.nicocasa.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 06:56:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890955": [
        {
            "ioc_value": "www.aloop.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 06:56:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890943": [
        {
            "ioc_value": "145.223.23.25:3215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 06:49:54",
            "last_seen_utc": "2026-09-01 03:15:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890946": [
        {
            "ioc_value": "http://39.34.189.248:42346/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-29 06:49:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.34.189.248",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890947": [
        {
            "ioc_value": "http://39.89.242.234:38903/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-29 06:49:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.89.242.234",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890953": [
        {
            "ioc_value": "ferrazzini.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 06:46:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890952": [
        {
            "ioc_value": "guzory.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 06:45:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890951": [
        {
            "ioc_value": "nmnwn42925.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 06:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890950": [
        {
            "ioc_value": "embersummit.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-29 06:28:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890949": [
        {
            "ioc_value": "buwegy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 06:21:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890948": [
        {
            "ioc_value": "http://flreaow.click:6527/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 06:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890945": [
        {
            "ioc_value": "wabirana.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 06:17:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890944": [
        {
            "ioc_value": "chpbj98049.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 06:15:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890942": [
        {
            "ioc_value": "aj9m1fsp.barbashat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 06:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890941": [
        {
            "ioc_value": "barbashat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 05:59:45",
            "last_seen_utc": "2026-08-30 23:01:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890940": [
        {
            "ioc_value": "disappointed5249.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:56:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890831": [
        {
            "ioc_value": "banivi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890832": [
        {
            "ioc_value": "wowila.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890834": [
        {
            "ioc_value": "distinct82.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890837": [
        {
            "ioc_value": "orangeaccessible.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890841": [
        {
            "ioc_value": "kysefeco.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890843": [
        {
            "ioc_value": "nadavega.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890844": [
        {
            "ioc_value": "hneep30685.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890845": [
        {
            "ioc_value": "46.101.146.87:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-29 05:55:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890846": [
        {
            "ioc_value": "jawajacy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890847": [
        {
            "ioc_value": "puqc3ya8ik.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890848": [
        {
            "ioc_value": "nv7oubi9ar.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890849": [
        {
            "ioc_value": "tisonami.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890850": [
        {
            "ioc_value": "nivexy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890854": [
        {
            "ioc_value": "zarohimu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890861": [
        {
            "ioc_value": "syvadone.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890863": [
        {
            "ioc_value": "qixysyle.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890865": [
        {
            "ioc_value": "towide.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890866": [
        {
            "ioc_value": "imcfl38829.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890867": [
        {
            "ioc_value": "maive55295.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890939": [
        {
            "ioc_value": "43.129.180.120:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-29 05:55:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890870": [
        {
            "ioc_value": "http://113.90.49.232:46655/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-29 05:55:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/113.90.49.232",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890871": [
        {
            "ioc_value": "http://14.1.104.86:52889/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-29 05:55:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.104.86",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890872": [
        {
            "ioc_value": "wz84vmk9k0.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890874": [
        {
            "ioc_value": "qoloroso.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890877": [
        {
            "ioc_value": "104.248.41.207:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-29 05:55:05",
            "last_seen_utc": "2026-08-30 21:07:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890878": [
        {
            "ioc_value": "suqyvyxu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890879": [
        {
            "ioc_value": "157.66.26.124:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 05:55:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "149107,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1890880": [
        {
            "ioc_value": "154.37.218.73:12580",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 05:55:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "979,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1890882": [
        {
            "ioc_value": "linyse.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890884": [
        {
            "ioc_value": "46db2652a3d7c10f6d481c1d43af6b40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 05:55:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "banking,cfdi,cybercartel,mexico,pdf-lure",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1890883": [
        {
            "ioc_value": "5d2ad1b986cf9f3c471c3df58d14f3134eb117498228b5cef8075984c5eb1d57",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-29 05:55:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "404keylogger,malspam,mexico,powershell,snake-keylogger",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1890885": [
        {
            "ioc_value": "45.61.136.135:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 05:55:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "bl-networks,bulletproof-hosting,cybercartel,mexico,web-inject",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1890889": [
        {
            "ioc_value": "l8rdio99d9.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:55:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890893": [
        {
            "ioc_value": "yg8r9mewgv.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890894": [
        {
            "ioc_value": "8uctkfzopj.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890896": [
        {
            "ioc_value": "siziqewe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890900": [
        {
            "ioc_value": "zi1jmwbiw5.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890905": [
        {
            "ioc_value": "sv80ef0z7y.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890907": [
        {
            "ioc_value": "tsone53310.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890908": [
        {
            "ioc_value": "rdn8xmj5he.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890911": [
        {
            "ioc_value": "kffcq38276.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890913": [
        {
            "ioc_value": "ryqylica.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890914": [
        {
            "ioc_value": "1uswvmicve.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890915": [
        {
            "ioc_value": "vemidaly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890916": [
        {
            "ioc_value": "nqtgr43420.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890917": [
        {
            "ioc_value": "xekyhi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890923": [
        {
            "ioc_value": "wafylu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890925": [
        {
            "ioc_value": "xisoduxe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890926": [
        {
            "ioc_value": "anjom77202.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890929": [
        {
            "ioc_value": "lzedl25358.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890930": [
        {
            "ioc_value": "qpgfr2ohjn.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890932": [
        {
            "ioc_value": "hugelotu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890935": [
        {
            "ioc_value": "fesagi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890936": [
        {
            "ioc_value": "fleurettemoaning.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890938": [
        {
            "ioc_value": "pgvtd12250.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-29 05:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890937": [
        {
            "ioc_value": "6n1fwtu6.en-trump-token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 05:42:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890934": [
        {
            "ioc_value": "43.143.13.146:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890933": [
        {
            "ioc_value": "121.4.38.18:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-29 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890931": [
        {
            "ioc_value": "http://piarl.site:9048/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 04:48:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890927": [
        {
            "ioc_value": "getdsmwebdevpros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 04:30:15",
            "last_seen_utc": "2026-08-29 04:30:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890924": [
        {
            "ioc_value": "217.165.57.176:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-29 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890922": [
        {
            "ioc_value": "bq69vfja.31hat.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 04:01:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890921": [
        {
            "ioc_value": "31hat.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 03:59:51",
            "last_seen_utc": "2026-08-29 04:00:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890920": [
        {
            "ioc_value": "getdsmdigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 03:57:40",
            "last_seen_utc": "2026-08-29 03:57:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890919": [
        {
            "ioc_value": "workwithgetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 03:49:53",
            "last_seen_utc": "2026-08-31 01:20:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890912": [
        {
            "ioc_value": "43.133.164.200:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-29 03:05:06",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890909": [
        {
            "ioc_value": "118.107.44.153:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-29 02:55:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890910": [
        {
            "ioc_value": "118.107.44.153:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-29 02:55:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890906": [
        {
            "ioc_value": "www.zmenadodavatela.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 02:16:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890904": [
        {
            "ioc_value": "103.199.102.28:441",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-29 02:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890902": [
        {
            "ioc_value": "20.119.73.195:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-29 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890903": [
        {
            "ioc_value": "20.119.73.195:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-29 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890901": [
        {
            "ioc_value": "20.119.73.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-29 02:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890899": [
        {
            "ioc_value": "lvvseg9o.velocitymindset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:50:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890898": [
        {
            "ioc_value": "velocitymindset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:49:13",
            "last_seen_utc": "2026-08-29 01:49:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890897": [
        {
            "ioc_value": "trygetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:39:20",
            "last_seen_utc": "2026-08-30 20:09:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890895": [
        {
            "ioc_value": "thegetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:36:17",
            "last_seen_utc": "2026-08-30 20:02:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890892": [
        {
            "ioc_value": "f7ut9c0h.localcannabiscompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890891": [
        {
            "ioc_value": "localcannabiscompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:29:53",
            "last_seen_utc": "2026-08-29 01:29:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "29August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890890": [
        {
            "ioc_value": "unseulterrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:25:27",
            "last_seen_utc": "2026-08-29 01:30:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890888": [
        {
            "ioc_value": "wbn.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:15:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890886": [
        {
            "ioc_value": "app.morgel-spezialitaetenhandel.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:15:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890887": [
        {
            "ioc_value": "la-loge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:15:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890881": [
        {
            "ioc_value": "timetrackereasy3.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 01:05:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890876": [
        {
            "ioc_value": "http://shhsift.click:7647/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 00:45:28",
            "last_seen_utc": "2026-08-29 02:05:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6ae503b3ee113406e80f9ec06b42800843cd655e2307b4b4c934a72efbd72085/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890875": [
        {
            "ioc_value": "http://piarl.site:9048/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-29 00:45:27",
            "last_seen_utc": "2026-08-29 02:05:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6ae503b3ee113406e80f9ec06b42800843cd655e2307b4b4c934a72efbd72085/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890873": [
        {
            "ioc_value": "queenpinthestoryofyvonnebarnes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 00:35:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890869": [
        {
            "ioc_value": "hoppsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 00:15:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890868": [
        {
            "ioc_value": "https://raw.githubusercontent.com/Christa6547/ade9ac52-539c-45d3-b903-1bcdc2d2d8c4/refs/heads/main/4b637250-1e04-4ccf-aced-ddd79d4daa67",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-29 00:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890864": [
        {
            "ioc_value": "8.134.166.14:54451",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 23:47:33",
            "last_seen_utc": "2026-09-01 02:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890862": [
        {
            "ioc_value": "skzz37qv.teamgetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 23:38:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890860": [
        {
            "ioc_value": "teamgetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 23:35:25",
            "last_seen_utc": "2026-08-31 11:41:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890859": [
        {
            "ioc_value": "getdsmwebagency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 23:30:16",
            "last_seen_utc": "2026-08-31 07:03:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890856": [
        {
            "ioc_value": "http://darkfot.click:3215/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890857": [
        {
            "ioc_value": "http://shhsift.click:7647/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890858": [
        {
            "ioc_value": "http://piarl.site:9048/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890855": [
        {
            "ioc_value": "mtqayo89.getdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 23:00:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890853": [
        {
            "ioc_value": "getdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 22:57:18",
            "last_seen_utc": "2026-08-31 05:03:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890852": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Christa6547/lazily/issue",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 22:45:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890851": [
        {
            "ioc_value": "enus-theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 22:44:17",
            "last_seen_utc": "2026-08-31 12:20:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890842": [
        {
            "ioc_value": "a1q5ie1n.gtsdirect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 21:36:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890840": [
        {
            "ioc_value": "hvbabdh2.jeffmowatt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 21:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890839": [
        {
            "ioc_value": "jeffmowatt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 21:20:03",
            "last_seen_utc": "2026-08-28 21:20:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890838": [
        {
            "ioc_value": "hqgetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 21:16:11",
            "last_seen_utc": "2026-08-31 09:45:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890836": [
        {
            "ioc_value": "ternar-trzeciak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 21:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890835": [
        {
            "ioc_value": "scalewithgetdsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 20:58:17",
            "last_seen_utc": "2026-08-30 20:35:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890833": [
        {
            "ioc_value": "http://piarl.site:9048/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 20:53:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890828": [
        {
            "ioc_value": "moqyhy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 20:39:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890829": [
        {
            "ioc_value": "kedyqyle.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 20:39:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890830": [
        {
            "ioc_value": "puwyf38278.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 20:39:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890827": [
        {
            "ioc_value": "saraadvogada.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 20:09:34",
            "last_seen_utc": "2026-08-28 20:15:04",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890825": [
        {
            "ioc_value": "8.145.59.5:11112",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890826": [
        {
            "ioc_value": "89.34.227.96:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890824": [
        {
            "ioc_value": "47.94.194.175:15000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890823": [
        {
            "ioc_value": "196.70.69.77:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890822": [
        {
            "ioc_value": "89.106.1.118:47756",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 19:55:30",
            "last_seen_utc": "2026-08-29 02:11:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cdbaf394a5131c73749596457d10837466f437b245986fadf409290ddaf18629/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890801": [
        {
            "ioc_value": "boujy17296.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:53:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890817": [
        {
            "ioc_value": "fvmko63646.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:53:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890821": [
        {
            "ioc_value": "http://165.22.225.110/commands",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:53:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ff5d658fc78d345ed97b0c695ea6ec04feb14848ebe5de056f1c23cbdc9f80ff/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890820": [
        {
            "ioc_value": "http://165.22.225.110/responses.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:53:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ff5d658fc78d345ed97b0c695ea6ec04feb14848ebe5de056f1c23cbdc9f80ff/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890818": [
        {
            "ioc_value": "213.165.50.109:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:52:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/29cf21b6dad5867728bef72db4a60059f430a65bb53da7b157a34ee63dfe40a7/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890819": [
        {
            "ioc_value": "213.165.50.109:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:52:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/29cf21b6dad5867728bef72db4a60059f430a65bb53da7b157a34ee63dfe40a7/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890816": [
        {
            "ioc_value": "guard7.barnfabric.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:48:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e66a19f3842dcd3b3b807dae122aae370d13d2753116495f34ef837ae8f56102/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890815": [
        {
            "ioc_value": "91.92.241.38:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 19:46:31",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890814": [
        {
            "ioc_value": "87.58.199.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-28 19:46:27",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890812": [
        {
            "ioc_value": "84.201.20.74:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:46:24",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890813": [
        {
            "ioc_value": "84.201.20.74:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:46:24",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890811": [
        {
            "ioc_value": "82.165.202.90:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:46:23",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890810": [
        {
            "ioc_value": "80.190.77.86:20700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 19:46:20",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890809": [
        {
            "ioc_value": "196.70.69.77:5001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 19:44:36",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890808": [
        {
            "ioc_value": "195.177.94.91:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:44:34",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890807": [
        {
            "ioc_value": "194.59.31.78:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-28 19:44:31",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890804": [
        {
            "ioc_value": "183.90.187.111:10888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:44:10",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890805": [
        {
            "ioc_value": "183.90.187.2:10888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:44:10",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890806": [
        {
            "ioc_value": "183.90.187.73:10888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:44:10",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890803": [
        {
            "ioc_value": "179.61.227.213:55004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:44:08",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890802": [
        {
            "ioc_value": "176.65.139.139:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 19:44:04",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890800": [
        {
            "ioc_value": "154.201.82.108:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:43:40",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890799": [
        {
            "ioc_value": "154.201.82.105:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890798": [
        {
            "ioc_value": "136.0.213.135:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890796": [
        {
            "ioc_value": "102.220.160.231:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890797": [
        {
            "ioc_value": "102.220.160.231:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890795": [
        {
            "ioc_value": "102.117.171.26:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:43:03",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890792": [
        {
            "ioc_value": "http://flreaow.click:6527/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 19:40:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890793": [
        {
            "ioc_value": "http://piarl.site:9048/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 19:40:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890794": [
        {
            "ioc_value": "http://gofkaxz.click:8137/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 19:40:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890733": [
        {
            "ioc_value": "sehulopo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890736": [
        {
            "ioc_value": "ubbaw78979.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890738": [
        {
            "ioc_value": "ziquli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890744": [
        {
            "ioc_value": "https://46.29.26.35",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 19:27:30",
            "last_seen_utc": "2026-09-01 03:38:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8e8e7920d1ac7f57735398887661bf8d,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890745": [
        {
            "ioc_value": "ardisj1944.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890750": [
        {
            "ioc_value": "fylehasy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890751": [
        {
            "ioc_value": "nyvivari.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890752": [
        {
            "ioc_value": "nevoduby.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890753": [
        {
            "ioc_value": "sululuty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890754": [
        {
            "ioc_value": "qemamefy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890757": [
        {
            "ioc_value": "pinkfat.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890755": [
        {
            "ioc_value": "f6zw6i5fdy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890760": [
        {
            "ioc_value": "https://nsn.12naga.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 19:27:25",
            "last_seen_utc": "2026-09-01 03:41:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "279244a0387f7d5a1b68137bd9768de8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890761": [
        {
            "ioc_value": "http://59.97.250.11:43040/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 19:27:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.97.250.11",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890762": [
        {
            "ioc_value": "http://91.234.62.215:57642/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 19:27:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.234.62.215",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890763": [
        {
            "ioc_value": "http://202.163.68.10:47266/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 19:27:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.163.68.10",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890764": [
        {
            "ioc_value": "http://153.117.40.227:53474/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 19:27:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.40.227",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890765": [
        {
            "ioc_value": "http://111.185.147.232:59432/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 19:27:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.185.147.232",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890767": [
        {
            "ioc_value": "3ppu1zomp8.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890778": [
        {
            "ioc_value": "jecahuma.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890781": [
        {
            "ioc_value": "https://185.229.225.31",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 19:27:20",
            "last_seen_utc": "2026-08-31 16:09:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,e53c0776fdba467447b61be1a2bc4027,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890788": [
        {
            "ioc_value": "lovuhali.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890789": [
        {
            "ioc_value": "vujusisu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890790": [
        {
            "ioc_value": "gelavy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890791": [
        {
            "ioc_value": "dntaa93064.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 19:27:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890787": [
        {
            "ioc_value": "157.20.182.21:1973",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 19:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890786": [
        {
            "ioc_value": "104.168.94.108:38006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 19:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890785": [
        {
            "ioc_value": "20.119.73.195:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 19:05:10",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890784": [
        {
            "ioc_value": "2.88.92.98:7547",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-28 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890783": [
        {
            "ioc_value": "137.220.151.95:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890782": [
        {
            "ioc_value": "bzfgqwnp.ronkarr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 19:00:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890780": [
        {
            "ioc_value": "ronkarr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:57:42",
            "last_seen_utc": "2026-08-28 18:58:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890779": [
        {
            "ioc_value": "www.formationcommerciale.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:54:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890775": [
        {
            "ioc_value": "smma.badrah-amd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:44:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890776": [
        {
            "ioc_value": "www.nostores.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:44:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890777": [
        {
            "ioc_value": "blume-bm.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:44:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890773": [
        {
            "ioc_value": "site-s2.etienne-hammel.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:44:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890774": [
        {
            "ioc_value": "www.almonaconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:44:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890771": [
        {
            "ioc_value": "http://nopxs.shop:8839/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 18:35:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890772": [
        {
            "ioc_value": "http://piarl.site:9048/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 18:35:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890770": [
        {
            "ioc_value": "http://uiccvbk.click:8839/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 18:35:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890769": [
        {
            "ioc_value": "pocket.sourcegenesis.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:34:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890768": [
        {
            "ioc_value": "getdsmtechboost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:29:20",
            "last_seen_utc": "2026-08-28 18:29:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890766": [
        {
            "ioc_value": "getdsmpros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:21:43",
            "last_seen_utc": "2026-08-28 18:22:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890759": [
        {
            "ioc_value": "c2qzm47m.dsm.li",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 18:00:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890758": [
        {
            "ioc_value": "dsm.li",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 17:57:22",
            "last_seen_utc": "2026-08-28 17:57:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890756": [
        {
            "ioc_value": "www.lankatraveltrails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 17:54:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890749": [
        {
            "ioc_value": "8fnn9rmz.gtsdirect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 17:07:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890747": [
        {
            "ioc_value": "http://flreaow.click:6527/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 17:06:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890748": [
        {
            "ioc_value": "http://piarl.site:9048/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 17:06:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890746": [
        {
            "ioc_value": "gtsdirect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 17:05:27",
            "last_seen_utc": "2026-08-28 21:35:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890743": [
        {
            "ioc_value": "rd41sui1.protectconn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 16:59:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890742": [
        {
            "ioc_value": "protectconn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 16:57:19",
            "last_seen_utc": "2026-08-28 16:57:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890741": [
        {
            "ioc_value": "randevau.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 16:54:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890740": [
        {
            "ioc_value": "http://cx288605.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 16:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890739": [
        {
            "ioc_value": "440c.en-us-theeloncod.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 16:40:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890737": [
        {
            "ioc_value": "141.98.10.129:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 16:25:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/683f89ca56d738dcb64308f07c3dcfd9d036126372cda6845914dba40f2e0c2b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890735": [
        {
            "ioc_value": "http://luwerae.click:7748/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 16:18:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1890734": [
        {
            "ioc_value": "http://piarl.site:9048/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 16:15:27",
            "last_seen_utc": "2026-08-29 11:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7b0d74d4ead227828f138f5488964bdc539f9bc2821aa450bca724227872becf/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890650": [
        {
            "ioc_value": "https://sss.fbdfsgfwrgerwefew.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-28 16:03:23",
            "last_seen_utc": "2026-09-01 03:18:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "123,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890730": [
        {
            "ioc_value": "a12e2897ab92927be491431c83e879cc83400e20cdd17f18c44e745354b0c175",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890731": [
        {
            "ioc_value": "6e1fc8c3b2fe30966191e52b90b1250a11f07a02",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890732": [
        {
            "ioc_value": "8e522ecc5c43c7b3ddfe0fd389efbbc7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890727": [
        {
            "ioc_value": "a8336d122352512323454e9fd24d9a7bcc096f793da23284a7301cbecda14a3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890728": [
        {
            "ioc_value": "17204bd9200bb6c98fb7432e3eab630e4b460c38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890729": [
        {
            "ioc_value": "817dccc481fd59fc79c76bb85fc77ae4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890726": [
        {
            "ioc_value": "8d06b638ca1acca4815076ae9fa3a4d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:40",
            "last_seen_utc": "2026-08-30 01:34:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890722": [
        {
            "ioc_value": "48f8443f9e087064822a30c3e2f6ea6b4a57c490",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:39",
            "last_seen_utc": "2026-08-30 01:34:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890723": [
        {
            "ioc_value": "0d0bb2656a73610b2695fc8f3db21723",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:39",
            "last_seen_utc": "2026-08-30 01:34:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890724": [
        {
            "ioc_value": "98fe10c077d59ab4a89dd551f76bba8ee220838f0c229498adb8471f50c65535",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:39",
            "last_seen_utc": "2026-08-30 01:34:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890725": [
        {
            "ioc_value": "b9213ac9ac3f11c1dde4ea678fef6795e09886f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:39",
            "last_seen_utc": "2026-08-30 01:34:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890721": [
        {
            "ioc_value": "712e7912a669a71a7006fd1a0333b5da45dbbc78672c46ae62e794fbc1372959",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:38",
            "last_seen_utc": "2026-08-30 01:34:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890718": [
        {
            "ioc_value": "3ee9badaa810b2fb6db57e4644ec40c58e8fe15c6980059a3232a374df5ba4a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 16:02:37",
            "last_seen_utc": "2026-08-30 01:34:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890719": [
        {
            "ioc_value": "b770903ba5c898d69db81dbafbd98f3eb32fc3fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 16:02:37",
            "last_seen_utc": "2026-08-30 01:34:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890720": [
        {
            "ioc_value": "4818c691ec402f0f2251f1a8d1d8a3b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 16:02:37",
            "last_seen_utc": "2026-08-30 01:34:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890715": [
        {
            "ioc_value": "105195dfdfbfdce7cf13f50d92bba761eba5bc22c31000109a67708f61474e12",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-28 16:02:35",
            "last_seen_utc": "2026-08-30 06:34:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890716": [
        {
            "ioc_value": "ba655e73a1c08143324ffeaf56b6f6bea0a134e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-28 16:02:35",
            "last_seen_utc": "2026-08-30 06:34:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890717": [
        {
            "ioc_value": "8be48ea27f6cd6b2ec2ef3be4977322d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-28 16:02:35",
            "last_seen_utc": "2026-08-30 06:34:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890713": [
        {
            "ioc_value": "4f6839725a41eee6426b1aeed61e7b27e40515d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-28 16:02:33",
            "last_seen_utc": "2026-08-30 06:34:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890714": [
        {
            "ioc_value": "6a4d5ab74aab4d6b8c24edb29d4b6d64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-28 16:02:33",
            "last_seen_utc": "2026-08-30 06:34:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890710": [
        {
            "ioc_value": "b07426979d61bbc20b209b88d2f6dd3f5cceb1ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-28 16:02:32",
            "last_seen_utc": "2026-08-30 06:34:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890711": [
        {
            "ioc_value": "57629b1f3807d324e3c51a340228fe5a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-28 16:02:32",
            "last_seen_utc": "2026-08-30 06:34:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890712": [
        {
            "ioc_value": "1738f890d5686b1c17b43166659643dde6ff57fc9ed4143dc9801ae331036273",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-28 16:02:32",
            "last_seen_utc": "2026-08-30 06:34:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890707": [
        {
            "ioc_value": "153d808ae3f57827a81024aa742ebbda96763f92",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:31",
            "last_seen_utc": "2026-08-30 06:34:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890708": [
        {
            "ioc_value": "133027a245bc3253038e082b5115a9dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:31",
            "last_seen_utc": "2026-08-30 06:34:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890709": [
        {
            "ioc_value": "f19ce246b09aec504d8cb547f9d3344e14a6ca898f8d88f2207ece0d74f0d3f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-28 16:02:31",
            "last_seen_utc": "2026-08-30 06:34:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890705": [
        {
            "ioc_value": "846f4ed47a679e24505470f61d9110db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 16:02:30",
            "last_seen_utc": "2026-08-30 06:34:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890706": [
        {
            "ioc_value": "0c8c4a99337505f79c05af524ef2c8ce810269a1896b9bd83bbd39454a618b8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:30",
            "last_seen_utc": "2026-08-30 06:34:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890701": [
        {
            "ioc_value": "92937973d50ddd6bff639bf35feb25b119f56edd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 16:02:29",
            "last_seen_utc": "2026-08-30 06:34:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890702": [
        {
            "ioc_value": "9fce0558dd8b2061c7a8baf0877d5384",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 16:02:29",
            "last_seen_utc": "2026-08-30 06:34:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890703": [
        {
            "ioc_value": "0bab062af7894bc44d68ebc5b9633a84ffaae1f17671ff3949002c43321ec86a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 16:02:29",
            "last_seen_utc": "2026-08-30 06:34:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890704": [
        {
            "ioc_value": "7be1989c25579401ac8638a889a1657d5182f7b8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 16:02:29",
            "last_seen_utc": "2026-08-30 06:34:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890698": [
        {
            "ioc_value": "5bfdc93f36ecf75b5be5590a48bdc58503c34fb0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 16:02:28",
            "last_seen_utc": "2026-08-30 06:34:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890699": [
        {
            "ioc_value": "2ca17777470b32e4e74b547e5f3f9306",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 16:02:28",
            "last_seen_utc": "2026-08-30 06:34:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890700": [
        {
            "ioc_value": "9b0e3f974dac0023599bb604b5b30e3e763c2d1d28ecff80d307ca73dc06243f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 16:02:28",
            "last_seen_utc": "2026-08-30 06:34:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890695": [
        {
            "ioc_value": "bcf32c802a7a27b2bfe6ea5e26b75091c8a76175",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 16:02:27",
            "last_seen_utc": "2026-08-30 06:34:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890696": [
        {
            "ioc_value": "4878d995e4e23c6961c91179e6e2c704",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 16:02:27",
            "last_seen_utc": "2026-08-30 06:34:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890697": [
        {
            "ioc_value": "f63eb2664ac9076250491b1cb0787042f75a056e235867d9f9967322c5cf20a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 16:02:27",
            "last_seen_utc": "2026-08-30 06:34:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890692": [
        {
            "ioc_value": "f4ecc1edd84194b94aceb5c3485b830081507508",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 16:02:26",
            "last_seen_utc": "2026-08-30 06:34:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890693": [
        {
            "ioc_value": "18054d12b0ba2dc0c9918f455ec86699",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 16:02:26",
            "last_seen_utc": "2026-08-30 06:34:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890694": [
        {
            "ioc_value": "5cb54c53e2169a23a815d87229b00c63d1d3c8c0d19e0f92b5e83bd231481419",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 16:02:26",
            "last_seen_utc": "2026-08-30 06:34:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890690": [
        {
            "ioc_value": "c5616af2cef3dcdb095d8cc55db75c96",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-28 16:02:25",
            "last_seen_utc": "2026-08-30 06:34:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890691": [
        {
            "ioc_value": "245f6e3f6750701d58c06bd96f4623c62942305fb32bcdc5a99bf367becaafd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 16:02:25",
            "last_seen_utc": "2026-08-30 06:34:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890686": [
        {
            "ioc_value": "3941abf37772bfdeefa1d8b8bc617f9e1ce4bd48",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-28 16:02:24",
            "last_seen_utc": "2026-08-30 06:34:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890687": [
        {
            "ioc_value": "801e7911d8ef33ab7843bb638c0b5abc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-28 16:02:24",
            "last_seen_utc": "2026-08-30 06:34:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890688": [
        {
            "ioc_value": "76e6367d8123171afa540fe92a3758424ec7d1e029c4e5a3b9771e24fe0085c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-28 16:02:24",
            "last_seen_utc": "2026-08-30 06:34:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890689": [
        {
            "ioc_value": "3c584320e4f7523645ed71d09321d2f5a476f103",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-28 16:02:24",
            "last_seen_utc": "2026-08-30 06:34:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890684": [
        {
            "ioc_value": "356484cecd7e391a8376ad70afa8f97a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:23",
            "last_seen_utc": "2026-08-30 06:34:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890685": [
        {
            "ioc_value": "c496e8e8f7cc2e40c515c9dbd98ffce43861acaf504466f478ceaebf712214b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-28 16:02:23",
            "last_seen_utc": "2026-08-30 06:34:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890681": [
        {
            "ioc_value": "bb65c6e1104854b87418a16fffd59230",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-28 16:02:22",
            "last_seen_utc": "2026-08-30 06:34:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890682": [
        {
            "ioc_value": "16168cc3b16d768beffaf0fd10f74f86f79da7a2c7ca26edd91c09c1c101811d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:22",
            "last_seen_utc": "2026-08-30 06:34:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890683": [
        {
            "ioc_value": "eaf41de301f2e71c912836fd1eac285043ee841f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:22",
            "last_seen_utc": "2026-08-30 06:34:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890678": [
        {
            "ioc_value": "98f00e36daaf4c4bae91031d4b53ea9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-28 16:02:21",
            "last_seen_utc": "2026-08-30 06:34:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890679": [
        {
            "ioc_value": "b926a44910e4f4d55c53fdc6d9cdbfb043059355d55fb3595a3434bd69b1e7e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-28 16:02:21",
            "last_seen_utc": "2026-08-30 06:34:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890680": [
        {
            "ioc_value": "32452cd6c337772b89c6a83dfd1c96ab7af565c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-28 16:02:21",
            "last_seen_utc": "2026-08-30 06:34:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890674": [
        {
            "ioc_value": "be6714ad8e992e7ef38c3d5c61edfb73259bb64b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-28 16:02:20",
            "last_seen_utc": "2026-08-30 06:34:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890675": [
        {
            "ioc_value": "bedeeefa188f9fea4f050848adcb3f0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-28 16:02:20",
            "last_seen_utc": "2026-08-30 06:34:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890676": [
        {
            "ioc_value": "46ced738ab9a9a37df3e36c6a8603742f26783f0be2fa845bdec10b5ddb50bfb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-28 16:02:20",
            "last_seen_utc": "2026-08-30 06:34:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890677": [
        {
            "ioc_value": "6c19930c2b6b2ec49b42399dcd8e477de347c010",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-28 16:02:20",
            "last_seen_utc": "2026-08-30 06:34:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890671": [
        {
            "ioc_value": "dd10660387c33c8be281991f55a03f0f1a683b62",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-28 16:02:19",
            "last_seen_utc": "2026-08-30 06:34:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890672": [
        {
            "ioc_value": "c44e30aa705a5d352079d63eaa1f3dce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-28 16:02:19",
            "last_seen_utc": "2026-08-30 06:34:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890673": [
        {
            "ioc_value": "a2fc3ab543e72decbea89ff3479cc9d813324bccccb291cba2536d95b0bdc64c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-28 16:02:19",
            "last_seen_utc": "2026-08-30 06:34:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890669": [
        {
            "ioc_value": "9c61f3f9e04f32f1d66edbf131ba9a6b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:18",
            "last_seen_utc": "2026-08-30 06:34:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890670": [
        {
            "ioc_value": "94a33fc48ecb504091be4ab6c64cb3b828ac0efe1c9449c8ee952774de38b44f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-28 16:02:18",
            "last_seen_utc": "2026-08-30 06:34:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890665": [
        {
            "ioc_value": "8f1d05b224256caed347c500259b721ac97d70fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:17",
            "last_seen_utc": "2026-08-30 06:34:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890666": [
        {
            "ioc_value": "13f0f22fab59d7475a4ff3d926b1de63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:17",
            "last_seen_utc": "2026-08-30 06:34:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890667": [
        {
            "ioc_value": "97fdbb5506534af805db9e23503d93439322650eeaba8132c2627d8a1b9c2dfb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:17",
            "last_seen_utc": "2026-08-30 06:34:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890668": [
        {
            "ioc_value": "8376ef7e11d99d7b14e2b5d2750fc0978dcf4a8a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:17",
            "last_seen_utc": "2026-08-30 06:34:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890662": [
        {
            "ioc_value": "dd0012a6ba2ffda25354d1a998178b9dce62a482",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-28 16:02:16",
            "last_seen_utc": "2026-09-01 01:41:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890663": [
        {
            "ioc_value": "ba2ff4a8b689fab54670cf87b4008528",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-28 16:02:16",
            "last_seen_utc": "2026-09-01 01:41:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890664": [
        {
            "ioc_value": "4f8f926c45e51aa51bea9f95d3e8f34a29bcdc9dec1d3ea40354e50bb69c986b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 16:02:16",
            "last_seen_utc": "2026-08-30 06:34:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890660": [
        {
            "ioc_value": "c7d899d6f7ccecb85c409767d8645906",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 16:02:15",
            "last_seen_utc": "2026-09-01 01:41:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890661": [
        {
            "ioc_value": "c40eac770e2bc5081175b782c4455d977ccff123571a73c3ab8c8c882db38b85",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-28 16:02:15",
            "last_seen_utc": "2026-09-01 01:41:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890658": [
        {
            "ioc_value": "656b90c4553ec077f0ff60bf35edee765dffa4d63d4e2148221f9ef1171bb437",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 16:02:14",
            "last_seen_utc": "2026-09-01 01:41:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890659": [
        {
            "ioc_value": "4cecb2462dfdbf0869cab54eef5de1d793c21c80",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 16:02:14",
            "last_seen_utc": "2026-09-01 01:41:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890655": [
        {
            "ioc_value": "b6296bad0fdf16df0811053e5c5cee71946d05e06222324e76dc26ec676ff976",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-28 16:02:13",
            "last_seen_utc": "2026-09-01 01:41:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890656": [
        {
            "ioc_value": "58376e7466c7ca80e9040d28a17d16800ff7d956",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-28 16:02:13",
            "last_seen_utc": "2026-09-01 01:41:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890657": [
        {
            "ioc_value": "579933376ffc365ca48eb14046655171",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-28 16:02:13",
            "last_seen_utc": "2026-09-01 01:41:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890653": [
        {
            "ioc_value": "da282e209c707c015745f578076f892cc10d3e24",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-28 16:02:12",
            "last_seen_utc": "2026-09-01 01:41:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890654": [
        {
            "ioc_value": "38588342e64c159b60e1530aef1081bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-28 16:02:12",
            "last_seen_utc": "2026-09-01 01:41:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890652": [
        {
            "ioc_value": "d47a793404c4bb0419c9ae1fda9847aa6a75a029e60ed65f05645dad9ee9573b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-28 16:02:11",
            "last_seen_utc": "2026-09-01 01:41:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1890651": [
        {
            "ioc_value": "96.9.226.22:9462",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 16:00:52",
            "last_seen_utc": "2026-09-01 00:12:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a4498a429e9b3efe12e2070e454449dc713253d15f0cb575057ca15993403cd4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890646": [
        {
            "ioc_value": "eyfykhxq7s.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 15:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890648": [
        {
            "ioc_value": "hwoxu80469.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 15:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890649": [
        {
            "ioc_value": "xumujepu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 15:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890647": [
        {
            "ioc_value": "45.141.148.134:2002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 15:48:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c65eb5b1fa5e4422e585065c360999934e9e77c48af91bdc386e157538b51e91/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890645": [
        {
            "ioc_value": "gluccotrust--bites.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 15:37:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890630": [
        {
            "ioc_value": "xigetybu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 15:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890637": [
        {
            "ioc_value": "vilefinu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 15:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890642": [
        {
            "ioc_value": "ksiyv72370.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 15:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890644": [
        {
            "ioc_value": "flowerpii9831.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 15:31:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890643": [
        {
            "ioc_value": "107.175.88.99:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 15:31:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/60ee5db996d425ec50145562c4db2c1bd4b4b210c82d8d4407e8515231f39fe5/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890641": [
        {
            "ioc_value": "147.45.71.191:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 15:14:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890640": [
        {
            "ioc_value": "158.94.208.87:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 15:14:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890639": [
        {
            "ioc_value": "sleepingpi81.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 15:13:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890638": [
        {
            "ioc_value": "117.72.182.5:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890636": [
        {
            "ioc_value": "5exp2qyk.neilkingpt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 14:58:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890635": [
        {
            "ioc_value": "neilkingpt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 14:57:04",
            "last_seen_utc": "2026-08-28 14:57:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890633": [
        {
            "ioc_value": "37.120.208.37:55184",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 14:49:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00ca6a255c24937d72d6dda2f813caee456df251b46d80ee197104c21c4a4f05/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890634": [
        {
            "ioc_value": "192.169.69.25:61845",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 14:49:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00ca6a255c24937d72d6dda2f813caee456df251b46d80ee197104c21c4a4f05/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890631": [
        {
            "ioc_value": "newpat4.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 14:48:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00ca6a255c24937d72d6dda2f813caee456df251b46d80ee197104c21c4a4f05/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890632": [
        {
            "ioc_value": "newpat4bk.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 14:48:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00ca6a255c24937d72d6dda2f813caee456df251b46d80ee197104c21c4a4f05/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890629": [
        {
            "ioc_value": "161.248.179.102:55858",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 14:40:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/26baa8f6fb6ba37bf23c08980f4ce1b75d647947d9667a1d4b1923bb2033788d/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890620": [
        {
            "ioc_value": "37.49.230.40:3778",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 14:38:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "elf,Mirai",
            "anonymous": 0,
            "reporter": "UnknownSilicon"
        }
    ],
    "1890621": [
        {
            "ioc_value": "xojuzutu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:38:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890622": [
        {
            "ioc_value": "hwxyg26754.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:38:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890625": [
        {
            "ioc_value": "preamp.givescash.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-28 14:38:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117173541281463676",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1890627": [
        {
            "ioc_value": "1p93cir9o1-1fb.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:38:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890628": [
        {
            "ioc_value": "pingcheck.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 14:38:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/lwhite3333/renpy-malware-incident-report",
            "tags": "anti-vm,loader,msbuild,renpy,stealer",
            "anonymous": 0,
            "reporter": "littlewhite2024"
        }
    ],
    "1890626": [
        {
            "ioc_value": "45.74.3.160:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-28 14:12:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6f913806a671ce683164c3ec00576e9df708193e4e7c07e01fa8481578c559a7/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890624": [
        {
            "ioc_value": "terrystoner4.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-08-28 14:08:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10b0cbae3f60f54ca4eb1010779215303173aafece334ba8d93bba96e474d668/",
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890623": [
        {
            "ioc_value": "64.112.85.232:5200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-08-28 14:08:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10b0cbae3f60f54ca4eb1010779215303173aafece334ba8d93bba96e474d668/",
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890618": [
        {
            "ioc_value": "49.233.202.218:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 14:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890619": [
        {
            "ioc_value": "82.157.204.4:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 14:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890616": [
        {
            "ioc_value": "8.163.98.217:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890617": [
        {
            "ioc_value": "49.232.241.195:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890615": [
        {
            "ioc_value": "34.24.127.255:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 14:05:05",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890614": [
        {
            "ioc_value": "ftp.gantelopex.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-28 14:04:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6588f77680610d19a44bf658d3c9ce1533384934678dd63839aa890d7ad49ea5/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890602": [
        {
            "ioc_value": "gunuqico.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890603": [
        {
            "ioc_value": "dsygw23836.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890605": [
        {
            "ioc_value": "c54q52tqaq.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890611": [
        {
            "ioc_value": "138.197.15.223:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 14:01:43",
            "last_seen_utc": "2026-08-29 01:38:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890613": [
        {
            "ioc_value": "lenekibe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 14:01:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890612": [
        {
            "ioc_value": "elchapopagodon.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 13:55:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/26baa8f6fb6ba37bf23c08980f4ce1b75d647947d9667a1d4b1923bb2033788d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890610": [
        {
            "ioc_value": "185.215.151.63:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-28 13:50:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3b741adf13f6e13c0ba7599ee63b1ae570882d7e1b69289710ccf8a604697ff0/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890607": [
        {
            "ioc_value": "mexicanpagoserver.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 13:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a9f6934d99774b64dde45d9aa62d65306dcd863f638cac7744348546ca09c35b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890608": [
        {
            "ioc_value": "subwaymoney.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 13:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b0ffa1dc2f5d85cbb734a0be8c310a4bd85427adc22a4cfadb2fa99795b3c276/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890609": [
        {
            "ioc_value": "subwaymoney.flashhub.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 13:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b0ffa1dc2f5d85cbb734a0be8c310a4bd85427adc22a4cfadb2fa99795b3c276/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890606": [
        {
            "ioc_value": "ftp.gaiadeqi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-28 13:46:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2f7d153658df033fc8f8ee7cf9614b15ae22dff6ddfd0481c7366cb5cbbb58f9/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890604": [
        {
            "ioc_value": "s7ou47jz.glprobloodsugar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 13:23:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890601": [
        {
            "ioc_value": "104.207.93.167:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 13:05:10",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890599": [
        {
            "ioc_value": "199.187.25.93:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890600": [
        {
            "ioc_value": "103.41.177.238:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 13:05:09",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890598": [
        {
            "ioc_value": "182.92.78.7:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890597": [
        {
            "ioc_value": "137.220.151.95:139",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889820": [
        {
            "ioc_value": "ivory795.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889821": [
        {
            "ioc_value": "lvghqbyqxc.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889823": [
        {
            "ioc_value": "nannette2680.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889824": [
        {
            "ioc_value": "hiryrita.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889835": [
        {
            "ioc_value": "lopuvoha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889837": [
        {
            "ioc_value": "64.81.30.192:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://tria.ge/260810-frgnkswvex",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1889839": [
        {
            "ioc_value": "192.252.180.45:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 13:04:05",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://tria.ge/260810-frgnkswvex",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1889847": [
        {
            "ioc_value": "pifilyxu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889841": [
        {
            "ioc_value": "185.169.52.99:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 13:04:03",
            "last_seen_utc": "2026-08-31 23:18:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889843": [
        {
            "ioc_value": "gorolefo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889850": [
        {
            "ioc_value": "huhonuvi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889855": [
        {
            "ioc_value": "laniepeach.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889856": [
        {
            "ioc_value": "qasuruqo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889857": [
        {
            "ioc_value": "n0nqpfgnfw.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:04:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889858": [
        {
            "ioc_value": "healthy47.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889877": [
        {
            "ioc_value": "5drmy94sr3.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889880": [
        {
            "ioc_value": "tumosybo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889881": [
        {
            "ioc_value": "rydilave.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889887": [
        {
            "ioc_value": "gekgy02975.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889888": [
        {
            "ioc_value": "112.74.42.150:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:57",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889889": [
        {
            "ioc_value": "186.209.77.237:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:56",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889890": [
        {
            "ioc_value": "164.90.236.107:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:56",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889891": [
        {
            "ioc_value": "87.251.66.91:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:55",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889892": [
        {
            "ioc_value": "103.176.64.36:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:55",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889893": [
        {
            "ioc_value": "152.228.135.87:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:55",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889894": [
        {
            "ioc_value": "206.42.5.12:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:54",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889895": [
        {
            "ioc_value": "145.239.85.111:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:53",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889896": [
        {
            "ioc_value": "45.17.39.120:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:50",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889897": [
        {
            "ioc_value": "80.15.193.156:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:50",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889898": [
        {
            "ioc_value": "194.36.85.31:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:49",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889899": [
        {
            "ioc_value": "43.129.53.19:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:49",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889900": [
        {
            "ioc_value": "197.140.9.148:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:48",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889901": [
        {
            "ioc_value": "106.13.46.38:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-28 13:03:48",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": true,
            "reference": null,
            "tags": "mdrfckr,outlaw,ssh-bruteforce,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1890184": [
        {
            "ioc_value": "qutaqo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890494": [
        {
            "ioc_value": "ejiyz9yc6l.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890495": [
        {
            "ioc_value": "cifytaze.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890500": [
        {
            "ioc_value": "fan.afghankabobgrill.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 13:03:45",
            "last_seen_utc": "2026-08-28 11:16:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1890502": [
        {
            "ioc_value": "qelaxona.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890503": [
        {
            "ioc_value": "172.111.163.164:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 13:03:44",
            "last_seen_utc": "2026-08-30 10:12:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Crypters&tools,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890555": [
        {
            "ioc_value": "h5gdhbptwz.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890504": [
        {
            "ioc_value": "soqef09204.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890565": [
        {
            "ioc_value": "209.97.138.100:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 13:03:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1890566": [
        {
            "ioc_value": "http://175.107.38.23:49747/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 13:03:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.38.23",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890567": [
        {
            "ioc_value": "http://43.230.94.184:39786/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 13:03:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/43.230.94.184",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1890569": [
        {
            "ioc_value": "xuhojesi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890570": [
        {
            "ioc_value": "barbie337.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890571": [
        {
            "ioc_value": "nknzr01387.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890591": [
        {
            "ioc_value": "vuqena.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 13:03:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1890596": [
        {
            "ioc_value": "wn0nofms.dsmlabs.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 12:59:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890595": [
        {
            "ioc_value": "lpqzx6iv.lepto--zan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 12:59:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890594": [
        {
            "ioc_value": "yl9wom1c.en-trump-token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 12:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890593": [
        {
            "ioc_value": "dsmlabs.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 12:56:46",
            "last_seen_utc": "2026-08-28 12:57:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890592": [
        {
            "ioc_value": "home-power-shield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 12:56:23",
            "last_seen_utc": "2026-08-31 05:34:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1890585": [
        {
            "ioc_value": "nreearts.com.bd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890586": [
        {
            "ioc_value": "primekitsbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890587": [
        {
            "ioc_value": "rainsounds.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890588": [
        {
            "ioc_value": "sunrisegolf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890589": [
        {
            "ioc_value": "www.pnstexas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890590": [
        {
            "ioc_value": "www.xtecnic.cat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890575": [
        {
            "ioc_value": "brandvistaconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890576": [
        {
            "ioc_value": "cppgs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890577": [
        {
            "ioc_value": "digitaldeepworks.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890578": [
        {
            "ioc_value": "glowingbeaulty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890579": [
        {
            "ioc_value": "gpmobile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890580": [
        {
            "ioc_value": "janabrik-elixir.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890581": [
        {
            "ioc_value": "jordantrainingacademy.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890582": [
        {
            "ioc_value": "linhanhdang.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890583": [
        {
            "ioc_value": "multi-sweep.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890584": [
        {
            "ioc_value": "nkitservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890572": [
        {
            "ioc_value": "alkoseal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890573": [
        {
            "ioc_value": "approvalengenharia.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890574": [
        {
            "ioc_value": "balimesariholiday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:37:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890568": [
        {
            "ioc_value": "sleepingpi81.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 12:20:03",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890563": [
        {
            "ioc_value": "file-download21.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-28 12:10:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890564": [
        {
            "ioc_value": "file-download21.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-28 12:10:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890561": [
        {
            "ioc_value": "13.220.213.63:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-28 12:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890562": [
        {
            "ioc_value": "13.220.213.63:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-28 12:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890560": [
        {
            "ioc_value": "13.220.213.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-28 12:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890559": [
        {
            "ioc_value": "192.229.96.31:9100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 12:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890558": [
        {
            "ioc_value": "169.239.128.75:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890557": [
        {
            "ioc_value": "https://proxy.goglehandaz.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-28 11:55:29",
            "last_seen_utc": "2026-09-01 03:05:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9c927df9fdd83af1b57810daa6cc7712a238d31a860bb8d33c6dacb03f53584d/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890556": [
        {
            "ioc_value": "162.251.92.64:18888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 11:47:52",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1890554": [
        {
            "ioc_value": "www.rashidcocement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:45:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890553": [
        {
            "ioc_value": "www.cbcnt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:44:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890552": [
        {
            "ioc_value": "www.arasaydinlatma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:44:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890550": [
        {
            "ioc_value": "vayoglobalcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:44:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890551": [
        {
            "ioc_value": "visaprod.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:44:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890549": [
        {
            "ioc_value": "triathletenews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890547": [
        {
            "ioc_value": "probaski.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890548": [
        {
            "ioc_value": "rccggracecityomole.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890546": [
        {
            "ioc_value": "perraloca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890544": [
        {
            "ioc_value": "nationnews18.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890545": [
        {
            "ioc_value": "neracompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890540": [
        {
            "ioc_value": "mercedesestilista.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890541": [
        {
            "ioc_value": "mgenergia.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890542": [
        {
            "ioc_value": "moedjito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890543": [
        {
            "ioc_value": "morocstay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:43:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890538": [
        {
            "ioc_value": "mauricioe90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890539": [
        {
            "ioc_value": "mayadesigner.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890536": [
        {
            "ioc_value": "kmsdrylining.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890537": [
        {
            "ioc_value": "llsdispatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890535": [
        {
            "ioc_value": "kalamutech.co.tz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:42:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890534": [
        {
            "ioc_value": "fortiusmedical.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:42:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890530": [
        {
            "ioc_value": "duffinarchitecturalsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890531": [
        {
            "ioc_value": "dyshatilo.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890532": [
        {
            "ioc_value": "egasyasociados.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890533": [
        {
            "ioc_value": "erymemanagement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890529": [
        {
            "ioc_value": "day2dayplastic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890527": [
        {
            "ioc_value": "centrovirginia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890528": [
        {
            "ioc_value": "conversationswithhumanity.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890526": [
        {
            "ioc_value": "bootcapecoral.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890524": [
        {
            "ioc_value": "arkanbolt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890525": [
        {
            "ioc_value": "beopvcstolarija.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890521": [
        {
            "ioc_value": "99kz.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890522": [
        {
            "ioc_value": "administravirtual.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890523": [
        {
            "ioc_value": "alsafvi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890518": [
        {
            "ioc_value": "soilnopi1122.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:21",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890519": [
        {
            "ioc_value": "trokny23.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890520": [
        {
            "ioc_value": "trombler312.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890511": [
        {
            "ioc_value": "minutes59.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890512": [
        {
            "ioc_value": "nonapi912.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890513": [
        {
            "ioc_value": "ornikol232.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890514": [
        {
            "ioc_value": "passeofum32.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890515": [
        {
            "ioc_value": "robbywoj321.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890516": [
        {
            "ioc_value": "rolandypo98.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890517": [
        {
            "ioc_value": "saymto9213.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890506": [
        {
            "ioc_value": "buildingpi81.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:19",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890507": [
        {
            "ioc_value": "datapointly.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890508": [
        {
            "ioc_value": "desigino932.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:19",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890509": [
        {
            "ioc_value": "desigions9812.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890510": [
        {
            "ioc_value": "girlsonpi823.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890505": [
        {
            "ioc_value": "beautiful213.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:40:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890501": [
        {
            "ioc_value": "fan.afghankabobgrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 11:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1890499": [
        {
            "ioc_value": "144.48.124.92:18111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 11:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890497": [
        {
            "ioc_value": "144.48.124.92:1100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890498": [
        {
            "ioc_value": "144.48.124.92:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890496": [
        {
            "ioc_value": "1.13.251.23:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1890493": [
        {
            "ioc_value": "zupee.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890486": [
        {
            "ioc_value": "yonodigona.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890487": [
        {
            "ioc_value": "yoonhoum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890488": [
        {
            "ioc_value": "youdecidetravelguide.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890489": [
        {
            "ioc_value": "yoursecureportal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890490": [
        {
            "ioc_value": "zarazya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890491": [
        {
            "ioc_value": "zeuspos.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890492": [
        {
            "ioc_value": "zomaq.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890478": [
        {
            "ioc_value": "xn--80abmip8a9h.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890479": [
        {
            "ioc_value": "xrockutah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890480": [
        {
            "ioc_value": "yane-stock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890481": [
        {
            "ioc_value": "yas.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890482": [
        {
            "ioc_value": "yavizing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890483": [
        {
            "ioc_value": "yichaa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890484": [
        {
            "ioc_value": "yma-law.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890485": [
        {
            "ioc_value": "yogaschule-ayurvedayoga.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:56:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890474": [
        {
            "ioc_value": "worldfarms.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890475": [
        {
            "ioc_value": "xclusivewrapsandtint.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890476": [
        {
            "ioc_value": "xeghepvinhphuc247.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890477": [
        {
            "ioc_value": "xiwisdom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890467": [
        {
            "ioc_value": "whatitsliketo.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890468": [
        {
            "ioc_value": "willhall.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890469": [
        {
            "ioc_value": "windrivertimberframes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890470": [
        {
            "ioc_value": "wispro-titanium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890471": [
        {
            "ioc_value": "wom-recrutement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890472": [
        {
            "ioc_value": "workshopyemen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890473": [
        {
            "ioc_value": "workwithbillconnelly.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890460": [
        {
            "ioc_value": "wageandhourfirm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890461": [
        {
            "ioc_value": "warmilitaria.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890462": [
        {
            "ioc_value": "waterly.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890463": [
        {
            "ioc_value": "weber-weber-communications.mwbsc.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890464": [
        {
            "ioc_value": "weinavenue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890465": [
        {
            "ioc_value": "weldingagent.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890466": [
        {
            "ioc_value": "wesolvemarketing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890455": [
        {
            "ioc_value": "viphomedesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890456": [
        {
            "ioc_value": "visitcastelsaraceno.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890457": [
        {
            "ioc_value": "vivaschool.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890458": [
        {
            "ioc_value": "voicesystems.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890459": [
        {
            "ioc_value": "vysoka-bd.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890446": [
        {
            "ioc_value": "veeble.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890447": [
        {
            "ioc_value": "verlago.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890448": [
        {
            "ioc_value": "vespapizza.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890449": [
        {
            "ioc_value": "vethvordan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890450": [
        {
            "ioc_value": "vhncare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890451": [
        {
            "ioc_value": "viacatravel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890452": [
        {
            "ioc_value": "viadavid.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890453": [
        {
            "ioc_value": "viaexperience.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890454": [
        {
            "ioc_value": "vinsidan.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890436": [
        {
            "ioc_value": "uneautreattitude.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890437": [
        {
            "ioc_value": "unicascomotu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890438": [
        {
            "ioc_value": "unleashed.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890439": [
        {
            "ioc_value": "upf-shop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890440": [
        {
            "ioc_value": "urban-ks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890441": [
        {
            "ioc_value": "uwebbztechnology.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890442": [
        {
            "ioc_value": "vaips.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890443": [
        {
            "ioc_value": "valedinossauros.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890444": [
        {
            "ioc_value": "vandengaart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890445": [
        {
            "ioc_value": "vapestoreau.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890430": [
        {
            "ioc_value": "tsnv.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890431": [
        {
            "ioc_value": "tungkechuyencuoi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890432": [
        {
            "ioc_value": "turkishindirim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890433": [
        {
            "ioc_value": "ufabetufabet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890434": [
        {
            "ioc_value": "umen.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890435": [
        {
            "ioc_value": "unddsglobalco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890424": [
        {
            "ioc_value": "tosanstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890425": [
        {
            "ioc_value": "tpronails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890426": [
        {
            "ioc_value": "tracktec.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890427": [
        {
            "ioc_value": "transparenz-radar.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890428": [
        {
            "ioc_value": "trenchsniper.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890429": [
        {
            "ioc_value": "trendigtjustnu.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890419": [
        {
            "ioc_value": "thethinkubator.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890420": [
        {
            "ioc_value": "tjbowden.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890421": [
        {
            "ioc_value": "toddlermealideas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890422": [
        {
            "ioc_value": "tommyrobitaille.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890423": [
        {
            "ioc_value": "topshelfexperts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890412": [
        {
            "ioc_value": "th-gw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890413": [
        {
            "ioc_value": "thebraslavskys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890414": [
        {
            "ioc_value": "thehomestore-parsons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890415": [
        {
            "ioc_value": "thelastreformation.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890416": [
        {
            "ioc_value": "thepremere.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890417": [
        {
            "ioc_value": "theresewalsh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890418": [
        {
            "ioc_value": "thermomixbrasil.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890407": [
        {
            "ioc_value": "telusnetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890408": [
        {
            "ioc_value": "tempesolarpark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890409": [
        {
            "ioc_value": "tenagatambah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890410": [
        {
            "ioc_value": "tenderdocumentary.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890411": [
        {
            "ioc_value": "tereza.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890404": [
        {
            "ioc_value": "techarea.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890405": [
        {
            "ioc_value": "teiftabar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890406": [
        {
            "ioc_value": "teknoparts.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890397": [
        {
            "ioc_value": "swifteconline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890398": [
        {
            "ioc_value": "szarpakizpazurem.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890399": [
        {
            "ioc_value": "szrqchem.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890400": [
        {
            "ioc_value": "tagmars.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890401": [
        {
            "ioc_value": "taran.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890402": [
        {
            "ioc_value": "taynamtravel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890403": [
        {
            "ioc_value": "teachinginthefastlane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890390": [
        {
            "ioc_value": "stratoscompliance.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890391": [
        {
            "ioc_value": "studio-otherwise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890392": [
        {
            "ioc_value": "sues.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890393": [
        {
            "ioc_value": "sundp-gmbh.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890394": [
        {
            "ioc_value": "sunna.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890395": [
        {
            "ioc_value": "sunstonecos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890396": [
        {
            "ioc_value": "surma.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890383": [
        {
            "ioc_value": "speciallearningcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890384": [
        {
            "ioc_value": "spitiko-sandwich.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890385": [
        {
            "ioc_value": "sportizenmagazine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890386": [
        {
            "ioc_value": "sprinklerprollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890387": [
        {
            "ioc_value": "sqprom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890388": [
        {
            "ioc_value": "stellartrail.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890389": [
        {
            "ioc_value": "stiembi.ac.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890374": [
        {
            "ioc_value": "smilegroup.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890375": [
        {
            "ioc_value": "snowdog.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890376": [
        {
            "ioc_value": "soccer-science.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890377": [
        {
            "ioc_value": "sodastrream.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890378": [
        {
            "ioc_value": "soldebarros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890379": [
        {
            "ioc_value": "solmassegur.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890380": [
        {
            "ioc_value": "somoslittle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890381": [
        {
            "ioc_value": "sotelproperties.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890382": [
        {
            "ioc_value": "spalinhda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890365": [
        {
            "ioc_value": "sinoindogrup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890366": [
        {
            "ioc_value": "siteworks.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890367": [
        {
            "ioc_value": "sitpchem.pulawy.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890368": [
        {
            "ioc_value": "siyuyangpiano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890369": [
        {
            "ioc_value": "skeetermums.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890370": [
        {
            "ioc_value": "smallandruralservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890371": [
        {
            "ioc_value": "smartpulso.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890372": [
        {
            "ioc_value": "smartudl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890373": [
        {
            "ioc_value": "smefrontierpartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890359": [
        {
            "ioc_value": "seland-service.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890360": [
        {
            "ioc_value": "selinmilano.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890361": [
        {
            "ioc_value": "seoformedical.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890362": [
        {
            "ioc_value": "sergiolosada.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890363": [
        {
            "ioc_value": "serhasperu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890364": [
        {
            "ioc_value": "sigloverde.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890353": [
        {
            "ioc_value": "sarzaminekeravat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890354": [
        {
            "ioc_value": "satz-zeichen.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890355": [
        {
            "ioc_value": "savoryandyum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890356": [
        {
            "ioc_value": "savvyprint.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890357": [
        {
            "ioc_value": "seeds.school",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890358": [
        {
            "ioc_value": "segnalaillecito.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890347": [
        {
            "ioc_value": "safirdoor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890348": [
        {
            "ioc_value": "sahko-team.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890349": [
        {
            "ioc_value": "saidadance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890350": [
        {
            "ioc_value": "sailingspaghettiandsax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890351": [
        {
            "ioc_value": "sakaryappfkaplama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890352": [
        {
            "ioc_value": "sanatancable.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890346": [
        {
            "ioc_value": "ruzafanoche.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:54:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890341": [
        {
            "ioc_value": "ronmeyersproductions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890342": [
        {
            "ioc_value": "rosiepringle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890343": [
        {
            "ioc_value": "roxclocks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890344": [
        {
            "ioc_value": "rumak.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:32",
            "last_seen_utc": "2026-08-28 11:58:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890345": [
        {
            "ioc_value": "rurate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890333": [
        {
            "ioc_value": "richardtoledanorealtor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890334": [
        {
            "ioc_value": "riofriorestauracion.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890335": [
        {
            "ioc_value": "ritskinna.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890336": [
        {
            "ioc_value": "rjnelsonco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890337": [
        {
            "ioc_value": "robertoscaramelli.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890338": [
        {
            "ioc_value": "robkoenraads.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890339": [
        {
            "ioc_value": "rohrfrei-taunus.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890340": [
        {
            "ioc_value": "rolmansanat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890324": [
        {
            "ioc_value": "re-cycle-on.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890325": [
        {
            "ioc_value": "redony-satoraljaujhely.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890326": [
        {
            "ioc_value": "redsuninks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890327": [
        {
            "ioc_value": "renewsolutions.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890328": [
        {
            "ioc_value": "rentree.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890329": [
        {
            "ioc_value": "responsabilidadciudadanaglobal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890330": [
        {
            "ioc_value": "restoration.cool",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890331": [
        {
            "ioc_value": "retinar.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890332": [
        {
            "ioc_value": "revampsas.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890316": [
        {
            "ioc_value": "radiospijkenisse.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890317": [
        {
            "ioc_value": "rahsiadalaman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890318": [
        {
            "ioc_value": "raitti181.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890319": [
        {
            "ioc_value": "rapidprintsolutions.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890320": [
        {
            "ioc_value": "rapifyapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890321": [
        {
            "ioc_value": "rayzelsrecipes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890322": [
        {
            "ioc_value": "rbelangerconsultant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890323": [
        {
            "ioc_value": "rcsts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890307": [
        {
            "ioc_value": "procarelabour.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890308": [
        {
            "ioc_value": "prokol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890309": [
        {
            "ioc_value": "propertyforsale.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890310": [
        {
            "ioc_value": "protection-sea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890311": [
        {
            "ioc_value": "protrain.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890312": [
        {
            "ioc_value": "ptpahang.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890313": [
        {
            "ioc_value": "public.liveaboardhub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": "2026-08-28 14:52:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890314": [
        {
            "ioc_value": "pyhajarvi-instituutti.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890315": [
        {
            "ioc_value": "qualificar.ec",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890299": [
        {
            "ioc_value": "polarlotto.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890300": [
        {
            "ioc_value": "populorum.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890301": [
        {
            "ioc_value": "portoinmobiliaria.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890302": [
        {
            "ioc_value": "posetbaski.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890303": [
        {
            "ioc_value": "postagazete.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890304": [
        {
            "ioc_value": "power-veg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890305": [
        {
            "ioc_value": "praxis.tw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890306": [
        {
            "ioc_value": "praxisdrwichmann.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890291": [
        {
            "ioc_value": "philokalia.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890292": [
        {
            "ioc_value": "phukiencuariko.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890293": [
        {
            "ioc_value": "phuongdaquy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890294": [
        {
            "ioc_value": "physiotherapiepraxis-inbalance.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890295": [
        {
            "ioc_value": "plantillasdeportivas.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890296": [
        {
            "ioc_value": "playzall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890297": [
        {
            "ioc_value": "pmlat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890298": [
        {
            "ioc_value": "podnikatelskecentrum.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890283": [
        {
            "ioc_value": "parkourliike.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890284": [
        {
            "ioc_value": "patientblissagency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890285": [
        {
            "ioc_value": "pauladeegan.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890286": [
        {
            "ioc_value": "paulleitzke.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890287": [
        {
            "ioc_value": "pavellavicka.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890288": [
        {
            "ioc_value": "peanutspeanuts.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890289": [
        {
            "ioc_value": "pecowater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890290": [
        {
            "ioc_value": "personalizarapido.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890274": [
        {
            "ioc_value": "outfittermarketinggroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890275": [
        {
            "ioc_value": "overheaddoorcouncilbluffs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890276": [
        {
            "ioc_value": "ozkancankaya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890277": [
        {
            "ioc_value": "pachattar.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890278": [
        {
            "ioc_value": "paideia.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890279": [
        {
            "ioc_value": "palkirestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890280": [
        {
            "ioc_value": "palmexpressonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890281": [
        {
            "ioc_value": "panoramicsunset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890282": [
        {
            "ioc_value": "papirusplus.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890264": [
        {
            "ioc_value": "nystad.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890265": [
        {
            "ioc_value": "o-mad.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890266": [
        {
            "ioc_value": "odsfurniture.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890267": [
        {
            "ioc_value": "oedipus1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890268": [
        {
            "ioc_value": "oenehiemstra.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890269": [
        {
            "ioc_value": "oldageneedhelp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890270": [
        {
            "ioc_value": "omniasolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890271": [
        {
            "ioc_value": "openreading.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890272": [
        {
            "ioc_value": "opticareal.ec",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890273": [
        {
            "ioc_value": "orodizio.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890261": [
        {
            "ioc_value": "nsn.ac.th",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890262": [
        {
            "ioc_value": "nuimincoffee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890263": [
        {
            "ioc_value": "nuvionhomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:53:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890254": [
        {
            "ioc_value": "nmas.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890255": [
        {
            "ioc_value": "noiseastronaut.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890256": [
        {
            "ioc_value": "noithathoangphuc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890257": [
        {
            "ioc_value": "notar-pfennig.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890258": [
        {
            "ioc_value": "novacept.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890259": [
        {
            "ioc_value": "novawest.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890260": [
        {
            "ioc_value": "novitskiy.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890242": [
        {
            "ioc_value": "neurosciencecoachingcentre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890243": [
        {
            "ioc_value": "newknow.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890244": [
        {
            "ioc_value": "newsamapa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890245": [
        {
            "ioc_value": "newspostbd24.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890246": [
        {
            "ioc_value": "newssun24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890247": [
        {
            "ioc_value": "nexfinance.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890248": [
        {
            "ioc_value": "nextareas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890249": [
        {
            "ioc_value": "nguyencanhkhanh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890250": [
        {
            "ioc_value": "nhathepdaithanh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890251": [
        {
            "ioc_value": "nhudinhmanhvn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890252": [
        {
            "ioc_value": "nickmaiyo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890253": [
        {
            "ioc_value": "nieruchomosci-w-bankowosci.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890232": [
        {
            "ioc_value": "myrtlebeachfamilymedicine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890233": [
        {
            "ioc_value": "mytab.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": "2026-08-28 11:38:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890234": [
        {
            "ioc_value": "naralogics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890235": [
        {
            "ioc_value": "nastashenko.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890236": [
        {
            "ioc_value": "natl-safety.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890237": [
        {
            "ioc_value": "naturalne.prastara.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890238": [
        {
            "ioc_value": "nauanluudong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890239": [
        {
            "ioc_value": "nayabharat.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890240": [
        {
            "ioc_value": "neilsonrecruitment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890241": [
        {
            "ioc_value": "nerd-journey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890222": [
        {
            "ioc_value": "mt-trade-mark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890223": [
        {
            "ioc_value": "multiservicioscostablanca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890224": [
        {
            "ioc_value": "munichosica.pe",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890225": [
        {
            "ioc_value": "murgrafik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890226": [
        {
            "ioc_value": "musikakademie-obergrafschaft.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890227": [
        {
            "ioc_value": "musun-de-hiraite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890228": [
        {
            "ioc_value": "mvbabes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890229": [
        {
            "ioc_value": "mx-schmaelzle.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890230": [
        {
            "ioc_value": "mycryptoption.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890231": [
        {
            "ioc_value": "mygene.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890213": [
        {
            "ioc_value": "mkfolkvang.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": "2026-08-28 14:42:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890214": [
        {
            "ioc_value": "mobiefix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": "2026-08-28 14:32:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890215": [
        {
            "ioc_value": "mobilefarzad.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890216": [
        {
            "ioc_value": "mojcatering.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890217": [
        {
            "ioc_value": "mon-poele-a-granule.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890218": [
        {
            "ioc_value": "monrua.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890219": [
        {
            "ioc_value": "moroccoanimalaid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890220": [
        {
            "ioc_value": "mossshowstables.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890221": [
        {
            "ioc_value": "mp-project.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890206": [
        {
            "ioc_value": "miettruckcenter.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": "2026-08-28 15:02:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890207": [
        {
            "ioc_value": "milosherrymedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": "2026-08-28 14:52:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890208": [
        {
            "ioc_value": "mini-big-love.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890209": [
        {
            "ioc_value": "mirzaeegroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890210": [
        {
            "ioc_value": "miskin.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890211": [
        {
            "ioc_value": "mispapeleshoy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": "2026-08-28 15:02:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890212": [
        {
            "ioc_value": "mixatractors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890199": [
        {
            "ioc_value": "matthees-landschaftsbau.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": "2026-08-28 14:52:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890200": [
        {
            "ioc_value": "mdnews.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": "2026-08-28 14:42:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890201": [
        {
            "ioc_value": "medgulf.com.jo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": "2026-08-28 11:28:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890202": [
        {
            "ioc_value": "medicusmanagement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890203": [
        {
            "ioc_value": "mercaa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": "2026-08-28 14:42:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890204": [
        {
            "ioc_value": "mfmglasgow.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890205": [
        {
            "ioc_value": "midstrom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890193": [
        {
            "ioc_value": "mafndn.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:19",
            "last_seen_utc": "2026-08-28 14:52:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890194": [
        {
            "ioc_value": "manufacturingcelebritybook.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:19",
            "last_seen_utc": "2026-08-28 14:42:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890195": [
        {
            "ioc_value": "martinsevcovic.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:19",
            "last_seen_utc": "2026-08-28 14:42:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890196": [
        {
            "ioc_value": "mashhadpump.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890197": [
        {
            "ioc_value": "mathai.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890198": [
        {
            "ioc_value": "matteblacklatte.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:19",
            "last_seen_utc": "2026-08-28 14:32:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890186": [
        {
            "ioc_value": "localcaterings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": "2026-08-28 14:52:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890187": [
        {
            "ioc_value": "loftinterieur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": "2026-08-28 14:32:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890188": [
        {
            "ioc_value": "logmanstechniek.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": "2026-08-28 15:02:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890189": [
        {
            "ioc_value": "lolosport.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": "2026-08-28 15:02:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890190": [
        {
            "ioc_value": "lujosarani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": "2026-08-28 14:52:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890191": [
        {
            "ioc_value": "lussorywines.al",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890192": [
        {
            "ioc_value": "maantieteenopiskelijat.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890185": [
        {
            "ioc_value": "lillyreid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:52:17",
            "last_seen_utc": "2026-08-28 14:52:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890183": [
        {
            "ioc_value": "lepontdumas-camping.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:21",
            "last_seen_utc": "2026-08-28 15:02:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890171": [
        {
            "ioc_value": "laescuelita.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 13:42:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890172": [
        {
            "ioc_value": "lager-mieten.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 14:12:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890173": [
        {
            "ioc_value": "lashgoleor.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 14:12:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890174": [
        {
            "ioc_value": "latvian.rocks",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 13:42:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890175": [
        {
            "ioc_value": "laurastanszus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 14:02:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890176": [
        {
            "ioc_value": "laut-und-deutlich.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 13:42:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890177": [
        {
            "ioc_value": "lavaresorts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 13:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890178": [
        {
            "ioc_value": "lctsoftware.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 13:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890179": [
        {
            "ioc_value": "leatherhero.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 14:12:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890180": [
        {
            "ioc_value": "legalrelieftrust.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": "2026-08-28 15:02:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890181": [
        {
            "ioc_value": "legend1st.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890182": [
        {
            "ioc_value": "leimio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890163": [
        {
            "ioc_value": "konoba-mondo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 14:02:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890164": [
        {
            "ioc_value": "kooktijdschrift.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 14:02:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890165": [
        {
            "ioc_value": "korkmazland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 14:12:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890166": [
        {
            "ioc_value": "kovacompetitions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 14:12:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890167": [
        {
            "ioc_value": "kul3dinteriors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 14:22:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890168": [
        {
            "ioc_value": "kunnskaping.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 13:42:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890169": [
        {
            "ioc_value": "kycraftfactory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 14:02:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890170": [
        {
            "ioc_value": "labellacosa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:19",
            "last_seen_utc": "2026-08-28 13:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890155": [
        {
            "ioc_value": "kexmi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 14:22:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890156": [
        {
            "ioc_value": "keybaraustin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 13:42:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890157": [
        {
            "ioc_value": "keystonelv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 13:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890158": [
        {
            "ioc_value": "khalijfarsmobl.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890159": [
        {
            "ioc_value": "kidcharactersforparties.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 14:02:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890160": [
        {
            "ioc_value": "kindercoaching-reutlingen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 13:42:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890161": [
        {
            "ioc_value": "kipax.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 14:12:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890162": [
        {
            "ioc_value": "kits4mortgage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:18",
            "last_seen_utc": "2026-08-28 14:02:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890147": [
        {
            "ioc_value": "jtpartners.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": "2026-08-28 14:12:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890148": [
        {
            "ioc_value": "juliashea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890149": [
        {
            "ioc_value": "jxedf.org.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890150": [
        {
            "ioc_value": "kajataari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": "2026-08-28 13:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890151": [
        {
            "ioc_value": "kalitess.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": "2026-08-28 14:22:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890152": [
        {
            "ioc_value": "kamilpartyka.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": "2026-08-28 13:42:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890153": [
        {
            "ioc_value": "kateswanson.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": "2026-08-28 13:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890154": [
        {
            "ioc_value": "keravanpesis.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:17",
            "last_seen_utc": "2026-08-28 14:22:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890136": [
        {
            "ioc_value": "jenndavid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 12:29:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890137": [
        {
            "ioc_value": "jmainhardt.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 13:07:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890138": [
        {
            "ioc_value": "jobauf.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 12:39:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890139": [
        {
            "ioc_value": "johnbarrita.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 12:18:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890140": [
        {
            "ioc_value": "johnmajorarchive.org.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890141": [
        {
            "ioc_value": "jorgebravo.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 12:29:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890142": [
        {
            "ioc_value": "jornalfolhalitoral.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 12:19:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890143": [
        {
            "ioc_value": "joseph-deleu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 13:07:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890144": [
        {
            "ioc_value": "joysnipes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 12:29:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890145": [
        {
            "ioc_value": "jrjlajeseblocos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 13:22:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890146": [
        {
            "ioc_value": "jtourstravelagency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:16",
            "last_seen_utc": "2026-08-28 13:07:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890126": [
        {
            "ioc_value": "ircadcn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:59:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890127": [
        {
            "ioc_value": "irish-setter.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890128": [
        {
            "ioc_value": "isollanta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:49:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890129": [
        {
            "ioc_value": "it-tech-4you.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:29:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890130": [
        {
            "ioc_value": "jacquouparc.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:29:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890131": [
        {
            "ioc_value": "jamiakaliargaon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:59:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890132": [
        {
            "ioc_value": "jassure-jeprotege.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 13:22:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890133": [
        {
            "ioc_value": "jdmantinfortunistica.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:59:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890134": [
        {
            "ioc_value": "jeanetteoslund.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890135": [
        {
            "ioc_value": "jeckylphoto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:15",
            "last_seen_utc": "2026-08-28 12:19:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890117": [
        {
            "ioc_value": "infosab.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 12:19:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890118": [
        {
            "ioc_value": "ingeniasolutions.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 13:07:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890119": [
        {
            "ioc_value": "ink2paperconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 13:22:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890120": [
        {
            "ioc_value": "inphuviet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 13:07:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890121": [
        {
            "ioc_value": "insectbalears.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 12:29:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890122": [
        {
            "ioc_value": "insulaemisceo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 12:59:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890123": [
        {
            "ioc_value": "interwealthmanagement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 12:19:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890124": [
        {
            "ioc_value": "inveduo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 12:18:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890125": [
        {
            "ioc_value": "invn.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:14",
            "last_seen_utc": "2026-08-28 13:22:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890109": [
        {
            "ioc_value": "iconicoffermasterclass.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 13:32:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890110": [
        {
            "ioc_value": "ifosep.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 12:19:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890111": [
        {
            "ioc_value": "ignitecapital.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 13:22:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890112": [
        {
            "ioc_value": "im-pact.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 12:29:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890113": [
        {
            "ioc_value": "improva.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890114": [
        {
            "ioc_value": "impulsing.hr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 12:49:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890115": [
        {
            "ioc_value": "industrialsurface.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 12:29:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890116": [
        {
            "ioc_value": "induytan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:13",
            "last_seen_utc": "2026-08-28 13:32:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890099": [
        {
            "ioc_value": "hoping.si",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 13:22:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890100": [
        {
            "ioc_value": "hotelier.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890101": [
        {
            "ioc_value": "hotelkeilir.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 12:29:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890102": [
        {
            "ioc_value": "hotelsalvevir.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 13:22:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890103": [
        {
            "ioc_value": "huck-spain.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 12:39:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890104": [
        {
            "ioc_value": "hughesmortgagecentre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 12:59:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890105": [
        {
            "ioc_value": "huisjehurenwageningen.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 12:49:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890106": [
        {
            "ioc_value": "iam8up.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 12:18:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890107": [
        {
            "ioc_value": "iamiracle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 13:07:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890108": [
        {
            "ioc_value": "iamnyc.guide",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:12",
            "last_seen_utc": "2026-08-28 13:12:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890095": [
        {
            "ioc_value": "hollandloghomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890096": [
        {
            "ioc_value": "homesura.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890097": [
        {
            "ioc_value": "hondenland.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890098": [
        {
            "ioc_value": "hope.co.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:51:11",
            "last_seen_utc": "2026-08-28 11:48:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890094": [
        {
            "ioc_value": "hobbytec-aluminium.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890089": [
        {
            "ioc_value": "henrydistrict.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890090": [
        {
            "ioc_value": "hhentreprise.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890091": [
        {
            "ioc_value": "hitzler-online.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890092": [
        {
            "ioc_value": "hksglobaliraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890093": [
        {
            "ioc_value": "hnws.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890082": [
        {
            "ioc_value": "hazipenztar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890083": [
        {
            "ioc_value": "heerlek.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890084": [
        {
            "ioc_value": "heideroosjeheibloem.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890085": [
        {
            "ioc_value": "hello-web.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890086": [
        {
            "ioc_value": "hemanko.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890087": [
        {
            "ioc_value": "hemingway.al",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890088": [
        {
            "ioc_value": "henaux.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890075": [
        {
            "ioc_value": "hakawimisr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890076": [
        {
            "ioc_value": "halaladvisor.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890077": [
        {
            "ioc_value": "hansgeurtscuijk.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890078": [
        {
            "ioc_value": "harasdebouffemont.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890079": [
        {
            "ioc_value": "hasle-frisor.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890080": [
        {
            "ioc_value": "havasal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890081": [
        {
            "ioc_value": "haylo.agency",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890070": [
        {
            "ioc_value": "gs-edu.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890071": [
        {
            "ioc_value": "guangzhoutraders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890072": [
        {
            "ioc_value": "gudera.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890073": [
        {
            "ioc_value": "gyiot.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890074": [
        {
            "ioc_value": "hahacanvas.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890063": [
        {
            "ioc_value": "goldenpathwaysbb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890064": [
        {
            "ioc_value": "goodgarden.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890065": [
        {
            "ioc_value": "gorna-kubacka.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890066": [
        {
            "ioc_value": "grapheline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890067": [
        {
            "ioc_value": "graycoatings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890068": [
        {
            "ioc_value": "greenvalleyfertility.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890069": [
        {
            "ioc_value": "gregoryrasputin.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890057": [
        {
            "ioc_value": "glorykylin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890058": [
        {
            "ioc_value": "glovalgo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890059": [
        {
            "ioc_value": "glowherbalbeauty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890060": [
        {
            "ioc_value": "gm-v01.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890061": [
        {
            "ioc_value": "godsanvil.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890062": [
        {
            "ioc_value": "gofiotunafishing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890054": [
        {
            "ioc_value": "girlsformore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890055": [
        {
            "ioc_value": "gironaairporttaxitransfer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890056": [
        {
            "ioc_value": "glitch.uy",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890049": [
        {
            "ioc_value": "geluksacademie.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890050": [
        {
            "ioc_value": "getintl.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890051": [
        {
            "ioc_value": "getonlineschools.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890052": [
        {
            "ioc_value": "giaodienwebsite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890053": [
        {
            "ioc_value": "giernas.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890044": [
        {
            "ioc_value": "gargamel-estudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890045": [
        {
            "ioc_value": "gbsciences.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890046": [
        {
            "ioc_value": "gdconseils.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890047": [
        {
            "ioc_value": "gdiedu.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890048": [
        {
            "ioc_value": "gebouwonderhouden.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890040": [
        {
            "ioc_value": "freiwilligenagentur.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890041": [
        {
            "ioc_value": "futureplace.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890042": [
        {
            "ioc_value": "fuzzyface.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890043": [
        {
            "ioc_value": "fvarelaart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890033": [
        {
            "ioc_value": "foampartiesusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890034": [
        {
            "ioc_value": "fodem-descartes.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890035": [
        {
            "ioc_value": "fondazionesozzani.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890036": [
        {
            "ioc_value": "forkandwalktourscologne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890037": [
        {
            "ioc_value": "framtidabruk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890038": [
        {
            "ioc_value": "frankkeanemg.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890039": [
        {
            "ioc_value": "fredmbiz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890027": [
        {
            "ioc_value": "fintechofficial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890028": [
        {
            "ioc_value": "firmsworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890029": [
        {
            "ioc_value": "fitmajid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890030": [
        {
            "ioc_value": "fitoutlet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890031": [
        {
            "ioc_value": "flightcrust.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890032": [
        {
            "ioc_value": "flooringforlandlords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890022": [
        {
            "ioc_value": "fcb-fanclub-hofherrnweiler.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890023": [
        {
            "ioc_value": "federleicht-getraut.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890024": [
        {
            "ioc_value": "feuerwehreibach.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890025": [
        {
            "ioc_value": "fibraparks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890026": [
        {
            "ioc_value": "filmrekvisita.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890018": [
        {
            "ioc_value": "extremecleanup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890019": [
        {
            "ioc_value": "fairwaygolftours.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890020": [
        {
            "ioc_value": "fallproof.co.nz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890021": [
        {
            "ioc_value": "farooq.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890017": [
        {
            "ioc_value": "exotrade.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890016": [
        {
            "ioc_value": "everythinghosting.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890010": [
        {
            "ioc_value": "escalamas.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890011": [
        {
            "ioc_value": "esdpromembers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890012": [
        {
            "ioc_value": "estudiofuga.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890013": [
        {
            "ioc_value": "europe-autoglass.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890014": [
        {
            "ioc_value": "evang-kirche-weissenhorn.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890015": [
        {
            "ioc_value": "everestmart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890002": [
        {
            "ioc_value": "emergencyrestoration.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890003": [
        {
            "ioc_value": "emergenzaesicurezza.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890004": [
        {
            "ioc_value": "emile-rousseau.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890005": [
        {
            "ioc_value": "emindasilva.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890006": [
        {
            "ioc_value": "energie-advies.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890007": [
        {
            "ioc_value": "energiecentrum.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890008": [
        {
            "ioc_value": "engineperformanceexpo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890009": [
        {
            "ioc_value": "envitrail.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889994": [
        {
            "ioc_value": "eduinfohub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889995": [
        {
            "ioc_value": "ehme.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889996": [
        {
            "ioc_value": "ekoinicjatywa.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889997": [
        {
            "ioc_value": "ekskursii-v-izraile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889998": [
        {
            "ioc_value": "elektrikerskovde.nu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889999": [
        {
            "ioc_value": "elemental-advisor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890000": [
        {
            "ioc_value": "elinrosarioyasociados.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1890001": [
        {
            "ioc_value": "elitechforce.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889986": [
        {
            "ioc_value": "drheclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889987": [
        {
            "ioc_value": "dumpsterrentalcolorado.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889988": [
        {
            "ioc_value": "dustexplorer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889989": [
        {
            "ioc_value": "dwu.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889990": [
        {
            "ioc_value": "e-careconseil.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889991": [
        {
            "ioc_value": "e-learningcentre.com.ng",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": "2026-08-28 11:58:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889992": [
        {
            "ioc_value": "eaglesvalleyimportexport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889993": [
        {
            "ioc_value": "eb5consult.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889978": [
        {
            "ioc_value": "divan.media",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889979": [
        {
            "ioc_value": "divers-plzen.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889980": [
        {
            "ioc_value": "dm-recykling.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889981": [
        {
            "ioc_value": "dodou.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889982": [
        {
            "ioc_value": "dollarswithdon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889983": [
        {
            "ioc_value": "donaconamorcr.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889984": [
        {
            "ioc_value": "dpg.dance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889985": [
        {
            "ioc_value": "dreamsexplained.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889969": [
        {
            "ioc_value": "dicanapoli.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889970": [
        {
            "ioc_value": "didehrowshan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889971": [
        {
            "ioc_value": "dienlanhvanthanh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889972": [
        {
            "ioc_value": "diesellabs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889973": [
        {
            "ioc_value": "digilogix.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889974": [
        {
            "ioc_value": "diligenceletter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889975": [
        {
            "ioc_value": "dimpot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889976": [
        {
            "ioc_value": "direct-editions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889977": [
        {
            "ioc_value": "disasterdocstogo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889961": [
        {
            "ioc_value": "dealsdone.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889962": [
        {
            "ioc_value": "dearjohns.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889963": [
        {
            "ioc_value": "degroeneaarde.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889964": [
        {
            "ioc_value": "deine-neue-webseite.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889965": [
        {
            "ioc_value": "delicari.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889966": [
        {
            "ioc_value": "demodomain.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889967": [
        {
            "ioc_value": "dev5245465.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889968": [
        {
            "ioc_value": "devils-bsp.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889952": [
        {
            "ioc_value": "danahorush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889953": [
        {
            "ioc_value": "dandunemun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889954": [
        {
            "ioc_value": "danestrom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889955": [
        {
            "ioc_value": "dangtrangktc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889956": [
        {
            "ioc_value": "dansverenigingsunrise.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889957": [
        {
            "ioc_value": "datadent.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889958": [
        {
            "ioc_value": "dazzlingdesignbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889959": [
        {
            "ioc_value": "dckira.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889960": [
        {
            "ioc_value": "ddtdivas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889944": [
        {
            "ioc_value": "creativeprintsdxb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889945": [
        {
            "ioc_value": "cronicaslombardi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889946": [
        {
            "ioc_value": "ctcmg.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889947": [
        {
            "ioc_value": "cullenwhitmore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889948": [
        {
            "ioc_value": "cupidwanders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889949": [
        {
            "ioc_value": "cycamp.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889950": [
        {
            "ioc_value": "dadarmanesh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889951": [
        {
            "ioc_value": "damynghecongquyen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889936": [
        {
            "ioc_value": "coeondemand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889937": [
        {
            "ioc_value": "colonial-reserve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889938": [
        {
            "ioc_value": "commutd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": "2026-08-28 12:08:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889939": [
        {
            "ioc_value": "computingpowe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": "2026-08-28 11:38:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889940": [
        {
            "ioc_value": "connectingmed.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": "2026-08-28 11:48:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889941": [
        {
            "ioc_value": "cordyrobot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": "2026-08-28 11:48:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889942": [
        {
            "ioc_value": "cotmt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": "2026-08-28 12:08:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889943": [
        {
            "ioc_value": "craftsmen717.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889927": [
        {
            "ioc_value": "circusmiloco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889928": [
        {
            "ioc_value": "ckmhealth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": "2026-08-28 11:58:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889929": [
        {
            "ioc_value": "claudiahametner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": "2026-08-28 11:38:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889930": [
        {
            "ioc_value": "clearcmo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889931": [
        {
            "ioc_value": "cloverrei.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": "2026-08-28 11:58:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889932": [
        {
            "ioc_value": "clubdeportivobrains.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": "2026-08-28 11:58:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889933": [
        {
            "ioc_value": "clyderiverhouseboats.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889934": [
        {
            "ioc_value": "cnfc.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": "2026-08-28 11:38:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889935": [
        {
            "ioc_value": "cnpsr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889919": [
        {
            "ioc_value": "chemicalkings.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": "2026-08-28 11:13:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889920": [
        {
            "ioc_value": "china-travel.bg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": "2026-08-28 11:38:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889921": [
        {
            "ioc_value": "choose2build.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889922": [
        {
            "ioc_value": "christiantreasury.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889923": [
        {
            "ioc_value": "christinehartcoaching.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": "2026-08-28 11:28:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889924": [
        {
            "ioc_value": "christoph-meyer.berlin",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": "2026-08-28 11:58:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889925": [
        {
            "ioc_value": "cianshin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889926": [
        {
            "ioc_value": "cinarfidan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889918": [
        {
            "ioc_value": "chatscheznous.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889912": [
        {
            "ioc_value": "cazenasite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889913": [
        {
            "ioc_value": "cbcpaca.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:01",
            "last_seen_utc": "2026-08-28 11:28:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889914": [
        {
            "ioc_value": "cenecmalaga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:01",
            "last_seen_utc": "2026-08-28 12:08:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889915": [
        {
            "ioc_value": "centragro.education",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:01",
            "last_seen_utc": "2026-08-28 11:38:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889916": [
        {
            "ioc_value": "centrocajagranadafp.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:01",
            "last_seen_utc": "2026-08-28 11:58:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889917": [
        {
            "ioc_value": "ceo.do",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:01",
            "last_seen_utc": "2026-08-28 11:48:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889907": [
        {
            "ioc_value": "carstenkraus.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:00",
            "last_seen_utc": "2026-08-28 11:48:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889908": [
        {
            "ioc_value": "cartaodevisitadigitalcscard.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:00",
            "last_seen_utc": "2026-08-28 11:38:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889909": [
        {
            "ioc_value": "caryfamily.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:00",
            "last_seen_utc": "2026-08-28 11:28:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889910": [
        {
            "ioc_value": "casamuskincare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889911": [
        {
            "ioc_value": "caterinagrimaldi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:48:00",
            "last_seen_utc": "2026-08-28 12:08:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889903": [
        {
            "ioc_value": "caffecasolino.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:47:15",
            "last_seen_utc": "2026-08-28 11:48:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889904": [
        {
            "ioc_value": "callcbse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:47:15",
            "last_seen_utc": "2026-08-28 11:48:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889905": [
        {
            "ioc_value": "capfraicheur.fish",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:47:15",
            "last_seen_utc": "2026-08-28 12:08:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889906": [
        {
            "ioc_value": "carrollphotoandvideo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:47:15",
            "last_seen_utc": "2026-08-28 12:08:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889902": [
        {
            "ioc_value": "arestorativeplace.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 10:47:10",
            "last_seen_utc": "2026-08-28 11:28:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889886": [
        {
            "ioc_value": "microsoftgeek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 10:37:13",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889885": [
        {
            "ioc_value": "colorwayresin.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 10:35:28",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889884": [
        {
            "ioc_value": "thomasrunge.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 10:34:34",
            "last_seen_utc": "2026-08-28 13:33:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889883": [
        {
            "ioc_value": "fvz58dzt.memerylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 10:33:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889882": [
        {
            "ioc_value": "grupo-sanmartin.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 10:29:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "CickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889879": [
        {
            "ioc_value": "rk3fxaf8.get-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 10:14:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889876": [
        {
            "ioc_value": "soilnopi1122.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 10:01:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889875": [
        {
            "ioc_value": "94.26.3.30:7081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-28 09:47:31",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889874": [
        {
            "ioc_value": "64.118.140.156:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 09:46:59",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889873": [
        {
            "ioc_value": "52.221.246.243:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-08-28 09:46:55",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889872": [
        {
            "ioc_value": "37.244.238.125:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-28 09:46:25",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889871": [
        {
            "ioc_value": "203.159.90.177:55006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 09:45:18",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889870": [
        {
            "ioc_value": "20.115.227.161:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 09:45:14",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889869": [
        {
            "ioc_value": "198.23.177.210:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-28 09:45:01",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889868": [
        {
            "ioc_value": "194.59.31.78:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-28 09:44:55",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889867": [
        {
            "ioc_value": "186.244.245.91:45702",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-28 09:44:42",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889866": [
        {
            "ioc_value": "172.245.155.83:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-28 09:44:14",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889864": [
        {
            "ioc_value": "172.111.198.212:56012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-28 09:44:12",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889865": [
        {
            "ioc_value": "172.111.247.65:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 09:44:12",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889862": [
        {
            "ioc_value": "172.111.177.77:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 09:44:11",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889863": [
        {
            "ioc_value": "172.111.177.77:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 09:44:11",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889861": [
        {
            "ioc_value": "159.203.69.210:8008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 09:44:00",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889860": [
        {
            "ioc_value": "158.94.209.180:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 09:43:58",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889859": [
        {
            "ioc_value": "154.37.213.27:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-28 09:43:52",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889854": [
        {
            "ioc_value": "69.167.11.119:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889852": [
        {
            "ioc_value": "117.72.182.5:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889853": [
        {
            "ioc_value": "117.72.182.5:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889851": [
        {
            "ioc_value": "117.72.182.5:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889849": [
        {
            "ioc_value": "alsabeeltravel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 09:03:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889848": [
        {
            "ioc_value": "https://raw.githubusercontent.com/snowplow-byte/implicate/refs/heads/main/lilac",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:55:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889846": [
        {
            "ioc_value": "sycamoreitinerary.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-28 08:35:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889845": [
        {
            "ioc_value": "https://sycamoreitinerary.co/status/beta-response.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-28 08:35:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889844": [
        {
            "ioc_value": "it6grdv9.eng-en-us-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:32:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889842": [
        {
            "ioc_value": "qi20j1a8.leptozanstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:27:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889840": [
        {
            "ioc_value": "9moh1wwq.homepowershield.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:24:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889838": [
        {
            "ioc_value": "leptozanstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:23:34",
            "last_seen_utc": "2026-08-28 08:23:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889836": [
        {
            "ioc_value": "homepowershield.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:21:52",
            "last_seen_utc": "2026-08-28 08:21:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889834": [
        {
            "ioc_value": "ticketreceipt.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-28 08:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889833": [
        {
            "ioc_value": "117.72.182.5:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889831": [
        {
            "ioc_value": "117.72.182.5:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 08:05:06",
            "last_seen_utc": "2026-09-01 02:46:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889832": [
        {
            "ioc_value": "117.72.182.5:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889830": [
        {
            "ioc_value": "117.72.182.5:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889828": [
        {
            "ioc_value": "odumisol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:03:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889829": [
        {
            "ioc_value": "agrologsa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 08:03:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889826": [
        {
            "ioc_value": "http://flreaow.click:6527/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 07:57:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889827": [
        {
            "ioc_value": "http://fezm.website:9048/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 07:57:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889825": [
        {
            "ioc_value": "resolvend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 07:53:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889822": [
        {
            "ioc_value": "http://flreaow.click:6527/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 07:40:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889818": [
        {
            "ioc_value": "nyqixu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 07:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889819": [
        {
            "ioc_value": "remudago.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 07:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889817": [
        {
            "ioc_value": "103.41.177.64:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 07:05:06",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889816": [
        {
            "ioc_value": "backupnow.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 07:03:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889808": [
        {
            "ioc_value": "vjcas97553.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 06:57:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889813": [
        {
            "ioc_value": "104.248.41.207:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:57:28",
            "last_seen_utc": "2026-08-29 20:39:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889814": [
        {
            "ioc_value": "159.89.24.55:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:57:28",
            "last_seen_utc": "2026-08-31 06:01:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889815": [
        {
            "ioc_value": "qfscjr8lwm.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 06:57:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889811": [
        {
            "ioc_value": "www.mortsdelarue.brussels",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:43:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889812": [
        {
            "ioc_value": "test.pinnacletreuhand.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:43:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889810": [
        {
            "ioc_value": "www.blupay.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:43:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889809": [
        {
            "ioc_value": "buildingpi81.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 06:43:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889807": [
        {
            "ioc_value": "6odtgo56.en-trump-token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:31:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889806": [
        {
            "ioc_value": "cloudsnewenterprise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 06:25:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889795": [
        {
            "ioc_value": "2555ebba.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889800": [
        {
            "ioc_value": "kewuqibu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889802": [
        {
            "ioc_value": "93.152.221.220:42867",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 06:25:13",
            "last_seen_utc": "2026-08-31 09:26:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,HEAVYFUNDS,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889803": [
        {
            "ioc_value": "184.75.208.210:51088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 06:25:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,ONYXX,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889804": [
        {
            "ioc_value": "http://103.186.77.70:50625/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 06:25:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.186.77.70",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889805": [
        {
            "ioc_value": "bean.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 06:23:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889801": [
        {
            "ioc_value": "radiocroc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:09:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889798": [
        {
            "ioc_value": "123.254.106.168:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 06:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889799": [
        {
            "ioc_value": "144.48.124.91:1100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 06:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889796": [
        {
            "ioc_value": "144.48.124.94:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889797": [
        {
            "ioc_value": "144.48.124.94:18111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889445": [
        {
            "ioc_value": "maa2yprc5pldyr5hjn246hw7i66wdhglnostqgqkcbuh4vyyeos4xxyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Orova%20Ransomware",
            "tags": "orova,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889446": [
        {
            "ioc_value": "mzlajyncb2rafn5bsb7esmo73kyawjxeirunba27n6nermmafzlcp4qd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Orova%20Ransomware",
            "tags": "orova,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889447": [
        {
            "ioc_value": "139.59.154.153:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:00:30",
            "last_seen_utc": "2026-08-30 23:21:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889452": [
        {
            "ioc_value": "185.169.52.99:6527",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 06:00:30",
            "last_seen_utc": "2026-09-01 03:41:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6efb1e0ab361cda1dd534e37e543789c,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889465": [
        {
            "ioc_value": "http://123.188.72.146:45830/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 06:00:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.188.72.146",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889504": [
        {
            "ioc_value": "140.228.29.51:47701",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 06:00:29",
            "last_seen_utc": "2026-08-30 02:59:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889512": [
        {
            "ioc_value": "bean.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:00:28",
            "last_seen_utc": "2026-08-27 20:03:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1889516": [
        {
            "ioc_value": "172.111.163.167:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-28 06:00:28",
            "last_seen_utc": "2026-08-28 06:18:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Crypters&tools,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889523": [
        {
            "ioc_value": "https://cloudfeeld.com/check",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-28 06:00:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1889535": [
        {
            "ioc_value": "270fb59e1c8c8bd768b3b3abd4fb607ebb3215494cbc319de54a43a32fbaf9ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:00:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "UnknownSilicon"
        }
    ],
    "1889536": [
        {
            "ioc_value": "https://jsma.s3.us-west-2.amazonaws.com/1bJ8TKI/ma.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 06:00:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "UnknownSilicon"
        }
    ],
    "1889550": [
        {
            "ioc_value": "104.248.41.207:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:00:22",
            "last_seen_utc": "2026-08-31 11:45:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889553": [
        {
            "ioc_value": "https://194.146.39.66",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 06:00:22",
            "last_seen_utc": "2026-08-31 08:34:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2549bffcf949a19ce487546b5948fdfa,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889552": [
        {
            "ioc_value": "http://2.26.126.74/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-28 06:00:21",
            "last_seen_utc": "2026-09-01 03:09:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "73f82eed6521,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889565": [
        {
            "ioc_value": "104.248.247.126:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:00:20",
            "last_seen_utc": "2026-08-31 10:40:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889569": [
        {
            "ioc_value": "http://144.48.135.158:45970/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 06:00:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.135.158",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889570": [
        {
            "ioc_value": "http://196.251.121.142/a3f8d2/kaizen.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 06:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889571": [
        {
            "ioc_value": "http://196.251.121.142/a3f8d2/kaizen.mpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 06:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889572": [
        {
            "ioc_value": "http://223.123.126.197:34920/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 06:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.126.197",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889574": [
        {
            "ioc_value": "900bde0b71b444116450c36e9f918da75f683031e9b11e60a8d053f2fa917071",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 06:00:18",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889573": [
        {
            "ioc_value": "http://219.155.30.46:52169/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-28 06:00:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/219.155.30.46",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889575": [
        {
            "ioc_value": "8dc026640c8dd359ad7248d1ea0a4740bf3bbbf1a3abcfbbf6390e0ecdb31ebb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-28 06:00:16",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889590": [
        {
            "ioc_value": "128.90.136.98:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 06:00:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "22363,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1889606": [
        {
            "ioc_value": "https://camptroiller-complaince.spe103l.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01d33-cc78-701b-aae8-252631fff236/",
            "tags": "eviltokens,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889607": [
        {
            "ioc_value": "https://docusign.login.adrpowersystem.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01bbf-cd9e-741d-9ba3-b0ff498cd8f8/",
            "tags": "eviltokens,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889610": [
        {
            "ioc_value": "https://mckezzon.co/verify/7663f640-b16b-40bd-834e-8f477a04e8ba",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a04524-fef2-7758-acd7-ed7c36f5b58e/",
            "tags": "linkid,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889741": [
        {
            "ioc_value": "https://kiprihorycom.com/work/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-08-28 06:00:11",
            "last_seen_utc": "2026-09-01 03:36:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Latrodectus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889745": [
        {
            "ioc_value": "46.101.146.87:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:00:10",
            "last_seen_utc": "2026-08-30 23:22:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889752": [
        {
            "ioc_value": "www2.hollywoodgulfcoast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:10",
            "last_seen_utc": null,
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1889753": [
        {
            "ioc_value": "test-cx-origin.api.informa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:09",
            "last_seen_utc": null,
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1889770": [
        {
            "ioc_value": "https://polyprud.com/verify/1777addf-099f-4a52-920b-26964c181fa0",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a015c2-5238-7235-880a-741032a2e16a/",
            "tags": "linkid,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889772": [
        {
            "ioc_value": "https://teams-invite.io/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f93d3-2a08-72b3-af00-293f2e85c4cf/",
            "tags": "eviltokens,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889774": [
        {
            "ioc_value": "https://merchants-secure.support-telr.com/dc/Xo1uLZU7lCj0Ok4ahhg0-BjXmgzCs-b-2coeCI0wuXo",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 06:00:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f4ba1-73ee-72d1-a906-d671943c2044/",
            "tags": "dcstatus,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889775": [
        {
            "ioc_value": "securelogin.lpzoo.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-08-28 06:00:01",
            "last_seen_utc": null,
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1889781": [
        {
            "ioc_value": "201.79.5.223:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-28 06:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889782": [
        {
            "ioc_value": "https://zoom-meeting-access.pages.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 05:59:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a045ec-1716-71b2-a1e7-b317b4dce353/",
            "tags": "phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1889794": [
        {
            "ioc_value": "wulibibu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 05:54:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889793": [
        {
            "ioc_value": "fo0to2n9co.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 05:38:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889792": [
        {
            "ioc_value": "gikesa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 05:12:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889790": [
        {
            "ioc_value": "144.48.124.94:1100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 05:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889791": [
        {
            "ioc_value": "http://ooooarwv.beget.tech/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-28 05:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889789": [
        {
            "ioc_value": "144.48.124.93:18111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 05:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889787": [
        {
            "ioc_value": "144.48.124.93:1100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 05:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889788": [
        {
            "ioc_value": "144.48.124.93:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 05:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889786": [
        {
            "ioc_value": "144.48.124.91:18111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889785": [
        {
            "ioc_value": "livelydoria.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:56:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889784": [
        {
            "ioc_value": "eytqo63998.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:48:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889780": [
        {
            "ioc_value": "d5xpvvah.memerylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 04:30:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889779": [
        {
            "ioc_value": "memerylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 04:29:03",
            "last_seen_utc": "2026-08-28 10:31:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889778": [
        {
            "ioc_value": "qygomysu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:26:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889777": [
        {
            "ioc_value": "gonefugu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:24:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889776": [
        {
            "ioc_value": "niwuhu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:23:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889773": [
        {
            "ioc_value": "sazeqy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:18:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889769": [
        {
            "ioc_value": "45.194.37.221:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-28 04:15:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0bab062af7894bc44d68ebc5b9633a84ffaae1f17671ff3949002c43321ec86a/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889768": [
        {
            "ioc_value": "h6490qgh.lepto--zan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 04:14:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889767": [
        {
            "ioc_value": "lepto--zan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 04:13:18",
            "last_seen_utc": "2026-08-28 12:55:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889766": [
        {
            "ioc_value": "behefo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 04:05:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889765": [
        {
            "ioc_value": "144.48.124.91:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889764": [
        {
            "ioc_value": "49.235.130.208:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889763": [
        {
            "ioc_value": "http://steadsp.click:8321/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 04:03:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889761": [
        {
            "ioc_value": "nettechenterprise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-28 04:01:44",
            "last_seen_utc": "2026-08-28 10:37:13",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889762": [
        {
            "ioc_value": "www.myentertainmentworld.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 04:01:44",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889759": [
        {
            "ioc_value": "http://crimsve.click:8954/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 03:51:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889760": [
        {
            "ioc_value": "http://fezm.website:9048/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 03:51:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889758": [
        {
            "ioc_value": "5f7kswropg.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 03:44:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889757": [
        {
            "ioc_value": "http://flreaow.click:6527/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 03:35:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889756": [
        {
            "ioc_value": "focomaco.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 03:26:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889755": [
        {
            "ioc_value": "0t55213q.get-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 03:23:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889754": [
        {
            "ioc_value": "28l5qc09.glprobloodsugar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 03:22:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889751": [
        {
            "ioc_value": "glprobloodsugar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 03:20:19",
            "last_seen_utc": "2026-08-28 13:22:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889750": [
        {
            "ioc_value": "get-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 03:20:05",
            "last_seen_utc": "2026-08-28 10:14:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889749": [
        {
            "ioc_value": "derekforhexham.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 03:11:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889748": [
        {
            "ioc_value": "45.63.43.183:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889747": [
        {
            "ioc_value": "43.143.14.43:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 03:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889746": [
        {
            "ioc_value": "43.143.13.146:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889744": [
        {
            "ioc_value": "fisigifa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 03:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889743": [
        {
            "ioc_value": "nidije.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 02:53:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889742": [
        {
            "ioc_value": "hyxeju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 02:52:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889740": [
        {
            "ioc_value": "yulxe38830.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 02:45:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889739": [
        {
            "ioc_value": "ff8602e5e0b0e089b8db3a2bd9c6c661",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-28 02:35:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889737": [
        {
            "ioc_value": "736dedb3dc80fc3c7e584666082ff8ff9673a4356f5d88f85165792086e93c1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-28 02:35:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889738": [
        {
            "ioc_value": "f4aa555c53582213b4788dae27d22ef051448f6e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-28 02:35:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889735": [
        {
            "ioc_value": "97a8b10fdc541dc42631a5390f60d7a3920afbd5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889736": [
        {
            "ioc_value": "8d20dee8d337d90ff1f59755d968fe24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889734": [
        {
            "ioc_value": "db742a55b7b5a20d8858528f1467975c25401c0bb3600dc4221a38e83142b612",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889730": [
        {
            "ioc_value": "3f2b9b67d53434e327c6407b8a341c15",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889731": [
        {
            "ioc_value": "baa739eba49601b21067818ff725e168894a0c186e90405180687cb26970f89a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889732": [
        {
            "ioc_value": "6ed98ee07c35b647d784fa7cc18fc1d1825cd198",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889733": [
        {
            "ioc_value": "add9716dbb1c81118f16660ecbfa616e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889728": [
        {
            "ioc_value": "3d2cea3eaa43053ae0efa20de8544387d7cabeb70c89980f4241f3b6efa0e323",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889729": [
        {
            "ioc_value": "c4e7fd34cacc9f2a3d75146aecef571d81ad96f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889727": [
        {
            "ioc_value": "937d6dac6352f47abd3cd96307f9fb3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:12",
            "last_seen_utc": "2026-08-28 16:03:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889724": [
        {
            "ioc_value": "a8867ef6f7dbc3dc67b51c46600da399",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:11",
            "last_seen_utc": "2026-08-28 16:03:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889725": [
        {
            "ioc_value": "d0fee013dcbe7b99953bae41d554e51176cda4596d7ddb77f151247444cb34b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:11",
            "last_seen_utc": "2026-08-28 16:03:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889726": [
        {
            "ioc_value": "d4cf7efdde8f92fb9b7b4b14de33bf768cb176ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:11",
            "last_seen_utc": "2026-08-28 16:03:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889721": [
        {
            "ioc_value": "f19a427d7fca1f15d1d36bf8cff40546",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:10",
            "last_seen_utc": "2026-08-28 16:03:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889722": [
        {
            "ioc_value": "54316bfd703572a2bc142dc22e04f670fcda06f6d461c749422038d0d5e22c70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:10",
            "last_seen_utc": "2026-08-28 16:03:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889723": [
        {
            "ioc_value": "539ad21acef059352b09da853e7102f8d87015e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:10",
            "last_seen_utc": "2026-08-28 16:03:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889718": [
        {
            "ioc_value": "2dc4d94ca45dfe4fe27d62d98a2bbdc6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:09",
            "last_seen_utc": "2026-08-28 16:03:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889719": [
        {
            "ioc_value": "e95ae36b5177a96a5977d4c1f251607f9d4d8d2242d0a7da3eb44c9f5c0a36c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:09",
            "last_seen_utc": "2026-08-28 16:03:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889720": [
        {
            "ioc_value": "e73e2811c6e461c45610e669eb30b2b87e795bbc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:09",
            "last_seen_utc": "2026-08-28 16:03:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889715": [
        {
            "ioc_value": "0351baa90d01ece5e64b16b129a244f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:08",
            "last_seen_utc": "2026-08-28 16:03:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889716": [
        {
            "ioc_value": "872bef893de29334011a666c31fb694781f6d0b74d9f0df519850a9f724fe54a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:08",
            "last_seen_utc": "2026-08-28 16:03:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889717": [
        {
            "ioc_value": "2ec0c46039954e77149a23de4bc0c5ac843d5c97",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:08",
            "last_seen_utc": "2026-08-28 16:03:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889712": [
        {
            "ioc_value": "9f210e659410d458c23a3b7e865bc12a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:07",
            "last_seen_utc": "2026-08-28 16:03:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889713": [
        {
            "ioc_value": "f499cd2aaa70b85b6de71e67ceb6c1be1674f64ae6434d415497df753a55c509",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:07",
            "last_seen_utc": "2026-08-28 16:03:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889714": [
        {
            "ioc_value": "eb53dd6b7d108e798b3b548aa1d2b501d80c5504",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:07",
            "last_seen_utc": "2026-08-28 16:03:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889709": [
        {
            "ioc_value": "733332f35f1fa35f822e3c5cc953b36c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:06",
            "last_seen_utc": "2026-08-28 16:03:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889710": [
        {
            "ioc_value": "4d6e5173353ab469f05a0b630a1aaaf5286b187c14c37535ed01f87a66701525",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:06",
            "last_seen_utc": "2026-08-28 16:03:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889711": [
        {
            "ioc_value": "fed09b3ed1cc7426cd5d2351dacd2741f1975aff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:06",
            "last_seen_utc": "2026-08-28 16:03:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889706": [
        {
            "ioc_value": "13b5ac8b2e2d4920369d2ce8498bbace",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:05",
            "last_seen_utc": "2026-08-28 16:03:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889707": [
        {
            "ioc_value": "3d0a04c4cd1a91fd481ca80406e608247c9ee15ffae83d81bf641aeaba58f63d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:05",
            "last_seen_utc": "2026-08-28 16:03:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889708": [
        {
            "ioc_value": "30dca973dd0f8740a4ce1323c6928fb29ae7d4fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:05",
            "last_seen_utc": "2026-08-28 16:03:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889704": [
        {
            "ioc_value": "6f513495ae2d862bce46785c4273e72250f77ca6d32b98313def15a8d75741f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:04",
            "last_seen_utc": "2026-08-28 16:03:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889705": [
        {
            "ioc_value": "d2a074bd5b96fe8ffb6959df19e40f72a2d9ee69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:04",
            "last_seen_utc": "2026-08-28 16:03:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889703": [
        {
            "ioc_value": "491425abae50551ce559b77724d69968",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:03",
            "last_seen_utc": "2026-08-28 16:03:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889700": [
        {
            "ioc_value": "c3968a002d75c8dcb539b46c40a62f70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:01",
            "last_seen_utc": "2026-08-28 16:03:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889701": [
        {
            "ioc_value": "c77373bd4f55d2d0b4d7657b0fc0a9ed42c84339230ba48115b691bc01483240",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:01",
            "last_seen_utc": "2026-08-28 16:03:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889702": [
        {
            "ioc_value": "ece14a64e0e3629cc8b84ad8c4def96e8577e911",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:01",
            "last_seen_utc": "2026-08-28 16:03:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889697": [
        {
            "ioc_value": "23f5007d248c8683dccd5d74b369b502",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:00",
            "last_seen_utc": "2026-08-28 16:03:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889698": [
        {
            "ioc_value": "6c379689e10f406356c7281e93410fdb0bc2d3311d3b83b9c2164537938fc6f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:00",
            "last_seen_utc": "2026-08-28 16:03:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889699": [
        {
            "ioc_value": "0df2449e4bf2d353cd06f05eb76b40e998ab845d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:35:00",
            "last_seen_utc": "2026-08-28 16:03:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889694": [
        {
            "ioc_value": "7ae204a8f2de0c5bc67c665b67456fd0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:59",
            "last_seen_utc": "2026-08-28 16:03:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889695": [
        {
            "ioc_value": "ea048023766bbf5f135da46dbe05ff3c7b33cb614cf6dec63c50e631d3b93999",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:59",
            "last_seen_utc": "2026-08-28 16:03:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889696": [
        {
            "ioc_value": "a8f800717a7080f236addedb9e0b343722bce216",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:59",
            "last_seen_utc": "2026-08-28 16:03:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889691": [
        {
            "ioc_value": "06b26edeaa2996fef4ccd70610f4b736",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:58",
            "last_seen_utc": "2026-08-28 16:03:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889692": [
        {
            "ioc_value": "685ef46a210bf672d5276a82d506b064a5b2112a3330f18956aec6cdf8b63b85",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:58",
            "last_seen_utc": "2026-08-28 16:03:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889693": [
        {
            "ioc_value": "a716f6f931831f31c50024a37573fe38f123a36f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:58",
            "last_seen_utc": "2026-08-28 16:03:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889688": [
        {
            "ioc_value": "779a381a3149397d4794ab4ee94295a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:57",
            "last_seen_utc": "2026-08-28 16:02:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889689": [
        {
            "ioc_value": "0fc98c2fd6d203be13c0bb00960bc25554d23441224a7a847821f4ce583dc947",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:57",
            "last_seen_utc": "2026-08-28 16:03:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889690": [
        {
            "ioc_value": "f777426e557d31dd4d4bd4b4af3820173a74a22a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:57",
            "last_seen_utc": "2026-08-28 16:03:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889685": [
        {
            "ioc_value": "874a0f570657feefee4d669ca2e26eb3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:56",
            "last_seen_utc": "2026-08-28 16:02:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889686": [
        {
            "ioc_value": "167ce5dd941f2743dcf5dd54d5599ee60df85efd56360c2f9890b24d62789e2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:56",
            "last_seen_utc": "2026-08-28 16:02:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889687": [
        {
            "ioc_value": "6c0a999bf95017a65f9df1ed8c17e55b96d6b3a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:56",
            "last_seen_utc": "2026-08-28 16:02:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889681": [
        {
            "ioc_value": "277adad82a0d4a2bb98072237d9397151424e366",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:55",
            "last_seen_utc": "2026-08-28 16:02:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889682": [
        {
            "ioc_value": "3e8c9fb94a255fc342b993dbb0ad5945",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:55",
            "last_seen_utc": "2026-08-28 16:02:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889683": [
        {
            "ioc_value": "27c3ce0a6e80ca2073c05fb706693c37900725ecfaf56c38d48533f01ad180ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:55",
            "last_seen_utc": "2026-08-28 16:02:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889684": [
        {
            "ioc_value": "c270ac135d81235e4d72e9c828293e944f17c57a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:55",
            "last_seen_utc": "2026-08-28 16:02:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889677": [
        {
            "ioc_value": "a7c125ba12132b819cc8807d47195bf15e9820807df81199d3a0ae689d9cd67c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:54",
            "last_seen_utc": "2026-08-28 16:02:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889678": [
        {
            "ioc_value": "00bed66995b839d6a91730de5f5037b8f1f14242",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:54",
            "last_seen_utc": "2026-08-28 16:02:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889679": [
        {
            "ioc_value": "c8b33d3069562ebe40fae03acc846e41",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:54",
            "last_seen_utc": "2026-08-28 16:02:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889680": [
        {
            "ioc_value": "902827a20ed4b295e36b441875b46db99a87cf18069256d9028c745c456af844",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:54",
            "last_seen_utc": "2026-08-28 16:02:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889674": [
        {
            "ioc_value": "ac4d1674f7a213fd1b07ca40dc364b24514999921fb79201fda29bf26bb37c2c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:53",
            "last_seen_utc": "2026-08-28 16:02:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889675": [
        {
            "ioc_value": "0dcb78d9bf951e40c18816a3099662ef7ceb07a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:53",
            "last_seen_utc": "2026-08-28 16:02:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889676": [
        {
            "ioc_value": "3853eb147e414601b7b0e77fbe46c794",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:53",
            "last_seen_utc": "2026-08-28 16:02:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889671": [
        {
            "ioc_value": "91127a683580f832cd0c20eba32fe632410b0b2c203642be4abfd84c6404085c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:52",
            "last_seen_utc": "2026-08-28 16:02:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889672": [
        {
            "ioc_value": "e4a2c4c4512879a2f374f86709e494d6c42bd6f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:52",
            "last_seen_utc": "2026-08-28 16:02:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889673": [
        {
            "ioc_value": "689dfa61b25da1360c6d04367705761b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:52",
            "last_seen_utc": "2026-08-28 16:02:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889667": [
        {
            "ioc_value": "fb7c711511afcdcf73fc430c9654fbb1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:51",
            "last_seen_utc": "2026-08-28 16:02:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889668": [
        {
            "ioc_value": "889501dbc777cc791d53050c2b1835a8e75740ff8547ee01938b9ab00b033f20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:51",
            "last_seen_utc": "2026-08-28 16:02:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889669": [
        {
            "ioc_value": "6b5e041d9bff12e0b1c1e603e7f39f4cafa2fadf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:51",
            "last_seen_utc": "2026-08-28 16:02:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889670": [
        {
            "ioc_value": "7a348e7afb88634609ccca715a5b64e4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:51",
            "last_seen_utc": "2026-08-28 16:02:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889664": [
        {
            "ioc_value": "11f9cf085162e14e5134555797642c8c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:50",
            "last_seen_utc": "2026-08-28 16:02:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889665": [
        {
            "ioc_value": "1fe6f081bdaacb499dc4ed37dd6e7c846384f01e767948bad7ad1f7accaea955",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:50",
            "last_seen_utc": "2026-08-28 16:02:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889666": [
        {
            "ioc_value": "c9ed12031b8abcb9cf684d7da9c2a331483a3ee6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:50",
            "last_seen_utc": "2026-08-28 16:02:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889660": [
        {
            "ioc_value": "2dc49da22bfa24e6b3f98332f4ff884d08588162",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:49",
            "last_seen_utc": "2026-08-28 16:02:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889661": [
        {
            "ioc_value": "31c8ac175f3887237bf442ffd89c247b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:49",
            "last_seen_utc": "2026-08-28 16:02:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889662": [
        {
            "ioc_value": "1774c985507fe6860f8886628c1fb6e0a6065285866112d67c74eb4ca58ac1b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:49",
            "last_seen_utc": "2026-08-28 16:02:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889663": [
        {
            "ioc_value": "a47cf16f4a8c6262691b68b366b6595fbdad4445",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:49",
            "last_seen_utc": "2026-08-28 16:02:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889657": [
        {
            "ioc_value": "15cc427786a751df2bb92391fa5b20eede65633d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:48",
            "last_seen_utc": "2026-08-28 16:02:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889658": [
        {
            "ioc_value": "2e5365a3d2871b482f617a05aec62f30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:48",
            "last_seen_utc": "2026-08-28 16:02:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889659": [
        {
            "ioc_value": "33140a1cb94998277c38532d4bb515816109b640b82523e96bf79bdbfc1475a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:48",
            "last_seen_utc": "2026-08-28 16:02:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889653": [
        {
            "ioc_value": "812ffc4894ab537e29693bd34d20ec040f50d01b3a7cd21ce8495c15b58e791d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:47",
            "last_seen_utc": "2026-08-28 16:02:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889654": [
        {
            "ioc_value": "216bc48fd5ead16d778a5e1e292bb4c5407b8ee5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:47",
            "last_seen_utc": "2026-08-28 16:02:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889655": [
        {
            "ioc_value": "adf96b56c2fed7d7aeb388e508478f68",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:47",
            "last_seen_utc": "2026-08-28 16:02:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889656": [
        {
            "ioc_value": "671acc872e635072ca28f7d1b52ec415bdd3b9e40707f13cb7281b3aa1bfe49b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:47",
            "last_seen_utc": "2026-08-28 16:02:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889650": [
        {
            "ioc_value": "826081776d6f5307f40c7a68d03b5225703afa816460134de463e94da0654871",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:45",
            "last_seen_utc": "2026-08-28 16:02:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889651": [
        {
            "ioc_value": "4fff6d754301c355b9dd7957834c5f288b4b11c5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:45",
            "last_seen_utc": "2026-08-28 16:02:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889652": [
        {
            "ioc_value": "bbe6e93b44dae64826475b6aa6b2b742",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:34:45",
            "last_seen_utc": "2026-08-28 16:02:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889646": [
        {
            "ioc_value": "736fd965a5aaff9a7259483093ef8186",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:44",
            "last_seen_utc": "2026-08-28 16:02:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889647": [
        {
            "ioc_value": "4fc957b553122ec20e29a91606b8196794e31df4f5966fcf72faae5350b6a852",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-28 02:34:44",
            "last_seen_utc": "2026-08-28 16:02:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889648": [
        {
            "ioc_value": "3d7510ec3428454ed22d2294afb6ffd89169bdfe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-28 02:34:44",
            "last_seen_utc": "2026-08-28 16:02:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889649": [
        {
            "ioc_value": "71d31fe49361d515a5bf77bce5a109f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-28 02:34:44",
            "last_seen_utc": "2026-08-28 16:02:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889643": [
        {
            "ioc_value": "198db13d28dbf4dea020d40531ad25ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:43",
            "last_seen_utc": "2026-08-28 16:02:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889644": [
        {
            "ioc_value": "375146d634c77d66eb3b7b6914d3968ddcb39bdb67cb91aa561484806eabf1ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:43",
            "last_seen_utc": "2026-08-28 16:02:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889645": [
        {
            "ioc_value": "f5348a39bcde96572bc64cd8957de99e1105b64f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:43",
            "last_seen_utc": "2026-08-28 16:02:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889640": [
        {
            "ioc_value": "d7e149f1ca913d1858ddabfdd1d99225",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 02:34:42",
            "last_seen_utc": "2026-08-28 16:02:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889641": [
        {
            "ioc_value": "73a4a9839bc009d4837002d24e131ab748074342190fa6159115ce77f8256938",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:42",
            "last_seen_utc": "2026-08-28 16:02:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889642": [
        {
            "ioc_value": "5c05e67f77b9e3f00c0f874253e0e1b223160125",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:42",
            "last_seen_utc": "2026-08-28 16:02:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889636": [
        {
            "ioc_value": "3a486a98a5e7927a2cb232da916666b052e2e4d4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:41",
            "last_seen_utc": "2026-08-28 16:02:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889637": [
        {
            "ioc_value": "15b622081c2b1e0696d3473d65f17b61",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:41",
            "last_seen_utc": "2026-08-28 16:02:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889638": [
        {
            "ioc_value": "3e97680e06a1593784588bb0e7b98ff1a5cb4809eee5aeb149840017f5714e45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 02:34:41",
            "last_seen_utc": "2026-08-28 16:02:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889639": [
        {
            "ioc_value": "85af2dbe31ec4e05ba8ef046dcff4f6b08a3d5cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-28 02:34:41",
            "last_seen_utc": "2026-08-28 16:02:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889632": [
        {
            "ioc_value": "6f5c207de0e60fb54e34f439b21c8c317539c8c0262f76ad1c19cff0ecb76914",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:40",
            "last_seen_utc": "2026-08-28 16:02:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889633": [
        {
            "ioc_value": "6c563034fa45043ec247ca2dd401e11f1327b0e3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:40",
            "last_seen_utc": "2026-08-28 16:02:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889634": [
        {
            "ioc_value": "ce606c0d5c379ed034b9df3f93510616",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:40",
            "last_seen_utc": "2026-08-28 16:02:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889635": [
        {
            "ioc_value": "3693e5bd3b1a5747588abb021fb96364e5528483c036f32672c8118df4634150",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:40",
            "last_seen_utc": "2026-08-28 16:02:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889629": [
        {
            "ioc_value": "5c306887b7beb99a8f15af3395f99404f7c2477701e559901f9c5943a802318a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:39",
            "last_seen_utc": "2026-08-28 16:02:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889630": [
        {
            "ioc_value": "f71a6854314ef39b5a155c262a7a765b9d275aaf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:39",
            "last_seen_utc": "2026-08-28 16:02:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889631": [
        {
            "ioc_value": "e04a9612bfa33ff365afc19762a8b4c3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-28 02:34:39",
            "last_seen_utc": "2026-08-28 16:02:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889626": [
        {
            "ioc_value": "68219544dd25a1ab4c2d7184af63a3a367f2850cd4e3b927ab498d27a8960ea8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:38",
            "last_seen_utc": "2026-08-30 01:34:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889627": [
        {
            "ioc_value": "b9e20e63775d84c0d526c2cf5c234046d7000107",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:38",
            "last_seen_utc": "2026-08-30 01:34:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889628": [
        {
            "ioc_value": "9823c6808b6a115e65b36335b88742ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-28 02:34:38",
            "last_seen_utc": "2026-08-30 01:34:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889623": [
        {
            "ioc_value": "7c71762aae512f7ec674a1f4aa407380184abf2a01b85de8264375b1ae2bcca4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 02:34:37",
            "last_seen_utc": "2026-08-30 06:34:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889624": [
        {
            "ioc_value": "8f4a7a4b4a9320dadf7b91ac4580f4ea95206421",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 02:34:37",
            "last_seen_utc": "2026-08-30 06:34:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889625": [
        {
            "ioc_value": "140117db527bee77a2830f1576ce8997",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-28 02:34:37",
            "last_seen_utc": "2026-08-30 06:34:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889620": [
        {
            "ioc_value": "178b290d24527fda41dcaa0960b289e024e4fac39b96a3d8aebf9be14f51a635",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:34:36",
            "last_seen_utc": "2026-08-30 06:34:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889621": [
        {
            "ioc_value": "3de514f7e96a69e607258c05c68ddc58145a1531",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:34:36",
            "last_seen_utc": "2026-08-30 06:34:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889622": [
        {
            "ioc_value": "3135bf9c620aea1463c948d1be481493",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:34:36",
            "last_seen_utc": "2026-08-30 06:34:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889617": [
        {
            "ioc_value": "27d22c374ffa52ab63cfb05c09b7925100f6ccd0eb00e314cf8f20be231da250",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:34:35",
            "last_seen_utc": "2026-08-30 06:34:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889618": [
        {
            "ioc_value": "ce1f829dec06ac8558bc4d2a9973ac85cba073c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:34:35",
            "last_seen_utc": "2026-08-30 06:34:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889619": [
        {
            "ioc_value": "3304b81686f03893b0a931f23c6665ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:34:35",
            "last_seen_utc": "2026-08-30 06:34:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1889616": [
        {
            "ioc_value": "vh21ts6c.lippoviv.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 02:29:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889615": [
        {
            "ioc_value": "lippoviv.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 02:29:08",
            "last_seen_utc": "2026-08-28 02:29:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889613": [
        {
            "ioc_value": "sha.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:25:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889614": [
        {
            "ioc_value": "https://sha.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-28 02:25:47",
            "last_seen_utc": "2026-09-01 03:39:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889612": [
        {
            "ioc_value": "8797white.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 02:21:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889611": [
        {
            "ioc_value": "kingsbar.com.sg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 02:21:07",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889609": [
        {
            "ioc_value": "35.86.129.120:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-28 02:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889608": [
        {
            "ioc_value": "jasmin-shaudeen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 02:10:02",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889605": [
        {
            "ioc_value": "38.55.194.135:9980",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 02:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889604": [
        {
            "ioc_value": "121.4.38.18:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 02:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889603": [
        {
            "ioc_value": "121.4.38.18:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 02:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889602": [
        {
            "ioc_value": "pifuxi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 02:03:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889601": [
        {
            "ioc_value": "les-genets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 02:00:01",
            "last_seen_utc": "2026-08-28 10:51:21",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889600": [
        {
            "ioc_value": "xiragowy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 01:54:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889599": [
        {
            "ioc_value": "q3t4zst5nz.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 01:22:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889597": [
        {
            "ioc_value": "http://flreaow.click:6527/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 01:18:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889598": [
        {
            "ioc_value": "http://shhsift.click:7647/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-28 01:18:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889596": [
        {
            "ioc_value": "doqugugu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 01:16:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889595": [
        {
            "ioc_value": "iqqng80109.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 01:10:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889594": [
        {
            "ioc_value": "106.15.10.2:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 01:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889593": [
        {
            "ioc_value": "106.15.10.2:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889592": [
        {
            "ioc_value": "106.15.10.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-28 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889591": [
        {
            "ioc_value": "47.254.173.184:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-28 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889589": [
        {
            "ioc_value": "mezysyzi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 01:04:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889587": [
        {
            "ioc_value": "docskw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:59:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889588": [
        {
            "ioc_value": "intradema.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:59:57",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889586": [
        {
            "ioc_value": "gzy2f6klka.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 00:52:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889584": [
        {
            "ioc_value": "tabachnik.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:49:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889585": [
        {
            "ioc_value": "lowarchitech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:49:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889583": [
        {
            "ioc_value": "wp3.allplast-algerie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:49:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889582": [
        {
            "ioc_value": "api-wp-bb-brides.digital.green",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:49:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889580": [
        {
            "ioc_value": "cricvic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:39:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889581": [
        {
            "ioc_value": "mjc-stbaudille.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:39:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889579": [
        {
            "ioc_value": "soulmail.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:39:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889578": [
        {
            "ioc_value": "litalubi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 00:37:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889577": [
        {
            "ioc_value": "ult4fgdb.lippoviv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:29:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889576": [
        {
            "ioc_value": "lippoviv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:27:52",
            "last_seen_utc": "2026-08-28 00:28:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889568": [
        {
            "ioc_value": "telegace.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-28 00:11:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889567": [
        {
            "ioc_value": "53lbzsch.flasburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:05:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889566": [
        {
            "ioc_value": "flasburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-28 00:02:58",
            "last_seen_utc": "2026-08-28 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "28August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889564": [
        {
            "ioc_value": "pusohike.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 23:48:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889561": [
        {
            "ioc_value": "185.130.46.191:44882",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 23:47:17",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889562": [
        {
            "ioc_value": "185.130.46.191:44884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 23:47:17",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889563": [
        {
            "ioc_value": "185.130.46.191:44885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 23:47:17",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889560": [
        {
            "ioc_value": "114.55.250.233:1128",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 23:47:07",
            "last_seen_utc": "2026-09-01 02:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889559": [
        {
            "ioc_value": "ajax.graphwindows.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 23:46:56",
            "last_seen_utc": "2026-09-01 02:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889558": [
        {
            "ioc_value": "http://flreaow.click:6527/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 23:44:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889557": [
        {
            "ioc_value": "wucudyru.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 23:42:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889556": [
        {
            "ioc_value": "keqyzywy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 23:34:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889555": [
        {
            "ioc_value": "1770wrong.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 23:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889554": [
        {
            "ioc_value": "tpkhl11541.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 23:31:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889551": [
        {
            "ioc_value": "brownlauraine.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 22:55:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889549": [
        {
            "ioc_value": "i5imboqlby.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 22:40:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889548": [
        {
            "ioc_value": "mchnw31688.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 22:39:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889547": [
        {
            "ioc_value": "bmm9b3dd.lipovivees.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 22:31:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889546": [
        {
            "ioc_value": "lipovivees.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 22:27:19",
            "last_seen_utc": "2026-08-27 22:28:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889545": [
        {
            "ioc_value": "rtzj3f9c.glicomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 22:23:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889544": [
        {
            "ioc_value": "vcwxkel0.get-echofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 22:20:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889543": [
        {
            "ioc_value": "glicomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 22:20:23",
            "last_seen_utc": "2026-08-27 22:20:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889542": [
        {
            "ioc_value": "get-echofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 22:20:15",
            "last_seen_utc": "2026-08-27 22:20:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889541": [
        {
            "ioc_value": "wopjs87989.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 22:15:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889540": [
        {
            "ioc_value": "royalensemble.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-27 22:09:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CP",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889539": [
        {
            "ioc_value": "cicota.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 22:06:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889538": [
        {
            "ioc_value": "jedatige.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 21:59:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889537": [
        {
            "ioc_value": "xvdmc35522.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 21:54:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889534": [
        {
            "ioc_value": "loxuvigy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 21:39:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889533": [
        {
            "ioc_value": "6289coffee.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 21:35:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889532": [
        {
            "ioc_value": "mkvdednl4k.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 21:13:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889531": [
        {
            "ioc_value": "http://fezm.website:9048/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 21:10:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889530": [
        {
            "ioc_value": "http://flreaow.click:6527/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 21:10:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889529": [
        {
            "ioc_value": "44tiphany.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 21:08:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889527": [
        {
            "ioc_value": "rsc.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 21:05:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889528": [
        {
            "ioc_value": "https://rsc.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 21:05:47",
            "last_seen_utc": "2026-09-01 03:39:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889526": [
        {
            "ioc_value": "boe4edctzx.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 20:47:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889525": [
        {
            "ioc_value": "cdn14.quran.edu.eu.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-27 20:41:52",
            "last_seen_utc": "2026-08-29 20:54:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889524": [
        {
            "ioc_value": "vsurt16877.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 20:36:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889522": [
        {
            "ioc_value": "xij452a4zj.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 20:30:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889521": [
        {
            "ioc_value": "1wmite8r.lipo--vive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 20:29:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889520": [
        {
            "ioc_value": "lipo--vive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 20:27:12",
            "last_seen_utc": "2026-08-27 20:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889519": [
        {
            "ioc_value": "http://fezm.website:9048/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 20:25:12",
            "last_seen_utc": "2026-08-27 21:42:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c306887b7beb99a8f15af3395f99404f7c2477701e559901f9c5943a802318a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889518": [
        {
            "ioc_value": "ixpwc38088.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 20:06:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889517": [
        {
            "ioc_value": "btwcf42020.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 19:58:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889515": [
        {
            "ioc_value": "ix8fhxrx.flasburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 19:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889514": [
        {
            "ioc_value": "flasburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 19:52:22",
            "last_seen_utc": "2026-08-27 19:52:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889513": [
        {
            "ioc_value": "evergrowdigitalsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 19:50:57",
            "last_seen_utc": "2026-08-27 19:51:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889511": [
        {
            "ioc_value": "94.26.3.112:30173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 19:47:51",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889510": [
        {
            "ioc_value": "94.154.43.60:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-27 19:47:49",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889509": [
        {
            "ioc_value": "89.125.13.158:36626",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 19:47:36",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889508": [
        {
            "ioc_value": "64.89.160.76:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 19:47:18",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889507": [
        {
            "ioc_value": "5.230.201.54:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:47:08",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889506": [
        {
            "ioc_value": "46.246.84.10:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-27 19:47:05",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889505": [
        {
            "ioc_value": "45.94.31.187:56015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:47:01",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889502": [
        {
            "ioc_value": "217.60.102.3:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:46:17",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889503": [
        {
            "ioc_value": "217.60.102.3:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:46:17",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889501": [
        {
            "ioc_value": "192.229.115.243:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:44:53",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889500": [
        {
            "ioc_value": "191.252.184.198:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-27 19:44:50",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889499": [
        {
            "ioc_value": "185.254.96.155:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:44:41",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889497": [
        {
            "ioc_value": "185.212.128.90:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-27 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889498": [
        {
            "ioc_value": "185.212.128.96:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-27 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889496": [
        {
            "ioc_value": "172.111.247.65:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 19:44:18",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889495": [
        {
            "ioc_value": "172.111.198.212:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:44:17",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889494": [
        {
            "ioc_value": "159.195.242.22:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 19:44:07",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889493": [
        {
            "ioc_value": "157.20.182.21:1997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 19:44:04",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889492": [
        {
            "ioc_value": "154.201.82.108:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:54",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889490": [
        {
            "ioc_value": "154.198.49.31:8444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 19:43:53",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889491": [
        {
            "ioc_value": "154.201.82.106:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:53",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889487": [
        {
            "ioc_value": "134.122.187.68:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889488": [
        {
            "ioc_value": "134.122.187.68:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889489": [
        {
            "ioc_value": "134.122.187.68:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889486": [
        {
            "ioc_value": "105.155.16.5:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 19:43:19",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889485": [
        {
            "ioc_value": "105.111.84.214:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:18",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889484": [
        {
            "ioc_value": "104.243.248.63:302",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 19:43:14",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889483": [
        {
            "ioc_value": "103.54.153.49:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 19:43:09",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889482": [
        {
            "ioc_value": "102.117.174.189:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889481": [
        {
            "ioc_value": "8xzxqleeyk.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 19:38:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889480": [
        {
            "ioc_value": "jysame.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 19:09:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889479": [
        {
            "ioc_value": "bypubuco.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 19:07:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889478": [
        {
            "ioc_value": "umami.audergon.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 19:04:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889477": [
        {
            "ioc_value": "futurephotography.yourdemo.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 19:04:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889476": [
        {
            "ioc_value": "id.mapletile.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-27 18:59:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889474": [
        {
            "ioc_value": "cvman-prod.jcloud.ik-server.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 18:54:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889475": [
        {
            "ioc_value": "payload.moodecx.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 18:54:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889473": [
        {
            "ioc_value": "6362karrah.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 18:51:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889472": [
        {
            "ioc_value": "5187elisha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 18:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889471": [
        {
            "ioc_value": "thyon-immo.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 18:44:17",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889470": [
        {
            "ioc_value": "joyousgray.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 18:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889469": [
        {
            "ioc_value": "http://fezm.website:9048/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 18:30:27",
            "last_seen_utc": "2026-08-27 19:56:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/22de5809840cb4a6a2c64f4c8b303cc66209b217a7bd4a9e5941e928b03a95fd/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889468": [
        {
            "ioc_value": "wzhxqquh.lipoavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 18:29:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889467": [
        {
            "ioc_value": "uirbu64886.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 18:27:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889466": [
        {
            "ioc_value": "lipoavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 18:26:25",
            "last_seen_utc": "2026-08-27 18:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889464": [
        {
            "ioc_value": "https://2.28.48.67",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 18:15:35",
            "last_seen_utc": "2026-08-31 08:34:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e6cc428cccc9aae9fb3fbcb9d310e5bc23f813f73e993620ef98e3e511773e2a/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889463": [
        {
            "ioc_value": "qosiwepa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 18:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889462": [
        {
            "ioc_value": "http://flreaow.click:6527/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 17:55:21",
            "last_seen_utc": "2026-08-27 18:59:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/072e2e3d9a9dd4284e173d90a5395b8bd08772d9a310cf153fb23186c60587ab/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889461": [
        {
            "ioc_value": "http://fezm.website:9048/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 17:55:20",
            "last_seen_utc": "2026-08-27 18:59:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/072e2e3d9a9dd4284e173d90a5395b8bd08772d9a310cf153fb23186c60587ab/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889460": [
        {
            "ioc_value": "d64yvu7j0z.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 17:45:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889459": [
        {
            "ioc_value": "dixoqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 17:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889458": [
        {
            "ioc_value": "https://github.com/snowplow-byte/synergy/raw/refs/heads/main/garter",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 17:25:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889457": [
        {
            "ioc_value": "mfv28o7o.get-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 17:20:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889456": [
        {
            "ioc_value": "vmtlu8w8.glaicomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 17:20:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889455": [
        {
            "ioc_value": "glaicomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 17:19:26",
            "last_seen_utc": "2026-08-27 17:20:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889454": [
        {
            "ioc_value": "get-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 17:19:23",
            "last_seen_utc": "2026-08-27 17:19:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889453": [
        {
            "ioc_value": "hagemule.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 17:10:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889451": [
        {
            "ioc_value": "zibila.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 17:09:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889450": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/snowplow-byte/synergy/garter",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 17:09:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889449": [
        {
            "ioc_value": "zacolifo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 17:04:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889448": [
        {
            "ioc_value": "relaxafy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 16:52:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889444": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/snowplow-byte/moustache/swimsuit",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 16:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889443": [
        {
            "ioc_value": "en-us-theeloncod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 16:34:54",
            "last_seen_utc": "2026-08-31 12:40:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889442": [
        {
            "ioc_value": "caxuhove.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 16:32:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889441": [
        {
            "ioc_value": "7fwxhbzb.leviume.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 16:27:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889440": [
        {
            "ioc_value": "fntet93389.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 16:26:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889439": [
        {
            "ioc_value": "leviume.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 16:26:35",
            "last_seen_utc": "2026-08-27 16:26:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889438": [
        {
            "ioc_value": "bluelindsy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 16:01:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889437": [
        {
            "ioc_value": "http://whitepk.click:9001/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 15:53:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889435": [
        {
            "ioc_value": "http://flreaow.click:6527/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 15:53:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889436": [
        {
            "ioc_value": "http://shhsift.click:7647/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 15:53:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889434": [
        {
            "ioc_value": "mekulahu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:52:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889432": [
        {
            "ioc_value": "bnb.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 15:45:47",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889433": [
        {
            "ioc_value": "https://bnb.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 15:45:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889422": [
        {
            "ioc_value": "bondijunction.physio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889423": [
        {
            "ioc_value": "borghettipharma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889424": [
        {
            "ioc_value": "bossanovabeirut.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889425": [
        {
            "ioc_value": "brado.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889426": [
        {
            "ioc_value": "braininjurysvcs.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889427": [
        {
            "ioc_value": "bronzemenfoundation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889428": [
        {
            "ioc_value": "bsocial.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889429": [
        {
            "ioc_value": "bucketmap.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889430": [
        {
            "ioc_value": "buenpastor.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889431": [
        {
            "ioc_value": "c-story.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:15",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889412": [
        {
            "ioc_value": "bike-expert.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889413": [
        {
            "ioc_value": "bimboombar.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889414": [
        {
            "ioc_value": "bimot.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889415": [
        {
            "ioc_value": "binhussainliving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889416": [
        {
            "ioc_value": "bitesized-academy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889417": [
        {
            "ioc_value": "bkul.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889418": [
        {
            "ioc_value": "blackriveraerospace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889419": [
        {
            "ioc_value": "blanesurigoitia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889420": [
        {
            "ioc_value": "blueprinttaxconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889421": [
        {
            "ioc_value": "boehlair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:14",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889406": [
        {
            "ioc_value": "beaconcommerce.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:13",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889407": [
        {
            "ioc_value": "bemexperiences.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:13",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889408": [
        {
            "ioc_value": "bepoint.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:13",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889409": [
        {
            "ioc_value": "berger.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:13",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889410": [
        {
            "ioc_value": "bestilldestinations.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:13",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889411": [
        {
            "ioc_value": "bharatcharitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:13",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889396": [
        {
            "ioc_value": "avincleanroom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889397": [
        {
            "ioc_value": "avsengineering.sg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889398": [
        {
            "ioc_value": "awosano-kureinladungen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889399": [
        {
            "ioc_value": "ayurvedaymas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889400": [
        {
            "ioc_value": "aztechaz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889401": [
        {
            "ioc_value": "babadagultra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889402": [
        {
            "ioc_value": "babkad.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889403": [
        {
            "ioc_value": "baladeacheval.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889404": [
        {
            "ioc_value": "baocaosu001.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889405": [
        {
            "ioc_value": "battybettybooks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:12",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889388": [
        {
            "ioc_value": "atachem.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889389": [
        {
            "ioc_value": "atlassteeleg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889390": [
        {
            "ioc_value": "audleychaucer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-27 16:54:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889391": [
        {
            "ioc_value": "auge.pt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889392": [
        {
            "ioc_value": "augenopti-k-rieckhof.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889393": [
        {
            "ioc_value": "automationtoolstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889394": [
        {
            "ioc_value": "aux-chandelles.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889395": [
        {
            "ioc_value": "aviationtech.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:11",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889382": [
        {
            "ioc_value": "arjenduinhouwer.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:10",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889383": [
        {
            "ioc_value": "armangroup.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:10",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889384": [
        {
            "ioc_value": "artemis-studio.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:10",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889385": [
        {
            "ioc_value": "artesc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:10",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889386": [
        {
            "ioc_value": "artphotoua.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:10",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889387": [
        {
            "ioc_value": "asua.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:10",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889375": [
        {
            "ioc_value": "anotherreset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889376": [
        {
            "ioc_value": "antsad.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889377": [
        {
            "ioc_value": "aptoscommunitynews.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889378": [
        {
            "ioc_value": "aqua-amazon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889379": [
        {
            "ioc_value": "aqua-prof.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889380": [
        {
            "ioc_value": "aquosrenovables.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889381": [
        {
            "ioc_value": "ardecor.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:09",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889368": [
        {
            "ioc_value": "alticimes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889369": [
        {
            "ioc_value": "alusmangroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889370": [
        {
            "ioc_value": "amamcs.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889371": [
        {
            "ioc_value": "ameerahgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889372": [
        {
            "ioc_value": "amistadmission.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889373": [
        {
            "ioc_value": "andradagallery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889374": [
        {
            "ioc_value": "andygallacher.photography",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:08",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889361": [
        {
            "ioc_value": "ahmet-klein.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889362": [
        {
            "ioc_value": "aircofrans.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889363": [
        {
            "ioc_value": "albalcf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889364": [
        {
            "ioc_value": "alea-services.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889365": [
        {
            "ioc_value": "allisonbsalerno.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889366": [
        {
            "ioc_value": "almacis.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889367": [
        {
            "ioc_value": "alpagadepery.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:07",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889352": [
        {
            "ioc_value": "act.edu.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889353": [
        {
            "ioc_value": "adc-explosiveclearance.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889354": [
        {
            "ioc_value": "adkurd.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889355": [
        {
            "ioc_value": "advance-group.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889356": [
        {
            "ioc_value": "africamart.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889357": [
        {
            "ioc_value": "afsemio.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889358": [
        {
            "ioc_value": "afyonhabersitesi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889359": [
        {
            "ioc_value": "agenciacolla.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889360": [
        {
            "ioc_value": "agorocarbonalliance.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:06",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889346": [
        {
            "ioc_value": "a-stab.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:05",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889347": [
        {
            "ioc_value": "abogadosvelazquezmontenegro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:05",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889348": [
        {
            "ioc_value": "abroshen.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:05",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889349": [
        {
            "ioc_value": "acaeaccred.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:05",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889350": [
        {
            "ioc_value": "acnmedia.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:05",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889351": [
        {
            "ioc_value": "acosexfer.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:05",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889343": [
        {
            "ioc_value": "307hatchethouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:04",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889344": [
        {
            "ioc_value": "321estimate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:04",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889345": [
        {
            "ioc_value": "44febpanel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:45:04",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889342": [
        {
            "ioc_value": "tkkzr3id.en-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 15:41:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889341": [
        {
            "ioc_value": "paneagreement.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-27 15:31:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889340": [
        {
            "ioc_value": "https://spiraldirect.ch/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 15:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/spiraldirect.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889339": [
        {
            "ioc_value": "99cprzm6qm.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889327": [
        {
            "ioc_value": "batyfa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:29:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889329": [
        {
            "ioc_value": "ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 15:29:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Orova%20Ransomware",
            "tags": "orova,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889328": [
        {
            "ioc_value": "mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 15:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Orova%20Ransomware",
            "tags": "orova,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889330": [
        {
            "ioc_value": "365437a77b3c0f1bad9b3c504ad5102a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 15:29:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Orova%20Ransomware",
            "tags": "orova,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889334": [
        {
            "ioc_value": "176.65.139.140:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-08-27 15:29:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1889333": [
        {
            "ioc_value": "qcrgn68549.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:29:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889336": [
        {
            "ioc_value": "8nyu2ajyyg.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:29:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889337": [
        {
            "ioc_value": "zitusevu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:29:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889338": [
        {
            "ioc_value": "bjqlq90189.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 15:29:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889335": [
        {
            "ioc_value": "45.88.186.164:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 15:20:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/98d957316a3d556bfe145d8a032999e5ad913c3d51d57cdf1333cf3d68182b81/",
            "tags": "adaptixc2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889332": [
        {
            "ioc_value": "143.14.44.170:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-27 15:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889331": [
        {
            "ioc_value": "193.160.32.138:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889303": [
        {
            "ioc_value": "159.89.24.55:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 14:54:27",
            "last_seen_utc": "2026-08-31 09:02:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889306": [
        {
            "ioc_value": "217.60.195.33:17542",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:27",
            "last_seen_utc": "2026-08-31 03:56:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,DonRemoteHost,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889307": [
        {
            "ioc_value": "109.248.151.101:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:26",
            "last_seen_utc": "2026-08-31 19:18:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889309": [
        {
            "ioc_value": "26unexpected.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 14:54:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889310": [
        {
            "ioc_value": "155.103.71.126:2405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:25",
            "last_seen_utc": "2026-09-01 00:02:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889311": [
        {
            "ioc_value": "203.202.232.155:2444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:25",
            "last_seen_utc": "2026-09-01 00:25:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889312": [
        {
            "ioc_value": "209.99.188.27:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:24",
            "last_seen_utc": "2026-09-01 00:07:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889313": [
        {
            "ioc_value": "31.40.204.219:3467",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:24",
            "last_seen_utc": "2026-09-01 00:01:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889314": [
        {
            "ioc_value": "185.157.163.138:51842",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:23",
            "last_seen_utc": "2026-08-29 07:37:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Buffalo,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889315": [
        {
            "ioc_value": "45.92.1.39:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:22",
            "last_seen_utc": "2026-08-29 21:54:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889317": [
        {
            "ioc_value": "103.168.67.143:3231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:22",
            "last_seen_utc": "2026-08-28 05:46:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889318": [
        {
            "ioc_value": "161.248.179.102:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:21",
            "last_seen_utc": "2026-09-01 01:29:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,SALES",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889319": [
        {
            "ioc_value": "23.95.117.248:6040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:21",
            "last_seen_utc": "2026-09-01 01:03:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889320": [
        {
            "ioc_value": "178.92.162.38:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:21",
            "last_seen_utc": "2026-08-28 15:52:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,EXT+RAT,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889321": [
        {
            "ioc_value": "45.225.135.55:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:13",
            "last_seen_utc": "2026-09-01 01:31:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "23_06_64B,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889322": [
        {
            "ioc_value": "23.95.117.233:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:12",
            "last_seen_utc": "2026-09-01 02:20:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,RemoteHost",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889323": [
        {
            "ioc_value": "185.91.126.34:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:12",
            "last_seen_utc": "2026-08-30 18:03:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Remcos,Server",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889324": [
        {
            "ioc_value": "185.39.18.230:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:54:11",
            "last_seen_utc": "2026-08-30 04:51:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "avpagent,c2,Remcos",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889326": [
        {
            "ioc_value": "d2fioniojk.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 14:54:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889325": [
        {
            "ioc_value": "http://zakuiru.shop:9048/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 14:49:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889316": [
        {
            "ioc_value": "85.239.149.16:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-27 14:41:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889308": [
        {
            "ioc_value": "http://flreaow.click:6527/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 14:39:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889305": [
        {
            "ioc_value": "https://cosmeticstakara.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 14:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cosmeticstakara.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889304": [
        {
            "ioc_value": "hgvxmlmj.go-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 14:28:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889302": [
        {
            "ioc_value": "31.57.219.135:9714",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 14:25:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6157e8fd47726b767a2a683ade4fe78fcfb5de4c1b270e29a8cfa26b1d5d55ce/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889301": [
        {
            "ioc_value": "go-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 14:25:32",
            "last_seen_utc": "2026-08-27 14:26:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889299": [
        {
            "ioc_value": "expce.directoryindustry.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-27 14:13:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117167864476235626",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1889298": [
        {
            "ioc_value": "60.204.240.193:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889297": [
        {
            "ioc_value": "www.intesacanarias.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 14:03:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889296": [
        {
            "ioc_value": "elderberryloft.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-27 14:02:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889295": [
        {
            "ioc_value": "https://elderberryloft.net/acl/realm-serializer.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-27 14:01:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1889293": [
        {
            "ioc_value": "rezeh33407.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889294": [
        {
            "ioc_value": "golcj79667.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889287": [
        {
            "ioc_value": "46.101.179.59:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 13:54:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889288": [
        {
            "ioc_value": "9251traditional.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:54:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889289": [
        {
            "ioc_value": "209.97.138.100:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 13:54:16",
            "last_seen_utc": "2026-08-31 04:58:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889290": [
        {
            "ioc_value": "v754fc7onp.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:54:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889291": [
        {
            "ioc_value": "brtad84102.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:54:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889265": [
        {
            "ioc_value": "howikuci.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:17:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889266": [
        {
            "ioc_value": "selfupdate.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "cryptojacking,historical,Monero,qBittorrent,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889267": [
        {
            "ioc_value": "mine.cdnsrv.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "cryptojacking,historical,Monero,stratum,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889269": [
        {
            "ioc_value": "re7pl3qhwb.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 13:17:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889270": [
        {
            "ioc_value": "abcdefghijklmnopqrst.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "aarch64,Aeza,cryptojacking,CVE-2026-60004,FreeBSD,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889271": [
        {
            "ioc_value": "92.246.139.83:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "aarch64,Aeza,cryptojacking,CVE-2026-60004,FreeBSD,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889272": [
        {
            "ioc_value": "http://92.246.139.83/1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "aarch64,Aeza,cryptojacking,CVE-2026-60004,FreeBSD,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889273": [
        {
            "ioc_value": "http://92.246.139.83/2",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "aarch64,Aeza,cryptojacking,CVE-2026-60004,FreeBSD,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889274": [
        {
            "ioc_value": "http://92.246.139.83/3",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 13:17:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://forums.truenas.com/t/100-cpu-usage-after-update/3498",
            "tags": "aarch64,Aeza,cryptojacking,CVE-2026-60004,FreeBSD,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889286": [
        {
            "ioc_value": "vgvtnvdti.en-us-morningfatmelter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 13:05:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889285": [
        {
            "ioc_value": "85.17.180.206:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889283": [
        {
            "ioc_value": "85.17.180.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889284": [
        {
            "ioc_value": "85.17.180.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889282": [
        {
            "ioc_value": "85.17.180.206:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889281": [
        {
            "ioc_value": "http://flreaow.click:6527/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 13:05:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889280": [
        {
            "ioc_value": "healthmetabolismreset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:57:16",
            "last_seen_utc": "2026-08-27 18:36:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889279": [
        {
            "ioc_value": "www.femmesdefoot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:53:44",
            "last_seen_utc": "2026-08-28 10:50:06",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889276": [
        {
            "ioc_value": "spiraldirect.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 12:53:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889277": [
        {
            "ioc_value": "duo-theo-werni.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:53:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889278": [
        {
            "ioc_value": "weddingstars.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:53:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889275": [
        {
            "ioc_value": "cmp.mc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:53:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889268": [
        {
            "ioc_value": "cms.militiagenavae.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:43:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889264": [
        {
            "ioc_value": "45z48gf6.get-aquaburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:30:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889263": [
        {
            "ioc_value": "guttlite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:29:45",
            "last_seen_utc": "2026-08-27 14:01:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889262": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/snowplow-byte/gulp/imprudent",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:29:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889261": [
        {
            "ioc_value": "get-aquaburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:25:22",
            "last_seen_utc": "2026-08-27 12:25:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889259": [
        {
            "ioc_value": "http://flreaow.click:6527/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 12:22:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889260": [
        {
            "ioc_value": "http://shhsift.click:7647/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 12:22:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1889258": [
        {
            "ioc_value": "c86k6nbm.en-webaquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:21:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889246": [
        {
            "ioc_value": "vikihi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889247": [
        {
            "ioc_value": "niqiza.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889251": [
        {
            "ioc_value": "tuqiby.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889252": [
        {
            "ioc_value": "zykisyna.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889254": [
        {
            "ioc_value": "http://111.92.157.238:54141/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.157.238",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889257": [
        {
            "ioc_value": "xpfovzj6.enus-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:19:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889256": [
        {
            "ioc_value": "en-webaquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:19:07",
            "last_seen_utc": "2026-08-27 12:20:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889255": [
        {
            "ioc_value": "enus-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:18:52",
            "last_seen_utc": "2026-08-27 12:18:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889253": [
        {
            "ioc_value": "gut--lite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 12:18:32",
            "last_seen_utc": "2026-08-28 08:20:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889250": [
        {
            "ioc_value": "154.12.90.231:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 12:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889249": [
        {
            "ioc_value": "154.12.90.231:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889248": [
        {
            "ioc_value": "39.105.16.200:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889245": [
        {
            "ioc_value": "8.162.1.240:10087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:55",
            "last_seen_utc": "2026-09-01 02:47:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889244": [
        {
            "ioc_value": "47.79.21.106:45678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:51",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889243": [
        {
            "ioc_value": "39.97.57.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:44",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889242": [
        {
            "ioc_value": "38.207.177.73:9966",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:43",
            "last_seen_utc": "2026-09-01 02:47:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889241": [
        {
            "ioc_value": "186.244.245.91:28446",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:39",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889239": [
        {
            "ioc_value": "106.15.10.2:11111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:21",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889240": [
        {
            "ioc_value": "106.15.10.2:6789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:21",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889238": [
        {
            "ioc_value": "c-proxy-xjmkjgbsdn.cn-hangzhou.fcapp.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:48:13",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889153": [
        {
            "ioc_value": "sohufe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889176": [
        {
            "ioc_value": "3n6dh6xci7.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889191": [
        {
            "ioc_value": "example-probe-does-not-exist-12345.invalid",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:58",
            "last_seen_utc": "2026-08-27 09:57:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889192": [
        {
            "ioc_value": "https://cta.edu.pe/wp-content/plugins/linux.bin",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889193": [
        {
            "ioc_value": "http://puschl.langhaar-schaeferhunde.com/plugins/linux.bin",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889194": [
        {
            "ioc_value": "https://casasmediterraneas.com/wp-content/plugins/linux.bin",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889195": [
        {
            "ioc_value": "https://www.mediocasavolponi.com/wp-content/plugins/linux.bin",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889196": [
        {
            "ioc_value": "https://cloud.calltop.com.br/apps/web/linux.bin",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889197": [
        {
            "ioc_value": "3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889198": [
        {
            "ioc_value": "0b8e037d160bdb0b621c975c424f680b814bc438fd492ae376ff3140e209e480",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889199": [
        {
            "ioc_value": "a5d9970129afd6e1874cbeafa08df65a3d3599862357ae48bdad211e0f47264a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889201": [
        {
            "ioc_value": "https://46.29.26.32",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 11:45:54",
            "last_seen_utc": "2026-09-01 03:38:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ac7d2c4b87323734e60ab2166f449356,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889211": [
        {
            "ioc_value": "cahuqebe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889215": [
        {
            "ioc_value": "felawi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889219": [
        {
            "ioc_value": "qikyva.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889220": [
        {
            "ioc_value": "loud72.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889224": [
        {
            "ioc_value": "7450lavender.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889221": [
        {
            "ioc_value": "0x1x2x3.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://bazaar.abuse.ch/sample/09a2f164491a14034b50fc5e4182d4ae4537e1c7f9d8de572c65c98a2dd6c13a/",
            "tags": "cryptojacking,CVE-2026-60004,Gitea,udev-persistence,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889222": [
        {
            "ioc_value": "http://0x1x2x3.top/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-27 11:45:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://bazaar.abuse.ch/sample/09a2f164491a14034b50fc5e4182d4ae4537e1c7f9d8de572c65c98a2dd6c13a/",
            "tags": "cryptojacking,CVE-2026-60004,Gitea,udev-persistence,XMRig",
            "anonymous": 0,
            "reporter": "d351d3r"
        }
    ],
    "1889225": [
        {
            "ioc_value": "regaxyha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889231": [
        {
            "ioc_value": "xcvei16102.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889232": [
        {
            "ioc_value": "72.60.201.251:6527",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 11:45:47",
            "last_seen_utc": "2026-08-27 15:10:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6efb1e0ab361cda1dd534e37e543789c,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1889237": [
        {
            "ioc_value": "kolykimy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 11:45:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889236": [
        {
            "ioc_value": "p7yehat5.en-us-puraboostt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 11:31:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889235": [
        {
            "ioc_value": "https://91.98.109.169",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 11:30:29",
            "last_seen_utc": "2026-08-31 16:07:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/561c1001e1595263f9216f7547d7715b98926a61aaf52db644eb7f78a09db18d/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889234": [
        {
            "ioc_value": "en-us-puraboostt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 11:30:27",
            "last_seen_utc": "2026-08-27 11:30:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889233": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/snowplow-byte/washroom/remnant",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 11:28:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889230": [
        {
            "ioc_value": "137.220.151.95:137",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 11:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889228": [
        {
            "ioc_value": "39.105.16.200:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889229": [
        {
            "ioc_value": "39.105.16.200:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889227": [
        {
            "ioc_value": "39.105.16.200:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889226": [
        {
            "ioc_value": "quetelgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 11:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889223": [
        {
            "ioc_value": "oionthzfg.en-us-morningfatmelter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 10:33:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889217": [
        {
            "ioc_value": "https://vesinhmoitruonghy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 10:30:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vesinhmoitruonghy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889218": [
        {
            "ioc_value": "https://www.herreraalvaradoasociados.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 10:30:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.herreraalvaradoasociados.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889216": [
        {
            "ioc_value": "oz42q2a3.get-aquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 10:25:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889214": [
        {
            "ioc_value": "get-aquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 10:24:39",
            "last_seen_utc": "2026-08-27 10:25:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889212": [
        {
            "ioc_value": "rmv.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 10:20:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889213": [
        {
            "ioc_value": "https://rmv.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 10:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1889210": [
        {
            "ioc_value": "http://steadsp.click:8321/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 10:10:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d5627a3dd232b3ba89b098805725b86c65816bc0565d66b34bec52a29bf72c19/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889209": [
        {
            "ioc_value": "http://shhsift.click:7647/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 10:10:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d5627a3dd232b3ba89b098805725b86c65816bc0565d66b34bec52a29bf72c19/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889208": [
        {
            "ioc_value": "147.79.67.186:8321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 10:10:26",
            "last_seen_utc": "2026-08-28 11:16:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889207": [
        {
            "ioc_value": "137.220.151.95:445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 10:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889205": [
        {
            "ioc_value": "185.34.147.32:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 10:05:10",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889206": [
        {
            "ioc_value": "45.61.170.105:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 10:05:10",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889204": [
        {
            "ioc_value": "43.143.13.146:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 10:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889203": [
        {
            "ioc_value": "182.92.78.7:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889202": [
        {
            "ioc_value": "taschenmitdruck.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 10:03:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889200": [
        {
            "ioc_value": "https://www.avi-wallpapers.co.il/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 10:00:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.avi-wallpapers.co.il",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889190": [
        {
            "ioc_value": "https://odxvj-fii5.marysasha20520.workers.dev/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:57:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889189": [
        {
            "ioc_value": "manikandan83.mysynology.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 09:55:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1889182": [
        {
            "ioc_value": "extranethelp-desk2026.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889183": [
        {
            "ioc_value": "image-guestsite.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889184": [
        {
            "ioc_value": "image-id9438372.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889185": [
        {
            "ioc_value": "img-load2026089.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889186": [
        {
            "ioc_value": "load-img8388.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889187": [
        {
            "ioc_value": "newphotoguest.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889188": [
        {
            "ioc_value": "testload250808.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 09:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889181": [
        {
            "ioc_value": "62.238.110.216:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 09:47:08",
            "last_seen_utc": "2026-09-01 02:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889180": [
        {
            "ioc_value": "56.69.251.23:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:47:06",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889179": [
        {
            "ioc_value": "38.240.48.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:46:35",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889178": [
        {
            "ioc_value": "217.60.195.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:46:14",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889177": [
        {
            "ioc_value": "217.217.97.164:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-27 09:46:13",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889175": [
        {
            "ioc_value": "209.97.166.99:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 09:45:31",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889174": [
        {
            "ioc_value": "203.202.232.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:45:24",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889173": [
        {
            "ioc_value": "201.51.2.186:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 09:45:22",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889172": [
        {
            "ioc_value": "2.27.203.59:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-27 09:45:16",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889171": [
        {
            "ioc_value": "199.245.176.147:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 09:45:14",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889170": [
        {
            "ioc_value": "198.23.177.210:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 09:45:10",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889169": [
        {
            "ioc_value": "188.190.23.7:4343",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 09:44:46",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889167": [
        {
            "ioc_value": "172.86.119.225:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-27 09:44:17",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889168": [
        {
            "ioc_value": "172.93.187.109:13901",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 09:44:17",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889166": [
        {
            "ioc_value": "158.94.210.136:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 09:43:59",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889165": [
        {
            "ioc_value": "155.117.183.31:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 09:43:53",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889163": [
        {
            "ioc_value": "154.201.82.105:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:43:50",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889164": [
        {
            "ioc_value": "154.201.82.106:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:43:50",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889162": [
        {
            "ioc_value": "144.31.6.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 09:43:43",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889161": [
        {
            "ioc_value": "144.217.94.115:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-27 09:43:42",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889159": [
        {
            "ioc_value": "105.159.4.49:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 09:43:18",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889160": [
        {
            "ioc_value": "106.15.65.247:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-27 09:43:18",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889156": [
        {
            "ioc_value": "https://tempsgraphie.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 09:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tempsgraphie.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889157": [
        {
            "ioc_value": "https://lootguys.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 09:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lootguys.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889158": [
        {
            "ioc_value": "https://gascreative.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 09:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gascreative.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1889155": [
        {
            "ioc_value": "152.44.34.91:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 09:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889154": [
        {
            "ioc_value": "en-us-nurvealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 09:21:32",
            "last_seen_utc": "2026-08-29 14:53:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889143": [
        {
            "ioc_value": "23.94.252.4:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 09:09:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889144": [
        {
            "ioc_value": "158.174.50.97:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-27 09:09:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889145": [
        {
            "ioc_value": "91.92.40.138:4838",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-27 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889146": [
        {
            "ioc_value": "27.124.17.164:8801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889147": [
        {
            "ioc_value": "27.124.17.173:8801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 09:09:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889152": [
        {
            "ioc_value": "193.160.32.138:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 09:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889150": [
        {
            "ioc_value": "38.47.102.194:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 09:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889151": [
        {
            "ioc_value": "8.148.13.91:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 09:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889148": [
        {
            "ioc_value": "47.109.23.77:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889149": [
        {
            "ioc_value": "206.123.137.133:56090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 09:05:07",
            "last_seen_utc": "2026-09-01 00:45:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889128": [
        {
            "ioc_value": "lixyvy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 08:58:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889129": [
        {
            "ioc_value": "unnecessaryscarlet.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 08:58:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889131": [
        {
            "ioc_value": "91.215.85.10:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889132": [
        {
            "ioc_value": "45.66.217.107:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889133": [
        {
            "ioc_value": "108.187.4.95:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889134": [
        {
            "ioc_value": "167.148.201.29:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889135": [
        {
            "ioc_value": "178.16.53.120:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889136": [
        {
            "ioc_value": "45.141.21.54:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889137": [
        {
            "ioc_value": "138.124.60.14:5357",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889138": [
        {
            "ioc_value": "77.110.126.19:5357",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889139": [
        {
            "ioc_value": "77.110.125.165:57888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 08:58:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889141": [
        {
            "ioc_value": "47.242.62.96:15800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 08:58:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889142": [
        {
            "ioc_value": "34.41.139.193:56090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 08:58:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a9938d5d0d3a1fdc65fc130dcb8599619187e89e561311691e620f2a45ee929/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889140": [
        {
            "ioc_value": "209.54.101.171:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 08:56:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e2c90ddcfef9549c107908adb11b7aec93a105779b6844daeb26bbd5c245d605/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889130": [
        {
            "ioc_value": "103.114.217.108:5508",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 08:54:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9926a65e2307944a1432cb35ceab42acbdc2e7fbc23aa0eb390a3bce64da6116/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889122": [
        {
            "ioc_value": "helum66775.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 08:51:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889124": [
        {
            "ioc_value": "vzz1jq7u8k.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 08:51:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889127": [
        {
            "ioc_value": "217.60.195.34:18622",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 08:50:41",
            "last_seen_utc": "2026-09-01 00:21:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1be4ef70585595235b1f6b4890552228382101ba41226661aa6a86585e5fc458/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889126": [
        {
            "ioc_value": "158.51.122.136:4944",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.koadic",
            "malware_alias": null,
            "malware_printable": "Koadic",
            "first_seen_utc": "2026-08-27 08:50:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ae4144ff75a9b6371fd4d0ce0cce0e1d7be82f3c28eeea62ed5b9b0bea3450a6/",
            "tags": "Koadic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889125": [
        {
            "ioc_value": "109.122.18.169:3693",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-27 08:47:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889123": [
        {
            "ioc_value": "204.10.160.171:3608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-08-27 08:45:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889121": [
        {
            "ioc_value": "178.173.234.123:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-27 08:43:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889120": [
        {
            "ioc_value": "66.55.77.158:7400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:40:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bb403711e7e5d9633f7b6ef5104c390195df377e5c8e90fd35223fb39181021/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889119": [
        {
            "ioc_value": "laserimb.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 08:40:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889081": [
        {
            "ioc_value": "pamevile.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 08:38:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889091": [
        {
            "ioc_value": "siffx01359.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 08:38:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889092": [
        {
            "ioc_value": "172.245.155.83:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:11",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889093": [
        {
            "ioc_value": "94.26.3.112:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:10",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889094": [
        {
            "ioc_value": "94.26.3.112:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:10",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889095": [
        {
            "ioc_value": "198.23.177.206:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:09",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889096": [
        {
            "ioc_value": "198.23.177.206:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:09",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889097": [
        {
            "ioc_value": "46.151.182.98:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:09",
            "last_seen_utc": "2026-09-01 02:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889098": [
        {
            "ioc_value": "196.251.121.137:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-27 08:38:09",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889099": [
        {
            "ioc_value": "212.193.3.234:5678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 08:38:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889100": [
        {
            "ioc_value": "35.229.230.203:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 08:38:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889101": [
        {
            "ioc_value": "158.160.98.75:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 08:38:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889102": [
        {
            "ioc_value": "93.113.25.9:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 08:38:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889103": [
        {
            "ioc_value": "139.162.82.104:38264",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-27 08:38:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889104": [
        {
            "ioc_value": "69.166.66.88:4480",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-27 08:38:05",
            "last_seen_utc": "2026-08-31 03:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889105": [
        {
            "ioc_value": "105.159.4.49:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-27 08:38:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1889114": [
        {
            "ioc_value": "sel.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889115": [
        {
            "ioc_value": "sos.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889116": [
        {
            "ioc_value": "swi.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889117": [
        {
            "ioc_value": "u550.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889118": [
        {
            "ioc_value": "war.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889106": [
        {
            "ioc_value": "2280.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": "2026-08-27 08:36:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889107": [
        {
            "ioc_value": "cyx0.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889108": [
        {
            "ioc_value": "dod.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889109": [
        {
            "ioc_value": "fso.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889110": [
        {
            "ioc_value": "gli.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889111": [
        {
            "ioc_value": "kul.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889112": [
        {
            "ioc_value": "mrr.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889113": [
        {
            "ioc_value": "nef.cantdown.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 08:36:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889090": [
        {
            "ioc_value": "killkill1.myftp.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-27 08:30:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bb403711e7e5d9633f7b6ef5104c390195df377e5c8e90fd35223fb39181021/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889089": [
        {
            "ioc_value": "inter.myftp.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-27 08:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bb403711e7e5d9633f7b6ef5104c390195df377e5c8e90fd35223fb39181021/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889088": [
        {
            "ioc_value": "w0unb44m.geniusbrainsignal.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 08:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889087": [
        {
            "ioc_value": "www.ambiopharmconsultingltdbackup.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 08:25:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e2c90ddcfef9549c107908adb11b7aec93a105779b6844daeb26bbd5c245d605/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889086": [
        {
            "ioc_value": "advancehunter.4nmn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 08:25:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9926a65e2307944a1432cb35ceab42acbdc2e7fbc23aa0eb390a3bce64da6116/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889085": [
        {
            "ioc_value": "geniusbrainsignal.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 08:24:19",
            "last_seen_utc": "2026-08-27 08:24:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889084": [
        {
            "ioc_value": "49.235.130.208:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889082": [
        {
            "ioc_value": "67.216.197.83:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889083": [
        {
            "ioc_value": "47.109.23.77:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889071": [
        {
            "ioc_value": "2cae63ea97507418aec97137f6080e73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.termite",
            "malware_alias": null,
            "malware_printable": "Termite",
            "first_seen_utc": "2026-08-27 08:01:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Termite%20Ransomware",
            "tags": "ransomware,termite",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889072": [
        {
            "ioc_value": "4c58195328f5b5e4a37aa6f42b386172",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.termite",
            "malware_alias": null,
            "malware_printable": "Termite",
            "first_seen_utc": "2026-08-27 08:01:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Termite%20Ransomware",
            "tags": "ransomware,termite",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889073": [
        {
            "ioc_value": "6b06aae5ec596cdbc1b9d4c457fd5f81",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.termite",
            "malware_alias": null,
            "malware_printable": "Termite",
            "first_seen_utc": "2026-08-27 08:01:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Termite%20Ransomware",
            "tags": "ransomware,termite",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889078": [
        {
            "ioc_value": "termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.termite",
            "malware_alias": null,
            "malware_printable": "Termite",
            "first_seen_utc": "2026-08-27 08:01:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Termite%20Ransomware",
            "tags": "ransomware,termite",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889079": [
        {
            "ioc_value": "pqw3hepvky2pgyyv6dupvx47cm2gxzwop6dfei3i67dj76tdj6alplqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.termite",
            "malware_alias": null,
            "malware_printable": "Termite",
            "first_seen_utc": "2026-08-27 08:01:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Termite%20Ransomware",
            "tags": "ransomware,termite",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889080": [
        {
            "ioc_value": "y4bdg56uaznmbptf7dgp5xn3sjyyh4qodqjrsbziqatnyapmiqqctgid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.termite",
            "malware_alias": null,
            "malware_printable": "Termite",
            "first_seen_utc": "2026-08-27 08:01:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Termite%20Ransomware",
            "tags": "ransomware,termite",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889074": [
        {
            "ioc_value": "185.198.58.107:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 07:58:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a63cffc78eea1c004b2e56ef5ae6573662376b5c6ec8ebbaef27cac7344fc743/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889075": [
        {
            "ioc_value": "185.198.58.107:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 07:58:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a63cffc78eea1c004b2e56ef5ae6573662376b5c6ec8ebbaef27cac7344fc743/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889076": [
        {
            "ioc_value": "185.198.58.107:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 07:58:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a63cffc78eea1c004b2e56ef5ae6573662376b5c6ec8ebbaef27cac7344fc743/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889077": [
        {
            "ioc_value": "c2.ethanremote.co.uk",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-27 07:58:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a63cffc78eea1c004b2e56ef5ae6573662376b5c6ec8ebbaef27cac7344fc743/",
            "tags": "dropped-by-amadey,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889069": [
        {
            "ioc_value": "109.107.168.197:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-27 07:56:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "dropped-by-Vidar,SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889070": [
        {
            "ioc_value": "109.107.168.197:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-27 07:56:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "dropped-by-Vidar,SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889060": [
        {
            "ioc_value": "vhgicwxoo9.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 07:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889061": [
        {
            "ioc_value": "lag11ci2tl.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 07:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889063": [
        {
            "ioc_value": "ac9d11435d475086b80ebe7d6943fc83",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:54:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Majinahanashi%20Ransomware",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889064": [
        {
            "ioc_value": "ede70699452c4bf8ec5adef4aff6ba44",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:54:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Majinahanashi%20Ransomware",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1889068": [
        {
            "ioc_value": "135.136.135.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:53:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f51dc5e1848daee4e607d46faa25033e1151060cd3482ad4439754440d6c4c01/",
            "tags": "HemiGate",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889065": [
        {
            "ioc_value": "102.220.160.58:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-27 07:52:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889066": [
        {
            "ioc_value": "102.220.160.58:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-27 07:52:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889067": [
        {
            "ioc_value": "102.220.160.58:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-27 07:52:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889062": [
        {
            "ioc_value": "windows-update-local.rest",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889059": [
        {
            "ioc_value": "159.223.110.159:54321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:33:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41c081678ddcf41b409fcbaeba8d803742ae1a4931b2df0f5a5a8699d7636227/",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889057": [
        {
            "ioc_value": "zynwh37550.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 07:31:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889058": [
        {
            "ioc_value": "https://ratatwista.com:50051/agent-control/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:31:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7f5c3d6bb064a19bc4d5e332f258824cbf3e256069eee4c11b23be5d799a4d18/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889056": [
        {
            "ioc_value": "http://91.92.241.119/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889054": [
        {
            "ioc_value": "http://31.77.228.62/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889055": [
        {
            "ioc_value": "http://80.76.49.106/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889052": [
        {
            "ioc_value": "http://158.94.208.32/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889053": [
        {
            "ioc_value": "http://178.16.52.93/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889050": [
        {
            "ioc_value": "http://103.101.85.184/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889051": [
        {
            "ioc_value": "http://135.181.127.244/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889048": [
        {
            "ioc_value": "94.103.88.121:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889049": [
        {
            "ioc_value": "95.135.181.73:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889037": [
        {
            "ioc_value": "2.27.5.214:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889038": [
        {
            "ioc_value": "31.77.228.40:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889039": [
        {
            "ioc_value": "31.77.228.62:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889040": [
        {
            "ioc_value": "43.228.157.66:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889041": [
        {
            "ioc_value": "45.88.91.77:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889042": [
        {
            "ioc_value": "78.17.93.167:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889043": [
        {
            "ioc_value": "80.76.49.106:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889044": [
        {
            "ioc_value": "80.76.49.77:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889045": [
        {
            "ioc_value": "91.92.241.119:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889046": [
        {
            "ioc_value": "91.92.241.69:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889047": [
        {
            "ioc_value": "91.92.242.73:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889036": [
        {
            "ioc_value": "196.251.107.163:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889029": [
        {
            "ioc_value": "158.94.209.112:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889030": [
        {
            "ioc_value": "158.94.211.113:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889031": [
        {
            "ioc_value": "160.20.109.16:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889032": [
        {
            "ioc_value": "160.20.109.33:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889033": [
        {
            "ioc_value": "160.20.109.90:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889034": [
        {
            "ioc_value": "178.16.52.90:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889035": [
        {
            "ioc_value": "193.148.56.226:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889027": [
        {
            "ioc_value": "135.181.127.244:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889028": [
        {
            "ioc_value": "158.94.208.32:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:29:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889025": [
        {
            "ioc_value": "137.220.151.95:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 07:27:24",
            "last_seen_utc": "2026-08-27 13:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1889026": [
        {
            "ioc_value": "154.12.90.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 07:27:24",
            "last_seen_utc": "2026-08-27 12:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888274": [
        {
            "ioc_value": "robbywoj321.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-27 07:22:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "seikenDEV"
        }
    ],
    "1888294": [
        {
            "ioc_value": "windowskernel.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888296": [
        {
            "ioc_value": "https://windowskernel.lol/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888297": [
        {
            "ioc_value": "https://windowskernel.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888298": [
        {
            "ioc_value": "https://windowskernel.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888299": [
        {
            "ioc_value": "https://windowskernel.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888300": [
        {
            "ioc_value": "https://windowskernel.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888301": [
        {
            "ioc_value": "https://windowskernel.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:22:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888314": [
        {
            "ioc_value": "team.tesisquare.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-08-27 07:22:36",
            "last_seen_utc": null,
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1888320": [
        {
            "ioc_value": "94.154.43.249:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:22:35",
            "last_seen_utc": "2026-08-29 16:41:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888336": [
        {
            "ioc_value": "eldertechsupport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:22:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "tanner"
        }
    ],
    "1888334": [
        {
            "ioc_value": "159.65.50.202:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:22:34",
            "last_seen_utc": "2026-08-31 03:15:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888462": [
        {
            "ioc_value": "46.101.146.87:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:22:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888480": [
        {
            "ioc_value": "pig.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:22:33",
            "last_seen_utc": "2026-08-26 19:58:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1888521": [
        {
            "ioc_value": "https://yeter.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888522": [
        {
            "ioc_value": "https://yeter.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888523": [
        {
            "ioc_value": "https://yeter.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888524": [
        {
            "ioc_value": "https://yeter.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888525": [
        {
            "ioc_value": "https://yeter.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888526": [
        {
            "ioc_value": "yeter.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888556": [
        {
            "ioc_value": "https://mibombo.in/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888557": [
        {
            "ioc_value": "https://mibombo.in/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888558": [
        {
            "ioc_value": "https://mibombo.in/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888559": [
        {
            "ioc_value": "https://mibombo.in/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888560": [
        {
            "ioc_value": "https://mibombo.in/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888566": [
        {
            "ioc_value": "mibombo.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-27 07:21:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1888824": [
        {
            "ioc_value": "139.99.9.133:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://blog.efespain.com/posts/capitulo-13-trinity-propagador/",
            "tags": "ADB,Android,cryptomining,IoT,Monero,Trinity,XMRig",
            "anonymous": 0,
            "reporter": "eFeSpain"
        }
    ],
    "1888825": [
        {
            "ioc_value": "78.46.89.102:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://blog.efespain.com/posts/capitulo-13-trinity-propagador/",
            "tags": "ADB,Android,cryptomining,IoT,Monero,Trinity,XMRig",
            "anonymous": 0,
            "reporter": "eFeSpain"
        }
    ],
    "1888848": [
        {
            "ioc_value": "64.227.187.82:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:21:38",
            "last_seen_utc": "2026-08-27 04:49:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888887": [
        {
            "ioc_value": "http://103.146.111.162:51328/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 07:21:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.146.111.162",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1888888": [
        {
            "ioc_value": "http://175.107.218.16:52958/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 07:21:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.218.16",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1888894": [
        {
            "ioc_value": "f0aa83bbbd2c75e2f71ec16029ee5fcfad59f3a8efa30a500b815f0f6c18d987",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-08-27 07:21:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "redtail,upx,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1888895": [
        {
            "ioc_value": "ed23a8c75dc4f04acd8b68c51a0ebdb4d5cce6c06eed2451ebd0428a32d9df99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-08-27 07:21:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "loader,redtail",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1888896": [
        {
            "ioc_value": "3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-08-27 07:21:36",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "cleaner,redtail",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1889024": [
        {
            "ioc_value": "gi4tt6hi.enus-puraboost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:21:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888897": [
        {
            "ioc_value": "217.60.195.113:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-08-27 07:21:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://beelzebub.ai/blog/redtail-docker-api-campaign-evolves",
            "tags": "cryptominer,redtail,ssh-worm,xmrig",
            "anonymous": 0,
            "reporter": "Chuan_jian_guo"
        }
    ],
    "1888903": [
        {
            "ioc_value": "154.94.224.35:2096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 07:21:34",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "141159,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1888904": [
        {
            "ioc_value": "156.40.156.39:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 07:21:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "3527,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1888905": [
        {
            "ioc_value": "154.94.224.35:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-27 07:21:33",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "141159,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1888911": [
        {
            "ioc_value": "http://144.31.40.80/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 07:21:33",
            "last_seen_utc": "2026-08-31 08:09:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,mix,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888927": [
        {
            "ioc_value": "143.198.84.165:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:21:32",
            "last_seen_utc": "2026-08-28 09:00:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888938": [
        {
            "ioc_value": "104.248.247.126:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:21:32",
            "last_seen_utc": "2026-08-31 04:56:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888928": [
        {
            "ioc_value": "139.59.154.153:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:21:31",
            "last_seen_utc": "2026-08-30 11:18:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888939": [
        {
            "ioc_value": "139.59.154.153:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:21:30",
            "last_seen_utc": "2026-08-31 13:18:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888956": [
        {
            "ioc_value": "143.198.84.165:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-27 07:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888967": [
        {
            "ioc_value": "google-meet-verification.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/10686",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1888968": [
        {
            "ioc_value": "trophylab.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/10623",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1888969": [
        {
            "ioc_value": "metricgw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/10640",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1888970": [
        {
            "ioc_value": "stonecrestrvpark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/10407",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1888971": [
        {
            "ioc_value": "bitpie-ad.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/10386",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1888972": [
        {
            "ioc_value": "equineproducts.nz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 07:21:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/10297",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1888988": [
        {
            "ioc_value": "http://45.177.33.169:55300/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 07:21:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.177.33.169",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1888989": [
        {
            "ioc_value": "http://153.117.6.80:40460/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 07:21:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.80",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1888990": [
        {
            "ioc_value": "http://72.255.32.113:46256/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 07:21:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.113",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1888991": [
        {
            "ioc_value": "http://153.117.34.93:38628/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-27 07:21:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.34.93",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1889023": [
        {
            "ioc_value": "i0xh1sjp.en-us-zen-sulin.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889022": [
        {
            "ioc_value": "af55l61r.en-us-zen-sulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:19:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889021": [
        {
            "ioc_value": "enus-puraboost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:19:57",
            "last_seen_utc": "2026-08-27 07:20:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889020": [
        {
            "ioc_value": "en-us-zen-sulin.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:18:37",
            "last_seen_utc": "2026-08-27 07:19:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889019": [
        {
            "ioc_value": "en-us-zen-sulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:18:31",
            "last_seen_utc": "2026-08-27 07:18:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1889018": [
        {
            "ioc_value": "veleqevy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 07:18:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889017": [
        {
            "ioc_value": "xozokana.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889016": [
        {
            "ioc_value": "fodydyhy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 07:10:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889015": [
        {
            "ioc_value": "realtorinstpetersburg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:10:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889014": [
        {
            "ioc_value": "yourthirdeyeadvisor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 07:10:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889013": [
        {
            "ioc_value": "photo-guestimage.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:09:44",
            "last_seen_utc": "2026-08-27 09:48:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889010": [
        {
            "ioc_value": "fnrh-v92w.mileyjimena72123.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:06:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889011": [
        {
            "ioc_value": "sdh-c373.persephonegloria44235.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:06:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889012": [
        {
            "ioc_value": "sqg-nf9a4.mckennaeleanor69537.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:06:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889009": [
        {
            "ioc_value": "https://sqg-nf9a4.mckennaeleanor69537.workers.dev/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889008": [
        {
            "ioc_value": "https://sdh-c373.persephonegloria44235.workers.dev/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:05:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889007": [
        {
            "ioc_value": "https://fnrh-v92w.mileyjimena72123.workers.dev/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-27 07:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1889006": [
        {
            "ioc_value": "45.63.43.183:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-27 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889005": [
        {
            "ioc_value": "144.48.124.90:18111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889003": [
        {
            "ioc_value": "addsource.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:59:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889004": [
        {
            "ioc_value": "airlandsea-shipping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:59:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889002": [
        {
            "ioc_value": "mythenclick.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:49:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1889001": [
        {
            "ioc_value": "cssxu83671.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 06:47:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1889000": [
        {
            "ioc_value": "45.11.231.147:2420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 06:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888998": [
        {
            "ioc_value": "relaisduvin-pro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:39:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888999": [
        {
            "ioc_value": "www.cen-taux-change.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:39:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888997": [
        {
            "ioc_value": "ratuhyly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 06:35:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888996": [
        {
            "ioc_value": "118.107.44.39:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 06:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888995": [
        {
            "ioc_value": "118.107.44.39:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 06:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888994": [
        {
            "ioc_value": "bn6xg7zi.geniusbrainsignal.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:25:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888993": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Christa6547/trg75kl9j/456rt77ugn",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:24:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888992": [
        {
            "ioc_value": "geniusbrainsignal.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:23:47",
            "last_seen_utc": "2026-08-27 06:24:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888987": [
        {
            "ioc_value": "dacorony.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 06:10:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888986": [
        {
            "ioc_value": "nma-advocates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:09:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888985": [
        {
            "ioc_value": "kakejaxi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 06:05:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888983": [
        {
            "ioc_value": "144.48.124.90:1100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888984": [
        {
            "ioc_value": "144.48.124.90:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888981": [
        {
            "ioc_value": "38.60.203.203:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888982": [
        {
            "ioc_value": "38.60.203.203:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888980": [
        {
            "ioc_value": "49.235.130.208:33060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888979": [
        {
            "ioc_value": "mascontenidos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 06:04:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888978": [
        {
            "ioc_value": "109.122.18.169:5560",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-27 06:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888977": [
        {
            "ioc_value": "spsolutions.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.strelastealer",
            "malware_alias": null,
            "malware_printable": "StrelaStealer",
            "first_seen_utc": "2026-08-27 05:58:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "StrelaStealer",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888976": [
        {
            "ioc_value": "ganuqupa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 05:42:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888975": [
        {
            "ioc_value": "cicyducu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 05:38:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888974": [
        {
            "ioc_value": "mimyfedu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 05:35:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888973": [
        {
            "ioc_value": "stiff573.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 05:32:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888966": [
        {
            "ioc_value": "gylalinu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 05:15:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888964": [
        {
            "ioc_value": "119.91.49.9:9876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888965": [
        {
            "ioc_value": "38.60.203.203:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-27 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888963": [
        {
            "ioc_value": "106.15.44.150:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888962": [
        {
            "ioc_value": "petsdelivery.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 05:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888961": [
        {
            "ioc_value": "timomidia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 04:56:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888960": [
        {
            "ioc_value": "powerflash64bk.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 04:55:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f38c79fa7f20dc9bb28601fe8b8d34309b137b5f6586504e010776563a969224/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888959": [
        {
            "ioc_value": "bafosa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 04:51:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888958": [
        {
            "ioc_value": "45.203.213.231:6088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 04:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888957": [
        {
            "ioc_value": "45.203.213.231:6099",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 04:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888955": [
        {
            "ioc_value": "45.148.18.44:60507",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-27 04:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888954": [
        {
            "ioc_value": "cicolywu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 04:41:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888953": [
        {
            "ioc_value": "http://45.88.91.77",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 04:35:20",
            "last_seen_utc": "2026-08-27 13:02:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/02402b30b28d4729819015c4c0caee2515b20128592f5eec60ac8e899a644a23/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888952": [
        {
            "ioc_value": "p2oje4xr.genesisrevivl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 04:24:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888951": [
        {
            "ioc_value": "genesisrevivl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 04:23:40",
            "last_seen_utc": "2026-08-27 04:24:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888950": [
        {
            "ioc_value": "11okvpn5vx.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 04:16:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888948": [
        {
            "ioc_value": "49.235.130.208:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888949": [
        {
            "ioc_value": "49.235.130.208:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888946": [
        {
            "ioc_value": "49.235.130.208:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888947": [
        {
            "ioc_value": "49.235.130.208:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888945": [
        {
            "ioc_value": "kwse39pp7t.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 04:02:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888944": [
        {
            "ioc_value": "7tk7vml0da.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 03:58:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888943": [
        {
            "ioc_value": "relicariovirtual.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 03:56:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888942": [
        {
            "ioc_value": "qalowyge.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 03:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888941": [
        {
            "ioc_value": "vomupako.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 03:44:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888940": [
        {
            "ioc_value": "wobotaxo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 03:19:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888937": [
        {
            "ioc_value": "b7zhnw8a.enus-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 03:08:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888936": [
        {
            "ioc_value": "enus-prostafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 03:08:46",
            "last_seen_utc": "2026-08-27 03:08:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888935": [
        {
            "ioc_value": "http://fresok.top:9048/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 03:08:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888934": [
        {
            "ioc_value": "http://flreaow.click:6527/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 03:08:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888933": [
        {
            "ioc_value": "tidafe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 03:00:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888932": [
        {
            "ioc_value": "hms-tools.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:54:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888931": [
        {
            "ioc_value": "http://shhsift.click:7647/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 02:51:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888930": [
        {
            "ioc_value": "http://fresok.top:9048/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 02:51:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888929": [
        {
            "ioc_value": "lozunoda.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 02:49:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888926": [
        {
            "ioc_value": "piguvere.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 02:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888925": [
        {
            "ioc_value": "qvkrr37315.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 02:27:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888924": [
        {
            "ioc_value": "1a81inkd.genesis-revival.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:24:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888923": [
        {
            "ioc_value": "genesis-revival.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:22:38",
            "last_seen_utc": "2026-08-27 02:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888922": [
        {
            "ioc_value": "dz0rfvcc.enus-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:21:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888921": [
        {
            "ioc_value": "00kx2b6w.enus-heroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888920": [
        {
            "ioc_value": "sysuvy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 02:19:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888919": [
        {
            "ioc_value": "enus-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:18:29",
            "last_seen_utc": "2026-08-27 02:18:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888918": [
        {
            "ioc_value": "enus-heroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:18:18",
            "last_seen_utc": "2026-08-27 02:18:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888917": [
        {
            "ioc_value": "cloecaron.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 02:14:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888916": [
        {
            "ioc_value": "e37q6hiygh.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 02:13:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888914": [
        {
            "ioc_value": "vcd.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 02:05:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1888915": [
        {
            "ioc_value": "https://vcd.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 02:05:47",
            "last_seen_utc": "2026-09-01 03:39:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1888913": [
        {
            "ioc_value": "8.160.179.135:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888912": [
        {
            "ioc_value": "47.102.118.214:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-27 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888910": [
        {
            "ioc_value": "nz35c8aefo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 01:51:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888909": [
        {
            "ioc_value": "wujabifo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 01:40:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888908": [
        {
            "ioc_value": "http://cn631389.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-27 01:40:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888907": [
        {
            "ioc_value": "https://tydesign.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-27 01:30:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tydesign.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888906": [
        {
            "ioc_value": "9001kristine.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 01:29:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888902": [
        {
            "ioc_value": "qegevoga.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 01:00:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888901": [
        {
            "ioc_value": "dailygilgit.epizy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 00:54:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888900": [
        {
            "ioc_value": "dixyfyqy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 00:51:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888899": [
        {
            "ioc_value": "av8xez25i6.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 00:50:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888898": [
        {
            "ioc_value": "topyxero.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 00:45:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888893": [
        {
            "ioc_value": "qitolofo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 00:25:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888892": [
        {
            "ioc_value": "http://fresok.top:9048/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 00:23:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888891": [
        {
            "ioc_value": "http://zonxh.shop:7728/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-27 00:23:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888890": [
        {
            "ioc_value": "d6ms6gm7.genesirevival.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 00:22:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888889": [
        {
            "ioc_value": "genesirevival.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-27 00:22:13",
            "last_seen_utc": "2026-08-27 00:23:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "27August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888886": [
        {
            "ioc_value": "symegyvo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 00:08:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888884": [
        {
            "ioc_value": "41b3dc72436bf163380e46efb5e3c33c417a0add",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.glassrat",
            "malware_alias": null,
            "malware_printable": "GlassRAT",
            "first_seen_utc": "2026-08-27 00:06:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888885": [
        {
            "ioc_value": "eadf1a5f058ec8811ea87536badb474a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.glassrat",
            "malware_alias": null,
            "malware_printable": "GlassRAT",
            "first_seen_utc": "2026-08-27 00:06:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888883": [
        {
            "ioc_value": "c1d38c3132ef3f55b417e898da98a54ac5940537f4c2281bcacc430c4a25f646",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.glassrat",
            "malware_alias": null,
            "malware_printable": "GlassRAT",
            "first_seen_utc": "2026-08-27 00:06:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888882": [
        {
            "ioc_value": "2fd2d9bc5106a3b5379269926b0feb43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 00:06:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888879": [
        {
            "ioc_value": "842b09509ab819c1e7edecd41d4c301b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-08-27 00:06:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888880": [
        {
            "ioc_value": "78a29a09726ad370e782cbd3e88490cecea695112f9171d9d8168a18b25ef67b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 00:06:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888881": [
        {
            "ioc_value": "b85ddbe2f0d8b88ed338b799f9555432e5107cdb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-27 00:06:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888877": [
        {
            "ioc_value": "32b173a4a2bbc767d93bd6c645170479f1d3eb27f9ae5b47c9260ec31f739bf7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-08-27 00:06:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888878": [
        {
            "ioc_value": "38efdf62dfb36898c662bb912c0e76d79e8836bf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-08-27 00:06:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888876": [
        {
            "ioc_value": "d6c51408605a788a10266b4416d6a8ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:29",
            "last_seen_utc": "2026-08-28 02:35:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888873": [
        {
            "ioc_value": "91f4d29bbd95d3f69bde9a5a92c85143",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-27 00:06:28",
            "last_seen_utc": "2026-08-28 02:35:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888874": [
        {
            "ioc_value": "7274541ff85fa7563b8731fa5c403f756f8358dd127bb5d1810c06adf4b813a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:28",
            "last_seen_utc": "2026-08-28 02:35:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888875": [
        {
            "ioc_value": "a93bcc5ffbf77a3ead74253264c39038c34039bb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:28",
            "last_seen_utc": "2026-08-28 02:35:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888871": [
        {
            "ioc_value": "81de4d530901a1df65b325368728f4eea2c39e7e53a2df97aec3744771d86a1e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-27 00:06:27",
            "last_seen_utc": "2026-08-28 02:35:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888872": [
        {
            "ioc_value": "ceabbf3ec577b2a3aa5917b9566da8f6e6a2b1d1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-27 00:06:27",
            "last_seen_utc": "2026-08-28 02:35:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888868": [
        {
            "ioc_value": "35850fc8c8d89cb0fd8a4d861bf9c19447c7ebb21a378f1d9f16ed4fbbdc9792",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-08-27 00:06:26",
            "last_seen_utc": "2026-08-28 02:35:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888869": [
        {
            "ioc_value": "08b732b555bba38b87d58cae21619e025fb25aac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-08-27 00:06:26",
            "last_seen_utc": "2026-08-28 02:35:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888870": [
        {
            "ioc_value": "1e8dfade6e3f0ae965fc86012ca1a9bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-08-27 00:06:26",
            "last_seen_utc": "2026-08-28 02:35:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888867": [
        {
            "ioc_value": "dc91dc4df6fa3c34f8f427a34460d737",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 00:06:25",
            "last_seen_utc": "2026-08-28 02:35:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888866": [
        {
            "ioc_value": "3e6b696c36c82c2f617d0a6e69b3a2161165ebd0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 00:06:24",
            "last_seen_utc": "2026-08-28 02:35:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888865": [
        {
            "ioc_value": "0b4dc32d947ae8371aaa88210787244bc31b7b9a5e6c35b41bc093f405533a71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-27 00:06:23",
            "last_seen_utc": "2026-08-28 02:35:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888862": [
        {
            "ioc_value": "117365d3571671b10ce89722fb3cf76a18801d4df1eec9c5b9119d1282b7b82b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-27 00:06:20",
            "last_seen_utc": "2026-08-28 02:35:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888863": [
        {
            "ioc_value": "fd2162ad651b67fc7bd061004cc5e2816aad7e3f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-27 00:06:20",
            "last_seen_utc": "2026-08-28 02:35:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888864": [
        {
            "ioc_value": "3af0529e39dce90659e23cbfd48ae6dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-27 00:06:20",
            "last_seen_utc": "2026-08-28 02:35:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888859": [
        {
            "ioc_value": "0cad181b2a0c10c287173b15efa7bf92d387987a41a49ad9be3c486e43e3ddc2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:19",
            "last_seen_utc": "2026-08-28 02:35:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888860": [
        {
            "ioc_value": "9e9505c627a32109684fdf92492c91856b051fa6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:19",
            "last_seen_utc": "2026-08-28 02:35:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888861": [
        {
            "ioc_value": "ea673e77c29375d2c4a99f614ab7cb42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:19",
            "last_seen_utc": "2026-08-28 02:35:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888856": [
        {
            "ioc_value": "0c307efa752ca4d412aee733c3d4c3453942b44a22ec2b0d405156003beddc36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:18",
            "last_seen_utc": "2026-08-28 02:35:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888857": [
        {
            "ioc_value": "1dc288d1bd5ba7e9a2fa1022ece0bdf5f3277713",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:18",
            "last_seen_utc": "2026-08-28 02:35:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888858": [
        {
            "ioc_value": "c35ce68527dc8dc5f04b7c9a56472b25",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-27 00:06:18",
            "last_seen_utc": "2026-08-28 02:35:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888852": [
        {
            "ioc_value": "cae433526c1a27f11450b7db43f8bd03",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-27 00:06:17",
            "last_seen_utc": "2026-08-28 16:02:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888853": [
        {
            "ioc_value": "4499187a334b28f13b85b35e0ad2d1423250199d4d284a2e7d0e3125d007c4d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-27 00:06:17",
            "last_seen_utc": "2026-08-28 16:03:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888854": [
        {
            "ioc_value": "eba88289397dbd96fe6e7f4c65f95af89841f206",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-27 00:06:17",
            "last_seen_utc": "2026-08-28 16:03:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888855": [
        {
            "ioc_value": "e26e5728715f3aaf3f2267f86dce89e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-27 00:06:17",
            "last_seen_utc": "2026-08-28 16:03:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888850": [
        {
            "ioc_value": "fccf06172119b4ae6f146e45d8f35fcdb248fab1fe4471fac301d33d5ffd5b37",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-27 00:06:16",
            "last_seen_utc": "2026-08-28 16:02:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888851": [
        {
            "ioc_value": "f4b5ce1147d118c69c1dba151c3a2c303cd9c808",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-27 00:06:16",
            "last_seen_utc": "2026-08-28 16:02:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1888849": [
        {
            "ioc_value": "ilmuo11292.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-27 00:03:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888847": [
        {
            "ioc_value": "pinkna.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 23:54:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888846": [
        {
            "ioc_value": "yok-789.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 23:54:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888845": [
        {
            "ioc_value": "zoluxebi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 23:41:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888844": [
        {
            "ioc_value": "brueterei.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 23:33:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888843": [
        {
            "ioc_value": "okheng.wiki",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 23:33:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888842": [
        {
            "ioc_value": "xivopu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 23:27:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888841": [
        {
            "ioc_value": "donadisa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 23:18:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888840": [
        {
            "ioc_value": "rihafini.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 23:12:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888839": [
        {
            "ioc_value": "constructorasantander.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 23:03:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888837": [
        {
            "ioc_value": "https://faceit-account.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 23:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/faceit-account.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888838": [
        {
            "ioc_value": "https://gpswoutdoors.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 23:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gpswoutdoors.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888836": [
        {
            "ioc_value": "https://kook.bar/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 23:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kook.bar",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888835": [
        {
            "ioc_value": "z65k8fja.en-us-prostafens.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 22:58:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888834": [
        {
            "ioc_value": "en-us-prostafens.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 22:58:03",
            "last_seen_utc": "2026-08-26 22:58:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888833": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/7656119865291738",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 22:55:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0fc98c2fd6d203be13c0bb00960bc25554d23441224a7a847821f4ce583dc947/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888832": [
        {
            "ioc_value": "https://5.78.91.236",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 22:55:37",
            "last_seen_utc": "2026-08-31 08:34:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6f513495ae2d862bce46785c4273e72250f77ca6d32b98313def15a8d75741f5/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888831": [
        {
            "ioc_value": "https://194.146.39.78",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 22:55:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c77373bd4f55d2d0b4d7657b0fc0a9ed42c84339230ba48115b691bc01483240/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888830": [
        {
            "ioc_value": "https://168.119.56.135",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 22:55:34",
            "last_seen_utc": "2026-08-31 16:08:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4d6e5173353ab469f05a0b630a1aaaf5286b187c14c37535ed01f87a66701525/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888829": [
        {
            "ioc_value": "2m9h352xi2.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 22:54:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888828": [
        {
            "ioc_value": "gianchand-com.translate.goog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 22:53:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888827": [
        {
            "ioc_value": "umwtxykip5.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 22:52:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888826": [
        {
            "ioc_value": "https://194.146.39.176",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 22:50:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e95ae36b5177a96a5977d4c1f251607f9d4d8d2242d0a7da3eb44c9f5c0a36c2/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888823": [
        {
            "ioc_value": "hk5kmml4.fleshburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 22:23:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888822": [
        {
            "ioc_value": "wudavece.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 22:21:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888821": [
        {
            "ioc_value": "fleshburn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 22:21:42",
            "last_seen_utc": "2026-08-26 22:22:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888820": [
        {
            "ioc_value": "flashbrn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 22:21:11",
            "last_seen_utc": "2026-08-26 22:21:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888817": [
        {
            "ioc_value": "31.77.129.95:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 22:05:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "LiberiumRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888818": [
        {
            "ioc_value": "31.76.111.12:27364",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 22:05:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "LiberiumRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888819": [
        {
            "ioc_value": "185.69.122.53:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 22:05:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "LiberiumRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888815": [
        {
            "ioc_value": "118.89.124.88:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888816": [
        {
            "ioc_value": "128.90.135.164:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888814": [
        {
            "ioc_value": "198.23.209.155:6466",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 22:03:27",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888808": [
        {
            "ioc_value": "23.254.240.220:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 22:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888809": [
        {
            "ioc_value": "45.221.118.139:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 22:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888810": [
        {
            "ioc_value": "103.121.92.249:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 22:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888811": [
        {
            "ioc_value": "213.176.114.69:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 22:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888812": [
        {
            "ioc_value": "172.94.9.81:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 22:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888813": [
        {
            "ioc_value": "31.76.111.106:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 22:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888807": [
        {
            "ioc_value": "209.99.186.142:55009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 22:01:47",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888806": [
        {
            "ioc_value": "ziqutuwi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 22:01:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888805": [
        {
            "ioc_value": "welirapi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 21:57:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888792": [
        {
            "ioc_value": "antropostudio.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888793": [
        {
            "ioc_value": "agencenoel.archi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888794": [
        {
            "ioc_value": "4ssgtech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888795": [
        {
            "ioc_value": "womandevelopmentfoundation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888796": [
        {
            "ioc_value": "wingsbi-marketing.azurewebsites.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888797": [
        {
            "ioc_value": "wigglepawspetstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888798": [
        {
            "ioc_value": "wearlori.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888799": [
        {
            "ioc_value": "warsoudure.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888800": [
        {
            "ioc_value": "wagliopets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888801": [
        {
            "ioc_value": "voyagelogistix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888802": [
        {
            "ioc_value": "visionqueste.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888803": [
        {
            "ioc_value": "vfb.co.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888804": [
        {
            "ioc_value": "vesinhmoitruonghy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888773": [
        {
            "ioc_value": "ilurolexasesoria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888774": [
        {
            "ioc_value": "herreraalvaradoasociados.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888775": [
        {
            "ioc_value": "grangardemaskin.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888776": [
        {
            "ioc_value": "gooforbuzzy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888777": [
        {
            "ioc_value": "girijaestates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888778": [
        {
            "ioc_value": "fotonlab.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888779": [
        {
            "ioc_value": "evokedesigns.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888780": [
        {
            "ioc_value": "durbarhighschool.edu.np",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888781": [
        {
            "ioc_value": "domaine-martin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888782": [
        {
            "ioc_value": "cognitivecf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888783": [
        {
            "ioc_value": "clinicadelparque.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888784": [
        {
            "ioc_value": "cavibeer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888785": [
        {
            "ioc_value": "canoerandodordogne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888786": [
        {
            "ioc_value": "budak.hr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888787": [
        {
            "ioc_value": "beyondwisetech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888788": [
        {
            "ioc_value": "bc-longwyrehon.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888789": [
        {
            "ioc_value": "avi-wallpapers.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888790": [
        {
            "ioc_value": "au-point.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888791": [
        {
            "ioc_value": "arkki.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888754": [
        {
            "ioc_value": "splangit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888755": [
        {
            "ioc_value": "smileconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888756": [
        {
            "ioc_value": "screengeeks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888757": [
        {
            "ioc_value": "scarmaweb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888758": [
        {
            "ioc_value": "rdaw.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888759": [
        {
            "ioc_value": "rb-soul.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888760": [
        {
            "ioc_value": "queenfogangfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888761": [
        {
            "ioc_value": "poslovanje-i-knjigovodstvo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888762": [
        {
            "ioc_value": "paoloaliberti.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888763": [
        {
            "ioc_value": "noporvis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888764": [
        {
            "ioc_value": "nexsup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888765": [
        {
            "ioc_value": "morgandaviesdrums.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888766": [
        {
            "ioc_value": "madrapture.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888767": [
        {
            "ioc_value": "lightmotorscompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888768": [
        {
            "ioc_value": "leeb-leschanz.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888769": [
        {
            "ioc_value": "khmaruk-llc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888770": [
        {
            "ioc_value": "jazzandpeople.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888771": [
        {
            "ioc_value": "italianpizzahouse.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888772": [
        {
            "ioc_value": "intuitivemedgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888737": [
        {
            "ioc_value": "drivingfeel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888738": [
        {
            "ioc_value": "boxesone.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888739": [
        {
            "ioc_value": "atreat.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888740": [
        {
            "ioc_value": "renatomartini1.hospedagemdesites.ws",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888741": [
        {
            "ioc_value": "cherrysloegin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888742": [
        {
            "ioc_value": "yorchviolinista.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888743": [
        {
            "ioc_value": "darkhan.gov.mn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888744": [
        {
            "ioc_value": "aiaeon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888745": [
        {
            "ioc_value": "znsportsusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888746": [
        {
            "ioc_value": "zlota44.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888747": [
        {
            "ioc_value": "zat.sa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888748": [
        {
            "ioc_value": "yhengineering.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888749": [
        {
            "ioc_value": "ygindi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888750": [
        {
            "ioc_value": "yamada-dress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888751": [
        {
            "ioc_value": "vitoria-global.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888752": [
        {
            "ioc_value": "timkelly.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888753": [
        {
            "ioc_value": "hillbank.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888723": [
        {
            "ioc_value": "famlove.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888724": [
        {
            "ioc_value": "brendalbassdavis.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888725": [
        {
            "ioc_value": "halalvitamin.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888726": [
        {
            "ioc_value": "cosmeticstakara.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": "2026-08-29 12:21:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888727": [
        {
            "ioc_value": "ashburtonresidences.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888728": [
        {
            "ioc_value": "chetrossrarebooks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888729": [
        {
            "ioc_value": "wwl-lb.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888730": [
        {
            "ioc_value": "tresorbelge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888731": [
        {
            "ioc_value": "tempsgraphie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": "2026-08-29 12:21:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888732": [
        {
            "ioc_value": "graphicsandart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888733": [
        {
            "ioc_value": "realvisiondesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888734": [
        {
            "ioc_value": "ganeticonsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888735": [
        {
            "ioc_value": "jhustinhallmusic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888736": [
        {
            "ioc_value": "gascreative.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:38",
            "last_seen_utc": "2026-08-29 12:11:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888705": [
        {
            "ioc_value": "blacboss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888706": [
        {
            "ioc_value": "bfslogicwall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888707": [
        {
            "ioc_value": "banhlaquangvinh.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888708": [
        {
            "ioc_value": "ban-companyservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888709": [
        {
            "ioc_value": "averroes.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888710": [
        {
            "ioc_value": "atlas-international.academy",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888711": [
        {
            "ioc_value": "arslantours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888712": [
        {
            "ioc_value": "hkhcsw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888713": [
        {
            "ioc_value": "yensaolinhhuong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888714": [
        {
            "ioc_value": "sugint.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888715": [
        {
            "ioc_value": "nametcomau.wpenginepowered.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888716": [
        {
            "ioc_value": "lootguys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": "2026-08-29 12:11:35",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888717": [
        {
            "ioc_value": "monopumps.co.zw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888718": [
        {
            "ioc_value": "thuvienxaydung.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888719": [
        {
            "ioc_value": "alexkohl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888720": [
        {
            "ioc_value": "thewebsitezone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888721": [
        {
            "ioc_value": "rowdysnashville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888722": [
        {
            "ioc_value": "acquaexcel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888687": [
        {
            "ioc_value": "hdf-demenagement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888688": [
        {
            "ioc_value": "gruppoalpinitreviolo.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888689": [
        {
            "ioc_value": "gelatoflos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888690": [
        {
            "ioc_value": "foresterllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888691": [
        {
            "ioc_value": "esrulman.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888692": [
        {
            "ioc_value": "environmental-sol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888693": [
        {
            "ioc_value": "elitepetsuppliesx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888694": [
        {
            "ioc_value": "ehsanframe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888695": [
        {
            "ioc_value": "ed-hausmeister.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888696": [
        {
            "ioc_value": "eceltd.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888697": [
        {
            "ioc_value": "dsp4-ddm-023a-f24a-g6.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888698": [
        {
            "ioc_value": "driveclickone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888699": [
        {
            "ioc_value": "dokansepehr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888700": [
        {
            "ioc_value": "danielericmullins.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888701": [
        {
            "ioc_value": "comotrabajan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888702": [
        {
            "ioc_value": "clinicaolimpo.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888703": [
        {
            "ioc_value": "caddzonebd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888704": [
        {
            "ioc_value": "buteradesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888668": [
        {
            "ioc_value": "ozyapicilar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888669": [
        {
            "ioc_value": "motoolrepairs.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888670": [
        {
            "ioc_value": "moderncottagedesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888671": [
        {
            "ioc_value": "melbournecleaninggroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888672": [
        {
            "ioc_value": "mechanc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888673": [
        {
            "ioc_value": "martinkitchenware.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888674": [
        {
            "ioc_value": "manuelzamorano.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888675": [
        {
            "ioc_value": "lottovip-th.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888676": [
        {
            "ioc_value": "lordsdiversoes.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888677": [
        {
            "ioc_value": "kromatico.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888678": [
        {
            "ioc_value": "kreativeklasse.ruhr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888679": [
        {
            "ioc_value": "klubhvezdicka.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888680": [
        {
            "ioc_value": "kitcheegammidesignco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888681": [
        {
            "ioc_value": "khacbiada.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888682": [
        {
            "ioc_value": "janais.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888683": [
        {
            "ioc_value": "innovativesecuritycontrols.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888684": [
        {
            "ioc_value": "initiativefinance.ng",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888685": [
        {
            "ioc_value": "immigrationsolutionsnow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888686": [
        {
            "ioc_value": "hellgren.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888649": [
        {
            "ioc_value": "cainpami.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888650": [
        {
            "ioc_value": "visualharian.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888651": [
        {
            "ioc_value": "unwynd.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888652": [
        {
            "ioc_value": "universnumeriqueweb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888653": [
        {
            "ioc_value": "universityshopsdental.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888654": [
        {
            "ioc_value": "ultimatesolution.com.bd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888655": [
        {
            "ioc_value": "toptoldos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888656": [
        {
            "ioc_value": "thevitafuzebrand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888657": [
        {
            "ioc_value": "theallegrogroup.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888658": [
        {
            "ioc_value": "tenterdenagility.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888659": [
        {
            "ioc_value": "suportdpo.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888660": [
        {
            "ioc_value": "smariot.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888661": [
        {
            "ioc_value": "skyluckthailand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888662": [
        {
            "ioc_value": "servclouds.solutions",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888663": [
        {
            "ioc_value": "seal.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888664": [
        {
            "ioc_value": "saltshakers.church",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888665": [
        {
            "ioc_value": "roysplantsandflowers.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888666": [
        {
            "ioc_value": "qndrumfilter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888667": [
        {
            "ioc_value": "partakbrick.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888639": [
        {
            "ioc_value": "vjmhd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888640": [
        {
            "ioc_value": "theherbal.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888641": [
        {
            "ioc_value": "laconciergeriedesalpes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888642": [
        {
            "ioc_value": "kiliprime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888643": [
        {
            "ioc_value": "iplottidad.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888644": [
        {
            "ioc_value": "bazaar.iq",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888645": [
        {
            "ioc_value": "primelinetransportsgr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888646": [
        {
            "ioc_value": "thejaffnaclub.lk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888647": [
        {
            "ioc_value": "sjbusinessandmore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888648": [
        {
            "ioc_value": "red88fit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888636": [
        {
            "ioc_value": "wolfstrengthco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888637": [
        {
            "ioc_value": "peyaraghar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888638": [
        {
            "ioc_value": "mysceptersolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888634": [
        {
            "ioc_value": "bruncacamaras.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888635": [
        {
            "ioc_value": "belladonna.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:54:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888629": [
        {
            "ioc_value": "mocredit.io.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888630": [
        {
            "ioc_value": "platelyra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888631": [
        {
            "ioc_value": "tbhadvisors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888632": [
        {
            "ioc_value": "nhuydecor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888633": [
        {
            "ioc_value": "kongkretewrestling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888625": [
        {
            "ioc_value": "toku.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888626": [
        {
            "ioc_value": "crexi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888627": [
        {
            "ioc_value": "iconicmbs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888628": [
        {
            "ioc_value": "cesarreina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888616": [
        {
            "ioc_value": "news-marketwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888617": [
        {
            "ioc_value": "horizonhh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888618": [
        {
            "ioc_value": "axisprobilling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888619": [
        {
            "ioc_value": "profitledger.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888620": [
        {
            "ioc_value": "bestchildrenstories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888621": [
        {
            "ioc_value": "vapedalco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888622": [
        {
            "ioc_value": "trade-ideas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888623": [
        {
            "ioc_value": "proforma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888624": [
        {
            "ioc_value": "dimebank.promanco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888612": [
        {
            "ioc_value": "proyectar.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888613": [
        {
            "ioc_value": "wefindcarz.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888614": [
        {
            "ioc_value": "snr42-qiaaa-aaaao-a3fpq-cai.icp0.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888615": [
        {
            "ioc_value": "myeconest.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888607": [
        {
            "ioc_value": "glashaus.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888608": [
        {
            "ioc_value": "fhs.digitalmachine.co.nz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888609": [
        {
            "ioc_value": "eastomplastering.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888610": [
        {
            "ioc_value": "dark-truths.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888611": [
        {
            "ioc_value": "crassustech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888603": [
        {
            "ioc_value": "innovationroundtable.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888604": [
        {
            "ioc_value": "cristinafontanelli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888605": [
        {
            "ioc_value": "re-photography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888606": [
        {
            "ioc_value": "bau-u-industrieservice.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888602": [
        {
            "ioc_value": "acceldata.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 21:48:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888601": [
        {
            "ioc_value": "202.155.9.186:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:55",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888600": [
        {
            "ioc_value": "195.177.94.91:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:46",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888599": [
        {
            "ioc_value": "195.177.94.91:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:45",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888598": [
        {
            "ioc_value": "193.233.126.164:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:39",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888597": [
        {
            "ioc_value": "193.233.126.164:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:38",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888593": [
        {
            "ioc_value": "192.229.115.246:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:36",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888594": [
        {
            "ioc_value": "192.229.115.246:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:36",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888595": [
        {
            "ioc_value": "192.229.115.254:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:36",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888596": [
        {
            "ioc_value": "192.229.115.254:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:36",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888592": [
        {
            "ioc_value": "192.229.115.243:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:44:35",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888591": [
        {
            "ioc_value": "147.45.61.65:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:43:39",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888590": [
        {
            "ioc_value": "105.103.57.94:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:43:15",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888588": [
        {
            "ioc_value": "103.54.153.49:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:43:08",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888589": [
        {
            "ioc_value": "103.54.153.49:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 21:43:08",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888585": [
        {
            "ioc_value": "faceit-account.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 21:43:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,phishing",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888586": [
        {
            "ioc_value": "google-meet-call.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 21:43:06",
            "last_seen_utc": "2026-08-27 05:17:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,phishing",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888587": [
        {
            "ioc_value": "kook.bar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 21:43:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,phishing",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888584": [
        {
            "ioc_value": "jodom14675.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 21:42:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888583": [
        {
            "ioc_value": "dadehabo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 21:36:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888582": [
        {
            "ioc_value": "1lxurcnpb6.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 21:34:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888581": [
        {
            "ioc_value": "diabetescareth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888578": [
        {
            "ioc_value": "https://appservice-platform.net",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888579": [
        {
            "ioc_value": "https://platformco-hub.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888580": [
        {
            "ioc_value": "https://swiftcurrento.net",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888575": [
        {
            "ioc_value": "appservice-platform.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888576": [
        {
            "ioc_value": "platformco-hub.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888577": [
        {
            "ioc_value": "swiftcurrento.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:33:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888573": [
        {
            "ioc_value": "trf.kookapp.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 21:33:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888574": [
        {
            "ioc_value": "google-meet-verification.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 21:33:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888572": [
        {
            "ioc_value": "https://islam-city.com/site/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/islam-city.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888571": [
        {
            "ioc_value": "w678le89.enus-glycomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:19:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888570": [
        {
            "ioc_value": "fzvxejch.en-us--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:18:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888569": [
        {
            "ioc_value": "enus-glycomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:18:02",
            "last_seen_utc": "2026-08-26 21:18:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888568": [
        {
            "ioc_value": "en-us--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 21:17:45",
            "last_seen_utc": "2026-08-26 21:18:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888567": [
        {
            "ioc_value": "jrxfn06902.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 21:15:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888565": [
        {
            "ioc_value": "39.98.168.196:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 21:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888562": [
        {
            "ioc_value": "111.229.216.164:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888563": [
        {
            "ioc_value": "118.178.143.61:50001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888564": [
        {
            "ioc_value": "34.21.201.159:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888561": [
        {
            "ioc_value": "103.229.212.54:5566",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888552": [
        {
            "ioc_value": "https://stemless-wineglass.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stemless-wineglass.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888553": [
        {
            "ioc_value": "https://www.rideaux-metalliques-marseille.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.rideaux-metalliques-marseille.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888554": [
        {
            "ioc_value": "https://omegasewingmachines.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/omegasewingmachines.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888555": [
        {
            "ioc_value": "https://www.opel-hoefler.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.opel-hoefler.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888546": [
        {
            "ioc_value": "https://www.guide-astuces.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.guide-astuces.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888547": [
        {
            "ioc_value": "https://hlipiceni.botosani.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hlipiceni.botosani.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888548": [
        {
            "ioc_value": "https://kavhome.awkwardmedia.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kavhome.awkwardmedia.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888549": [
        {
            "ioc_value": "https://kangja.co.kr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kangja.co.kr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888550": [
        {
            "ioc_value": "https://pressurecleaningsunshinecoast.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pressurecleaningsunshinecoast.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888551": [
        {
            "ioc_value": "https://sarahmonecchi.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sarahmonecchi.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888545": [
        {
            "ioc_value": "ftzdogw4ja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 20:58:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888543": [
        {
            "ioc_value": "31.77.220.21:62020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 20:53:46",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888544": [
        {
            "ioc_value": "155.117.183.31:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 20:53:46",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888542": [
        {
            "ioc_value": "103.199.100.172:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:52:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Dumplings RAT,RAT,Unknown",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888541": [
        {
            "ioc_value": "103.199.100.170:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:51:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Dumplings RAT,RAT,Unknown",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888539": [
        {
            "ioc_value": "31.57.219.139:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 20:50:46",
            "last_seen_utc": "2026-09-01 02:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888540": [
        {
            "ioc_value": "38.240.48.155:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 20:50:46",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888538": [
        {
            "ioc_value": "qukity.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 20:49:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888536": [
        {
            "ioc_value": "88.218.170.77:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 20:49:51",
            "last_seen_utc": "2026-08-26 20:49:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888537": [
        {
            "ioc_value": "107.148.158.246:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 20:49:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888535": [
        {
            "ioc_value": "151.59.109.148:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-26 20:48:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888527": [
        {
            "ioc_value": "143.246.217.59:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888528": [
        {
            "ioc_value": "45.90.216.155:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888529": [
        {
            "ioc_value": "206.206.76.145:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888530": [
        {
            "ioc_value": "145.223.68.95:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888531": [
        {
            "ioc_value": "169.58.236.49:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888532": [
        {
            "ioc_value": "91.92.243.173:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888533": [
        {
            "ioc_value": "209.97.166.99:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888534": [
        {
            "ioc_value": "144.172.111.151:3942",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 20:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888519": [
        {
            "ioc_value": "https://kindle-mania.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kindle-mania.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888520": [
        {
            "ioc_value": "https://linemarkessentials.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/linemarkessentials.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888509": [
        {
            "ioc_value": "https://avantmaq.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/avantmaq.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888510": [
        {
            "ioc_value": "https://carreirapro.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/carreirapro.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888511": [
        {
            "ioc_value": "https://bumbarma.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bumbarma.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888512": [
        {
            "ioc_value": "https://mileoneteams.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mileoneteams.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888513": [
        {
            "ioc_value": "https://nguoidoncui.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nguoidoncui.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888514": [
        {
            "ioc_value": "https://oakscraft.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/oakscraft.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888515": [
        {
            "ioc_value": "https://numanic.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/numanic.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888516": [
        {
            "ioc_value": "https://justusentertainments.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/justusentertainments.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888517": [
        {
            "ioc_value": "https://massacrealouverture.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/massacrealouverture.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888518": [
        {
            "ioc_value": "https://legalnorte.cl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/legalnorte.cl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888503": [
        {
            "ioc_value": "https://chefsamcaterers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chefsamcaterers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888504": [
        {
            "ioc_value": "https://dentalsmilepcnyc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dentalsmilepcnyc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888505": [
        {
            "ioc_value": "https://benlluent.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/benlluent.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888506": [
        {
            "ioc_value": "https://espoirgym-lucon.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/espoirgym-lucon.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888507": [
        {
            "ioc_value": "https://betoncom.biz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/betoncom.biz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888508": [
        {
            "ioc_value": "https://cf.cl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cf.cl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888496": [
        {
            "ioc_value": "https://alamehedu.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alamehedu.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888497": [
        {
            "ioc_value": "https://feedtheneed.org.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/feedtheneed.org.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888498": [
        {
            "ioc_value": "https://alfrd.be/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alfrd.be",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888499": [
        {
            "ioc_value": "https://2kingsaccounting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/2kingsaccounting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888500": [
        {
            "ioc_value": "https://www.atria-studio.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.atria-studio.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888501": [
        {
            "ioc_value": "https://electronicamosteiro.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/electronicamosteiro.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888502": [
        {
            "ioc_value": "https://www.clubtimilano.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 20:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.clubtimilano.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888495": [
        {
            "ioc_value": "deduvosy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 20:27:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888494": [
        {
            "ioc_value": "y74la6bk.enus-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 20:21:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888493": [
        {
            "ioc_value": "pig.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 20:21:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888492": [
        {
            "ioc_value": "enus-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 20:20:10",
            "last_seen_utc": "2026-08-26 20:21:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888491": [
        {
            "ioc_value": "http://zakuiru.shop:9048/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 20:19:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888490": [
        {
            "ioc_value": "tasage.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 20:06:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888488": [
        {
            "ioc_value": "154.23.189.120:17788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888489": [
        {
            "ioc_value": "154.23.189.194:17788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888486": [
        {
            "ioc_value": "137.220.151.95:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 20:05:06",
            "last_seen_utc": "2026-08-27 07:27:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888487": [
        {
            "ioc_value": "2.88.92.98:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 20:05:06",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888485": [
        {
            "ioc_value": "89.127.233.112:3128",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888484": [
        {
            "ioc_value": "https://t.me/s11yne",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 20:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/baa739eba49601b21067818ff725e168894a0c186e90405180687cb26970f89a/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888483": [
        {
            "ioc_value": "dvftp54486.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 19:57:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888482": [
        {
            "ioc_value": "yksqw51477.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 19:56:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888481": [
        {
            "ioc_value": "edbaa03266.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 19:50:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888479": [
        {
            "ioc_value": "77.110.109.229:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 19:46:34",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888478": [
        {
            "ioc_value": "52.41.190.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.poshc2",
            "malware_alias": null,
            "malware_printable": "PoshC2",
            "first_seen_utc": "2026-08-26 19:46:23",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PoshC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888477": [
        {
            "ioc_value": "49.232.135.25:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 19:46:20",
            "last_seen_utc": "2026-09-01 02:46:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888476": [
        {
            "ioc_value": "46.246.6.27:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 19:46:19",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888475": [
        {
            "ioc_value": "45.142.30.157:7770",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 19:46:07",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888474": [
        {
            "ioc_value": "45.131.182.88:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 19:46:05",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888473": [
        {
            "ioc_value": "199.245.176.147:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 19:44:42",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888472": [
        {
            "ioc_value": "193.111.117.26:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-26 19:44:32",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888471": [
        {
            "ioc_value": "192.121.163.188:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 19:44:29",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888470": [
        {
            "ioc_value": "188.23.175.25:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-08-26 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888469": [
        {
            "ioc_value": "187.145.56.252:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888468": [
        {
            "ioc_value": "norediam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 19:44:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888467": [
        {
            "ioc_value": "tioiaosod.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 19:44:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888466": [
        {
            "ioc_value": "158.220.96.15:3321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 19:43:49",
            "last_seen_utc": "2026-09-01 02:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888465": [
        {
            "ioc_value": "157.20.182.21:1998",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 19:43:47",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888464": [
        {
            "ioc_value": "kilixe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 19:26:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888463": [
        {
            "ioc_value": "jejezoji.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 19:12:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888459": [
        {
            "ioc_value": "8.163.98.217:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888460": [
        {
            "ioc_value": "8.163.98.217:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888461": [
        {
            "ioc_value": "8.163.98.217:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888458": [
        {
            "ioc_value": "8.163.98.217:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888457": [
        {
            "ioc_value": "101.43.53.103:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888456": [
        {
            "ioc_value": "https://google-meet-call.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 19:00:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/google-meet-call.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888455": [
        {
            "ioc_value": "fykinifa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 18:52:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888454": [
        {
            "ioc_value": "grupobarretoperu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 18:52:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888453": [
        {
            "ioc_value": "b86pccs5.en-us-prostaafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 18:48:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888452": [
        {
            "ioc_value": "en-us-prostaafense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 18:47:52",
            "last_seen_utc": "2026-08-26 18:47:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888440": [
        {
            "ioc_value": "omegasewingmachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-26 20:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888441": [
        {
            "ioc_value": "opel-hoefler.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-26 23:33:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888442": [
        {
            "ioc_value": "pousadajoaodebarro.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-26 23:54:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888443": [
        {
            "ioc_value": "pressurecleaningsunshinecoast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888444": [
        {
            "ioc_value": "rideaux-metalliques-marseille.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-26 20:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888445": [
        {
            "ioc_value": "sarahmonecchi.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-27 05:17:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888446": [
        {
            "ioc_value": "stemless-wineglass.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888447": [
        {
            "ioc_value": "suachuadaiphat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-26 23:54:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888448": [
        {
            "ioc_value": "tim-fuchs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": "2026-08-26 20:33:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888449": [
        {
            "ioc_value": "tinasdelights.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888450": [
        {
            "ioc_value": "tydesign.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888451": [
        {
            "ioc_value": "xn--clinicadentalplazacatalua-woc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888423": [
        {
            "ioc_value": "gpswoutdoors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888424": [
        {
            "ioc_value": "guide-astuces.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 20:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888425": [
        {
            "ioc_value": "hlipiceni.botosani.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888426": [
        {
            "ioc_value": "islam-city.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 21:43:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888427": [
        {
            "ioc_value": "justusentertainments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-27 05:17:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888428": [
        {
            "ioc_value": "kangja.co.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-27 05:17:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888429": [
        {
            "ioc_value": "kavhome.awkwardmedia.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888430": [
        {
            "ioc_value": "kheedmart.my",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 23:54:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888431": [
        {
            "ioc_value": "kindle-mania.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 23:54:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888432": [
        {
            "ioc_value": "legalnorte.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 23:54:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888433": [
        {
            "ioc_value": "linemarkessentials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 20:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888434": [
        {
            "ioc_value": "massacrealouverture.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 20:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888435": [
        {
            "ioc_value": "mileoneteams.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 21:13:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888436": [
        {
            "ioc_value": "myprod.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-27 05:17:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888437": [
        {
            "ioc_value": "nguoidoncui.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 20:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888438": [
        {
            "ioc_value": "numanic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 23:54:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888439": [
        {
            "ioc_value": "oakscraft.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:04",
            "last_seen_utc": "2026-08-26 23:54:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888407": [
        {
            "ioc_value": "avantmaq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-26 20:23:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888408": [
        {
            "ioc_value": "benlluent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-27 05:17:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888409": [
        {
            "ioc_value": "betoncom.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-26 20:23:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888410": [
        {
            "ioc_value": "bumbarma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-27 05:17:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888411": [
        {
            "ioc_value": "carreirapro.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-27 05:17:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888412": [
        {
            "ioc_value": "cf.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888413": [
        {
            "ioc_value": "chefsamcaterers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-26 23:54:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888414": [
        {
            "ioc_value": "clubtimilano.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-26 20:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888415": [
        {
            "ioc_value": "crisperlorca.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888416": [
        {
            "ioc_value": "dentalsmilepcnyc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-27 02:14:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888417": [
        {
            "ioc_value": "dinastiwahab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888418": [
        {
            "ioc_value": "electronicamosteiro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888419": [
        {
            "ioc_value": "elektrische-stopfmaschine.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-27 06:09:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888420": [
        {
            "ioc_value": "espoirgym-lucon.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888421": [
        {
            "ioc_value": "etkinlikbox.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888422": [
        {
            "ioc_value": "feedtheneed.org.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:03",
            "last_seen_utc": "2026-08-27 05:17:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888402": [
        {
            "ioc_value": "2kingsaccounting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888403": [
        {
            "ioc_value": "alamehedu.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:02",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888404": [
        {
            "ioc_value": "alfrd.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:02",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888405": [
        {
            "ioc_value": "assites.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:02",
            "last_seen_utc": "2026-08-27 05:17:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888406": [
        {
            "ioc_value": "atria-studio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 18:37:02",
            "last_seen_utc": "2026-08-26 20:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888401": [
        {
            "ioc_value": "guest-panel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 18:32:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888400": [
        {
            "ioc_value": "fvskq29262.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 18:29:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888399": [
        {
            "ioc_value": "zunozeri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 18:27:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888398": [
        {
            "ioc_value": "qa6yskm1.en-us-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 18:23:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888396": [
        {
            "ioc_value": "tak.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 18:10:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1888397": [
        {
            "ioc_value": "https://tak.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 18:10:47",
            "last_seen_utc": "2026-09-01 03:37:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1888395": [
        {
            "ioc_value": "manunize.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 18:10:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888394": [
        {
            "ioc_value": "192.229.81.105:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:57:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888393": [
        {
            "ioc_value": "siasd16009.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 17:55:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888392": [
        {
            "ioc_value": "gianchand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 17:52:10",
            "last_seen_utc": "2026-08-27 05:17:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888391": [
        {
            "ioc_value": "gyiip77591.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 17:50:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888382": [
        {
            "ioc_value": "thenextplayground.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": "2026-08-26 19:34:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888383": [
        {
            "ioc_value": "verdadesrelativas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888384": [
        {
            "ioc_value": "violetheartmusic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": "2026-08-26 19:24:15",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888385": [
        {
            "ioc_value": "vip-wireless.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": "2026-08-26 19:34:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888386": [
        {
            "ioc_value": "witmos.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888387": [
        {
            "ioc_value": "wordpresstrainingandclasses.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888388": [
        {
            "ioc_value": "wordpresstrainingmiami.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": "2026-08-26 20:23:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888389": [
        {
            "ioc_value": "yellowjust.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": "2026-08-26 18:22:13",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888390": [
        {
            "ioc_value": "zeynelozyasar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:23",
            "last_seen_utc": "2026-08-26 20:03:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888376": [
        {
            "ioc_value": "reaccioninformativa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888377": [
        {
            "ioc_value": "regmot.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888378": [
        {
            "ioc_value": "rulyplast.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:22",
            "last_seen_utc": "2026-08-26 18:42:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888379": [
        {
            "ioc_value": "serviciotecnicoenmallorca.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:22",
            "last_seen_utc": "2026-08-26 23:54:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888380": [
        {
            "ioc_value": "solmechanical.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:22",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888381": [
        {
            "ioc_value": "tavor-band.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:22",
            "last_seen_utc": "2026-08-26 19:13:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888367": [
        {
            "ioc_value": "mytrendybuy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888368": [
        {
            "ioc_value": "nchme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888369": [
        {
            "ioc_value": "nelumbogarden.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888370": [
        {
            "ioc_value": "opys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888371": [
        {
            "ioc_value": "papershop.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": "2026-08-26 23:43:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888372": [
        {
            "ioc_value": "planetoptical.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": "2026-08-26 19:23:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888373": [
        {
            "ioc_value": "primitiveac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": "2026-08-26 19:53:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888374": [
        {
            "ioc_value": "projectcom.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": "2026-08-26 23:54:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888375": [
        {
            "ioc_value": "prolocomagione.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:48:21",
            "last_seen_utc": "2026-08-26 20:03:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888360": [
        {
            "ioc_value": "intemporal-homedecor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888361": [
        {
            "ioc_value": "khietconcept.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888362": [
        {
            "ioc_value": "lakshmiswagruhafoods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888363": [
        {
            "ioc_value": "lavoixdejacquou.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": "2026-08-27 04:06:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888364": [
        {
            "ioc_value": "lgbtraducciones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888365": [
        {
            "ioc_value": "live-matches.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888366": [
        {
            "ioc_value": "manipuladosirati.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:45",
            "last_seen_utc": "2026-08-27 04:06:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888357": [
        {
            "ioc_value": "harkness.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:44",
            "last_seen_utc": "2026-08-27 04:06:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888358": [
        {
            "ioc_value": "huduco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:44",
            "last_seen_utc": "2026-08-26 20:03:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888359": [
        {
            "ioc_value": "icembus.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888355": [
        {
            "ioc_value": "deoumanism.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888356": [
        {
            "ioc_value": "deprag.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888343": [
        {
            "ioc_value": "alcea-avocats.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-26 19:34:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888344": [
        {
            "ioc_value": "anavara.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888345": [
        {
            "ioc_value": "annaosteopathe.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888346": [
        {
            "ioc_value": "attorneymarketingannex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-26 20:13:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888347": [
        {
            "ioc_value": "autoszlif.net.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-27 00:04:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888348": [
        {
            "ioc_value": "bahrainhrs.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-27 00:04:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888349": [
        {
            "ioc_value": "bangas.com.bd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888350": [
        {
            "ioc_value": "basquepilates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-26 19:53:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888351": [
        {
            "ioc_value": "bazzaro.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-26 21:53:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888352": [
        {
            "ioc_value": "bstimport.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-27 05:13:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888353": [
        {
            "ioc_value": "cafedesamis.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-26 20:03:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888354": [
        {
            "ioc_value": "cairovascularclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:42",
            "last_seen_utc": "2026-08-26 19:13:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888340": [
        {
            "ioc_value": "abatshalibemithi.africa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:41",
            "last_seen_utc": "2026-08-26 20:03:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888341": [
        {
            "ioc_value": "accionarpolitico.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:41",
            "last_seen_utc": "2026-08-26 20:03:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888342": [
        {
            "ioc_value": "afaonline.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 17:47:41",
            "last_seen_utc": "2026-08-26 19:53:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888339": [
        {
            "ioc_value": "lib.usc.ac.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:42:10",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888337": [
        {
            "ioc_value": "healthoraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:42:09",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888338": [
        {
            "ioc_value": "harpersecurityservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:42:09",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888335": [
        {
            "ioc_value": "pboag26392.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 17:36:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888332": [
        {
            "ioc_value": "meandmypetsitter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:32:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888333": [
        {
            "ioc_value": "integra.systems",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:32:08",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888331": [
        {
            "ioc_value": "www.museocasadizela.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:32:07",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888324": [
        {
            "ioc_value": "14.128.63.4:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888325": [
        {
            "ioc_value": "202.61.160.208:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888326": [
        {
            "ioc_value": "137.220.185.147:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888327": [
        {
            "ioc_value": "134.122.175.217:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888328": [
        {
            "ioc_value": "134.122.152.48:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888329": [
        {
            "ioc_value": "134.122.152.23:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888330": [
        {
            "ioc_value": "134.122.133.157:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 17:29:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2092665395517808941",
            "tags": "ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1888323": [
        {
            "ioc_value": "kingofpoker.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:22:06",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888322": [
        {
            "ioc_value": "sultankami.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 17:19:53",
            "last_seen_utc": "2026-08-27 10:35:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888321": [
        {
            "ioc_value": "jafana.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 17:18:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888317": [
        {
            "ioc_value": "91.243.81.136:4455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 17:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888318": [
        {
            "ioc_value": "8.148.13.91:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 17:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888319": [
        {
            "ioc_value": "47.101.51.235:2080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 17:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888316": [
        {
            "ioc_value": "160.20.109.29:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 17:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888315": [
        {
            "ioc_value": "39.109.126.185:12306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 17:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888313": [
        {
            "ioc_value": "79allyson.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 16:49:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888312": [
        {
            "ioc_value": "ecoget.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:32:04",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888310": [
        {
            "ioc_value": "drivesmartpeterborough.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:32:03",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888311": [
        {
            "ioc_value": "www.centrostudimusicali.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:32:03",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888309": [
        {
            "ioc_value": "sikapaci.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 16:30:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888308": [
        {
            "ioc_value": "kyb5zwcp.en-us--xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:22:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888307": [
        {
            "ioc_value": "www.dr-elist-reviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:22:01",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888306": [
        {
            "ioc_value": "w9so9yni.enus-lipovive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:21:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888305": [
        {
            "ioc_value": "l8dxnew1.en-us-glycomut.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:20:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888304": [
        {
            "ioc_value": "https://t.me/s11yme",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 16:20:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ea47a085e40feb6adabfac56e22edfba2589567de2ff41a22de51b0d42954b65/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888303": [
        {
            "ioc_value": "https://168.119.60.33",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 16:20:40",
            "last_seen_utc": "2026-08-31 16:08:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ea47a085e40feb6adabfac56e22edfba2589567de2ff41a22de51b0d42954b65/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888302": [
        {
            "ioc_value": "en-us--xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:20:11",
            "last_seen_utc": "2026-08-26 18:20:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888295": [
        {
            "ioc_value": "en-us-glycomut.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:17:25",
            "last_seen_utc": "2026-08-26 16:17:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888293": [
        {
            "ioc_value": "http://shhsift.click:7647/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 16:11:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888289": [
        {
            "ioc_value": "http://zonxh.shop:7728/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 16:11:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888290": [
        {
            "ioc_value": "http://fresok.top:9048/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 16:11:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888291": [
        {
            "ioc_value": "http://shhsift.click:7647/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 16:11:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888292": [
        {
            "ioc_value": "http://fresok.top:9048/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 16:11:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888287": [
        {
            "ioc_value": "89.127.233.112:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 16:05:07",
            "last_seen_utc": "2026-08-27 07:27:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888288": [
        {
            "ioc_value": "193.160.32.138:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 16:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888286": [
        {
            "ioc_value": "89.127.233.112:1080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888285": [
        {
            "ioc_value": "89.127.233.112:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 16:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888284": [
        {
            "ioc_value": "escaperoom-empresas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:01:57",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888283": [
        {
            "ioc_value": "eric-palmer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 16:01:56",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888282": [
        {
            "ioc_value": "https://dennyandrewsford.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 16:01:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dennyandrewsford.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888281": [
        {
            "ioc_value": "tamarisknave.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-26 15:59:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888280": [
        {
            "ioc_value": "https://tamarisknave.co/logout/oauth-schema.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-26 15:59:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1888279": [
        {
            "ioc_value": "celibu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 15:53:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888278": [
        {
            "ioc_value": "mafzr64759.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 15:47:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888277": [
        {
            "ioc_value": "http://37.230.117.14/Auth5/Poll1VmDownloads/4geo5Server/8generatorPhp/Datalife4Datalife/0Betterdump/_sql/baseprotect/PipeJs_linuxTrackWordpressdatalifeUploads.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 15:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888276": [
        {
            "ioc_value": "edablush.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 15:36:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888275": [
        {
            "ioc_value": "http://cf762637.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-26 15:35:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888265": [
        {
            "ioc_value": "lyncdiscover.freebirds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 15:15:52",
            "last_seen_utc": null,
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1888273": [
        {
            "ioc_value": "148.224.63.66:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 15:10:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888272": [
        {
            "ioc_value": "202.61.140.222:448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 15:10:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888271": [
        {
            "ioc_value": "102.220.160.221:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-26 15:09:39",
            "last_seen_utc": "2026-08-31 18:12:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/306e7d78929cb893e2ecde6bb182b0c8423991275a999704c69eaf9282be1091/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888270": [
        {
            "ioc_value": "89.127.233.112:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 15:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888269": [
        {
            "ioc_value": "89.127.233.112:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 15:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888268": [
        {
            "ioc_value": "89.127.233.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888267": [
        {
            "ioc_value": "89.127.233.112:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888266": [
        {
            "ioc_value": "192.255.139.206:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888253": [
        {
            "ioc_value": "r6ou4gea2y.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 14:57:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888258": [
        {
            "ioc_value": "client.assuredpestcontrolutah.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-26 14:57:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117162203627736610",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1888261": [
        {
            "ioc_value": "rohirocy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 14:57:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888262": [
        {
            "ioc_value": "eyjfr80587.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 14:57:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888264": [
        {
            "ioc_value": "e5xwaq5b.en-us-men-balancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 14:38:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888263": [
        {
            "ioc_value": "en-us-men-balancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 14:37:32",
            "last_seen_utc": "2026-08-26 14:37:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888260": [
        {
            "ioc_value": "nv1ay8ls.en-us-us-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 14:20:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888259": [
        {
            "ioc_value": "en-us-us-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 14:19:05",
            "last_seen_utc": "2026-08-26 14:19:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888257": [
        {
            "ioc_value": "137.220.151.95:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888256": [
        {
            "ioc_value": "137.220.151.95:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888254": [
        {
            "ioc_value": "137.175.107.108:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888255": [
        {
            "ioc_value": "137.220.151.95:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888228": [
        {
            "ioc_value": "http://cta.edu.pe/wp-content/plugins/linux.bin",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 13:59:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cryptomining,CVE-2026-60004,Gitea,Linuxsys,Monero,XMRig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888240": [
        {
            "ioc_value": "zidyju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 13:59:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888243": [
        {
            "ioc_value": "wasivoma.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 13:59:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888248": [
        {
            "ioc_value": "fxjvv75426.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 13:59:10",
            "last_seen_utc": "2026-08-26 13:46:50",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888249": [
        {
            "ioc_value": "hynicafy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 13:59:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888250": [
        {
            "ioc_value": "nrzwc93422.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 13:59:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888252": [
        {
            "ioc_value": "janytu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 13:59:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888251": [
        {
            "ioc_value": "159.89.43.36:8839",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 13:50:13",
            "last_seen_utc": "2026-08-26 14:25:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888246": [
        {
            "ioc_value": "104.251.180.194:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-26 13:35:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b83baa390f4548b5c1bc2bba6a866b5275ebe70d817ba75c1162c6dc369af4a2/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888247": [
        {
            "ioc_value": "107.175.101.187:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-26 13:35:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7dc51536704031085806d8c93ac5654a459c3d5f7f45e3151b4278d2c19fbcf3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888245": [
        {
            "ioc_value": "bebelonserver.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-26 13:35:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/306e7d78929cb893e2ecde6bb182b0c8423991275a999704c69eaf9282be1091/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888244": [
        {
            "ioc_value": "saymto9213.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 13:29:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888242": [
        {
            "ioc_value": "beautiful213.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 13:26:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888241": [
        {
            "ioc_value": "85.239.149.198:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 13:24:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a2cc98a8e6cb66141de2d57dcff3bc2c66cd8c0ce11c47d67ca40913f385252c/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888236": [
        {
            "ioc_value": "https://metricgw.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:09:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888237": [
        {
            "ioc_value": "svcnode.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:09:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888238": [
        {
            "ioc_value": "telemgate.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:09:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888239": [
        {
            "ioc_value": "metricgw.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:09:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888234": [
        {
            "ioc_value": "https://svcnode.net",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:09:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888235": [
        {
            "ioc_value": "https://telemgate.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:09:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888233": [
        {
            "ioc_value": "137.175.107.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888232": [
        {
            "ioc_value": "80.190.77.86:6006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888231": [
        {
            "ioc_value": "192.255.139.206:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888229": [
        {
            "ioc_value": "ayoub.yahiaoui.mbway-nantes.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:01:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888230": [
        {
            "ioc_value": "nano-hightech.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 13:01:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888215": [
        {
            "ioc_value": "https://idealvgtrens.com/cloud/x/6157/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-26 12:52:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "credential-phishing,fake-captcha,google-sites-lure,m365",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1888214": [
        {
            "ioc_value": "cyberknull.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:09",
            "last_seen_utc": "2026-08-27 09:59:32",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888216": [
        {
            "ioc_value": "https://idealvgtrens.com/cloud/x/6157/server.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-26 12:52:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "credential-phishing,fake-captcha,google-sites-lure,m365",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1888217": [
        {
            "ioc_value": "https://ivahook.online/api/clients/ping",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:52:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/2b95e84b-5f3a-453f-b846-a32959d3845b",
            "tags": "RAT,SnowStealer,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888218": [
        {
            "ioc_value": "https://ivahook.online/api/clients/exfiltrate",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:52:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/2b95e84b-5f3a-453f-b846-a32959d3845b",
            "tags": "RAT,SnowStealer,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888220": [
        {
            "ioc_value": "47.238.196.189:33333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:07",
            "last_seen_utc": "2026-08-27 09:59:35",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888219": [
        {
            "ioc_value": "103.30.194.78:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:06",
            "last_seen_utc": "2026-08-27 09:59:35",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888224": [
        {
            "ioc_value": "https://repositoryserver.dpdns.org/linuxsh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:05",
            "last_seen_utc": "2026-08-27 09:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888225": [
        {
            "ioc_value": "https://repositoryserver.dpdns.org/cronsys",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:05",
            "last_seen_utc": "2026-08-27 09:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888226": [
        {
            "ioc_value": "https://repositoryserver.dpdns.org/killersys",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:04",
            "last_seen_utc": "2026-08-27 09:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888227": [
        {
            "ioc_value": "https://paste.mangsud.org/raw/ea2e61cc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-26 12:52:04",
            "last_seen_utc": "2026-08-27 09:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888222": [
        {
            "ioc_value": "www.ordinex.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 12:50:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888223": [
        {
            "ioc_value": "www.osmilano.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 12:50:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888221": [
        {
            "ioc_value": "mastercommunicationnumerique.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 12:50:58",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888066": [
        {
            "ioc_value": "185.209.228.162:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.backdoor_irc16",
            "malware_alias": null,
            "malware_printable": "Irc16",
            "first_seen_utc": "2026-08-26 12:43:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Botnet,CVE-2026-73570,zimbra",
            "anonymous": 0,
            "reporter": "patrickp_88"
        }
    ],
    "1888067": [
        {
            "ioc_value": "http://147.182.224.216/zed",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.backdoor_irc16",
            "malware_alias": null,
            "malware_printable": "Irc16",
            "first_seen_utc": "2026-08-26 12:43:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Botnet,CVE-2026-73570,zimbra",
            "anonymous": 0,
            "reporter": "patrickp_88"
        }
    ],
    "1888135": [
        {
            "ioc_value": "https://pancar.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888136": [
        {
            "ioc_value": "https://pancar.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888137": [
        {
            "ioc_value": "https://pancar.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888138": [
        {
            "ioc_value": "https://pancar.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888139": [
        {
            "ioc_value": "https://pancar.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888140": [
        {
            "ioc_value": "pancar.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 12:43:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888157": [
        {
            "ioc_value": "v-lan.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 12:43:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "g0njxa"
        }
    ],
    "1888148": [
        {
            "ioc_value": "46.101.179.59:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-26 12:43:55",
            "last_seen_utc": "2026-08-31 08:26:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1888160": [
        {
            "ioc_value": "https://v-lan.su/login",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 12:43:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "g0njxa"
        }
    ],
    "1888207": [
        {
            "ioc_value": "reg.v-panel.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 12:43:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "g0njxa"
        }
    ],
    "1888210": [
        {
            "ioc_value": "http://139.135.59.122:49115/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 12:43:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.59.122",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1888212": [
        {
            "ioc_value": "remus.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 12:43:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "g0njxa"
        }
    ],
    "1888213": [
        {
            "ioc_value": "sasyfedo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 12:41:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888211": [
        {
            "ioc_value": "5hzfou29.en-us-us-neurovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 12:19:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888209": [
        {
            "ioc_value": "230shaky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 12:19:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888208": [
        {
            "ioc_value": "en-us-us-neurovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 12:18:27",
            "last_seen_utc": "2026-08-26 12:18:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888206": [
        {
            "ioc_value": "posupugy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 12:12:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888204": [
        {
            "ioc_value": "204.44.122.232:24444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 12:09:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888205": [
        {
            "ioc_value": "209.151.155.182:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 12:09:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888203": [
        {
            "ioc_value": "128.254.195.179:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888193": [
        {
            "ioc_value": "204.77.9.71:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888194": [
        {
            "ioc_value": "2.59.135.137:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888195": [
        {
            "ioc_value": "2.59.135.137:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888196": [
        {
            "ioc_value": "2.59.135.137:7003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888197": [
        {
            "ioc_value": "91.92.47.77:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888198": [
        {
            "ioc_value": "91.92.47.77:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888199": [
        {
            "ioc_value": "45.156.87.111:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888200": [
        {
            "ioc_value": "45.141.148.248:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888201": [
        {
            "ioc_value": "78.40.209.138:56545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888202": [
        {
            "ioc_value": "78.40.209.138:53105",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888188": [
        {
            "ioc_value": "93.152.221.227:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888189": [
        {
            "ioc_value": "93.152.221.227:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888190": [
        {
            "ioc_value": "108.186.112.147:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:12",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888191": [
        {
            "ioc_value": "46.16.34.62:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888192": [
        {
            "ioc_value": "46.16.34.62:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888177": [
        {
            "ioc_value": "85.137.253.157:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888178": [
        {
            "ioc_value": "80.76.49.78:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888179": [
        {
            "ioc_value": "31.76.118.128:3132",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888180": [
        {
            "ioc_value": "31.76.118.221:3132",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888181": [
        {
            "ioc_value": "151.242.63.30:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888182": [
        {
            "ioc_value": "144.31.148.103:1500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888183": [
        {
            "ioc_value": "5.188.75.162:63048",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888184": [
        {
            "ioc_value": "45.61.178.220:1193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888185": [
        {
            "ioc_value": "151.241.154.217:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888186": [
        {
            "ioc_value": "91.92.42.99:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888187": [
        {
            "ioc_value": "64.89.160.222:1488",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-26 12:06:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888176": [
        {
            "ioc_value": "34.45.74.63:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 12:05:07",
            "last_seen_utc": "2026-09-01 02:45:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888174": [
        {
            "ioc_value": "192.255.139.206:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888175": [
        {
            "ioc_value": "47.101.51.235:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888171": [
        {
            "ioc_value": "103.199.100.173:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888172": [
        {
            "ioc_value": "47.98.129.153:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888173": [
        {
            "ioc_value": "156.234.82.4:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888162": [
        {
            "ioc_value": "103.199.100.171:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888163": [
        {
            "ioc_value": "103.199.100.174:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888164": [
        {
            "ioc_value": "134.122.173.26:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888165": [
        {
            "ioc_value": "23.248.223.82:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888166": [
        {
            "ioc_value": "23.248.223.84:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888167": [
        {
            "ioc_value": "23.248.223.85:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888168": [
        {
            "ioc_value": "23.248.223.86:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888169": [
        {
            "ioc_value": "23.248.223.83:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888170": [
        {
            "ioc_value": "134.122.173.16:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888161": [
        {
            "ioc_value": "134.122.173.25:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 12:04:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888158": [
        {
            "ioc_value": "178.208.169.166:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 12:03:30",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888159": [
        {
            "ioc_value": "107.175.88.79:30305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 12:03:30",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888155": [
        {
            "ioc_value": "cloudsenterprise2026.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 11:49:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888154": [
        {
            "ioc_value": "91.108.189.81:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 11:48:52",
            "last_seen_utc": "2026-09-01 02:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888153": [
        {
            "ioc_value": "online-r.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 11:48:12",
            "last_seen_utc": "2026-09-01 02:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888152": [
        {
            "ioc_value": "sekixy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 11:44:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888151": [
        {
            "ioc_value": "hezucyxe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 11:42:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888150": [
        {
            "ioc_value": "stzbe69562.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 11:37:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888149": [
        {
            "ioc_value": "neryvywy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 11:35:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888146": [
        {
            "ioc_value": "http://risadxe.click:8954/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 11:20:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888147": [
        {
            "ioc_value": "http://shhsift.click:7647/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 11:20:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888145": [
        {
            "ioc_value": "p25so1h6.enus--lipovive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888144": [
        {
            "ioc_value": "hldju4og.enus-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 11:18:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888143": [
        {
            "ioc_value": "enus-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 11:17:16",
            "last_seen_utc": "2026-08-26 11:17:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888142": [
        {
            "ioc_value": "enus--lipovive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 11:16:53",
            "last_seen_utc": "2026-08-26 16:17:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888141": [
        {
            "ioc_value": "tmvjkor3ck.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 11:12:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888133": [
        {
            "ioc_value": "192.255.139.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 11:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888134": [
        {
            "ioc_value": "192.255.139.206:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 11:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888132": [
        {
            "ioc_value": "192.255.139.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 11:05:07",
            "last_seen_utc": "2026-08-27 07:27:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888131": [
        {
            "ioc_value": "192.255.139.206:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888130": [
        {
            "ioc_value": "194.150.166.179:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888129": [
        {
            "ioc_value": "tecnogermana.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 11:05:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888128": [
        {
            "ioc_value": "bswskvvht.en-us-morningfatmelter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 10:57:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888127": [
        {
            "ioc_value": "en-us-morningfatmelter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 10:56:22",
            "last_seen_utc": "2026-08-27 13:04:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888126": [
        {
            "ioc_value": "qaqedy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 10:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888124": [
        {
            "ioc_value": "eos.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 10:50:47",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1888125": [
        {
            "ioc_value": "https://eos.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 10:50:47",
            "last_seen_utc": "2026-09-01 03:41:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1888123": [
        {
            "ioc_value": "4lu4vaih.en-us--menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 10:28:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888122": [
        {
            "ioc_value": "efuvwqjgzc.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 10:27:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888121": [
        {
            "ioc_value": "k45ks1jv.enus-mindvault.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 10:18:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888120": [
        {
            "ioc_value": "enus-mindvault.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 10:17:47",
            "last_seen_utc": "2026-08-26 10:18:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888119": [
        {
            "ioc_value": "gjgzu75352.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 10:14:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888118": [
        {
            "ioc_value": "http://fresok.top:9048/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 10:05:26",
            "last_seen_utc": "2026-08-29 07:39:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/45f35d4c5898a814aabc01ff69e81de600e861c0b72d67f7b30808b6b54082ca/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888117": [
        {
            "ioc_value": "http://Cryptovectorhub3.lol:5478/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 10:05:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/45f35d4c5898a814aabc01ff69e81de600e861c0b72d67f7b30808b6b54082ca/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888115": [
        {
            "ioc_value": "207.148.126.156:28884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888116": [
        {
            "ioc_value": "39.107.139.26:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888114": [
        {
            "ioc_value": "149.104.28.204:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888113": [
        {
            "ioc_value": "141.11.109.12:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888112": [
        {
            "ioc_value": "jogoxu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 09:50:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888111": [
        {
            "ioc_value": "jycakezi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 09:48:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888109": [
        {
            "ioc_value": "94.154.32.6:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:47:09",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888110": [
        {
            "ioc_value": "94.154.32.6:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:47:09",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888108": [
        {
            "ioc_value": "64.89.160.77:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:46:43",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888107": [
        {
            "ioc_value": "49.235.130.208:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 09:46:34",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888106": [
        {
            "ioc_value": "45.9.12.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 09:46:30",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888105": [
        {
            "ioc_value": "45.85.94.195:36626",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:46:29",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888104": [
        {
            "ioc_value": "38.147.188.28:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-08-26 09:46:11",
            "last_seen_utc": "2026-09-01 02:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888103": [
        {
            "ioc_value": "31.77.248.3:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:46:05",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888102": [
        {
            "ioc_value": "203.159.90.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 09:44:58",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888101": [
        {
            "ioc_value": "193.233.220.65:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-26 09:44:43",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888100": [
        {
            "ioc_value": "192.255.195.141:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:44:41",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888099": [
        {
            "ioc_value": "176.96.138.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 09:44:16",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888098": [
        {
            "ioc_value": "176.124.204.23:45051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-26 09:44:15",
            "last_seen_utc": "2026-09-01 02:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888097": [
        {
            "ioc_value": "172.93.187.109:40572",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 09:44:12",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888096": [
        {
            "ioc_value": "172.245.209.209:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888095": [
        {
            "ioc_value": "171.113.116.219:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-26 09:44:07",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888094": [
        {
            "ioc_value": "144.172.107.81:8444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-26 09:43:40",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888093": [
        {
            "ioc_value": "108.186.112.147:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-26 09:43:20",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888092": [
        {
            "ioc_value": "107.173.47.158:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 09:43:18",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888091": [
        {
            "ioc_value": "104.243.248.63:400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 09:43:14",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888090": [
        {
            "ioc_value": "104.105.15.96:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-26 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888089": [
        {
            "ioc_value": "101.99.92.134:4788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 09:43:04",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888088": [
        {
            "ioc_value": "81pjgbc00b.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 09:36:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888087": [
        {
            "ioc_value": "qlooc27699.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 09:33:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888083": [
        {
            "ioc_value": "109.122.18.12:19132",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 09:24:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888084": [
        {
            "ioc_value": "27.10.61.55:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 09:24:19",
            "last_seen_utc": "2026-08-28 07:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888085": [
        {
            "ioc_value": "72.155.73.165:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 09:24:19",
            "last_seen_utc": "2026-08-28 03:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888086": [
        {
            "ioc_value": "101.37.22.150:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 09:24:19",
            "last_seen_utc": "2026-08-28 08:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888081": [
        {
            "ioc_value": "128.90.136.110:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 09:23:04",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888082": [
        {
            "ioc_value": "199.245.176.147:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 09:23:04",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888077": [
        {
            "ioc_value": "172.86.66.224:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 09:22:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888078": [
        {
            "ioc_value": "151.241.99.26:30303",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 09:22:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888079": [
        {
            "ioc_value": "94.237.109.153:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 09:22:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888080": [
        {
            "ioc_value": "159.112.188.117:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-26 09:22:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1888076": [
        {
            "ioc_value": "nuviduma.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 09:19:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888075": [
        {
            "ioc_value": "backendkitchen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.strelastealer",
            "malware_alias": null,
            "malware_printable": "StrelaStealer",
            "first_seen_utc": "2026-08-26 09:09:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "StrelaStealer",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888074": [
        {
            "ioc_value": "enus-neurovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 09:08:08",
            "last_seen_utc": "2026-08-26 22:34:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888073": [
        {
            "ioc_value": "124.222.150.13:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888072": [
        {
            "ioc_value": "118.178.143.61:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888071": [
        {
            "ioc_value": "68.221.168.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 09:05:06",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888070": [
        {
            "ioc_value": "hestermaroon.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 08:59:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888069": [
        {
            "ioc_value": "compraventa.ebainet.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 08:57:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888068": [
        {
            "ioc_value": "bjanb99983.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 08:52:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888063": [
        {
            "ioc_value": "pumula.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 08:24:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888065": [
        {
            "ioc_value": "tj2ay0gm.en-us--mindvault.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 08:22:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888064": [
        {
            "ioc_value": "en-us--mindvault.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 08:17:23",
            "last_seen_utc": "2026-08-26 08:17:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888044": [
        {
            "ioc_value": "pibutyva.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 08:07:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888062": [
        {
            "ioc_value": "68.221.168.156:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 08:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888061": [
        {
            "ioc_value": "49.232.135.25:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888059": [
        {
            "ioc_value": "193.160.32.138:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888060": [
        {
            "ioc_value": "193.160.32.138:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888058": [
        {
            "ioc_value": "www.website-256db78e.sct.lof.mybluehost.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 08:04:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888057": [
        {
            "ioc_value": "31.40.204.71:777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-26 08:03:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fe15b526b674c2dc17c927ce05d642ae00a282c1e5cc8ae4e09c292e53947d85/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888056": [
        {
            "ioc_value": "en-us-neuro-vera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 08:02:42",
            "last_seen_utc": "2026-08-26 22:33:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888055": [
        {
            "ioc_value": "88.99.165.153:8780",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-26 08:00:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/59dbda887a13dfe851e186f6cee4045cd4c87043e16f6d2bded8a5a86fce268b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888053": [
        {
            "ioc_value": "207.180.29.217:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-26 08:00:43",
            "last_seen_utc": "2026-08-31 19:05:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0e27227f011931ac1eb53596299df5a7b6223f155c80093db19471e9b4abec6f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888054": [
        {
            "ioc_value": "207.180.29.85:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-26 08:00:43",
            "last_seen_utc": "2026-09-01 00:29:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6b5ded751fcf17c56d5f8f9701397cc1e1f675437cd22dcd83f21c8f7a2ff107/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888052": [
        {
            "ioc_value": "windowsfeeds.3utilities.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-26 08:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/72ba27586aad87a240896527e52ce799563e7a9d59e1df0e907a77bf3a04977d/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888051": [
        {
            "ioc_value": "enus-neurosharp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 08:00:00",
            "last_seen_utc": "2026-08-26 08:00:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1888049": [
        {
            "ioc_value": "137.175.107.108:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:55:46",
            "last_seen_utc": "2026-08-27 07:27:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888050": [
        {
            "ioc_value": "106.54.44.181:89",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:55:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888048": [
        {
            "ioc_value": "101.34.216.243:6443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:55:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1359593325",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888046": [
        {
            "ioc_value": "191.101.46.43:2021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-26 07:55:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aff2b20d9f096d44ec7961869cd30f20e6717d102d4b03422b3b895c0e991833/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888047": [
        {
            "ioc_value": "217.217.97.84:2021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-26 07:55:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/46a053629a06d8578d58e3edf33fa01e8d6ab4813588156ac0e9a8d3c4553082/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888045": [
        {
            "ioc_value": "193.160.32.138:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:55:32",
            "last_seen_utc": "2026-08-26 09:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888043": [
        {
            "ioc_value": "seal.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 07:51:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888042": [
        {
            "ioc_value": "king.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-26 07:51:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1888041": [
        {
            "ioc_value": "ftp.bookingreg.fit",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-26 07:49:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f68ef6e15f326e24326fdb3ab382ee31c39fde496bc025c5582c91833e207cf1/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888026": [
        {
            "ioc_value": "qiteryqy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 07:44:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888034": [
        {
            "ioc_value": "heleqoja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 07:44:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888037": [
        {
            "ioc_value": "qne77uxu27.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 07:44:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888040": [
        {
            "ioc_value": "mail.spark-trail95.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:44:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/66a037c72c440134721a8b66883db1654b63dddb6dfa5afe10492ce708ff0f65/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888038": [
        {
            "ioc_value": "192.159.99.227:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 07:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6770569bcc3002aa3d64fcf1130eddad71ecca27109f1b16b9b26b2aae484d70/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888039": [
        {
            "ioc_value": "moodess.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 07:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6770569bcc3002aa3d64fcf1130eddad71ecca27109f1b16b9b26b2aae484d70/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888036": [
        {
            "ioc_value": "45.83.207.111:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:34:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15c19d3c7d3193cd1d7f04ed2c1acaa8cf672190cb0ef1ebf66e972826ce21d1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888035": [
        {
            "ioc_value": "shieldprotect.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:34:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15c19d3c7d3193cd1d7f04ed2c1acaa8cf672190cb0ef1ebf66e972826ce21d1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888032": [
        {
            "ioc_value": "https://storyfinder.us/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:31:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/storyfinder.us",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888033": [
        {
            "ioc_value": "https://cdken.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:31:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cdken.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1888031": [
        {
            "ioc_value": "planecorn.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 07:29:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888030": [
        {
            "ioc_value": "lean.brilliancespontaneous.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:28:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76276fed51e1131c93f3e66a718f774b39ae1608a04f71492d129039446d6fad/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888029": [
        {
            "ioc_value": "158.94.210.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:28:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76276fed51e1131c93f3e66a718f774b39ae1608a04f71492d129039446d6fad/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888027": [
        {
            "ioc_value": "191.223.42.34:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-26 07:26:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c42d6f9bd8f2d8ca148aa355f249dc04c26ab654ca3cbe57751dc6fd7be49a3c/",
            "tags": "Gh0stRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888028": [
        {
            "ioc_value": "shdufysuf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-26 07:26:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c42d6f9bd8f2d8ca148aa355f249dc04c26ab654ca3cbe57751dc6fd7be49a3c/",
            "tags": "Gh0stRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888025": [
        {
            "ioc_value": "64.118.132.233:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-26 07:23:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f8ef1ba9d2bdeff589e40a603da76abfb022db1ca49a0e7b3a68a78bab25da32/",
            "tags": "Gh0stRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888024": [
        {
            "ioc_value": "airuhuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-26 07:23:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f8ef1ba9d2bdeff589e40a603da76abfb022db1ca49a0e7b3a68a78bab25da32/",
            "tags": "Gh0stRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888022": [
        {
            "ioc_value": "waylace.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 07:22:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888023": [
        {
            "ioc_value": "crateridge.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-26 07:22:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888021": [
        {
            "ioc_value": "skullcode1.myddns.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a78799e30ca91e087f0b5fd31533ee342125480c99979133603568cff1ccb045/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888020": [
        {
            "ioc_value": "213.152.162.110:43148",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 07:20:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a78799e30ca91e087f0b5fd31533ee342125480c99979133603568cff1ccb045/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888019": [
        {
            "ioc_value": "http://spareon.click:8811/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 07:17:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1888018": [
        {
            "ioc_value": "selkin.newddns.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-08-26 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1289888aeeb1185514df473a72dceb9d5651a95022f8abe66d767bad72f5462f/",
            "tags": "RAT,STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888017": [
        {
            "ioc_value": "77.110.115.255:7840",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-08-26 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1289888aeeb1185514df473a72dceb9d5651a95022f8abe66d767bad72f5462f/",
            "tags": "RAT,STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888002": [
        {
            "ioc_value": "king.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 07:10:10",
            "last_seen_utc": "2026-08-26 07:09:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1888014": [
        {
            "ioc_value": "fkb7qoeakw.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 07:10:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888009": [
        {
            "ioc_value": "monique97.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 07:10:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888016": [
        {
            "ioc_value": "27.124.17.151:8801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c1d38c3132ef3f55b417e898da98a54ac5940537f4c2281bcacc430c4a25f646/",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888015": [
        {
            "ioc_value": "eureka.tf7757.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 07:08:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c1d38c3132ef3f55b417e898da98a54ac5940537f4c2281bcacc430c4a25f646/",
            "tags": "DumplingsRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888011": [
        {
            "ioc_value": "52.241.248.38:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 07:06:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5bfcb8b818d300b4a712c094daa55d29df62597e26ee10271b01d3a8e978974f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888012": [
        {
            "ioc_value": "52.241.248.38:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 07:06:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5bfcb8b818d300b4a712c094daa55d29df62597e26ee10271b01d3a8e978974f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888013": [
        {
            "ioc_value": "52.241.248.38:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 07:06:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5bfcb8b818d300b4a712c094daa55d29df62597e26ee10271b01d3a8e978974f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888010": [
        {
            "ioc_value": "pure8s.ddnsfree.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-26 07:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5bfcb8b818d300b4a712c094daa55d29df62597e26ee10271b01d3a8e978974f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1888008": [
        {
            "ioc_value": "193.160.32.138:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888007": [
        {
            "ioc_value": "113.31.113.209:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888006": [
        {
            "ioc_value": "113.31.113.209:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888005": [
        {
            "ioc_value": "101.43.53.103:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 07:05:06",
            "last_seen_utc": "2026-08-27 07:27:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888003": [
        {
            "ioc_value": "macroad.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 07:04:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888004": [
        {
            "ioc_value": "heartandshape.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 07:04:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1888000": [
        {
            "ioc_value": "mybai64034.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 06:48:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1888001": [
        {
            "ioc_value": "www.dataspot.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:35:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887968": [
        {
            "ioc_value": "nopofomo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 06:24:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887969": [
        {
            "ioc_value": "darkprn3d3udnhpuxknsrhft3376lrz5tenhgkrxge5hxqe46pkbrwid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887970": [
        {
            "ioc_value": "jsqsgn6vehow5jnjqohteaqnhko6pmdvjzbim57bdvdtgobrmoibjzad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887971": [
        {
            "ioc_value": "frwvvaqob3ofmegrbc4q2ovtwyf5u7ozyyv35unib3saq3ppx2pkwuad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887972": [
        {
            "ioc_value": "667k2ck7qlzoqt52i6dq7evcfzko2ezfrhgv6zziccjet2cc653kvbid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887973": [
        {
            "ioc_value": "e6q3vpkqpqjnerdtseb5wkgmuluqfsluu2sgwjghtrlf2u2pzybrlzid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887974": [
        {
            "ioc_value": "kic4bflgzxoo2oq5wn52frqpzba2b75iodhqjgtdulchdeph73kq6zqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887975": [
        {
            "ioc_value": "7y6rr2oawf63yf2zjdidijun7p6gtjqye7b44vqyvilva3or324k3kad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887976": [
        {
            "ioc_value": "x4emye5homuwkrvrfaoql53hc5spbazkvcw3m4pv6jaj5tjqmjizleqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887977": [
        {
            "ioc_value": "2zl5qc3mqap7vziqfis65oyjcgdiedigoequxbqsn6uwian7ieozvoqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887978": [
        {
            "ioc_value": "pokttabd2hod47ladeeoin22wmq4remyo3wshwvxfuhgqygcbezq2qqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887979": [
        {
            "ioc_value": "x2jz63qemhcbhyskzt3pie757oicdkctk2rh5dpykmxsw2yoayeqs5yd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887980": [
        {
            "ioc_value": "t2ru74fbgut26xnagtrl4ajeh5vqytrl6cpr6cubmr6sqdxk5guh5mqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887981": [
        {
            "ioc_value": "wjcml4mxpcvsmjxm33zhjb46nzutxk6g3f5w23fopgpwj6pqjcidiyqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887982": [
        {
            "ioc_value": "3i5px2hibsyityv6jixnqba35yz25jekbwwumjdxjqzt3euqsygjx5id.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887983": [
        {
            "ioc_value": "tjaaioz32salcoj63ttxra6nfqggwbcezkzpwnhyoiwq5tuimzmsb3qd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 06:24:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092484686740099397",
            "tags": "darkproject,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887984": [
        {
            "ioc_value": "mojuti.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 06:24:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887995": [
        {
            "ioc_value": "http://221.13.234.94:35751/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 06:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/221.13.234.94",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1887999": [
        {
            "ioc_value": "tn1io2hp.enus-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:21:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887998": [
        {
            "ioc_value": "yawlixdf.en-us--levium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:20:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887997": [
        {
            "ioc_value": "seal.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:19:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887996": [
        {
            "ioc_value": "2zz07wlf.verticalchurchfilms.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:19:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887994": [
        {
            "ioc_value": "lmq0ixtj.en-us-memrylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:18:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887993": [
        {
            "ioc_value": "enus-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:17:36",
            "last_seen_utc": "2026-08-26 06:17:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1887992": [
        {
            "ioc_value": "en-us--levium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:16:27",
            "last_seen_utc": "2026-08-26 06:17:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1887991": [
        {
            "ioc_value": "verticalchurchfilms.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:16:22",
            "last_seen_utc": "2026-08-26 06:16:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887990": [
        {
            "ioc_value": "en-us-memrylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:16:09",
            "last_seen_utc": "2026-08-26 06:16:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887988": [
        {
            "ioc_value": "101.43.53.103:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887989": [
        {
            "ioc_value": "113.31.113.209:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887987": [
        {
            "ioc_value": "101.43.53.103:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 06:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887986": [
        {
            "ioc_value": "kohatpromotions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:04:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887985": [
        {
            "ioc_value": "www.depannage-serrurier-94.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 06:04:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887581": [
        {
            "ioc_value": "http://146.158.4.238:41633/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 05:46:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/146.158.4.238",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1887593": [
        {
            "ioc_value": "hennemann.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-26 05:46:35",
            "last_seen_utc": "2026-08-27 22:08:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1887594": [
        {
            "ioc_value": "https://hennemann.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-26 05:46:35",
            "last_seen_utc": "2026-08-26 04:12:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1887595": [
        {
            "ioc_value": "https://hennemann.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-26 05:46:34",
            "last_seen_utc": "2026-08-26 04:12:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1887601": [
        {
            "ioc_value": "45.95.168.149:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:46:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://blog.efespain.com/posts/capitulo-12-khserver-ghidra/",
            "tags": "booter,DDoS,gaming,IoT,KHserver,SBIDIOT",
            "anonymous": 0,
            "reporter": "eFeSpain"
        }
    ],
    "1887627": [
        {
            "ioc_value": "voidravenfortress.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:46:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "sepolia,web-skimmer,woocommerce",
            "anonymous": 0,
            "reporter": "Zszywacz"
        }
    ],
    "1887881": [
        {
            "ioc_value": "159.89.230.90:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.parrot_tds",
            "malware_alias": null,
            "malware_printable": "Parrot TDS",
            "first_seen_utc": "2026-08-26 05:46:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a8e23269347938656d4f799",
            "tags": "client-hints-cloaking,malvertising,TDS",
            "anonymous": 0,
            "reporter": "kfiducia"
        }
    ],
    "1887883": [
        {
            "ioc_value": "facturacionmexico.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:46:31",
            "last_seen_utc": "2026-08-26 00:02:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a26ef71b1e01654b1f3c6cd",
            "tags": "banking,cfdi,latam,mexico,namecheap,sat,web-inject",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1887884": [
        {
            "ioc_value": "russk22.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:46:31",
            "last_seen_utc": "2026-08-26 00:02:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a26ef71b1e01654b1f3c6cd",
            "tags": "banking,c2,latam,mexico,namecheap,redirect",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1887885": [
        {
            "ioc_value": "https://facturacionmexico.net/ok.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:46:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a26ef71b1e01654b1f3c6cd",
            "tags": "banking,cfdi,latam,mexico,namecheap,sat,web-inject",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1887886": [
        {
            "ioc_value": "https://russk22.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:46:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a26ef71b1e01654b1f3c6cd",
            "tags": "banking,c2,latam,mexico,namecheap,redirect",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1887887": [
        {
            "ioc_value": "http://27.44.145.195:60512/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 05:46:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.44.145.195",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1887889": [
        {
            "ioc_value": "http://72.255.15.211:53933/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 05:46:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.15.211",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1887888": [
        {
            "ioc_value": "http://153.117.32.70:43183/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 05:46:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.32.70",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1887890": [
        {
            "ioc_value": "http://202.70.139.79:49671/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-26 05:46:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.70.139.79",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1887896": [
        {
            "ioc_value": "82.23.183.184:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-08-26 05:46:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "214062,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1887900": [
        {
            "ioc_value": "13.231.27.0:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-08-26 05:46:26",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "16509,brute ratel,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1887906": [
        {
            "ioc_value": "142.248.82.152:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-26 05:46:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887910": [
        {
            "ioc_value": "https://manita.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 05:46:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887911": [
        {
            "ioc_value": "https://manita.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 05:46:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887913": [
        {
            "ioc_value": "https://manita.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 05:46:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887912": [
        {
            "ioc_value": "https://manita.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 05:46:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887914": [
        {
            "ioc_value": "https://manita.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 05:46:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887915": [
        {
            "ioc_value": "manita.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-26 05:46:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887271": [
        {
            "ioc_value": "46.101.146.87:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-26 05:46:19",
            "last_seen_utc": "2026-08-30 12:22:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887628": [
        {
            "ioc_value": "http://158.94.211.113/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-26 05:46:19",
            "last_seen_utc": "2026-08-27 12:16:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,traff1",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887874": [
        {
            "ioc_value": "165.22.122.89:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-26 05:46:18",
            "last_seen_utc": "2026-08-27 15:35:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887882": [
        {
            "ioc_value": "https://77.42.69.149",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 05:46:18",
            "last_seen_utc": "2026-09-01 03:41:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a6d2471547d36419d2976bfb5f58f7b6,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887947": [
        {
            "ioc_value": "167.99.194.254:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-26 05:46:17",
            "last_seen_utc": "2026-08-30 09:38:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887967": [
        {
            "ioc_value": "201.79.5.223:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-26 05:46:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887966": [
        {
            "ioc_value": "http://shhsift.click:7647/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 05:35:34",
            "last_seen_utc": "2026-08-26 20:03:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a01d5d810752c0cd2339852a8953cefe03a944b6c1f0c74c8908dbffcc77c8a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887965": [
        {
            "ioc_value": "http://fresok.top:9048/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 05:35:23",
            "last_seen_utc": "2026-08-26 20:03:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a01d5d810752c0cd2339852a8953cefe03a944b6c1f0c74c8908dbffcc77c8a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887964": [
        {
            "ioc_value": "http://Cryptovectorhub3.lol:5478/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 05:35:21",
            "last_seen_utc": "2026-08-26 20:03:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a01d5d810752c0cd2339852a8953cefe03a944b6c1f0c74c8908dbffcc77c8a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887963": [
        {
            "ioc_value": "216.203.20.46:5478",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 05:35:13",
            "last_seen_utc": "2026-08-26 10:05:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887962": [
        {
            "ioc_value": "salmontabbie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 05:33:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887961": [
        {
            "ioc_value": "bimuweha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 05:31:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887960": [
        {
            "ioc_value": "lifimalo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 05:27:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887958": [
        {
            "ioc_value": "http://zonxh.shop:7728/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 05:15:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887959": [
        {
            "ioc_value": "http://fresok.top:9048/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-26 05:15:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887957": [
        {
            "ioc_value": "u3qr1x83a9.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 05:11:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887956": [
        {
            "ioc_value": "allunitedcontracting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 05:05:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887955": [
        {
            "ioc_value": "bratusferramentas.grupomoltz.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 05:05:30",
            "last_seen_utc": "2026-08-31 01:56:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887954": [
        {
            "ioc_value": "101.43.53.103:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 05:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887952": [
        {
            "ioc_value": "101.43.53.103:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887953": [
        {
            "ioc_value": "101.43.53.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887951": [
        {
            "ioc_value": "101.43.53.103:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-26 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887950": [
        {
            "ioc_value": "en-us-en-lipovive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 04:59:27",
            "last_seen_utc": "2026-08-26 08:01:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887949": [
        {
            "ioc_value": "209.25.140.16:13658",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-26 04:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887948": [
        {
            "ioc_value": "sigekynu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 04:49:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887946": [
        {
            "ioc_value": "en-us-en-morningcoffeeritual.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 04:18:56",
            "last_seen_utc": "2026-08-26 04:19:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887945": [
        {
            "ioc_value": "rihume.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 04:17:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887944": [
        {
            "ioc_value": "rirezewo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 04:15:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887943": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Justin-97483/96yfds4hd/rttt34-45",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 04:14:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1887942": [
        {
            "ioc_value": "en-us-aquaburnn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 04:13:31",
            "last_seen_utc": "2026-08-26 12:48:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "26August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887941": [
        {
            "ioc_value": "52.29.243.233:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-26 04:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887940": [
        {
            "ioc_value": "39.99.237.255:1433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-26 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887939": [
        {
            "ioc_value": "31.207.38.75:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887938": [
        {
            "ioc_value": "cnvdlaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 04:00:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887937": [
        {
            "ioc_value": "jecuju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 03:29:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887936": [
        {
            "ioc_value": "mobahewo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 03:29:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887935": [
        {
            "ioc_value": "0h4947ym92.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 03:27:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887934": [
        {
            "ioc_value": "muhodyru.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 03:22:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887933": [
        {
            "ioc_value": "couvoir.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 03:15:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887932": [
        {
            "ioc_value": "dthppg610q.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 03:11:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887930": [
        {
            "ioc_value": "uza.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 03:05:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1887931": [
        {
            "ioc_value": "https://uza.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 03:05:47",
            "last_seen_utc": "2026-09-01 03:41:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1887928": [
        {
            "ioc_value": "31.207.38.75:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887929": [
        {
            "ioc_value": "176.65.144.177:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-26 03:05:07",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887927": [
        {
            "ioc_value": "31.207.38.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 03:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887926": [
        {
            "ioc_value": "31.207.38.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-26 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887925": [
        {
            "ioc_value": "www.ministryofglassmurano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 03:02:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887924": [
        {
            "ioc_value": "parcavicole.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 02:50:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887923": [
        {
            "ioc_value": "aimlo27369.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 02:36:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887922": [
        {
            "ioc_value": "116.213.43.170:216",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-26 02:30:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887921": [
        {
            "ioc_value": "boilingdusty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 02:13:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887920": [
        {
            "ioc_value": "124.222.57.34:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 02:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887919": [
        {
            "ioc_value": "134.255.211.140:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 02:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887917": [
        {
            "ioc_value": "117.72.40.1:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887918": [
        {
            "ioc_value": "118.107.25.243:7010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887916": [
        {
            "ioc_value": "fulezoso.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 02:02:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887909": [
        {
            "ioc_value": "lazajibu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 01:36:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887908": [
        {
            "ioc_value": "https://telegram.me/s11yne",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-26 01:35:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fc02692a98927272e200e01eb80007cc03aedbdec8acfb68aa9730dabaa8fce1/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887907": [
        {
            "ioc_value": "uf3hzwgi.enus-glucore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 01:31:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887905": [
        {
            "ioc_value": "nasafu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 01:28:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887904": [
        {
            "ioc_value": "enus-glucore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 01:27:28",
            "last_seen_utc": "2026-08-26 01:27:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1887903": [
        {
            "ioc_value": "tokenyhy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 01:21:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887902": [
        {
            "ioc_value": "is79oi37.en-us-glucotrustt-bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 01:08:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887901": [
        {
            "ioc_value": "en-us-glucotrustt-bites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 01:05:37",
            "last_seen_utc": "2026-08-31 03:02:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1887898": [
        {
            "ioc_value": "205.234.170.195:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887899": [
        {
            "ioc_value": "47.92.216.249:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887897": [
        {
            "ioc_value": "185.242.3.178:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-26 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887895": [
        {
            "ioc_value": "nyzemebu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 00:57:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887893": [
        {
            "ioc_value": "baci-conference.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 00:35:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887894": [
        {
            "ioc_value": "www.sos-smartphone.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 00:35:13",
            "last_seen_utc": "2026-08-26 21:54:40",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887892": [
        {
            "ioc_value": "www.tawthiqelatbi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-26 00:35:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887891": [
        {
            "ioc_value": "347melamie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-26 00:22:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887880": [
        {
            "ioc_value": "hacybenu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 23:49:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887879": [
        {
            "ioc_value": "snpsghohha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 23:36:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887878": [
        {
            "ioc_value": "5bkoqvfp.eng--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 23:28:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887877": [
        {
            "ioc_value": "vecinu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 23:27:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887876": [
        {
            "ioc_value": "zejyqeba.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 23:23:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887875": [
        {
            "ioc_value": "tuj6qh83.eng-eng-glucore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 23:09:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887873": [
        {
            "ioc_value": "qhvdg6q2ob.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 22:56:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887872": [
        {
            "ioc_value": "http://ciffice.biz:7720/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 22:42:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887871": [
        {
            "ioc_value": "591jemmy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 22:36:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887870": [
        {
            "ioc_value": "5xr9f8xc.en-us-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 22:28:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887868": [
        {
            "ioc_value": "https://cloudynetwork.online",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 22:24:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887869": [
        {
            "ioc_value": "https://nextcheck.online",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 22:24:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887866": [
        {
            "ioc_value": "cloudynetwork.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 22:24:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887867": [
        {
            "ioc_value": "nextcheck.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 22:24:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887864": [
        {
            "ioc_value": "150.109.94.129:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 22:21:12",
            "last_seen_utc": "2026-08-28 07:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887865": [
        {
            "ioc_value": "207.57.123.59:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 22:21:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887863": [
        {
            "ioc_value": "maroonlinda.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 22:18:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887862": [
        {
            "ioc_value": "124.198.132.77:1458",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 22:16:21",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887861": [
        {
            "ioc_value": "160.25.140.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 22:15:51",
            "last_seen_utc": "2026-08-26 01:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887860": [
        {
            "ioc_value": "94.96.192.87:3055",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-25 22:15:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887857": [
        {
            "ioc_value": "195.58.140.131:33300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 22:15:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887858": [
        {
            "ioc_value": "151.241.154.42:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 22:15:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887859": [
        {
            "ioc_value": "196.188.116.63:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 22:15:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887856": [
        {
            "ioc_value": "91.193.18.177:4783",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-25 22:14:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887854": [
        {
            "ioc_value": "207.56.26.11:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 22:13:16",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887855": [
        {
            "ioc_value": "207.56.26.2:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 22:13:16",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887853": [
        {
            "ioc_value": "dancewithus.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 22:05:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887852": [
        {
            "ioc_value": "https://binsrbuddies.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 22:01:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/binsrbuddies.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887851": [
        {
            "ioc_value": "the-quest.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 21:55:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887850": [
        {
            "ioc_value": "119.45.225.53:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 21:47:10",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887849": [
        {
            "ioc_value": "ck.erloro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 21:46:58",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887848": [
        {
            "ioc_value": "qyloa85467.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 21:42:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887847": [
        {
            "ioc_value": "lazorony.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 21:38:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887846": [
        {
            "ioc_value": "xapoluqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 21:29:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887845": [
        {
            "ioc_value": "9w36ncqf.en-leptozan-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 21:27:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887844": [
        {
            "ioc_value": "konya55488.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 21:23:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887843": [
        {
            "ioc_value": "www.bordeaux-aquitaine-boissons.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 21:20:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887842": [
        {
            "ioc_value": "digitalisierungscheck.mit-aufwind.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 21:19:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887841": [
        {
            "ioc_value": "http://vztax.shop:9820/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 21:15:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/56ffd2771ef463a8b67ff3dcc8528e78b78e4a2ce9234ae941695118a73b3543/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887840": [
        {
            "ioc_value": "89.116.73.207:9820",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 21:15:19",
            "last_seen_utc": "2026-08-25 21:15:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887839": [
        {
            "ioc_value": "graceful64.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 21:11:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887838": [
        {
            "ioc_value": "qovoto.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 20:46:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887837": [
        {
            "ioc_value": "0054d2622e335797a8697982af417982",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:27",
            "last_seen_utc": "2026-08-28 02:35:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887834": [
        {
            "ioc_value": "34c53b495cd8216306cd4dff6986077c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887835": [
        {
            "ioc_value": "86f27425624e99fca1a6735b4ed5e192f575794e57f16c47a1e068bb1e608d6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:26",
            "last_seen_utc": "2026-08-28 02:35:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887836": [
        {
            "ioc_value": "863adf6289db25fdc4ac0ef2e1a2ae63d43366b9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:26",
            "last_seen_utc": "2026-08-28 02:35:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887833": [
        {
            "ioc_value": "37e1c520d9d6359582f566e2c8339d6a2a66e546",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887829": [
        {
            "ioc_value": "fd669e1388907d25b8039b5ae22804a6b77a96d139c8f8bbff50c15c9968bfa2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:46:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887830": [
        {
            "ioc_value": "55888979b9436e79d41aeb0b763de01ed99b85db",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:46:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887831": [
        {
            "ioc_value": "1bd88bbb0c82349303aa60c470c8b51e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:46:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887832": [
        {
            "ioc_value": "0beaf7839d3a1b2e0c86566fd597c159da9f154e2be236d482ecb2c9ff32e225",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887826": [
        {
            "ioc_value": "d1db4e527ecf5ebb601744ec216724d6d25a0c2468668acc4e121cadfaa59a52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887827": [
        {
            "ioc_value": "88a8ad0a1d77f3f8b2f0a5fa267e8916206a5bcb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887828": [
        {
            "ioc_value": "817d31c309449bb678cfa47b1f5feba5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887823": [
        {
            "ioc_value": "8f9a5a5bda7dc3faf1d5cb74f0b4dc63643ab3bb205f119e585c5f290adc9137",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887824": [
        {
            "ioc_value": "0c7481ffcf1ceee98e3500c552cec40c6d7d8fbe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887825": [
        {
            "ioc_value": "0cd74763c8271e198bd5d3bcc2a3bb1e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:46:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887822": [
        {
            "ioc_value": "207.180.248.154:7242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 20:45:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0d4391dff5042019739e753b18b7d79627ecc59e2c52b0ea681a484267f33004/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887821": [
        {
            "ioc_value": "http://coxnext.click:7242/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 20:45:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0d4391dff5042019739e753b18b7d79627ecc59e2c52b0ea681a484267f33004/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887820": [
        {
            "ioc_value": "http://gofkaxz.click:8137/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 20:41:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887819": [
        {
            "ioc_value": "http://nopxs.shop:8839/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 20:35:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887817": [
        {
            "ioc_value": "8a57b2a9cbad582ca6211f7ee7686e6450782853",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:27:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887818": [
        {
            "ioc_value": "c1a774ce1a8b5aa8ccf6b7c4b1cfd0ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:27:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887815": [
        {
            "ioc_value": "3d639a627186e77730ff2d1294df49a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-25 20:27:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887816": [
        {
            "ioc_value": "fba00f02ac5abe5b9f7185d74ba753aa12984517fd79ce70a17ffd0ab3fa9adb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:27:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887813": [
        {
            "ioc_value": "89f6c08fa045d14eb73a0992145a724bc34d531d7af3dcc4901a1b7c7833aede",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-25 20:27:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887814": [
        {
            "ioc_value": "dd971d09f94dbd77735a07fc297dd2836fd94616",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-25 20:27:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887810": [
        {
            "ioc_value": "6b7a6595e3ba1deab9e3020e9fa535bd2ad83732e643d1e70e85d7c15d563d8e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887811": [
        {
            "ioc_value": "9df5fb9011bd9f1ae2efdbc7701cf6ec606cf670",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887812": [
        {
            "ioc_value": "08cb4c76b11f7b8725282fb495c25c85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887807": [
        {
            "ioc_value": "02e0b6dd34553b2d1e4a0f023716061884893d84995b3641b388b02f4e04014d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 20:27:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887808": [
        {
            "ioc_value": "432fb29714e78ea2d8e8e907132bc7259d445cb4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 20:27:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887809": [
        {
            "ioc_value": "553f64001e0e802a9619bd934d791155",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 20:27:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887805": [
        {
            "ioc_value": "6ed072ae91ff6f7f0de6d9b1a382647968e76b34",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:27:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887806": [
        {
            "ioc_value": "5e7f62683bb66cd08d61ea820bea6fe7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:27:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887801": [
        {
            "ioc_value": "c3c4e615bdff2ac3b6f290c044931d49f483c5bb62e2d7ec4cbf936e5dbee6b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-08-25 20:27:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887802": [
        {
            "ioc_value": "2ff1e76cd7036ffa6e93e41e634bbcc0ee4a4c39",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-08-25 20:27:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887803": [
        {
            "ioc_value": "d840e5f63396eaf9d3801f630bde373b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-08-25 20:27:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887804": [
        {
            "ioc_value": "f0b45ac6bb1d96981900bb46d9129c6c3facf2575529cac1ff0145079ef96cbd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:27:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887798": [
        {
            "ioc_value": "4c3c4e06e9994eded388727f5744c0746b76cb66f49efc0113111c7e6f975802",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887799": [
        {
            "ioc_value": "de348334e29485376b4e0f5487faf00184c51349",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887800": [
        {
            "ioc_value": "e35bf4bd8ed78626b63cb917fb2fd576",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887795": [
        {
            "ioc_value": "66a1dfb08cb48494a16f60ecc6a827acb02388ddd364baafad3cc9774fcaae2d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 20:27:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887796": [
        {
            "ioc_value": "eddfa48ca1564f480b696e12f0e809dacc60ff97",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 20:27:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887797": [
        {
            "ioc_value": "98597ac6d3479702b9efab392159bc48",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 20:27:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887792": [
        {
            "ioc_value": "adbc3683b11bd3a4fd6d99f7144f3904e0fe55839a91db66fd6a83c06a058f5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887793": [
        {
            "ioc_value": "78b8780c2200131209232320307410c0498c5a26",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887794": [
        {
            "ioc_value": "2422d08cd082f643c4996694764f888c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887789": [
        {
            "ioc_value": "381ab629fd8f5590643cbc93d9527038da1bc8aeef8ab1c7c2fada6a53be363a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-25 20:27:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887790": [
        {
            "ioc_value": "518758f0de6d8969f456aafc46029bc9cbada419",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-25 20:27:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887791": [
        {
            "ioc_value": "1d011399cbf80ab0970a15c6c07868d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-25 20:27:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887786": [
        {
            "ioc_value": "6decd2481cdb54b64b432e5632bfc91fddb8bcaa7d0d2289366ee1ae895025b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887787": [
        {
            "ioc_value": "dcc8071900625e6e0df5de9ae0156c4da85b2c4b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887788": [
        {
            "ioc_value": "2e688af35698aadb14d24e425f5c5e8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887783": [
        {
            "ioc_value": "4f9df700891ba8fcf918a8bcdd527d9109c7888be2201876fa64d73bfdcfd98a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887784": [
        {
            "ioc_value": "78c69adac0710e8ee3fa14f442fb1dce22ee4bb3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887785": [
        {
            "ioc_value": "bf1e808d7e6812bed9d86fd5aea256dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-25 20:27:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887781": [
        {
            "ioc_value": "e79d0d5d3076c47bc83cf4d60cd9e2471535f137",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-25 20:27:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887782": [
        {
            "ioc_value": "5a081c877716d922366a17238c18bcbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-25 20:27:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887778": [
        {
            "ioc_value": "d4fd4ff0709271323b8d401579270e6567b6e360",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-25 20:27:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887779": [
        {
            "ioc_value": "752d5cdda2a1d93d27e38f98a5d23fc2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-25 20:27:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887780": [
        {
            "ioc_value": "15e71f4e20634454a890c02d9494cc44b07e66cabea8d4bf3615dfde30d58e38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-25 20:27:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887776": [
        {
            "ioc_value": "ab9a2c07b3b1222f5ada4cb7c1fd144e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-25 20:27:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887777": [
        {
            "ioc_value": "f048400c23add8c75abe189393d33c873c02c74eeaf43d47b950c8d643763b35",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-25 20:27:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887774": [
        {
            "ioc_value": "1404090db3128de503ba4d991a960c7c1bc3b910a62d06ecf7e7081a2fcf11b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-25 20:27:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887775": [
        {
            "ioc_value": "22d5e961804073435cd193c1a4b7d3f4c39a64c4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-25 20:27:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887771": [
        {
            "ioc_value": "ee2579b3b0776a20be98c1cb605cd7eb39909951320b375e6aacfbd230104572",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887772": [
        {
            "ioc_value": "2e26a2fbd74b1e40119e1031d4776d1c55efcf5c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887773": [
        {
            "ioc_value": "59ae169e146ffcc328c53b0feade92cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887768": [
        {
            "ioc_value": "00df868e2b8a8f4014ac129bb65bb8b0d7e196966e5b30b44390dbb3914d219e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887769": [
        {
            "ioc_value": "42e83488d452064f0628a22bb038d36fc1e45d3e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887770": [
        {
            "ioc_value": "9165819cd48cc6eb816b22a27f85aefe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887766": [
        {
            "ioc_value": "3727f5bde57b562a6c66c1ffdedf2fc52daa47fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:27:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887767": [
        {
            "ioc_value": "c6dc1c09565cf12e833d1e5b35688e4e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:27:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887764": [
        {
            "ioc_value": "2899fcb03c3c0d5c6b504d2ab4f7b7dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-08-25 20:27:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887765": [
        {
            "ioc_value": "4037fc3edbee83ac3544c8bb948b2d237c4bc7ca7f5fc23147d8350fa248e081",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:27:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887760": [
        {
            "ioc_value": "9c9792f75ee324657d381b6eceee5336e0c752a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-08-25 20:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887761": [
        {
            "ioc_value": "2841cec724ba8a14f5f97527232596c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-08-25 20:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887762": [
        {
            "ioc_value": "d32b480e2cae0fe8597f58d360816487c7fbe63d524810624768ca700eaa8541",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-08-25 20:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887763": [
        {
            "ioc_value": "c10622a661cc81f44a4559514e70e14fe38ff4ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-08-25 20:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887757": [
        {
            "ioc_value": "60bee9be8b1a782592243014d0d0907f3d660241",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-08-25 20:27:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887758": [
        {
            "ioc_value": "b980b243307e67831945f3171edd200c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-08-25 20:27:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887759": [
        {
            "ioc_value": "a0c6e277bbb4848c967a3d4bf6aa45aab28ffa3249180e3026a89f80360d83f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-08-25 20:27:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887754": [
        {
            "ioc_value": "f6639cc04bf97cd42f2b74b8d305c89e20a989a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887755": [
        {
            "ioc_value": "27fab16542978a904574e7bc7746e39f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887756": [
        {
            "ioc_value": "c522e49fa2f87b3e8e9925555377aa77a42ed9d1790c17b25c2ad052efa96569",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-08-25 20:27:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887751": [
        {
            "ioc_value": "84798b7f2d9b0a4eaac38348497fb4a63a811df9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-25 20:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887752": [
        {
            "ioc_value": "862b5f62028a30d7f6c8ef20d4450f29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-25 20:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887753": [
        {
            "ioc_value": "b32a6cd6f6cc6fb39f3bc0477e5f5da1e2059649766742020f82b1f87aa05889",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887747": [
        {
            "ioc_value": "35daec4729842b66099ddbbe4bd1bc21240628d38f0e54a84b80d1fd11d2f1af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.icerat",
            "malware_alias": null,
            "malware_printable": "IceRat",
            "first_seen_utc": "2026-08-25 20:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887748": [
        {
            "ioc_value": "83e1cffed0bad229afac9c8fa285173d6f07dbc1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.icerat",
            "malware_alias": null,
            "malware_printable": "IceRat",
            "first_seen_utc": "2026-08-25 20:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887749": [
        {
            "ioc_value": "d4a19a109b091d66e0930bd553256b1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.icerat",
            "malware_alias": null,
            "malware_printable": "IceRat",
            "first_seen_utc": "2026-08-25 20:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887750": [
        {
            "ioc_value": "3ab6ed7b7cb21244b34addf64ac6f64b1c38ee98236985511c4af47e8cc93cd4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-25 20:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887744": [
        {
            "ioc_value": "63f3064a8023989933b7d294af76cd5a583eeea38aedfa464cd2ea2cf3a4ed73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.evilextractor",
            "malware_alias": null,
            "malware_printable": "EvilExtractor",
            "first_seen_utc": "2026-08-25 20:27:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887745": [
        {
            "ioc_value": "bb5cf9a62dab446da7ebb7650213748dc51037b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.evilextractor",
            "malware_alias": null,
            "malware_printable": "EvilExtractor",
            "first_seen_utc": "2026-08-25 20:27:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887746": [
        {
            "ioc_value": "e384e7389a371c96e5d31effce1242ae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.evilextractor",
            "malware_alias": null,
            "malware_printable": "EvilExtractor",
            "first_seen_utc": "2026-08-25 20:27:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887741": [
        {
            "ioc_value": "0a4750223a0c04e5a41b474eaf776a4b10129f498b1cf76693b2e54955361f8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krdownloader",
            "malware_alias": null,
            "malware_printable": "KrDownloader",
            "first_seen_utc": "2026-08-25 20:27:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887742": [
        {
            "ioc_value": "4783e4bcbd97b4927afae1d8160222b53452831c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krdownloader",
            "malware_alias": null,
            "malware_printable": "KrDownloader",
            "first_seen_utc": "2026-08-25 20:27:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887743": [
        {
            "ioc_value": "7825ed42fd7c9d92b93f420b1653e8e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krdownloader",
            "malware_alias": null,
            "malware_printable": "KrDownloader",
            "first_seen_utc": "2026-08-25 20:27:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887738": [
        {
            "ioc_value": "2a67ec9b4db3954e30b1fa26fe87dea4f89ce4d011415e00d48f3200c9fe1f88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkvision_rat",
            "malware_alias": null,
            "malware_printable": "DarkVision RAT",
            "first_seen_utc": "2026-08-25 20:27:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887739": [
        {
            "ioc_value": "1b0614ebdc81d0a98e5c8c6013d6a0596be2ec2d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkvision_rat",
            "malware_alias": null,
            "malware_printable": "DarkVision RAT",
            "first_seen_utc": "2026-08-25 20:27:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887740": [
        {
            "ioc_value": "1150457afc7e499c3937a0f2bc430c29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkvision_rat",
            "malware_alias": null,
            "malware_printable": "DarkVision RAT",
            "first_seen_utc": "2026-08-25 20:27:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887735": [
        {
            "ioc_value": "676a249f36ca2fe67297e167f622679023b4f474c634c690a7db96d75a00d8ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.habitsrat",
            "malware_alias": null,
            "malware_printable": "HabitsRAT",
            "first_seen_utc": "2026-08-25 20:27:14",
            "last_seen_utc": "2026-08-27 00:07:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887736": [
        {
            "ioc_value": "1d5c6e845ea6044dff2e504621e578cadadf7984",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.habitsrat",
            "malware_alias": null,
            "malware_printable": "HabitsRAT",
            "first_seen_utc": "2026-08-25 20:27:14",
            "last_seen_utc": "2026-08-27 00:07:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887737": [
        {
            "ioc_value": "b2b14596a08d505ce385c914c6a971f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.habitsrat",
            "malware_alias": null,
            "malware_printable": "HabitsRAT",
            "first_seen_utc": "2026-08-25 20:27:14",
            "last_seen_utc": "2026-08-27 00:07:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887732": [
        {
            "ioc_value": "d4cab6229ea31ef21dcce6bfc2a3c221cd207a98dd2b97187f987b810db77b15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-25 20:27:13",
            "last_seen_utc": "2026-08-27 00:07:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887733": [
        {
            "ioc_value": "3e90f1c5b78175bf8e806b0e6a61461ee6eb3164",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-25 20:27:13",
            "last_seen_utc": "2026-08-27 00:07:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887734": [
        {
            "ioc_value": "5c410bd8f7cbc29d00903db8efa47d0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-25 20:27:13",
            "last_seen_utc": "2026-08-27 00:07:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887729": [
        {
            "ioc_value": "5bd1f26001082fb7888e986fd6b60df09d4ef91e438741dce7a2fe937644c764",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-08-25 20:27:12",
            "last_seen_utc": "2026-08-27 00:06:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887730": [
        {
            "ioc_value": "b0643668907ff3f9faeb428380cc2bb20dc3b604",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-08-25 20:27:12",
            "last_seen_utc": "2026-08-27 00:06:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887731": [
        {
            "ioc_value": "3c3fd9cd6a4bc0d223970bc7d7341269",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-08-25 20:27:12",
            "last_seen_utc": "2026-08-27 00:07:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887725": [
        {
            "ioc_value": "150cd29ec3f3156808da6121512c6bfc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 20:27:11",
            "last_seen_utc": "2026-08-27 00:06:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887726": [
        {
            "ioc_value": "e20249d5c5933e8204a0da141d7a66937a7c5c24819eeebae8b653ec41be665a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:11",
            "last_seen_utc": "2026-08-27 00:06:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887727": [
        {
            "ioc_value": "c6f12b5953f9faac40b2171b93c2e9acc7ba763b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:11",
            "last_seen_utc": "2026-08-27 00:06:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887728": [
        {
            "ioc_value": "0b3dc07aab76fa54be44fc7519acc7e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:27:11",
            "last_seen_utc": "2026-08-27 00:06:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887722": [
        {
            "ioc_value": "150c73a7b6275381a1d06137a617cc94",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-25 20:27:10",
            "last_seen_utc": "2026-08-27 00:06:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887723": [
        {
            "ioc_value": "3b898adef43e54e9682f1358401ba2300ec3f39de75e2939d23e2bd60a725de6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 20:27:10",
            "last_seen_utc": "2026-08-27 00:06:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887724": [
        {
            "ioc_value": "06d5768088624218d0e571a136fcd3c01fd945b4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 20:27:10",
            "last_seen_utc": "2026-08-27 00:06:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887720": [
        {
            "ioc_value": "f708c405d13450a3886936d68e63ad841836d0a741fb6848fd7b58c83db988d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-25 20:27:09",
            "last_seen_utc": "2026-08-27 00:06:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887721": [
        {
            "ioc_value": "d1884c7a8d101814ff59239953680c42b07d5a8e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-25 20:27:09",
            "last_seen_utc": "2026-08-27 00:06:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887718": [
        {
            "ioc_value": "9fef5ea2eb1866a07e355e42e8b5910de1c24cb7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.xagent",
            "malware_alias": "splm,chopstick,fysbis",
            "malware_printable": "X-Agent",
            "first_seen_utc": "2026-08-25 20:27:08",
            "last_seen_utc": "2026-08-27 00:06:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887719": [
        {
            "ioc_value": "446843cb5e2616cf8c3d91cba5e6afce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.xagent",
            "malware_alias": "splm,chopstick,fysbis",
            "malware_printable": "X-Agent",
            "first_seen_utc": "2026-08-25 20:27:08",
            "last_seen_utc": "2026-08-27 00:06:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887715": [
        {
            "ioc_value": "3bb02bfec1d2c0723baac811b7a2ed2a9eff3d2c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:27:07",
            "last_seen_utc": "2026-08-27 00:06:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887716": [
        {
            "ioc_value": "13fe4fd84d2f0fe65fe209c4ee390752",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:27:07",
            "last_seen_utc": "2026-08-27 00:06:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887717": [
        {
            "ioc_value": "90ac7bf6e0b76245296e194bc1bd8a6388d013b7e11be906ae0352ff22c3f472",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xagent",
            "malware_alias": "splm,chopstick,fysbis",
            "malware_printable": "X-Agent",
            "first_seen_utc": "2026-08-25 20:27:07",
            "last_seen_utc": "2026-08-27 00:06:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887711": [
        {
            "ioc_value": "b002e551f74a52536e94d4ddaa8de2f5e480639f718f683bc4b5d4e6adf59a9b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-25 20:27:06",
            "last_seen_utc": "2026-08-27 00:06:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887712": [
        {
            "ioc_value": "552ffd2655521bf451fffd7aaf3d38bb41c006e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-25 20:27:06",
            "last_seen_utc": "2026-08-27 00:06:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887713": [
        {
            "ioc_value": "b435c5fd83e345f30e7da1dbccf50aa6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-25 20:27:06",
            "last_seen_utc": "2026-08-27 00:06:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887714": [
        {
            "ioc_value": "895fea5f9576b02251d5c3b6d49e5d4611d4255789744d56599d5b5ede7dd563",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:27:06",
            "last_seen_utc": "2026-08-27 00:06:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887709": [
        {
            "ioc_value": "c2d4370aecc06016e4aaa606c635b1c9d219972e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:27:05",
            "last_seen_utc": "2026-08-27 00:06:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887710": [
        {
            "ioc_value": "e0859d1fc8816b37a16f4eb2a7232eb8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:27:05",
            "last_seen_utc": "2026-08-27 00:06:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887708": [
        {
            "ioc_value": "4c16f5ebd5c633b7a793ffa2cd96daddc5a503d82ed4fbe636109d89164ec02b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:27:04",
            "last_seen_utc": "2026-08-27 00:06:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887706": [
        {
            "ioc_value": "a678d1972c9db49b4d917e5480a0c62d63f3d6b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 20:27:03",
            "last_seen_utc": "2026-08-27 00:06:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887707": [
        {
            "ioc_value": "e7722735a7128302b1c430d18a602917",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 20:27:03",
            "last_seen_utc": "2026-08-27 00:06:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887702": [
        {
            "ioc_value": "d83f465bde16528aebdff1e523a46613a97a32234712fe4e9ef29d6a979a72f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 20:27:01",
            "last_seen_utc": "2026-08-27 00:06:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887703": [
        {
            "ioc_value": "e452d5cf8a9a7f37ad722e00f85aef7e419e736d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 20:27:01",
            "last_seen_utc": "2026-08-27 00:06:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887704": [
        {
            "ioc_value": "982793e92a09243ed66c378aad812825",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 20:27:01",
            "last_seen_utc": "2026-08-27 00:06:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887705": [
        {
            "ioc_value": "c02e2b1e61535024d4d7b829adf747907fb719bcb19560d753b0f6b10a95b0d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 20:27:01",
            "last_seen_utc": "2026-08-27 00:06:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887700": [
        {
            "ioc_value": "7d6142cfa025c44c947588f283c0275db4a24802",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:00",
            "last_seen_utc": "2026-08-27 00:06:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887701": [
        {
            "ioc_value": "8e168e0cacef78f10dc13a69d5bd0b1a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:27:00",
            "last_seen_utc": "2026-08-27 00:06:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887696": [
        {
            "ioc_value": "04aa7984d4ac5900ac796329af8c0557180dfbec0122ac178f2f4fc1e727eab2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:59",
            "last_seen_utc": "2026-08-27 00:06:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887697": [
        {
            "ioc_value": "b6dc96a0aa3bfcdeb516954831a66d1e6910185b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:59",
            "last_seen_utc": "2026-08-27 00:06:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887698": [
        {
            "ioc_value": "0d3e6cba3fbeb2bc490d982430748d9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:59",
            "last_seen_utc": "2026-08-27 00:06:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887699": [
        {
            "ioc_value": "0b1d575c0c0a08ef48683113372d7580a42acfac4442a3927314b86dff616c4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:59",
            "last_seen_utc": "2026-08-27 00:06:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887693": [
        {
            "ioc_value": "2b93212ee63dbb290d88bc845aafae192552b6de80d93a2f4a6453afb3738676",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:26:58",
            "last_seen_utc": "2026-08-27 00:06:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887694": [
        {
            "ioc_value": "77613a3182bd1f5034776bd971707a44bce37f78",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:26:58",
            "last_seen_utc": "2026-08-27 00:06:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887695": [
        {
            "ioc_value": "ab06fb2409787be402ccf1b4288b87b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-25 20:26:58",
            "last_seen_utc": "2026-08-27 00:06:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887690": [
        {
            "ioc_value": "32295f0896a1603bdf37be339787dac7df37dc7c08bfae6bb1f5f157ca85b71c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:26:57",
            "last_seen_utc": "2026-08-27 00:06:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887691": [
        {
            "ioc_value": "855275076a9a33ed95c0ad90ce1b620c0b1e19f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:26:57",
            "last_seen_utc": "2026-08-27 00:06:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887692": [
        {
            "ioc_value": "2f490ac81c015798c477a5d882f425d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:26:57",
            "last_seen_utc": "2026-08-27 00:06:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887686": [
        {
            "ioc_value": "1fa24618993a4828e566da20b40bb181",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:56",
            "last_seen_utc": "2026-08-27 00:06:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887687": [
        {
            "ioc_value": "3e08292340a925412039c40af6eefec9a30fca1e60246baca93caf9f4bd3e53c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:26:56",
            "last_seen_utc": "2026-08-27 00:06:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887688": [
        {
            "ioc_value": "b5a9f5007839560266d831d25d1db4429d07c9fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:26:56",
            "last_seen_utc": "2026-08-27 00:06:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887689": [
        {
            "ioc_value": "dee3308c48a52fc15394c3e89221226d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 20:26:56",
            "last_seen_utc": "2026-08-27 00:06:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887685": [
        {
            "ioc_value": "50ab6fa03c74aac498627a9949d88931f4b15fd8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:55",
            "last_seen_utc": "2026-08-27 00:06:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887683": [
        {
            "ioc_value": "f92d8a2f5c3d9140c233c0012d9ad43e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:54",
            "last_seen_utc": "2026-08-27 00:06:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887684": [
        {
            "ioc_value": "c6d374bf20c20fd3a1b14a1e8a8334c41cdf9c3098bc2f8b1afbec7ac43881af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:54",
            "last_seen_utc": "2026-08-27 00:06:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887680": [
        {
            "ioc_value": "82454d9f0d4b22bc8357285e8397ee3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:53",
            "last_seen_utc": "2026-08-27 00:06:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887681": [
        {
            "ioc_value": "36cd6bffbae0e88e20b56251445092e57977a990ea2f92e84321ecc9a16eb53b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:53",
            "last_seen_utc": "2026-08-27 00:06:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887682": [
        {
            "ioc_value": "bc716d57de7f312667adfb4831c6ee419d23c1a9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:53",
            "last_seen_utc": "2026-08-27 00:06:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887677": [
        {
            "ioc_value": "9b93fde0cd1f8252a2abf2239ae56f9d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-25 20:26:52",
            "last_seen_utc": "2026-08-27 00:06:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887678": [
        {
            "ioc_value": "9c19c3b393c667beccc02574abdeb3e5b4793bb49550daadeab78af2e45cc97f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:52",
            "last_seen_utc": "2026-08-27 00:06:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887679": [
        {
            "ioc_value": "f8a6f532ba303705606a91a2416e09e8f4cc7263",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:26:52",
            "last_seen_utc": "2026-08-27 00:06:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887673": [
        {
            "ioc_value": "41cb7ed17731f8c1561399b381f42de3febcd6be",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:51",
            "last_seen_utc": "2026-08-28 02:35:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887674": [
        {
            "ioc_value": "51f9befcc514d4468197647968767773",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:51",
            "last_seen_utc": "2026-08-28 02:35:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887675": [
        {
            "ioc_value": "0ebd28830251fc40845f4201396c683b0026828f3dc25873abdb6feac66820ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-25 20:26:51",
            "last_seen_utc": "2026-08-27 00:06:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887676": [
        {
            "ioc_value": "c5f12a9d191c2baf64d66eb1f2edd6754333260d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-25 20:26:51",
            "last_seen_utc": "2026-08-27 00:06:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887670": [
        {
            "ioc_value": "a2a89a44d71f06730e57843f96ade00667b4f90a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:50",
            "last_seen_utc": "2026-08-28 02:35:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887671": [
        {
            "ioc_value": "5021094d588a1cc1f2cc9b61c717fda6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:50",
            "last_seen_utc": "2026-08-28 02:35:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887672": [
        {
            "ioc_value": "de993daff7d97c547bc608c9e5f0233ca1f420adb4931d8615171c7ec8182849",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:50",
            "last_seen_utc": "2026-08-28 02:35:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887667": [
        {
            "ioc_value": "7f6e450810b169a163ff5eff32af8a7f760b819b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:49",
            "last_seen_utc": "2026-08-28 02:35:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887668": [
        {
            "ioc_value": "2e2059a2dd7fea88e1fcd3bd0f43c237",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:49",
            "last_seen_utc": "2026-08-28 02:35:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887669": [
        {
            "ioc_value": "99328f02c062e6f2d52c257e7df219789f9ef0d9167444b2d123c78bba75362b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 20:26:49",
            "last_seen_utc": "2026-08-28 02:35:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887665": [
        {
            "ioc_value": "2d477f318e8178d7c281af39c95fc674",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:48",
            "last_seen_utc": "2026-08-28 02:35:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887666": [
        {
            "ioc_value": "78cc6707797ef77a94e80e6b30eef0fad0fbefd1f8a0bd16a41dc085182f29d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:48",
            "last_seen_utc": "2026-08-28 02:35:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887662": [
        {
            "ioc_value": "04f90fc30a53adb8bdd435966daaaba2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:47",
            "last_seen_utc": "2026-08-28 02:35:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887663": [
        {
            "ioc_value": "689c485bde77370d62a36c7c86d1675e439b393ba0e6d7d5102d5009ea7e5dbe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:47",
            "last_seen_utc": "2026-08-28 02:35:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887664": [
        {
            "ioc_value": "d04d94ff0607ea6b2ef9009c4e4bbe1b50513c50",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:47",
            "last_seen_utc": "2026-08-28 02:35:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887658": [
        {
            "ioc_value": "464e6aa259cc2c552efa2a3e3ff38f03057106e1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-25 20:26:46",
            "last_seen_utc": "2026-08-28 02:35:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887659": [
        {
            "ioc_value": "e812e86bc6c3529a1f7b7b7f747e0587",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-25 20:26:46",
            "last_seen_utc": "2026-08-28 02:35:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887660": [
        {
            "ioc_value": "b285d9d8aead39204623c4e85421e0e4b00b7e7a6bd39a443fb94a7caa5c55b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:46",
            "last_seen_utc": "2026-08-28 02:35:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887661": [
        {
            "ioc_value": "18c098823aae8ddcd4cd5d1839611368357cbc61",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:46",
            "last_seen_utc": "2026-08-28 02:35:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887655": [
        {
            "ioc_value": "525c10abc92d3a9946ee83297c6a86757fcceaaf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:45",
            "last_seen_utc": "2026-08-28 02:35:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887656": [
        {
            "ioc_value": "a1c41938d1695d48bcdad002ec1f36cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:45",
            "last_seen_utc": "2026-08-28 02:35:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887657": [
        {
            "ioc_value": "7c4888d19819857873d74da379275518d0cc6f1bdcfd91761622976fbf3abd34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-25 20:26:45",
            "last_seen_utc": "2026-08-28 02:35:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887653": [
        {
            "ioc_value": "3daf2a4af9b0b1e3be06922ebba16b17",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:44",
            "last_seen_utc": "2026-08-28 02:35:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887654": [
        {
            "ioc_value": "c89fae311ab8968e63bb9ed41175b2aaae28c12db9f4b9bbc4d7ed08a5c6a752",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:44",
            "last_seen_utc": "2026-08-28 02:35:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887651": [
        {
            "ioc_value": "7d33dd89511d48517917d9a9c7090f6e337aa1739a5b0e7d628e0517766b808c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:43",
            "last_seen_utc": "2026-08-28 02:35:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887652": [
        {
            "ioc_value": "a25ed081169b0e0f96829764365e0a0ada921b38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:43",
            "last_seen_utc": "2026-08-28 02:35:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887648": [
        {
            "ioc_value": "8191df46bde2355f90246149ed51e0817625f7d1f6fb1d3ceb76a53446aa1b51",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:42",
            "last_seen_utc": "2026-08-28 02:35:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887649": [
        {
            "ioc_value": "2fe24386de0d0e58a8236c46d5f56eb4ee530837",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:42",
            "last_seen_utc": "2026-08-28 02:35:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887650": [
        {
            "ioc_value": "897642f7b04efa794970853f6ab02326",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:42",
            "last_seen_utc": "2026-08-28 02:35:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887646": [
        {
            "ioc_value": "f22a6b1b14f47d76b6582c96c0b57b7f9b6ac2d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:41",
            "last_seen_utc": "2026-08-28 02:35:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887647": [
        {
            "ioc_value": "599172ef7d1e60dd3925d7f2c3b78ff6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:41",
            "last_seen_utc": "2026-08-28 02:35:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887643": [
        {
            "ioc_value": "88990a988a619cb8003253d73438192efa7febcf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:40",
            "last_seen_utc": "2026-08-28 02:35:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887644": [
        {
            "ioc_value": "1b94a31697acb1f82ccf73ad425b7bf3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:40",
            "last_seen_utc": "2026-08-28 02:35:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887645": [
        {
            "ioc_value": "ad4b54a449ee7affd5d8a775d576db81007c58ee9a77c82d7962bde6caa93910",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:40",
            "last_seen_utc": "2026-08-28 02:35:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887640": [
        {
            "ioc_value": "706bf073325fc9f28fb297d1aabef5ad66e95759",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:39",
            "last_seen_utc": "2026-08-28 02:35:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887641": [
        {
            "ioc_value": "355d62a9acf70bd5e4cb19424154c452",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:39",
            "last_seen_utc": "2026-08-28 02:35:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887642": [
        {
            "ioc_value": "b6eb46746e026d8e9163ede8d005153c5588a186cbfc0d762fd68a6c28d7249a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:39",
            "last_seen_utc": "2026-08-28 02:35:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887637": [
        {
            "ioc_value": "6f266d50974b9712dcc59fd3ca8eb43973de1dca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:38",
            "last_seen_utc": "2026-08-28 02:35:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887638": [
        {
            "ioc_value": "54f923e1cbb15513b8e5092d94e703e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:38",
            "last_seen_utc": "2026-08-28 02:35:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887639": [
        {
            "ioc_value": "8b1e10c2b2534760b3b800b7b0830adc4bf8994a75730d4e5e72948984e24b8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:26:38",
            "last_seen_utc": "2026-08-28 02:35:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887636": [
        {
            "ioc_value": "05b37b0056fcd2365b5caf484a08939fb2ef6310b36b187f2bf1002ef8bf6901",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-25 20:26:37",
            "last_seen_utc": "2026-08-28 02:35:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1887635": [
        {
            "ioc_value": "56gabbie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 20:22:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887634": [
        {
            "ioc_value": "http://cl309350.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 20:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887633": [
        {
            "ioc_value": "1omdhqtb.eng-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 20:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887632": [
        {
            "ioc_value": "zawumeri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 20:07:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887630": [
        {
            "ioc_value": "jij.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:05:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1887631": [
        {
            "ioc_value": "https://jij.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 20:05:47",
            "last_seen_utc": "2026-09-01 03:37:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1887629": [
        {
            "ioc_value": "101.42.255.92:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887625": [
        {
            "ioc_value": "66.179.29.5:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:47:17",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887626": [
        {
            "ioc_value": "66.235.175.82:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 19:47:17",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887624": [
        {
            "ioc_value": "66.179.29.5:2000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:47:16",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887622": [
        {
            "ioc_value": "64.89.160.140:7040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 19:47:14",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887623": [
        {
            "ioc_value": "64.89.160.140:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 19:47:14",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887621": [
        {
            "ioc_value": "45.61.178.41:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-25 19:46:57",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887620": [
        {
            "ioc_value": "45.145.41.185:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:46:50",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887619": [
        {
            "ioc_value": "38.54.88.188:65533",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-25 19:46:42",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887618": [
        {
            "ioc_value": "37.244.224.146:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-25 19:46:37",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887617": [
        {
            "ioc_value": "23.226.68.34:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:46:24",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887616": [
        {
            "ioc_value": "213.35.118.205:4322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 19:45:14",
            "last_seen_utc": "2026-09-01 02:44:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887615": [
        {
            "ioc_value": "185.242.3.249:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887614": [
        {
            "ioc_value": "172.245.209.209:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 19:44:08",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887613": [
        {
            "ioc_value": "172.237.88.168:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:44:07",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887612": [
        {
            "ioc_value": "172.111.134.94:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:44:05",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887611": [
        {
            "ioc_value": "157.20.182.22:1973",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 19:43:53",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887610": [
        {
            "ioc_value": "147.124.212.136:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 19:43:41",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887609": [
        {
            "ioc_value": "104.239.66.99:56401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887608": [
        {
            "ioc_value": "104.143.204.239:52310",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 19:43:09",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887607": [
        {
            "ioc_value": "fapazate.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 19:41:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887606": [
        {
            "ioc_value": "http://shhsift.click:7647/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 19:35:16",
            "last_seen_utc": "2026-08-26 21:49:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ad4b54a449ee7affd5d8a775d576db81007c58ee9a77c82d7962bde6caa93910/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887605": [
        {
            "ioc_value": "https://institutovitoria.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 19:30:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/institutovitoria.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887604": [
        {
            "ioc_value": "cdken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 19:29:49",
            "last_seen_utc": "2026-08-27 05:28:01",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887603": [
        {
            "ioc_value": "su15xgsq.en-en-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 19:26:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887602": [
        {
            "ioc_value": "piqucu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 19:25:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887600": [
        {
            "ioc_value": "white4588.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 19:19:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887599": [
        {
            "ioc_value": "caselywo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 19:17:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887598": [
        {
            "ioc_value": "http://zonxh.shop:7728/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 19:15:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8191df46bde2355f90246149ed51e0817625f7d1f6fb1d3ceb76a53446aa1b51/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887597": [
        {
            "ioc_value": "http://shhsift.click:7647/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 19:15:28",
            "last_seen_utc": "2026-08-27 14:39:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8191df46bde2355f90246149ed51e0817625f7d1f6fb1d3ceb76a53446aa1b51/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887596": [
        {
            "ioc_value": "http://fresok.top:9048/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 19:15:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8191df46bde2355f90246149ed51e0817625f7d1f6fb1d3ceb76a53446aa1b51/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887592": [
        {
            "ioc_value": "http://fresok.top:9048/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 19:10:20",
            "last_seen_utc": "2026-08-27 19:09:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7d33dd89511d48517917d9a9c7090f6e337aa1739a5b0e7d628e0517766b808c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887591": [
        {
            "ioc_value": "43.143.206.225:3307",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887590": [
        {
            "ioc_value": "208.167.245.124:9993",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887589": [
        {
            "ioc_value": "149.88.66.234:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887588": [
        {
            "ioc_value": "licohoqe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 19:02:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887587": [
        {
            "ioc_value": "k6h4y9sw.en-us-americaneaglependant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 18:56:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887586": [
        {
            "ioc_value": "en-us-americaneaglependant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 18:56:04",
            "last_seen_utc": "2026-08-25 18:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887585": [
        {
            "ioc_value": "e4riqeczl5.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 18:31:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887584": [
        {
            "ioc_value": "gerenagosto.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 18:25:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32295f0896a1603bdf37be339787dac7df37dc7c08bfae6bb1f5f157ca85b71c/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887583": [
        {
            "ioc_value": "fw2w2up6ss.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 18:23:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887582": [
        {
            "ioc_value": "utanigeria.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 18:19:38",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887580": [
        {
            "ioc_value": "38.207.177.73:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 18:15:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887579": [
        {
            "ioc_value": "202.79.173.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-25 18:15:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887578": [
        {
            "ioc_value": "http://cloudscrsolutions.com/v8sjh3hs8/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-25 18:15:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887577": [
        {
            "ioc_value": "http://atraflaxtt.com/g9sjh3djv/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-25 18:15:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887576": [
        {
            "ioc_value": "http://jazoopsloo.info/k92lsA3dpb/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-25 18:15:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887575": [
        {
            "ioc_value": "91.92.47.41:7044",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-08-25 18:15:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887574": [
        {
            "ioc_value": "http://cg618552.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 18:15:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887573": [
        {
            "ioc_value": "http://cp447347.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 18:15:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887572": [
        {
            "ioc_value": "http://cj537866.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 18:15:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887571": [
        {
            "ioc_value": "162.35.173.212:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 18:15:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887570": [
        {
            "ioc_value": "104.250.167.93:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 18:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887569": [
        {
            "ioc_value": "186.169.37.83:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-25 18:15:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887567": [
        {
            "ioc_value": "https://md-projects.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 18:00:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/md-projects.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887568": [
        {
            "ioc_value": "https://nirmalrollingshutter.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 18:00:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nirmalrollingshutter.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887566": [
        {
            "ioc_value": "ravenenvoy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:59:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887565": [
        {
            "ioc_value": "xerepole.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 17:51:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887564": [
        {
            "ioc_value": "tehnohome-ks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:49:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887563": [
        {
            "ioc_value": "primalaser-eg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:49:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887562": [
        {
            "ioc_value": "www.reha.org.af",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:39:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887553": [
        {
            "ioc_value": "https://nosygoats.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nosygoats.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887554": [
        {
            "ioc_value": "https://smartinches.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/smartinches.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887555": [
        {
            "ioc_value": "https://yemkoservices.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/yemkoservices.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887556": [
        {
            "ioc_value": "https://nast-net.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nast-net.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887557": [
        {
            "ioc_value": "https://tasteofjollof.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tasteofjollof.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887558": [
        {
            "ioc_value": "https://www.lavitasparta.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.lavitasparta.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887559": [
        {
            "ioc_value": "https://vetrinacakescoffee.com/bakim-asamasi/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vetrinacakescoffee.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887560": [
        {
            "ioc_value": "https://stockvista.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stockvista.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887561": [
        {
            "ioc_value": "https://serracontabil.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/serracontabil.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887541": [
        {
            "ioc_value": "https://hasminaimportexport.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hasminaimportexport.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887542": [
        {
            "ioc_value": "https://bes-sicherheit.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bes-sicherheit.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887543": [
        {
            "ioc_value": "https://gayatripalace.co.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gayatripalace.co.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887544": [
        {
            "ioc_value": "https://aacc.edu.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aacc.edu.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887545": [
        {
            "ioc_value": "https://acadmicwriter.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/acadmicwriter.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887546": [
        {
            "ioc_value": "https://www.aavis.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.aavis.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887547": [
        {
            "ioc_value": "https://www.clinicadentalmonlleo.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.clinicadentalmonlleo.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887548": [
        {
            "ioc_value": "https://frontdoorinteriors.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/frontdoorinteriors.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887549": [
        {
            "ioc_value": "https://www.blackboxstands.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.blackboxstands.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887550": [
        {
            "ioc_value": "https://priyagoenka.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/priyagoenka.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887551": [
        {
            "ioc_value": "https://printandsign.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/printandsign.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887552": [
        {
            "ioc_value": "https://premierdermatology.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 17:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/premierdermatology.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887540": [
        {
            "ioc_value": "e24903q7mc.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 17:29:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887539": [
        {
            "ioc_value": "f1git16x.eng--neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:27:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887538": [
        {
            "ioc_value": "47.111.171.130:8077",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 17:27:44",
            "last_seen_utc": "2026-08-28 04:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887537": [
        {
            "ioc_value": "m9zxgtiz.eng-usa-neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:25:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887536": [
        {
            "ioc_value": "kozyqa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 17:21:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887534": [
        {
            "ioc_value": "162.35.99.110:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 17:20:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887535": [
        {
            "ioc_value": "45.142.143.176:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 17:20:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887532": [
        {
            "ioc_value": "203.159.90.207:59405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 17:20:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887533": [
        {
            "ioc_value": "106.54.62.203:65530",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 17:20:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887531": [
        {
            "ioc_value": "eng--flashburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 17:19:14",
            "last_seen_utc": "2026-08-25 17:19:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887529": [
        {
            "ioc_value": "103.237.92.116:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-25 17:16:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887530": [
        {
            "ioc_value": "185.231.154.75:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-25 17:16:04",
            "last_seen_utc": "2026-09-01 03:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887524": [
        {
            "ioc_value": "66.179.29.5:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 17:15:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887525": [
        {
            "ioc_value": "217.60.195.89:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 17:15:08",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887526": [
        {
            "ioc_value": "193.233.126.164:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 17:15:08",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887527": [
        {
            "ioc_value": "192.229.115.243:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 17:15:08",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887528": [
        {
            "ioc_value": "192.229.115.243:56004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 17:15:08",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887523": [
        {
            "ioc_value": "217.60.195.25:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 17:15:07",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887521": [
        {
            "ioc_value": "77.110.124.109:1882",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 17:13:45",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887522": [
        {
            "ioc_value": "46.246.14.6:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 17:13:45",
            "last_seen_utc": "2026-09-01 02:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887519": [
        {
            "ioc_value": "107.173.47.158:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 17:13:00",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887520": [
        {
            "ioc_value": "107.173.47.158:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 17:13:00",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887518": [
        {
            "ioc_value": "xyrifuwu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 17:10:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887517": [
        {
            "ioc_value": "i5b0fml8zh.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 17:10:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887516": [
        {
            "ioc_value": "mavadulo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 16:52:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887508": [
        {
            "ioc_value": "visitoldcastle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887509": [
        {
            "ioc_value": "walpot-technics.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887510": [
        {
            "ioc_value": "waterandfiredamagewebsites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887511": [
        {
            "ioc_value": "whatpond.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887512": [
        {
            "ioc_value": "yossiuzan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887513": [
        {
            "ioc_value": "yourchoicevending.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887514": [
        {
            "ioc_value": "ypialukhuwah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887515": [
        {
            "ioc_value": "yumyumspopcorn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887500": [
        {
            "ioc_value": "trofeodelleindustrie.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887501": [
        {
            "ioc_value": "tvdeschefs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887502": [
        {
            "ioc_value": "uicimmigration.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887503": [
        {
            "ioc_value": "underthewheels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887504": [
        {
            "ioc_value": "up20perugia.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887505": [
        {
            "ioc_value": "usapathlite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887506": [
        {
            "ioc_value": "usir.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887507": [
        {
            "ioc_value": "velkacenamohelnice.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:47",
            "last_seen_utc": "2026-08-25 19:29:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887492": [
        {
            "ioc_value": "tera-terre.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": "2026-08-25 20:59:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887493": [
        {
            "ioc_value": "terapioghealing.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887494": [
        {
            "ioc_value": "theaterwerke-bietzen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887495": [
        {
            "ioc_value": "themeupgo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887496": [
        {
            "ioc_value": "themoorhenhorning.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887497": [
        {
            "ioc_value": "thiruvaiyaru.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887498": [
        {
            "ioc_value": "thomasfsmith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": "2026-08-25 18:49:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887499": [
        {
            "ioc_value": "timothyswiss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:46",
            "last_seen_utc": "2026-08-25 18:39:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887485": [
        {
            "ioc_value": "snazzyjazzyspetsalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887486": [
        {
            "ioc_value": "somalicomputer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887487": [
        {
            "ioc_value": "sonopix.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887488": [
        {
            "ioc_value": "sprayfoaminsulate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887489": [
        {
            "ioc_value": "studiochr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887490": [
        {
            "ioc_value": "studiomedicodeiuliis.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": "2026-08-25 17:09:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887491": [
        {
            "ioc_value": "sushispot2.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887478": [
        {
            "ioc_value": "roseleto.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": "2026-08-25 17:39:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887479": [
        {
            "ioc_value": "ryec.com.mm",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": "2026-08-25 19:29:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887480": [
        {
            "ioc_value": "salesbaron.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887481": [
        {
            "ioc_value": "santuariodelmontelussari.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887482": [
        {
            "ioc_value": "sasrealty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887483": [
        {
            "ioc_value": "sevincprefabrik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887484": [
        {
            "ioc_value": "sigvalojistik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887471": [
        {
            "ioc_value": "quimial.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887472": [
        {
            "ioc_value": "relaxacleaningservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887473": [
        {
            "ioc_value": "reputegrity.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887474": [
        {
            "ioc_value": "rickybrands.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": "2026-08-25 17:49:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887475": [
        {
            "ioc_value": "riofrut.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887476": [
        {
            "ioc_value": "rocket-labs.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887477": [
        {
            "ioc_value": "rockymtnbus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887459": [
        {
            "ioc_value": "pellenz.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887460": [
        {
            "ioc_value": "persakmi.or.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887461": [
        {
            "ioc_value": "physio-nachfolge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887462": [
        {
            "ioc_value": "pieterzandvliet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": "2026-09-01 03:08:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887463": [
        {
            "ioc_value": "piligrimyste.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887464": [
        {
            "ioc_value": "pizzeriapopeye.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887465": [
        {
            "ioc_value": "pointphysio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887466": [
        {
            "ioc_value": "por4pavos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887467": [
        {
            "ioc_value": "pourlesyeuxdumonde.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887468": [
        {
            "ioc_value": "pousadacasadepedra.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887469": [
        {
            "ioc_value": "ppctag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887470": [
        {
            "ioc_value": "prizivnika.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:42",
            "last_seen_utc": "2026-08-25 17:39:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887453": [
        {
            "ioc_value": "nestrevaitis.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:41",
            "last_seen_utc": "2026-09-01 03:14:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887454": [
        {
            "ioc_value": "nickokeeffephotography.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887455": [
        {
            "ioc_value": "nous.network",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887456": [
        {
            "ioc_value": "opticaizamil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887457": [
        {
            "ioc_value": "osterindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887458": [
        {
            "ioc_value": "paradigmcondos.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887448": [
        {
            "ioc_value": "musique-ensemble.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887449": [
        {
            "ioc_value": "muthaber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887450": [
        {
            "ioc_value": "mytcs.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887451": [
        {
            "ioc_value": "nacicca.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887452": [
        {
            "ioc_value": "naturaspa.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887438": [
        {
            "ioc_value": "mamarowsu.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": "2026-09-01 03:08:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887439": [
        {
            "ioc_value": "mamdoohza.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887440": [
        {
            "ioc_value": "marsadalmarifa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887441": [
        {
            "ioc_value": "mati.gov.ph",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887442": [
        {
            "ioc_value": "mecater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887443": [
        {
            "ioc_value": "medecin-esthetique-visage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887444": [
        {
            "ioc_value": "medicalstart.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887445": [
        {
            "ioc_value": "melrose-partners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887446": [
        {
            "ioc_value": "mepi.com.sa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": "2026-09-01 03:07:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887447": [
        {
            "ioc_value": "midiachurch.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:39",
            "last_seen_utc": "2026-09-01 03:14:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887427": [
        {
            "ioc_value": "kivahancafe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887428": [
        {
            "ioc_value": "korphildavao.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887429": [
        {
            "ioc_value": "lallotjamarisqueria.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887430": [
        {
            "ioc_value": "laparoscopyindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887431": [
        {
            "ioc_value": "lauralewis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887432": [
        {
            "ioc_value": "lerebondouai.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887433": [
        {
            "ioc_value": "liclifeplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887434": [
        {
            "ioc_value": "lionmak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": "2026-08-25 20:09:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887435": [
        {
            "ioc_value": "lodelmomentoloja.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887436": [
        {
            "ioc_value": "loughcrewmega.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887437": [
        {
            "ioc_value": "lovinaspa.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887416": [
        {
            "ioc_value": "icalicenseuk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887417": [
        {
            "ioc_value": "icapriccidiveneresrl.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887418": [
        {
            "ioc_value": "idealautoac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887419": [
        {
            "ioc_value": "incrediblecarebd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887420": [
        {
            "ioc_value": "ipe.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887421": [
        {
            "ioc_value": "javedllc.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887422": [
        {
            "ioc_value": "jenhoeft.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887423": [
        {
            "ioc_value": "joyland.co.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887424": [
        {
            "ioc_value": "karinprinsloo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887425": [
        {
            "ioc_value": "kgdubai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887426": [
        {
            "ioc_value": "kidscodingclub.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887415": [
        {
            "ioc_value": "humanityng.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:44:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887408": [
        {
            "ioc_value": "globalelite.group",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": "2026-09-01 03:07:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887409": [
        {
            "ioc_value": "globalmarinecare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887410": [
        {
            "ioc_value": "goktas.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887411": [
        {
            "ioc_value": "granjaescuela.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887412": [
        {
            "ioc_value": "grupoandreazza.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887413": [
        {
            "ioc_value": "guerrerobus.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887414": [
        {
            "ioc_value": "hadleyhomebuilder.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887397": [
        {
            "ioc_value": "f-ndr.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887398": [
        {
            "ioc_value": "fastncurious.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887399": [
        {
            "ioc_value": "fcemmering.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887400": [
        {
            "ioc_value": "fischer-metallhandel.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": "2026-08-25 19:49:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887401": [
        {
            "ioc_value": "foxnewstips.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887402": [
        {
            "ioc_value": "fressroom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887403": [
        {
            "ioc_value": "fulli.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887404": [
        {
            "ioc_value": "galefusion.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887405": [
        {
            "ioc_value": "gamblingconsulting.expert",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887406": [
        {
            "ioc_value": "gammaconsultants.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887407": [
        {
            "ioc_value": "gatewaytokyuquot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887389": [
        {
            "ioc_value": "drsodhi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887390": [
        {
            "ioc_value": "dscconsortium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": "2026-09-01 03:05:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887391": [
        {
            "ioc_value": "ebtiplc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887392": [
        {
            "ioc_value": "ecosolarproductpr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887393": [
        {
            "ioc_value": "elev8solutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887394": [
        {
            "ioc_value": "elsadorfman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887395": [
        {
            "ioc_value": "enciclopediadelvino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887396": [
        {
            "ioc_value": "evolutia.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887376": [
        {
            "ioc_value": "data5.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887377": [
        {
            "ioc_value": "dentatakoy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": "2026-08-25 19:49:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887378": [
        {
            "ioc_value": "desforex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887379": [
        {
            "ioc_value": "desiccants.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887380": [
        {
            "ioc_value": "designercabinetslex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887381": [
        {
            "ioc_value": "desmedcar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": "2026-08-25 20:09:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887382": [
        {
            "ioc_value": "diayazilim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887383": [
        {
            "ioc_value": "discoveryinfra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887384": [
        {
            "ioc_value": "djbarryblends.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887385": [
        {
            "ioc_value": "doganoksijen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887386": [
        {
            "ioc_value": "domaine-gouron.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887387": [
        {
            "ioc_value": "dpfdirect.co.nz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887388": [
        {
            "ioc_value": "drfreddyschauss.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:46",
            "last_seen_utc": "2026-09-01 03:06:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887367": [
        {
            "ioc_value": "cie-ariadne.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": "2026-08-25 19:29:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887368": [
        {
            "ioc_value": "clpower.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887369": [
        {
            "ioc_value": "conflavoro.po.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887370": [
        {
            "ioc_value": "coolkinderfeestje.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887371": [
        {
            "ioc_value": "corbierescreatives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887372": [
        {
            "ioc_value": "coup-de-vent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887373": [
        {
            "ioc_value": "cufl.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": "2026-09-01 03:06:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887374": [
        {
            "ioc_value": "curier.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887375": [
        {
            "ioc_value": "daelis.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887356": [
        {
            "ioc_value": "bestwesternwinecountry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": "2026-08-25 19:39:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887357": [
        {
            "ioc_value": "blog-fontainebleau.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": "2026-08-25 19:29:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887358": [
        {
            "ioc_value": "blog.agevis.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887359": [
        {
            "ioc_value": "bluehouse.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887360": [
        {
            "ioc_value": "bobbyvpizzeria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887361": [
        {
            "ioc_value": "bringitbackboxing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887362": [
        {
            "ioc_value": "brsi.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887363": [
        {
            "ioc_value": "bv07raigering.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887364": [
        {
            "ioc_value": "cdmancini.edu.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887365": [
        {
            "ioc_value": "ceipalandalus.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": "2026-08-25 19:29:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887366": [
        {
            "ioc_value": "certega.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887347": [
        {
            "ioc_value": "aricalmirola.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887348": [
        {
            "ioc_value": "ascaraf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887349": [
        {
            "ioc_value": "aspirecolleges.edu.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887350": [
        {
            "ioc_value": "backpacksforbrainiacs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887351": [
        {
            "ioc_value": "baobimanhhung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887352": [
        {
            "ioc_value": "beefbristol.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": "2026-08-25 19:39:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887353": [
        {
            "ioc_value": "beercade.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887354": [
        {
            "ioc_value": "bellattitude.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": "2026-08-25 18:49:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887355": [
        {
            "ioc_value": "benblogged.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887338": [
        {
            "ioc_value": "adonget.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": "2026-09-01 03:14:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887339": [
        {
            "ioc_value": "agenziafp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887340": [
        {
            "ioc_value": "agnclean.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887341": [
        {
            "ioc_value": "al-asasyah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": "2026-08-25 18:59:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887342": [
        {
            "ioc_value": "alexoloughlinonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887343": [
        {
            "ioc_value": "alohablog.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": "2026-08-25 19:39:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887344": [
        {
            "ioc_value": "alradvogados.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887345": [
        {
            "ioc_value": "amjadworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887346": [
        {
            "ioc_value": "aprendoyemprendoca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887336": [
        {
            "ioc_value": "30link.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887337": [
        {
            "ioc_value": "addictbikes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 16:43:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887326": [
        {
            "ioc_value": "sbs-b2m.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-27 05:17:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887327": [
        {
            "ioc_value": "serracontabil.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-25 18:39:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887328": [
        {
            "ioc_value": "smartinches.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-27 05:27:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887329": [
        {
            "ioc_value": "sosdentiste.sn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887330": [
        {
            "ioc_value": "stockvista.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-25 18:19:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887331": [
        {
            "ioc_value": "sviaccelerator.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-27 05:17:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887332": [
        {
            "ioc_value": "tasteofjollof.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-25 18:39:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887333": [
        {
            "ioc_value": "taxeveryday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-25 18:39:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887334": [
        {
            "ioc_value": "vetrinacakescoffee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887335": [
        {
            "ioc_value": "yemkoservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:32",
            "last_seen_utc": "2026-08-25 19:29:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887308": [
        {
            "ioc_value": "its-software.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-27 05:17:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887309": [
        {
            "ioc_value": "k-global.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 16:49:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887310": [
        {
            "ioc_value": "kingdomdoghotel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-27 05:27:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887311": [
        {
            "ioc_value": "lavitasparta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 17:59:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887312": [
        {
            "ioc_value": "md-projects.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:19:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887313": [
        {
            "ioc_value": "med-salt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-27 05:17:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887314": [
        {
            "ioc_value": "minhajussunnah.ponpes.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:39:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887315": [
        {
            "ioc_value": "nast-net.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:19:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887316": [
        {
            "ioc_value": "nirmalrollingshutter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:19:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887317": [
        {
            "ioc_value": "nosygoats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:49:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887318": [
        {
            "ioc_value": "peelcargarage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:39:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887319": [
        {
            "ioc_value": "plumjobs.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-27 05:27:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887320": [
        {
            "ioc_value": "premierdermatology.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887321": [
        {
            "ioc_value": "printandsign.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:49:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887322": [
        {
            "ioc_value": "priyagoenka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-25 18:29:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887323": [
        {
            "ioc_value": "proclean.com.tn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-27 05:28:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887324": [
        {
            "ioc_value": "royalechandelier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887325": [
        {
            "ioc_value": "sb-couvreur-95.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:31",
            "last_seen_utc": "2026-08-27 05:27:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887294": [
        {
            "ioc_value": "binsrbuddies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887295": [
        {
            "ioc_value": "blackboxstands.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 17:49:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887296": [
        {
            "ioc_value": "cavertin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-27 05:28:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887297": [
        {
            "ioc_value": "chonburi.police.go.th",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:59:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887298": [
        {
            "ioc_value": "clinicadentalmonlleo.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 17:29:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887299": [
        {
            "ioc_value": "cortsrafa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:49:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887300": [
        {
            "ioc_value": "djtao.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:49:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887301": [
        {
            "ioc_value": "eradapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 17:19:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887302": [
        {
            "ioc_value": "forecastletech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 17:09:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887303": [
        {
            "ioc_value": "frontdoorinteriors.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 17:09:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887304": [
        {
            "ioc_value": "gayatripalace.co.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:59:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887305": [
        {
            "ioc_value": "hasminaimportexport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:59:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887306": [
        {
            "ioc_value": "hotelmirageregency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:59:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887307": [
        {
            "ioc_value": "institutovitoria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:30",
            "last_seen_utc": "2026-08-25 16:49:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887290": [
        {
            "ioc_value": "aacc.edu.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:29",
            "last_seen_utc": "2026-08-27 05:28:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887291": [
        {
            "ioc_value": "aavis.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:29",
            "last_seen_utc": "2026-08-27 05:28:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887292": [
        {
            "ioc_value": "acadmicwriter.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:29",
            "last_seen_utc": "2026-08-25 16:49:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887293": [
        {
            "ioc_value": "bes-sicherheit.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:41:29",
            "last_seen_utc": "2026-08-27 05:28:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1887288": [
        {
            "ioc_value": "iconicprogrammers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:39:20",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887289": [
        {
            "ioc_value": "empyreanmbs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:39:20",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887286": [
        {
            "ioc_value": "pearlglobalsourcing.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:39:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887287": [
        {
            "ioc_value": "dubaiicc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:39:19",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887285": [
        {
            "ioc_value": "https://szallas.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 16:30:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/szallas.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887284": [
        {
            "ioc_value": "blog.willowbanks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887280": [
        {
            "ioc_value": "evchargerspecialists.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887281": [
        {
            "ioc_value": "bsc-testnet-rpc.node.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887282": [
        {
            "ioc_value": "greyconsultinggroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887283": [
        {
            "ioc_value": "bountygamelogin.com.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:18",
            "last_seen_utc": "2026-08-27 05:27:55",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887277": [
        {
            "ioc_value": "comharpartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887278": [
        {
            "ioc_value": "brynrodyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887279": [
        {
            "ioc_value": "turevistadecocina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:17",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887274": [
        {
            "ioc_value": "sicilie.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887275": [
        {
            "ioc_value": "idealsu.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:16",
            "last_seen_utc": "2026-08-27 05:28:24",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887276": [
        {
            "ioc_value": "foghosting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887272": [
        {
            "ioc_value": "storyfinder.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887273": [
        {
            "ioc_value": "enseigne-gousset.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 16:30:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,EtherHide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1887270": [
        {
            "ioc_value": "hcbusinessadvisory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:29:18",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887268": [
        {
            "ioc_value": "phunkster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:29:17",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887269": [
        {
            "ioc_value": "journeesmerchandising.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:29:17",
            "last_seen_utc": "2026-08-25 16:41:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887267": [
        {
            "ioc_value": "tesyha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 16:26:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887266": [
        {
            "ioc_value": "64.44.156.170:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-25 16:25:32",
            "last_seen_utc": "2026-08-28 03:11:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cb4c968acce92454c9170c03efaadf8ab522bdf829ab4e40d324ac4eebb9ba64/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887265": [
        {
            "ioc_value": "http://shhsift.click:7647/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 16:22:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887263": [
        {
            "ioc_value": "economictimes.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:19:16",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887264": [
        {
            "ioc_value": "alexautodz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:19:16",
            "last_seen_utc": "2026-08-25 16:41:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887259": [
        {
            "ioc_value": "amhstage.wpengine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:19:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887260": [
        {
            "ioc_value": "amineshoot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:19:15",
            "last_seen_utc": "2026-08-25 16:41:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887261": [
        {
            "ioc_value": "dominobrand.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:19:15",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887262": [
        {
            "ioc_value": "digitaltransform.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:19:15",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887255": [
        {
            "ioc_value": "lbsco.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:13",
            "last_seen_utc": "2026-08-25 16:41:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887256": [
        {
            "ioc_value": "atlanticlaw.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:13",
            "last_seen_utc": "2026-08-25 16:41:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887257": [
        {
            "ioc_value": "atlanturesports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:13",
            "last_seen_utc": "2026-08-25 16:41:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887258": [
        {
            "ioc_value": "bathroomremodelpalmdale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:13",
            "last_seen_utc": "2026-08-25 16:41:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887252": [
        {
            "ioc_value": "flipsguide.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:12",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887253": [
        {
            "ioc_value": "clinicadentalgarciaselva.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:12",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887254": [
        {
            "ioc_value": "digitalmarketingagence.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 16:09:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887251": [
        {
            "ioc_value": "delgadoexposito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:59:11",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887248": [
        {
            "ioc_value": "futureexpected.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:59:10",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887249": [
        {
            "ioc_value": "landscapingdesignlancaster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:59:10",
            "last_seen_utc": "2026-08-25 16:41:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887250": [
        {
            "ioc_value": "hebaazeez.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:59:10",
            "last_seen_utc": "2026-08-25 16:41:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887247": [
        {
            "ioc_value": "fondationinternationaletrokapercfa.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:59:09",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887245": [
        {
            "ioc_value": "x0x.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 15:50:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1887246": [
        {
            "ioc_value": "https://x0x.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 15:50:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1887244": [
        {
            "ioc_value": "rulufe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:42:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887243": [
        {
            "ioc_value": "vefuvisy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:31:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887242": [
        {
            "ioc_value": "w0a86nbg.eng--neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:27:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887237": [
        {
            "ioc_value": "http://fresok.top:9048/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 15:17:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887236": [
        {
            "ioc_value": "http://ciffice.biz:7720/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 15:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887235": [
        {
            "ioc_value": "38.147.185.54:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 15:16:32",
            "last_seen_utc": "2026-08-26 01:05:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887234": [
        {
            "ioc_value": "hyhuqope.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:13:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887233": [
        {
            "ioc_value": "zigylaji.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:09:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887232": [
        {
            "ioc_value": "fz9hhl90.eng-us-neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:06:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887231": [
        {
            "ioc_value": "177.3.89.54:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 15:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887230": [
        {
            "ioc_value": "177.3.89.54:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 15:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887229": [
        {
            "ioc_value": "118.89.124.88:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 15:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887228": [
        {
            "ioc_value": "marcoguazzini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:04:39",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887226": [
        {
            "ioc_value": "172.94.4.77:7776",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 15:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/676a249f36ca2fe67297e167f622679023b4f474c634c690a7db96d75a00d8ad/",
            "tags": "RAT,SnakeBiteRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887227": [
        {
            "ioc_value": "172.94.4.77:2003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 15:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/676a249f36ca2fe67297e167f622679023b4f474c634c690a7db96d75a00d8ad/",
            "tags": "RAT,SnakeBiteRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887225": [
        {
            "ioc_value": "dexodaqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:03:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887224": [
        {
            "ioc_value": "en-us-en-heroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 15:01:57",
            "last_seen_utc": "2026-08-25 15:02:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887222": [
        {
            "ioc_value": "http://zonxh.shop:7728/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 15:01:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887223": [
        {
            "ioc_value": "http://shhsift.click:7647/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 15:01:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1887191": [
        {
            "ioc_value": "cylixuta.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887195": [
        {
            "ioc_value": "kefebule.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 15:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887203": [
        {
            "ioc_value": "193.221.200.26:5001",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-25 15:00:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/d8d11e3c-3f4d-4448-b8af-95e95dfc4a9e",
            "tags": "salatstealer,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887204": [
        {
            "ioc_value": "7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2ada6gstcxp54lw6q2zb7jad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 15:00:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092126422794179060",
            "tags": "booba,boobaproject",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887207": [
        {
            "ioc_value": "45.94.31.187:55012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 15:00:45",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887205": [
        {
            "ioc_value": "eazk7las3xsvsyxgww3jgzammqjevso2ydnmlopdhl3u2muyrmmilrqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 15:00:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092126422794179060",
            "tags": "booba,boobaproject",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887206": [
        {
            "ioc_value": "d77tnb4bkmj3e366msrzllnwsi2t5e54e4yqh7zm7y5hlfwugnwzswad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 15:00:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2092126422794179060",
            "tags": "booba,boobaproject",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1887208": [
        {
            "ioc_value": "192.229.115.254:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 15:00:43",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887209": [
        {
            "ioc_value": "192.229.115.254:56004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 15:00:42",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887210": [
        {
            "ioc_value": "192.229.115.246:56004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 15:00:42",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887211": [
        {
            "ioc_value": "192.229.115.246:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 15:00:41",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887212": [
        {
            "ioc_value": "178.16.55.133:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-25 15:00:41",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887214": [
        {
            "ioc_value": "103.212.99.156:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 15:00:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887213": [
        {
            "ioc_value": "107.189.19.5:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 15:00:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887215": [
        {
            "ioc_value": "13.231.5.121:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 15:00:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887216": [
        {
            "ioc_value": "34.53.161.27:35382",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 15:00:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887217": [
        {
            "ioc_value": "132.243.172.182:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-25 15:00:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkComet",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1887221": [
        {
            "ioc_value": "http://fresok.top:9048/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 15:00:34",
            "last_seen_utc": "2026-08-25 15:33:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4c16f5ebd5c633b7a793ffa2cd96daddc5a503d82ed4fbe636109d89164ec02b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887218": [
        {
            "ioc_value": "https://idealautoac.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 15:00:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/idealautoac.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887219": [
        {
            "ioc_value": "https://idealsu.com.tr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 15:00:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/idealsu.com.tr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887220": [
        {
            "ioc_value": "https://bitpie-ad.cc/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 15:00:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bitpie-ad.cc",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1887202": [
        {
            "ioc_value": "q7ufuwnu.en-trump-token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 14:49:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887201": [
        {
            "ioc_value": "https://t.me/abebebbee",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-25 14:45:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f708c405d13450a3886936d68e63ad841836d0a741fb6848fd7b58c83db988d2/",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887200": [
        {
            "ioc_value": "https://africeconc.digital/pkas",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-25 14:45:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f708c405d13450a3886936d68e63ad841836d0a741fb6848fd7b58c83db988d2/",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887199": [
        {
            "ioc_value": "dome.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 14:42:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1887198": [
        {
            "ioc_value": "http://jamesmore02.work.gd:7044/is-ready",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.houdini",
            "malware_alias": "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi",
            "malware_printable": "Houdini",
            "first_seen_utc": "2026-08-25 14:40:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887197": [
        {
            "ioc_value": "bikeboard.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 14:39:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887196": [
        {
            "ioc_value": "bubblepull.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-25 14:38:31",
            "last_seen_utc": "2026-08-26 07:22:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887193": [
        {
            "ioc_value": "144.31.40.42:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-25 14:37:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4bdfb0eb41ac6ea16b24ae5ce9d0a06c17f1259bc08416ddac1a08e3dd10741/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887194": [
        {
            "ioc_value": "144.31.40.42:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-25 14:37:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4bdfb0eb41ac6ea16b24ae5ce9d0a06c17f1259bc08416ddac1a08e3dd10741/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887192": [
        {
            "ioc_value": "yoda-duct.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-25 14:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4bdfb0eb41ac6ea16b24ae5ce9d0a06c17f1259bc08416ddac1a08e3dd10741/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887190": [
        {
            "ioc_value": "burunagangababagmakeodionweginoyekelegid.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-25 14:20:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7e599fc46b042f09cdd978e5ec123f8e21f6ea5be691f18fd243c472463342e1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887070": [
        {
            "ioc_value": "dome.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 14:18:10",
            "last_seen_utc": "2026-08-25 14:09:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1887131": [
        {
            "ioc_value": "prime.destroythebrainonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-25 14:18:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117156556746728546",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1887132": [
        {
            "ioc_value": "167.71.217.41:8839",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 14:18:09",
            "last_seen_utc": "2026-09-01 03:31:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,d7d7f50ed686001c727dbd987b7fc7e7,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1887185": [
        {
            "ioc_value": "88.87.85.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887186": [
        {
            "ioc_value": "94.26.83.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887187": [
        {
            "ioc_value": "94.26.83.198:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887188": [
        {
            "ioc_value": "94.26.83.25:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887189": [
        {
            "ioc_value": "95.215.32.3:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887180": [
        {
            "ioc_value": "67.9.20.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887181": [
        {
            "ioc_value": "74.208.238.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887182": [
        {
            "ioc_value": "74.208.238.224:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887183": [
        {
            "ioc_value": "77.110.110.117:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887184": [
        {
            "ioc_value": "80.85.146.244:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887173": [
        {
            "ioc_value": "35.222.181.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887174": [
        {
            "ioc_value": "35.222.181.12:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887175": [
        {
            "ioc_value": "37.221.64.248:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887176": [
        {
            "ioc_value": "37.221.64.248:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887177": [
        {
            "ioc_value": "41.212.28.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887178": [
        {
            "ioc_value": "45.195.8.58:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887179": [
        {
            "ioc_value": "46.224.18.6:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887164": [
        {
            "ioc_value": "213.111.149.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887165": [
        {
            "ioc_value": "213.111.149.156:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887166": [
        {
            "ioc_value": "2.27.200.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887167": [
        {
            "ioc_value": "31.58.136.66:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887168": [
        {
            "ioc_value": "31.7.63.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887169": [
        {
            "ioc_value": "31.7.63.12:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887170": [
        {
            "ioc_value": "31.7.63.13:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887171": [
        {
            "ioc_value": "31.7.63.13:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887172": [
        {
            "ioc_value": "31.77.78.18:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887154": [
        {
            "ioc_value": "197.237.214.209:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887155": [
        {
            "ioc_value": "198.37.119.55:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887156": [
        {
            "ioc_value": "198.37.119.55:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887157": [
        {
            "ioc_value": "207.180.3.163:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887158": [
        {
            "ioc_value": "207.180.3.163:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887159": [
        {
            "ioc_value": "207.246.74.65:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887160": [
        {
            "ioc_value": "207.246.74.65:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887161": [
        {
            "ioc_value": "20.79.177.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887162": [
        {
            "ioc_value": "212.113.119.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887163": [
        {
            "ioc_value": "212.113.119.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887145": [
        {
            "ioc_value": "185.62.56.207:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887146": [
        {
            "ioc_value": "188.235.151.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887147": [
        {
            "ioc_value": "188.235.151.232:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887148": [
        {
            "ioc_value": "190.97.165.62:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887149": [
        {
            "ioc_value": "190.97.165.62:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887150": [
        {
            "ioc_value": "192.227.221.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887151": [
        {
            "ioc_value": "192.227.221.43:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887152": [
        {
            "ioc_value": "193.181.213.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887153": [
        {
            "ioc_value": "193.26.115.45:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887137": [
        {
            "ioc_value": "176.96.138.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887138": [
        {
            "ioc_value": "179.43.175.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887139": [
        {
            "ioc_value": "179.43.175.47:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887140": [
        {
            "ioc_value": "179.43.175.48:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887141": [
        {
            "ioc_value": "179.43.175.48:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887142": [
        {
            "ioc_value": "185.254.99.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887143": [
        {
            "ioc_value": "185.254.99.169:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887144": [
        {
            "ioc_value": "185.254.99.58:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887133": [
        {
            "ioc_value": "116.118.4.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887134": [
        {
            "ioc_value": "130.185.249.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887135": [
        {
            "ioc_value": "150.241.108.237:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887136": [
        {
            "ioc_value": "162.35.106.245:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:16:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887130": [
        {
            "ioc_value": "en-memrylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 14:12:24",
            "last_seen_utc": "2026-08-26 04:36:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887123": [
        {
            "ioc_value": "51.195.44.171:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887124": [
        {
            "ioc_value": "5.181.0.237:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887125": [
        {
            "ioc_value": "64.89.160.253:49158",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887126": [
        {
            "ioc_value": "66.163.122.218:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887127": [
        {
            "ioc_value": "77.239.124.108:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887128": [
        {
            "ioc_value": "80.78.19.31:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887129": [
        {
            "ioc_value": "93.127.141.23:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:17",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887114": [
        {
            "ioc_value": "104.36.229.172:50001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887115": [
        {
            "ioc_value": "135.181.68.20:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887116": [
        {
            "ioc_value": "138.16.177.250:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887117": [
        {
            "ioc_value": "178.16.54.149:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887118": [
        {
            "ioc_value": "184.174.97.15:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887119": [
        {
            "ioc_value": "31.76.11.243:2096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887120": [
        {
            "ioc_value": "31.76.11.243:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887121": [
        {
            "ioc_value": "31.77.78.18:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887122": [
        {
            "ioc_value": "50.114.179.25:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:09:16",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887110": [
        {
            "ioc_value": "https://www.signindat.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887111": [
        {
            "ioc_value": "https://www.skillsworks.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887112": [
        {
            "ioc_value": "https://www.wibbyzap.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887113": [
        {
            "ioc_value": "https://zoomai.online/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887105": [
        {
            "ioc_value": "https://www.hugopanel.life/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887106": [
        {
            "ioc_value": "https://www.ifclmarkets.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887107": [
        {
            "ioc_value": "https://www.larpingcarpet.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887108": [
        {
            "ioc_value": "https://www.recordsupdate.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887109": [
        {
            "ioc_value": "https://www.shadowteam.fun/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887100": [
        {
            "ioc_value": "https://www.cdn-support.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887101": [
        {
            "ioc_value": "https://www.eclypse-system-pc.co/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887102": [
        {
            "ioc_value": "https://www.esrpalco.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887103": [
        {
            "ioc_value": "https://www.globaldatatest.sbs/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887104": [
        {
            "ioc_value": "https://www.googleworkapp.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887096": [
        {
            "ioc_value": "https://vantyx.vip/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887097": [
        {
            "ioc_value": "https://voltexa.win/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887098": [
        {
            "ioc_value": "https://wibbyzap.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887099": [
        {
            "ioc_value": "https://windevalien.ddns.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887092": [
        {
            "ioc_value": "https://tapsend.city/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887093": [
        {
            "ioc_value": "https://trataloratolo.lol/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887094": [
        {
            "ioc_value": "https://v46403.php-friends.de/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887095": [
        {
            "ioc_value": "https://v61182.php-friends.de/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887086": [
        {
            "ioc_value": "https://policy.igc-technologies.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887087": [
        {
            "ioc_value": "https://recordsupdate.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887088": [
        {
            "ioc_value": "https://secure.cbtrust.su/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887089": [
        {
            "ioc_value": "https://shadowteam.fun/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887090": [
        {
            "ioc_value": "https://signindat.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887091": [
        {
            "ioc_value": "https://skillsworks.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887080": [
        {
            "ioc_value": "https://over.casacam.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887081": [
        {
            "ioc_value": "https://overlord.emmi.zip/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887082": [
        {
            "ioc_value": "https://overlord.milky1337.ru/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887083": [
        {
            "ioc_value": "https://panel.ipv6app.bar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887084": [
        {
            "ioc_value": "https://panel.tberat-vac.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887085": [
        {
            "ioc_value": "https://peakoverlord.duckdns.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887074": [
        {
            "ioc_value": "https://hugopanel.life/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887075": [
        {
            "ioc_value": "https://ifclmarkets.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887076": [
        {
            "ioc_value": "https://larpingcarpet.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887077": [
        {
            "ioc_value": "https://mail.strawxom.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887078": [
        {
            "ioc_value": "https://memesensecracked.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887079": [
        {
            "ioc_value": "https://nttsw.cdn-support.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887071": [
        {
            "ioc_value": "https://esrpalco.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887072": [
        {
            "ioc_value": "https://globaldatatest.sbs/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887073": [
        {
            "ioc_value": "https://googleworkapp.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:08:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887068": [
        {
            "ioc_value": "https://checkdomfilellc.us/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887069": [
        {
            "ioc_value": "https://dilumara.fun/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887065": [
        {
            "ioc_value": "https://aotools.duckdns.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:06:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887066": [
        {
            "ioc_value": "https://autoconfig.strawxom.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:06:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887067": [
        {
            "ioc_value": "https://cheater-scanner.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:06:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887060": [
        {
            "ioc_value": "https://91.208.206.83/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887061": [
        {
            "ioc_value": "https://94.249.230.167/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887062": [
        {
            "ioc_value": "https://94.26.83.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887063": [
        {
            "ioc_value": "https://95.215.32.3/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887064": [
        {
            "ioc_value": "https://95.217.196.165/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887056": [
        {
            "ioc_value": "https://80.71.235.62/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887057": [
        {
            "ioc_value": "https://80.85.146.244/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887058": [
        {
            "ioc_value": "https://85.11.167.99/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887059": [
        {
            "ioc_value": "https://88.87.85.199/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887052": [
        {
            "ioc_value": "https://66.154.103.144/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887053": [
        {
            "ioc_value": "https://67.9.20.12/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887054": [
        {
            "ioc_value": "https://74.208.238.224/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887055": [
        {
            "ioc_value": "https://77.110.110.117/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887046": [
        {
            "ioc_value": "https://31.7.63.13/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887047": [
        {
            "ioc_value": "https://35.222.181.12/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887048": [
        {
            "ioc_value": "https://37.221.64.248/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887049": [
        {
            "ioc_value": "https://41.212.28.86/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887050": [
        {
            "ioc_value": "https://45.90.98.139/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887051": [
        {
            "ioc_value": "https://46.224.18.6/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887042": [
        {
            "ioc_value": "https://2.26.123.82/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887043": [
        {
            "ioc_value": "https://2.27.200.141/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887044": [
        {
            "ioc_value": "https://2.59.135.182/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887045": [
        {
            "ioc_value": "https://31.7.63.12/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887037": [
        {
            "ioc_value": "https://207.180.3.163/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887038": [
        {
            "ioc_value": "https://207.246.74.65/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887039": [
        {
            "ioc_value": "https://20.79.177.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887040": [
        {
            "ioc_value": "https://212.113.119.206/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887041": [
        {
            "ioc_value": "https://212.11.64.54/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887032": [
        {
            "ioc_value": "https://193.26.115.45/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887033": [
        {
            "ioc_value": "https://193.26.115.59/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887034": [
        {
            "ioc_value": "https://197.237.214.209/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887035": [
        {
            "ioc_value": "https://198.37.119.55/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887036": [
        {
            "ioc_value": "https://1997gb.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887026": [
        {
            "ioc_value": "https://179.43.175.47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887027": [
        {
            "ioc_value": "https://179.43.175.48/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887028": [
        {
            "ioc_value": "https://185.254.99.58/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887029": [
        {
            "ioc_value": "https://188.235.151.232/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887030": [
        {
            "ioc_value": "https://190.97.165.62/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887031": [
        {
            "ioc_value": "https://193.181.213.156/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887022": [
        {
            "ioc_value": "https://144.172.115.45/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887023": [
        {
            "ioc_value": "https://150.241.108.237/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887024": [
        {
            "ioc_value": "https://167.71.242.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887025": [
        {
            "ioc_value": "https://176.96.138.130/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887017": [
        {
            "ioc_value": "https://104.129.12.113/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887018": [
        {
            "ioc_value": "https://104.197.0.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887019": [
        {
            "ioc_value": "https://116.118.4.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887020": [
        {
            "ioc_value": "https://130.185.249.239/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887021": [
        {
            "ioc_value": "https://135.181.128.187/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 14:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2092239178801242415",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887015": [
        {
            "ioc_value": "177.3.89.54:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 14:05:07",
            "last_seen_utc": "2026-08-26 07:55:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887016": [
        {
            "ioc_value": "177.3.89.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887014": [
        {
            "ioc_value": "43.143.94.53:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887013": [
        {
            "ioc_value": "129.28.125.175:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886992": [
        {
            "ioc_value": "cizygege.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 14:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886995": [
        {
            "ioc_value": "tripinupdate.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 14:00:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886993": [
        {
            "ioc_value": "neversoftmain.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 14:00:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886994": [
        {
            "ioc_value": "rootfarmapp.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 14:00:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886996": [
        {
            "ioc_value": "dondermicapp.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 14:00:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886997": [
        {
            "ioc_value": "aroclenetapp.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 14:00:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://expel.com/blog/synkloader-when-you-throw-in-everything-but-the-kitchen-sink/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886998": [
        {
            "ioc_value": "keqogopy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 14:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887004": [
        {
            "ioc_value": "saneliqe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 14:00:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887005": [
        {
            "ioc_value": "zybotoze.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 14:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887006": [
        {
            "ioc_value": "91.92.40.118:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-25 14:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.fortinet.com/blog/threat-research/multi-functional-linux-botnet-evooo1bot",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887008": [
        {
            "ioc_value": "brownchemical.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 14:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887010": [
        {
            "ioc_value": "weathered-sunset-c882.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 14:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1887011": [
        {
            "ioc_value": "178.16.53.113:50051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 13:58:07",
            "last_seen_utc": "2026-08-27 07:31:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7f5c3d6bb064a19bc4d5e332f258824cbf3e256069eee4c11b23be5d799a4d18/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887012": [
        {
            "ioc_value": "ratatwista.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 13:58:07",
            "last_seen_utc": "2026-08-27 07:31:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7f5c3d6bb064a19bc4d5e332f258824cbf3e256069eee4c11b23be5d799a4d18/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1887009": [
        {
            "ioc_value": "en-leptozan-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 13:52:43",
            "last_seen_utc": "2026-08-25 21:27:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1887007": [
        {
            "ioc_value": "sv41ylmi.eng--nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 13:27:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887003": [
        {
            "ioc_value": "45.8.46.122:3232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 13:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887002": [
        {
            "ioc_value": "80.190.77.86:30700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887001": [
        {
            "ioc_value": "3.238.106.234:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886999": [
        {
            "ioc_value": "182.92.78.7:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1887000": [
        {
            "ioc_value": "2.27.202.130:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 13:05:06",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886991": [
        {
            "ioc_value": "uxl3drprse.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 12:37:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886988": [
        {
            "ioc_value": "154.90.70.20:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886989": [
        {
            "ioc_value": "154.90.70.20:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886990": [
        {
            "ioc_value": "154.90.70.20:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886978": [
        {
            "ioc_value": "154.90.70.20:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886979": [
        {
            "ioc_value": "154.90.70.20:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886980": [
        {
            "ioc_value": "154.90.70.20:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886981": [
        {
            "ioc_value": "154.90.70.20:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886982": [
        {
            "ioc_value": "154.90.70.20:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886983": [
        {
            "ioc_value": "154.90.70.20:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886984": [
        {
            "ioc_value": "154.90.70.20:33224",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886985": [
        {
            "ioc_value": "154.90.70.20:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886986": [
        {
            "ioc_value": "154.90.70.20:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886987": [
        {
            "ioc_value": "154.90.70.20:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886966": [
        {
            "ioc_value": "157.22.240.126:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886967": [
        {
            "ioc_value": "157.22.240.126:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886968": [
        {
            "ioc_value": "157.22.240.126:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886969": [
        {
            "ioc_value": "157.22.240.126:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886970": [
        {
            "ioc_value": "157.22.240.126:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886971": [
        {
            "ioc_value": "157.22.240.126:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886972": [
        {
            "ioc_value": "157.22.240.126:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886973": [
        {
            "ioc_value": "157.22.240.126:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886974": [
        {
            "ioc_value": "157.22.240.126:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886975": [
        {
            "ioc_value": "157.22.240.126:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886976": [
        {
            "ioc_value": "157.22.240.126:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886977": [
        {
            "ioc_value": "157.22.240.126:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886964": [
        {
            "ioc_value": "whstle.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 12:34:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886965": [
        {
            "ioc_value": "michie.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 12:34:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886963": [
        {
            "ioc_value": "floridacustomsbroker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 12:34:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886962": [
        {
            "ioc_value": "entretien-toiture.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 12:24:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886958": [
        {
            "ioc_value": "93.152.207.101:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886959": [
        {
            "ioc_value": "93.152.207.101:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886960": [
        {
            "ioc_value": "93.152.207.101:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886961": [
        {
            "ioc_value": "93.152.207.101:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886950": [
        {
            "ioc_value": "93.152.207.101:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886951": [
        {
            "ioc_value": "93.152.207.101:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886952": [
        {
            "ioc_value": "93.152.207.101:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886953": [
        {
            "ioc_value": "93.152.207.101:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886954": [
        {
            "ioc_value": "93.152.207.101:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886955": [
        {
            "ioc_value": "93.152.207.101:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886956": [
        {
            "ioc_value": "93.152.207.101:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886957": [
        {
            "ioc_value": "93.152.207.101:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886949": [
        {
            "ioc_value": "h1v48ygy.eng-usa-neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 12:23:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886835": [
        {
            "ioc_value": "http://downloadfreemanager.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-25 12:20:23",
            "last_seen_utc": "2026-09-01 03:38:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886836": [
        {
            "ioc_value": "6ypoempdt8.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 12:20:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886855": [
        {
            "ioc_value": "http://182.190.218.128:45211/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 12:20:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.190.218.128",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886854": [
        {
            "ioc_value": "formidabletomato.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 12:20:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886857": [
        {
            "ioc_value": "http://144.48.135.126:49506/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 12:20:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.135.126",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886856": [
        {
            "ioc_value": "http://139.135.45.132:37818/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 12:20:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.45.132",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886858": [
        {
            "ioc_value": "http://139.135.44.252:59693/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 12:20:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.44.252",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886947": [
        {
            "ioc_value": "87.120.219.81:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886948": [
        {
            "ioc_value": "87.120.219.81:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886939": [
        {
            "ioc_value": "87.120.219.81:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886940": [
        {
            "ioc_value": "87.120.219.81:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886941": [
        {
            "ioc_value": "87.120.219.81:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886942": [
        {
            "ioc_value": "87.120.219.81:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886943": [
        {
            "ioc_value": "87.120.219.81:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886944": [
        {
            "ioc_value": "87.120.219.81:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886945": [
        {
            "ioc_value": "87.120.219.81:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886946": [
        {
            "ioc_value": "87.120.219.81:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886929": [
        {
            "ioc_value": "78.159.131.59:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886930": [
        {
            "ioc_value": "78.159.131.59:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886931": [
        {
            "ioc_value": "78.159.131.59:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886932": [
        {
            "ioc_value": "78.159.131.59:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886933": [
        {
            "ioc_value": "78.159.131.59:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886934": [
        {
            "ioc_value": "78.159.131.59:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886935": [
        {
            "ioc_value": "78.159.131.59:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886936": [
        {
            "ioc_value": "78.159.131.59:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886937": [
        {
            "ioc_value": "78.159.131.59:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886938": [
        {
            "ioc_value": "78.159.131.59:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886922": [
        {
            "ioc_value": "78.153.139.103:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886923": [
        {
            "ioc_value": "78.153.139.103:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886924": [
        {
            "ioc_value": "78.153.139.103:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886925": [
        {
            "ioc_value": "78.153.139.103:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886926": [
        {
            "ioc_value": "78.153.139.103:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886927": [
        {
            "ioc_value": "78.153.139.103:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886928": [
        {
            "ioc_value": "78.159.131.59:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886914": [
        {
            "ioc_value": "77.83.246.5:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886915": [
        {
            "ioc_value": "77.83.246.5:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886916": [
        {
            "ioc_value": "78.153.139.103:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886917": [
        {
            "ioc_value": "78.153.139.103:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886918": [
        {
            "ioc_value": "78.153.139.103:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886919": [
        {
            "ioc_value": "78.153.139.103:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886920": [
        {
            "ioc_value": "78.153.139.103:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886921": [
        {
            "ioc_value": "78.153.139.103:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886908": [
        {
            "ioc_value": "77.83.246.5:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886909": [
        {
            "ioc_value": "77.83.246.5:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886910": [
        {
            "ioc_value": "77.83.246.5:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886911": [
        {
            "ioc_value": "77.83.246.5:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886912": [
        {
            "ioc_value": "77.83.246.5:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886913": [
        {
            "ioc_value": "77.83.246.5:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886900": [
        {
            "ioc_value": "62.133.62.11:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886901": [
        {
            "ioc_value": "62.133.62.11:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886902": [
        {
            "ioc_value": "62.133.62.11:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886903": [
        {
            "ioc_value": "62.133.62.11:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886904": [
        {
            "ioc_value": "77.83.246.5:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886905": [
        {
            "ioc_value": "77.83.246.5:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886906": [
        {
            "ioc_value": "77.83.246.5:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886907": [
        {
            "ioc_value": "77.83.246.5:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886890": [
        {
            "ioc_value": "5.181.2.223:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886891": [
        {
            "ioc_value": "5.181.2.223:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886892": [
        {
            "ioc_value": "5.181.2.223:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886893": [
        {
            "ioc_value": "62.133.62.11:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886894": [
        {
            "ioc_value": "62.133.62.11:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886895": [
        {
            "ioc_value": "62.133.62.11:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886896": [
        {
            "ioc_value": "62.133.62.11:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886897": [
        {
            "ioc_value": "62.133.62.11:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886898": [
        {
            "ioc_value": "62.133.62.11:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886899": [
        {
            "ioc_value": "62.133.62.11:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886882": [
        {
            "ioc_value": "5.181.2.223:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886883": [
        {
            "ioc_value": "5.181.2.223:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886884": [
        {
            "ioc_value": "5.181.2.223:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886885": [
        {
            "ioc_value": "5.181.2.223:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886886": [
        {
            "ioc_value": "5.181.2.223:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886887": [
        {
            "ioc_value": "5.181.2.223:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886888": [
        {
            "ioc_value": "5.181.2.223:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886889": [
        {
            "ioc_value": "5.181.2.223:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886874": [
        {
            "ioc_value": "5.181.2.220:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886875": [
        {
            "ioc_value": "5.181.2.220:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886876": [
        {
            "ioc_value": "5.181.2.220:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886877": [
        {
            "ioc_value": "5.181.2.220:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886878": [
        {
            "ioc_value": "5.181.2.220:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886879": [
        {
            "ioc_value": "5.181.2.220:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886880": [
        {
            "ioc_value": "5.181.2.220:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886881": [
        {
            "ioc_value": "5.181.2.223:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886867": [
        {
            "ioc_value": "45.95.233.236:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886868": [
        {
            "ioc_value": "45.95.233.236:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886869": [
        {
            "ioc_value": "45.95.233.236:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886870": [
        {
            "ioc_value": "5.181.2.220:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886871": [
        {
            "ioc_value": "5.181.2.220:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886872": [
        {
            "ioc_value": "5.181.2.220:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886873": [
        {
            "ioc_value": "5.181.2.220:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886863": [
        {
            "ioc_value": "45.95.233.236:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886864": [
        {
            "ioc_value": "45.95.233.236:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886865": [
        {
            "ioc_value": "45.95.233.236:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886866": [
        {
            "ioc_value": "45.95.233.236:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886860": [
        {
            "ioc_value": "45.95.233.236:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886861": [
        {
            "ioc_value": "45.95.233.236:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886862": [
        {
            "ioc_value": "45.95.233.236:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886859": [
        {
            "ioc_value": "45.95.233.236:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:20:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886852": [
        {
            "ioc_value": "182.92.78.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886853": [
        {
            "ioc_value": "182.92.78.7:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886851": [
        {
            "ioc_value": "50.116.42.10:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886850": [
        {
            "ioc_value": "feldschiessen-sense.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 12:04:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886839": [
        {
            "ioc_value": "178.16.53.203:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886840": [
        {
            "ioc_value": "178.16.53.203:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886841": [
        {
            "ioc_value": "178.16.53.203:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886842": [
        {
            "ioc_value": "178.16.53.203:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886843": [
        {
            "ioc_value": "178.16.53.203:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886844": [
        {
            "ioc_value": "178.16.53.203:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886845": [
        {
            "ioc_value": "178.16.53.203:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886846": [
        {
            "ioc_value": "178.16.53.203:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886847": [
        {
            "ioc_value": "178.16.53.203:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886848": [
        {
            "ioc_value": "178.16.53.203:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886849": [
        {
            "ioc_value": "31.56.209.195:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886837": [
        {
            "ioc_value": "178.16.53.203:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886838": [
        {
            "ioc_value": "178.16.53.203:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 12:04:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886834": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Justin-97483/dfh45iek8/jjy44gfl7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 11:57:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886832": [
        {
            "ioc_value": "157.22.241.125:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886833": [
        {
            "ioc_value": "157.22.241.125:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886811": [
        {
            "ioc_value": "157.22.241.124:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886812": [
        {
            "ioc_value": "157.22.241.124:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886813": [
        {
            "ioc_value": "157.22.241.124:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886814": [
        {
            "ioc_value": "157.22.241.124:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886815": [
        {
            "ioc_value": "157.22.241.124:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886816": [
        {
            "ioc_value": "157.22.241.124:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886817": [
        {
            "ioc_value": "157.22.241.124:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886818": [
        {
            "ioc_value": "157.22.241.124:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886819": [
        {
            "ioc_value": "157.22.241.124:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886820": [
        {
            "ioc_value": "157.22.241.124:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886821": [
        {
            "ioc_value": "157.22.241.124:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886822": [
        {
            "ioc_value": "157.22.241.125:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886823": [
        {
            "ioc_value": "157.22.241.125:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886824": [
        {
            "ioc_value": "157.22.241.125:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886825": [
        {
            "ioc_value": "157.22.241.125:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886826": [
        {
            "ioc_value": "157.22.241.125:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886827": [
        {
            "ioc_value": "157.22.241.125:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886828": [
        {
            "ioc_value": "157.22.241.125:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886829": [
        {
            "ioc_value": "157.22.241.125:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886830": [
        {
            "ioc_value": "157.22.241.125:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886831": [
        {
            "ioc_value": "157.22.241.125:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886798": [
        {
            "ioc_value": "157.22.240.194:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886799": [
        {
            "ioc_value": "157.22.240.194:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886800": [
        {
            "ioc_value": "157.22.240.194:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886801": [
        {
            "ioc_value": "157.22.240.194:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886802": [
        {
            "ioc_value": "157.22.240.194:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886803": [
        {
            "ioc_value": "157.22.240.194:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886804": [
        {
            "ioc_value": "157.22.240.194:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886805": [
        {
            "ioc_value": "157.22.240.194:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886806": [
        {
            "ioc_value": "157.22.240.194:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886807": [
        {
            "ioc_value": "157.22.240.194:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886808": [
        {
            "ioc_value": "157.22.240.194:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886809": [
        {
            "ioc_value": "157.22.240.194:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886810": [
        {
            "ioc_value": "157.22.241.124:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:57:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886797": [
        {
            "ioc_value": "en-us-andliberty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 11:56:23",
            "last_seen_utc": "2026-08-25 11:56:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886781": [
        {
            "ioc_value": "138.124.62.8:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886782": [
        {
            "ioc_value": "138.124.62.8:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886783": [
        {
            "ioc_value": "138.124.62.8:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886784": [
        {
            "ioc_value": "138.124.62.8:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886785": [
        {
            "ioc_value": "147.45.116.15:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886786": [
        {
            "ioc_value": "147.45.116.15:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886787": [
        {
            "ioc_value": "147.45.116.15:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886788": [
        {
            "ioc_value": "147.45.116.15:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886789": [
        {
            "ioc_value": "147.45.116.15:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886790": [
        {
            "ioc_value": "147.45.116.15:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886791": [
        {
            "ioc_value": "147.45.116.15:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886792": [
        {
            "ioc_value": "147.45.116.15:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886793": [
        {
            "ioc_value": "147.45.116.15:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886794": [
        {
            "ioc_value": "147.45.116.15:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886795": [
        {
            "ioc_value": "147.45.116.15:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886796": [
        {
            "ioc_value": "147.45.116.15:61543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886774": [
        {
            "ioc_value": "138.124.62.8:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886775": [
        {
            "ioc_value": "138.124.62.8:23456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886776": [
        {
            "ioc_value": "138.124.62.8:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886777": [
        {
            "ioc_value": "138.124.62.8:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886778": [
        {
            "ioc_value": "138.124.62.8:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886779": [
        {
            "ioc_value": "138.124.62.8:38429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886780": [
        {
            "ioc_value": "138.124.62.8:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:49:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886756": [
        {
            "ioc_value": "nejyvahe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886747": [
        {
            "ioc_value": "https://168.119.61.136",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 11:32:58",
            "last_seen_utc": "2026-08-31 16:08:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "608de134a53f9215c6fa06e5a514d150,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886748": [
        {
            "ioc_value": "relozuhe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886761": [
        {
            "ioc_value": "bdjfd04130.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886763": [
        {
            "ioc_value": "m930p67ve9.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886764": [
        {
            "ioc_value": "nysibeme.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886765": [
        {
            "ioc_value": "wakoduja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886769": [
        {
            "ioc_value": "pavlasalmon.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 11:32:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886773": [
        {
            "ioc_value": "https://fourapostlesrealty.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fourapostlesrealty.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886772": [
        {
            "ioc_value": "b4l0cqbk.eng--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 11:26:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886770": [
        {
            "ioc_value": "hh3.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 11:25:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886771": [
        {
            "ioc_value": "https://hh3.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 11:25:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886767": [
        {
            "ioc_value": "102.117.171.97:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886768": [
        {
            "ioc_value": "104.143.204.239:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 11:05:07",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886766": [
        {
            "ioc_value": "43.143.13.146:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886762": [
        {
            "ioc_value": "tsnjsimoo.en-us-en-eloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:56:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886760": [
        {
            "ioc_value": "en-us-en-eloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:55:39",
            "last_seen_utc": "2026-08-25 10:55:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886759": [
        {
            "ioc_value": "ue0xfkgn.en-trumplapelpin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886758": [
        {
            "ioc_value": "en-trumplapelpin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:34:45",
            "last_seen_utc": "2026-08-25 10:34:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886757": [
        {
            "ioc_value": "pretuniflex.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:29:10",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886755": [
        {
            "ioc_value": "2hc0b19k.en-us-en-darkreset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:07:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886754": [
        {
            "ioc_value": "175.43.223.195:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 10:05:16",
            "last_seen_utc": "2026-09-01 02:44:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886753": [
        {
            "ioc_value": "49.232.135.25:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-25 10:05:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886752": [
        {
            "ioc_value": "43.143.13.146:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 10:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886751": [
        {
            "ioc_value": "43.143.13.146:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 10:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886750": [
        {
            "ioc_value": "en-us-en-darkreset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 10:04:09",
            "last_seen_utc": "2026-08-25 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886749": [
        {
            "ioc_value": "mysticinteriors.com.mt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 09:59:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886746": [
        {
            "ioc_value": "80.76.49.47:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 09:46:47",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886745": [
        {
            "ioc_value": "66.235.175.82:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 09:46:42",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886744": [
        {
            "ioc_value": "31.77.248.3:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 09:46:05",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886743": [
        {
            "ioc_value": "195.177.94.155:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 09:44:41",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886742": [
        {
            "ioc_value": "155.117.40.213:7721",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 09:43:47",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886741": [
        {
            "ioc_value": "151.241.154.55:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-25 09:43:42",
            "last_seen_utc": "2026-09-01 02:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886719": [
        {
            "ioc_value": "tucixuno.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 09:42:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886720": [
        {
            "ioc_value": "http://31.76.30.6/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-25 09:41:59",
            "last_seen_utc": "2026-09-01 03:33:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,tst100",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886728": [
        {
            "ioc_value": "91.92.40.182:37773",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 09:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886729": [
        {
            "ioc_value": "149.88.73.17:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 09:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886730": [
        {
            "ioc_value": "85.137.62.187:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-25 09:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886731": [
        {
            "ioc_value": "69.167.11.198:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-25 09:41:58",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886732": [
        {
            "ioc_value": "plmij61000.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 09:41:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886740": [
        {
            "ioc_value": "boholunu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 09:41:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886736": [
        {
            "ioc_value": "fan.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 09:41:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1886739": [
        {
            "ioc_value": "faplasg.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 09:29:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886738": [
        {
            "ioc_value": "d2qbo0u3.en-us-eng-geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 09:25:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886737": [
        {
            "ioc_value": "fan.369bbqsifangonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 09:21:08",
            "last_seen_utc": "2026-08-26 07:51:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886734": [
        {
            "ioc_value": "photo-drivehotel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-25 09:16:07",
            "last_seen_utc": "2026-08-27 09:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886735": [
        {
            "ioc_value": "photo-id83247.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-25 09:16:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886733": [
        {
            "ioc_value": "http://mrlketo.shop:8932/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 09:14:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886727": [
        {
            "ioc_value": "hazelcolonnade.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-25 09:05:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1886726": [
        {
            "ioc_value": "https://hazelcolonnade.net/handler/status-hook.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-25 09:05:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1886724": [
        {
            "ioc_value": "43.143.13.146:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886725": [
        {
            "ioc_value": "43.143.13.146:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886723": [
        {
            "ioc_value": "149.88.66.234:7791",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886722": [
        {
            "ioc_value": "180.76.135.85:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886721": [
        {
            "ioc_value": "154.221.17.62:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886718": [
        {
            "ioc_value": "121.4.38.18:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 08:52:09",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886669": [
        {
            "ioc_value": "jkx26l5rhe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 08:52:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886689": [
        {
            "ioc_value": "orbitcnc.twilightparadox.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 08:52:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://blog.efespain.com/posts/capitulo-8-sysorbit-ghidra/",
            "tags": "adb,android,botnet,ddos,Sysorbit",
            "anonymous": 0,
            "reporter": "eFeSpain"
        }
    ],
    "1886690": [
        {
            "ioc_value": "updatemc.twilightparadox.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 08:52:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://blog.efespain.com/posts/capitulo-8-sysorbit-ghidra/",
            "tags": "adb,android,botnet,ddos,Sysorbit",
            "anonymous": 0,
            "reporter": "eFeSpain"
        }
    ],
    "1886691": [
        {
            "ioc_value": "176.65.139.248:10293",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 08:52:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://blog.efespain.com/posts/capitulo-8-sysorbit-ghidra/",
            "tags": "adb,android,botnet,ddos,Sysorbit",
            "anonymous": 0,
            "reporter": "eFeSpain"
        }
    ],
    "1886702": [
        {
            "ioc_value": "jpnxh85169.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 08:52:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886703": [
        {
            "ioc_value": "fysyqudi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 08:52:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886711": [
        {
            "ioc_value": "bywajyly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 08:52:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886713": [
        {
            "ioc_value": "maitilde72.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 08:52:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886714": [
        {
            "ioc_value": "cowahu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 08:52:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886717": [
        {
            "ioc_value": "118.24.172.48:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 08:51:58",
            "last_seen_utc": "2026-08-27 07:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886716": [
        {
            "ioc_value": "47.96.123.205:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 08:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886715": [
        {
            "ioc_value": "182.92.78.7:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 08:51:56",
            "last_seen_utc": "2026-08-27 07:27:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886712": [
        {
            "ioc_value": "https://mail.quwatt.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 08:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.quwatt.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886710": [
        {
            "ioc_value": "toad.ampwin123.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 08:11:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886708": [
        {
            "ioc_value": "150.129.80.247:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 08:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886709": [
        {
            "ioc_value": "143.92.62.110:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 08:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886707": [
        {
            "ioc_value": "114.132.178.92:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886706": [
        {
            "ioc_value": "91.92.240.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886705": [
        {
            "ioc_value": "theatre-du-chateau.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:56:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886704": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/df64gre7j/yd98gh3s",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:53:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886701": [
        {
            "ioc_value": "lausannoir.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:31:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886699": [
        {
            "ioc_value": "mariage-adeline-loris.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:31:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886700": [
        {
            "ioc_value": "macaronvanille.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:31:35",
            "last_seen_utc": "2026-08-25 12:55:03",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886698": [
        {
            "ioc_value": "https://balloonfest.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/balloonfest.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886697": [
        {
            "ioc_value": "https://dev.rushtaxresolution.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dev.rushtaxresolution.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886696": [
        {
            "ioc_value": "ayuztxyw.en-en-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:25:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886695": [
        {
            "ioc_value": "dv1q7cal.eng-usa-nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:25:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886692": [
        {
            "ioc_value": "178.104.211.128:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886693": [
        {
            "ioc_value": "62.238.36.8:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886694": [
        {
            "ioc_value": "185.167.99.44:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886684": [
        {
            "ioc_value": "ibi.sm188dnsxx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886685": [
        {
            "ioc_value": "hit.sm188dnsxx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886686": [
        {
            "ioc_value": "ggk.sm188dnsxx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:25",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886687": [
        {
            "ioc_value": "dor.sm188dnsxx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886688": [
        {
            "ioc_value": "hbd.sm188dnsxx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:25",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886681": [
        {
            "ioc_value": "https://hbd.sm188dnsxx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886682": [
        {
            "ioc_value": "https://178.104.211.128/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:07",
            "last_seen_utc": "2026-09-01 03:37:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886683": [
        {
            "ioc_value": "https://62.238.36.8/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886677": [
        {
            "ioc_value": "https://ibi.sm188dnsxx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886678": [
        {
            "ioc_value": "https://hit.sm188dnsxx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886679": [
        {
            "ioc_value": "https://ggk.sm188dnsxx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886680": [
        {
            "ioc_value": "https://dor.sm188dnsxx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-25 07:17:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886676": [
        {
            "ioc_value": "pinkfriend.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-25 07:07:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/02e0b6dd34553b2d1e4a0f023716061884893d84995b3641b388b02f4e04014d/",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886674": [
        {
            "ioc_value": "91.92.240.88:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886675": [
        {
            "ioc_value": "43.155.168.253:3232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886672": [
        {
            "ioc_value": "45.8.46.122:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886673": [
        {
            "ioc_value": "91.92.240.88:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886670": [
        {
            "ioc_value": "easycompany.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 07:02:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886671": [
        {
            "ioc_value": "anup-nastik.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 07:02:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886668": [
        {
            "ioc_value": "http://uiccvbk.click:8839/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 06:55:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886667": [
        {
            "ioc_value": "vizuku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 06:51:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886475": [
        {
            "ioc_value": "http://176.65.139.196/bins/kla.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:24",
            "last_seen_utc": "2026-08-28 22:49:53",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,honeypot,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886476": [
        {
            "ioc_value": "http://176.65.139.196/bins/parm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:23",
            "last_seen_utc": "2026-08-28 22:49:53",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886477": [
        {
            "ioc_value": "http://176.65.139.196/bins/parm5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:23",
            "last_seen_utc": "2026-08-28 22:49:54",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886478": [
        {
            "ioc_value": "http://176.65.139.196/bins/parm6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:22",
            "last_seen_utc": "2026-08-28 22:49:54",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886479": [
        {
            "ioc_value": "http://176.65.139.196/bins/parm7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:22",
            "last_seen_utc": "2026-08-28 22:49:55",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886480": [
        {
            "ioc_value": "http://176.65.139.196/bins/pm68k",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:21",
            "last_seen_utc": "2026-08-28 22:49:56",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,m68k",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886481": [
        {
            "ioc_value": "http://176.65.139.196/bins/pmips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:20",
            "last_seen_utc": "2026-08-28 22:49:56",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,mips",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886482": [
        {
            "ioc_value": "http://176.65.139.196/bins/pmpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:20",
            "last_seen_utc": "2026-08-28 22:49:57",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,mipsel",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886483": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.arc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:20",
            "last_seen_utc": "2026-08-28 22:49:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886484": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.armv4l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:19",
            "last_seen_utc": "2026-08-28 22:49:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886485": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.armv5l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:19",
            "last_seen_utc": "2026-08-28 22:49:59",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886486": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.armv6l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:19",
            "last_seen_utc": "2026-08-28 22:49:59",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886487": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.armv7l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:18",
            "last_seen_utc": "2026-08-28 22:50:00",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886488": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.i486",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:18",
            "last_seen_utc": "2026-08-28 22:50:01",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,x86",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886489": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.m68k",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:18",
            "last_seen_utc": "2026-08-28 22:50:02",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,m68k",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886491": [
        {
            "ioc_value": "http://198.144.179.82:80/1.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:17",
            "last_seen_utc": "2026-08-28 22:50:06",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,honeypot,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886490": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:16",
            "last_seen_utc": "2026-08-28 22:50:04",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,mips",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886493": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.sh4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,sh4",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886494": [
        {
            "ioc_value": "http://176.65.139.202:80/tplinkrouter.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886495": [
        {
            "ioc_value": "http://176.65.139.196/bins/px86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,x86",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886496": [
        {
            "ioc_value": "http://176.65.139.196/bins/psh4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,sh4",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886497": [
        {
            "ioc_value": "http://176.65.139.202/a.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886499": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.x86_64",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,x86-64",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886500": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.mipsel",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,mipsel",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886501": [
        {
            "ioc_value": "http://176.65.139.202:80/telnet.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886502": [
        {
            "ioc_value": "http://176.65.139.196/bins/pppc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,ppc",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886503": [
        {
            "ioc_value": "http://176.65.139.202/totolink.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886504": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.sparc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:49:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,sparc",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886326": [
        {
            "ioc_value": "87.120.187.72:8433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified APK 001",
            "first_seen_utc": "2026-08-25 06:49:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/713165d12b900b518e26cbab760b69e8234e312703e4a88f9a37b0ccc2b66dee",
            "tags": "Android,banker,c2,InfoStealer,Mamont,SMS-stealer,SpyAgent",
            "anonymous": 0,
            "reporter": "mikhailyuminov"
        }
    ],
    "1886370": [
        {
            "ioc_value": "kolpa.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 06:49:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886371": [
        {
            "ioc_value": "https://kolpa.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 06:49:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886372": [
        {
            "ioc_value": "https://kolpa.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 06:49:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886373": [
        {
            "ioc_value": "https://kolpa.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 06:49:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886374": [
        {
            "ioc_value": "https://kolpa.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 06:49:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886375": [
        {
            "ioc_value": "https://kolpa.lol/babayla/zor/yarisirlar",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-25 06:49:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886468": [
        {
            "ioc_value": "rwj46i7as3h4.en-heroup.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 06:49:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clearfake",
            "anonymous": 0,
            "reporter": "Ninj4Pri3st"
        }
    ],
    "1886361": [
        {
            "ioc_value": "159.89.24.55:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-25 06:48:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886492": [
        {
            "ioc_value": "168.144.188.31:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-25 06:48:58",
            "last_seen_utc": "2026-08-26 15:23:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886505": [
        {
            "ioc_value": "http://176.65.139.202/daredevil.powerpc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:48:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,ppc",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886526": [
        {
            "ioc_value": "64.227.187.82:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-25 06:48:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886531": [
        {
            "ioc_value": "http://36.255.44.120:59604/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 06:48:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.44.120",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886532": [
        {
            "ioc_value": "https://heroic-daffodil-432a9c.netlify.app/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:48:54",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "phishing,tg.pe",
            "anonymous": 0,
            "reporter": "tgpe"
        }
    ],
    "1886534": [
        {
            "ioc_value": "duroelectric.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:48:54",
            "last_seen_utc": "2026-08-26 14:59:43",
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886535": [
        {
            "ioc_value": "uptimekmart.checkpointsystems.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:48:53",
            "last_seen_utc": null,
            "confidence_level": 70,
            "is_compromised": false,
            "reference": null,
            "tags": "ct-pivot,honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1886538": [
        {
            "ioc_value": "160.25.140.133:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-25 06:48:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "152742,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1886545": [
        {
            "ioc_value": "91.92.47.220:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886546": [
        {
            "ioc_value": "110.76.145.222:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886547": [
        {
            "ioc_value": "185.212.129.2:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886548": [
        {
            "ioc_value": "38.45.65.144:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886549": [
        {
            "ioc_value": "37.152.188.110:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886550": [
        {
            "ioc_value": "171.244.199.198:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886551": [
        {
            "ioc_value": "36.37.122.175:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886552": [
        {
            "ioc_value": "43.108.83.139:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886553": [
        {
            "ioc_value": "5.42.125.156:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886554": [
        {
            "ioc_value": "169.58.219.255:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886556": [
        {
            "ioc_value": "158.69.210.7:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886555": [
        {
            "ioc_value": "185.164.72.145:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886557": [
        {
            "ioc_value": "217.219.165.57:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886558": [
        {
            "ioc_value": "185.121.13.242:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886559": [
        {
            "ioc_value": "188.92.182.10:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886560": [
        {
            "ioc_value": "51.255.28.210:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886561": [
        {
            "ioc_value": "37.97.131.30:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886562": [
        {
            "ioc_value": "103.253.244.145:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886563": [
        {
            "ioc_value": "130.185.123.230:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886565": [
        {
            "ioc_value": "176.65.58.214:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886564": [
        {
            "ioc_value": "88.99.73.187:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886566": [
        {
            "ioc_value": "193.233.18.68:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886567": [
        {
            "ioc_value": "194.87.251.137:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886568": [
        {
            "ioc_value": "161.248.123.78:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886569": [
        {
            "ioc_value": "110.76.145.218:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886570": [
        {
            "ioc_value": "138.2.105.161:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886571": [
        {
            "ioc_value": "194.163.135.199:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886572": [
        {
            "ioc_value": "46.4.162.51:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886573": [
        {
            "ioc_value": "43.224.226.119:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886574": [
        {
            "ioc_value": "103.117.137.106:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886575": [
        {
            "ioc_value": "51.75.182.110:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886576": [
        {
            "ioc_value": "189.24.64.138:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886577": [
        {
            "ioc_value": "194.35.227.68:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886578": [
        {
            "ioc_value": "185.81.99.73:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886579": [
        {
            "ioc_value": "51.75.182.116:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886580": [
        {
            "ioc_value": "5.35.78.169:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886581": [
        {
            "ioc_value": "154.86.30.133:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886582": [
        {
            "ioc_value": "95.164.90.16:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886583": [
        {
            "ioc_value": "194.59.171.247:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886586": [
        {
            "ioc_value": "109.205.58.43:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886584": [
        {
            "ioc_value": "45.147.97.142:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886585": [
        {
            "ioc_value": "2.27.193.132:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886587": [
        {
            "ioc_value": "8.209.69.149:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886590": [
        {
            "ioc_value": "153.80.241.71:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886588": [
        {
            "ioc_value": "177.201.224.10:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886589": [
        {
            "ioc_value": "169.58.182.5:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886591": [
        {
            "ioc_value": "185.81.99.151:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886592": [
        {
            "ioc_value": "193.168.147.81:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886593": [
        {
            "ioc_value": "93.39.251.242:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886594": [
        {
            "ioc_value": "188.40.198.241:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886595": [
        {
            "ioc_value": "193.42.115.137:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886596": [
        {
            "ioc_value": "151.242.187.122:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886597": [
        {
            "ioc_value": "169.58.176.232:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886598": [
        {
            "ioc_value": "176.118.193.229:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886599": [
        {
            "ioc_value": "36.133.84.116:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.raspberrypibotnet",
            "malware_alias": null,
            "malware_printable": "RaspberryPiBotnet",
            "first_seen_utc": "2026-08-25 06:48:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/browse/tag/ElPatrono1337/",
            "tags": "botnet,c2,cryptomining,diicot,ELPatrono1337,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "shadowbyte1"
        }
    ],
    "1886605": [
        {
            "ioc_value": "64.227.109.19:3452",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 06:48:09",
            "last_seen_utc": "2026-08-25 17:37:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "bfb0a3f6f1cf192aeb7a1b73b3d77954,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886622": [
        {
            "ioc_value": "hut.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 06:48:08",
            "last_seen_utc": "2026-08-25 03:57:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1886662": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Patricia-38674/ret74kfd98j/nam1o0tych",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 06:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ClickFix,dropper,jsDelivr,powershell",
            "anonymous": 0,
            "reporter": "frankjuanir"
        }
    ],
    "1886657": [
        {
            "ioc_value": "http://153.117.46.172:51188/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 06:48:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.46.172",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886658": [
        {
            "ioc_value": "http://39.86.251.237:54344/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-25 06:48:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.86.251.237",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1886663": [
        {
            "ioc_value": "dock.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 06:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1886666": [
        {
            "ioc_value": "senaby.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 06:47:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886665": [
        {
            "ioc_value": "dock.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 06:40:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886664": [
        {
            "ioc_value": "lxexx80613.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 06:40:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886661": [
        {
            "ioc_value": "qltbe46571.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 06:26:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886660": [
        {
            "ioc_value": "vzlq1vvb.en-thetrumptoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886659": [
        {
            "ioc_value": "en-thetrumptoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 06:23:53",
            "last_seen_utc": "2026-08-25 06:24:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886656": [
        {
            "ioc_value": "80.96.109.204:2021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-25 06:10:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/baa7ed37ec33405614a09621cfdf4fdb9d50c7ca752d18d6b1ae184cd5319b72/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886655": [
        {
            "ioc_value": "paxatida.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 06:05:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886654": [
        {
            "ioc_value": "gaz.bgp.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 06:05:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886653": [
        {
            "ioc_value": "91.92.240.88:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-25 06:05:07",
            "last_seen_utc": "2026-08-26 07:55:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886651": [
        {
            "ioc_value": "45.8.46.122:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886652": [
        {
            "ioc_value": "1.117.77.166:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-25 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886650": [
        {
            "ioc_value": "gecakiqa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 05:38:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886649": [
        {
            "ioc_value": "07vl5r6o.en-us-en-blinzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 05:26:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886648": [
        {
            "ioc_value": "en-us-en-blinzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 05:22:27",
            "last_seen_utc": "2026-08-25 05:23:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886647": [
        {
            "ioc_value": "8zhtnn1gdi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 05:19:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886646": [
        {
            "ioc_value": "vjher36j.en-us-en-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 05:08:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886643": [
        {
            "ioc_value": "eyestyle.co.nz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:08",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886644": [
        {
            "ioc_value": "fourapostlesrealty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:08",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886645": [
        {
            "ioc_value": "councilforeconed.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886640": [
        {
            "ioc_value": "balloonfest.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:07",
            "last_seen_utc": "2026-08-27 05:28:29",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886641": [
        {
            "ioc_value": "vanlootechnics.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:07",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886642": [
        {
            "ioc_value": "sinceriseniorliving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:07",
            "last_seen_utc": "2026-08-25 16:30:20",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886639": [
        {
            "ioc_value": "dev.rushtaxresolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:06",
            "last_seen_utc": "2026-08-27 05:28:28",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886633": [
        {
            "ioc_value": "a3roofingandpropertyspecialists.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:05",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886634": [
        {
            "ioc_value": "prorealtyusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:05",
            "last_seen_utc": "2026-08-27 05:28:30",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886635": [
        {
            "ioc_value": "corporatecustomz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:05",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886636": [
        {
            "ioc_value": "marqetlab.summitthex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:05",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886637": [
        {
            "ioc_value": "mantracker.stinntech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:05",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886638": [
        {
            "ioc_value": "mail.quwatt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 05:06:05",
            "last_seen_utc": "2026-08-26 21:48:06",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix,etherhide",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1886632": [
        {
            "ioc_value": "donukole.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 05:04:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886631": [
        {
            "ioc_value": "en-us-en-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 05:03:48",
            "last_seen_utc": "2026-08-25 05:04:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886630": [
        {
            "ioc_value": "mash-services.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 05:03:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886629": [
        {
            "ioc_value": "qkkxe18116.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 04:52:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886628": [
        {
            "ioc_value": "8834fellow.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 04:44:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886627": [
        {
            "ioc_value": "hut.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-25 04:36:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886626": [
        {
            "ioc_value": "wkdcl47413.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 04:31:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886625": [
        {
            "ioc_value": "pazkew51jq.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 04:19:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886624": [
        {
            "ioc_value": "124.221.46.243:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886623": [
        {
            "ioc_value": "1.13.179.86:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886621": [
        {
            "ioc_value": "dev.blendup.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-25 03:51:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886620": [
        {
            "ioc_value": "xekaty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 03:48:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886619": [
        {
            "ioc_value": "lawime.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 03:32:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886618": [
        {
            "ioc_value": "yzqkbsps.en-us-en-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 03:22:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886617": [
        {
            "ioc_value": "en-us-en-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 03:21:38",
            "last_seen_utc": "2026-08-25 03:23:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886616": [
        {
            "ioc_value": "en-us-eloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 03:21:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886615": [
        {
            "ioc_value": "209.250.249.153:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-25 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886614": [
        {
            "ioc_value": "shpygvzbgi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 02:57:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886613": [
        {
            "ioc_value": "just9971.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 02:51:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886612": [
        {
            "ioc_value": "rjtynrzbkd.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 02:47:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886611": [
        {
            "ioc_value": "670oriana.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 02:44:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886610": [
        {
            "ioc_value": "http://shhsift.click:7647/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 02:36:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886609": [
        {
            "ioc_value": "http://zonxh.shop:7728/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 02:36:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886608": [
        {
            "ioc_value": "pegetoli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 02:33:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886607": [
        {
            "ioc_value": "sisdias.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 02:28:18",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886606": [
        {
            "ioc_value": "http://niskioglasi.rs/test2/Panel/fre.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-08-25 02:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Loki",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886604": [
        {
            "ioc_value": "q8xbauhe.en-us-en-genesisrevival.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 02:22:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886603": [
        {
            "ioc_value": "en-us-en-genesisrevival.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 02:22:08",
            "last_seen_utc": "2026-08-25 02:22:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886602": [
        {
            "ioc_value": "d5mkg5ct.en-prosta-fense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 02:16:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886601": [
        {
            "ioc_value": "en-prosta-fense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 02:13:07",
            "last_seen_utc": "2026-08-30 10:02:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "25August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886600": [
        {
            "ioc_value": "hukydole.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 02:09:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886544": [
        {
            "ioc_value": "pxxit81480.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 01:35:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886543": [
        {
            "ioc_value": "http://shhsift.click:7647/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 01:33:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886542": [
        {
            "ioc_value": "http://zonxh.shop:7728/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-25 01:33:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886541": [
        {
            "ioc_value": "qkken40c6h.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 01:28:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886540": [
        {
            "ioc_value": "3bjguds4.eng--glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 01:20:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886539": [
        {
            "ioc_value": "corditemporary.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 01:06:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886537": [
        {
            "ioc_value": "lajipehe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 00:52:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886536": [
        {
            "ioc_value": "hakysu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 00:47:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886533": [
        {
            "ioc_value": "bw68ygdz1s.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 00:36:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886530": [
        {
            "ioc_value": "2rw7p1f0.en-us-en-bloodarmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 00:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886529": [
        {
            "ioc_value": "zujanahy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-25 00:04:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886528": [
        {
            "ioc_value": "en-us-en-bloodarmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-25 00:03:17",
            "last_seen_utc": "2026-08-25 00:04:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886527": [
        {
            "ioc_value": "tehifafo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 23:58:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886524": [
        {
            "ioc_value": "ibi.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 23:45:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886525": [
        {
            "ioc_value": "https://ibi.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 23:45:47",
            "last_seen_utc": "2026-09-01 03:38:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886522": [
        {
            "ioc_value": "http://bazadar.shop:5728/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 23:32:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886523": [
        {
            "ioc_value": "http://shhsift.click:7647/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 23:32:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886521": [
        {
            "ioc_value": "fydyvetu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 23:26:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886519": [
        {
            "ioc_value": "http://zonxh.shop:7728/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886520": [
        {
            "ioc_value": "http://zakuiru.shop:9048/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886518": [
        {
            "ioc_value": "p49oexcb.eng--geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 23:23:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886517": [
        {
            "ioc_value": "http://zonxh.shop:7728/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 23:21:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886515": [
        {
            "ioc_value": "nililaky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 23:04:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886514": [
        {
            "ioc_value": "https://giftcardbazaar.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/giftcardbazaar.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886506": [
        {
            "ioc_value": "https://productstudio.me/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/productstudio.me",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886507": [
        {
            "ioc_value": "https://zoechementerprise.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zoechementerprise.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886508": [
        {
            "ioc_value": "https://oraclepacificltd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/oraclepacificltd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886509": [
        {
            "ioc_value": "https://agenciaarco.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/agenciaarco.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886510": [
        {
            "ioc_value": "https://smec.group/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/smec.group",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886511": [
        {
            "ioc_value": "https://agenciadetraduccion.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/agenciadetraduccion.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886512": [
        {
            "ioc_value": "https://wingji.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wingji.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886513": [
        {
            "ioc_value": "https://hashtagshopbd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 23:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hashtagshopbd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886498": [
        {
            "ioc_value": "hixoqoke.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 22:54:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886474": [
        {
            "ioc_value": "jcw9npm85m-6fb.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 22:48:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886473": [
        {
            "ioc_value": "http://zakuiru.shop:9048/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:45:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886471": [
        {
            "ioc_value": "garnetuniversal.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 22:42:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886470": [
        {
            "ioc_value": "http://vztax.shop:9820/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:40:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886466": [
        {
            "ioc_value": "http://ciffice.biz:7720/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:24:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886467": [
        {
            "ioc_value": "http://shhsift.click:7647/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:24:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886464": [
        {
            "ioc_value": "pycokoco.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 22:21:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886463": [
        {
            "ioc_value": "http://zonxh.shop:7728/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:19:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886460": [
        {
            "ioc_value": "http://nopxs.shop:8839/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:14:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886461": [
        {
            "ioc_value": "http://shhsift.click:7647/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:14:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886457": [
        {
            "ioc_value": "http://zonxh.shop:7728/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:14:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886458": [
        {
            "ioc_value": "http://shhsift.click:7647/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:14:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886459": [
        {
            "ioc_value": "http://zakuiru.shop:9048/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:14:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886456": [
        {
            "ioc_value": "0wfvp89r.en-morningfatmelter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 22:04:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886455": [
        {
            "ioc_value": "http://shhsift.click:7647/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:04:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886454": [
        {
            "ioc_value": "http://markext.shop:4627/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:04:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886452": [
        {
            "ioc_value": "http://saflite.click:3452/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:04:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886453": [
        {
            "ioc_value": "http://mrlketo.shop:8932/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 22:04:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886449": [
        {
            "ioc_value": "vault.rungarden.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-24 21:58:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886450": [
        {
            "ioc_value": "http://zonxh.shop:7728/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:58:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886448": [
        {
            "ioc_value": "menupavy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 21:53:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886447": [
        {
            "ioc_value": "http://shhsift.click:7647/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:48:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886446": [
        {
            "ioc_value": "http://zonxh.shop:7728/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:48:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886443": [
        {
            "ioc_value": "http://puaglse.click:8954/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:42:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886444": [
        {
            "ioc_value": "http://shhsift.click:7647/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:42:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886442": [
        {
            "ioc_value": "wezipogo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 21:40:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886441": [
        {
            "ioc_value": "alxeeb3ypf.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 21:39:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886438": [
        {
            "ioc_value": "http://smareach.click:6534/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:36:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886439": [
        {
            "ioc_value": "http://smareach.click:6534/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:36:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886437": [
        {
            "ioc_value": "http://smareach.click:6534/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:36:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886434": [
        {
            "ioc_value": "http://zonxh.shop:7728/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:31:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886435": [
        {
            "ioc_value": "http://shhsift.click:7647/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:31:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886436": [
        {
            "ioc_value": "http://zakuiru.shop:9048/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:31:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886433": [
        {
            "ioc_value": "http://smareach.click:6534/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:31:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886432": [
        {
            "ioc_value": "http://risadxe.click:8954/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 21:26:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886431": [
        {
            "ioc_value": "27e13kk2.enus-enerflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 21:23:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886430": [
        {
            "ioc_value": "vfjaj21y.en-us-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 21:22:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886428": [
        {
            "ioc_value": "fantasticeilis.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 21:18:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886427": [
        {
            "ioc_value": "srfmd83334.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 21:01:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886426": [
        {
            "ioc_value": "cd9uxa48.en-usa-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 20:56:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886425": [
        {
            "ioc_value": "sejicijy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 20:49:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886424": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/fd64ur98kg/ret74mxk6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 20:49:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886423": [
        {
            "ioc_value": "http://xightne.click:7242/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:49:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886422": [
        {
            "ioc_value": "zopacidy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 20:45:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886421": [
        {
            "ioc_value": "eng-eng--glucore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 20:43:43",
            "last_seen_utc": "2026-08-25 23:06:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "24August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886420": [
        {
            "ioc_value": "a04di4u9e4.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 20:43:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886419": [
        {
            "ioc_value": "4789cyan.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 20:40:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886418": [
        {
            "ioc_value": "http://zonxh.shop:7728/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:23:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886417": [
        {
            "ioc_value": "http://zonxh.shop:7728/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:23:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886415": [
        {
            "ioc_value": "http://puaglse.click:8954/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:23:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886416": [
        {
            "ioc_value": "http://kupzovo.shop:7567/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:23:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886414": [
        {
            "ioc_value": "http://xightne.click:7242/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:18:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886413": [
        {
            "ioc_value": "http://zonxh.shop:7728/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:18:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886412": [
        {
            "ioc_value": "http://xightne.click:7242/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:12:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886411": [
        {
            "ioc_value": "en-hero-up.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 20:11:37",
            "last_seen_utc": "2026-08-29 15:40:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "24August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886410": [
        {
            "ioc_value": "capywu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 20:08:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886409": [
        {
            "ioc_value": "www.integratedpayroll.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 20:07:56",
            "last_seen_utc": "2026-08-25 09:59:07",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886407": [
        {
            "ioc_value": "http://xightne.click:7242/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:07:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886408": [
        {
            "ioc_value": "http://vexdico.shop:8539/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 20:07:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886405": [
        {
            "ioc_value": "193.112.28.215:15443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 20:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886406": [
        {
            "ioc_value": "38.207.178.223:50001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 20:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886403": [
        {
            "ioc_value": "79.227.124.242:4785",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-24 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886404": [
        {
            "ioc_value": "102.117.163.61:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886402": [
        {
            "ioc_value": "91.107.211.179:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 20:05:05",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886400": [
        {
            "ioc_value": "airsun.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:57:55",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886401": [
        {
            "ioc_value": "upgrade-saudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:57:55",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886398": [
        {
            "ioc_value": "http://xightne.click:7242/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:51:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886399": [
        {
            "ioc_value": "http://zakuiru.shop:9048/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:51:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886397": [
        {
            "ioc_value": "http://vcava.shop:2958/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:46:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886396": [
        {
            "ioc_value": "http://johtyin.click:7548",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:41:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886395": [
        {
            "ioc_value": "http://kupzovo.shop:7567/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:36:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886394": [
        {
            "ioc_value": "minycusa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 19:33:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886393": [
        {
            "ioc_value": "hadybe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 19:26:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886392": [
        {
            "ioc_value": "cw5ukx6n.en-us-eng-geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886391": [
        {
            "ioc_value": "http://xightne.click:7242/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:20:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886390": [
        {
            "ioc_value": "en-us-eng-geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:18:44",
            "last_seen_utc": "2026-08-25 09:23:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "24August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886387": [
        {
            "ioc_value": "wyfeja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 19:05:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886386": [
        {
            "ioc_value": "klib6tlr.eng--xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:05:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886384": [
        {
            "ioc_value": "64.83.24.34:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886385": [
        {
            "ioc_value": "3.89.79.203:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886382": [
        {
            "ioc_value": "64.83.24.34:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 19:05:07",
            "last_seen_utc": "2026-08-25 08:51:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886383": [
        {
            "ioc_value": "64.83.24.34:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886381": [
        {
            "ioc_value": "129.28.125.175:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886380": [
        {
            "ioc_value": "eng--xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:02:53",
            "last_seen_utc": "2026-08-24 19:03:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886378": [
        {
            "ioc_value": "eva-talk-coach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:02:15",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886379": [
        {
            "ioc_value": "hors-pistes.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 19:02:15",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886376": [
        {
            "ioc_value": "http://zakuiru.shop:9048/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 19:00:43",
            "last_seen_utc": "2026-08-25 20:20:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f5b850be90148056aa4dcc36802479a73a2966a07e7e66562feeee013ed70de5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886368": [
        {
            "ioc_value": "https://hit.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 18:50:48",
            "last_seen_utc": "2026-09-01 03:39:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886367": [
        {
            "ioc_value": "hit.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 18:50:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886366": [
        {
            "ioc_value": "dyzyly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 18:42:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886364": [
        {
            "ioc_value": "http://zakuiru.shop:9048/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 18:37:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886365": [
        {
            "ioc_value": "http://kupzovo.shop:7567/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 18:37:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886363": [
        {
            "ioc_value": "vumineci.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 18:33:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886362": [
        {
            "ioc_value": "http://kupzovo.shop:7567/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 18:31:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1886360": [
        {
            "ioc_value": "zncom83746.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 18:28:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886359": [
        {
            "ioc_value": "207.57.123.57:2083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 18:19:38",
            "last_seen_utc": "2026-08-25 01:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886358": [
        {
            "ioc_value": "svnoh96128.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 18:09:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886348": [
        {
            "ioc_value": "154.92.5.37:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886349": [
        {
            "ioc_value": "155.94.144.168:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886350": [
        {
            "ioc_value": "8.152.218.153:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": "2026-08-29 10:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886351": [
        {
            "ioc_value": "34.92.225.25:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": "2026-08-27 02:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886352": [
        {
            "ioc_value": "42.51.32.56:44444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886353": [
        {
            "ioc_value": "64.118.147.88:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886354": [
        {
            "ioc_value": "156.248.73.83:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886355": [
        {
            "ioc_value": "198.44.46.122:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886356": [
        {
            "ioc_value": "151.243.229.224:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886357": [
        {
            "ioc_value": "8.211.146.92:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 18:06:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886347": [
        {
            "ioc_value": "9bfndx1c.eng--theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 17:53:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886346": [
        {
            "ioc_value": "lalacije.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 17:50:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886345": [
        {
            "ioc_value": "175.27.214.144:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 17:39:33",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886343": [
        {
            "ioc_value": "122.51.194.192:51337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 17:38:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886344": [
        {
            "ioc_value": "47.104.0.109:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 17:38:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886341": [
        {
            "ioc_value": "154.201.82.108:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-24 17:37:46",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886342": [
        {
            "ioc_value": "154.201.82.105:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-24 17:37:46",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1886339": [
        {
            "ioc_value": "6sqdvf188d.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 17:31:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886338": [
        {
            "ioc_value": "eng-en-us-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 17:19:27",
            "last_seen_utc": "2026-08-28 08:30:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "24August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886337": [
        {
            "ioc_value": "an818f37.en-us-en-theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 17:18:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886336": [
        {
            "ioc_value": "en-us-en-theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 17:18:02",
            "last_seen_utc": "2026-08-24 17:18:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886334": [
        {
            "ioc_value": "werry89588.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 16:53:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886333": [
        {
            "ioc_value": "ymrvv01510.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 16:52:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886332": [
        {
            "ioc_value": "9jonof8og1.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 16:34:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886331": [
        {
            "ioc_value": "juvaka.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 16:26:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886330": [
        {
            "ioc_value": "baharilo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 16:06:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886329": [
        {
            "ioc_value": "6p6vrq3y23.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:59:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886327": [
        {
            "ioc_value": "peanutlodge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 15:40:59",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886325": [
        {
            "ioc_value": "focyzuzi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:38:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886311": [
        {
            "ioc_value": "aqua9959.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:38:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886324": [
        {
            "ioc_value": "z3u99l6p.en-us-en-nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 15:20:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886307": [
        {
            "ioc_value": "ciliwaja.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:20:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886308": [
        {
            "ioc_value": "zavyvolu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:20:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886309": [
        {
            "ioc_value": "pygufi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:20:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886310": [
        {
            "ioc_value": "eqbfv50999.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 15:20:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886314": [
        {
            "ioc_value": "palm.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 15:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1886317": [
        {
            "ioc_value": "bechteltr.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-24 15:20:04",
            "last_seen_utc": "2026-08-25 09:06:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117151120546207492",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1886318": [
        {
            "ioc_value": "https://bechteltr.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-24 15:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117151120546207492",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1886319": [
        {
            "ioc_value": "https://bechteltr.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-24 15:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117151120546207492",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1886320": [
        {
            "ioc_value": "https://bechteltr.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-24 15:20:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117151120546207492",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1886323": [
        {
            "ioc_value": "j8ot89nw.wrda.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 15:20:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886322": [
        {
            "ioc_value": "en-us-en-nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 15:17:38",
            "last_seen_utc": "2026-08-24 15:18:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886321": [
        {
            "ioc_value": "palm.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 15:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886316": [
        {
            "ioc_value": "http://zakuiru.shop:9048/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 15:10:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e0052883762cdd3cec6ab5ebbdc0f34eb3a718d67b1a55b2717d9ae6b28944e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886315": [
        {
            "ioc_value": "http://shhsift.click:7647/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 15:10:21",
            "last_seen_utc": "2026-08-25 20:20:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e0052883762cdd3cec6ab5ebbdc0f34eb3a718d67b1a55b2717d9ae6b28944e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886312": [
        {
            "ioc_value": "155.117.155.141:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 15:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886305": [
        {
            "ioc_value": "cf-api.indianadforum.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-24 14:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117150893089486776",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1886306": [
        {
            "ioc_value": "suvymuto.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 14:20:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886304": [
        {
            "ioc_value": "https://ggk.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 14:10:48",
            "last_seen_utc": "2026-09-01 03:40:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886303": [
        {
            "ioc_value": "ggk.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 14:10:47",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886302": [
        {
            "ioc_value": "y07kwey1.eng-us-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 14:05:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886300": [
        {
            "ioc_value": "155.117.155.141:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886301": [
        {
            "ioc_value": "155.117.155.141:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886299": [
        {
            "ioc_value": "155.117.155.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886293": [
        {
            "ioc_value": "hvocz79405.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 14:03:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886296": [
        {
            "ioc_value": "fomezy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 14:03:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886297": [
        {
            "ioc_value": "https://185.167.99.44",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 14:03:39",
            "last_seen_utc": "2026-08-25 18:00:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "adda751cfd98d4fa8c426318f05b631b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886298": [
        {
            "ioc_value": "eng-us-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 14:02:14",
            "last_seen_utc": "2026-08-24 14:02:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886295": [
        {
            "ioc_value": "http://smareach.click:6534/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 14:00:33",
            "last_seen_utc": "2026-08-24 21:42:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f1bb5a6451b387570a4fdaf71996bbebcf931e142123ac7f673bd0b37049c26c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886294": [
        {
            "ioc_value": "https://creditt.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 14:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/creditt.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886291": [
        {
            "ioc_value": "http://smareach.click:6534/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 13:45:27",
            "last_seen_utc": "2026-08-24 21:31:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7418da8244ca828455bf41fd20be45449600ee428e1b9926d17f8230cd759429/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886290": [
        {
            "ioc_value": "gc0jxdg1.eng--neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 13:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886288": [
        {
            "ioc_value": "http://smareach.click:6534/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 13:30:45",
            "last_seen_utc": "2026-08-24 21:26:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4ff863b60d5d5d4fb86764e6b6bb25677d2a3086c33fccc3f09e707937b8d4a9/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886287": [
        {
            "ioc_value": "207.180.248.154:6534",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 13:25:15",
            "last_seen_utc": "2026-08-24 14:00:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886281": [
        {
            "ioc_value": "94.154.32.157:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886282": [
        {
            "ioc_value": "94.183.151.89:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886283": [
        {
            "ioc_value": "94.249.230.167:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:58",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886284": [
        {
            "ioc_value": "94.249.230.167:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:58",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886285": [
        {
            "ioc_value": "95.217.196.165:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:58",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886286": [
        {
            "ioc_value": "95.31.217.8:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886271": [
        {
            "ioc_value": "91.92.241.175:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886272": [
        {
            "ioc_value": "91.92.42.223:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886273": [
        {
            "ioc_value": "91.92.42.50:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886274": [
        {
            "ioc_value": "92.119.165.248:24356",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886275": [
        {
            "ioc_value": "93.123.109.129:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886276": [
        {
            "ioc_value": "93.123.84.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886277": [
        {
            "ioc_value": "93.127.141.23:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886278": [
        {
            "ioc_value": "93.152.224.18:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886279": [
        {
            "ioc_value": "94.125.102.244:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886280": [
        {
            "ioc_value": "94.154.32.145:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:57",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886260": [
        {
            "ioc_value": "83.136.210.150:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886261": [
        {
            "ioc_value": "83.228.243.117:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886262": [
        {
            "ioc_value": "84.54.33.26:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886263": [
        {
            "ioc_value": "85.11.167.193:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886264": [
        {
            "ioc_value": "85.11.167.222:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886265": [
        {
            "ioc_value": "85.11.167.99:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886266": [
        {
            "ioc_value": "85.11.167.99:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886267": [
        {
            "ioc_value": "89.106.83.30:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886268": [
        {
            "ioc_value": "89.34.219.49:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886269": [
        {
            "ioc_value": "91.208.206.83:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": "2026-08-25 14:16:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886270": [
        {
            "ioc_value": "91.92.240.238:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886250": [
        {
            "ioc_value": "70.34.198.54:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886251": [
        {
            "ioc_value": "74.161.43.189:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886252": [
        {
            "ioc_value": "74.208.117.130:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886253": [
        {
            "ioc_value": "74.208.16.124:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886254": [
        {
            "ioc_value": "77.68.111.57:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886255": [
        {
            "ioc_value": "78.153.149.82:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886256": [
        {
            "ioc_value": "80.71.235.41:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886257": [
        {
            "ioc_value": "80.71.235.62:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886258": [
        {
            "ioc_value": "80.99.42.73:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886259": [
        {
            "ioc_value": "82.165.56.219:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886240": [
        {
            "ioc_value": "51.89.166.88:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886241": [
        {
            "ioc_value": "5.230.201.108:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886242": [
        {
            "ioc_value": "54.38.153.252:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886243": [
        {
            "ioc_value": "62.182.80.175:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886244": [
        {
            "ioc_value": "62.60.156.163:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886245": [
        {
            "ioc_value": "64.89.160.20:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886246": [
        {
            "ioc_value": "64.89.160.20:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886247": [
        {
            "ioc_value": "66.154.103.144:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": "2026-08-25 14:16:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886248": [
        {
            "ioc_value": "66.78.40.121:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886249": [
        {
            "ioc_value": "66.78.40.166:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886231": [
        {
            "ioc_value": "45.94.31.227:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886232": [
        {
            "ioc_value": "45.94.31.68:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886233": [
        {
            "ioc_value": "45.94.31.71:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886234": [
        {
            "ioc_value": "46.151.182.152:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886235": [
        {
            "ioc_value": "46.224.18.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886236": [
        {
            "ioc_value": "46.224.18.6:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886237": [
        {
            "ioc_value": "50.114.179.146:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886238": [
        {
            "ioc_value": "51.68.208.43:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886239": [
        {
            "ioc_value": "51.83.19.169:2001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:53",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886222": [
        {
            "ioc_value": "45.137.20.129:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886223": [
        {
            "ioc_value": "45.141.116.254:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886224": [
        {
            "ioc_value": "45.151.62.7:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886225": [
        {
            "ioc_value": "45.158.8.213:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886226": [
        {
            "ioc_value": "45.194.66.182:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886227": [
        {
            "ioc_value": "45.76.20.123:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886228": [
        {
            "ioc_value": "45.86.86.81:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886229": [
        {
            "ioc_value": "45.90.98.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886230": [
        {
            "ioc_value": "45.90.98.139:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:52",
            "last_seen_utc": "2026-08-25 14:16:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886210": [
        {
            "ioc_value": "2.26.123.82:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": "2026-08-25 14:16:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886211": [
        {
            "ioc_value": "23.134.124.113:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886212": [
        {
            "ioc_value": "23.95.227.13:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886213": [
        {
            "ioc_value": "2.59.135.182:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": "2026-08-25 14:16:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886214": [
        {
            "ioc_value": "31.56.209.100:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886215": [
        {
            "ioc_value": "31.57.219.155:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886216": [
        {
            "ioc_value": "31.76.30.236:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886217": [
        {
            "ioc_value": "34.57.183.213:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886218": [
        {
            "ioc_value": "36.255.97.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886219": [
        {
            "ioc_value": "37.220.86.126:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886220": [
        {
            "ioc_value": "41.216.188.11:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886221": [
        {
            "ioc_value": "45.130.147.194:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886199": [
        {
            "ioc_value": "209.99.187.36:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886200": [
        {
            "ioc_value": "209.99.190.212:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886201": [
        {
            "ioc_value": "212.11.64.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": "2026-08-25 14:16:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886202": [
        {
            "ioc_value": "212.15.49.149:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886203": [
        {
            "ioc_value": "212.227.14.90:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886204": [
        {
            "ioc_value": "213.165.51.42:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886205": [
        {
            "ioc_value": "217.156.66.189:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886206": [
        {
            "ioc_value": "217.217.97.122:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886207": [
        {
            "ioc_value": "2.24.131.42:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886208": [
        {
            "ioc_value": "2.26.121.28:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886209": [
        {
            "ioc_value": "2.26.123.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:50",
            "last_seen_utc": "2026-08-25 14:16:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886188": [
        {
            "ioc_value": "193.233.82.121:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886189": [
        {
            "ioc_value": "193.26.115.59:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": "2026-08-25 14:16:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886190": [
        {
            "ioc_value": "196.199.55.26:27415",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886191": [
        {
            "ioc_value": "196.199.55.26:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886192": [
        {
            "ioc_value": "196.242.10.238:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886193": [
        {
            "ioc_value": "196.242.10.238:65211",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886194": [
        {
            "ioc_value": "203.159.90.208:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886195": [
        {
            "ioc_value": "203.159.90.69:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886196": [
        {
            "ioc_value": "203.159.90.80:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": "2026-08-25 14:16:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886197": [
        {
            "ioc_value": "209.38.132.165:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886198": [
        {
            "ioc_value": "209.46.126.251:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886178": [
        {
            "ioc_value": "185.172.65.33:42143",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886179": [
        {
            "ioc_value": "185.254.99.58:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": "2026-08-25 14:16:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886180": [
        {
            "ioc_value": "185.62.56.207:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": "2026-08-25 14:16:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886181": [
        {
            "ioc_value": "190.102.42.165:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886182": [
        {
            "ioc_value": "192.109.200.22:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": "2026-08-25 14:16:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886183": [
        {
            "ioc_value": "192.121.82.27:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886184": [
        {
            "ioc_value": "192.166.82.131:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886185": [
        {
            "ioc_value": "192.3.233.69:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886186": [
        {
            "ioc_value": "193.221.200.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886187": [
        {
            "ioc_value": "193.221.200.198:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886169": [
        {
            "ioc_value": "165.231.215.5:44569",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886170": [
        {
            "ioc_value": "167.71.242.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886171": [
        {
            "ioc_value": "168.121.55.85:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886172": [
        {
            "ioc_value": "172.96.137.123:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886173": [
        {
            "ioc_value": "176.96.138.70:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886174": [
        {
            "ioc_value": "179.175.135.235:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886175": [
        {
            "ioc_value": "179.61.227.46:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886176": [
        {
            "ioc_value": "185.144.70.31:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886177": [
        {
            "ioc_value": "185.144.70.31:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:47",
            "last_seen_utc": "2026-08-25 14:16:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886158": [
        {
            "ioc_value": "150.241.230.79:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886159": [
        {
            "ioc_value": "150.241.70.38:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886160": [
        {
            "ioc_value": "150.40.117.31:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886161": [
        {
            "ioc_value": "154.201.68.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886162": [
        {
            "ioc_value": "154.222.16.160:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886163": [
        {
            "ioc_value": "157.245.34.109:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886164": [
        {
            "ioc_value": "158.173.1.148:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886165": [
        {
            "ioc_value": "158.94.209.223:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886166": [
        {
            "ioc_value": "158.94.211.94:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886167": [
        {
            "ioc_value": "165.231.215.5:16065",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886168": [
        {
            "ioc_value": "165.231.215.5:34537",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886148": [
        {
            "ioc_value": "136.0.213.106:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886149": [
        {
            "ioc_value": "138.124.76.56:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886150": [
        {
            "ioc_value": "138.124.97.94:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886151": [
        {
            "ioc_value": "138.2.159.134:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886152": [
        {
            "ioc_value": "142.93.4.32:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886153": [
        {
            "ioc_value": "143.20.99.86:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886154": [
        {
            "ioc_value": "144.202.73.219:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886155": [
        {
            "ioc_value": "144.202.73.219:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886156": [
        {
            "ioc_value": "144.31.234.241:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886157": [
        {
            "ioc_value": "150.241.108.237:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:45",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886139": [
        {
            "ioc_value": "103.106.229.177:2725",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886140": [
        {
            "ioc_value": "103.160.59.59:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886141": [
        {
            "ioc_value": "103.214.69.210:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886142": [
        {
            "ioc_value": "104.129.12.113:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": "2026-08-25 14:16:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886143": [
        {
            "ioc_value": "104.197.0.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": "2026-08-25 14:16:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886144": [
        {
            "ioc_value": "104.197.0.198:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886145": [
        {
            "ioc_value": "107.175.115.120:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886146": [
        {
            "ioc_value": "108.165.233.169:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886147": [
        {
            "ioc_value": "130.254.47.241:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886138": [
        {
            "ioc_value": "102.220.160.134:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-24 13:22:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886137": [
        {
            "ioc_value": "4oeeg3rf.en-us-en-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 13:19:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886136": [
        {
            "ioc_value": "en-us-en-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 13:17:02",
            "last_seen_utc": "2026-08-24 13:17:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885993": [
        {
            "ioc_value": "104.255.228.252:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-24 13:11:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885994": [
        {
            "ioc_value": "178.16.54.229:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-24 13:10:59",
            "last_seen_utc": "2026-08-27 07:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885995": [
        {
            "ioc_value": "194.59.31.108:8727",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-24 13:10:59",
            "last_seen_utc": "2026-08-26 04:05:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885996": [
        {
            "ioc_value": "nxxiy34127.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885998": [
        {
            "ioc_value": "vyhysule.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886004": [
        {
            "ioc_value": "weckhjldhl.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886020": [
        {
            "ioc_value": "fevaryxy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886024": [
        {
            "ioc_value": "flaii25020.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886031": [
        {
            "ioc_value": "https://verico-de-id.beer/api.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 13:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886032": [
        {
            "ioc_value": "hizula.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886033": [
        {
            "ioc_value": "nelonu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886034": [
        {
            "ioc_value": "pcemz68538.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886035": [
        {
            "ioc_value": "pnxup94682.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886058": [
        {
            "ioc_value": "mojuxeku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886062": [
        {
            "ioc_value": "f22a00d85ef32ea57af7e9a08f08dbc0c4b3a927e3d823945b619864c1b6e58c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 13:10:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,panchan,ssh-worm",
            "anonymous": 0,
            "reporter": "denis90711"
        }
    ],
    "1886083": [
        {
            "ioc_value": "batyv51489.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886088": [
        {
            "ioc_value": "tuzatepo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886107": [
        {
            "ioc_value": "jirohucu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886111": [
        {
            "ioc_value": "jyjodu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886112": [
        {
            "ioc_value": "ceqole.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886113": [
        {
            "ioc_value": "judijo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886114": [
        {
            "ioc_value": "zafaku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886118": [
        {
            "ioc_value": "167.99.194.254:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 13:10:47",
            "last_seen_utc": "2026-08-30 05:46:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1886128": [
        {
            "ioc_value": "fosame.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886129": [
        {
            "ioc_value": "cup.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 13:10:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1886135": [
        {
            "ioc_value": "ytxed92283.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 13:10:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1886133": [
        {
            "ioc_value": "cup.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 13:05:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886132": [
        {
            "ioc_value": "45.131.182.88:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-24 13:05:05",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886131": [
        {
            "ioc_value": "yarrowalcove.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-24 13:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1886130": [
        {
            "ioc_value": "https://yarrowalcove.net/session/login-template.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-24 13:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1886125": [
        {
            "ioc_value": "http://zakuiru.shop:9048/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:50:37",
            "last_seen_utc": "2026-08-24 21:26:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1a44bfbdd9f4bbca790207cdd75e4b263922178077d616e1905ae84d55815ea0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886124": [
        {
            "ioc_value": "http://shhsift.click:7647/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:50:33",
            "last_seen_utc": "2026-08-24 22:19:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9dba35a99fdb8ece94c944267dbfd1321101c47c650d41f94ecf7f9f283e9db1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886123": [
        {
            "ioc_value": "http://markext.shop:4627/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:50:29",
            "last_seen_utc": "2026-08-24 22:19:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9dba35a99fdb8ece94c944267dbfd1321101c47c650d41f94ecf7f9f283e9db1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886122": [
        {
            "ioc_value": "http://shhsift.click:7647/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:40:26",
            "last_seen_utc": "2026-08-24 22:09:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/79a4f6619793991c126900993a4ab516983a61ca6dddeee9f8eb4bdd3a434c5a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886121": [
        {
            "ioc_value": "http://shhsift.click:7647/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:40:24",
            "last_seen_utc": "2026-08-24 21:58:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6958097575474cb21149aa5e9c9dd80ed6b49c8588d963ec786caff6fac7087a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886120": [
        {
            "ioc_value": "173.212.242.81:4627",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:40:21",
            "last_seen_utc": "2026-08-24 12:50:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/79a4f6619793991c126900993a4ab516983a61ca6dddeee9f8eb4bdd3a434c5a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886119": [
        {
            "ioc_value": "http://markext.shop:4627/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:40:20",
            "last_seen_utc": "2026-08-24 22:09:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/79a4f6619793991c126900993a4ab516983a61ca6dddeee9f8eb4bdd3a434c5a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886117": [
        {
            "ioc_value": "http://zakuiru.shop:9048/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:35:26",
            "last_seen_utc": "2026-08-24 22:04:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c68b757774aa3ed96cfff4b2a3b5bbca511c17f2bc281ce9b17f49f6831fb4b1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886116": [
        {
            "ioc_value": "http://shhsift.click:7647/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:35:22",
            "last_seen_utc": "2026-08-24 22:04:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c68b757774aa3ed96cfff4b2a3b5bbca511c17f2bc281ce9b17f49f6831fb4b1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886115": [
        {
            "ioc_value": "https://171388.eu9.myftpupload.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 12:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/171388.eu9.myftpupload.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886110": [
        {
            "ioc_value": "http://zonxh.shop:7728/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:05:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/482fa07dd6635918997e856854b64285e1a631f873cee83b9c7f92c78cb4caca/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886109": [
        {
            "ioc_value": "http://shhsift.click:7647/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 12:05:20",
            "last_seen_utc": "2026-08-27 19:09:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/482fa07dd6635918997e856854b64285e1a631f873cee83b9c7f92c78cb4caca/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886108": [
        {
            "ioc_value": "164.160.187.69:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886106": [
        {
            "ioc_value": "209.200.246.194:24563",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 11:47:51",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886100": [
        {
            "ioc_value": "https://gmpmachine.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gmpmachine.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886101": [
        {
            "ioc_value": "https://test.livingroomindia.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/test.livingroomindia.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886102": [
        {
            "ioc_value": "https://fabaagencies.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fabaagencies.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886103": [
        {
            "ioc_value": "https://muhammadshakirp.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/muhammadshakirp.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886104": [
        {
            "ioc_value": "https://www.sumutpost.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sumutpost.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886105": [
        {
            "ioc_value": "https://infoblockchain.ru/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/infoblockchain.ru",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886098": [
        {
            "ioc_value": "dor.123ful.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 11:25:47",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886099": [
        {
            "ioc_value": "https://dor.123ful.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 11:25:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1886097": [
        {
            "ioc_value": "http://vexdico.shop:8539/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 11:25:23",
            "last_seen_utc": "2026-08-24 22:04:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5e12c7f4822f67723eaed1c3ded4fc8e94e576fed316a2b24b56e003bccb44e4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886096": [
        {
            "ioc_value": "http://luwerae.click:7748/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 11:25:19",
            "last_seen_utc": "2026-08-24 22:14:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5e12c7f4822f67723eaed1c3ded4fc8e94e576fed316a2b24b56e003bccb44e4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886095": [
        {
            "ioc_value": "z5rfxyfc.en-eng-geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 11:20:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886082": [
        {
            "ioc_value": "164.160.187.69:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886081": [
        {
            "ioc_value": "164.160.187.69:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-24 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886072": [
        {
            "ioc_value": "https://ridgelinefit.us/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ridgelinefit.us",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886063": [
        {
            "ioc_value": "https://roesforum.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/roesforum.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886064": [
        {
            "ioc_value": "https://tauruslines.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tauruslines.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886065": [
        {
            "ioc_value": "https://lacelosia.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lacelosia.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886066": [
        {
            "ioc_value": "https://buildnation.com.bd/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/buildnation.com.bd",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886067": [
        {
            "ioc_value": "https://s3o.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/s3o.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886068": [
        {
            "ioc_value": "https://sman1rengat.sch.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sman1rengat.sch.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886069": [
        {
            "ioc_value": "https://ropanaho.free.nf/?i=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ropanaho.free.nf",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886070": [
        {
            "ioc_value": "https://authorvisionpublishing.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/authorvisionpublishing.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886071": [
        {
            "ioc_value": "https://moradadosolpraia.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/moradadosolpraia.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886061": [
        {
            "ioc_value": "mwjjavjli.eng-glycofree.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 10:57:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886056": [
        {
            "ioc_value": "https://www.serenadalessandro.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.serenadalessandro.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886057": [
        {
            "ioc_value": "https://visionplanet.com.ar/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/visionplanet.com.ar",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886048": [
        {
            "ioc_value": "https://631679.us26.myftpupload.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/631679.us26.myftpupload.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886049": [
        {
            "ioc_value": "https://sumacrestaurant.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sumacrestaurant.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886050": [
        {
            "ioc_value": "https://justiceteamnetwork.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/justiceteamnetwork.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886051": [
        {
            "ioc_value": "https://patronesalamoda.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/patronesalamoda.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886052": [
        {
            "ioc_value": "https://shulinlakeresort.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/shulinlakeresort.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886053": [
        {
            "ioc_value": "https://www.micasoganado.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.micasoganado.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886054": [
        {
            "ioc_value": "https://www.rassegnabattiti.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.rassegnabattiti.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886055": [
        {
            "ioc_value": "https://www.petiteandsowhat-blog.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.petiteandsowhat-blog.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886047": [
        {
            "ioc_value": "https://wcateasy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wcateasy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886046": [
        {
            "ioc_value": "159.89.24.55:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:43",
            "last_seen_utc": "2026-08-31 13:21:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886045": [
        {
            "ioc_value": "46.101.146.87:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:42",
            "last_seen_utc": "2026-08-31 13:21:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886044": [
        {
            "ioc_value": "104.248.247.126:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:41",
            "last_seen_utc": "2026-08-31 13:21:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886043": [
        {
            "ioc_value": "46.101.179.59:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:40",
            "last_seen_utc": "2026-08-31 13:21:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886042": [
        {
            "ioc_value": "159.65.50.202:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:39",
            "last_seen_utc": "2026-08-31 13:21:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886041": [
        {
            "ioc_value": "167.99.194.254:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:38",
            "last_seen_utc": "2026-08-31 13:21:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886040": [
        {
            "ioc_value": "165.22.122.89:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:37",
            "last_seen_utc": "2026-08-31 13:21:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886038": [
        {
            "ioc_value": "104.248.41.207:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:36",
            "last_seen_utc": "2026-08-31 13:21:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886039": [
        {
            "ioc_value": "209.97.138.100:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:36",
            "last_seen_utc": "2026-08-31 13:21:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886037": [
        {
            "ioc_value": "139.59.154.153:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 10:22:35",
            "last_seen_utc": "2026-08-31 13:21:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886036": [
        {
            "ioc_value": "0b3kzmav.swin9.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 10:21:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886030": [
        {
            "ioc_value": "45.141.215.202:8060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886029": [
        {
            "ioc_value": "45.141.215.202:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886028": [
        {
            "ioc_value": "https://eversxcellence.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/eversxcellence.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886025": [
        {
            "ioc_value": "https://www.wellspringworshipministries.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.wellspringworshipministries.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886026": [
        {
            "ioc_value": "https://mail.savoryit.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.savoryit.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886027": [
        {
            "ioc_value": "https://standardcpc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 10:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/standardcpc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886022": [
        {
            "ioc_value": "151.242.63.248:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-24 09:43:42",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1886021": [
        {
            "ioc_value": "qaz4.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 09:39:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1886019": [
        {
            "ioc_value": "bt9bid9o.eng--nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 09:33:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886015": [
        {
            "ioc_value": "https://pbgphilanthropy.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pbgphilanthropy.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886016": [
        {
            "ioc_value": "https://luxry.silentclaim.online/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/luxry.silentclaim.online",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886017": [
        {
            "ioc_value": "https://savoryit.onmybday.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/savoryit.onmybday.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886018": [
        {
            "ioc_value": "https://cream.ac.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cream.ac.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886009": [
        {
            "ioc_value": "https://donavanfreberg.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/donavanfreberg.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886010": [
        {
            "ioc_value": "https://larkcontrucksales.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/larkcontrucksales.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886011": [
        {
            "ioc_value": "https://atx.my/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/atx.my",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886012": [
        {
            "ioc_value": "https://wordpress-498130-2172574.cloudwaysapps.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wordpress-498130-2172574.cloudwaysapps.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886013": [
        {
            "ioc_value": "https://rup-shor.shop.shopnoghuribd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rup-shor.shop.shopnoghuribd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886014": [
        {
            "ioc_value": "https://brandhouse.com.bo/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 09:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/brandhouse.com.bo",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1886007": [
        {
            "ioc_value": "eng-usa-nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 09:21:39",
            "last_seen_utc": "2026-08-25 07:22:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "24August2026,ClearFake,Commandline,DomainShadowing,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1886005": [
        {
            "ioc_value": "wwvsg1jc.en-en-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 09:17:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886001": [
        {
            "ioc_value": "141.94.121.162:6663",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-24 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1886000": [
        {
            "ioc_value": "45.141.215.202:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885999": [
        {
            "ioc_value": "1y1skqz8.eng-us-thebrainsong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 09:03:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885997": [
        {
            "ioc_value": "45.141.21.47:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-24 08:50:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b8c8ea5208de30f140f12976469d64ba668d411d45808e5514bce1c6832969d/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885968": [
        {
            "ioc_value": "milaka.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 08:20:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885969": [
        {
            "ioc_value": "https://kingo.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-24 08:20:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885970": [
        {
            "ioc_value": "https://kingo.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-24 08:20:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885971": [
        {
            "ioc_value": "https://kingo.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-24 08:20:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885972": [
        {
            "ioc_value": "https://kingo.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-24 08:20:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885973": [
        {
            "ioc_value": "https://kingo.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-24 08:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885974": [
        {
            "ioc_value": "kingo.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-24 08:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHOOK,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885978": [
        {
            "ioc_value": "buxulysy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 08:20:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885975": [
        {
            "ioc_value": "hen.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 08:20:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1885984": [
        {
            "ioc_value": "lewanoqu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 08:20:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885986": [
        {
            "ioc_value": "217.195.153.125:30303",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885987": [
        {
            "ioc_value": "89.124.78.199:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885988": [
        {
            "ioc_value": "167.99.5.39:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885989": [
        {
            "ioc_value": "89.223.95.175:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885990": [
        {
            "ioc_value": "31.6.1.169:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885991": [
        {
            "ioc_value": "5.175.189.133:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885992": [
        {
            "ioc_value": "144.202.41.78:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-24 08:20:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885985": [
        {
            "ioc_value": "cloudfrontenterprise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 08:18:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885983": [
        {
            "ioc_value": "verico-de-id.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 08:11:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885982": [
        {
            "ioc_value": "fingerprint-verification.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 08:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885981": [
        {
            "ioc_value": "cat.jumpskyhigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 08:10:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885980": [
        {
            "ioc_value": "poconodessertco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 08:09:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885979": [
        {
            "ioc_value": "hen.yourbodybydesign.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 08:09:34",
            "last_seen_utc": "2026-08-24 13:05:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885977": [
        {
            "ioc_value": "45.141.215.202:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 08:05:06",
            "last_seen_utc": "2026-08-25 08:51:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885976": [
        {
            "ioc_value": "45.141.215.202:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885812": [
        {
            "ioc_value": "cabinetliquard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:30",
            "last_seen_utc": "2026-08-27 05:31:50",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885813": [
        {
            "ioc_value": "dormelles.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:28",
            "last_seen_utc": "2026-08-27 05:31:51",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885814": [
        {
            "ioc_value": "stg-thinkoralimplantsandperiodon-thinkoralstg.kinsta.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:27",
            "last_seen_utc": "2026-08-27 05:31:55",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885815": [
        {
            "ioc_value": "justiceteamnetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:26",
            "last_seen_utc": "2026-08-26 21:48:08",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885817": [
        {
            "ioc_value": "ariannasales.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:23",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885818": [
        {
            "ioc_value": "spawn-design.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:23",
            "last_seen_utc": "2026-08-27 05:31:54",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885819": [
        {
            "ioc_value": "minahspices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:22",
            "last_seen_utc": "2026-08-27 05:31:53",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885820": [
        {
            "ioc_value": "hampsteadmobiletyrefitting.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:21",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885821": [
        {
            "ioc_value": "riatech.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:21",
            "last_seen_utc": "2026-08-27 05:31:52",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885827": [
        {
            "ioc_value": "foundationworldschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:14",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885832": [
        {
            "ioc_value": "yypost-main.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:12",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885834": [
        {
            "ioc_value": "gultekinlertekstil.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:10",
            "last_seen_utc": "2026-08-27 05:31:57",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885835": [
        {
            "ioc_value": "hgh.whe.mybluehost.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:10",
            "last_seen_utc": "2026-08-27 05:31:58",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885836": [
        {
            "ioc_value": "585697.us20.myftpupload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:09",
            "last_seen_utc": "2026-08-31 01:06:53",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885837": [
        {
            "ioc_value": "dueelletappezzeria.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 07:51:09",
            "last_seen_utc": "2026-08-31 00:56:52",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885441": [
        {
            "ioc_value": "https://espossto.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-24 07:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1885489": [
        {
            "ioc_value": "https://zarox.karatasyasin058.workers.dev/m/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "jar.microstealer",
            "malware_alias": null,
            "malware_printable": "MicroStealer",
            "first_seen_utc": "2026-08-24 07:46:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "CirrataGame,CloudflareWorkers,Discord,Electron,MicroStealer,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885578": [
        {
            "ioc_value": "43.134.49.218:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 07:46:22",
            "last_seen_utc": "2026-08-29 13:37:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885490": [
        {
            "ioc_value": "zarox.karatasyasin058.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "jar.microstealer",
            "malware_alias": null,
            "malware_printable": "MicroStealer",
            "first_seen_utc": "2026-08-24 07:46:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "CirrataGame,CloudflareWorkers,Discord,Electron,MicroStealer,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885621": [
        {
            "ioc_value": "160.119.71.120:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 07:46:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885660": [
        {
            "ioc_value": "176.98.182.216:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 07:46:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885681": [
        {
            "ioc_value": "http://220.150.112.201:46096/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-24 07:46:18",
            "last_seen_utc": "2026-08-25 00:19:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/220.150.112.201",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885682": [
        {
            "ioc_value": "http://153.117.26.194:55070/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-24 07:46:17",
            "last_seen_utc": "2026-08-25 00:19:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.26.194",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885862": [
        {
            "ioc_value": "soul.poconodessertco.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 07:46:09",
            "last_seen_utc": "2026-08-24 01:29:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1885867": [
        {
            "ioc_value": "201.79.5.223:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 07:46:08",
            "last_seen_utc": "2026-08-26 02:50:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885873": [
        {
            "ioc_value": "176.98.182.217:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-24 07:46:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885883": [
        {
            "ioc_value": "94.154.43.249:2327",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-24 07:46:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,DDoSAgent",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1885913": [
        {
            "ioc_value": "http://150.241.65.250:889/raul.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-24 07:46:05",
            "last_seen_utc": "2026-08-25 00:19:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/150.241.65.250",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885914": [
        {
            "ioc_value": "http://202.47.56.251:59587/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-24 07:45:50",
            "last_seen_utc": "2026-08-25 00:19:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.47.56.251",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885915": [
        {
            "ioc_value": "95871105a8ca339c39ede4b2da1e2d30989b5a91395b808ba81f3cf9f7ed0b14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-24 07:45:48",
            "last_seen_utc": "2026-08-25 00:20:17",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/150.241.65.250:889",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885917": [
        {
            "ioc_value": "culuvocu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 07:45:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885921": [
        {
            "ioc_value": "qibaty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 07:45:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885930": [
        {
            "ioc_value": "109.123.242.4:8954",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 07:45:45",
            "last_seen_utc": "2026-08-29 12:40:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,dcf2d40b491fed66d221b13e6daea39c,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885932": [
        {
            "ioc_value": "xavemo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 07:45:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885934": [
        {
            "ioc_value": "ruresu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 07:45:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885963": [
        {
            "ioc_value": "167.233.78.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885964": [
        {
            "ioc_value": "185.227.110.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885965": [
        {
            "ioc_value": "193.168.173.159:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885966": [
        {
            "ioc_value": "77.42.91.181:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885967": [
        {
            "ioc_value": "62.238.46.243:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885955": [
        {
            "ioc_value": "45.91.168.240:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885956": [
        {
            "ioc_value": "62.238.44.228:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885957": [
        {
            "ioc_value": "2.29.15.189:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885958": [
        {
            "ioc_value": "185.100.157.8:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885959": [
        {
            "ioc_value": "45.91.169.81:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885960": [
        {
            "ioc_value": "2.29.9.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885961": [
        {
            "ioc_value": "62.238.125.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885962": [
        {
            "ioc_value": "62.238.122.8:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885953": [
        {
            "ioc_value": "dez.sm188dnsx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885954": [
        {
            "ioc_value": "wsp.sm188dnsxx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:43:11",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885950": [
        {
            "ioc_value": "https://193.168.173.159/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885951": [
        {
            "ioc_value": "https://77.42.91.181/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885952": [
        {
            "ioc_value": "https://62.238.46.243/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885944": [
        {
            "ioc_value": "https://185.100.157.8/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885945": [
        {
            "ioc_value": "https://45.91.169.81/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885946": [
        {
            "ioc_value": "https://2.29.9.195/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885947": [
        {
            "ioc_value": "https://62.238.125.82/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885948": [
        {
            "ioc_value": "https://62.238.122.8/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885949": [
        {
            "ioc_value": "https://167.233.78.24/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885941": [
        {
            "ioc_value": "https://wsp.sm188dnsxx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885942": [
        {
            "ioc_value": "https://62.238.44.228/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885943": [
        {
            "ioc_value": "https://2.29.15.189/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:36",
            "last_seen_utc": "2026-09-01 03:41:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885937": [
        {
            "ioc_value": "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=roAjr",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:35",
            "last_seen_utc": "2026-08-31 16:08:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885938": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198652917381",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885939": [
        {
            "ioc_value": "https://telegram.me/s11yme",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885940": [
        {
            "ioc_value": "https://dez.sm188dnsx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885935": [
        {
            "ioc_value": "wsp.1234e.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:40:47",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885936": [
        {
            "ioc_value": "https://wsp.1234e.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-24 07:40:47",
            "last_seen_utc": "2026-08-24 07:42:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1885933": [
        {
            "ioc_value": "https://mississippicannabisschool.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mississippicannabisschool.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885931": [
        {
            "ioc_value": "qs4vqdby.en-en-en-theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885928": [
        {
            "ioc_value": "extranethelp-desk26.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-24 07:08:48",
            "last_seen_utc": "2026-08-25 09:16:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885929": [
        {
            "ioc_value": "load-file003.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-24 07:08:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885926": [
        {
            "ioc_value": "182.255.91.104:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885927": [
        {
            "ioc_value": "104.225.238.193:10020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885925": [
        {
            "ioc_value": "8.163.59.20:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885924": [
        {
            "ioc_value": "http://vexdico.shop:8539/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 07:00:37",
            "last_seen_utc": "2026-08-24 21:26:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b007e3f21dc382e21ffdc64e665444bc9494d1d67b82bc7ddf415ba2288af648/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885923": [
        {
            "ioc_value": "http://shhsift.click:7647/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-24 07:00:35",
            "last_seen_utc": "2026-08-24 21:58:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b007e3f21dc382e21ffdc64e665444bc9494d1d67b82bc7ddf415ba2288af648/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885922": [
        {
            "ioc_value": "192.236.217.108:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-24 07:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885918": [
        {
            "ioc_value": "http://91.92.241.160/files/output.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 06:28:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885916": [
        {
            "ioc_value": "bafybeihryapqa7lq7w3bc7cyqiipfyh7psq7qttgzp5euijblhohcmwweq.ipfs.w3s.link",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 06:23:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885912": [
        {
            "ioc_value": "oaime44590.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 06:12:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885911": [
        {
            "ioc_value": "91.92.240.102:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-24 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885910": [
        {
            "ioc_value": "38.97.56.198:3741",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-24 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885909": [
        {
            "ioc_value": "ixqya67702.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 06:03:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885908": [
        {
            "ioc_value": "buhyfudy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 06:00:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885907": [
        {
            "ioc_value": "zacuca.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 05:35:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885906": [
        {
            "ioc_value": "fingerprint-verification.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 05:30:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885905": [
        {
            "ioc_value": "nx7k0dvp.eng--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 05:23:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885904": [
        {
            "ioc_value": "7wagrm1i.mulip.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 05:20:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885903": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/4hf7gdy44d5/36gd&hdk",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 05:19:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885901": [
        {
            "ioc_value": "ndg2zyyn.ejash.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 05:15:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885900": [
        {
            "ioc_value": "bjctd84658.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 05:09:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885899": [
        {
            "ioc_value": "43.140.219.182:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-24 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885898": [
        {
            "ioc_value": "af9aaa599b8082dbe04bf1784956e8775331097c5c5bae2f85ac163e08b0e187",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:56:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885897": [
        {
            "ioc_value": "79b15f0d4987e0b3dbe23075487a0d984b2b857bf4c71ed1ca73bebd110c3801",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:56:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885896": [
        {
            "ioc_value": "156.234.7.14:447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-24 04:45:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885895": [
        {
            "ioc_value": "kaqowofa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 04:44:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885894": [
        {
            "ioc_value": "app.dinkfoundry.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:38:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885893": [
        {
            "ioc_value": "wevafyfi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 04:20:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885891": [
        {
            "ioc_value": "blanautch.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:18:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885890": [
        {
            "ioc_value": "vuluxy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 04:08:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885888": [
        {
            "ioc_value": "41377be5f0885a5ed3a553ed97cd9f4762c70e99d688e011f8d7782bb7de3321",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:08:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHide,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885889": [
        {
            "ioc_value": "0e7d1a0e06c0110ad1c05be41894c4bcab4de73420dfb8fd9b9f0581975ef429",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:08:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHide,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885887": [
        {
            "ioc_value": "vylodo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 04:02:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885886": [
        {
            "ioc_value": "1fn6h515.eng-usa-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 04:01:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885885": [
        {
            "ioc_value": "c3by2ffps3.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 03:57:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885884": [
        {
            "ioc_value": "mygiwiwa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 03:43:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885882": [
        {
            "ioc_value": "kmout43212.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 03:14:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885881": [
        {
            "ioc_value": "jvzw0nks.devle.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 03:14:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885880": [
        {
            "ioc_value": "43.143.14.43:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885879": [
        {
            "ioc_value": "27.124.18.3:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885878": [
        {
            "ioc_value": "suketudo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 02:55:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885877": [
        {
            "ioc_value": "pyfebu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 02:52:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885875": [
        {
            "ioc_value": "33vivi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 02:34:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885872": [
        {
            "ioc_value": "liqasy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 02:24:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885871": [
        {
            "ioc_value": "200.25.86.137:333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.revenge_rat",
            "malware_alias": "Revetrat",
            "malware_printable": "Revenge RAT",
            "first_seen_utc": "2026-08-24 02:15:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RevengeRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885870": [
        {
            "ioc_value": "lujisuka.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 02:08:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885869": [
        {
            "ioc_value": "49.233.185.40:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885868": [
        {
            "ioc_value": "fazejy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 02:03:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885866": [
        {
            "ioc_value": "boporume-c60.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 01:52:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885864": [
        {
            "ioc_value": "divilule.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 01:43:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885863": [
        {
            "ioc_value": "185.157.163.138:50810",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-24 01:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885861": [
        {
            "ioc_value": "8he0zbt6.eng-us-thebrainsong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 01:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885860": [
        {
            "ioc_value": "eng-us-thebrainsong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 01:13:43",
            "last_seen_utc": "2026-08-24 09:02:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885859": [
        {
            "ioc_value": "xefivizo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 01:13:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885858": [
        {
            "ioc_value": "8gk9gsm3.eng--leptozan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 01:10:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885857": [
        {
            "ioc_value": "qorideti.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 01:09:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885856": [
        {
            "ioc_value": "euqxu71106.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 01:08:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885855": [
        {
            "ioc_value": "62.234.17.33:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-24 01:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885854": [
        {
            "ioc_value": "https://hayvavillage.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-24 01:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hayvavillage.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885853": [
        {
            "ioc_value": "rvoea71516.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 00:54:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885852": [
        {
            "ioc_value": "34.171.171.32:4001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.systembc",
            "malware_alias": "Coroxy,DroxiDat",
            "malware_printable": "SystemBC",
            "first_seen_utc": "2026-08-24 00:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "SystemBC",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885809": [
        {
            "ioc_value": "timelinetrudev.wpengine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:43:09",
            "last_seen_utc": "2026-08-27 05:57:53",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885777": [
        {
            "ioc_value": "cream.ac.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:42:00",
            "last_seen_utc": "2026-08-25 15:04:38",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885747": [
        {
            "ioc_value": "rup-shor.shop.shopnoghuribd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885748": [
        {
            "ioc_value": "cookie-clicker2.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885749": [
        {
            "ioc_value": "wordpress-498130-2172574.cloudwaysapps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885750": [
        {
            "ioc_value": "groupe-urologie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885753": [
        {
            "ioc_value": "servicestation.ie.w3pcloud.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-27 08:10:08",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885754": [
        {
            "ioc_value": "paranaconstrutora.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-27 08:10:07",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885757": [
        {
            "ioc_value": "posttelevision.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-27 08:00:04",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885758": [
        {
            "ioc_value": "sun-you.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885759": [
        {
            "ioc_value": "krishnamyfriend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-31 00:26:50",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885760": [
        {
            "ioc_value": "setierproperties.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:06",
            "last_seen_utc": "2026-08-27 08:00:06",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885733": [
        {
            "ioc_value": "yogaundheilung.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:05",
            "last_seen_utc": "2026-08-25 13:25:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885736": [
        {
            "ioc_value": "sakemania.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:05",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885743": [
        {
            "ioc_value": "alibabasauce.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:05",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885744": [
        {
            "ioc_value": "novasurgicare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:05",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885722": [
        {
            "ioc_value": "website-308e7c04.ojn.efw.mybluehost.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:04",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885723": [
        {
            "ioc_value": "luxypeace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:04",
            "last_seen_utc": "2026-08-27 08:10:08",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885728": [
        {
            "ioc_value": "technicaltalk.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:04",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885729": [
        {
            "ioc_value": "slgadgets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:04",
            "last_seen_utc": "2026-08-28 07:03:28",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885730": [
        {
            "ioc_value": "savilera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:04",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885731": [
        {
            "ioc_value": "quicksolutionsatl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:04",
            "last_seen_utc": "2026-08-28 06:09:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885704": [
        {
            "ioc_value": "thebrandlan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:03",
            "last_seen_utc": "2026-08-26 18:37:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885710": [
        {
            "ioc_value": "md-fliesenleger.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:03",
            "last_seen_utc": "2026-08-31 00:16:49",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885711": [
        {
            "ioc_value": "landplanman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:03",
            "last_seen_utc": "2026-08-27 08:10:08",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885715": [
        {
            "ioc_value": "charteredglobal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:03",
            "last_seen_utc": "2026-08-31 00:16:49",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885690": [
        {
            "ioc_value": "21joursantistress.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:01",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885691": [
        {
            "ioc_value": "referralalchemy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:01",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885696": [
        {
            "ioc_value": "sarahstephensescapes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:01",
            "last_seen_utc": "2026-08-31 00:26:50",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885700": [
        {
            "ioc_value": "avxpeepo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:01",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885701": [
        {
            "ioc_value": "cantinastage.wpengine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:01",
            "last_seen_utc": "2026-08-30 09:05:57",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885685": [
        {
            "ioc_value": "eclipseworldfest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:00",
            "last_seen_utc": "2026-08-31 00:16:48",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885688": [
        {
            "ioc_value": "kids-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-24 00:37:00",
            "last_seen_utc": "2026-08-27 08:00:06",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1885683": [
        {
            "ioc_value": "zdtwe17085.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 00:29:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885680": [
        {
            "ioc_value": "vobncb6s.mruh.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-24 00:19:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885679": [
        {
            "ioc_value": "4cplkpvzzr.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-24 00:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885678": [
        {
            "ioc_value": "209.200.246.194:32126",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 23:46:54",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885677": [
        {
            "ioc_value": "acsdomaindsadas.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 23:46:32",
            "last_seen_utc": "2026-09-01 02:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885676": [
        {
            "ioc_value": "207.180.248.154:8202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 23:45:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885675": [
        {
            "ioc_value": "tyqaqanu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 23:40:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885674": [
        {
            "ioc_value": "http://cq215681.tw1.ru/477ded33.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-23 23:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885673": [
        {
            "ioc_value": "vlfkf12817.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 23:22:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885672": [
        {
            "ioc_value": "jylebori.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 23:15:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885671": [
        {
            "ioc_value": "pdbxq1z3.eng-us-puraboost.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 23:15:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885669": [
        {
            "ioc_value": "zgqkz11565.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 23:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885668": [
        {
            "ioc_value": "65rmmx1u.eng-usa-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 23:03:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885667": [
        {
            "ioc_value": "eynskhbmwd.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 23:02:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885666": [
        {
            "ioc_value": "eng-usa-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 22:59:38",
            "last_seen_utc": "2026-08-23 23:00:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885665": [
        {
            "ioc_value": "pukeju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 22:45:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885664": [
        {
            "ioc_value": "tonisady.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 22:27:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885663": [
        {
            "ioc_value": "nutrivaccpharma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 22:24:45",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885662": [
        {
            "ioc_value": "2m-industries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 22:24:44",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885661": [
        {
            "ioc_value": "ddp9a3il4a.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 21:58:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885659": [
        {
            "ioc_value": "lyleh89393.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 21:34:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885656": [
        {
            "ioc_value": "https://planocaraccidentpersonalinjurylawyers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/planocaraccidentpersonalinjurylawyers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885657": [
        {
            "ioc_value": "https://www.seedsalad.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.seedsalad.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885658": [
        {
            "ioc_value": "https://www.unicornostyle.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.unicornostyle.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885655": [
        {
            "ioc_value": "https://www.valeriedalleur.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.valeriedalleur.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885654": [
        {
            "ioc_value": "cihuweva.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 21:18:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885653": [
        {
            "ioc_value": "vlttkdma.eng-us-neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 21:15:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885652": [
        {
            "ioc_value": "eng-us-neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 21:13:28",
            "last_seen_utc": "2026-08-28 00:42:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "23August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1885651": [
        {
            "ioc_value": "216illegal.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 21:13:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885650": [
        {
            "ioc_value": "1483linnie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 21:08:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885649": [
        {
            "ioc_value": "193.161.193.99:31712",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-23 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885644": [
        {
            "ioc_value": "https://uroprocto.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/uroprocto.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885645": [
        {
            "ioc_value": "https://wewnetrznywymiar.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": "https://clickfix.carsonww.com/domains/wewnetrznywymiar.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885646": [
        {
            "ioc_value": "https://www.zegenergytech.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.zegenergytech.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885647": [
        {
            "ioc_value": "https://vahousingsolutions.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vahousingsolutions.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885648": [
        {
            "ioc_value": "https://studiofabris.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 21:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/studiofabris.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885643": [
        {
            "ioc_value": "2zj0cj0t.eng--thebrainsong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 20:59:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885641": [
        {
            "ioc_value": "uaze2e8rmk.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 20:49:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885640": [
        {
            "ioc_value": "htczp49150.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 20:32:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885636": [
        {
            "ioc_value": "https://trigenio.de/de/home-de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/trigenio.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885637": [
        {
            "ioc_value": "https://skupauta.warszawa.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/skupauta.warszawa.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885638": [
        {
            "ioc_value": "https://www.tobasaglass.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.tobasaglass.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885639": [
        {
            "ioc_value": "https://simbiotecs.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/simbiotecs.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885629": [
        {
            "ioc_value": "https://www.onlinepokergalaxy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.onlinepokergalaxy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885630": [
        {
            "ioc_value": "https://www.prodent.tgory.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.prodent.tgory.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885631": [
        {
            "ioc_value": "https://poraodorock.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/poraodorock.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885632": [
        {
            "ioc_value": "https://www.robotique.tech/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.robotique.tech",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885633": [
        {
            "ioc_value": "https://www.revolutionconcorezzo.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.revolutionconcorezzo.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885634": [
        {
            "ioc_value": "https://personnelcoach.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/personnelcoach.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885635": [
        {
            "ioc_value": "https://royalhope.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/royalhope.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885622": [
        {
            "ioc_value": "https://grazioso-studio.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/grazioso-studio.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885623": [
        {
            "ioc_value": "https://max-solutions.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/max-solutions.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885624": [
        {
            "ioc_value": "https://karamaco.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/karamaco.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885625": [
        {
            "ioc_value": "https://hoaxinh.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hoaxinh.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885626": [
        {
            "ioc_value": "https://nous.ie/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nous.ie",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885627": [
        {
            "ioc_value": "https://haierformazione.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/haierformazione.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885628": [
        {
            "ioc_value": "https://www.muovitimuoviti.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.muovitimuoviti.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885620": [
        {
            "ioc_value": "oqaqo20082.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 20:10:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885618": [
        {
            "ioc_value": "141.94.121.162:6667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-23 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885619": [
        {
            "ioc_value": "156.238.224.156:5522",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885617": [
        {
            "ioc_value": "125.86.22.29:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-23 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885614": [
        {
            "ioc_value": "https://goavanto.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/goavanto.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885615": [
        {
            "ioc_value": "https://funnel.die-beste-zahnzusatzversicherung.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/funnel.die-beste-zahnzusatzversicherung.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885616": [
        {
            "ioc_value": "https://hawksbillhomescarolina.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hawksbillhomescarolina.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885604": [
        {
            "ioc_value": "https://casinobonus247.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/casinobonus247.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885605": [
        {
            "ioc_value": "https://www.conseils-maison.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.conseils-maison.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885606": [
        {
            "ioc_value": "https://darunnajahacademy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/darunnajahacademy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885607": [
        {
            "ioc_value": "https://binuscx.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/binuscx.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885608": [
        {
            "ioc_value": "https://www.dompteusedepigments.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.dompteusedepigments.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885609": [
        {
            "ioc_value": "https://deakfarkas.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/deakfarkas.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885610": [
        {
            "ioc_value": "https://elsurdigital.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/elsurdigital.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885611": [
        {
            "ioc_value": "https://www.gao998.cn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.gao998.cn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885612": [
        {
            "ioc_value": "https://esportsleaguetips.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/esportsleaguetips.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885613": [
        {
            "ioc_value": "https://mentalcoach.sk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mentalcoach.sk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885597": [
        {
            "ioc_value": "https://bajmol.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bajmol.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885598": [
        {
            "ioc_value": "https://booksignpublishing.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/booksignpublishing.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885599": [
        {
            "ioc_value": "https://www.asparagoverona.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.asparagoverona.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885600": [
        {
            "ioc_value": "https://charlottelocalseoservices.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/charlottelocalseoservices.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885601": [
        {
            "ioc_value": "https://brilliant-deductions.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/brilliant-deductions.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885602": [
        {
            "ioc_value": "https://www.cometapulegge.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.cometapulegge.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885603": [
        {
            "ioc_value": "https://consorciovicaya.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 20:00:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/consorciovicaya.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885596": [
        {
            "ioc_value": "piliduxa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 19:53:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885595": [
        {
            "ioc_value": "203.159.90.155:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-23 19:44:44",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885594": [
        {
            "ioc_value": "196.251.121.124:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-23 19:44:37",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885593": [
        {
            "ioc_value": "194.9.6.125:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-23 19:44:33",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885592": [
        {
            "ioc_value": "154.201.82.106:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-23 19:43:41",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885591": [
        {
            "ioc_value": "13.205.33.34:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885590": [
        {
            "ioc_value": "dobopycy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 19:24:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885589": [
        {
            "ioc_value": "yatxpal6.lckd.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 19:17:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885588": [
        {
            "ioc_value": "zirjnsf2.eng-us-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 19:16:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885587": [
        {
            "ioc_value": "jyjuregu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 19:13:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885586": [
        {
            "ioc_value": "eng-us-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 19:12:04",
            "last_seen_utc": "2026-08-25 22:24:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885585": [
        {
            "ioc_value": "gotiri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 19:06:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885584": [
        {
            "ioc_value": "54.183.237.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885583": [
        {
            "ioc_value": "54.183.237.74:18082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 19:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885582": [
        {
            "ioc_value": "bohapu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 18:57:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885575": [
        {
            "ioc_value": "visionplanet.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:54",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885577": [
        {
            "ioc_value": "zegenergytech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:54",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885568": [
        {
            "ioc_value": "tristarcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:53",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885569": [
        {
            "ioc_value": "tymemamm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:53",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885570": [
        {
            "ioc_value": "unicornostyle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:53",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885572": [
        {
            "ioc_value": "vahousingsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:53",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885573": [
        {
            "ioc_value": "valeriedalleur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:53",
            "last_seen_utc": "2026-08-26 18:37:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885565": [
        {
            "ioc_value": "studiofabris.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:52",
            "last_seen_utc": "2026-08-25 16:44:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885567": [
        {
            "ioc_value": "trigenio.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:52",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885560": [
        {
            "ioc_value": "seedsalad.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:51",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885561": [
        {
            "ioc_value": "serenadalessandro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:51",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885562": [
        {
            "ioc_value": "simbiotecs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:51",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885563": [
        {
            "ioc_value": "skupauta.warszawa.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:51",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885564": [
        {
            "ioc_value": "sman1rengat.sch.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:51",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885559": [
        {
            "ioc_value": "royalhope.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:50",
            "last_seen_utc": "2026-08-27 11:13:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885556": [
        {
            "ioc_value": "rassegnabattiti.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:49",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885557": [
        {
            "ioc_value": "revolutionconcorezzo.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:49",
            "last_seen_utc": "2026-08-27 10:03:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885558": [
        {
            "ioc_value": "robotique.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:49",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885549": [
        {
            "ioc_value": "patronesalamoda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:48",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885550": [
        {
            "ioc_value": "personnelcoach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:48",
            "last_seen_utc": "2026-08-27 10:13:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885551": [
        {
            "ioc_value": "petiteandsowhat-blog.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:48",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885554": [
        {
            "ioc_value": "poraodorock.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:48",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885544": [
        {
            "ioc_value": "newzgalore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:47",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885545": [
        {
            "ioc_value": "nicolapeloso.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:47",
            "last_seen_utc": "2026-08-30 02:57:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885546": [
        {
            "ioc_value": "nous.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:47",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885548": [
        {
            "ioc_value": "parapente.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:47",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885538": [
        {
            "ioc_value": "micasoganado.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:46",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885539": [
        {
            "ioc_value": "montanatruss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:46",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885540": [
        {
            "ioc_value": "morrisnanning.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:46",
            "last_seen_utc": "2026-08-30 03:10:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885541": [
        {
            "ioc_value": "muhammadshakirp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:46",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885542": [
        {
            "ioc_value": "muovitimuoviti.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:46",
            "last_seen_utc": "2026-08-27 11:13:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885543": [
        {
            "ioc_value": "nautilestore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:46",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885534": [
        {
            "ioc_value": "lifeboss.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:45",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885535": [
        {
            "ioc_value": "max-solutions.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:45",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885536": [
        {
            "ioc_value": "maximatelecom.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:45",
            "last_seen_utc": "2026-08-30 03:15:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885537": [
        {
            "ioc_value": "mentalcoach.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:45",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885532": [
        {
            "ioc_value": "lamaisonbleue.restaurant",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:44",
            "last_seen_utc": "2026-08-30 03:10:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885533": [
        {
            "ioc_value": "lesclesdelaubrac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:44",
            "last_seen_utc": "2026-08-30 03:09:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885529": [
        {
            "ioc_value": "hoaxinh.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:43",
            "last_seen_utc": "2026-08-26 18:37:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885530": [
        {
            "ioc_value": "horspist.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:43",
            "last_seen_utc": "2026-08-25 16:44:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885526": [
        {
            "ioc_value": "grazioso-studio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:42",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885527": [
        {
            "ioc_value": "haierformazione.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:42",
            "last_seen_utc": "2026-08-27 11:03:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885528": [
        {
            "ioc_value": "hawksbillhomescarolina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:42",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885521": [
        {
            "ioc_value": "funnel.die-beste-zahnzusatzversicherung.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:41",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885522": [
        {
            "ioc_value": "gao998.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:41",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885523": [
        {
            "ioc_value": "garront.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:41",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885524": [
        {
            "ioc_value": "gnak.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:41",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885525": [
        {
            "ioc_value": "goavanto.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:41",
            "last_seen_utc": "2026-08-27 11:23:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885518": [
        {
            "ioc_value": "elsurdigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:40",
            "last_seen_utc": "2026-08-26 18:37:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885519": [
        {
            "ioc_value": "esportsleaguetips.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:40",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885520": [
        {
            "ioc_value": "figuraynutricion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:40",
            "last_seen_utc": "2026-08-30 03:10:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885514": [
        {
            "ioc_value": "darunnajahacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:39",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885515": [
        {
            "ioc_value": "deakfarkas.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:39",
            "last_seen_utc": "2026-08-27 11:13:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885516": [
        {
            "ioc_value": "dlasl.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:39",
            "last_seen_utc": "2026-08-30 03:08:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885517": [
        {
            "ioc_value": "dompteusedepigments.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:39",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885509": [
        {
            "ioc_value": "clubhousenews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:38",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885510": [
        {
            "ioc_value": "cometapulegge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:38",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885511": [
        {
            "ioc_value": "conseils-maison.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:38",
            "last_seen_utc": "2026-08-27 11:13:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885512": [
        {
            "ioc_value": "consorciovicaya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:38",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885513": [
        {
            "ioc_value": "crimsonhollywood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:38",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885503": [
        {
            "ioc_value": "binuscx.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:37",
            "last_seen_utc": "2026-08-26 18:37:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885504": [
        {
            "ioc_value": "booksignpublishing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:37",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885505": [
        {
            "ioc_value": "brilliant-deductions.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:37",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885506": [
        {
            "ioc_value": "bsh-renovations.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:37",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885507": [
        {
            "ioc_value": "casinobonus247.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:37",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885508": [
        {
            "ioc_value": "charlottelocalseoservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:37",
            "last_seen_utc": "2026-08-27 11:03:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885497": [
        {
            "ioc_value": "archimove.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:36",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885498": [
        {
            "ioc_value": "arcticinformatica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:36",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885499": [
        {
            "ioc_value": "asparagoverona.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:36",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885500": [
        {
            "ioc_value": "autorka.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:36",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885501": [
        {
            "ioc_value": "bajmol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:36",
            "last_seen_utc": "2026-08-27 11:03:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885502": [
        {
            "ioc_value": "bergdruck.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:36",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885495": [
        {
            "ioc_value": "21stcenturyskillsacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:35",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885496": [
        {
            "ioc_value": "alrabbaniyya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 18:38:35",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,clusterY,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885494": [
        {
            "ioc_value": "5fa9qm77ih.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 18:36:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885493": [
        {
            "ioc_value": "https://absolutely-not-guilty.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 18:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/absolutely-not-guilty.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885492": [
        {
            "ioc_value": "156.225.94.168:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 18:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885491": [
        {
            "ioc_value": "hf4entertainment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 18:27:39",
            "last_seen_utc": "2026-08-26 18:37:04",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885487": [
        {
            "ioc_value": "enkontrol.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 18:17:38",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885488": [
        {
            "ioc_value": "cranio-sacrale-behandlung.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 18:17:38",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885485": [
        {
            "ioc_value": "creaticca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 18:17:37",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885484": [
        {
            "ioc_value": "ppdvk19121.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 18:15:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885483": [
        {
            "ioc_value": "airconditioninggranitebay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 18:07:36",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885481": [
        {
            "ioc_value": "45.8.46.122:8545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 18:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885482": [
        {
            "ioc_value": "118.25.37.47:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 18:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885480": [
        {
            "ioc_value": "7w00lr9c.eng-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 18:01:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885479": [
        {
            "ioc_value": "eng-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 17:59:14",
            "last_seen_utc": "2026-08-25 20:06:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885478": [
        {
            "ioc_value": "absolutely-not-guilty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 17:59:07",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885477": [
        {
            "ioc_value": "zizuqu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 17:43:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885476": [
        {
            "ioc_value": "melow77637.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 17:30:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885473": [
        {
            "ioc_value": "www.mikearemu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:27:07",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885474": [
        {
            "ioc_value": "www.sophygeneva.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:27:07",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885471": [
        {
            "ioc_value": "tecnohiperbarica.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:27:01",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885468": [
        {
            "ioc_value": "sfwaretech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:27:00",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885469": [
        {
            "ioc_value": "soochi.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:27:00",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885464": [
        {
            "ioc_value": "redvisionexperts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:59",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885465": [
        {
            "ioc_value": "rgwebsites.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:59",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885466": [
        {
            "ioc_value": "royal11group.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:59",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885467": [
        {
            "ioc_value": "russiarab.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:59",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885462": [
        {
            "ioc_value": "puntoenlinea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:58",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885463": [
        {
            "ioc_value": "qiconsultoria.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:58",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885460": [
        {
            "ioc_value": "maharashtraimpex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:16",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885458": [
        {
            "ioc_value": "hocvienphongthuylutai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:26:13",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885457": [
        {
            "ioc_value": "everestsco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:25:33",
            "last_seen_utc": "2026-08-28 11:42:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885455": [
        {
            "ioc_value": "doornsebuurman.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:25:32",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885456": [
        {
            "ioc_value": "dr88.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:25:32",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885454": [
        {
            "ioc_value": "bureauofbusiness.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:25:30",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885452": [
        {
            "ioc_value": "blog.worldcuptickets.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:25:29",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885450": [
        {
            "ioc_value": "nornikal3pi12.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:24:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885451": [
        {
            "ioc_value": "stepbysteppi9.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:24:16",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885448": [
        {
            "ioc_value": "combenipi9231.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:24:15",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885449": [
        {
            "ioc_value": "gixxipi9823.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:24:15",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885447": [
        {
            "ioc_value": "bloodhorn8123.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 17:24:14",
            "last_seen_utc": "2026-08-28 11:40:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885446": [
        {
            "ioc_value": "5jfs2icu.eng-usa-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 17:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885445": [
        {
            "ioc_value": "eng-usa-xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 17:11:34",
            "last_seen_utc": "2026-08-24 20:54:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885444": [
        {
            "ioc_value": "ifetc27307.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 17:09:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885442": [
        {
            "ioc_value": "ebanisteriasoengas.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 17:09:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885440": [
        {
            "ioc_value": "nelosuxa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 17:04:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885439": [
        {
            "ioc_value": "lykucebu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 17:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885438": [
        {
            "ioc_value": "mqe0uuge.eng-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 16:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885437": [
        {
            "ioc_value": "qilemoqe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 16:51:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885435": [
        {
            "ioc_value": "lowliesa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 16:28:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884673": [
        {
            "ioc_value": "5.181.2.220:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:29",
            "last_seen_utc": "2026-08-25 12:20:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884681": [
        {
            "ioc_value": "http://86.54.25.213/log",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884682": [
        {
            "ioc_value": "http://192.253.248.181/api/v1/bot/actions/d51c30267c864160a1da8ba3d183cdd3",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884683": [
        {
            "ioc_value": "http://86.54.25.213/d/unix23269396",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884684": [
        {
            "ioc_value": "http://192.253.248.181/api/v1/getscpt/jaicharan",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884685": [
        {
            "ioc_value": "86.54.25.213:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884686": [
        {
            "ioc_value": "86.54.25.213:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884687": [
        {
            "ioc_value": "192.253.248.181:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884690": [
        {
            "ioc_value": "homebrew-sh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,dropper,Homebrew,macos_stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884691": [
        {
            "ioc_value": "201.79.5.223:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-23 16:11:22",
            "last_seen_utc": "2026-08-23 09:22:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884692": [
        {
            "ioc_value": "75f29dca25c8bbc89db904b86f7e21e9bf588fc03a479cc15d0fb09eb05b47fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/75f29dca25c8bbc89db904b86f7e21e9bf588fc03a479cc15d0fb09eb05b47fe",
            "tags": "blockchain-c2,ClickFix,deaddrop-resolver,lotl,nodejs,ton",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884693": [
        {
            "ioc_value": "bd74366db38cbf1fe135934add5b1e92242916b888349fe4881f881781c91687",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/75f29dca25c8bbc89db904b86f7e21e9bf588fc03a479cc15d0fb09eb05b47fe",
            "tags": "blockchain-c2,ClickFix,deaddrop-resolver,lotl,nodejs,ton",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884694": [
        {
            "ioc_value": "canvas-35.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,Homebrew",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884695": [
        {
            "ioc_value": "https://storageprofiler.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,Homebrew",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884696": [
        {
            "ioc_value": "https://canvas-35.com/curl/n2rfjo98p/bootstrap.sh",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,Homebrew",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884697": [
        {
            "ioc_value": "storageprofiler.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:11:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,Homebrew",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884698": [
        {
            "ioc_value": "https://188.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 16:11:18",
            "last_seen_utc": "2026-08-24 13:45:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7a133f4e5e1537cdc89289d7e98e6408,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884699": [
        {
            "ioc_value": "http://103.98.38.217:56737/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:11:17",
            "last_seen_utc": "2026-08-25 00:19:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.98.38.217",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884716": [
        {
            "ioc_value": "https://45.91.168.240",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 16:11:17",
            "last_seen_utc": "2026-08-31 16:08:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2f892afb9f4a0f0cdf19274d21bcc6f8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884719": [
        {
            "ioc_value": "32f85cbf0fcd2acf319137a643e58416ccb609570dccb7676a03d614f451d4c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "info-stealer",
            "anonymous": 0,
            "reporter": "ReformedDoge"
        }
    ],
    "1884720": [
        {
            "ioc_value": "66299f122474100fab00ce072a34d758fc7f11a04869f60f48cbac560bc8b403",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "info-stealer",
            "anonymous": 0,
            "reporter": "ReformedDoge"
        }
    ],
    "1884721": [
        {
            "ioc_value": "879c25948bc991a1b4f01f215163d99d1faa78345f056f168f65eaeb4b9e9f6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "info-stealer",
            "anonymous": 0,
            "reporter": "ReformedDoge"
        }
    ],
    "1884724": [
        {
            "ioc_value": "ecocrypt.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "ReformedDoge"
        }
    ],
    "1884725": [
        {
            "ioc_value": "solsecflow.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "ReformedDoge"
        }
    ],
    "1884726": [
        {
            "ioc_value": "omnicyber3.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 16:11:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "ReformedDoge"
        }
    ],
    "1884663": [
        {
            "ioc_value": "https://peermangoz.me/live/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-08-23 16:11:13",
            "last_seen_utc": "2026-09-01 03:37:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Latrodectus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884669": [
        {
            "ioc_value": "https://aprettopizza.world/live/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-08-23 16:11:12",
            "last_seen_utc": "2026-09-01 03:29:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Latrodectus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884668": [
        {
            "ioc_value": "77.239.124.123:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-23 16:11:11",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1884742": [
        {
            "ioc_value": "http://5.252.177.69/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-23 16:11:07",
            "last_seen_utc": "2026-09-01 03:41:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "auto1,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884746": [
        {
            "ioc_value": "165.22.158.1:7728",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 16:11:07",
            "last_seen_utc": "2026-09-01 03:41:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6efb1e0ab361cda1dd534e37e543789c,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884751": [
        {
            "ioc_value": "http://31.76.87.171/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-23 16:11:07",
            "last_seen_utc": "2026-09-01 03:34:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AMG63,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884834": [
        {
            "ioc_value": "119.45.225.53:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 16:11:06",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45090,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1884835": [
        {
            "ioc_value": "196.74.228.193:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-08-23 16:11:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "36903,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1885066": [
        {
            "ioc_value": "duke.poconodessertco.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 16:11:06",
            "last_seen_utc": "2026-08-23 02:53:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1885105": [
        {
            "ioc_value": "http://37.187.155.230/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-23 16:11:05",
            "last_seen_utc": "2026-08-23 14:02:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,mmmix,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885111": [
        {
            "ioc_value": "168.144.188.31:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-23 16:11:05",
            "last_seen_utc": "2026-08-27 19:59:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885139": [
        {
            "ioc_value": "https://kestane.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-23 16:11:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885140": [
        {
            "ioc_value": "https://kestane.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-23 16:11:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885141": [
        {
            "ioc_value": "https://kestane.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-23 16:11:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885142": [
        {
            "ioc_value": "https://kestane.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-23 16:11:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885143": [
        {
            "ioc_value": "https://kestane.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-23 16:11:01",
            "last_seen_utc": "2026-08-23 23:56:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885144": [
        {
            "ioc_value": "kestane.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-23 16:11:00",
            "last_seen_utc": "2026-08-23 23:57:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885146": [
        {
            "ioc_value": "31.187.72.99:8654",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 16:11:00",
            "last_seen_utc": "2026-08-31 17:37:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885174": [
        {
            "ioc_value": "147.182.132.149:2958",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 16:11:00",
            "last_seen_utc": "2026-09-01 00:49:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,d7f27ef1d93b25ea58fb91b39d5a6f49,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885189": [
        {
            "ioc_value": "161.35.74.220:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-23 16:10:59",
            "last_seen_utc": "2026-08-29 08:08:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885192": [
        {
            "ioc_value": "youtepost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885194": [
        {
            "ioc_value": "proaudiocreator.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885193": [
        {
            "ioc_value": "bronzeverse9.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885195": [
        {
            "ioc_value": "wefunsa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885196": [
        {
            "ioc_value": "https://bronzeverse9.com/curl/xwehzkkycprx/update.sh",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885197": [
        {
            "ioc_value": "https://proaudiocreator.com/pituri.pronpl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885198": [
        {
            "ioc_value": "https://jakarinortonxyae.github.io/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885200": [
        {
            "ioc_value": "ember-30.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885201": [
        {
            "ioc_value": "https://ember-30.com/api/metrics/run?event=pasted",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885356": [
        {
            "ioc_value": "riverkernel6.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885357": [
        {
            "ioc_value": "clouddatastorageservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885358": [
        {
            "ioc_value": "https://clouddatastorageservices.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885377": [
        {
            "ioc_value": "https://185.227.110.24",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 16:10:47",
            "last_seen_utc": "2026-08-24 07:42:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "613d5ea4e085f06aaaf778e2ace0174a,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1885359": [
        {
            "ioc_value": "https://riverkernel6.com/curl/ytm9sa05x/setup.command",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-23 16:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885389": [
        {
            "ioc_value": "123.13.48.131:55210",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-23 16:10:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7",
            "tags": "cowrie,honeypot",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1885413": [
        {
            "ioc_value": "espossto.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-23 16:10:44",
            "last_seen_utc": "2026-08-23 22:07:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1885414": [
        {
            "ioc_value": "https://espossto.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-23 16:10:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1885415": [
        {
            "ioc_value": "https://espossto.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-23 16:10:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1885420": [
        {
            "ioc_value": "http://223.123.73.169:35385/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:43",
            "last_seen_utc": "2026-08-25 00:19:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.73.169",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885421": [
        {
            "ioc_value": "http://153.117.33.131:55231/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:42",
            "last_seen_utc": "2026-08-25 00:19:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.33.131",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885422": [
        {
            "ioc_value": "http://103.237.157.188:60261/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:42",
            "last_seen_utc": "2026-08-25 00:19:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.237.157.188",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885423": [
        {
            "ioc_value": "http://80.83.230.144:53523/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:42",
            "last_seen_utc": "2026-08-25 00:19:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/80.83.230.144",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885424": [
        {
            "ioc_value": "http://110.38.240.183:34521/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:41",
            "last_seen_utc": "2026-08-25 00:19:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.240.183",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885425": [
        {
            "ioc_value": "http://223.123.42.238:59720/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:41",
            "last_seen_utc": "2026-08-25 00:19:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.42.238",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885426": [
        {
            "ioc_value": "http://110.38.250.142:50982/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:40",
            "last_seen_utc": "2026-08-25 00:19:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.250.142",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885427": [
        {
            "ioc_value": "http://119.73.19.38:45279/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:40",
            "last_seen_utc": "2026-08-25 00:19:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.73.19.38",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885428": [
        {
            "ioc_value": "http://103.65.30.142:38983/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:38",
            "last_seen_utc": "2026-08-25 00:19:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.65.30.142",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885429": [
        {
            "ioc_value": "http://110.38.240.188:46981/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:38",
            "last_seen_utc": "2026-08-25 00:19:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.240.188",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885430": [
        {
            "ioc_value": "http://221.14.14.113:44549/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:37",
            "last_seen_utc": "2026-08-25 00:19:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/221.14.14.113",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885431": [
        {
            "ioc_value": "http://115.54.128.38:41331/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-23 16:10:37",
            "last_seen_utc": "2026-08-25 00:19:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.54.128.38",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1885432": [
        {
            "ioc_value": "smtp.coralbridge.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 16:10:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix,webdav",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885434": [
        {
            "ioc_value": "liceny.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 16:07:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885433": [
        {
            "ioc_value": "rf65356zl4.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 15:41:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885419": [
        {
            "ioc_value": "http://shhsift.click:7647/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 15:15:25",
            "last_seen_utc": "2026-08-24 21:21:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/21768f84350ec5f530bd1ebf6058c8840c55b0513eaca927b623500c81f834e2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885418": [
        {
            "ioc_value": "ipekwgai.eng-usa-us-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 15:15:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885417": [
        {
            "ioc_value": "qfbxg48239.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 15:13:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885416": [
        {
            "ioc_value": "eng-usa-us-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 15:10:56",
            "last_seen_utc": "2026-08-26 10:26:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885412": [
        {
            "ioc_value": "epquo73102.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 15:08:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885411": [
        {
            "ioc_value": "http://kupzovo.shop:7567/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 15:05:16",
            "last_seen_utc": "2026-08-24 19:31:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3c6126417211aacd1bb0ebadcd474747890e8930a4684ccabe448d1390b3c064/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885410": [
        {
            "ioc_value": "http://bravplo.click:7713/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 15:05:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3c6126417211aacd1bb0ebadcd474747890e8930a4684ccabe448d1390b3c064/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885408": [
        {
            "ioc_value": "81.69.226.164:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885409": [
        {
            "ioc_value": "81.69.226.164:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885406": [
        {
            "ioc_value": "182.255.91.104:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885407": [
        {
            "ioc_value": "81.69.226.164:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885405": [
        {
            "ioc_value": "xdsbhs9cum.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 15:04:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885404": [
        {
            "ioc_value": "lomujizu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 14:57:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885403": [
        {
            "ioc_value": "http://bravplo.click:7713/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 14:35:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/06c363461edf2a8ef254ca27daa8e243413d0303553d094e78c29c01501e9941/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885402": [
        {
            "ioc_value": "aubretteunemployed.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 14:34:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885401": [
        {
            "ioc_value": "http://cj45439.tw1.ru/3464bd73.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-23 14:30:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885400": [
        {
            "ioc_value": "87.76.146.91:6522",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-23 14:30:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885399": [
        {
            "ioc_value": "211.161.232.30:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-23 14:30:10",
            "last_seen_utc": "2026-08-25 05:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885398": [
        {
            "ioc_value": "185.53.179.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-23 14:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885397": [
        {
            "ioc_value": "khvzuqji.eng-usa-neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 14:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885396": [
        {
            "ioc_value": "rexhahmetaj.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 14:15:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885395": [
        {
            "ioc_value": "81.69.226.164:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885394": [
        {
            "ioc_value": "182.255.91.104:2095",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885393": [
        {
            "ioc_value": "182.255.91.104:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885392": [
        {
            "ioc_value": "pinkcassi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 13:56:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885390": [
        {
            "ioc_value": "sopuly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 13:41:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885388": [
        {
            "ioc_value": "zasetesy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 13:22:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885387": [
        {
            "ioc_value": "dwc0xv75.eng-usa-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 13:13:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885386": [
        {
            "ioc_value": "eng-usa-synadentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 13:10:42",
            "last_seen_utc": "2026-08-23 13:10:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885384": [
        {
            "ioc_value": "162.251.92.64:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885382": [
        {
            "ioc_value": "119.45.225.53:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885383": [
        {
            "ioc_value": "119.45.225.53:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885381": [
        {
            "ioc_value": "182.255.91.104:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 13:05:05",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885380": [
        {
            "ioc_value": "djspe30g.eng-usa-heroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 13:02:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885376": [
        {
            "ioc_value": "kekenuri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 12:58:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885375": [
        {
            "ioc_value": "eng-usa-heroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 12:58:51",
            "last_seen_utc": "2026-08-23 12:59:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885374": [
        {
            "ioc_value": "cisonagi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 12:57:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885371": [
        {
            "ioc_value": "candacemale.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 12:49:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885369": [
        {
            "ioc_value": "aolmqkxl.eng--puraboost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 12:39:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885367": [
        {
            "ioc_value": "y9c9hw3u6p.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 12:37:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885366": [
        {
            "ioc_value": "7bel.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 12:19:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885364": [
        {
            "ioc_value": "kfirv20437.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 12:12:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885362": [
        {
            "ioc_value": "119.45.225.53:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885363": [
        {
            "ioc_value": "119.45.225.53:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885360": [
        {
            "ioc_value": "jevavalo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 11:46:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885354": [
        {
            "ioc_value": "https://5eplay-com.harikrishnaharirama.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 11:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/5eplay-com.harikrishnaharirama.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885353": [
        {
            "ioc_value": "qufiri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 11:26:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885352": [
        {
            "ioc_value": "qeranezu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 11:24:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885350": [
        {
            "ioc_value": "092efbe07f739c831b8811c95bd4a506",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.crystal_ransom",
            "malware_alias": "CrystalRansom",
            "malware_printable": "Crystal Rans0m",
            "first_seen_utc": "2026-08-23 11:19:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885348": [
        {
            "ioc_value": "cec1219e3640202c54a484ed3b88dd56fd26edfdb533c5eba8b2416e17ea6334",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crystal_ransom",
            "malware_alias": "CrystalRansom",
            "malware_printable": "Crystal Rans0m",
            "first_seen_utc": "2026-08-23 11:19:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885349": [
        {
            "ioc_value": "e5a5ba8d8c6b47ad5614d0d879c946ff7b842191",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.crystal_ransom",
            "malware_alias": "CrystalRansom",
            "malware_printable": "Crystal Rans0m",
            "first_seen_utc": "2026-08-23 11:19:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885347": [
        {
            "ioc_value": "c4ed4c72d4e1cdfabeade9a6021d3ac9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885343": [
        {
            "ioc_value": "a947f68792122ab241f671e9e7ee20d5a0e7766f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885344": [
        {
            "ioc_value": "905c791b2ed300193fbc4248c5bca33d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885345": [
        {
            "ioc_value": "496f3cba557efd0d708b008b906c45b985b996905b2f8eb922a23b892b57cfdf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885346": [
        {
            "ioc_value": "fe8a9be873800aab5c0e4b5999a2104ae92202dd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885340": [
        {
            "ioc_value": "d5729bc0561611794d6d1b49b24c0d9dc3fde404",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885341": [
        {
            "ioc_value": "ce4ba16956b7c2802e7dba75244e0352",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885342": [
        {
            "ioc_value": "b3aa80f62cf946fa6d290d17d895c2885c8c628e698a786549a31f28bfd9aaa1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885336": [
        {
            "ioc_value": "9d86ff6676fc5cb678c49c07ea88731b7016710b5a9666882042cbce1e3c51f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-23 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885337": [
        {
            "ioc_value": "3a8186eef9cf239399ca620d0ce09547d455d980",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-23 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885338": [
        {
            "ioc_value": "0c8ec07a41c4a82c234bf04287fd62a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-23 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885339": [
        {
            "ioc_value": "44c79975608861ee3a4bc452a4d643316d1d09641d40d8c9a63ed7536f3821a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-23 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885333": [
        {
            "ioc_value": "ffaf64672a89086ad11d0a290fa2468a2a16d7a0f54e57a1abf52b427f54ba0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885334": [
        {
            "ioc_value": "2b1673d6d6e892f6f8be201e01294ac4b89a845f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885335": [
        {
            "ioc_value": "0b55a6f1ae9d946ece71647dd09500b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885330": [
        {
            "ioc_value": "cdcd5f2b289d8c9354c05b55e970218bceaf61d1decd05a628fc34799b7df0a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885331": [
        {
            "ioc_value": "c09d2ade2ae1a637f84c660cb48ad030e071bf00",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885332": [
        {
            "ioc_value": "c32a11c53e93dcf9fcf66847e3b1f48f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885327": [
        {
            "ioc_value": "a4440955d55656174bdd1bb56840065f108b14d62951fc20e03192e3cc2e4c4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885328": [
        {
            "ioc_value": "4a3fa1c37cd3af5e6dfa903e4df7fcb1551a704a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885329": [
        {
            "ioc_value": "05272dc625735d8725f47aba527df940",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885324": [
        {
            "ioc_value": "aa35ff5e481184ac1c98143e3b8eb22564f1ab521c9fa1350b8854e6cc4f1f90",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885325": [
        {
            "ioc_value": "4c09793d607bab2562d6c26aa3d70f56b13905ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885326": [
        {
            "ioc_value": "beee4965c9e7cabb84d6142dfe716c8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885321": [
        {
            "ioc_value": "5b45ba17b839dc914d6c02e67cfd38a5600ae5550e63fd63f97052fbedaca544",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885322": [
        {
            "ioc_value": "b45fa9c458793e3f98e6f2f3badfe9a26c0067c7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885323": [
        {
            "ioc_value": "40701707d05ec2e5f9eb31bf03126125",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885319": [
        {
            "ioc_value": "f2e6b36b81c3874ba9786a46f50b350af0b191f3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885320": [
        {
            "ioc_value": "031afabe40a283955c88f0fb08383729",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885318": [
        {
            "ioc_value": "da8e26a61a3e854867aae352fe00da7df29ce57a7a3deca00691788b4bd1eaf1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885315": [
        {
            "ioc_value": "a99b053abcde0b4fc0421ce3dbf0ea59a21902f796824eb5df3ab2c35a5dac7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885316": [
        {
            "ioc_value": "d5e01bda1cfa555fe2ba3291af2da6f51583c90c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885317": [
        {
            "ioc_value": "2263785f56345bac53d0142c6b714db2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885313": [
        {
            "ioc_value": "e1a1fa01993bd0eba44c9b7e8adf9666a088cd6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885314": [
        {
            "ioc_value": "df9e3ef15f695a1fd62d76b3d30fd4e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885310": [
        {
            "ioc_value": "180d2faf10b8d284ea6cf41acf848ed8039f687d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885311": [
        {
            "ioc_value": "322d8fe630c940a272603e54f3ac5b46",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885312": [
        {
            "ioc_value": "b10aa8116a3f9666386596e4a8ba7b9e4a58355b2ce232cd8ff5468d3328d0c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885307": [
        {
            "ioc_value": "c42165cbd0bd0ba1d01e8d5222871e5976f22c52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885308": [
        {
            "ioc_value": "bf8bdad0876ea167c165929e0aaa17e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885309": [
        {
            "ioc_value": "e2f09c867cb0194c3d7de3c01c9895a14c53d1dd7442a8965248b3ada1b7b945",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885304": [
        {
            "ioc_value": "b1d753c6b8e3993dacb22e82d38228c273a4e2fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885305": [
        {
            "ioc_value": "3647b40736728ce6d083dda87885affc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885306": [
        {
            "ioc_value": "660966e3a75d5243ba66ef04e8aea4d66bfb325a4f3959c6d15b476351ad8d41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885302": [
        {
            "ioc_value": "aa78486beff678d435e5b9e579f02b46",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885303": [
        {
            "ioc_value": "b640207e137661b17a4b3c62c836e0d40c74df8ab42f637edf5ac3e238ad383f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885300": [
        {
            "ioc_value": "f07b7c03905657fe4ae3ebe52ffb81df7c04c520a1688bdaef2a2771240a086a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885301": [
        {
            "ioc_value": "6b7b093ab548435640215dd092346c713fe96883",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885297": [
        {
            "ioc_value": "48719c2330d78fbcec979eb173bf64fbb2b90e2efcc89f53635d3fca76d8a554",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-23 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885298": [
        {
            "ioc_value": "243a3d22db71888935d256fdf4575506336117ca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-23 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885299": [
        {
            "ioc_value": "154688c11c0c478547761d5e541d0d5b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-23 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885294": [
        {
            "ioc_value": "f63453a6624e55650957b76802c76c24678821a145694e8dc86b61ab19681e0b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.akira_stealer",
            "malware_alias": null,
            "malware_printable": "Akira Stealer",
            "first_seen_utc": "2026-08-23 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885295": [
        {
            "ioc_value": "3d3af402b61751416191308d5756872d3a7423ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.akira_stealer",
            "malware_alias": null,
            "malware_printable": "Akira Stealer",
            "first_seen_utc": "2026-08-23 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885296": [
        {
            "ioc_value": "7e6bc763c08594604d8bd6c2bb55091e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.akira_stealer",
            "malware_alias": null,
            "malware_printable": "Akira Stealer",
            "first_seen_utc": "2026-08-23 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885293": [
        {
            "ioc_value": "c996cc5447ccc6be86aefa2a78b2814f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885290": [
        {
            "ioc_value": "8e7b9a5759e4cd645017aff73c5a0034",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.akira_stealer",
            "malware_alias": null,
            "malware_printable": "Akira Stealer",
            "first_seen_utc": "2026-08-23 11:19:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885291": [
        {
            "ioc_value": "e173c3183c7624c28ca95956153be5206a560b07c2665507cb54a5e12efe6410",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885292": [
        {
            "ioc_value": "5f48efe51cf56aba43e90f039584d91d5e1d9cf8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885288": [
        {
            "ioc_value": "73de504b1d7c769d4d6bacd193b06f90aaf2fadb0fb7d2065eb02760d7074fde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.akira_stealer",
            "malware_alias": null,
            "malware_printable": "Akira Stealer",
            "first_seen_utc": "2026-08-23 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885289": [
        {
            "ioc_value": "03f15483f39c480ebdcfe20891d6601c3800267c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.akira_stealer",
            "malware_alias": null,
            "malware_printable": "Akira Stealer",
            "first_seen_utc": "2026-08-23 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885286": [
        {
            "ioc_value": "bf8f8f6e4fd5898e4fb19966633fa4df745a0665",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-23 11:19:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885287": [
        {
            "ioc_value": "0d03a3817d5b742f57d943dce6e01dc4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-23 11:19:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885283": [
        {
            "ioc_value": "6de5cbf8dd10ebbe67858aa76e5bc544f8fb2b40",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-23 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885284": [
        {
            "ioc_value": "f8b2925c5f3ec2cb2fdb9483fec2b2e8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-23 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885285": [
        {
            "ioc_value": "796442361ec0029fc72ebf3fc4b67c69a4ed8214cce213602bff08e6bdfd3049",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-23 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885280": [
        {
            "ioc_value": "9081a09cd22961c2b80f078512205803b3b3dc19",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885281": [
        {
            "ioc_value": "4f3f9bb347a2a6d2c5b1f35a677f5777",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885282": [
        {
            "ioc_value": "224863d550bc00850f8be7ea516d63d2004f167084dfc384cb0e1307159c082e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-23 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885277": [
        {
            "ioc_value": "89dc53c55864ab884af6571ecd5126d784a2fa3f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-23 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885278": [
        {
            "ioc_value": "569d640788db16fad0c52f294c079c0e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-23 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885279": [
        {
            "ioc_value": "3bd5d67962c2c260a0691c8b209a0d93ef40dddaee9cb048887b1070aa7a02ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885274": [
        {
            "ioc_value": "3ec6ff5df1c41fa320a8f1642896d5ef4ba95bb4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885275": [
        {
            "ioc_value": "20b5814bb246b612cce7d1f4d13669bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885276": [
        {
            "ioc_value": "edfd37d6b17c72badfd6b1a42b9b2254ba799ae62274d1e944986a249e71a76d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-23 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885271": [
        {
            "ioc_value": "8c7fc4e236cb8be0d0cce55b47189bd8b5c53f6d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885272": [
        {
            "ioc_value": "3c58fb6eeaf990e39e2f04558125fda2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885273": [
        {
            "ioc_value": "7dc2493b4e8680833bda7f854a2caf64743b8cf975fbd55b393636eef1867f08",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885269": [
        {
            "ioc_value": "1316d93667bb04d22ddc89f99adb14a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885270": [
        {
            "ioc_value": "db576e0cfabd6fadfff0534e764a29d73e288939baad993cc07cc7a9cc67a633",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885267": [
        {
            "ioc_value": "d8a25c8e3928fe213f3d40f80f6bb75c3dc17da4d50655fd15bb1160c3f7e687",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885268": [
        {
            "ioc_value": "d20c5c4746634435f52252aa2852e5d4082319cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885266": [
        {
            "ioc_value": "5fbeea9f24c9314ef0fdc36245f22054",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-23 11:18:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885264": [
        {
            "ioc_value": "9cfd1645a9ce589649c7821e75f72723a5e13d6dd3aab8a6bada7aa8d8651233",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-23 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885265": [
        {
            "ioc_value": "7ea8329364111610c7f029a4640c3de87afa6d14",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-23 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885262": [
        {
            "ioc_value": "3088cd77ee02faf163202631d247c53fcb1185e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885263": [
        {
            "ioc_value": "8adc5c25b4fe2bfe0fd5d623ade01b76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885260": [
        {
            "ioc_value": "3f9d90923d2d9bba0de4e375d8f3cd11",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885261": [
        {
            "ioc_value": "20082d2052d2d406bb4193990d933dc9b78bf2ccc3f2618144ada1fb7e0a995e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885259": [
        {
            "ioc_value": "56a11de9764cb29c2821441b10bf68f2b9d1a40b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885256": [
        {
            "ioc_value": "5184fd1dcf6d5d4a36549476af6bb2cec5946ce9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885257": [
        {
            "ioc_value": "45c12638098dfeef4df009e59765ea6c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885258": [
        {
            "ioc_value": "f48debf0e99b16130594458c82205af33785a97f7d3df4cfed7cd30acd266b2d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885253": [
        {
            "ioc_value": "2ced32f96f17ebe0e16b029eb5ae7206a4a87a47",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-23 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885254": [
        {
            "ioc_value": "84e38378eaee827ee86bd112d3a7bc49",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-23 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885255": [
        {
            "ioc_value": "1d7c06f35efeffe0a9e614e88a0a718c82f64cdfb65f7598104cec612ce24a45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885250": [
        {
            "ioc_value": "f4c62294aacf410dcb308a16868d3cdd6343f44b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885251": [
        {
            "ioc_value": "02746f7f86387506be7c67fe1725b4f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885252": [
        {
            "ioc_value": "11f3beea1d73e12968f999281374286c16fa7649407ed5cbc068195142a631f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-23 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885248": [
        {
            "ioc_value": "3e1aad1fe43fca159fb616a2c2d72c42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-23 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885249": [
        {
            "ioc_value": "6ded9017cd432164a43b918aad495ca55bba80a5c0785db7f416276fbf85a135",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885246": [
        {
            "ioc_value": "4772fcead4cf5168b4e26bebfc94df0f0bef08ba80871c13f23dc30ba788fa58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-23 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885247": [
        {
            "ioc_value": "b28a34e7e9defee41c70b578fcd5b9318905797e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-23 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885244": [
        {
            "ioc_value": "7d394bf5a6b5bdcefe7e1d7dbd6aca1050e19086",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885245": [
        {
            "ioc_value": "2db3fa70d6f6dad930e9239281444f18",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885241": [
        {
            "ioc_value": "01f3f92aaec8ac1a6295075cf684e73924b204e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885242": [
        {
            "ioc_value": "7fa7935cb39e9dc9bbd93886c82bdae7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885243": [
        {
            "ioc_value": "803af293617ebe93de009614e1b029fa7bd07616e9c1dda0019fd6c69fe409e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885237": [
        {
            "ioc_value": "fc0553851d495ff5b6aba8c8d472f210f5c5d7ac05dcb56c27c61941eaa3b7ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885238": [
        {
            "ioc_value": "74575f67904870eb80f3abd2bd44d33aa271bc0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885239": [
        {
            "ioc_value": "15045b47099b04256ec19beef96fcb30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885240": [
        {
            "ioc_value": "0325bda37ee3ae51de29b706986ee9345d9e110b14cdcbde615dd11f959c085a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885234": [
        {
            "ioc_value": "0bb70961853f4ce36650d296b7e945e0dda5a9ac2964e7a217cc35bbfbb1f253",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885235": [
        {
            "ioc_value": "806cd14faeca43740542fd66aa3c27ce787a8a3d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885236": [
        {
            "ioc_value": "43a2fd70c618f59ef00e86529a3bbfcd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885231": [
        {
            "ioc_value": "d63e71109ca0a304312ddc21def555dc9f73c71ddae8d7bcd6f94a189a2d8f0b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885232": [
        {
            "ioc_value": "931d023a2bb0eaf34847d43fe65cc870ca4fb06d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885233": [
        {
            "ioc_value": "31ac5ef2dc666ab821818fc716d66bf5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-23 11:18:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885228": [
        {
            "ioc_value": "da48892335940717dbde6b5134723ba6915ba8cfc8439f79cba8c06fe648ca3e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-23 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885229": [
        {
            "ioc_value": "a24a104974c73fc4efd2e15e277995f4854feb18",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-23 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885230": [
        {
            "ioc_value": "ff2a1cc7cdd7b93afc47eed96b214f7e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-23 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885226": [
        {
            "ioc_value": "d252a67dfb5621d5d1d4cd4a9e1458ddf9893b44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885227": [
        {
            "ioc_value": "c00f632e3611a91fa7545edc842f2bfd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885223": [
        {
            "ioc_value": "b22a1bf7fb8092c4056816bee060113b773a3df4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885224": [
        {
            "ioc_value": "bdc4cebe690b1862c3c6792e2b0103bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885225": [
        {
            "ioc_value": "5aec6747c739a60918b2a427cfc5b2dee95159851a5fbf7faa8656fbc2279c25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885220": [
        {
            "ioc_value": "1763234ba1cfd43a57d4b7c39dd500c7409af97f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885221": [
        {
            "ioc_value": "76055bf5046653c46f41b88b54e59611",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885222": [
        {
            "ioc_value": "10de7dbb4b67064d3dde4e2290916ae4cd7bdddb4b32f264921482616e273f0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-23 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885217": [
        {
            "ioc_value": "7a37140c752d10339713b76e5b8652ce4c1b2218",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885218": [
        {
            "ioc_value": "a71f46f1c851b18f397d33530469597e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885219": [
        {
            "ioc_value": "900c6d0225ff5738b4d0893199fb53991886ed2a1158e5fb9997fd78a0b189ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885215": [
        {
            "ioc_value": "930c53034dadf3898a659e563d8603cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885216": [
        {
            "ioc_value": "0329b1f7f7d4c751749a2ecd742d2aff51a45ce17d379fc65551952e29fd309e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-23 11:18:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885213": [
        {
            "ioc_value": "90af1515c34b6d16b4f41f70120e73ebfc034c1756bce8b570b17eb4cfb2f873",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885214": [
        {
            "ioc_value": "f0a47c381e5093742aced077b3d91d382723a41c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-23 11:18:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1885212": [
        {
            "ioc_value": "2nng0aadv4.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 11:18:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885211": [
        {
            "ioc_value": "go6q1no7.eng-usa-neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 11:10:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885210": [
        {
            "ioc_value": "eng-usa-neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 11:09:48",
            "last_seen_utc": "2026-08-25 17:23:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885209": [
        {
            "ioc_value": "182.255.91.104:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885208": [
        {
            "ioc_value": "182.255.91.104:2096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-23 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885206": [
        {
            "ioc_value": "154.198.49.31:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885207": [
        {
            "ioc_value": "159.203.69.210:48203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-23 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885205": [
        {
            "ioc_value": "https://sergiomarquesillustration.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 11:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sergiomarquesillustration.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885204": [
        {
            "ioc_value": "pixuli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 10:57:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885203": [
        {
            "ioc_value": "tdsbfjwqc.eng-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 10:56:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885199": [
        {
            "ioc_value": "ludynuse.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 10:32:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885191": [
        {
            "ioc_value": "xifovede.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 10:10:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885190": [
        {
            "ioc_value": "tyfyqeky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 10:05:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885188": [
        {
            "ioc_value": "130.12.182.39:2600",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-23 09:43:34",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1885187": [
        {
            "ioc_value": "sibuzyva.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 09:30:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885186": [
        {
            "ioc_value": "kuxojy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 09:22:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885185": [
        {
            "ioc_value": "ohomo31359.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 09:21:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885184": [
        {
            "ioc_value": "ponalu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 09:18:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885183": [
        {
            "ioc_value": "wingji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 09:12:27",
            "last_seen_utc": "2026-08-27 05:31:40",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885182": [
        {
            "ioc_value": "wj2vge4z.eng-usa-neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 09:09:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885181": [
        {
            "ioc_value": "eng-usa-neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 09:09:17",
            "last_seen_utc": "2026-08-25 12:23:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885180": [
        {
            "ioc_value": "89.144.53.144:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 09:05:05",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885179": [
        {
            "ioc_value": "qyxequro.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 08:55:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885178": [
        {
            "ioc_value": "adzvd59352.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 08:38:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885177": [
        {
            "ioc_value": "p4m4q08g.eng--neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 08:30:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885176": [
        {
            "ioc_value": "https://royalvet.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 08:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/royalvet.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885175": [
        {
            "ioc_value": "eng--neurowave.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 08:27:38",
            "last_seen_utc": "2026-08-29 18:03:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "23August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1885173": [
        {
            "ioc_value": "gysaluri.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 08:06:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885171": [
        {
            "ioc_value": "111.230.241.141:18084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885172": [
        {
            "ioc_value": "118.190.217.226:18084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885170": [
        {
            "ioc_value": "ch79s29o.eng--nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 08:02:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885169": [
        {
            "ioc_value": "8m7qs0tb.eng--glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 08:00:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885168": [
        {
            "ioc_value": "https://thinkomdigital.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 08:00:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thinkomdigital.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885167": [
        {
            "ioc_value": "eng--nervealive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 07:58:36",
            "last_seen_utc": "2026-08-25 13:25:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885166": [
        {
            "ioc_value": "eng--glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 07:57:41",
            "last_seen_utc": "2026-08-25 01:20:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "23August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1885165": [
        {
            "ioc_value": "107.151.233.120:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 07:57:13",
            "last_seen_utc": "2026-08-25 04:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885162": [
        {
            "ioc_value": "159.223.91.85:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-23 07:54:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885163": [
        {
            "ioc_value": "18.139.162.58:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-23 07:54:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885164": [
        {
            "ioc_value": "204.12.245.170:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-23 07:54:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885161": [
        {
            "ioc_value": "38.92.47.25:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-23 07:52:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885160": [
        {
            "ioc_value": "189.150.86.165:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-23 07:52:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1885159": [
        {
            "ioc_value": "daily752.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 07:41:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885158": [
        {
            "ioc_value": "8t0dn8z0ji.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 07:32:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885157": [
        {
            "ioc_value": "cedutagi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 07:21:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885156": [
        {
            "ioc_value": "kz35o1sa2o.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 07:15:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885155": [
        {
            "ioc_value": "unlmqfl5.eng-usa-neurovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 07:11:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885154": [
        {
            "ioc_value": "eng-usa-neurovera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 07:08:42",
            "last_seen_utc": "2026-08-23 07:09:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885153": [
        {
            "ioc_value": "lolycija.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 07:08:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885150": [
        {
            "ioc_value": "111.170.148.132:5080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885151": [
        {
            "ioc_value": "27.124.18.7:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885152": [
        {
            "ioc_value": "47.93.159.68:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885148": [
        {
            "ioc_value": "38.76.183.197:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885149": [
        {
            "ioc_value": "45.8.46.122:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885147": [
        {
            "ioc_value": "indogenband.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 06:40:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885145": [
        {
            "ioc_value": "rheta10.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 06:29:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885137": [
        {
            "ioc_value": "hashtagshopbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 06:20:26",
            "last_seen_utc": "2026-08-27 05:31:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885138": [
        {
            "ioc_value": "growmag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 06:20:26",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885136": [
        {
            "ioc_value": "988enrika.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 06:11:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885135": [
        {
            "ioc_value": "106.54.41.209:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885133": [
        {
            "ioc_value": "45.8.46.122:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 06:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885134": [
        {
            "ioc_value": "45.8.46.122:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 06:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885132": [
        {
            "ioc_value": "giftcardbazaar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 06:04:29",
            "last_seen_utc": "2026-08-27 05:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885131": [
        {
            "ioc_value": "sanlz88486.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:55:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885130": [
        {
            "ioc_value": "gchuy60045.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:37:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885129": [
        {
            "ioc_value": "iymzm55167.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:35:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885128": [
        {
            "ioc_value": "tnlnb87260.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885125": [
        {
            "ioc_value": "https://hzindia.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 05:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hzindia.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885126": [
        {
            "ioc_value": "https://josephonetech.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 05:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/josephonetech.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885127": [
        {
            "ioc_value": "https://moat55.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 05:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/moat55.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885124": [
        {
            "ioc_value": "qhekc92359.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:20:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885123": [
        {
            "ioc_value": "explicitsharleen.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:16:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885122": [
        {
            "ioc_value": "7ejjnjb6.eng-usa-glycomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 05:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885120": [
        {
            "ioc_value": "101.200.193.211:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885121": [
        {
            "ioc_value": "101.42.96.140:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885119": [
        {
            "ioc_value": "43.136.99.254:10001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 05:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885118": [
        {
            "ioc_value": "eng-usa-glycomute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 05:03:30",
            "last_seen_utc": "2026-08-23 05:04:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885117": [
        {
            "ioc_value": "zascj99321.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 05:01:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885114": [
        {
            "ioc_value": "https://homeinnovationsunlimited.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 05:00:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/homeinnovationsunlimited.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885115": [
        {
            "ioc_value": "https://authenticcarebd.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 05:00:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/authenticcarebd.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885113": [
        {
            "ioc_value": "xlkfdi8kjd.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 04:36:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885110": [
        {
            "ioc_value": "madelynnaked.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 04:27:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885109": [
        {
            "ioc_value": "8gmcvfr9.eng-neuro-wave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 04:19:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885107": [
        {
            "ioc_value": "152.136.43.50:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 04:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885106": [
        {
            "ioc_value": "lebenynu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 04:01:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885104": [
        {
            "ioc_value": "https://archaicpixels.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 04:00:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/archaicpixels.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885103": [
        {
            "ioc_value": "15ep8vfaek.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 03:41:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885102": [
        {
            "ioc_value": "roland-gisiger.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 03:35:44",
            "last_seen_utc": "2026-08-25 16:30:20",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885101": [
        {
            "ioc_value": "uqcqe97453.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 03:21:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885087": [
        {
            "ioc_value": "mississippicannabisschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 03:19:29",
            "last_seen_utc": "2026-08-27 05:57:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,fake-plugin,hw-fingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885088": [
        {
            "ioc_value": "oraclepacificltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 03:19:29",
            "last_seen_utc": "2026-08-31 03:02:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,fake-plugin,hw-fingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885089": [
        {
            "ioc_value": "productstudio.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 03:19:29",
            "last_seen_utc": "2026-08-27 05:31:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,fake-plugin,hw-fingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885092": [
        {
            "ioc_value": "smec.group",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 03:19:29",
            "last_seen_utc": "2026-08-27 05:31:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,fake-plugin,hw-fingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885077": [
        {
            "ioc_value": "agenciaarco.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 03:19:28",
            "last_seen_utc": "2026-08-31 03:02:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,fake-plugin,hw-fingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885076": [
        {
            "ioc_value": "laqariju.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 03:17:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885075": [
        {
            "ioc_value": "fw87ea3j88.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 03:14:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885073": [
        {
            "ioc_value": "27.124.18.6:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-23 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885072": [
        {
            "ioc_value": "5g6unmz0.eng-usa-glycofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 03:04:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885070": [
        {
            "ioc_value": "rs53tvhu.eng--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 02:59:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885069": [
        {
            "ioc_value": "jd4zow6i.eng--geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 02:59:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885068": [
        {
            "ioc_value": "eng--memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 02:57:57",
            "last_seen_utc": "2026-08-25 23:27:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1885067": [
        {
            "ioc_value": "ramalyse.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 02:54:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885065": [
        {
            "ioc_value": "lalazu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 02:17:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885064": [
        {
            "ioc_value": "kysaquce.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 02:07:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885063": [
        {
            "ioc_value": "zoznam.wiki",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885053": [
        {
            "ioc_value": "unifyz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885054": [
        {
            "ioc_value": "viagginelfirmamento.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885055": [
        {
            "ioc_value": "villa-bonna.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885056": [
        {
            "ioc_value": "webmoda.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885057": [
        {
            "ioc_value": "westcoastpb.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885058": [
        {
            "ioc_value": "wingroup.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885059": [
        {
            "ioc_value": "wpbinarymlm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885060": [
        {
            "ioc_value": "xiaotiao.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885061": [
        {
            "ioc_value": "xn--42caa2e9bqo5d1azsb3r7c.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885062": [
        {
            "ioc_value": "zepik.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:45",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885042": [
        {
            "ioc_value": "thefactsroom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885043": [
        {
            "ioc_value": "thrive-moodle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885044": [
        {
            "ioc_value": "tmlaboratory.ge",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885045": [
        {
            "ioc_value": "tolifestyles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885046": [
        {
            "ioc_value": "toluene.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885047": [
        {
            "ioc_value": "tpienterprises.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885048": [
        {
            "ioc_value": "traqwords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885049": [
        {
            "ioc_value": "tregflix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885050": [
        {
            "ioc_value": "tsv-oftersheim.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885051": [
        {
            "ioc_value": "ttl-eg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-23 04:46:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885052": [
        {
            "ioc_value": "tunapamplona.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:44",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885029": [
        {
            "ioc_value": "store.relexa.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885030": [
        {
            "ioc_value": "storyboothmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885031": [
        {
            "ioc_value": "studioluglio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885032": [
        {
            "ioc_value": "sudershanchakra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885033": [
        {
            "ioc_value": "suhaocanh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885034": [
        {
            "ioc_value": "sure.marketing",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885035": [
        {
            "ioc_value": "taqpump.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885036": [
        {
            "ioc_value": "teatrobolivar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885037": [
        {
            "ioc_value": "techlinksystems.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885038": [
        {
            "ioc_value": "techvienna.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885039": [
        {
            "ioc_value": "textilemerchandising.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885040": [
        {
            "ioc_value": "theactionbrokers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885041": [
        {
            "ioc_value": "thedoocrewhouston.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:43",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885020": [
        {
            "ioc_value": "simplesfrescas.pt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885021": [
        {
            "ioc_value": "smartsing.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885022": [
        {
            "ioc_value": "smkmuhsala3.sch.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885023": [
        {
            "ioc_value": "solar-signage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885024": [
        {
            "ioc_value": "soswordpressitalia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885025": [
        {
            "ioc_value": "spinksolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885026": [
        {
            "ioc_value": "sporjouma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885027": [
        {
            "ioc_value": "sportmiguelangelcampos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885028": [
        {
            "ioc_value": "starkdurchstarten.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 02:04:42",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885019": [
        {
            "ioc_value": "https://jocoaching.life/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 02:00:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jocoaching.life",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1885018": [
        {
            "ioc_value": "osuna.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 01:56:16",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1885016": [
        {
            "ioc_value": "rajrk49961.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 01:41:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885014": [
        {
            "ioc_value": "rsenh45910.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 01:21:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1885011": [
        {
            "ioc_value": "dollllar881122.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:20:22",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885012": [
        {
            "ioc_value": "strongerpi921.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:20:22",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885013": [
        {
            "ioc_value": "thunderstopui912.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:20:22",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885001": [
        {
            "ioc_value": "transcripcionespro.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885002": [
        {
            "ioc_value": "vagusnerveresearch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885004": [
        {
            "ioc_value": "visionremota.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885005": [
        {
            "ioc_value": "volkswagen.co.ao",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885006": [
        {
            "ioc_value": "vxcellent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885007": [
        {
            "ioc_value": "www.alnwickholidayhouse.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885008": [
        {
            "ioc_value": "www.ipivot.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885009": [
        {
            "ioc_value": "www.mudanzasmundivan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1885010": [
        {
            "ioc_value": "yaolmasaydi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:42",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884985": [
        {
            "ioc_value": "irvincap.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884986": [
        {
            "ioc_value": "josephonetech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884987": [
        {
            "ioc_value": "love-coach.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884988": [
        {
            "ioc_value": "moat55.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884989": [
        {
            "ioc_value": "mydesq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884990": [
        {
            "ioc_value": "oldglorybus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884992": [
        {
            "ioc_value": "realestateoffplan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884993": [
        {
            "ioc_value": "saggang.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884995": [
        {
            "ioc_value": "staffanlandin.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884996": [
        {
            "ioc_value": "thebestsellermethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884997": [
        {
            "ioc_value": "theuncommonadventure.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884998": [
        {
            "ioc_value": "titlevinspectionsinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884999": [
        {
            "ioc_value": "tobybenjamin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:41",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884972": [
        {
            "ioc_value": "cadpro.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884973": [
        {
            "ioc_value": "cafedeboesjer.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884974": [
        {
            "ioc_value": "centromedicobierzo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884975": [
        {
            "ioc_value": "collectivedigital.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884976": [
        {
            "ioc_value": "comicskin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884977": [
        {
            "ioc_value": "criautista.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884978": [
        {
            "ioc_value": "editions-canaima.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884979": [
        {
            "ioc_value": "flokishop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884980": [
        {
            "ioc_value": "heritagelending.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884981": [
        {
            "ioc_value": "homeinnovationsunlimited.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884982": [
        {
            "ioc_value": "icba.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884983": [
        {
            "ioc_value": "illegalbeauty.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884984": [
        {
            "ioc_value": "innosense.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:40",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884962": [
        {
            "ioc_value": "707creatives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884963": [
        {
            "ioc_value": "alvarorodriguezbarroso.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884964": [
        {
            "ioc_value": "amalurgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884965": [
        {
            "ioc_value": "ambiancewax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884966": [
        {
            "ioc_value": "arssat.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884967": [
        {
            "ioc_value": "artelekt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884968": [
        {
            "ioc_value": "authenticcarebd.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:19:39",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884961": [
        {
            "ioc_value": "xenophobic7878.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 01:16:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884960": [
        {
            "ioc_value": "qojolu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 01:15:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884959": [
        {
            "ioc_value": "gearlipi72.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 01:13:03",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884953": [
        {
            "ioc_value": "salzschatz.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:13",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884954": [
        {
            "ioc_value": "sambazoil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:13",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884955": [
        {
            "ioc_value": "sandbeach.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:13",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884956": [
        {
            "ioc_value": "sante-redox.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:13",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884957": [
        {
            "ioc_value": "serrurierlux.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:13",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884958": [
        {
            "ioc_value": "shadowcreative.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:13",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884938": [
        {
            "ioc_value": "poolbuilder360.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884939": [
        {
            "ioc_value": "portline-express.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884940": [
        {
            "ioc_value": "proctorsinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884941": [
        {
            "ioc_value": "prodetailer.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884942": [
        {
            "ioc_value": "promentalhealthwellness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884943": [
        {
            "ioc_value": "prostarcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-23 04:35:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884944": [
        {
            "ioc_value": "qalimart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884945": [
        {
            "ioc_value": "quintanarooahora.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 18:42:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884946": [
        {
            "ioc_value": "rbldunbar.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-23 02:04:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884947": [
        {
            "ioc_value": "renatabilhim.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 18:42:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884948": [
        {
            "ioc_value": "renovarcontabil.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884949": [
        {
            "ioc_value": "risoex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884950": [
        {
            "ioc_value": "ristorantecinquefoglie.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884951": [
        {
            "ioc_value": "rrracing.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884952": [
        {
            "ioc_value": "rubytuesdayscoupons.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:12",
            "last_seen_utc": "2026-08-23 02:04:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884925": [
        {
            "ioc_value": "npa.gov.zm",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884926": [
        {
            "ioc_value": "nuevocamino.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-23 03:25:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884927": [
        {
            "ioc_value": "oilmaster.uz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884928": [
        {
            "ioc_value": "oldthree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884929": [
        {
            "ioc_value": "oreplicawatches.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884930": [
        {
            "ioc_value": "originalsaffron.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884931": [
        {
            "ioc_value": "overlinegroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884932": [
        {
            "ioc_value": "pavind.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884933": [
        {
            "ioc_value": "paymaninvestments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884934": [
        {
            "ioc_value": "pcam.gm",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884935": [
        {
            "ioc_value": "peironeyasociados.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884936": [
        {
            "ioc_value": "pellicolevetrireggioemilia.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884937": [
        {
            "ioc_value": "piyshon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:11",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884913": [
        {
            "ioc_value": "mikeandapryl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884914": [
        {
            "ioc_value": "mindtechltd.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884915": [
        {
            "ioc_value": "mkdl-cepz.com.bd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884916": [
        {
            "ioc_value": "mldesilva.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884917": [
        {
            "ioc_value": "mrvideoblog.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884918": [
        {
            "ioc_value": "msengenhariaeletrica.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884919": [
        {
            "ioc_value": "mssvisoko.edu.ba",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884920": [
        {
            "ioc_value": "mxhd.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884921": [
        {
            "ioc_value": "mybalancepilates.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884922": [
        {
            "ioc_value": "myfarmcart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884923": [
        {
            "ioc_value": "namma.global",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884924": [
        {
            "ioc_value": "nijermoto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:10",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884901": [
        {
            "ioc_value": "kine-alhena.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884902": [
        {
            "ioc_value": "krupajalbschool.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884903": [
        {
            "ioc_value": "laborebr.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884904": [
        {
            "ioc_value": "lawyermarketingannex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-23 03:15:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884905": [
        {
            "ioc_value": "location-mariage-lorraine.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884906": [
        {
            "ioc_value": "lumbardhi.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884907": [
        {
            "ioc_value": "mariejuliephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884908": [
        {
            "ioc_value": "mark-atelier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884909": [
        {
            "ioc_value": "martha-jimenez.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884910": [
        {
            "ioc_value": "matrixevents.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884911": [
        {
            "ioc_value": "mavenmoodboard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884912": [
        {
            "ioc_value": "mbrogroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:09",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884885": [
        {
            "ioc_value": "iasifaitp.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884886": [
        {
            "ioc_value": "ibefpe.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884887": [
        {
            "ioc_value": "iconnect.ba",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884888": [
        {
            "ioc_value": "in-construct.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884889": [
        {
            "ioc_value": "interplast.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884890": [
        {
            "ioc_value": "jdd-tunisie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-23 02:06:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884891": [
        {
            "ioc_value": "jixsperformance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884892": [
        {
            "ioc_value": "joaozgalvao.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884893": [
        {
            "ioc_value": "jobstation.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884894": [
        {
            "ioc_value": "jospine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884895": [
        {
            "ioc_value": "jovanajokic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884896": [
        {
            "ioc_value": "jupiter.co.mz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884897": [
        {
            "ioc_value": "kandilj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884898": [
        {
            "ioc_value": "kaplancustomhomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884899": [
        {
            "ioc_value": "keluaranterkini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884900": [
        {
            "ioc_value": "kfzgutachter-stern.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:08",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884872": [
        {
            "ioc_value": "gigaowl.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884873": [
        {
            "ioc_value": "globaltradeitalia.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884874": [
        {
            "ioc_value": "go-an-zen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884875": [
        {
            "ioc_value": "goodlaw.international",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884876": [
        {
            "ioc_value": "gopifat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 21:48:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884877": [
        {
            "ioc_value": "grootvollander.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884878": [
        {
            "ioc_value": "groschen-design.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884879": [
        {
            "ioc_value": "hartmann-immo-ffb.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884880": [
        {
            "ioc_value": "hbabd.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884881": [
        {
            "ioc_value": "hdhome.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884882": [
        {
            "ioc_value": "house2home-fl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884883": [
        {
            "ioc_value": "houseofpainironwear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884884": [
        {
            "ioc_value": "hudesakaganow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:07",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884856": [
        {
            "ioc_value": "excelmotorservices.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884857": [
        {
            "ioc_value": "exeris-partners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884858": [
        {
            "ioc_value": "f3martelinho.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884859": [
        {
            "ioc_value": "falegnamecagliari.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884860": [
        {
            "ioc_value": "fast-clouds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-23 02:04:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884861": [
        {
            "ioc_value": "femasiamagazine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884862": [
        {
            "ioc_value": "forumzonaviva.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884863": [
        {
            "ioc_value": "frame3d.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884864": [
        {
            "ioc_value": "freedomjunkremoval.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884865": [
        {
            "ioc_value": "freedyxz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-23 02:06:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884866": [
        {
            "ioc_value": "gabrielgrama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884867": [
        {
            "ioc_value": "galanteevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884868": [
        {
            "ioc_value": "gd-thietbidien.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884869": [
        {
            "ioc_value": "generation4union.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884870": [
        {
            "ioc_value": "gesundepflege-schick.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884871": [
        {
            "ioc_value": "gia.edu.gh",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:06",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884848": [
        {
            "ioc_value": "dipp.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884849": [
        {
            "ioc_value": "discoverycoastrealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884850": [
        {
            "ioc_value": "diversityatwork.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884851": [
        {
            "ioc_value": "duracoolusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-23 02:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884852": [
        {
            "ioc_value": "electrofenix.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884853": [
        {
            "ioc_value": "elp-zuidveld.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884854": [
        {
            "ioc_value": "endlessts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884855": [
        {
            "ioc_value": "energyltd.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:05",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884841": [
        {
            "ioc_value": "asdepiedra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884842": [
        {
            "ioc_value": "barmitzvah-online.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-23 02:04:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884843": [
        {
            "ioc_value": "bekesmegye.reformatus.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884844": [
        {
            "ioc_value": "bespokeboardroomfurniture.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884845": [
        {
            "ioc_value": "blackjackbanter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884846": [
        {
            "ioc_value": "blueradius.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884847": [
        {
            "ioc_value": "chadearhart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:04",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884839": [
        {
            "ioc_value": "110tonn.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:03",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884840": [
        {
            "ioc_value": "archaicpixels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-23 01:07:03",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "chain-staged,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884838": [
        {
            "ioc_value": "drvishalsawale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 01:06:03",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884837": [
        {
            "ioc_value": "eagelstonhotel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 01:06:02",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884833": [
        {
            "ioc_value": "8jwsinz7.eng-usa-genesisrevival.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 01:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884831": [
        {
            "ioc_value": "regakero.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 00:56:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884829": [
        {
            "ioc_value": "dallexgoods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:56:00",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884830": [
        {
            "ioc_value": "daviddecker.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:56:00",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884828": [
        {
            "ioc_value": "dennyandrewsford.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:45:58",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884826": [
        {
            "ioc_value": "dodstech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:45:57",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884827": [
        {
            "ioc_value": "diegoteh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:45:57",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884825": [
        {
            "ioc_value": "http://zonxh.shop:7728/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 00:40:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0bb70961853f4ce36650d296b7e945e0dda5a9ac2964e7a217cc35bbfbb1f253/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884824": [
        {
            "ioc_value": "167.71.217.41:7242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 00:40:21",
            "last_seen_utc": "2026-08-31 18:23:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0325bda37ee3ae51de29b706986ee9345d9e110b14cdcbde615dd11f959c085a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884823": [
        {
            "ioc_value": "http://palaera.click:7242/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-23 00:40:20",
            "last_seen_utc": "2026-08-24 21:04:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0325bda37ee3ae51de29b706986ee9345d9e110b14cdcbde615dd11f959c085a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884822": [
        {
            "ioc_value": "drsidana.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:35:56",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884818": [
        {
            "ioc_value": "danwhitten.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:35:55",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884819": [
        {
            "ioc_value": "istitutointernazionalericercheyoga.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:35:55",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884820": [
        {
            "ioc_value": "egardening-today.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:35:55",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884821": [
        {
            "ioc_value": "globalworldtechnology.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:35:55",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884817": [
        {
            "ioc_value": "zizynyny.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 00:33:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884816": [
        {
            "ioc_value": "https://iconnect.ba/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-23 00:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/iconnect.ba",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1884815": [
        {
            "ioc_value": "vasino921.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-23 00:26:33",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1884814": [
        {
            "ioc_value": "car2000peschiera.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:25:54",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884798": [
        {
            "ioc_value": "atakaydogalgaz.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:53",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884799": [
        {
            "ioc_value": "8thamendment.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:53",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884795": [
        {
            "ioc_value": "claimyourdiscounts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:52",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884796": [
        {
            "ioc_value": "cristinagregory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:52",
            "last_seen_utc": "2026-08-25 05:06:09",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884797": [
        {
            "ioc_value": "aebads.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:52",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884792": [
        {
            "ioc_value": "aussieauctions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:51",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884793": [
        {
            "ioc_value": "cameraminoriletorino.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:51",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884794": [
        {
            "ioc_value": "computerooms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:15:51",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884791": [
        {
            "ioc_value": "nvvdiym7.eng--neurowave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:06:25",
            "last_seen_utc": "2026-08-25 15:25:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884789": [
        {
            "ioc_value": "alojamientochajari.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:05:49",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884785": [
        {
            "ioc_value": "anilnutrients.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:05:48",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884786": [
        {
            "ioc_value": "criscore.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:05:48",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884787": [
        {
            "ioc_value": "akeena.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-23 00:05:48",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884784": [
        {
            "ioc_value": "tynibyfa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-23 00:03:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884780": [
        {
            "ioc_value": "borghetto.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:55:46",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884782": [
        {
            "ioc_value": "camboesports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:55:46",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884774": [
        {
            "ioc_value": "aofm.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:55:44",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884775": [
        {
            "ioc_value": "bsafirenze.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:55:44",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884776": [
        {
            "ioc_value": "assistancepluss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:55:44",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884773": [
        {
            "ioc_value": "ancientss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:45:43",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884769": [
        {
            "ioc_value": "ascler.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:40:41",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884770": [
        {
            "ioc_value": "concoursinternationalopusartis.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:40:41",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884772": [
        {
            "ioc_value": "backpackmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:40:41",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884768": [
        {
            "ioc_value": "asociacionaispa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:35:10",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884767": [
        {
            "ioc_value": "https://www.cristinagregory.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 23:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.cristinagregory.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1884765": [
        {
            "ioc_value": "afc.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:25:09",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884766": [
        {
            "ioc_value": "affada.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:25:09",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884762": [
        {
            "ioc_value": "5dw.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:25:08",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884763": [
        {
            "ioc_value": "abhaaherbals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:25:08",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884764": [
        {
            "ioc_value": "afrikanweddingfair.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:25:08",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884761": [
        {
            "ioc_value": "1211.me.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:25:07",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884760": [
        {
            "ioc_value": "vagibe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 23:19:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884759": [
        {
            "ioc_value": "rmmfy84617.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 23:17:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884758": [
        {
            "ioc_value": "qyxusuny.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 23:15:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884757": [
        {
            "ioc_value": "abogadosenportugal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:15:07",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884756": [
        {
            "ioc_value": "verification-process.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 23:15:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884755": [
        {
            "ioc_value": "oyjxi9pd.eng-usa-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:02:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884753": [
        {
            "ioc_value": "eng-trump-token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 23:00:32",
            "last_seen_utc": "2026-08-31 01:01:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "22August2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1884752": [
        {
            "ioc_value": "https://www.aussieauctions.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 23:00:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.aussieauctions.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1884750": [
        {
            "ioc_value": "qaz4.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 22:49:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884749": [
        {
            "ioc_value": "gq0xhozbnn.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 22:48:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884748": [
        {
            "ioc_value": "vyjinygo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 22:21:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884747": [
        {
            "ioc_value": "575hjb0yu7.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 22:11:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884743": [
        {
            "ioc_value": "r49lryv7.eng--leptozan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 22:00:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884741": [
        {
            "ioc_value": "s4oaurcr.eng-genesis-revival.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 21:58:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884740": [
        {
            "ioc_value": "eng--leptozan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 21:57:33",
            "last_seen_utc": "2026-08-24 01:09:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884738": [
        {
            "ioc_value": "jquds43th8.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 21:46:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884737": [
        {
            "ioc_value": "lowtimmi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 21:32:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884736": [
        {
            "ioc_value": "toma321.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 21:27:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884735": [
        {
            "ioc_value": "9i0gzoouli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 21:25:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884734": [
        {
            "ioc_value": "biqeketo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 21:23:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884732": [
        {
            "ioc_value": "41.234.45.136:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884731": [
        {
            "ioc_value": "qj73eba3.eng--trumptoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 21:01:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884730": [
        {
            "ioc_value": "alfa-90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 20:59:57",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884729": [
        {
            "ioc_value": "eng--trumptoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 20:59:52",
            "last_seen_utc": "2026-08-22 21:00:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884728": [
        {
            "ioc_value": "vkaypa9w30.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 20:56:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884727": [
        {
            "ioc_value": "wegiruqe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 20:42:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884722": [
        {
            "ioc_value": "lycoge-ea1.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 20:19:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884717": [
        {
            "ioc_value": "80.190.77.86:9909",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884718": [
        {
            "ioc_value": "80.190.77.86:222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884715": [
        {
            "ioc_value": "6hawco2w.eng-neurosharp.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 19:56:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884713": [
        {
            "ioc_value": "tabova.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 19:46:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884712": [
        {
            "ioc_value": "35.73.165.146:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-08-22 19:46:00",
            "last_seen_utc": "2026-09-01 02:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884710": [
        {
            "ioc_value": "195.177.94.193:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-22 19:44:46",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884711": [
        {
            "ioc_value": "195.177.94.217:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-22 19:44:46",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884708": [
        {
            "ioc_value": "revepezi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 19:34:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884707": [
        {
            "ioc_value": "jagovolu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 19:24:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884706": [
        {
            "ioc_value": "35.198.202.239:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884705": [
        {
            "ioc_value": "kzvek799.eng--theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 19:00:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884703": [
        {
            "ioc_value": "eng--theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 18:59:21",
            "last_seen_utc": "2026-08-24 17:52:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884688": [
        {
            "ioc_value": "tvlmc67657.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 17:18:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884680": [
        {
            "ioc_value": "xraydbdr.eng-thebrain-song.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 17:02:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884679": [
        {
            "ioc_value": "8tc662a7.eng-homepowershield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 17:00:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884678": [
        {
            "ioc_value": "eng-thebrain-song.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 16:58:57",
            "last_seen_utc": "2026-08-22 16:59:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884677": [
        {
            "ioc_value": "eng-homepowershield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 16:57:02",
            "last_seen_utc": "2026-08-22 16:57:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884676": [
        {
            "ioc_value": "c5xxg0v3.eng-flashburnn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 16:56:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884672": [
        {
            "ioc_value": "vva5dqlz.en-en-us-zensulin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 15:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884670": [
        {
            "ioc_value": "kjgbq41860.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 15:16:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884666": [
        {
            "ioc_value": "106.54.41.209:21116",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884667": [
        {
            "ioc_value": "43.143.14.43:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884665": [
        {
            "ioc_value": "89.163.135.20:8013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884664": [
        {
            "ioc_value": "9r28j8f6.lckd.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 15:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884662": [
        {
            "ioc_value": "lckd.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 14:58:34",
            "last_seen_utc": "2026-08-23 19:17:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884658": [
        {
            "ioc_value": "windows-18.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-22 14:34:27",
            "last_seen_utc": "2026-08-23 11:04:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884659": [
        {
            "ioc_value": "64.227.76.201:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-22 14:34:27",
            "last_seen_utc": "2026-08-26 18:34:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884660": [
        {
            "ioc_value": "209.38.109.169:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-22 14:34:26",
            "last_seen_utc": "2026-08-26 18:33:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884661": [
        {
            "ioc_value": "164.92.149.181:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-22 14:34:26",
            "last_seen_utc": "2026-08-26 18:45:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884657": [
        {
            "ioc_value": "150.187.25.242:65534",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884656": [
        {
            "ioc_value": "47.97.0.198:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 14:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884617": [
        {
            "ioc_value": "123.60.182.111:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884618": [
        {
            "ioc_value": "43.136.180.65:9080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884620": [
        {
            "ioc_value": "182.16.98.92:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884619": [
        {
            "ioc_value": "182.16.98.85:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884621": [
        {
            "ioc_value": "182.16.98.94:2333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884622": [
        {
            "ioc_value": "119.42.148.189:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884623": [
        {
            "ioc_value": "101.34.218.233:8887",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884625": [
        {
            "ioc_value": "182.16.98.82:1443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884624": [
        {
            "ioc_value": "182.16.98.87:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884626": [
        {
            "ioc_value": "182.16.98.89:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884627": [
        {
            "ioc_value": "154.31.219.205:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884628": [
        {
            "ioc_value": "45.192.213.14:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884629": [
        {
            "ioc_value": "124.220.0.201:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884630": [
        {
            "ioc_value": "103.163.47.52:10010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884631": [
        {
            "ioc_value": "129.204.10.223:8028",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884632": [
        {
            "ioc_value": "207.57.188.112:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884633": [
        {
            "ioc_value": "104.168.19.222:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884634": [
        {
            "ioc_value": "23.95.243.47:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884635": [
        {
            "ioc_value": "216.152.152.241:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884636": [
        {
            "ioc_value": "50.114.177.151:809",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884638": [
        {
            "ioc_value": "192.129.141.183:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884637": [
        {
            "ioc_value": "119.45.224.18:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884639": [
        {
            "ioc_value": "111.229.153.119:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:03",
            "last_seen_utc": "2026-08-25 08:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884640": [
        {
            "ioc_value": "107.149.135.116:8444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884641": [
        {
            "ioc_value": "47.237.156.196:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884642": [
        {
            "ioc_value": "116.205.186.56:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884643": [
        {
            "ioc_value": "113.45.168.139:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884645": [
        {
            "ioc_value": "50.114.184.157:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884646": [
        {
            "ioc_value": "193.134.209.166:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884644": [
        {
            "ioc_value": "151.245.90.134:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:51:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884647": [
        {
            "ioc_value": "119.3.155.80:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:50:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884649": [
        {
            "ioc_value": "43.138.167.38:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:50:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884648": [
        {
            "ioc_value": "1.94.176.236:1001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:50:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884651": [
        {
            "ioc_value": "153.75.91.200:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:50:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884650": [
        {
            "ioc_value": "45.194.17.183:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:50:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884613": [
        {
            "ioc_value": "zefybeky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 13:50:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884652": [
        {
            "ioc_value": "209.99.191.164:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 13:50:54",
            "last_seen_utc": "2026-08-23 07:54:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884653": [
        {
            "ioc_value": "123.57.230.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 13:50:53",
            "last_seen_utc": "2026-08-23 07:54:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884616": [
        {
            "ioc_value": "106.54.41.209:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884614": [
        {
            "ioc_value": "80.190.77.86:2003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884615": [
        {
            "ioc_value": "134.209.214.178:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884612": [
        {
            "ioc_value": "jolfy6yu.ejash.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 12:59:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884611": [
        {
            "ioc_value": "ejash.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 12:58:19",
            "last_seen_utc": "2026-08-24 05:15:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884606": [
        {
            "ioc_value": "176.53.159.222:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 12:31:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9d86ff6676fc5cb678c49c07ea88731b7016710b5a9666882042cbce1e3c51f2/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884607": [
        {
            "ioc_value": "176.53.159.222:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 12:31:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9d86ff6676fc5cb678c49c07ea88731b7016710b5a9666882042cbce1e3c51f2/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884605": [
        {
            "ioc_value": "https://pullout.ezgateway.net:7443/hype/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-22 12:26:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884604": [
        {
            "ioc_value": "pullout.ezgateway.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-22 12:26:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8c30be78e53a882b7ebcd05dbcd1d70dde5abe533c87589cf94265a22de73414/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884337": [
        {
            "ioc_value": "bogawacu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 12:22:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884341": [
        {
            "ioc_value": "198.211.96.18:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-22 12:22:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884592": [
        {
            "ioc_value": "cat.jumpskyhigh.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 12:22:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1884594": [
        {
            "ioc_value": "42.177.102.201:45262",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 12:22:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8",
            "tags": "cowrie,honeypot",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1884593": [
        {
            "ioc_value": "harp.poconodessertco.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 12:22:09",
            "last_seen_utc": "2026-08-22 12:16:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1884595": [
        {
            "ioc_value": "123.173.101.30:46920",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 12:22:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef",
            "tags": "cowrie,honeypot",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1884601": [
        {
            "ioc_value": "http://153.117.6.79:34093/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 12:22:07",
            "last_seen_utc": "2026-08-25 00:19:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.79",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884602": [
        {
            "ioc_value": "http://115.48.134.112:38753/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 12:22:06",
            "last_seen_utc": "2026-08-25 00:19:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.48.134.112",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884603": [
        {
            "ioc_value": "http://153.117.8.52:40632/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 12:22:06",
            "last_seen_utc": "2026-08-25 00:19:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.8.52",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884600": [
        {
            "ioc_value": "43.140.219.182:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884599": [
        {
            "ioc_value": "nq99706w.mulip.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 11:58:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884598": [
        {
            "ioc_value": "08llaz3s.wrda.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 11:57:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884597": [
        {
            "ioc_value": "mulip.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 11:56:35",
            "last_seen_utc": "2026-08-24 05:18:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884591": [
        {
            "ioc_value": "6zhtzixq.en-en-us-geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 11:34:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884589": [
        {
            "ioc_value": "report.pantrystudio18.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 11:28:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8f23b9275ba4e855e8c5d7df8d1bf493e06539ef951e0253192a8a585ed05388/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884588": [
        {
            "ioc_value": "hoanzawojux.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 11:25:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2783dbc396d12e6d7a480e9e2739cd8ff8d5018d610fb707452f75380afa7603/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884587": [
        {
            "ioc_value": "6c255ef0b62a23e7828f04054e8f3896",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884584": [
        {
            "ioc_value": "df94520df3d218bd7982a7fc40e92530",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884585": [
        {
            "ioc_value": "edc73cf039196893ce93018f5fef4057f90a80447c9b7bf55b91a91b423abde1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884586": [
        {
            "ioc_value": "22c9f62d38f274eddf7b38a7f63d9d6c926f8c35",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884583": [
        {
            "ioc_value": "d684d14082b121f32ce1f6b9df8d173d4daee35c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884582": [
        {
            "ioc_value": "c6bfb0d885265012930ecd07a5bc2eb2e1c2db218ced4416839af5761f24f927",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884579": [
        {
            "ioc_value": "99d5dbbcec96cc84ac22c077680420e70315e19703667e5c8d9f2ec76af1acad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884580": [
        {
            "ioc_value": "1fba1be772a9cc5ec1359949e28fb1a97fad53de",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884581": [
        {
            "ioc_value": "a67819c12c69894357adbec5d970085d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884577": [
        {
            "ioc_value": "0f9aeb923449eec7d1f5f1382c69bebf68cbb908",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884578": [
        {
            "ioc_value": "ee1ed321e64aee5b57ad715a43c23835",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884574": [
        {
            "ioc_value": "b9826e3da49b12448a57cd37175e01fc776fc38e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884575": [
        {
            "ioc_value": "9f6cf57a2791b8c53733f410804dcd1a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884576": [
        {
            "ioc_value": "355c5ee15bdc6e13d52a6c2551ebffd4932bcb7b93b3f3c7584e6e3a2c420830",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884571": [
        {
            "ioc_value": "e2a6345a9ab066c8d230f10505e564914ed5fab8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884572": [
        {
            "ioc_value": "bce4944eabdb55b2b42df2c5a7bd7683",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884573": [
        {
            "ioc_value": "c2e63d8266f7c297f0303eecb4cb18dd9151ada99c13ca1683794eb8d6db8217",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884570": [
        {
            "ioc_value": "137d06e4b5009f494fd546fc87eb9fa1dcadf35664cecaeb36416c359f803a86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884569": [
        {
            "ioc_value": "1a24321c2ee34cabd7b610da455ea11d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884567": [
        {
            "ioc_value": "0bdb81149b22afe5219c75aa9679a6a8cb577f9d5659857646b2db7bf3728af1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884568": [
        {
            "ioc_value": "c71c4ee0d5a579a86ba59c8d12052c74a9d54aba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884565": [
        {
            "ioc_value": "4e76ad7a895a31a99f44a376e364ce0018e04763",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884566": [
        {
            "ioc_value": "b69cc5426070fb399791ce6bdc621049",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884563": [
        {
            "ioc_value": "5380e9b758ebf56f00edd53c2a13aef5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884564": [
        {
            "ioc_value": "b34d9f8bb178e1521ba4d62ee575563872e09153c5741a3f454bfa03083498ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:19:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884562": [
        {
            "ioc_value": "a1e0a69ab5c44a9be73f9eba32320f97375f6183",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884561": [
        {
            "ioc_value": "b4ebdf938bd45a11dc5d139bee18e7692e5c98c7511af9026558ef7d281d8c33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884559": [
        {
            "ioc_value": "4f3152749851fbc40f63d55072cc33b1fe5241a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 11:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884560": [
        {
            "ioc_value": "1962408657914463a66f4d8d3d61b7c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 11:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884555": [
        {
            "ioc_value": "e9d0b90379f9b64634720a9b1a6bf719a725f671b790bb65e340e0658cb516de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884556": [
        {
            "ioc_value": "1db584321f36523ef893b4075f7afd24a2b70d96",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884557": [
        {
            "ioc_value": "6df2733557d5247509c63cbf3e9f9fb1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884558": [
        {
            "ioc_value": "b2a33b38f8fd574fb80e9df8c4094090365ee7250593e372b854da9757a9a3c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 11:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884552": [
        {
            "ioc_value": "0dfb74014c60e953d505c76ab981c55f90ab42f2ced57f34e4fa18cd69f83b99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884553": [
        {
            "ioc_value": "5afddea028b72ef576afd99ca00de5ca10f3e1dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884554": [
        {
            "ioc_value": "58ab824b14b2f31813afeea4caa5bd0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884549": [
        {
            "ioc_value": "0299c02d7a8f75eff82dc8de30997b3f81ce887efa8b75a96315a49c0b70975f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884550": [
        {
            "ioc_value": "f4376aaf2c849fe3a5240140c62d7ad8e6896639",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884551": [
        {
            "ioc_value": "880c2ae254a73ccc92d747de5993e976",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884548": [
        {
            "ioc_value": "fae010372ab55addd31e97079a4e1b31",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884546": [
        {
            "ioc_value": "ae2ea23bf77f28d657af0f47d95148419de1ee37812504d61cac0c36dc38e701",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884547": [
        {
            "ioc_value": "a7b01ecdb80cd09cf2d6181732d909606621cdb1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884543": [
        {
            "ioc_value": "fecfd59e63c518834a601e32e782390f88c9749dcf1460c94a687d766c757718",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884544": [
        {
            "ioc_value": "a60a603271f8394c19b1e1c3a8da83e8ec05d0b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884545": [
        {
            "ioc_value": "a8eedaa9a5d431baf445c8080ac35fda",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884542": [
        {
            "ioc_value": "32bcff75191b48284e927db09b0a5fdc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 11:19:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884539": [
        {
            "ioc_value": "f62ce2042c61e211449cc1d1cc3fca94",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884540": [
        {
            "ioc_value": "85ad0b4124b657a35a01d820fff4325f5c4c3ceb60615ad54c4a0ddbcadd590c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 11:19:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884541": [
        {
            "ioc_value": "c7a9d5f6b526b726b50fa1e02d46683e0ffefede",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 11:19:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884537": [
        {
            "ioc_value": "a05e2a5c5b4b93447ad06a728f9e41ce9c65d876c87daa59ae2d8ead067d2192",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884538": [
        {
            "ioc_value": "3e7002d2684c7de7207056c12a7bb5e47fa40f28",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884534": [
        {
            "ioc_value": "fff9f02f3e58b940b9f1b628eda3d4463e17baf810b75f0cbd078952ad1ba969",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884535": [
        {
            "ioc_value": "1172046258a6bab6a26eb7c6ad19e8567e6a3378",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884536": [
        {
            "ioc_value": "8799d7664ef577e5904a49d75c610615",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884533": [
        {
            "ioc_value": "89f61b8bb4fa4229f6f18fab9e3a0a64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884530": [
        {
            "ioc_value": "04e3a5e74513b7cc7eb540940299806e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884531": [
        {
            "ioc_value": "65856b5986156143dbedada62799e8b3b18db753f9d519710654b72f2f051d54",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884532": [
        {
            "ioc_value": "103ea93f99fef644afb443b5621e596e58a44b9e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884527": [
        {
            "ioc_value": "90d5a367d6456e854288cc32e33049b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884528": [
        {
            "ioc_value": "5acbb6ee89b38eb2abf81a2b2349a4c97e7c2dd23ad4daf8d5b5b113176fef53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884529": [
        {
            "ioc_value": "002048e6ec82b326fe6bae4b6bac64de8e545026",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884524": [
        {
            "ioc_value": "1e395ee2e054a17a8e0117a0fe104b20",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884525": [
        {
            "ioc_value": "febb60b38e035167c3c5260aa038302d538ffd6ce352679f4b66db231bd7ccaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884526": [
        {
            "ioc_value": "90c729146fb83248e71297ace43add52b42d0a09",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884521": [
        {
            "ioc_value": "a8b6f506c3465cc8f015edfff552e7f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884522": [
        {
            "ioc_value": "562c8468f2906fb537d378a6d53684795f91a6fc514f461cb938f53fb37fee14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884523": [
        {
            "ioc_value": "57eb7f349a222c9aba45d710e974bbad37a5cd5e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884518": [
        {
            "ioc_value": "1158797c8d9ef2696029b1d82e8a9515",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-22 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884519": [
        {
            "ioc_value": "7c221128c38739c84f60a24c495aa2600ea152755be10de0637f2f38c948e087",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884520": [
        {
            "ioc_value": "42b7294711767ee10032a4513365dc5133c3135f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884515": [
        {
            "ioc_value": "5dd22e75f4a2814af58c317fa2e2cd92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884516": [
        {
            "ioc_value": "e3ecc6938dd5234a75a8fda454717bba20897d6aa12b9a324b5f81305d1f7d66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-22 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884517": [
        {
            "ioc_value": "31435c6f16df4fa56f251f1e45c495ae5b0c1562",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-22 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884514": [
        {
            "ioc_value": "e4260dfd76bd97463a7c875b0764068c7ca26bee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884512": [
        {
            "ioc_value": "0344ea912263f13b49d9ad862a88cf4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884513": [
        {
            "ioc_value": "137760599d5ef9de1f6997006a148d0222e4ee442e900e31837fab6d26d0eb76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884511": [
        {
            "ioc_value": "23234d20c832f1ce025a3d311f59bb9b33618d20",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884508": [
        {
            "ioc_value": "91c3431e51158aa800a452222a2404d7b82631ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884509": [
        {
            "ioc_value": "16addb6524e5cf76f4114b0979f715ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884510": [
        {
            "ioc_value": "39298be200be86c3dd12bed11d76959423a33a2d74cb719e0abf76d4e9551b9c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884506": [
        {
            "ioc_value": "60f6b6954afed7de062f392a27ec910d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884507": [
        {
            "ioc_value": "2d43d592630ad1e012da63ef7279f95dd4a8e94964e12ca2f996051875574fa6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884503": [
        {
            "ioc_value": "36e9bc475310a4f5572dd4e62ee06cd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884504": [
        {
            "ioc_value": "3b39762bbe07ca79b3d8db0e96d5cda84aee772becc387f52abc5d395b4024ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884505": [
        {
            "ioc_value": "3cc8d8374f728f5af4e2c891893c256fdf21c540",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884500": [
        {
            "ioc_value": "1778b4f8e22bb823376dc908e331acab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-22 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884501": [
        {
            "ioc_value": "8b698cb3d95ed1f781b3e36d317fee8729364a3b57ab958665ea2fb3447a723d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884502": [
        {
            "ioc_value": "d1b0cc6c0ca163564dd2243be3cd7776112cd2da",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884497": [
        {
            "ioc_value": "5f48794510a5a3418cf042d95ffa13e3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884498": [
        {
            "ioc_value": "49304556bbedab691ed3aeccdb8cb4a5b5991b984015b1abae1aeb76ad5013e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-22 11:18:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884499": [
        {
            "ioc_value": "4c227d933c300c06bfba778769369a713901d90a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-22 11:18:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884494": [
        {
            "ioc_value": "39486c05d0ed225bf18dc61de4da06f3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-22 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884495": [
        {
            "ioc_value": "066d83b98a2081e0bb075c94376aebc9b0fd6499025cab1762d83bbb4d7576c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884496": [
        {
            "ioc_value": "3b02d3ca024359776843cdd420e2a7decbb6da35",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884493": [
        {
            "ioc_value": "e3d1e99afba405d95e55656cf32c1967af5ea872",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-22 11:18:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884490": [
        {
            "ioc_value": "ea22226bb24f1e6da19ed17f7beccf0b2a1d3380",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:18:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884491": [
        {
            "ioc_value": "ee2317eedfe58fb78a2541c2277b8f6a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:18:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884492": [
        {
            "ioc_value": "cbfb130de9c46cad99bc8ac1888f6993d5d0adf70853a90766c68244be44b75c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-22 11:18:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884487": [
        {
            "ioc_value": "68b4734af511bb33cdb2b5c7d4b367956feeb0da",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884488": [
        {
            "ioc_value": "1e15f05977d0d5ddde505be77dd3b2ef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884489": [
        {
            "ioc_value": "0a3f4115a9495dca557abff7445aec5d7773906fd91a0b2060f32c2cb42ad8b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884485": [
        {
            "ioc_value": "191f72fca602289760b880eb9d573959",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884486": [
        {
            "ioc_value": "16ba5736f615fbb3c7a9861c6de1dac8b9eb6757ae815786306ed4f6c6b7bc4f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884482": [
        {
            "ioc_value": "734f2038edc0fb655e13004199f9e7da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884483": [
        {
            "ioc_value": "dc7153a7ed6e0c9666de705d53416c62eda0d0c879d6da9a108e282c529cebef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884484": [
        {
            "ioc_value": "d166d2bdc14d2a6568eebff10c0d673f603843bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884479": [
        {
            "ioc_value": "d252e8f0884cdfd7a81c26f2009b7719",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884480": [
        {
            "ioc_value": "d5aea22bf23f26d0c83d5d96f46f16a4207b69a37956ce975c1b7b2351fcc5cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884481": [
        {
            "ioc_value": "ebdf31eea680b4e3db0265e1bc9d99e1236674e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884476": [
        {
            "ioc_value": "ad7ff919835856e09be4c41d0d683bdb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-22 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884477": [
        {
            "ioc_value": "82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884478": [
        {
            "ioc_value": "26a0fda22f954435e12528f1b270ff8e046692d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884474": [
        {
            "ioc_value": "974db0246553597676603c5aafa7b1a855dc6bdbbe657d0036470dee1cbc3fea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-22 11:18:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884475": [
        {
            "ioc_value": "7ec7d2510f586ce872d7b370c9bcd38f2ae7d29c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-22 11:18:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884471": [
        {
            "ioc_value": "641fcc308925f0376adb2c30cdf7aa6710c0d227bfc4491fc803cc3efcf4941f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884472": [
        {
            "ioc_value": "8c75e2a3b40f6ab1cc796919d38f3aa2b534b93f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884473": [
        {
            "ioc_value": "7daba441fc2dd8ea0a384d3d0c9c016d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884469": [
        {
            "ioc_value": "0084efdf29628ef0e6991200dda6a652f5088c29",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884470": [
        {
            "ioc_value": "6382cc926c12e770b027b29b23a724d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884467": [
        {
            "ioc_value": "93d766dd78be7c3f2a54af0605c89014",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884468": [
        {
            "ioc_value": "a3c7d47493c861c2cdfe687144fc2a207cf1d10fd1b98c635746f76b8ebe8093",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884465": [
        {
            "ioc_value": "90cd82d7296ca7b11480d47e6e7d94bd69d586a942d39ae8c899bf5df083c46a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 11:18:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884466": [
        {
            "ioc_value": "45fe16ae9f2d825714581ecc691741bd06ef2cfb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 11:18:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884462": [
        {
            "ioc_value": "3924cc20aef6c2864187f4d5f942056b1f2ac33ab66af6e0ce0985701a3ea091",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884463": [
        {
            "ioc_value": "afcd955f27c3d919c33ce6e9bd76e03ef69f6d18",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884464": [
        {
            "ioc_value": "7cdd492f8bf92e342c2671c79baf274d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884459": [
        {
            "ioc_value": "c77dc176b6b643e833ce40829cfbc783b7a0ec317ec12e35095e6523dfb73d8a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884460": [
        {
            "ioc_value": "4ef9c4468fd4f3ac58a083393e64dcc093ebb3c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884461": [
        {
            "ioc_value": "1467f5f92f91eb363cfaf1c902ffb0a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-22 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884457": [
        {
            "ioc_value": "1a55bf701fba1ded6e25ee5770e70c02fcc85135",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884458": [
        {
            "ioc_value": "951f71e07fd49bcd48e8ca76c9c26251",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884455": [
        {
            "ioc_value": "3e32d60a5fb71b7a658d69b31402934f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884456": [
        {
            "ioc_value": "18667c138b756654501dc2d742285f9795a76209ba3565d07ed6cf11798d3308",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884452": [
        {
            "ioc_value": "cdbf10a73965ecc2c73cf27aac159362",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884453": [
        {
            "ioc_value": "6a406376be3f0dc3c700a8c637b5c4a111c8e013b49f2100dace21520aeec4b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884454": [
        {
            "ioc_value": "03340851d47839d344cfb8c1880aff5b164de902",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884451": [
        {
            "ioc_value": "c3abf0132795e05eb5bb97c39709da4786de0cf5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884448": [
        {
            "ioc_value": "a3c01477303adc97a210ab141e698c9c102d37df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884449": [
        {
            "ioc_value": "38d66258740611f96675c49c6bb9f27d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884450": [
        {
            "ioc_value": "73e065dc63b3c7a08f3f940ed7cbf761129767b191f78a9621f5b4d305cedc71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884445": [
        {
            "ioc_value": "e3cc1674278ef7801fd6b05626e83243668dcba2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-22 11:18:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884446": [
        {
            "ioc_value": "2e939c7a99dbebfbbf1a8c1e0686b53f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-22 11:18:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884447": [
        {
            "ioc_value": "78a2d2988751b159ab860349e3dd1a9f034f4f1ef4d39888b66a4c924b7e9db0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884442": [
        {
            "ioc_value": "0ccd3b9b17e7fb71448511587ce0b9c0bb37879b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884443": [
        {
            "ioc_value": "e9e036d2f0d39d32b4211def66dcc35d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884444": [
        {
            "ioc_value": "4b9d68a24e5bf83ee32a8feb43a9b74b4955c35dce3564ae62a137b7101eb903",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-22 11:18:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884440": [
        {
            "ioc_value": "4522587b220a25e4c7d7156790c9f97d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884441": [
        {
            "ioc_value": "3295712cfe22112ee05a194478533ae0beb4ab46b0f5b38c75c09beb865b8bd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884437": [
        {
            "ioc_value": "49018ec231c35909dff5ebf51d31d478",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884438": [
        {
            "ioc_value": "8e2f9c7c115d3137f5c993b0178395bca50aad733abc1ad336678b274662d4b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884439": [
        {
            "ioc_value": "1a05f20178c75ca8b44aa7e3b305de2f05bd0873",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884434": [
        {
            "ioc_value": "a6bbd1507bde25eb86d8e62782248d17",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884435": [
        {
            "ioc_value": "ae9200450fb3030b59e0a5a27eb2ab413297f0a0bdb4cb8a6755e64f38a07ff5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884436": [
        {
            "ioc_value": "bc6ff9fd63ddbc0027dfa61873908211ddacfff1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884433": [
        {
            "ioc_value": "b528fa856d48cce19a8d6c7e17c83c498152a1a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884431": [
        {
            "ioc_value": "d475185ce3d373eee45f60824742db13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-22 11:18:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884432": [
        {
            "ioc_value": "b95ac535ed7651f441589fb37db059d76bc2384c417e910fc264aa006d115c49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884428": [
        {
            "ioc_value": "54abb47f1f95155271296477f028c61e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884429": [
        {
            "ioc_value": "31611a93846b3d2307c7640e5bf04416ce3b0d337db0db5f69cdb408ca3be5d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-22 11:18:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884430": [
        {
            "ioc_value": "86ff4b770bd6afcdcc8f5c49a12e1cbb7b71a57a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-22 11:18:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884425": [
        {
            "ioc_value": "c71812b9333a66da41f16c26cebd28c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884426": [
        {
            "ioc_value": "3ef0276b36b843e6e1e39065d9c413d45515f09cd115f3c0e1dc25b227fc3e9d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884427": [
        {
            "ioc_value": "df1fcf3005cc483bbf249987ce8744ac4e189773",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884423": [
        {
            "ioc_value": "3db21013142719a5845a82e09d29e975f80caffa5649b5e4e7e6f3c229d0feb4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884424": [
        {
            "ioc_value": "8bd7037b448114e2b8145ab9127cb1d55fd0acaa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884422": [
        {
            "ioc_value": "85409b2ac42cfcb53ea6835ea0c9f143",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884419": [
        {
            "ioc_value": "3c0d3b44d58ce70320bce8aefb49499a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884420": [
        {
            "ioc_value": "47630a069e44a6981ac37e9d82ae44e7252ed184ccb30f41f2df56f26254bd40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884421": [
        {
            "ioc_value": "5b3628e224cb4c647f9ce604fa3695d66cf451e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884416": [
        {
            "ioc_value": "4dda8f314cc90279dfbb432eb39a868a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884417": [
        {
            "ioc_value": "e1ceb7fc212e182239ef470559bc0ee09c8fb12fa69f6ae09dee072bfecfb2b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884418": [
        {
            "ioc_value": "6defb66e800e635a8d95851f847737ce15ddafcc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884414": [
        {
            "ioc_value": "42c2c18036a33df2229285065cdcbd7d6fbfd1cdbb9b121fc0160f98c075add7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884415": [
        {
            "ioc_value": "6ef3420028f394c62bf52e4b297fcfe004ad124c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884411": [
        {
            "ioc_value": "a4da7669180c6c0cbd4c20bcf12906bccec11233e950a90942d20d3984fe2d94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884412": [
        {
            "ioc_value": "1b2943164c8698e53d7cdac3cefede61bb4a5496",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884413": [
        {
            "ioc_value": "1d5826c79f047865e675ffd31d92d829",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884408": [
        {
            "ioc_value": "74a9d856028ed2daf9b4ac1db1f6da9ca8140599d0e3cf223687d15ee66f3c0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884409": [
        {
            "ioc_value": "8e6861c1b11e326b59051a0d0bac8d43544485da",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884410": [
        {
            "ioc_value": "23a8d5e176ed683111fe79bdcd435521",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884407": [
        {
            "ioc_value": "ffc7dd7ffc6c89b3c0d26180ea256902",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884406": [
        {
            "ioc_value": "a8765c87a9587452017b83c37ca6443049b5e917",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884404": [
        {
            "ioc_value": "a629b59531a0780aeca540022274541f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884405": [
        {
            "ioc_value": "c2dd3509770770764b86e5ac7dacd4805ceed98708b27a208a4973e3d4f7c3ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884402": [
        {
            "ioc_value": "9f4e2dc6f2aeeb950936285e8e47f805d4e3d843e0912df08f49dc6e53bdf152",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884403": [
        {
            "ioc_value": "e2024640bbdabd720dcb2464de2e03e7dca2eb9d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884399": [
        {
            "ioc_value": "5239ca97f24a7b84ec35362adcca03935e29bc9082e3aa69c5ac73c7ac2efb19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884400": [
        {
            "ioc_value": "856035f2837753f203cc2a885d5f6b2e53d308e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884401": [
        {
            "ioc_value": "4d92f9f7bf243b194e4aca8ff85fb570",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884398": [
        {
            "ioc_value": "fa5b9ea9f85fe1980f0f5063ce44cc0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884397": [
        {
            "ioc_value": "d4b46417437b7be247b60df6c6804cbfe179ac21",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884395": [
        {
            "ioc_value": "3887291cd322703465aeb5a65f43eee7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884396": [
        {
            "ioc_value": "8dcda89abe8d1192c60f5e2ce46af13ff4a73411eb2ad1311ff80fd54541c20b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:18:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884392": [
        {
            "ioc_value": "3b9f15072c31dd119ff9dae2bd21a084",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884393": [
        {
            "ioc_value": "b3e188bf57cbc7a25832ea1623180c43508e31c9dfcd50c914b42954d6dd8ca9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884394": [
        {
            "ioc_value": "bf9592a2d325f2202869f067d54b9375eba1f378",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884389": [
        {
            "ioc_value": "fcfa826b899ee297df49f4ef756857d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:17:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884390": [
        {
            "ioc_value": "2b435e783dd02a969e3ebbef2e88898faa654e72fe48bca19d8328eed051b6ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884391": [
        {
            "ioc_value": "1c731ac38f884ff4e28faf3db19662ed346e1a60",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884386": [
        {
            "ioc_value": "b40366aadc86b16f62ae3b6e25c3ca65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884387": [
        {
            "ioc_value": "2779033e8c0bd3d1c2332d1a4c498b09d2eb090fff10a5aad7adbfb3a5231d72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:17:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884388": [
        {
            "ioc_value": "f80f02bb9a6f79f3a23fc44804976331e12631da",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 11:17:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884384": [
        {
            "ioc_value": "57713a4f584665cbb42ecddd749459c10c7a369e3b1beaaabd4d694891e16933",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884385": [
        {
            "ioc_value": "9b463b9c5967a4b1204aaa04d0637cc946359d95",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884381": [
        {
            "ioc_value": "799a7ba7f0e68529c61e4cb73bd8a1e57d5648786937335e36e53ed1ab56a932",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884382": [
        {
            "ioc_value": "71ccd7117fcd5fb491339a202d769c54213c94d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884383": [
        {
            "ioc_value": "470c5b26720a738c2b3b686ed2567fa5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884378": [
        {
            "ioc_value": "6d70fb7ee01bcca86fde4aa7154ae198eeacf9dbc852c824fe2317397ce1f1de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884379": [
        {
            "ioc_value": "3de72121436ca2bf56cccfa846b27837b9b97932",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884380": [
        {
            "ioc_value": "4c4df3c3fa1eebd090d3fdaf90414840",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884375": [
        {
            "ioc_value": "303555a2115d8510f7f8e663e3c25a3310000c3a20950089633902c6245f7cc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884376": [
        {
            "ioc_value": "4455a662d79d270c8b52d88c90b6465269ac3ccc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884377": [
        {
            "ioc_value": "68cd9101ae8329762157dcc0e138ef6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884372": [
        {
            "ioc_value": "49b81f37896cb76b7a2b54a1bdac64caeb1513abf26ddc8da5f9e24f9ab74390",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884373": [
        {
            "ioc_value": "0cb6feec9a866cd70ccf980545482fea2bc1ab50",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884374": [
        {
            "ioc_value": "09c991e1f56af909d17f19f0ebef6965",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884369": [
        {
            "ioc_value": "ba5ad26f3444892544441a364b568ad30f7c4701ade206336d450f28c6f82c55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884370": [
        {
            "ioc_value": "1644216dddcefef64e484d9480604b612783632b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884371": [
        {
            "ioc_value": "cbe0c3c04504d32da3339ba644ff3881",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-22 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884366": [
        {
            "ioc_value": "91702decfaf0d0501941ec71e9d9db522fb293aab485a766a5a9f0ccde3d983d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884367": [
        {
            "ioc_value": "f23760c0cc0b6eb343f4c9f658e87476178a7fe0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884368": [
        {
            "ioc_value": "92f3067f8f1d94cca862777828272ee3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884364": [
        {
            "ioc_value": "debca8c651e9919d21c65fa4e88e9216080b862e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-22 11:17:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884365": [
        {
            "ioc_value": "37872e46797e86469ac373f572c4b05e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-22 11:17:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884362": [
        {
            "ioc_value": "81cf6848036a350884231398870e6f8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884363": [
        {
            "ioc_value": "10e00b5609e2579472202fa80d3f7cb27d3d5f6e975c5497107dde55237b4ae0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-22 11:17:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884359": [
        {
            "ioc_value": "8d6c14f5304f7882d5280a39595ef5a6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-22 11:17:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884360": [
        {
            "ioc_value": "9065570359e5725bf1d4827b3b6af0875a9278971872719d60300cdbb1f6c0f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884361": [
        {
            "ioc_value": "93a9800db1f93cad844371ba9b1674c919b9601b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-22 11:17:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884358": [
        {
            "ioc_value": "f5d7af12fce73bee5c05d02fac6b2f3b26363134",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-22 11:17:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884356": [
        {
            "ioc_value": "62cf91d0883273ad51ef19652e8105ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 11:17:44",
            "last_seen_utc": "2026-08-23 11:19:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884357": [
        {
            "ioc_value": "ac1f8b34486eabbb9ae6c3880a4b57dbf044cbfcc7f103ab3c93ed4f26285c3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-22 11:17:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884353": [
        {
            "ioc_value": "df8969bc674b50844b205bfbe8053ee7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-22 11:17:40",
            "last_seen_utc": "2026-08-23 11:19:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884354": [
        {
            "ioc_value": "0638be794bcc72c65d713483753dfd9b67a0af6095c90e0437c4e164a0eb0ec9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 11:17:40",
            "last_seen_utc": "2026-08-23 11:19:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884355": [
        {
            "ioc_value": "41f3dd216ef75b51167d655993a87edc24a8bbee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 11:17:40",
            "last_seen_utc": "2026-08-23 11:19:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884349": [
        {
            "ioc_value": "7bfaa6511ea14a8a108879f6125b91005ae8053a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 11:17:39",
            "last_seen_utc": "2026-08-23 11:19:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884350": [
        {
            "ioc_value": "919d26f0f845dbfa79bcbad25afd7f10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 11:17:39",
            "last_seen_utc": "2026-08-23 11:19:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884351": [
        {
            "ioc_value": "e82ef52eacd50556a70b92faa957b021377506bc54d78bd4b8c7f9967fb747b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-22 11:17:39",
            "last_seen_utc": "2026-08-23 11:19:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884352": [
        {
            "ioc_value": "52887fa6fb05d455e722df0ebe0fad1eb70d3a73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-22 11:17:39",
            "last_seen_utc": "2026-08-23 11:19:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884346": [
        {
            "ioc_value": "a1605dc7169628f3702e48aee20894d3de773487",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:17:38",
            "last_seen_utc": "2026-08-23 11:19:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884347": [
        {
            "ioc_value": "6121ab3a7d1449f24971bd16dd854126",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:17:38",
            "last_seen_utc": "2026-08-23 11:19:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884348": [
        {
            "ioc_value": "fc9d4239c1570e3629d2ce849fb68d854b6021e1808e49816df9d797dc5090c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 11:17:38",
            "last_seen_utc": "2026-08-23 11:19:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884344": [
        {
            "ioc_value": "44b2d61d23b8d0e0517ec156cf952a39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:17:35",
            "last_seen_utc": "2026-08-23 11:19:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884345": [
        {
            "ioc_value": "94bff010123a54c1435a63862e802c6a59d821be7d5ee0898f30b7dd83cef5b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 11:17:35",
            "last_seen_utc": "2026-08-23 11:19:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884343": [
        {
            "ioc_value": "0d2c3cc9a366ea4eef343fee2ff045e5b3bb76af",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:17:34",
            "last_seen_utc": "2026-08-23 11:19:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884342": [
        {
            "ioc_value": "692dcba99a344de1a72c4f9241bd26197c1cf1b6bcd97fbcfea26785dd13edb6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-22 11:17:33",
            "last_seen_utc": "2026-08-23 11:19:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1884340": [
        {
            "ioc_value": "94.154.32.180:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-22 11:07:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99d5dbbcec96cc84ac22c077680420e70315e19703667e5c8d9f2ec76af1acad/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884339": [
        {
            "ioc_value": "relay.serverkinetices.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-22 11:06:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c6bfb0d885265012930ecd07a5bc2eb2e1c2db218ced4416839af5761f24f927/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884338": [
        {
            "ioc_value": "203.159.90.118:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-22 11:06:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c6bfb0d885265012930ecd07a5bc2eb2e1c2db218ced4416839af5761f24f927/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884336": [
        {
            "ioc_value": "85.175.101.203:500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884335": [
        {
            "ioc_value": "81.69.226.164:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884334": [
        {
            "ioc_value": "metric.gardenpark.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 11:04:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884333": [
        {
            "ioc_value": "2.26.252.5:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 11:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/774041365d4bc2b1ca02a647cd1cf508f75bf869af1ae2e00c9c5ad3c7735084/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884332": [
        {
            "ioc_value": "config.hubdisplay.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 11:03:02",
            "last_seen_utc": "2026-08-22 11:28:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884331": [
        {
            "ioc_value": "mon-blanc-01.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 11:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cbfb130de9c46cad99bc8ac1888f6993d5d0adf70853a90766c68244be44b75c/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884330": [
        {
            "ioc_value": "e4ep4cny.devle.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 11:00:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884329": [
        {
            "ioc_value": "devle.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 10:57:42",
            "last_seen_utc": "2026-08-24 03:14:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884328": [
        {
            "ioc_value": "ttjmpding.biodentax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 10:55:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884326": [
        {
            "ioc_value": "leaf.lonnyross.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 10:51:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884324": [
        {
            "ioc_value": "209.99.190.23:45002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 10:49:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884325": [
        {
            "ioc_value": "209.99.190.23:45003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 10:49:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884323": [
        {
            "ioc_value": "scrnmailpsie.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 10:49:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884319": [
        {
            "ioc_value": "166.88.90.59:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 10:30:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fc9d4239c1570e3629d2ce849fb68d854b6021e1808e49816df9d797dc5090c3/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884320": [
        {
            "ioc_value": "166.88.90.59:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 10:30:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fc9d4239c1570e3629d2ce849fb68d854b6021e1808e49816df9d797dc5090c3/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884321": [
        {
            "ioc_value": "166.88.90.59:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-22 10:30:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fc9d4239c1570e3629d2ce849fb68d854b6021e1808e49816df9d797dc5090c3/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884318": [
        {
            "ioc_value": "https://wiede-drive.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 10:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wiede-drive.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1884317": [
        {
            "ioc_value": "rollcoil.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-22 10:22:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884315": [
        {
            "ioc_value": "94.154.32.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-22 10:21:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c2e63d8266f7c297f0303eecb4cb18dd9151ada99c13ca1683794eb8d6db8217/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884314": [
        {
            "ioc_value": "94.154.32.205:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-22 10:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0bdb81149b22afe5219c75aa9679a6a8cb577f9d5659857646b2db7bf3728af1/",
            "tags": "ConnectWise,RMM,ScreenConncet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884312": [
        {
            "ioc_value": "102.220.160.58:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-22 10:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884313": [
        {
            "ioc_value": "102.220.160.58:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-22 10:12:18",
            "last_seen_utc": "2026-08-27 07:52:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884310": [
        {
            "ioc_value": "102.220.160.58:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-22 10:12:16",
            "last_seen_utc": "2026-08-27 07:52:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884311": [
        {
            "ioc_value": "102.220.160.58:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-22 10:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884309": [
        {
            "ioc_value": "81.69.226.164:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884308": [
        {
            "ioc_value": "81.69.226.164:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 10:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884307": [
        {
            "ioc_value": "161.248.14.133:1523",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 09:56:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65856b5986156143dbedada62799e8b3b18db753f9d519710654b72f2f051d54/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884305": [
        {
            "ioc_value": "93.152.223.39:28447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-22 09:47:02",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884304": [
        {
            "ioc_value": "80.76.49.47:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-22 09:46:45",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884303": [
        {
            "ioc_value": "45.61.182.3:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-22 09:46:22",
            "last_seen_utc": "2026-09-01 02:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884302": [
        {
            "ioc_value": "45.131.182.88:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 09:46:13",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884301": [
        {
            "ioc_value": "31.77.138.156:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-22 09:45:59",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884300": [
        {
            "ioc_value": "185.42.163.55:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 09:44:35",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884299": [
        {
            "ioc_value": "137.184.139.185:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.poshc2",
            "malware_alias": null,
            "malware_printable": "PoshC2",
            "first_seen_utc": "2026-08-22 09:43:35",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PoshC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884298": [
        {
            "ioc_value": "117.72.192.13:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-22 09:43:24",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884297": [
        {
            "ioc_value": "104.243.248.63:100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-22 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884296": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/rtt76gf84j/re49jmt98",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 09:38:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884290": [
        {
            "ioc_value": "vss7s6zte020426g12.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884291": [
        {
            "ioc_value": "wqhuc2gq08020426mws.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884292": [
        {
            "ioc_value": "y87fvt1g020426i.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884293": [
        {
            "ioc_value": "ykize140825p.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884294": [
        {
            "ioc_value": "zzxryguzfq02042676.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884271": [
        {
            "ioc_value": "o1n09oad7b170425rx.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884272": [
        {
            "ioc_value": "olrs9vga020426we5.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884273": [
        {
            "ioc_value": "ov14c020426v.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884274": [
        {
            "ioc_value": "pfdcocp140825d4.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884275": [
        {
            "ioc_value": "pwcgc6140825i6b.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884276": [
        {
            "ioc_value": "q8mj4v5sc020426m01.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884277": [
        {
            "ioc_value": "qdkopiqubr0204264l.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884278": [
        {
            "ioc_value": "qsttq0jyah020426pq.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884279": [
        {
            "ioc_value": "ra3f9y140825h.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884280": [
        {
            "ioc_value": "riv4d3dsr17042596.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884281": [
        {
            "ioc_value": "rp543g140825tby.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884282": [
        {
            "ioc_value": "u47ijv6z070725o7q.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884283": [
        {
            "ioc_value": "u9cux020426d.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884284": [
        {
            "ioc_value": "um8e86140825vjg.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884285": [
        {
            "ioc_value": "ureyd250425ft.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884286": [
        {
            "ioc_value": "v0cow1k020426uj.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884287": [
        {
            "ioc_value": "v4wbnux67t0204260.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884288": [
        {
            "ioc_value": "v6a5iq6qxq140825s.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884289": [
        {
            "ioc_value": "vd1qf14082587.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884254": [
        {
            "ioc_value": "fm9rks0204268x.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884255": [
        {
            "ioc_value": "fr249dkbg170425xdi.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884256": [
        {
            "ioc_value": "g314q2504254.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884257": [
        {
            "ioc_value": "gl91tvv9rq140825zg.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884258": [
        {
            "ioc_value": "hw91k170425ua.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884259": [
        {
            "ioc_value": "i198k0170425m9.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884260": [
        {
            "ioc_value": "im9ov070725iqu.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884261": [
        {
            "ioc_value": "j7wu9ixq0e170425ma4.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884262": [
        {
            "ioc_value": "jufhc4ddp020426v55.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884263": [
        {
            "ioc_value": "k6nlm0707259.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884264": [
        {
            "ioc_value": "k6q4eom170425c.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884265": [
        {
            "ioc_value": "kajvu140825csm.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884266": [
        {
            "ioc_value": "kf1umwoy140825wz.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884267": [
        {
            "ioc_value": "l4cbc1408255.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884268": [
        {
            "ioc_value": "lsakthu69u020426i1w.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884269": [
        {
            "ioc_value": "mt6y9isp140825c6c.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884270": [
        {
            "ioc_value": "ne2mfrw1604259fi.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884234": [
        {
            "ioc_value": "7wa2jt140825ww.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884235": [
        {
            "ioc_value": "89lcj9t170425220.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884236": [
        {
            "ioc_value": "9c93qxj2vi020426nw.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884237": [
        {
            "ioc_value": "9o88gra1408257.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884238": [
        {
            "ioc_value": "9p7hm514082581.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884239": [
        {
            "ioc_value": "a4oqs65jw1020426za.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884240": [
        {
            "ioc_value": "b26ba1yu1020426u.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884241": [
        {
            "ioc_value": "b2lriu362160425cy.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884242": [
        {
            "ioc_value": "bb6lmhi140825m16.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884243": [
        {
            "ioc_value": "bix9vc6j202042624.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884244": [
        {
            "ioc_value": "bm691uhh020426am.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884245": [
        {
            "ioc_value": "c01kxver020426y5.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884246": [
        {
            "ioc_value": "cgkksmzi140825kiv.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884247": [
        {
            "ioc_value": "csqv8f020426tlb.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884248": [
        {
            "ioc_value": "dapd5tn1b020426hz.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884249": [
        {
            "ioc_value": "dbb3e250425b.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884250": [
        {
            "ioc_value": "dbuq47t160425b.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884251": [
        {
            "ioc_value": "ebnbwm070725fhl.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884252": [
        {
            "ioc_value": "essoay020426qr.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884253": [
        {
            "ioc_value": "fdxs9160425ogi.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884221": [
        {
            "ioc_value": "0odcf8q020426rm.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884222": [
        {
            "ioc_value": "1dljf140825u79.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884223": [
        {
            "ioc_value": "26cfgoj140825ckg.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884224": [
        {
            "ioc_value": "26ua1zzb0204268s.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884225": [
        {
            "ioc_value": "44n6elzwzy020426fh.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884226": [
        {
            "ioc_value": "4l5f9s48j9140825u.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884227": [
        {
            "ioc_value": "4m41tu0204260.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884228": [
        {
            "ioc_value": "53m39h140825oaa.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884229": [
        {
            "ioc_value": "5anhw90hg140825oa.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884230": [
        {
            "ioc_value": "5lztsv140825j.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884231": [
        {
            "ioc_value": "6xvvd140825c.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884232": [
        {
            "ioc_value": "7pg439020426j.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884233": [
        {
            "ioc_value": "7vet1020426xxc.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-22 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82085936272bf263f09cb82c1d9d94c6098f5c46a973d00da4c682346e3fa71e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884220": [
        {
            "ioc_value": "svhost-update-service.casa",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-22 09:33:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/90cd82d7296ca7b11480d47e6e7d94bd69d586a942d39ae8c899bf5df083c46a/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884218": [
        {
            "ioc_value": "mypamella.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.overlay_rat",
            "malware_alias": null,
            "malware_printable": "Overlay RAT",
            "first_seen_utc": "2026-08-22 09:27:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ac1f8b34486eabbb9ae6c3880a4b57dbf044cbfcc7f103ab3c93ed4f26285c3b/",
            "tags": "Overlord,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884217": [
        {
            "ioc_value": "136.175.82.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-22 09:26:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ac1f8b34486eabbb9ae6c3880a4b57dbf044cbfcc7f103ab3c93ed4f26285c3b/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884214": [
        {
            "ioc_value": "118.25.37.47:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884213": [
        {
            "ioc_value": "206.237.27.61:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884212": [
        {
            "ioc_value": "206.237.27.61:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884081": [
        {
            "ioc_value": "https://blueberryflowes.com/cdn/static/6b35a07fcd9422f07bc4afa1f1477a8c/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884082": [
        {
            "ioc_value": "https://blueberryxcloud.com/cdn/static/f922fe7e2f67b5ff2d80b777a8ae21a6/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884083": [
        {
            "ioc_value": "https://orangexhello.com/cdn/static/73e17ee2a837f395bcf6c3287245ff1e/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884084": [
        {
            "ioc_value": "https://bananaxhellocloud.com/cdn/static/93c3117acbb2bb38d681d6477ce45947/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884087": [
        {
            "ioc_value": "https://brownpeachx.com/cdn/static/eceb2fd8da9abbbbdddd8ac653bfb17a/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884085": [
        {
            "ioc_value": "https://blueberryxo.com/cdn/static/506ac61e51034b6b454916791925a053/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884086": [
        {
            "ioc_value": "https://watermelonxo.com/cdn/static/f54cf8d9e11ec817d9487a1e61987047/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884088": [
        {
            "ioc_value": "https://chillpeachxo.com/cdn/static/1b06efc9d6751d336619c3e7739c9a93/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884089": [
        {
            "ioc_value": "blueberryflowes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884091": [
        {
            "ioc_value": "orangexhello.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884090": [
        {
            "ioc_value": "blueberryxcloud.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884092": [
        {
            "ioc_value": "bananaxhellocloud.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884093": [
        {
            "ioc_value": "blueberryxo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884094": [
        {
            "ioc_value": "watermelonxo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884095": [
        {
            "ioc_value": "brownpeachx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884096": [
        {
            "ioc_value": "chillpeachxo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884097": [
        {
            "ioc_value": "09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884098": [
        {
            "ioc_value": "25a6f57337694b957e947838cf3c78b29b88c11cfea4d5335e1742e0d2d108aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884099": [
        {
            "ioc_value": "b588e09229503d9b77c5a755007a3099dfabcf3e21d90e5c7c1498b6696bbab4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884100": [
        {
            "ioc_value": "7fe8b32b37f13a9f1ceae4bbbcc914badeb4ae188ad7edb5cff1df4922da237d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884101": [
        {
            "ioc_value": "0b7360a8be869ef2610327cf4f1a9ec661d34f7c27a1420d939f7c0429f22150",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884102": [
        {
            "ioc_value": "d333c649eda990281810c32d4e6542122e1c7157c96ddf8d4e0fa8254873f998",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884103": [
        {
            "ioc_value": "48814eeb7afb4ed3898d809b6a69cc30fb055ba4821be518feee8db6606fb0b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884104": [
        {
            "ioc_value": "c634e0023ad33f7f1f3a1dbf80008321f9bf652d2b959e3b4772914442af0e66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884105": [
        {
            "ioc_value": "4414b4cf134bb8e5db15751f2390cabc39551d730b909a7d58284364d5d13d42",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884106": [
        {
            "ioc_value": "a080e16bbf4433aa591b386a17b7e217c3cc5dd19249fdeb1af1382296be6113",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884107": [
        {
            "ioc_value": "716d7dd9e494efcc40ffa04b1b0ff2d9b01833ac7682094ce6668353600aded5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884108": [
        {
            "ioc_value": "87b1ffc787e8ab8b3f9109d57ec2f14aef70cc4925912c7c3b7a5f4a79fec4ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884109": [
        {
            "ioc_value": "9d3e1e4330984b871d11794b11b1fc8e41209097f267bb06b3fd218718194017",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884110": [
        {
            "ioc_value": "c4f6be0f329829a7eec5b1458745651a0a6e65982e48438b406e96e6e87f18ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884111": [
        {
            "ioc_value": "440888545bc33c6adfd65f312499718227c9c3ef61a7b57f9f39633cd833a21b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884112": [
        {
            "ioc_value": "0551195eb9a9e17c88f982dc83bfa2e0778fa3243b7b4c25f304826070835199",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884113": [
        {
            "ioc_value": "4316db7592e8a2ff8eb5e445a23909feb2839d30a5943b2b921e1898d05acab3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884114": [
        {
            "ioc_value": "085284e51de937d82609ea640c14ca4aad10b9eb71e12b1f6f51f3d004ee4b71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884115": [
        {
            "ioc_value": "243a47f83e115edf665831ecb257f81acdefbf7dbe860325e2ffc4a4245aa1af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884116": [
        {
            "ioc_value": "94d65bfd648a8c6ba9d05f48d89f11b0614128def305d881766397eed481a8cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884117": [
        {
            "ioc_value": "a60ab1685cb522df295acad2d1762d432b5a74c9bb3fca735a86217d0083850d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884118": [
        {
            "ioc_value": "a73195599731fc4d61697c6866dc934df5d7e227810bd9246de9775ad027d494",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884119": [
        {
            "ioc_value": "73956b714913c8783bdf7a04d99530feec5cee131937c4a53169d2fc6bacf754",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884120": [
        {
            "ioc_value": "5e94851873963fce84c3020c1e25486ae7bf15a61b55a4612c9034bbc9a3e5cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884121": [
        {
            "ioc_value": "65f07ffeb2ed5410c060674d8b8f6d0b5ee1bae7a5a552d1894fe4c4450d0dd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884122": [
        {
            "ioc_value": "19ca0fcd9837240e12feab95cf35404791a8f56cf7c7dc1df24bd0ac84ad62d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884123": [
        {
            "ioc_value": "3fa9993ed316169040a396446b19c33b3e482f56b2c2f32b3926bbba882d331b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884124": [
        {
            "ioc_value": "9da38a14afc868b19f8787b914c3e51a140628b9e84c91eeeb301ab0cf4241e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884125": [
        {
            "ioc_value": "a41f2eb4e71047a1bda2b2db5920bc624a80229b5a2040a331f0efa231b99aba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884126": [
        {
            "ioc_value": "0a0a30a6a5da4e5845e82106f863b23c99c42ed3ee68e699b5671eed8cc7721d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884127": [
        {
            "ioc_value": "912cb04c081305b8016a53695b7c37a2aba4628a86196d15eac777e2745840d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884128": [
        {
            "ioc_value": "76f77a3b0bbbc1ef6ba9689b0f6ff05192433027e57b74de25923398169e1750",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884129": [
        {
            "ioc_value": "ee4be4f1a1923e892d3f11ffb61295a71e20bc5deeee4e4657a50fda497255f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/09432e2e7e19225db2d7f35165ed477d07bb2318c22178b8f9026e5c9cf9509e",
            "tags": "avalon,crownx,manual-map-loader,msbuild-inline-task,secure-document-iso-lnk",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884162": [
        {
            "ioc_value": "185.10.68.122:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "aarch64,c2,elf,fake-systemd,golang,linux",
            "anonymous": 0,
            "reporter": "denia"
        }
    ],
    "1884159": [
        {
            "ioc_value": "165.227.199.109:8539",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 09:03:33",
            "last_seen_utc": "2026-09-01 03:36:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6efb1e0ab361cda1dd534e37e543789c,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884177": [
        {
            "ioc_value": "77.239.124.108:1995",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 09:03:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1884178": [
        {
            "ioc_value": "146.56.225.4:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:03:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884179": [
        {
            "ioc_value": "82.156.80.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:03:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884180": [
        {
            "ioc_value": "43.132.172.28:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884181": [
        {
            "ioc_value": "195.10.226.239:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884182": [
        {
            "ioc_value": "109.236.50.134:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884183": [
        {
            "ioc_value": "185.251.91.177:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884184": [
        {
            "ioc_value": "8.211.194.92:41076",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884185": [
        {
            "ioc_value": "89.125.50.200:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884186": [
        {
            "ioc_value": "193.109.78.102:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884187": [
        {
            "ioc_value": "152.53.187.147:58173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884188": [
        {
            "ioc_value": "185.43.5.225:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884189": [
        {
            "ioc_value": "203.159.90.24:59407",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884190": [
        {
            "ioc_value": "195.177.94.87:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884191": [
        {
            "ioc_value": "45.74.3.184:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-22 09:03:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884192": [
        {
            "ioc_value": "94.156.181.17:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-22 09:03:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884193": [
        {
            "ioc_value": "128.90.105.164:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 09:03:23",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884195": [
        {
            "ioc_value": "de9eba832e86277fb8d51cab9bd6e48cda9d9ae2d674497bfa2cd1f2864a60b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 09:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1884194": [
        {
            "ioc_value": "69595b33983894508509551bb0522d82e81b835025a78102d2dd631d0f590752",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 09:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1884196": [
        {
            "ioc_value": "369a504f71ba3c1831dadeb22ad55e90fd4df20d315e33eb5c77d6ebbd316685",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 09:03:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1884197": [
        {
            "ioc_value": "cf74b17c235f0eda9d67b3c6044c6b119c324ceb4296d37b68f22da32eb6d171",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 09:03:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1884198": [
        {
            "ioc_value": "802d280de5970703467d775fd8106e63a0e70469c3a3ec6902635b65bc3079cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-22 09:03:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1884199": [
        {
            "ioc_value": "4e8d33dd5c61431d070870364f45737024f4772059373529061fb9d12053df84",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 09:03:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a26ef71b1e01654b1f3c6cd",
            "tags": "cfdi,lure,maldoc,mexico,pdf,pdf-lib,sat,sinkholed,xss-delivery",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884205": [
        {
            "ioc_value": "rosy3311.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 09:03:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884211": [
        {
            "ioc_value": "122.51.12.180:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884209": [
        {
            "ioc_value": "101.34.65.69:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884210": [
        {
            "ioc_value": "123.207.189.99:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884208": [
        {
            "ioc_value": "43.139.72.114:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:03:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884207": [
        {
            "ioc_value": "43.138.154.24:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:02:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884206": [
        {
            "ioc_value": "45.221.118.46:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 09:02:51",
            "last_seen_utc": "2026-08-23 01:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884204": [
        {
            "ioc_value": "tk7r5jj6.bjkg.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 09:00:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884201": [
        {
            "ioc_value": "marcosmonsalve.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 08:54:38",
            "last_seen_utc": "2026-08-29 07:16:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884171": [
        {
            "ioc_value": "https://krem.mesoptik.com/static/modules/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 08:07:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884172": [
        {
            "ioc_value": "86b7654226949a31ae3b98e93647dd583c06777f8d168381e910ca01096070e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 08:07:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884173": [
        {
            "ioc_value": "e5e0c20f0ecb7eb56737b2f8f85620ce477342b14a7cf95549ff362eac981173",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 08:07:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884174": [
        {
            "ioc_value": "956ccaefaab5947dbe338d64fca992f9511ac1593b2470ffaece6ef3c7452c2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 08:07:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884170": [
        {
            "ioc_value": "206.237.27.61:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884167": [
        {
            "ioc_value": "43.155.168.253:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884168": [
        {
            "ioc_value": "60.185.69.27:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884169": [
        {
            "ioc_value": "206.237.27.61:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884164": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/hd3y64jd8ryt6q/dh476f7fkr9t",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 07:51:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884165": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/hd3y64jd8ryt6q/dh476f7fkr9t",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 07:51:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884161": [
        {
            "ioc_value": "o656aeo7.en-en-us-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 07:25:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884158": [
        {
            "ioc_value": "39.97.234.171:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884157": [
        {
            "ioc_value": "jzxabt89.abtoz.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 07:01:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883867": [
        {
            "ioc_value": "0fbaa7092204f4b1494e0b840b014774",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883868": [
        {
            "ioc_value": "1dcf031c40ce456b6a36a00b0acf3d11",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883869": [
        {
            "ioc_value": "2a64c3efc11bf224aa54f24e876446c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883870": [
        {
            "ioc_value": "3AD4BF5A86D26FFBF09CAE42AF330A98",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883871": [
        {
            "ioc_value": "412e9243f2981bbea3894254d105b3b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883872": [
        {
            "ioc_value": "44b6b213a6a3f299eaf88e078de95ecb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883873": [
        {
            "ioc_value": "67dc78e544ebce16b85dc7c195dfbc58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883874": [
        {
            "ioc_value": "6c2e34b30da42085240ede53ab6107d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883875": [
        {
            "ioc_value": "71ab5517f71866279d0d87d37f2ae320",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883876": [
        {
            "ioc_value": "7a4d3ba2dacccfdda55859a5dfee2671",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883877": [
        {
            "ioc_value": "89ef78f716a75964539f2db6520be362",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883878": [
        {
            "ioc_value": "8b5e513144a6138a966ea59e68bf9da2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883879": [
        {
            "ioc_value": "9642ae619b3165d23c6349002d1abe24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883880": [
        {
            "ioc_value": "a4223ce4288a230d1e6c3ff2c7639045",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883881": [
        {
            "ioc_value": "b067d5b0dbecbd6498bcdfba45dba77e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883882": [
        {
            "ioc_value": "ba27951b4ee1c341f4415d033369ecd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883883": [
        {
            "ioc_value": "bd4d81cd27125ad3d9a114922d468499",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883884": [
        {
            "ioc_value": "bd80bd3c3d0e4bf6b5b4a825650d01f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883885": [
        {
            "ioc_value": "c6bfb1643ac7474ed8a7b4f96a187fdb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883886": [
        {
            "ioc_value": "d63bacd6d6709dd68a10ef9d374c7835",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883888": [
        {
            "ioc_value": "e119845877089d6f4b0a70dc7388f316",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883887": [
        {
            "ioc_value": "de77c3303e93c9450424759f1741441c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883889": [
        {
            "ioc_value": "e9f3a0dab6949ce2cddab9e0aa80ae1a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883890": [
        {
            "ioc_value": "ea24487996eb70c1780922fb3063bcc5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883891": [
        {
            "ioc_value": "f0e3f7eba2cde91e2dedb921bab47422",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883892": [
        {
            "ioc_value": "f8cf8c23ff597700d471fb7767df8bac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883893": [
        {
            "ioc_value": "fa831c3c23824b99871163387bcda7ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883894": [
        {
            "ioc_value": "fe71af9ecf174de48d2b2ccc2c15fb04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-08-22 07:00:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/new-malware-targets-android-based-car-infotainment-systems-b8b0f033",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1883909": [
        {
            "ioc_value": "http://5.182.210.174/ok",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 07:00:31",
            "last_seen_utc": "2026-08-24 22:54:54",
            "confidence_level": 60,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper,honeypot,shell-script",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883910": [
        {
            "ioc_value": "http://5.182.210.174/2c07b9",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:28",
            "last_seen_utc": "2026-08-28 22:50:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,Mirai,ppc",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883911": [
        {
            "ioc_value": "http://5.182.210.174/http",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 07:00:28",
            "last_seen_utc": "2026-08-24 22:54:56",
            "confidence_level": 60,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,x86-64",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883912": [
        {
            "ioc_value": "http://5.182.210.174/5adf18",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:28",
            "last_seen_utc": "2026-08-28 22:50:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,mips,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883913": [
        {
            "ioc_value": "http://5.182.210.174/9c9b83",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:27",
            "last_seen_utc": "2026-08-28 22:50:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,Mirai,sh4",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883914": [
        {
            "ioc_value": "http://5.182.210.174/d9d6f9",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:27",
            "last_seen_utc": "2026-08-24 22:54:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,Mirai,x86",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883915": [
        {
            "ioc_value": "http://5.182.210.174/da8d2e",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:26",
            "last_seen_utc": "2026-08-24 22:54:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883916": [
        {
            "ioc_value": "http://5.182.210.174/d95abb",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:26",
            "last_seen_utc": "2026-08-24 22:54:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,mipsel,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883917": [
        {
            "ioc_value": "http://5.182.210.174/2b85c0",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:25",
            "last_seen_utc": "2026-08-28 22:50:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883918": [
        {
            "ioc_value": "http://5.182.210.174/67eefd",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:25",
            "last_seen_utc": "2026-08-28 22:50:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,Mirai,sparc",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883919": [
        {
            "ioc_value": "http://5.182.210.174/f6f76d",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:24",
            "last_seen_utc": "2026-08-24 22:54:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883920": [
        {
            "ioc_value": "http://5.182.210.174/9922af",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:24",
            "last_seen_utc": "2026-08-28 22:50:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,m68k,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883921": [
        {
            "ioc_value": "http://5.182.210.174/7c899f",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:24",
            "last_seen_utc": "2026-08-28 22:50:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "elf,honeypot,Mirai,x86-64",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883906": [
        {
            "ioc_value": "http://27.216.215.209:55397/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 07:00:23",
            "last_seen_utc": "2026-08-25 00:19:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.216.215.209",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883907": [
        {
            "ioc_value": "http://144.48.132.7:50888/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 07:00:22",
            "last_seen_utc": "2026-08-25 00:19:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.132.7",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883908": [
        {
            "ioc_value": "http://153.117.9.62:60606/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 07:00:22",
            "last_seen_utc": "2026-08-25 00:19:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.9.62",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883863": [
        {
            "ioc_value": "147646p8g0.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883864": [
        {
            "ioc_value": "kulygo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883898": [
        {
            "ioc_value": "http://gfoqsewps57xcyxoedle2gd53o6jne6y5nq5eh25muksqwzutzq7b3ad.onion/route.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 07:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/browse/signature/Efimer/",
            "tags": "Efimer",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1883899": [
        {
            "ioc_value": "gfoqsewps57xcyxoedle2gd53o6jne6y5nq5eh25muksqwzutzq7b3ad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 07:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/browse/signature/Efimer/",
            "tags": "Efimer",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1883904": [
        {
            "ioc_value": "e421ad53b169282b04e50e1b9d1faa9e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-22 07:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883922": [
        {
            "ioc_value": "http://5.182.210.174/334215",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:14",
            "last_seen_utc": "2026-08-28 22:50:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "arm,elf,honeypot,Mirai",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883926": [
        {
            "ioc_value": "lottiefashionable.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883972": [
        {
            "ioc_value": "ldanr05738.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883973": [
        {
            "ioc_value": "musekeci.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884008": [
        {
            "ioc_value": "pypynyme.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884015": [
        {
            "ioc_value": "dl.frostwillow.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 07:00:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1873785",
            "tags": "ClearFake,ClickFix,WebDAV",
            "anonymous": 0,
            "reporter": "Phisto"
        }
    ],
    "1884016": [
        {
            "ioc_value": "wiede-drive.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 07:00:10",
            "last_seen_utc": "2026-08-22 11:57:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://threatfox.abuse.ch/ioc/1873785/",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "Phisto"
        }
    ],
    "1884017": [
        {
            "ioc_value": "ryfdskufgwpc.tiroalpaloes.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 07:00:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1873785/",
            "tags": "ClickFix,WebDAV",
            "anonymous": 0,
            "reporter": "Phisto"
        }
    ],
    "1884018": [
        {
            "ioc_value": "python3.en-us--balancing.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 07:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1873785/",
            "tags": "ClickFix,WebDav",
            "anonymous": 0,
            "reporter": "Phisto"
        }
    ],
    "1884019": [
        {
            "ioc_value": "13D6D4FD239DB44ADCF4E9D8A578DB3B4B5A75D5D70830AD888ED79D522C1258",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 07:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1873785/",
            "tags": "ClickFix,explorer.exe,injection",
            "anonymous": 0,
            "reporter": "Phisto"
        }
    ],
    "1884020": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/payphone-blip/flamingo/lola",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-22 07:00:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1873785/",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "Phisto"
        }
    ],
    "1884041": [
        {
            "ioc_value": "http://91.92.47.97/softbot.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:04",
            "last_seen_utc": "2026-08-25 00:19:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.92.47.97",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884042": [
        {
            "ioc_value": "http://222.138.237.14:38940/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 07:00:04",
            "last_seen_utc": "2026-08-25 00:19:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/222.138.237.14",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884043": [
        {
            "ioc_value": "60786e24a45df08c6b53a35b485d6243371d43e6749390e7304e7c7a0d97d521",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-22 07:00:03",
            "last_seen_utc": "2026-08-25 00:20:18",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.92.47.97",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884057": [
        {
            "ioc_value": "qycaloky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884075": [
        {
            "ioc_value": "ustux26575.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 07:00:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884130": [
        {
            "ioc_value": "150.109.93.78:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-22 07:00:00",
            "last_seen_utc": "2026-08-30 13:17:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1884141": [
        {
            "ioc_value": "3faadf0db8cb12791efc12956752a57d69e0ee52eecbe66cbbc70f2008e37626",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-22 06:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "404keylogger,jscript,malspam,mexico,rar,snake-keylogger",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884156": [
        {
            "ioc_value": "xsulr962.mruh.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 06:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884133": [
        {
            "ioc_value": "gezame.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 06:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884137": [
        {
            "ioc_value": "64ba3f3305da013c96a3cd2d3536949c1d7757f7eb2ea11c28bdd061da7e2296",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 06:59:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/686f82f9bc78135c559c77a9cddb2be1b893da7f8ee77eb935626a8f1eaef0d7",
            "tags": "go,hostsailor,msi,socks5,tunnel,yamux",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884138": [
        {
            "ioc_value": "686f82f9bc78135c559c77a9cddb2be1b893da7f8ee77eb935626a8f1eaef0d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 06:59:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/686f82f9bc78135c559c77a9cddb2be1b893da7f8ee77eb935626a8f1eaef0d7",
            "tags": "go,hostsailor,msi,socks5,tunnel,yamux",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1884142": [
        {
            "ioc_value": "eb68bdd63e187864711d98f6121bcb5f19d5483d0187150de77acc8a1097204f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-22 06:59:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "404keylogger,jscript,malspam,mexico,rar,snake-keylogger",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884143": [
        {
            "ioc_value": "f067ff68e80f3f037c43069655689d284b587d52368e4f3b20a2d9466fec9f40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-22 06:59:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "404keylogger,amsi-bypass,crypter,etw-bypass,runpe,snake-keylogger",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884144": [
        {
            "ioc_value": "4fef263fa94dc0c45d65a24739d906d2144bb9b8022b5a93713a7fed4f715fba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-22 06:59:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "404keylogger,amsi-bypass,crypter,etw-bypass,runpe,snake-keylogger",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884145": [
        {
            "ioc_value": "dc954b97b95d03465f0f981c3bfdb3bc26a3a9812ce74dbae7fdea6368cd8125",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-22 06:59:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "404keylogger,amsi-bypass,crypter,etw-bypass,runpe,snake-keylogger",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884146": [
        {
            "ioc_value": "adsgroupsac.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.404keylogger",
            "malware_alias": "404KeyLogger,Snake Keylogger",
            "malware_printable": "404 Keylogger",
            "first_seen_utc": "2026-08-22 06:59:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://otx.alienvault.com/pulse/6a89200574bfcb832a32e59d",
            "tags": "compromised-relay,smtp-exfiltration,snake-keylogger,victim",
            "anonymous": 0,
            "reporter": "LinkusBlame"
        }
    ],
    "1884147": [
        {
            "ioc_value": "http://101.53.229.17:41995/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-22 06:59:53",
            "last_seen_utc": "2026-08-25 00:19:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.229.17",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1884151": [
        {
            "ioc_value": "3fw3dkexe1.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-22 06:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1884155": [
        {
            "ioc_value": "91.92.34.194:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 06:58:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3906712/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884154": [
        {
            "ioc_value": "g0nyy40c.swin9.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 06:56:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884153": [
        {
            "ioc_value": "abtoz.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 06:56:48",
            "last_seen_utc": "2026-08-22 06:57:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884152": [
        {
            "ioc_value": "mruh.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 06:55:57",
            "last_seen_utc": "2026-08-24 00:17:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884148": [
        {
            "ioc_value": "217.60.195.33:17541",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-22 06:30:39",
            "last_seen_utc": "2026-08-31 04:06:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10e00b5609e2579472202fa80d3f7cb27d3d5f6e975c5497107dde55237b4ae0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884140": [
        {
            "ioc_value": "http://zakuiru.shop:9048/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 06:00:37",
            "last_seen_utc": "2026-08-24 20:12:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/91702decfaf0d0501941ec71e9d9db522fb293aab485a766a5a9f0ccde3d983d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884139": [
        {
            "ioc_value": "http://kupzovo.shop:7567/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 06:00:27",
            "last_seen_utc": "2026-08-24 20:12:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/91702decfaf0d0501941ec71e9d9db522fb293aab485a766a5a9f0ccde3d983d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884136": [
        {
            "ioc_value": "43.136.99.254:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884135": [
        {
            "ioc_value": "113.44.89.87:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884134": [
        {
            "ioc_value": "43.155.168.253:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-22 05:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884132": [
        {
            "ioc_value": "d8f3565o.abell.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 04:59:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884131": [
        {
            "ioc_value": "abell.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 04:56:52",
            "last_seen_utc": "2026-08-22 04:57:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884080": [
        {
            "ioc_value": "ride4you.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 04:02:34",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884079": [
        {
            "ioc_value": "p7yjux0i.en-en-usa-memorylift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 03:13:56",
            "last_seen_utc": "2026-08-25 19:26:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884077": [
        {
            "ioc_value": "169.239.128.75:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884078": [
        {
            "ioc_value": "185.242.3.178:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884076": [
        {
            "ioc_value": "6hbt9k7l.eng-en-bloodarmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 02:58:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884071": [
        {
            "ioc_value": "vfr0i0sw.eng-eng-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 01:59:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884070": [
        {
            "ioc_value": "verico-de-id.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 01:56:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884069": [
        {
            "ioc_value": "u0naz53l.eng-en--glucore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 01:56:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884068": [
        {
            "ioc_value": "eng-eng-menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 01:55:59",
            "last_seen_utc": "2026-08-22 01:56:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884066": [
        {
            "ioc_value": "156.247.41.9:668",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 01:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884065": [
        {
            "ioc_value": "43.106.5.146:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 01:35:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884064": [
        {
            "ioc_value": "43.106.5.146:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 01:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884063": [
        {
            "ioc_value": "192.252.178.137:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 01:15:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884062": [
        {
            "ioc_value": "192.252.178.137:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 01:15:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884060": [
        {
            "ioc_value": "199.187.25.93:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884061": [
        {
            "ioc_value": "199.187.25.93:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-22 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884059": [
        {
            "ioc_value": "r066m9wa.eng-cardio-slim-tea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 00:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884058": [
        {
            "ioc_value": "eng-cardio-slim-tea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 00:55:45",
            "last_seen_utc": "2026-08-22 00:55:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1884056": [
        {
            "ioc_value": "http://zakuiru.shop:9048/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 00:45:23",
            "last_seen_utc": "2026-08-25 02:20:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78a2d2988751b159ab860349e3dd1a9f034f4f1ef4d39888b66a4c924b7e9db0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884055": [
        {
            "ioc_value": "http://spareon.click:8811/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 00:45:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78a2d2988751b159ab860349e3dd1a9f034f4f1ef4d39888b66a4c924b7e9db0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884054": [
        {
            "ioc_value": "http://spareon.click:8811/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 00:40:25",
            "last_seen_utc": "2026-08-24 20:02:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/73e065dc63b3c7a08f3f940ed7cbf761129767b191f78a9621f5b4d305cedc71/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884048": [
        {
            "ioc_value": "47.236.197.86:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884049": [
        {
            "ioc_value": "107.172.63.153:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884050": [
        {
            "ioc_value": "8.156.84.216:8811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884051": [
        {
            "ioc_value": "107.172.190.252:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884052": [
        {
            "ioc_value": "43.138.210.138:44333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884053": [
        {
            "ioc_value": "39.107.71.36:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884046": [
        {
            "ioc_value": "96.126.191.30:6080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884047": [
        {
            "ioc_value": "23.27.47.158:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:26:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884045": [
        {
            "ioc_value": "drum.poconodessertco.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-22 00:22:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884044": [
        {
            "ioc_value": "http://kupzovo.shop:7567/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 00:20:22",
            "last_seen_utc": "2026-08-24 21:09:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/18667c138b756654501dc2d742285f9795a76209ba3565d07ed6cf11798d3308/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884040": [
        {
            "ioc_value": "http://zakuiru.shop:9048/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 00:15:37",
            "last_seen_utc": "2026-08-24 19:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3c7d47493c861c2cdfe687144fc2a207cf1d10fd1b98c635746f76b8ebe8093/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884039": [
        {
            "ioc_value": "http://xightne.click:7242/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-22 00:15:34",
            "last_seen_utc": "2026-08-24 19:51:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3c7d47493c861c2cdfe687144fc2a207cf1d10fd1b98c635746f76b8ebe8093/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884038": [
        {
            "ioc_value": "156.251.11.97:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 00:15:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884037": [
        {
            "ioc_value": "156.251.11.97:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-22 00:15:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884036": [
        {
            "ioc_value": "31.58.87.123:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-22 00:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884035": [
        {
            "ioc_value": "31.58.87.123:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-22 00:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884034": [
        {
            "ioc_value": "31.58.87.123:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-22 00:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884028": [
        {
            "ioc_value": "45.86.229.111:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:03:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884029": [
        {
            "ioc_value": "129.211.168.165:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:03:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884030": [
        {
            "ioc_value": "103.153.36.86:2000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:03:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884031": [
        {
            "ioc_value": "154.86.30.94:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:03:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884032": [
        {
            "ioc_value": "124.223.221.83:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:03:04",
            "last_seen_utc": "2026-08-24 05:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884033": [
        {
            "ioc_value": "68.183.147.242:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-22 00:03:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884027": [
        {
            "ioc_value": "81.70.95.138:9595",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:45",
            "last_seen_utc": "2026-08-24 02:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884021": [
        {
            "ioc_value": "120.48.49.104:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884022": [
        {
            "ioc_value": "119.42.148.187:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884023": [
        {
            "ioc_value": "117.72.173.50:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884024": [
        {
            "ioc_value": "198.23.228.112:39001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884025": [
        {
            "ioc_value": "178.16.52.120:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:44",
            "last_seen_utc": "2026-08-24 03:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884026": [
        {
            "ioc_value": "8.129.227.22:10008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 23:41:44",
            "last_seen_utc": "2026-08-27 09:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884013": [
        {
            "ioc_value": "64.90.19.141:6088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 23:10:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884012": [
        {
            "ioc_value": "64.90.19.141:6099",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 23:10:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1884011": [
        {
            "ioc_value": "v1cn5g4p.en-en--menbalancepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 23:07:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884009": [
        {
            "ioc_value": "pnfwwfnp.eng-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 22:59:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1884007": [
        {
            "ioc_value": "193.104.75.44:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:46:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884001": [
        {
            "ioc_value": "156.227.28.161:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884002": [
        {
            "ioc_value": "172.96.137.162:30330",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884003": [
        {
            "ioc_value": "85.137.63.86:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884004": [
        {
            "ioc_value": "212.192.15.13:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884005": [
        {
            "ioc_value": "147.185.197.5:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884006": [
        {
            "ioc_value": "5.175.189.139:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883988": [
        {
            "ioc_value": "89.127.233.186:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883989": [
        {
            "ioc_value": "142.91.109.153:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883990": [
        {
            "ioc_value": "89.223.95.179:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883991": [
        {
            "ioc_value": "103.253.43.20:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883992": [
        {
            "ioc_value": "213.139.205.45:33300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883993": [
        {
            "ioc_value": "89.223.95.174:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883994": [
        {
            "ioc_value": "147.78.65.252:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883995": [
        {
            "ioc_value": "89.223.95.170:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883996": [
        {
            "ioc_value": "89.223.95.176:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883997": [
        {
            "ioc_value": "23.94.145.203:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883998": [
        {
            "ioc_value": "23.95.230.28:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883999": [
        {
            "ioc_value": "89.223.95.177:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1884000": [
        {
            "ioc_value": "38.127.216.221:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883985": [
        {
            "ioc_value": "45.61.176.63:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883986": [
        {
            "ioc_value": "185.233.166.158:35333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883987": [
        {
            "ioc_value": "45.13.237.55:49208",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 22:45:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883984": [
        {
            "ioc_value": "drum.jumpskyhigh.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 22:41:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883983": [
        {
            "ioc_value": "176.123.9.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 22:39:31",
            "last_seen_utc": "2026-08-22 01:05:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883981": [
        {
            "ioc_value": "192.229.96.31:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 22:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883980": [
        {
            "ioc_value": "http://zakuiru.shop:9048/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 21:55:25",
            "last_seen_utc": "2026-08-24 19:56:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc7153a7ed6e0c9666de705d53416c62eda0d0c879d6da9a108e282c529cebef/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883979": [
        {
            "ioc_value": "http://kupzovo.shop:7567/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 21:55:19",
            "last_seen_utc": "2026-08-24 19:56:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc7153a7ed6e0c9666de705d53416c62eda0d0c879d6da9a108e282c529cebef/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883978": [
        {
            "ioc_value": "3q0j1xn2.en-en-en-theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 20:58:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883977": [
        {
            "ioc_value": "dm75pxy7.eng--cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 20:58:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883976": [
        {
            "ioc_value": "ccy6w1d1.en-en--cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 20:55:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883975": [
        {
            "ioc_value": "en-en-en-theeloncode.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 20:55:06",
            "last_seen_utc": "2026-08-24 07:15:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883974": [
        {
            "ioc_value": "eng--cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 20:54:45",
            "last_seen_utc": "2026-08-21 22:55:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883971": [
        {
            "ioc_value": "http://vexdico.shop:8539/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 20:25:23",
            "last_seen_utc": "2026-08-24 19:51:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/066d83b98a2081e0bb075c94376aebc9b0fd6499025cab1762d83bbb4d7576c6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883970": [
        {
            "ioc_value": "http://kupzovo.shop:7567/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 20:25:15",
            "last_seen_utc": "2026-08-24 19:51:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/066d83b98a2081e0bb075c94376aebc9b0fd6499025cab1762d83bbb4d7576c6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883969": [
        {
            "ioc_value": "118.25.37.47:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883967": [
        {
            "ioc_value": "38.247.165.127:8880",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883968": [
        {
            "ioc_value": "38.247.165.127:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883966": [
        {
            "ioc_value": "162.251.92.64:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883965": [
        {
            "ioc_value": "82.29.101.38:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-21 19:46:56",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883964": [
        {
            "ioc_value": "31.59.41.79:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 19:46:06",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883963": [
        {
            "ioc_value": "31.57.184.154:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 19:46:05",
            "last_seen_utc": "2026-09-01 02:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883962": [
        {
            "ioc_value": "172.111.163.165:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-21 19:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883961": [
        {
            "ioc_value": "185.34.147.35:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 19:44:39",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883960": [
        {
            "ioc_value": "185.34.147.34:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883959": [
        {
            "ioc_value": "185.34.147.33:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 19:44:37",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883958": [
        {
            "ioc_value": "185.34.147.31:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 19:44:35",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883956": [
        {
            "ioc_value": "104.249.10.86:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 19:43:15",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883957": [
        {
            "ioc_value": "104.249.10.86:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 19:43:15",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883955": [
        {
            "ioc_value": "http://zakuiru.shop:9048/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 19:25:21",
            "last_seen_utc": "2026-08-24 19:41:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b698cb3d95ed1f781b3e36d317fee8729364a3b57ab958665ea2fb3447a723d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883951": [
        {
            "ioc_value": "202.181.177.126:48921",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883952": [
        {
            "ioc_value": "206.245.132.230:35333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883953": [
        {
            "ioc_value": "45.141.215.195:59404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883943": [
        {
            "ioc_value": "43.136.132.144:58443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883944": [
        {
            "ioc_value": "94.237.103.53:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883945": [
        {
            "ioc_value": "172.93.187.109:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883946": [
        {
            "ioc_value": "169.58.198.202:8050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883947": [
        {
            "ioc_value": "31.58.87.123:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883948": [
        {
            "ioc_value": "198.144.189.94:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883949": [
        {
            "ioc_value": "91.193.18.110:60010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883950": [
        {
            "ioc_value": "91.193.18.110:59900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 19:18:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883942": [
        {
            "ioc_value": "91.92.240.98:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 19:18:24",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883936": [
        {
            "ioc_value": "79.198.173.193:4785",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 19:16:04",
            "last_seen_utc": "2026-08-21 19:16:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883937": [
        {
            "ioc_value": "92.101.1.239:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 19:16:04",
            "last_seen_utc": "2026-08-25 05:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883938": [
        {
            "ioc_value": "64.89.160.4:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 19:16:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883939": [
        {
            "ioc_value": "145.223.70.79:27384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 19:16:04",
            "last_seen_utc": "2026-08-25 05:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883940": [
        {
            "ioc_value": "2.59.133.71:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 19:16:04",
            "last_seen_utc": "2026-08-24 05:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883941": [
        {
            "ioc_value": "104.245.245.101:10111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 19:16:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883935": [
        {
            "ioc_value": "103.77.241.11:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 19:13:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883934": [
        {
            "ioc_value": "104.239.66.192:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 19:13:47",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883933": [
        {
            "ioc_value": "162.251.92.64:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883932": [
        {
            "ioc_value": "zi1klaoi.en-eng-geniusbrainsignal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 18:57:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883929": [
        {
            "ioc_value": "yxs476tf.eng-aquaburnn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 18:56:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883928": [
        {
            "ioc_value": "eng-aquaburnn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 18:54:14",
            "last_seen_utc": "2026-08-21 18:54:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883905": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/drown/silenced",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 18:16:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883901": [
        {
            "ioc_value": "47.100.160.178:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 18:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883902": [
        {
            "ioc_value": "162.251.92.64:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 18:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883900": [
        {
            "ioc_value": "186.241.75.21:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 18:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883897": [
        {
            "ioc_value": "https://ieji.de/@sam7al",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 17:25:29",
            "last_seen_utc": "2026-08-22 23:15:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e3ecc6938dd5234a75a8fda454717bba20897d6aa12b9a324b5f81305d1f7d66/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883896": [
        {
            "ioc_value": "https://busshi.moe/@sam0al",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 17:25:27",
            "last_seen_utc": "2026-08-22 23:15:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e3ecc6938dd5234a75a8fda454717bba20897d6aa12b9a324b5f81305d1f7d66/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883895": [
        {
            "ioc_value": "115.159.226.190:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 17:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883866": [
        {
            "ioc_value": "u6nhwc89.engaquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 16:56:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883865": [
        {
            "ioc_value": "engaquaburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 16:53:55",
            "last_seen_utc": "2026-08-21 16:54:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883861": [
        {
            "ioc_value": "149.88.66.234:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 16:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883862": [
        {
            "ioc_value": "43.140.219.182:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 16:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883860": [
        {
            "ioc_value": "lfycpw4f.en-en--enerflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 15:57:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883859": [
        {
            "ioc_value": "p9p6kvws.en-easybatteryfixed.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 15:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883828": [
        {
            "ioc_value": "pa-api.salondeguitaredemontreal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-21 15:38:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117133890545280394",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883829": [
        {
            "ioc_value": "uz7mn8jcpt.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 15:38:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883833": [
        {
            "ioc_value": "89.110.110.119:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:38:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883835": [
        {
            "ioc_value": "89.124.79.98:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:38:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883834": [
        {
            "ioc_value": "85.158.110.78:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:38:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883838": [
        {
            "ioc_value": "triotmelon.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:38:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883836": [
        {
            "ioc_value": "144.124.242.171:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:37:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883837": [
        {
            "ioc_value": "notepadreleased.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:37:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883839": [
        {
            "ioc_value": "b0bc47a7308bd39a5b638781874a3d8e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:37:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883840": [
        {
            "ioc_value": "ca88a6c055a96e1a6fa47e2586d41d2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883841": [
        {
            "ioc_value": "eba2bbd380b6949a249aba5c3ed13245",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 15:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=268ee19",
            "tags": "BabaDeda,CNCMachineRMS",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1883850": [
        {
            "ioc_value": "http://45.150.195.235/tarm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:56",
            "last_seen_utc": "2026-08-21 15:18:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883849": [
        {
            "ioc_value": "142.93.205.111:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-21 15:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883851": [
        {
            "ioc_value": "http://45.150.195.235/tarm5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:54",
            "last_seen_utc": "2026-08-21 15:18:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883852": [
        {
            "ioc_value": "http://45.150.195.235/tarm6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:53",
            "last_seen_utc": "2026-08-21 15:18:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883853": [
        {
            "ioc_value": "http://45.150.195.235/tarm7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:53",
            "last_seen_utc": "2026-08-21 15:18:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883854": [
        {
            "ioc_value": "http://45.150.195.235/tmips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:52",
            "last_seen_utc": "2026-08-21 15:18:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883855": [
        {
            "ioc_value": "http://45.150.195.235/tmpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:52",
            "last_seen_utc": "2026-08-21 15:18:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883856": [
        {
            "ioc_value": "tftp://45.150.195.235:69/tarm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 15:37:51",
            "last_seen_utc": "2026-08-21 15:18:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883857": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/marye4562/trimester/implosive",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 15:23:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883848": [
        {
            "ioc_value": "186.241.75.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 15:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883847": [
        {
            "ioc_value": "115.159.226.190:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883846": [
        {
            "ioc_value": "115.159.226.190:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883845": [
        {
            "ioc_value": "rowanportico.global",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-21 14:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883844": [
        {
            "ioc_value": "https://rowanportico.global/identity/realm-xml.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-21 14:54:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883843": [
        {
            "ioc_value": "vo472a21.eng-aqua-burn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 14:53:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883842": [
        {
            "ioc_value": "eng-aqua-burn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 14:53:43",
            "last_seen_utc": "2026-08-21 14:53:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883832": [
        {
            "ioc_value": "gq2r07sp.easybatteryfixed.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 14:45:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883830": [
        {
            "ioc_value": "http://none/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 14:25:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a05e2a5c5b4b93447ad06a728f9e41ce9c65d876c87daa59ae2d8ead067d2192/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883827": [
        {
            "ioc_value": "8.137.111.232:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-21 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883826": [
        {
            "ioc_value": "8.137.111.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-21 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883825": [
        {
            "ioc_value": "104.238.57.209:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 14:05:04",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883824": [
        {
            "ioc_value": "202.61.85.104:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 13:45:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883823": [
        {
            "ioc_value": "202.61.85.104:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 13:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883822": [
        {
            "ioc_value": "http://gsagasgash.duckdns.org/eternalpacketProcessordefaulttrack.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-21 13:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883820": [
        {
            "ioc_value": "dez.11gokil.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:30:47",
            "last_seen_utc": "2026-08-31 16:08:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883821": [
        {
            "ioc_value": "https://dez.11gokil.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:30:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883810": [
        {
            "ioc_value": "ses.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883811": [
        {
            "ioc_value": "ket.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883812": [
        {
            "ioc_value": "ljr.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883813": [
        {
            "ioc_value": "nhg.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883814": [
        {
            "ioc_value": "bob.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883815": [
        {
            "ioc_value": "kra.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883816": [
        {
            "ioc_value": "brr.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883817": [
        {
            "ioc_value": "sto.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883818": [
        {
            "ioc_value": "rex.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883819": [
        {
            "ioc_value": "bib.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:07:09",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883807": [
        {
            "ioc_value": "https://sto.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883808": [
        {
            "ioc_value": "https://rex.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883809": [
        {
            "ioc_value": "https://bib.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883804": [
        {
            "ioc_value": "https://nhg.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883805": [
        {
            "ioc_value": "https://kra.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883806": [
        {
            "ioc_value": "https://brr.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883802": [
        {
            "ioc_value": "https://ses.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883803": [
        {
            "ioc_value": "https://ket.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 13:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883801": [
        {
            "ioc_value": "8.137.111.232:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-21 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883799": [
        {
            "ioc_value": "20.74.145.114:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 13:05:05",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883800": [
        {
            "ioc_value": "106.54.41.209:44410",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883798": [
        {
            "ioc_value": "5zh0a5l5.en-flashburnn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 12:53:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883794": [
        {
            "ioc_value": "xorajahy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 12:33:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883795": [
        {
            "ioc_value": "http://113.228.208.46:56903/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 12:33:02",
            "last_seen_utc": "2026-08-25 00:19:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/113.228.208.46",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883796": [
        {
            "ioc_value": "http://46.227.184.199:36141/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 12:33:01",
            "last_seen_utc": "2026-08-25 00:19:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/46.227.184.199",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883793": [
        {
            "ioc_value": "36.140.162.173:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883792": [
        {
            "ioc_value": "43.134.100.72:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883791": [
        {
            "ioc_value": "http://zakuiru.shop:9048/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 12:00:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4ebdf938bd45a11dc5d139bee18e7692e5c98c7511af9026558ef7d281d8c33/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883790": [
        {
            "ioc_value": "http://xightne.click:7242/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 12:00:35",
            "last_seen_utc": "2026-08-24 19:31:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4ebdf938bd45a11dc5d139bee18e7692e5c98c7511af9026558ef7d281d8c33/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883789": [
        {
            "ioc_value": "8.137.92.225:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 11:48:09",
            "last_seen_utc": "2026-09-01 02:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883787": [
        {
            "ioc_value": "68.64.178.130:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 11:48:07",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883788": [
        {
            "ioc_value": "68.64.178.130:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 11:48:07",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883786": [
        {
            "ioc_value": "162.251.92.64:800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 11:47:47",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883785": [
        {
            "ioc_value": "156.225.18.45:33333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 11:47:46",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883784": [
        {
            "ioc_value": "122.51.12.180:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 11:47:41",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883732": [
        {
            "ioc_value": "dujexi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 11:46:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883783": [
        {
            "ioc_value": "checkout.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 11:43:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883779": [
        {
            "ioc_value": "346cf14b787747160f789525e9843663b05a7e588f8fa92b8a2b858a8d54272b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 11:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883780": [
        {
            "ioc_value": "647653bcb618be9cf1883c969cfa3b4b3e3cea13",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 11:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883781": [
        {
            "ioc_value": "edc8338feddcdc93e69c966d26a8e94e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 11:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883777": [
        {
            "ioc_value": "729f56d9643c97fa9d9fb4a7696df881cbe0321b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-21 11:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883778": [
        {
            "ioc_value": "88602976f7c64499ef40e4972ac17db6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-21 11:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883774": [
        {
            "ioc_value": "219d35e9f33b48b3fc1ee51cb4fed27616c09d5f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-21 11:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883775": [
        {
            "ioc_value": "9853d168bdc4e85fb0c9d2446b5d13ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-21 11:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883776": [
        {
            "ioc_value": "e89e2ea4c743c87ef7faff9303b9133c54737dd683536cf5e6518374fb130a4a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-21 11:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883772": [
        {
            "ioc_value": "dc7fcc0d7d189555827260b3e4acc96a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 11:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883773": [
        {
            "ioc_value": "02522eaec42abfb57e780e43fda7ef0cc4f0e6d061c2e35aaa3575d5b62f7c13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-21 11:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883770": [
        {
            "ioc_value": "acce16056f1fe8efd131034d6d27814ba5fb3e0878cf8147d1983bd73f59eec2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 11:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883771": [
        {
            "ioc_value": "78059e3070682f0ed14015624d8323d4a42fe908",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 11:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883767": [
        {
            "ioc_value": "8abd6a3d21097d75fc4970cb1c202c7b30bc709cf2446a94a298e3020578942a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-21 11:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883768": [
        {
            "ioc_value": "31c21965b3661caf899480e5a6bc1e5e411e4518",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-21 11:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883769": [
        {
            "ioc_value": "cb470ad87c2982fd1d60b2fa6cbe637d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-21 11:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1883765": [
        {
            "ioc_value": "66.85.27.43:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 11:05:04",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883764": [
        {
            "ioc_value": "ymrtzuano.bio-dantix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:58:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883763": [
        {
            "ioc_value": "6fkzrm3o.en-en-en-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:58:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883759": [
        {
            "ioc_value": "https://forecast-chaos.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883760": [
        {
            "ioc_value": "https://sound-obstacle.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883756": [
        {
            "ioc_value": "https://soup-tone.pro/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883757": [
        {
            "ioc_value": "https://seat-aviation.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883758": [
        {
            "ioc_value": "https://root-cherry.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883753": [
        {
            "ioc_value": "https://carpet-sail.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883754": [
        {
            "ioc_value": "https://chief-ignite.pro/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883755": [
        {
            "ioc_value": "https://hair-result.xyz/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883749": [
        {
            "ioc_value": "https://ukwearstore.org",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883750": [
        {
            "ioc_value": "https://193-233-126-53.sslip.io/d3f8a142c9/verification.sct",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 10:57:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883751": [
        {
            "ioc_value": "https://siege-close.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883752": [
        {
            "ioc_value": "https://fashion-chicken.com/n3s9c2a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883746": [
        {
            "ioc_value": "https://github.com/CyberKayt/test_rpc/raw/refs/heads/main/driverapi.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883747": [
        {
            "ioc_value": "https://infodatalis.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883748": [
        {
            "ioc_value": "https://telemetryloop.net",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:57:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883745": [
        {
            "ioc_value": "en-en-en-cardioslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:54:05",
            "last_seen_utc": "2026-08-21 20:54:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883743": [
        {
            "ioc_value": "ewey5he5.en-cardioslim.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:54:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883742": [
        {
            "ioc_value": "jteqecd8.en-flashbrn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:53:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883740": [
        {
            "ioc_value": "xlww5gz9.ener--flow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:37:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883739": [
        {
            "ioc_value": "htbwm97j.en-cardio-slimtea.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:34:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883738": [
        {
            "ioc_value": "hxzjofuf.en-en-en-blinzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:33:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883737": [
        {
            "ioc_value": "18ppizar.easybatteryfixed.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:33:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883736": [
        {
            "ioc_value": "ener--flow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:32:53",
            "last_seen_utc": "2026-08-21 10:34:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883735": [
        {
            "ioc_value": "en-en-en-blinzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 10:32:31",
            "last_seen_utc": "2026-08-21 10:33:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883731": [
        {
            "ioc_value": "46.63.0.187:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-21 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883730": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Max-856/crocs/fulls",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:57:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883729": [
        {
            "ioc_value": "o4epigrc.en-en--echofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:51:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883728": [
        {
            "ioc_value": "en-en--echofree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:49:37",
            "last_seen_utc": "2026-08-21 09:50:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883727": [
        {
            "ioc_value": "94.154.32.73:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-21 09:47:34",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883726": [
        {
            "ioc_value": "91.92.40.209:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 09:47:29",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883725": [
        {
            "ioc_value": "054bvvua.enerflaw.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:47:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883724": [
        {
            "ioc_value": "80.190.77.86:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 09:47:15",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883722": [
        {
            "ioc_value": "64.95.13.219:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 09:47:09",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883723": [
        {
            "ioc_value": "65.1.70.222:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 09:47:09",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883721": [
        {
            "ioc_value": "enerflaw.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:45:56",
            "last_seen_utc": "2026-08-21 09:46:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883719": [
        {
            "ioc_value": "198.23.185.98:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 09:44:59",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883720": [
        {
            "ioc_value": "198.23.185.98:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 09:44:59",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883718": [
        {
            "ioc_value": "188.49.86.25:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-21 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883717": [
        {
            "ioc_value": "185.34.147.35:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 09:44:42",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883716": [
        {
            "ioc_value": "185.34.147.34:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 09:44:41",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883715": [
        {
            "ioc_value": "185.34.147.33:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 09:44:40",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883714": [
        {
            "ioc_value": "185.212.129.143:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-21 09:44:34",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883713": [
        {
            "ioc_value": "172.239.45.42:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-21 09:44:14",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883712": [
        {
            "ioc_value": "172.236.157.30:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 09:44:13",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883711": [
        {
            "ioc_value": "169.58.201.247:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-21 09:44:10",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883710": [
        {
            "ioc_value": "162.35.170.53:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-21 09:44:05",
            "last_seen_utc": "2026-09-01 02:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883709": [
        {
            "ioc_value": "162.35.105.100:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-21 09:44:04",
            "last_seen_utc": "2026-09-01 02:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883708": [
        {
            "ioc_value": "128.90.105.217:7209",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-21 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883707": [
        {
            "ioc_value": "125.62.77.141:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 09:43:29",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883706": [
        {
            "ioc_value": "121.127.253.146:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-21 09:43:27",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883705": [
        {
            "ioc_value": "109.227.36.61:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-21 09:43:21",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883704": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/Max-856/treem/luda",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:42:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883703": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/roadvillnet/fred/iren",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 09:37:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883686": [
        {
            "ioc_value": "81.68.249.199:1818",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-21 09:24:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883687": [
        {
            "ioc_value": "128.90.105.217:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-21 09:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkCrystal RAT,DCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883689": [
        {
            "ioc_value": "185.185.68.42:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 09:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883688": [
        {
            "ioc_value": "89.124.80.214:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 09:24:06",
            "last_seen_utc": "2026-08-21 09:03:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883692": [
        {
            "ioc_value": "drivephoto-guest.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883693": [
        {
            "ioc_value": "ejevanjc.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": "2026-08-24 07:08:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883694": [
        {
            "ioc_value": "extranet-help-desk26.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883695": [
        {
            "ioc_value": "file-load-20.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883696": [
        {
            "ioc_value": "haksdkweqw219dms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883697": [
        {
            "ioc_value": "img-load2280.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883698": [
        {
            "ioc_value": "load-file0228.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883699": [
        {
            "ioc_value": "load-file2754.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883700": [
        {
            "ioc_value": "reservationcheckid9567.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883701": [
        {
            "ioc_value": "testload19.skin",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883702": [
        {
            "ioc_value": "file-download.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-21 09:19:20",
            "last_seen_utc": "2026-08-22 13:13:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883691": [
        {
            "ioc_value": "222.112.70.149:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883690": [
        {
            "ioc_value": "1.15.179.110:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883685": [
        {
            "ioc_value": "193.26.115.118:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-21 09:00:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00c70ced7798d660752424852041ed47189c5f7fdfbfd939d37e27788d50376f/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883683": [
        {
            "ioc_value": "https://www.rzrms.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 09:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.rzrms.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883684": [
        {
            "ioc_value": "https://www.tdvm4q.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 09:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.tdvm4q.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883681": [
        {
            "ioc_value": "logs.bestshoppingday.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-21 08:58:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00c70ced7798d660752424852041ed47189c5f7fdfbfd939d37e27788d50376f/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883678": [
        {
            "ioc_value": "sii.11gokil.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883679": [
        {
            "ioc_value": "zaf.11gokil.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883673": [
        {
            "ioc_value": "ges.1001gacor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:30",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883674": [
        {
            "ioc_value": "tax.sm188dnsx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:30",
            "last_seen_utc": "2026-08-21 08:50:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883675": [
        {
            "ioc_value": "sii.sm188dnsx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:30",
            "last_seen_utc": "2026-08-21 08:50:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883676": [
        {
            "ioc_value": "zaf.sm188dnsx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:30",
            "last_seen_utc": "2026-08-21 08:50:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883677": [
        {
            "ioc_value": "tax.11gokil.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:30",
            "last_seen_utc": "2026-08-21 09:12:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883671": [
        {
            "ioc_value": "https://sii.11gokil.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883672": [
        {
            "ioc_value": "https://zaf.11gokil.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883667": [
        {
            "ioc_value": "https://tax.sm188dnsx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883668": [
        {
            "ioc_value": "https://sii.sm188dnsx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883669": [
        {
            "ioc_value": "https://zaf.sm188dnsx.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883670": [
        {
            "ioc_value": "https://tax.11gokil.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:13",
            "last_seen_utc": "2026-08-27 02:11:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883666": [
        {
            "ioc_value": "https://ges.1001gacor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 08:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883635": [
        {
            "ioc_value": "118.25.188.245:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:25",
            "last_seen_utc": "2026-08-23 16:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883636": [
        {
            "ioc_value": "186.169.78.50:6001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:25",
            "last_seen_utc": "2026-08-22 19:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883637": [
        {
            "ioc_value": "186.169.78.50:1100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:24",
            "last_seen_utc": "2026-08-27 07:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883638": [
        {
            "ioc_value": "178.16.52.169:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:23",
            "last_seen_utc": "2026-08-25 05:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883639": [
        {
            "ioc_value": "207.189.15.159:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883640": [
        {
            "ioc_value": "198.12.83.91:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883641": [
        {
            "ioc_value": "217.156.65.42:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883642": [
        {
            "ioc_value": "213.145.86.232:31866",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883643": [
        {
            "ioc_value": "45.142.141.186:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883644": [
        {
            "ioc_value": "188.42.217.40:64323",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883645": [
        {
            "ioc_value": "64.90.17.193:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883646": [
        {
            "ioc_value": "146.70.155.238:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883647": [
        {
            "ioc_value": "43.156.107.94:8887",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883648": [
        {
            "ioc_value": "156.224.28.23:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883649": [
        {
            "ioc_value": "199.217.98.55:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883650": [
        {
            "ioc_value": "31.76.111.38:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883651": [
        {
            "ioc_value": "45.153.34.164:61443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883652": [
        {
            "ioc_value": "185.246.220.204:55448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883653": [
        {
            "ioc_value": "185.132.54.254:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883655": [
        {
            "ioc_value": "198.13.158.143:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883654": [
        {
            "ioc_value": "153.75.82.143:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-21 08:48:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883656": [
        {
            "ioc_value": "172.111.198.212:56011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 08:48:14",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883657": [
        {
            "ioc_value": "94.96.154.217:17",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-21 08:48:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883663": [
        {
            "ioc_value": "pidorsas.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 08:46:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883664": [
        {
            "ioc_value": "hulywali.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 08:46:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883660": [
        {
            "ioc_value": "zaerkos.rest",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 08:46:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883661": [
        {
            "ioc_value": "zaeroks.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 08:46:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883662": [
        {
            "ioc_value": "verokase.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 08:46:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883659": [
        {
            "ioc_value": "194.116.236.49:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-21 08:45:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7fd0a79d6396aafc3855da89d19cf38c924a8816db6ba7c45d0f54f453bc1b9b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883658": [
        {
            "ioc_value": "dad.adkfarmerdan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 08:45:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883634": [
        {
            "ioc_value": "104.168.5.30:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-21 08:37:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99b7dea82180d52c1af8cf8db737fbd4c2c6d5e881085deb96b216e9e6186999/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883633": [
        {
            "ioc_value": "84.38.129.114:4545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-21 08:35:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/affa4bfd689fe7751c4befd4cb905a25efc55eff0305981206e9e140799680f9/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883632": [
        {
            "ioc_value": "spotalarm.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-21 08:09:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883631": [
        {
            "ioc_value": "118.25.103.144:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-21 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883628": [
        {
            "ioc_value": "magulewi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883630": [
        {
            "ioc_value": "brahmalihvc.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 08:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883629": [
        {
            "ioc_value": "209.99.190.23:56015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-21 08:03:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883627": [
        {
            "ioc_value": "217.60.241.32:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 08:02:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/611fa15a339dabc3efdfdde36db072b7cddb2b70f37dd092abf0496f3fad74c7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883626": [
        {
            "ioc_value": "peetg3pz.dentlprime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 08:01:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883624": [
        {
            "ioc_value": "115.159.226.190:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 07:57:17",
            "last_seen_utc": "2026-08-27 07:27:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883623": [
        {
            "ioc_value": "186.241.75.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 07:57:13",
            "last_seen_utc": "2026-08-22 09:02:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883621": [
        {
            "ioc_value": "123.57.42.41:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 07:57:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883622": [
        {
            "ioc_value": "199.187.25.93:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 07:57:04",
            "last_seen_utc": "2026-08-22 03:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883618": [
        {
            "ioc_value": "utuhv.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:53:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883619": [
        {
            "ioc_value": "wwwvbcsajmj.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:53:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883620": [
        {
            "ioc_value": "xxnoyhngfg.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:53:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883616": [
        {
            "ioc_value": "etgul.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:53:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883617": [
        {
            "ioc_value": "hhwqascxsdr.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:53:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883609": [
        {
            "ioc_value": "18.166.189.193:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883610": [
        {
            "ioc_value": "18.167.107.230:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883611": [
        {
            "ioc_value": "18.167.217.149:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883612": [
        {
            "ioc_value": "43.198.145.140:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883613": [
        {
            "ioc_value": "43.198.220.74:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883614": [
        {
            "ioc_value": "95.40.206.48:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883615": [
        {
            "ioc_value": "95.41.64.117:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 07:49:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883608": [
        {
            "ioc_value": "o2yen35b.en-en--xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 07:46:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883607": [
        {
            "ioc_value": "en-en--xenburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 07:45:22",
            "last_seen_utc": "2026-08-27 15:40:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883606": [
        {
            "ioc_value": "akmuniverstall.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 07:38:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b87bb3b61bc774d9906711ed6f0f85764ed1dbccd8be19bc36a9229b47c4dbc/",
            "tags": "OnyxC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883605": [
        {
            "ioc_value": "https://akmuniverstall.top/backend/api/app.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 07:38:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b87bb3b61bc774d9906711ed6f0f85764ed1dbccd8be19bc36a9229b47c4dbc/",
            "tags": "OnyxC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883601": [
        {
            "ioc_value": "https://krem.mesoptik.com/v3/telemetry",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.telepuz",
            "malware_alias": null,
            "malware_printable": "TELEPUZ",
            "first_seen_utc": "2026-08-21 07:11:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/956ccaefaab5947dbe338d64fca992f9511ac1593b2470ffaece6ef3c7452c2a/",
            "tags": "TELEPUZ",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883602": [
        {
            "ioc_value": "https://krem.mesoptik.com/v3/report",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.telepuz",
            "malware_alias": null,
            "malware_printable": "TELEPUZ",
            "first_seen_utc": "2026-08-21 07:11:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/956ccaefaab5947dbe338d64fca992f9511ac1593b2470ffaece6ef3c7452c2a/",
            "tags": "TELEPUZ",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883603": [
        {
            "ioc_value": "https://krem.mesoptik.com/ws/stealer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.telepuz",
            "malware_alias": null,
            "malware_printable": "TELEPUZ",
            "first_seen_utc": "2026-08-21 07:11:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/956ccaefaab5947dbe338d64fca992f9511ac1593b2470ffaece6ef3c7452c2a/",
            "tags": "TELEPUZ",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883600": [
        {
            "ioc_value": "krem.mesoptik.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.telepuz",
            "malware_alias": null,
            "malware_printable": "TELEPUZ",
            "first_seen_utc": "2026-08-21 07:11:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/956ccaefaab5947dbe338d64fca992f9511ac1593b2470ffaece6ef3c7452c2a/",
            "tags": "TELEPUZ",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883599": [
        {
            "ioc_value": "b5hhv7o8.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 07:00:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883591": [
        {
            "ioc_value": "http://110.38.2.86:48915/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:57:52",
            "last_seen_utc": "2026-08-25 00:19:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.2.86",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883592": [
        {
            "ioc_value": "http://39.34.140.102:40567/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:57:52",
            "last_seen_utc": "2026-08-25 00:19:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.34.140.102",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883593": [
        {
            "ioc_value": "http://153.117.38.146:46962/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:57:51",
            "last_seen_utc": "2026-08-25 00:19:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.38.146",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883595": [
        {
            "ioc_value": "89.19.223.68:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-21 06:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883594": [
        {
            "ioc_value": "147.189.169.192:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 06:33:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/45a592bcf135e313584bb6cbc3c8335d2df35edc834e6819a9eae95cda82b527/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883472": [
        {
            "ioc_value": "twc-recruitment.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 06:05:53",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1883473": [
        {
            "ioc_value": "thebestclean.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 06:05:53",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1883484": [
        {
            "ioc_value": "windseyecapital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 06:05:47",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1883492": [
        {
            "ioc_value": "ssakranlaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-21 06:05:43",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1883231": [
        {
            "ioc_value": "176.98.182.177:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-21 06:05:25",
            "last_seen_utc": "2026-08-31 18:23:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883232": [
        {
            "ioc_value": "43.129.180.120:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-21 06:05:23",
            "last_seen_utc": "2026-08-31 16:07:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883240": [
        {
            "ioc_value": "695ariela.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883340": [
        {
            "ioc_value": "http://112.123.98.99:33747/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:22",
            "last_seen_utc": "2026-08-25 00:19:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/112.123.98.99",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883341": [
        {
            "ioc_value": "http://110.38.0.239:35178/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:21",
            "last_seen_utc": "2026-08-25 00:19:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.0.239",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883342": [
        {
            "ioc_value": "http://160.30.142.218:57634/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:21",
            "last_seen_utc": "2026-08-25 00:19:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/160.30.142.218",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883343": [
        {
            "ioc_value": "http://202.47.57.186:45676/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:21",
            "last_seen_utc": "2026-08-25 00:19:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.47.57.186",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883344": [
        {
            "ioc_value": "http://202.70.139.165:37412/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:20",
            "last_seen_utc": "2026-08-25 00:19:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.70.139.165",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883354": [
        {
            "ioc_value": "85.120.253.113:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-21 06:05:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883361": [
        {
            "ioc_value": "https://t.me/m1duus",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-21 06:05:20",
            "last_seen_utc": "2026-08-20 19:35:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "903ac24fcd9670b9ef2e674243d550d8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883367": [
        {
            "ioc_value": "rmm.fastmoneyclaim.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-21 06:05:19",
            "last_seen_utc": "2026-08-20 19:10:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "connectwise,screenconnect",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883371": [
        {
            "ioc_value": "brlogic.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 06:05:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1883372": [
        {
            "ioc_value": "glooint.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 06:05:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1883503": [
        {
            "ioc_value": "orgjc7u140.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883518": [
        {
            "ioc_value": "fwgij17247.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883537": [
        {
            "ioc_value": "lojyny.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883538": [
        {
            "ioc_value": "http://125.44.18.27:46218/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:13",
            "last_seen_utc": "2026-08-25 00:19:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.44.18.27",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883539": [
        {
            "ioc_value": "http://153.117.40.47:46730/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-21 06:05:12",
            "last_seen_utc": "2026-08-25 00:19:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.40.47",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883540": [
        {
            "ioc_value": "176.98.182.216:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-21 06:05:10",
            "last_seen_utc": "2026-08-30 07:27:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883546": [
        {
            "ioc_value": "31.70.81.171:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-21 06:05:09",
            "last_seen_utc": "2026-08-21 18:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "8560,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1883553": [
        {
            "ioc_value": "feculafi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883565": [
        {
            "ioc_value": "vowycuxa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883586": [
        {
            "ioc_value": "e4i5spo3yx.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-21 06:05:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883589": [
        {
            "ioc_value": "103.242.12.143:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883588": [
        {
            "ioc_value": "113.44.89.87:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883585": [
        {
            "ioc_value": "hulywali.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 05:51:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883584": [
        {
            "ioc_value": "89g7yx01.en-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 05:47:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883581": [
        {
            "ioc_value": "en-biobooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 05:44:22",
            "last_seen_utc": "2026-08-21 05:45:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883580": [
        {
            "ioc_value": "https://faceit-verification.help/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 05:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/faceit-verification.help",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883574": [
        {
            "ioc_value": "113.44.89.87:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 05:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883572": [
        {
            "ioc_value": "113.44.89.87:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 05:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883573": [
        {
            "ioc_value": "113.44.89.87:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 05:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883571": [
        {
            "ioc_value": "106.54.41.209:9993",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883570": [
        {
            "ioc_value": "162.14.109.204:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883569": [
        {
            "ioc_value": "kqrfb2fo.congigenplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 04:52:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883568": [
        {
            "ioc_value": "202.61.85.172:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 04:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883567": [
        {
            "ioc_value": "202.61.85.172:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 04:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883566": [
        {
            "ioc_value": "congigenplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 04:49:14",
            "last_seen_utc": "2026-08-21 04:49:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883563": [
        {
            "ioc_value": "xbcuwv1m.defenseflashlight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 03:51:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883561": [
        {
            "ioc_value": "202.61.139.46:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 03:45:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883560": [
        {
            "ioc_value": "202.61.139.46:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-21 03:45:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883559": [
        {
            "ioc_value": "gwgsl6k1.en-belly--flush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 03:44:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883558": [
        {
            "ioc_value": "pidorsas.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 03:23:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883557": [
        {
            "ioc_value": "211.101.235.94:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 03:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883556": [
        {
            "ioc_value": "43.136.76.42:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883555": [
        {
            "ioc_value": "https://rblxgivex.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 03:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rblxgivex.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883554": [
        {
            "ioc_value": "o7ve5wvj.cognigen-plus.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 01:59:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883551": [
        {
            "ioc_value": "vrivcuff.en-americaneaglependant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 01:44:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883550": [
        {
            "ioc_value": "en-americaneaglependant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 01:43:59",
            "last_seen_utc": "2026-08-21 01:44:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883548": [
        {
            "ioc_value": "43.140.219.182:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883549": [
        {
            "ioc_value": "43.140.219.182:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-21 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883547": [
        {
            "ioc_value": "157.254.191.87:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883544": [
        {
            "ioc_value": "rblxgivex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-21 00:54:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883542": [
        {
            "ioc_value": "forecast-chaos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 00:43:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883543": [
        {
            "ioc_value": "sound-obstacle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 00:43:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883541": [
        {
            "ioc_value": "root-cherry.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-21 00:43:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883536": [
        {
            "ioc_value": "http://zakuiru.shop:9048/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-21 00:10:25",
            "last_seen_utc": "2026-08-24 20:02:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7e788bd6e7940f7c57dbfd94da87a48b4f36fad48c04a8bb1ba82971317f9023/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883535": [
        {
            "ioc_value": "47.109.34.148:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-21 00:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883532": [
        {
            "ioc_value": "4vhdn6ve.cognigenpluss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 23:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883531": [
        {
            "ioc_value": "cognigenpluss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 23:48:37",
            "last_seen_utc": "2026-08-20 23:49:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883530": [
        {
            "ioc_value": "43.140.219.182:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 23:47:00",
            "last_seen_utc": "2026-09-01 02:47:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883529": [
        {
            "ioc_value": "c0jcfjcz.eloncod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 23:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883528": [
        {
            "ioc_value": "eloncod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 23:42:57",
            "last_seen_utc": "2026-08-20 23:43:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883527": [
        {
            "ioc_value": "owxqk8og.dantilock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 23:42:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883525": [
        {
            "ioc_value": "verokase.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 23:38:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883522": [
        {
            "ioc_value": "101.200.193.211:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 23:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883521": [
        {
            "ioc_value": "120.55.43.18:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 23:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883520": [
        {
            "ioc_value": "https://apartments-review261634860.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 23:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/apartments-review261634860.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883519": [
        {
            "ioc_value": "http://zakuiru.shop:9048/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 22:40:29",
            "last_seen_utc": "2026-08-24 18:52:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e313c09240d94d6f8aed6e6f4c802f1dce4e204cb7020e72d5344a8cd93b3b26/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883517": [
        {
            "ioc_value": "106.54.41.209:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 22:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883516": [
        {
            "ioc_value": "43.134.42.247:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883515": [
        {
            "ioc_value": "129.211.11.213:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 22:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883513": [
        {
            "ioc_value": "isl4eo0i.echo--free.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 21:45:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883512": [
        {
            "ioc_value": "echo--free.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 21:42:22",
            "last_seen_utc": "2026-08-20 21:42:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883511": [
        {
            "ioc_value": "seat-aviation.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 21:28:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883510": [
        {
            "ioc_value": "80.190.77.86:2004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883509": [
        {
            "ioc_value": "82.39.109.102:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-20 21:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883508": [
        {
            "ioc_value": "https://ksr-racingparts.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 21:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ksr-racingparts.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883507": [
        {
            "ioc_value": "v19k5zdn.cogniclyr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 20:58:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883505": [
        {
            "ioc_value": "https://www.accademiadeiromani.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 20:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.accademiadeiromani.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883502": [
        {
            "ioc_value": "129.211.11.213:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883501": [
        {
            "ioc_value": "129.211.11.213:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883498": [
        {
            "ioc_value": "118.25.37.47:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883499": [
        {
            "ioc_value": "129.211.11.213:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883500": [
        {
            "ioc_value": "129.211.11.213:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883459": [
        {
            "ioc_value": "95.133.229.173:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:46:45",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883460": [
        {
            "ioc_value": "95.164.123.132:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 19:46:45",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883458": [
        {
            "ioc_value": "91.92.243.36:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:46:38",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883456": [
        {
            "ioc_value": "5.230.201.54:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:46:12",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883457": [
        {
            "ioc_value": "5.230.201.54:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:46:12",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883455": [
        {
            "ioc_value": "46.246.84.10:2703",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 19:46:10",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883454": [
        {
            "ioc_value": "45.141.215.40:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 19:45:57",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883453": [
        {
            "ioc_value": "31.59.137.166:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:45:44",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883451": [
        {
            "ioc_value": "217.60.195.196:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:45:31",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883452": [
        {
            "ioc_value": "217.60.195.196:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:45:31",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883450": [
        {
            "ioc_value": "217.217.97.125:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 19:45:30",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883449": [
        {
            "ioc_value": "i1i374tc.echo-fre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 19:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883448": [
        {
            "ioc_value": "193.161.193.99:36731",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 19:44:32",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883447": [
        {
            "ioc_value": "172.86.113.226:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:44:04",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883446": [
        {
            "ioc_value": "159.203.69.210:4500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 19:43:50",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883445": [
        {
            "ioc_value": "147.124.221.0:62020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883444": [
        {
            "ioc_value": "echo-fre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 19:41:50",
            "last_seen_utc": "2026-08-20 19:42:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883437": [
        {
            "ioc_value": "39.105.174.162:48238",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:33:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883438": [
        {
            "ioc_value": "103.40.14.232:51923",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:33:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883439": [
        {
            "ioc_value": "154.36.158.127:18890",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:33:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883440": [
        {
            "ioc_value": "110.41.2.64:55558",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:33:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883441": [
        {
            "ioc_value": "47.238.112.8:50888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:33:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883442": [
        {
            "ioc_value": "45.145.228.25:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:33:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883432": [
        {
            "ioc_value": "62.60.227.108:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-20 19:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883433": [
        {
            "ioc_value": "89.124.124.62:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-20 19:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883434": [
        {
            "ioc_value": "193.24.211.108:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-20 19:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883435": [
        {
            "ioc_value": "31.76.87.103:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-20 19:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883436": [
        {
            "ioc_value": "212.43.156.248:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-20 19:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883431": [
        {
            "ioc_value": "zlhmp377.burn-burnblend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 19:30:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883430": [
        {
            "ioc_value": "38.190.225.79:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883419": [
        {
            "ioc_value": "91.92.241.19:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883420": [
        {
            "ioc_value": "87.121.217.100:4343",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": "2026-08-23 15:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883421": [
        {
            "ioc_value": "172.247.189.92:27821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883422": [
        {
            "ioc_value": "45.43.14.52:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883423": [
        {
            "ioc_value": "45.119.98.107:33223",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883424": [
        {
            "ioc_value": "45.119.98.153:33223",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883425": [
        {
            "ioc_value": "45.119.98.162:33223",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883426": [
        {
            "ioc_value": "45.130.146.22:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": "2026-08-24 06:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883427": [
        {
            "ioc_value": "172.111.143.242:2025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": "2026-08-25 06:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883428": [
        {
            "ioc_value": "104.36.229.142:58003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883429": [
        {
            "ioc_value": "83.106.88.18:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883409": [
        {
            "ioc_value": "45.112.194.41:4784",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": "2026-08-23 16:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883410": [
        {
            "ioc_value": "125.86.26.79:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": "2026-08-22 06:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883411": [
        {
            "ioc_value": "172.111.134.122:4040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883412": [
        {
            "ioc_value": "98.142.250.238:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": "2026-08-24 06:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883413": [
        {
            "ioc_value": "94.26.68.54:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": "2026-08-30 04:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883414": [
        {
            "ioc_value": "185.44.64.196:4777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883415": [
        {
            "ioc_value": "172.94.9.166:2232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": "2026-08-24 05:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883416": [
        {
            "ioc_value": "80.97.160.224:2027",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883417": [
        {
            "ioc_value": "154.91.180.11:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883418": [
        {
            "ioc_value": "194.59.31.36:8727",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-20 19:29:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883393": [
        {
            "ioc_value": "85.11.167.198:57773",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883394": [
        {
            "ioc_value": "93.95.229.190:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883395": [
        {
            "ioc_value": "209.99.191.90:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883396": [
        {
            "ioc_value": "169.58.52.31:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883397": [
        {
            "ioc_value": "172.245.195.202:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883398": [
        {
            "ioc_value": "94.237.24.240:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883399": [
        {
            "ioc_value": "94.156.119.90:31338",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883400": [
        {
            "ioc_value": "94.154.43.213:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883401": [
        {
            "ioc_value": "2.27.62.226:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883402": [
        {
            "ioc_value": "46.8.101.202:61337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883403": [
        {
            "ioc_value": "49.232.170.10:29180",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883404": [
        {
            "ioc_value": "78.17.212.169:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883405": [
        {
            "ioc_value": "94.237.24.24:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883406": [
        {
            "ioc_value": "185.158.112.103:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883407": [
        {
            "ioc_value": "104.239.66.7:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883377": [
        {
            "ioc_value": "45.140.14.97:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883378": [
        {
            "ioc_value": "114.55.105.65:65229",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883379": [
        {
            "ioc_value": "182.255.44.231:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883380": [
        {
            "ioc_value": "18.136.148.19:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883381": [
        {
            "ioc_value": "23.94.252.82:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883382": [
        {
            "ioc_value": "69.48.228.147:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883383": [
        {
            "ioc_value": "169.58.5.199:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883384": [
        {
            "ioc_value": "103.183.74.235:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883385": [
        {
            "ioc_value": "156.225.21.226:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883386": [
        {
            "ioc_value": "182.255.91.104:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": "2026-08-23 14:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883387": [
        {
            "ioc_value": "91.92.42.238:37773",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883388": [
        {
            "ioc_value": "89.125.209.103:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883389": [
        {
            "ioc_value": "163.172.45.158:6789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883390": [
        {
            "ioc_value": "144.172.102.147:39182",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883391": [
        {
            "ioc_value": "46.8.228.101:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883392": [
        {
            "ioc_value": "185.18.222.97:31866",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 19:26:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883375": [
        {
            "ioc_value": "45.61.180.161:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:24:37",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883376": [
        {
            "ioc_value": "104.249.10.86:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 19:24:37",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883373": [
        {
            "ioc_value": "45.154.98.38:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 19:23:27",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883374": [
        {
            "ioc_value": "216.250.252.108:6680",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 19:23:27",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1883369": [
        {
            "ioc_value": "apartments-review261634860.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 19:13:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883365": [
        {
            "ioc_value": "129.211.11.213:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 19:05:06",
            "last_seen_utc": "2026-08-24 12:51:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883366": [
        {
            "ioc_value": "129.211.11.213:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883364": [
        {
            "ioc_value": "124.221.47.107:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883363": [
        {
            "ioc_value": "124.221.47.107:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 19:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883360": [
        {
            "ioc_value": "http://cleasion.click:8202/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 18:50:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/825fe5ad51d9ecb3f33cf9b1ff7d92ddc47192a3b4dba4cc67150b33f8863832/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883359": [
        {
            "ioc_value": "31.97.119.76:8202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 18:50:17",
            "last_seen_utc": "2026-08-21 10:22:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883358": [
        {
            "ioc_value": "zto37lic.blenzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 18:49:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883357": [
        {
            "ioc_value": "blenzador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 18:48:09",
            "last_seen_utc": "2026-08-20 18:48:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883356": [
        {
            "ioc_value": "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=YmbK",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 18:45:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/74a1e4dead91d597b2474e157272794d0c43c877d79565b3ce306331f0bfe8b0/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883355": [
        {
            "ioc_value": "https://62.238.46.160",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 18:45:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/74a1e4dead91d597b2474e157272794d0c43c877d79565b3ce306331f0bfe8b0/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883351": [
        {
            "ioc_value": "http://zakuiru.shop:9048/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 18:40:35",
            "last_seen_utc": "2026-08-24 22:04:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/178fd830163f46b127955422415f10d5f5a337212940ecfbb16f715b8ab2a711/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883350": [
        {
            "ioc_value": "http://vexdico.shop:8539/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 18:40:31",
            "last_seen_utc": "2026-08-24 19:41:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75b78d8c29a3dbe369c38cff68dcd8a509f88fbdc5af1aac2d3684a3f2c3207e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883349": [
        {
            "ioc_value": "http://palaera.click:7242/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 18:40:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75b78d8c29a3dbe369c38cff68dcd8a509f88fbdc5af1aac2d3684a3f2c3207e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883348": [
        {
            "ioc_value": "http://kupzovo.shop:7567/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 18:40:22",
            "last_seen_utc": "2026-08-24 20:23:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75b78d8c29a3dbe369c38cff68dcd8a509f88fbdc5af1aac2d3684a3f2c3207e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883238": [
        {
            "ioc_value": "124.221.47.107:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 18:05:07",
            "last_seen_utc": "2026-08-26 07:55:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883239": [
        {
            "ioc_value": "124.221.47.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 18:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883236": [
        {
            "ioc_value": "118.25.37.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 18:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883237": [
        {
            "ioc_value": "118.25.37.47:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 18:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883230": [
        {
            "ioc_value": "a8ps09r7.easybatteryfixed.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 17:42:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883229": [
        {
            "ioc_value": "easybatteryfixed.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 17:41:41",
            "last_seen_utc": "2026-08-20 17:41:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883228": [
        {
            "ioc_value": "https://psicopress.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 17:30:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/psicopress.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883220": [
        {
            "ioc_value": "103.185.249.199:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 17:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883221": [
        {
            "ioc_value": "118.25.37.47:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 17:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883219": [
        {
            "ioc_value": "8.156.69.245:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 17:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883218": [
        {
            "ioc_value": "106.54.41.209:10001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 17:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883217": [
        {
            "ioc_value": "106.54.41.209:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 17:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883212": [
        {
            "ioc_value": "95.164.123.132:53105",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:30",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883213": [
        {
            "ioc_value": "95.164.123.132:56545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:30",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883214": [
        {
            "ioc_value": "95.164.123.132:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:30",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883210": [
        {
            "ioc_value": "91.92.47.94:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:23",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883211": [
        {
            "ioc_value": "91.92.47.94:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:23",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883208": [
        {
            "ioc_value": "91.124.98.25:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:18",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883209": [
        {
            "ioc_value": "91.124.98.25:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:47:18",
            "last_seen_utc": "2026-09-01 02:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883207": [
        {
            "ioc_value": "45.141.215.40:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:46:35",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883206": [
        {
            "ioc_value": "217.217.97.125:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:46:04",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883204": [
        {
            "ioc_value": "213.152.186.188:32605",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:45:27",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883205": [
        {
            "ioc_value": "213.152.186.188:32635",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:45:27",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883203": [
        {
            "ioc_value": "192.109.139.69:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:44:49",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883202": [
        {
            "ioc_value": "192.109.139.69:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:44:48",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883201": [
        {
            "ioc_value": "104.168.70.163:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:43:12",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883200": [
        {
            "ioc_value": "kestrelgable.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-20 16:34:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883199": [
        {
            "ioc_value": "vdyhrgylv.bio--booster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 16:30:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883198": [
        {
            "ioc_value": "sedgeoriel.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-20 16:30:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883197": [
        {
            "ioc_value": "https://sedgeoriel.co/version/secure-json.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-20 16:29:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883196": [
        {
            "ioc_value": "156.234.7.46:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-20 16:15:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883190": [
        {
            "ioc_value": "boepk30823.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 16:14:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883195": [
        {
            "ioc_value": "207.56.137.45:9245",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:08:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0ec8cd5306167f1c4a1480d0fc5f09099834435ec6ea308c48eabaa8eb2cd019/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883194": [
        {
            "ioc_value": "hype.activeworkshops.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:08:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0ec8cd5306167f1c4a1480d0fc5f09099834435ec6ea308c48eabaa8eb2cd019/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883193": [
        {
            "ioc_value": "https://hype.activeworkshops.com:9245/hype/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-20 16:07:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0ec8cd5306167f1c4a1480d0fc5f09099834435ec6ea308c48eabaa8eb2cd019/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883192": [
        {
            "ioc_value": "copperreliquary.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-20 16:07:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883191": [
        {
            "ioc_value": "https://copperreliquary.info/version/secure-json.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-20 16:06:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1883188": [
        {
            "ioc_value": "106.54.41.209:21119",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 16:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883189": [
        {
            "ioc_value": "178.156.181.26:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 16:05:05",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883186": [
        {
            "ioc_value": "41csh0wo.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 15:56:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883185": [
        {
            "ioc_value": "156.234.7.60:433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-20 15:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883184": [
        {
            "ioc_value": "121.127.253.206:8868",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-20 15:45:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883183": [
        {
            "ioc_value": "86n1btn0.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 15:33:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883181": [
        {
            "ioc_value": "https://zaeroks.website/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 15:30:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zaeroks.website",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883182": [
        {
            "ioc_value": "https://einfach-einfach.digital/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 15:30:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/einfach-einfach.digital",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883180": [
        {
            "ioc_value": "f4vyboeo.burnblendmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 15:21:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883172": [
        {
            "ioc_value": "montoiro.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 15:10:59",
            "last_seen_utc": "2026-08-22 21:09:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128471193325362",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883174": [
        {
            "ioc_value": "https://montoiro.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 15:10:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128471193325362",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883173": [
        {
            "ioc_value": "https://montoiro.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 15:10:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128471193325362",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883175": [
        {
            "ioc_value": "https://montoiro.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 15:10:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128471193325362",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883176": [
        {
            "ioc_value": "https://sheltercirrus.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/oo9/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-20 15:10:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.microsoft.com/en-us/security/blog/2026/05/06/clickfix-campaign-uses-fake-macos-utilities-lures-deliver-infostealers/",
            "tags": null,
            "anonymous": 0,
            "reporter": "Efren"
        }
    ],
    "1883177": [
        {
            "ioc_value": "https://grove-satin.com/api/metrics/run?event=pasted",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-20 15:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.microsoft.com/en-us/security/blog/2026/05/06/clickfix-campaign-uses-fake-macos-utilities-lures-deliver-infostealers/",
            "tags": null,
            "anonymous": 0,
            "reporter": "Efren"
        }
    ],
    "1883178": [
        {
            "ioc_value": "https://filevegatech.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-20 15:10:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.microsoft.com/en-us/security/blog/2026/05/06/clickfix-campaign-uses-fake-macos-utilities-lures-deliver-infostealers/",
            "tags": null,
            "anonymous": 0,
            "reporter": "Efren"
        }
    ],
    "1883171": [
        {
            "ioc_value": "106.54.41.209:55566",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883169": [
        {
            "ioc_value": "106.54.41.209:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883170": [
        {
            "ioc_value": "106.54.41.209:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883168": [
        {
            "ioc_value": "106.54.41.209:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883167": [
        {
            "ioc_value": "clavee202620262026final.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 14:50:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b781b07429a51a7a9b786160ad9ac0bc037b7ee062d1f88b9aff2e42b292270b/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883166": [
        {
            "ioc_value": "pqcabzbeb.bio--booster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 14:47:41",
            "last_seen_utc": "2026-08-20 16:26:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883165": [
        {
            "ioc_value": "ftp.untentepc.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-20 14:45:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d478ce0f1dfabc910bf785490d577bc6c85cc47c6a35ccb9e5ca220f56914016/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883164": [
        {
            "ioc_value": "84.38.133.144:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 14:40:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/73d3fc27bb8991f739e2d52007e5a466e24682e0595fc7b12c5e0fec6457827e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883157": [
        {
            "ioc_value": "http://2.26.136.128/twget.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:32:37",
            "last_seen_utc": "2026-08-21 15:18:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883158": [
        {
            "ioc_value": "http://45.150.195.235/twget.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:32:36",
            "last_seen_utc": "2026-08-21 15:18:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883159": [
        {
            "ioc_value": "http://115.41.97.143:65419/lvn3/eU",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:32:36",
            "last_seen_utc": "2026-08-21 15:18:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883160": [
        {
            "ioc_value": "tftp://115.41.97.143:69/yCz31g9",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:32:35",
            "last_seen_utc": "2026-08-21 15:18:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883161": [
        {
            "ioc_value": "ftp://185.93.89.72/ftpget",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:32:34",
            "last_seen_utc": "2026-08-21 15:18:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883162": [
        {
            "ioc_value": "tftp://185.93.89.72:69/tftp",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:32:34",
            "last_seen_utc": "2026-08-21 15:18:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dropper",
            "anonymous": 0,
            "reporter": "moldy"
        }
    ],
    "1883155": [
        {
            "ioc_value": "http://kerosand.net:3847/api/agent/script",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:17:46",
            "last_seen_utc": "2026-08-20 14:16:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883146": [
        {
            "ioc_value": "bdwjk37712.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 14:10:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883149": [
        {
            "ioc_value": "guirreiro.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 14:10:46",
            "last_seen_utc": "2026-08-23 01:09:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128226111472251",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883150": [
        {
            "ioc_value": "https://guirreiro.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 14:10:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128226111472251",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883154": [
        {
            "ioc_value": "post-ld.pgcountyliving.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 14:10:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128234563756631",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883151": [
        {
            "ioc_value": "https://guirreiro.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 14:10:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128226111472251",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883152": [
        {
            "ioc_value": "https://guirreiro.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 14:10:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117128226111472251",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883153": [
        {
            "ioc_value": "143.246.216.114:38990",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.pink",
            "malware_alias": null,
            "malware_printable": "Pink",
            "first_seen_utc": "2026-08-20 14:10:36",
            "last_seen_utc": "2026-09-01 03:39:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Pink",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883148": [
        {
            "ioc_value": "80.190.77.86:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 14:05:06",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883147": [
        {
            "ioc_value": "202.61.130.163:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883145": [
        {
            "ioc_value": "https://fibre-industries.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 14:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fibre-industries.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883144": [
        {
            "ioc_value": "monitor9.easttrail5.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-20 13:52:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1883143": [
        {
            "ioc_value": "zaeroks.website",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 13:50:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883142": [
        {
            "ioc_value": "a9uyb2p4.bldarmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 13:49:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883139": [
        {
            "ioc_value": "s9ufafpx.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 13:31:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883138": [
        {
            "ioc_value": "https://serve2lead.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 13:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/serve2lead.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883133": [
        {
            "ioc_value": "einfach-einfach.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 13:27:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883092": [
        {
            "ioc_value": "http://31.77.228.40/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-20 13:15:01",
            "last_seen_utc": "2026-08-27 07:29:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,NEWTEST,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883097": [
        {
            "ioc_value": "v7gmf2o66w.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 13:15:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883100": [
        {
            "ioc_value": "87.199.197.84:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.revc2",
            "malware_alias": null,
            "malware_printable": "RevC2",
            "first_seen_utc": "2026-08-20 13:15:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883109": [
        {
            "ioc_value": "c1c6011ad508835c5f06c76f8957c7ac5dd6525ff5f85b95e50e56cf0b594448",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-20 13:15:00",
            "last_seen_utc": "2026-08-25 00:20:18",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.92.47.97",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883108": [
        {
            "ioc_value": "http://91.92.47.97/bins/wget.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-20 13:14:59",
            "last_seen_utc": "2026-08-25 00:19:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.92.47.97",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1883106": [
        {
            "ioc_value": "v3ns8x739p.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 13:14:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883118": [
        {
            "ioc_value": "http://178.16.52.8/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-20 13:14:57",
            "last_seen_utc": "2026-09-01 03:33:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,test_2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1883123": [
        {
            "ioc_value": "https://anguiano.study/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 13:14:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1883122": [
        {
            "ioc_value": "202.61.130.163:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883121": [
        {
            "ioc_value": "202.61.130.163:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883120": [
        {
            "ioc_value": "202.61.130.163:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883119": [
        {
            "ioc_value": "38.190.196.19:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 13:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883117": [
        {
            "ioc_value": "https://fdrv.beeyuskincare.co.nz/download.php/Complete_Package_Inspection_And_Damage_Verification_Mp4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-20 12:51:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "dyingbreeds_"
        }
    ],
    "1883116": [
        {
            "ioc_value": "104.239.66.83:1804",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-08-20 12:50:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883115": [
        {
            "ioc_value": "45.141.148.10:4001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 12:45:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dcf42e88c3688f575a490e5b51a7ecce9a930630e230523679736dd6b8ae4ce3/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883110": [
        {
            "ioc_value": "http://noveclo.click:8654/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 12:23:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1883111": [
        {
            "ioc_value": "http://cleasion.click:8202/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 12:23:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1883107": [
        {
            "ioc_value": "80.190.77.86:2000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 12:05:05",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883105": [
        {
            "ioc_value": "185.92.190.174:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 11:47:46",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883104": [
        {
            "ioc_value": "https://freedomfamiliesfoundation.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 11:30:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/freedomfamiliesfoundation.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1883103": [
        {
            "ioc_value": "oaq1h9w2.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 11:29:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883102": [
        {
            "ioc_value": "sie5uyp7.brn-peak.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 11:08:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883099": [
        {
            "ioc_value": "lslmt39k.app8k.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 10:56:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883096": [
        {
            "ioc_value": "80.190.77.86:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883095": [
        {
            "ioc_value": "8.137.98.198:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883094": [
        {
            "ioc_value": "180.76.172.229:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883090": [
        {
            "ioc_value": "82.197.65.206:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 09:46:42",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883088": [
        {
            "ioc_value": "80.190.77.86:1000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 09:46:39",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883089": [
        {
            "ioc_value": "80.190.77.86:8008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 09:46:39",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883087": [
        {
            "ioc_value": "4.193.136.143:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 09:46:04",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883086": [
        {
            "ioc_value": "109.227.40.60:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-20 09:43:19",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883085": [
        {
            "ioc_value": "104.243.248.63:84",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-20 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883083": [
        {
            "ioc_value": "88hma9a9.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 09:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883078": [
        {
            "ioc_value": "62.238.98.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883079": [
        {
            "ioc_value": "62.238.106.96:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883080": [
        {
            "ioc_value": "2.29.13.241:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883081": [
        {
            "ioc_value": "2.29.7.186:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883082": [
        {
            "ioc_value": "158.94.210.96:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883067": [
        {
            "ioc_value": "ryr.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883068": [
        {
            "ioc_value": "guc.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883069": [
        {
            "ioc_value": "ses.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883070": [
        {
            "ioc_value": "nhg.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883071": [
        {
            "ioc_value": "ges.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883072": [
        {
            "ioc_value": "kra.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883073": [
        {
            "ioc_value": "brr.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883074": [
        {
            "ioc_value": "sto.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883075": [
        {
            "ioc_value": "rex.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883076": [
        {
            "ioc_value": "bib.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883077": [
        {
            "ioc_value": "guc.sm188dnsx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883063": [
        {
            "ioc_value": "https://brr.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883064": [
        {
            "ioc_value": "https://sto.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883065": [
        {
            "ioc_value": "https://rex.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883066": [
        {
            "ioc_value": "https://bib.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883059": [
        {
            "ioc_value": "https://ses.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883060": [
        {
            "ioc_value": "https://nhg.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883061": [
        {
            "ioc_value": "https://ges.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883062": [
        {
            "ioc_value": "https://kra.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883055": [
        {
            "ioc_value": "https://62.238.106.96/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883056": [
        {
            "ioc_value": "https://2.29.13.241/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883057": [
        {
            "ioc_value": "https://2.29.7.186/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:25",
            "last_seen_utc": "2026-09-01 03:39:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883058": [
        {
            "ioc_value": "https://158.94.210.96/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883053": [
        {
            "ioc_value": "https://ryr.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883054": [
        {
            "ioc_value": "https://guc.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 09:28:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1883052": [
        {
            "ioc_value": "43.226.40.204:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883049": [
        {
            "ioc_value": "43.134.42.247:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883050": [
        {
            "ioc_value": "43.134.42.247:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 09:05:06",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883051": [
        {
            "ioc_value": "116.205.106.137:9997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883048": [
        {
            "ioc_value": "103.185.249.199:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 09:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883041": [
        {
            "ioc_value": "169.58.75.138:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 09:03:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Contabo,CTFLoaderService,FakeAdobe,ISO,LNK,pre-ransomware,Velociraptor",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883042": [
        {
            "ioc_value": "basecodereset.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-20 09:02:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883043": [
        {
            "ioc_value": "approvalrequest-api.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-20 09:02:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883044": [
        {
            "ioc_value": "a16ee9fb562ceae9db13a9e6e683d2c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 09:02:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0ca35420-52dc-4fd4-b3e2-055e1e43dee0",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883045": [
        {
            "ioc_value": "https://d34auolpreyu24.cloudfront.net/jquery-3.3.1.min.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 09:02:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0ca35420-52dc-4fd4-b3e2-055e1e43dee0",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883047": [
        {
            "ioc_value": "124.221.146.23:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 09:02:49",
            "last_seen_utc": "2026-08-21 07:57:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883046": [
        {
            "ioc_value": "199.187.25.93:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 09:02:34",
            "last_seen_utc": "2026-08-22 01:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883033": [
        {
            "ioc_value": "https://20.6.97.231/async/newtab_promos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883035": [
        {
            "ioc_value": "https://20.6.97.231/async/ddljson",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883034": [
        {
            "ioc_value": "https://20.6.97.231/async/newtab_ogb",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883036": [
        {
            "ioc_value": "https://20.6.97.231/service/update2/json",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883037": [
        {
            "ioc_value": "https://20.6.97.231/gen_204",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883040": [
        {
            "ioc_value": "51amiyqh.biodenttix.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 08:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883038": [
        {
            "ioc_value": "http://gofkaxz.click:8137/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 08:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1883039": [
        {
            "ioc_value": "http://tokjoza.shop:5200/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 08:48:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1883030": [
        {
            "ioc_value": "https://ntc-redirect.akamai-live.workers.dev/compare/v1.44/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:48:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/ntc-redirect.akamai-live.workers.dev/relations",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883031": [
        {
            "ioc_value": "a.bc.285ef6f2.web.mail.cargopaa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883032": [
        {
            "ioc_value": "biodenttix.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 08:47:11",
            "last_seen_utc": "2026-08-20 08:47:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1883022": [
        {
            "ioc_value": "qibanopy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 08:41:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1883028": [
        {
            "ioc_value": "9f0c756af7f4a15a6e801aeb364a832d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:41:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883029": [
        {
            "ioc_value": "33215eef229fa578661e017862dbca09c9d9d0a2d19ff56e0622604c804c7ebe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:41:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/33215eef229fa578661e017862dbca09c9d9d0a2d19ff56e0622604c804c7ebe/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883027": [
        {
            "ioc_value": "api.rh7.ninja",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 08:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2f4b0265ae7f7d1672082a13211346c81ae1ae2f1ee6451851d4fa8a56d6469d/",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883026": [
        {
            "ioc_value": "217.60.102.8:2269",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:23:29",
            "last_seen_utc": "2026-09-01 00:04:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c5103eaa70a4a80176440a0e0dc75136a0e7bcfd9a68d7c8440a4d0edea72011/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883025": [
        {
            "ioc_value": "195.177.94.61:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:19:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/545df941a12726eececab025c21f30ca6b96f4dca86883b5e834d2084f40ff9e/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883024": [
        {
            "ioc_value": "http://broadswordcallingdannyboy.com:4219",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 08:17:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1883023": [
        {
            "ioc_value": "89.106.83.41:55550",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:15:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca2f6a6a991da93820340a30003176dcea7bd568175991fc5dfdb644a0d65bdc/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883021": [
        {
            "ioc_value": "onboarding.radiantfluxstudio.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:10:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a909567fd036f81727e0bda7da6d9993d8eeed60207cce185d8862b40f5a2220/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883020": [
        {
            "ioc_value": "46.151.182.93:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:06:40",
            "last_seen_utc": "2026-08-31 19:01:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6117413027a3ddba78e3dcc7e975a626bf0e8f9ffe1dc5dd2387237b40f378f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883018": [
        {
            "ioc_value": "194.59.31.98:2021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 08:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6faf9fc35489cec62820f6f3cc353e0af986d67314bdbd5a5abf4fa4c067a3a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883019": [
        {
            "ioc_value": "38.240.40.231:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9024eaf8b8c84042848edd66ad69c09afff1cceaaee314b2c550c07c85b1a8e5/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883017": [
        {
            "ioc_value": "169.58.169.10:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 08:06:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8a802c9ee489aac5864b648bd3db2d1ec2db952001776582158df04d83b2d361/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883015": [
        {
            "ioc_value": "15.204.115.143:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 08:06:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8a802c9ee489aac5864b648bd3db2d1ec2db952001776582158df04d83b2d361/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883016": [
        {
            "ioc_value": "151.243.109.130:9239",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:06:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/539d07048204358515864a5a896f1b92cc1b2cd40ec8d596380ba870eaf73324/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883013": [
        {
            "ioc_value": "digitalhoster.4nmn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c5103eaa70a4a80176440a0e0dc75136a0e7bcfd9a68d7c8440a4d0edea72011/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883014": [
        {
            "ioc_value": "range2021.kozow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 08:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6faf9fc35489cec62820f6f3cc353e0af986d67314bdbd5a5abf4fa4c067a3a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883012": [
        {
            "ioc_value": "bokiass.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 08:05:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca2f6a6a991da93820340a30003176dcea7bd568175991fc5dfdb644a0d65bdc/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883011": [
        {
            "ioc_value": "4.193.136.143:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883010": [
        {
            "ioc_value": "4.193.136.143:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 08:05:08",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883008": [
        {
            "ioc_value": "103.185.249.199:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 08:05:06",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883009": [
        {
            "ioc_value": "4.193.136.143:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1883005": [
        {
            "ioc_value": "narang.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-20 07:47:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6e482ca3bf3fcc53e4e91c43c50b1720a48090f3149fe7ff760c447a37c1ef04/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883004": [
        {
            "ioc_value": "halakw.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-20 07:45:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03d9b9675a98583ec96b59fec63059641e320cbc8774de2dfa736ab06cd008b1/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883003": [
        {
            "ioc_value": "smokingstationhub.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 07:44:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd2cbf3277a263102361c9ee187e542c15ee02bc257dc17cd207f355f1d0f959/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883002": [
        {
            "ioc_value": "185.212.44.47:1010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 07:44:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd2cbf3277a263102361c9ee187e542c15ee02bc257dc17cd207f355f1d0f959/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883001": [
        {
            "ioc_value": "quiltdress.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-20 07:42:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1883000": [
        {
            "ioc_value": "46.151.182.148:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-20 07:40:58",
            "last_seen_utc": "2026-09-01 03:11:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d2d5abf113cb0723ba13b3e4c2c007de844f19673bdae5639b53cd01bb6859ec/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882999": [
        {
            "ioc_value": "basinhook.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-20 07:32:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882997": [
        {
            "ioc_value": "94.26.38.24:2024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-20 07:30:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Socks5Systemz",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882998": [
        {
            "ioc_value": "64.89.160.142:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-20 07:30:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Socks5Systemz",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882996": [
        {
            "ioc_value": "94.183.186.100:2024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-08-20 07:30:09",
            "last_seen_utc": "2026-08-20 07:30:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Socks5Systemz",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882995": [
        {
            "ioc_value": "iu2oga69.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 07:29:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882985": [
        {
            "ioc_value": "69.33.213.199:6621",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-20 07:24:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1882986": [
        {
            "ioc_value": "servers.opik.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-20 07:24:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1882991": [
        {
            "ioc_value": "103.185.249.199:1080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882989": [
        {
            "ioc_value": "103.185.249.199:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882990": [
        {
            "ioc_value": "103.185.249.199:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882988": [
        {
            "ioc_value": "103.185.249.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882987": [
        {
            "ioc_value": "103.185.249.199:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882984": [
        {
            "ioc_value": "diyt2xb5.blooddarmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 06:57:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882981": [
        {
            "ioc_value": "https://taliy.sbs/auth",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 06:49:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882980": [
        {
            "ioc_value": "https://tradegenius.sbs/auth",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 06:46:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882950": [
        {
            "ioc_value": "iritageneral.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 06:20:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882967": [
        {
            "ioc_value": "http://190.196.253.119:10701/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:15",
            "last_seen_utc": "2026-08-25 00:19:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/190.196.253.119",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882968": [
        {
            "ioc_value": "http://223.123.44.122:42812/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:14",
            "last_seen_utc": "2026-08-25 00:19:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.44.122",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882969": [
        {
            "ioc_value": "http://103.176.16.59:34532/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:13",
            "last_seen_utc": "2026-08-25 00:19:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.176.16.59",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882970": [
        {
            "ioc_value": "http://116.140.6.114:46743/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:13",
            "last_seen_utc": "2026-08-25 00:19:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/116.140.6.114",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882971": [
        {
            "ioc_value": "http://103.225.191.202:34773/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:12",
            "last_seen_utc": "2026-08-25 00:19:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.202",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882972": [
        {
            "ioc_value": "http://153.117.40.170:44217/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:12",
            "last_seen_utc": "2026-08-25 00:19:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.40.170",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882973": [
        {
            "ioc_value": "http://110.186.229.108:47843/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:11",
            "last_seen_utc": "2026-08-25 00:19:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.186.229.108",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882974": [
        {
            "ioc_value": "http://115.57.182.131:41041/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:11",
            "last_seen_utc": "2026-08-25 00:19:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.57.182.131",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882975": [
        {
            "ioc_value": "http://183.63.8.194:46154/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-20 06:20:09",
            "last_seen_utc": "2026-08-25 00:19:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/183.63.8.194",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1882964": [
        {
            "ioc_value": "91.215.85.6:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f626335064988d1687d5bc75faee7a1ff782c84efb62ae539ca2b7a0809df3fd/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882965": [
        {
            "ioc_value": "91.215.85.6:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f626335064988d1687d5bc75faee7a1ff782c84efb62ae539ca2b7a0809df3fd/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882966": [
        {
            "ioc_value": "91.215.85.6:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f626335064988d1687d5bc75faee7a1ff782c84efb62ae539ca2b7a0809df3fd/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882963": [
        {
            "ioc_value": "1hvnc.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:16:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b9eabf9c1e7eda061eb824e4d6eee8dcebfa10e85a45bbfd623c87169c2f7a8e/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882961": [
        {
            "ioc_value": "167.17.76.105:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b9eabf9c1e7eda061eb824e4d6eee8dcebfa10e85a45bbfd623c87169c2f7a8e/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882962": [
        {
            "ioc_value": "167.17.76.105:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b9eabf9c1e7eda061eb824e4d6eee8dcebfa10e85a45bbfd623c87169c2f7a8e/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882960": [
        {
            "ioc_value": "167.17.76.105:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b9eabf9c1e7eda061eb824e4d6eee8dcebfa10e85a45bbfd623c87169c2f7a8e/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882959": [
        {
            "ioc_value": "46.246.84.10:7045",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-08-20 06:15:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882957": [
        {
            "ioc_value": "134.209.211.37:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:13:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f636ff2834f3f113d068225ba9fa1465aa6211c183ef9b10a043382bce6bff3b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882958": [
        {
            "ioc_value": "134.209.211.37:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:13:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f636ff2834f3f113d068225ba9fa1465aa6211c183ef9b10a043382bce6bff3b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882956": [
        {
            "ioc_value": "134.209.211.37:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:13:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f636ff2834f3f113d068225ba9fa1465aa6211c183ef9b10a043382bce6bff3b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882955": [
        {
            "ioc_value": "connxt.ttlock.ma",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:13:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f636ff2834f3f113d068225ba9fa1465aa6211c183ef9b10a043382bce6bff3b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882954": [
        {
            "ioc_value": "trump2.1368.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:11:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af4ee79582992e348a8739579da478d50daccbaa6ec97420311916a2ac0fc503/",
            "tags": "PureHVNC,PureRAt,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882952": [
        {
            "ioc_value": "15.235.174.203:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:11:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af4ee79582992e348a8739579da478d50daccbaa6ec97420311916a2ac0fc503/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882953": [
        {
            "ioc_value": "15.235.174.203:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:11:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af4ee79582992e348a8739579da478d50daccbaa6ec97420311916a2ac0fc503/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882951": [
        {
            "ioc_value": "15.235.174.203:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:11:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af4ee79582992e348a8739579da478d50daccbaa6ec97420311916a2ac0fc503/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882947": [
        {
            "ioc_value": "15.235.176.216:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:08:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3922a4af520229c368788879ca8312fba656bb9b1285d91a8f62429e979ba6cf/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882948": [
        {
            "ioc_value": "15.235.176.216:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:08:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3922a4af520229c368788879ca8312fba656bb9b1285d91a8f62429e979ba6cf/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882949": [
        {
            "ioc_value": "15.235.176.216:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:08:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3922a4af520229c368788879ca8312fba656bb9b1285d91a8f62429e979ba6cf/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882945": [
        {
            "ioc_value": "95.85.238.53:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e747deb0d49a53cda8ebc02a97c5eeb875d6b5b07e1be8dfac5545adb78760f6/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882946": [
        {
            "ioc_value": "95.85.238.53:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e747deb0d49a53cda8ebc02a97c5eeb875d6b5b07e1be8dfac5545adb78760f6/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882944": [
        {
            "ioc_value": "https://api.telegram.org/bot8758444991:AAFF69OIaaE8t3nxSJfNYHB1J5BXA71IuyI/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-20 06:05:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "agenttesla,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882943": [
        {
            "ioc_value": "149.88.66.234:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882942": [
        {
            "ioc_value": "47.96.106.127:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882939": [
        {
            "ioc_value": "108.187.4.26:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/616b0525deac1fecbfa3f4a3d08f09748a027c9a850521c5df13fa193970890b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882940": [
        {
            "ioc_value": "108.187.4.26:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/616b0525deac1fecbfa3f4a3d08f09748a027c9a850521c5df13fa193970890b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882941": [
        {
            "ioc_value": "108.187.4.26:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:03:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/616b0525deac1fecbfa3f4a3d08f09748a027c9a850521c5df13fa193970890b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882938": [
        {
            "ioc_value": "130.250.191.154:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:00:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882937": [
        {
            "ioc_value": "130.250.191.154:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:00:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882936": [
        {
            "ioc_value": "130.250.191.154:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 06:00:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882935": [
        {
            "ioc_value": "wt1d3ceb.en-en-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 05:58:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882933": [
        {
            "ioc_value": "167.148.201.14:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:57:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882934": [
        {
            "ioc_value": "167.148.201.14:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:57:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882932": [
        {
            "ioc_value": "167.148.201.14:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:57:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882931": [
        {
            "ioc_value": "45.92.16.135:5480",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:53:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882930": [
        {
            "ioc_value": "37.120.214.122:2090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:52:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882929": [
        {
            "ioc_value": "64.188.91.241:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:52:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882927": [
        {
            "ioc_value": "64.188.91.241:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:52:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882928": [
        {
            "ioc_value": "64.188.91.241:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:52:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882926": [
        {
            "ioc_value": "187.87.138.158:43260",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:48:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882925": [
        {
            "ioc_value": "124.198.132.79:2023",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:47:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882924": [
        {
            "ioc_value": "188.126.90.11:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:45:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882923": [
        {
            "ioc_value": "129.226.174.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:45:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.226.174.180#443",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882920": [
        {
            "ioc_value": "178.17.62.198:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:44:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882921": [
        {
            "ioc_value": "178.17.62.198:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:44:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882922": [
        {
            "ioc_value": "178.17.62.198:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:44:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882919": [
        {
            "ioc_value": "185.130.45.240:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-20 05:44:41",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.130.45.240#80",
            "tags": "c2,havoc,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882918": [
        {
            "ioc_value": "102.220.160.204:10134",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-08-20 05:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/102.220.160.204#10134",
            "tags": "c2,orcus,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882917": [
        {
            "ioc_value": "181.167.80.196:5603",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-08-20 05:43:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/181.167.80.196#5603",
            "tags": "c2,netsupport,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882916": [
        {
            "ioc_value": "78.186.49.17:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:43:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/78.186.49.17#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882914": [
        {
            "ioc_value": "193.233.130.223:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:42:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.233.130.223#80",
            "tags": "c2,shodan,unam",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882915": [
        {
            "ioc_value": "94.249.230.177:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:42:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.249.230.177#80",
            "tags": "c2,shodan,unam",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882911": [
        {
            "ioc_value": "152.32.133.192:7001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 05:41:15",
            "last_seen_utc": "2026-08-20 05:41:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.32.133.192#7001",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882912": [
        {
            "ioc_value": "1.14.104.208:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 05:41:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/1.14.104.208#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882913": [
        {
            "ioc_value": "50.6.44.138:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-20 05:41:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/50.6.44.138#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882910": [
        {
            "ioc_value": "84.71.50.253:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.71.50.253#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882907": [
        {
            "ioc_value": "34.134.90.188:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.134.90.188#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882908": [
        {
            "ioc_value": "35.254.102.75:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.254.102.75#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882909": [
        {
            "ioc_value": "45.198.55.168:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.198.55.168#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882904": [
        {
            "ioc_value": "141.125.158.53:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.125.158.53#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882905": [
        {
            "ioc_value": "130.61.239.223:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/130.61.239.223#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882906": [
        {
            "ioc_value": "172.236.7.224:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.236.7.224#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882903": [
        {
            "ioc_value": "91.134.62.41:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:40:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.134.62.41#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882900": [
        {
            "ioc_value": "192.144.187.97:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.144.187.97#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882901": [
        {
            "ioc_value": "14.103.50.128:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/14.103.50.128#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882902": [
        {
            "ioc_value": "139.84.164.248:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/139.84.164.248#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882894": [
        {
            "ioc_value": "94.154.32.18:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.154.32.18#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882895": [
        {
            "ioc_value": "66.154.127.217:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.154.127.217#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882896": [
        {
            "ioc_value": "185.245.182.240:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.245.182.240#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882897": [
        {
            "ioc_value": "104.236.230.184:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.236.230.184#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882898": [
        {
            "ioc_value": "91.229.23.96:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.229.23.96#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882899": [
        {
            "ioc_value": "47.89.175.103:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.89.175.103#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882893": [
        {
            "ioc_value": "202.181.177.148:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-20 05:39:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/202.181.177.148#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882892": [
        {
            "ioc_value": "192.154.100.77:57666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:39:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c126a83d1def8e6458bdb92216892a0500984a979346676124c12a4b2dd4b41d/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882891": [
        {
            "ioc_value": "64.176.175.194:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:39:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.176.175.194#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882890": [
        {
            "ioc_value": "103.253.75.155:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.253.75.155#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882886": [
        {
            "ioc_value": "51.77.46.205:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.77.46.205#7777",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882887": [
        {
            "ioc_value": "111.229.112.115:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/111.229.112.115#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882888": [
        {
            "ioc_value": "4.204.25.104:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.204.25.104#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882889": [
        {
            "ioc_value": "35.254.58.72:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.254.58.72#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882884": [
        {
            "ioc_value": "146.19.185.37:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.19.185.37#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882885": [
        {
            "ioc_value": "120.26.238.236:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.26.238.236#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882880": [
        {
            "ioc_value": "195.246.231.131:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.246.231.131#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882881": [
        {
            "ioc_value": "201.189.58.129:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/201.189.58.129#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882882": [
        {
            "ioc_value": "172.234.231.31:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.234.231.31#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882883": [
        {
            "ioc_value": "151.115.144.4:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:56",
            "last_seen_utc": "2026-08-20 05:39:00",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.115.144.4#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882878": [
        {
            "ioc_value": "200.155.77.90:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/200.155.77.90#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882879": [
        {
            "ioc_value": "156.224.18.21:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:38:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.224.18.21#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882877": [
        {
            "ioc_value": "152.32.132.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.32.132.82#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882872": [
        {
            "ioc_value": "46.8.236.158:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/46.8.236.158#8090",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882873": [
        {
            "ioc_value": "47.84.50.235:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:29",
            "last_seen_utc": "2026-08-20 05:38:30",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.84.50.235#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882874": [
        {
            "ioc_value": "52.56.222.66:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.56.222.66#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882875": [
        {
            "ioc_value": "8.219.220.240:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:29",
            "last_seen_utc": "2026-08-20 05:38:30",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.219.220.240#7443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882876": [
        {
            "ioc_value": "104.199.132.123:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.199.132.123#10443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882868": [
        {
            "ioc_value": "52.147.196.140:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:28",
            "last_seen_utc": "2026-08-20 05:38:30",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.147.196.140#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882869": [
        {
            "ioc_value": "137.59.110.53:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.59.110.53#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882870": [
        {
            "ioc_value": "156.224.18.21:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:28",
            "last_seen_utc": "2026-08-20 05:38:30",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.224.18.21#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882871": [
        {
            "ioc_value": "82.29.71.121:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:28",
            "last_seen_utc": "2026-08-20 05:38:30",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.29.71.121#8443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882867": [
        {
            "ioc_value": "81.69.15.52:51003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:38:25",
            "last_seen_utc": "2026-08-20 05:38:30",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.69.15.52#51003",
            "tags": "c2,cobaltstrike,cs-watermark-100000,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882865": [
        {
            "ioc_value": "185.102.115.93:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:33:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/817067c431557ad88cd4fb18dc28a988a7a714f66b6b0f219cf9b03b5b665390/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882866": [
        {
            "ioc_value": "185.102.115.93:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:33:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/817067c431557ad88cd4fb18dc28a988a7a714f66b6b0f219cf9b03b5b665390/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882863": [
        {
            "ioc_value": "https://zaerkos.rest/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zaerkos.rest",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882864": [
        {
            "ioc_value": "https://proclean-ci.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 05:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/proclean-ci.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882862": [
        {
            "ioc_value": "192.162.199.215:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:29:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f94db5a93b19e1800be99cb0be2fb21794d3c89ccb588b53739a62c587bc20e6/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882860": [
        {
            "ioc_value": "192.162.199.215:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:29:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f94db5a93b19e1800be99cb0be2fb21794d3c89ccb588b53739a62c587bc20e6/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882861": [
        {
            "ioc_value": "192.162.199.215:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-20 05:29:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f94db5a93b19e1800be99cb0be2fb21794d3c89ccb588b53739a62c587bc20e6/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882859": [
        {
            "ioc_value": "junovzz0.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 05:28:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882709": [
        {
            "ioc_value": "grove-satin.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/masaomi346/status/2089288204101066803",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882710": [
        {
            "ioc_value": "quest-22.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/masaomi346/status/2089288204101066803",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882712": [
        {
            "ioc_value": "mossmesh17.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:17",
            "last_seen_utc": "2026-08-19 20:26:25",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/masaomi346/status/2089288204101066803",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882713": [
        {
            "ioc_value": "aspenriver6.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2090166619435683931",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882714": [
        {
            "ioc_value": "aspencore18.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2090166619435683931",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882715": [
        {
            "ioc_value": "atlas-compass.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2090166619435683931",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882719": [
        {
            "ioc_value": "sheltercirrus.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-20 05:13:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2090166619435683931",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882729": [
        {
            "ioc_value": "loanology.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882730": [
        {
            "ioc_value": "wildcatroofingtx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882731": [
        {
            "ioc_value": "akdconception.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882732": [
        {
            "ioc_value": "learningforlifecenter.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882733": [
        {
            "ioc_value": "janverborg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882734": [
        {
            "ioc_value": "exdesa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882735": [
        {
            "ioc_value": "rvweigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882736": [
        {
            "ioc_value": "planetogg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882737": [
        {
            "ioc_value": "pj-soft.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882738": [
        {
            "ioc_value": "mobel.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:13:01",
            "last_seen_utc": "2026-08-19 23:02:11",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882739": [
        {
            "ioc_value": "luvexoticz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882740": [
        {
            "ioc_value": "proestetic.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882741": [
        {
            "ioc_value": "musica-stnazaire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882742": [
        {
            "ioc_value": "domaine-realestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882743": [
        {
            "ioc_value": "martyhigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:56",
            "last_seen_utc": "2026-08-19 23:12:12",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882744": [
        {
            "ioc_value": "charlesbenfield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882745": [
        {
            "ioc_value": "kemlongkidsdental.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882746": [
        {
            "ioc_value": "nagrados.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882747": [
        {
            "ioc_value": "minjeff.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882748": [
        {
            "ioc_value": "duquai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882749": [
        {
            "ioc_value": "robusttechhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882750": [
        {
            "ioc_value": "poppyonmain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882751": [
        {
            "ioc_value": "minushead.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882752": [
        {
            "ioc_value": "jacommunicationsllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882753": [
        {
            "ioc_value": "galassiastudios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882754": [
        {
            "ioc_value": "robinmeng.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882755": [
        {
            "ioc_value": "professionalauctioneer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882756": [
        {
            "ioc_value": "naseaonline.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882757": [
        {
            "ioc_value": "evenements.sudouest.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882758": [
        {
            "ioc_value": "flyinghighaerialimagery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882759": [
        {
            "ioc_value": "fitnesslearningsystems.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882760": [
        {
            "ioc_value": "finomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882761": [
        {
            "ioc_value": "ecoterica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882762": [
        {
            "ioc_value": "chrisparrycollection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882763": [
        {
            "ioc_value": "wolfenbard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882764": [
        {
            "ioc_value": "gtpsostaric.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882765": [
        {
            "ioc_value": "globalgsa.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882766": [
        {
            "ioc_value": "eldran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882767": [
        {
            "ioc_value": "de-learn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882768": [
        {
            "ioc_value": "kamalrealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882728": [
        {
            "ioc_value": "https://anguiano.study/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 05:12:18",
            "last_seen_utc": "2026-08-20 04:09:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882727": [
        {
            "ioc_value": "https://anguiano.study/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 05:12:17",
            "last_seen_utc": "2026-08-20 04:09:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882726": [
        {
            "ioc_value": "anguiano.study",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-20 05:12:16",
            "last_seen_utc": "2026-08-20 13:07:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882721": [
        {
            "ioc_value": "pvj9kfaww5.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882722": [
        {
            "ioc_value": "adopt.media",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-20 05:12:15",
            "last_seen_utc": "2026-08-19 21:11:42",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882562": [
        {
            "ioc_value": "sykehiqe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882572": [
        {
            "ioc_value": "43.134.49.218:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-20 05:12:12",
            "last_seen_utc": "2026-08-27 20:25:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882772": [
        {
            "ioc_value": "egkotiplon.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882784": [
        {
            "ioc_value": "https://subscontract.axisstone.de/bidnow/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "nakedpages",
            "anonymous": 0,
            "reporter": "kirkderp"
        }
    ],
    "1882785": [
        {
            "ioc_value": "https://biddingdossierrfi.com/?95e41d41",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "nakedpages",
            "anonymous": 0,
            "reporter": "kirkderp"
        }
    ],
    "1882797": [
        {
            "ioc_value": "http://193.148.56.226/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-20 05:12:07",
            "last_seen_utc": "2026-08-27 07:29:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,Lud,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882794": [
        {
            "ioc_value": "patawypu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882803": [
        {
            "ioc_value": "196.75.227.186:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-08-20 05:12:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "36903,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1882806": [
        {
            "ioc_value": "201.79.5.223:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-20 05:12:02",
            "last_seen_utc": "2026-08-29 03:15:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882823": [
        {
            "ioc_value": "bstdk98679.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:12:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882825": [
        {
            "ioc_value": "biluvoxa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:12:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882826": [
        {
            "ioc_value": "176.98.182.217:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-20 05:11:59",
            "last_seen_utc": "2026-08-31 06:12:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882836": [
        {
            "ioc_value": "68.183.221.133:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-20 05:11:59",
            "last_seen_utc": "2026-08-20 09:09:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882843": [
        {
            "ioc_value": "198.211.96.18:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-20 05:11:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882844": [
        {
            "ioc_value": "qureo45905.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-20 05:11:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882858": [
        {
            "ioc_value": "62.234.150.219:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-20 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882857": [
        {
            "ioc_value": "47.96.106.127:6379",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 05:05:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882855": [
        {
            "ioc_value": "fgx9.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-20 04:30:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882854": [
        {
            "ioc_value": "oneai.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-20 04:27:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "fake-copilot",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882853": [
        {
            "ioc_value": "oneai.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-20 04:26:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "fake-copilot",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882851": [
        {
            "ioc_value": "office356.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-20 04:23:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "fake-copilot",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882850": [
        {
            "ioc_value": "sso.meshblueprint.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-20 04:09:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882847": [
        {
            "ioc_value": "47.96.106.127:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882846": [
        {
            "ioc_value": "47.96.106.127:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882845": [
        {
            "ioc_value": "169.58.121.189:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882842": [
        {
            "ioc_value": "nkht88l2.bio--dentix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 03:48:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882840": [
        {
            "ioc_value": "osflx2hg.eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 03:33:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882839": [
        {
            "ioc_value": "https://sci-lumiere.ci/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 03:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sci-lumiere.ci",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882838": [
        {
            "ioc_value": "http://kupzovo.shop:7567/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 03:27:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882835": [
        {
            "ioc_value": "43.99.86.192:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-20 03:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882834": [
        {
            "ioc_value": "34.124.183.110:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-20 03:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882831": [
        {
            "ioc_value": "118.107.9.136:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-20 02:55:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882829": [
        {
            "ioc_value": "vfiwq0l4.blinzedor.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 02:49:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882827": [
        {
            "ioc_value": "45.66.248.13:46972",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-20 02:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882824": [
        {
            "ioc_value": "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=YmbKZ",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-20 02:05:53",
            "last_seen_utc": "2026-08-31 16:08:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/082370aaf679a20e722fec6c88ab73803063e34683b0106e11b0d1999508cec4/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882820": [
        {
            "ioc_value": "https://richplusglobal.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 02:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/richplusglobal.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882819": [
        {
            "ioc_value": "121.127.253.206:8856",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-20 01:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882815": [
        {
            "ioc_value": "https://meraapnabharat.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 01:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/meraapnabharat.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882816": [
        {
            "ioc_value": "https://vidyalekha.co.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 01:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vidyalekha.co.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882817": [
        {
            "ioc_value": "https://vefasigorta.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 01:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vefasigorta.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882814": [
        {
            "ioc_value": "xm0y39uj.cogniclearplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 01:29:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882813": [
        {
            "ioc_value": "cogniclearplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 01:26:14",
            "last_seen_utc": "2026-08-20 01:26:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882810": [
        {
            "ioc_value": "http://xightne.click:7242/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 01:25:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882811": [
        {
            "ioc_value": "http://vexdico.shop:8539/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 01:25:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882812": [
        {
            "ioc_value": "http://zakuiru.shop:9048/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-20 01:25:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882808": [
        {
            "ioc_value": "zaerkos.rest",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 01:13:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882805": [
        {
            "ioc_value": "45.221.118.46:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882804": [
        {
            "ioc_value": "45.221.118.46:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-20 01:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882802": [
        {
            "ioc_value": "wu5yb08w.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-20 00:59:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882795": [
        {
            "ioc_value": "https://bathandyou.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 00:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bathandyou.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882796": [
        {
            "ioc_value": "https://www.faceit-verification.help/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-20 00:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.faceit-verification.help",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882791": [
        {
            "ioc_value": "ru4gcxzf.cardoslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 23:28:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882790": [
        {
            "ioc_value": "cardoslim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 23:25:45",
            "last_seen_utc": "2026-08-19 23:26:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882789": [
        {
            "ioc_value": "http://dsfdsfs.xsph.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-19 22:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882788": [
        {
            "ioc_value": "mc6rm56y.biodentax.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 22:48:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882787": [
        {
            "ioc_value": "biodentax.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 22:46:21",
            "last_seen_utc": "2026-08-19 22:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882786": [
        {
            "ioc_value": "nkzfatjf.gut--drops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 22:37:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882778": [
        {
            "ioc_value": "https://noise.lat/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/noise.lat",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882779": [
        {
            "ioc_value": "https://hyperliquid-solana.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hyperliquid-solana.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882780": [
        {
            "ioc_value": "https://taliy.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/taliy.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882781": [
        {
            "ioc_value": "https://tradegenius.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tradegenius.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882782": [
        {
            "ioc_value": "https://sixpences.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sixpences.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882783": [
        {
            "ioc_value": "https://vvagyu.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vvagyu.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882773": [
        {
            "ioc_value": "https://grvt.lat/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/grvt.lat",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882774": [
        {
            "ioc_value": "https://cro-ent.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cro-ent.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882775": [
        {
            "ioc_value": "https://essexfertilitystore.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/essexfertilitystore.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882776": [
        {
            "ioc_value": "https://cssfounder.us/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cssfounder.us",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882777": [
        {
            "ioc_value": "https://shopforet.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 22:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/shopforet.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882771": [
        {
            "ioc_value": "https://agendaurbanaribeira.gal/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 21:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/agendaurbanaribeira.gal",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882770": [
        {
            "ioc_value": "el9ozjuh.cardislim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 21:28:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882769": [
        {
            "ioc_value": "cardislim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 21:25:15",
            "last_seen_utc": "2026-08-19 21:25:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882725": [
        {
            "ioc_value": "theta-coaching.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 21:02:05",
            "last_seen_utc": "2026-08-26 21:54:34",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882720": [
        {
            "ioc_value": "http://ce557109.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-19 20:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882718": [
        {
            "ioc_value": "http://zakuiru.shop:9048/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 20:31:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d684fb1e82d42041802c676440d58e964b19ae74e8e7669e84d15da1a1e9c7ee/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882717": [
        {
            "ioc_value": "http://kupzovo.shop:7567/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 20:30:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d684fb1e82d42041802c676440d58e964b19ae74e8e7669e84d15da1a1e9c7ee/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882716": [
        {
            "ioc_value": "https://palaciomaravilla.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/palaciomaravilla.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882711": [
        {
            "ioc_value": "valokse.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 20:14:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882705": [
        {
            "ioc_value": "chokchaiwarehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 20:07:01",
            "last_seen_utc": "2026-08-26 21:54:36",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882706": [
        {
            "ioc_value": "cuidatutribu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 20:07:01",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882707": [
        {
            "ioc_value": "itsystems-eg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 20:07:01",
            "last_seen_utc": "2026-08-26 21:54:35",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882702": [
        {
            "ioc_value": "chief-ignite.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 20:01:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882703": [
        {
            "ioc_value": "hair-result.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 20:01:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882704": [
        {
            "ioc_value": "soup-tone.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 20:01:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882696": [
        {
            "ioc_value": "https://www.silviozamora.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.silviozamora.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882697": [
        {
            "ioc_value": "https://tarahenovin.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tarahenovin.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882698": [
        {
            "ioc_value": "https://ovarquitectura.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ovarquitectura.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882699": [
        {
            "ioc_value": "https://smdrsdptk.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/smdrsdptk.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882700": [
        {
            "ioc_value": "https://sevtapcapan.com.tr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sevtapcapan.com.tr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882701": [
        {
            "ioc_value": "https://www.uniticstudio.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.uniticstudio.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882690": [
        {
            "ioc_value": "https://almomega.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/almomega.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882691": [
        {
            "ioc_value": "https://www.mciturkiye.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.mciturkiye.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882692": [
        {
            "ioc_value": "https://www.masartech.io/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.masartech.io",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882693": [
        {
            "ioc_value": "https://jamesrichard.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jamesrichard.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882694": [
        {
            "ioc_value": "https://fixthatappliance.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fixthatappliance.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882695": [
        {
            "ioc_value": "https://veryanjones.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/veryanjones.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882684": [
        {
            "ioc_value": "https://drdolati.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/drdolati.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882685": [
        {
            "ioc_value": "https://glenchua.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/glenchua.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882686": [
        {
            "ioc_value": "https://mclropadetrabajo.cl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mclropadetrabajo.cl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882687": [
        {
            "ioc_value": "https://lovenet.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lovenet.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882688": [
        {
            "ioc_value": "https://avsafiyeyilmaz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/avsafiyeyilmaz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882689": [
        {
            "ioc_value": "https://izmirdellservisi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/izmirdellservisi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882682": [
        {
            "ioc_value": "https://mjforwarding.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mjforwarding.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882683": [
        {
            "ioc_value": "https://mgihub.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mgihub.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882681": [
        {
            "ioc_value": "https://monomit.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 20:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/monomit.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882680": [
        {
            "ioc_value": "2.56.165.157:991",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-19 20:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882679": [
        {
            "ioc_value": "the-mad-otter.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 19:56:59",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882678": [
        {
            "ioc_value": "xedad2tj.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 19:55:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882677": [
        {
            "ioc_value": "95.133.166.10:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-19 19:46:59",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882676": [
        {
            "ioc_value": "91.202.233.120:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-19 19:46:51",
            "last_seen_utc": "2026-09-01 02:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882675": [
        {
            "ioc_value": "38.247.165.127:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:46:01",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882674": [
        {
            "ioc_value": "34.186.150.169:6932",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:45:55",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882673": [
        {
            "ioc_value": "27.124.36.136:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:45:50",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882672": [
        {
            "ioc_value": "209.99.188.193:43222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:44:57",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882671": [
        {
            "ioc_value": "194.56.225.150:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:44:40",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882670": [
        {
            "ioc_value": "189.249.193.210:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:44:33",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882669": [
        {
            "ioc_value": "185.34.147.35:2204",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:44:31",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882668": [
        {
            "ioc_value": "185.34.147.34:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882667": [
        {
            "ioc_value": "185.34.147.33:2204",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:44:29",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882665": [
        {
            "ioc_value": "185.34.147.31:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882666": [
        {
            "ioc_value": "185.34.147.32:2204",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882664": [
        {
            "ioc_value": "185.129.85.77:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:44:20",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882663": [
        {
            "ioc_value": "176.96.138.71:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:44:12",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882662": [
        {
            "ioc_value": "172.111.136.159:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:44:04",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882661": [
        {
            "ioc_value": "164.90.205.13:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:43:59",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882660": [
        {
            "ioc_value": "155.2.192.251:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:43:48",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882659": [
        {
            "ioc_value": "128.90.63.100:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:43:27",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882658": [
        {
            "ioc_value": "118.107.5.200:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:43:24",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882657": [
        {
            "ioc_value": "109.248.160.184:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-19 19:43:19",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882656": [
        {
            "ioc_value": "107.174.33.36:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:43:16",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882655": [
        {
            "ioc_value": "104.243.248.63:301",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882654": [
        {
            "ioc_value": "103.43.11.40:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 19:43:08",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882653": [
        {
            "ioc_value": "102.117.164.97:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882652": [
        {
            "ioc_value": "1.69.202.103:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:43:02",
            "last_seen_utc": "2026-09-01 02:43:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882638": [
        {
            "ioc_value": "azn3capa.cardioslim.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 19:26:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882637": [
        {
            "ioc_value": "cardioslim.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 19:25:18",
            "last_seen_utc": "2026-08-21 10:53:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882636": [
        {
            "ioc_value": "104.234.4.217:4589",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 19:20:39",
            "last_seen_utc": "2026-08-21 14:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/60f3280493c50acf8ccc3b128177e714a7dd58dc5f89871ad6683ab1539b382c/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882635": [
        {
            "ioc_value": "http://zakuiru.shop:9048/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 19:20:36",
            "last_seen_utc": "2026-08-19 20:02:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4f92f1b658856b2662100c26dcd5f81525a74482b4fdebb16923ec27234f0a7e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882634": [
        {
            "ioc_value": "http://kupzovo.shop:7567/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 19:20:21",
            "last_seen_utc": "2026-08-19 20:02:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4f92f1b658856b2662100c26dcd5f81525a74482b4fdebb16923ec27234f0a7e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882633": [
        {
            "ioc_value": "headyweb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:06:51",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882632": [
        {
            "ioc_value": "bathandyou.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:06:50",
            "last_seen_utc": "2026-08-28 10:45:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882631": [
        {
            "ioc_value": "meraapnabharat.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:06:49",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882630": [
        {
            "ioc_value": "cssfounder.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:06:48",
            "last_seen_utc": "2026-08-28 10:45:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882628": [
        {
            "ioc_value": "202.61.130.209:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882626": [
        {
            "ioc_value": "202.61.130.209:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882627": [
        {
            "ioc_value": "202.61.130.209:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882625": [
        {
            "ioc_value": "202.61.130.209:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882623": [
        {
            "ioc_value": "https://mujerilumina.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mujerilumina.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882624": [
        {
            "ioc_value": "https://namaste.cat/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/namaste.cat",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882614": [
        {
            "ioc_value": "https://saatavukatlikburosu.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/saatavukatlikburosu.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882615": [
        {
            "ioc_value": "https://rotariosjurica.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rotariosjurica.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882616": [
        {
            "ioc_value": "https://ofi-med.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ofi-med.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882617": [
        {
            "ioc_value": "https://onlinetarabar.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/onlinetarabar.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882618": [
        {
            "ioc_value": "https://openmedia.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/openmedia.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882619": [
        {
            "ioc_value": "https://obesidadydiabetes.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/obesidadydiabetes.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882620": [
        {
            "ioc_value": "https://pasoapasofam.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pasoapasofam.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882621": [
        {
            "ioc_value": "https://necckaduna.gov.ng/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/necckaduna.gov.ng",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882622": [
        {
            "ioc_value": "https://necckaduna.com.ng/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/necckaduna.com.ng",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882608": [
        {
            "ioc_value": "https://thesomersetlocal.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thesomersetlocal.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882609": [
        {
            "ioc_value": "https://stomatolog-rybnik.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stomatolog-rybnik.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882610": [
        {
            "ioc_value": "https://smartheartboardgame.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/smartheartboardgame.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882611": [
        {
            "ioc_value": "https://tmtweld.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tmtweld.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882612": [
        {
            "ioc_value": "https://sibilphone.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sibilphone.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882613": [
        {
            "ioc_value": "https://theset.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/theset.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882607": [
        {
            "ioc_value": "https://spiritofadventureacademy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 19:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/spiritofadventureacademy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882605": [
        {
            "ioc_value": "essexfertilitystore.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:47",
            "last_seen_utc": "2026-08-28 10:45:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882606": [
        {
            "ioc_value": "cro-ent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:47",
            "last_seen_utc": "2026-08-19 19:31:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882603": [
        {
            "ioc_value": "centurybusiness.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:46",
            "last_seen_utc": "2026-08-19 19:31:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882604": [
        {
            "ioc_value": "headybuddy.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:46",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882600": [
        {
            "ioc_value": "headyapi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:45",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882601": [
        {
            "ioc_value": "headyadvisor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:45",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882602": [
        {
            "ioc_value": "headyvault.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:45",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882599": [
        {
            "ioc_value": "hyperliquid-solana.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:56:44",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882594": [
        {
            "ioc_value": "34.117.242.128:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882595": [
        {
            "ioc_value": "31.76.103.233:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882596": [
        {
            "ioc_value": "213.160.74.177:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882597": [
        {
            "ioc_value": "195.123.219.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882598": [
        {
            "ioc_value": "176.120.22.39:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882584": [
        {
            "ioc_value": "158.94.210.192:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882585": [
        {
            "ioc_value": "84.201.6.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882586": [
        {
            "ioc_value": "178.16.55.234:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882587": [
        {
            "ioc_value": "34.117.242.128:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882588": [
        {
            "ioc_value": "45.227.254.163:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882589": [
        {
            "ioc_value": "93.152.224.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882590": [
        {
            "ioc_value": "132.243.212.126:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882591": [
        {
            "ioc_value": "95.179.181.208:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882592": [
        {
            "ioc_value": "104.251.181.138:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882593": [
        {
            "ioc_value": "45.227.254.162:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882576": [
        {
            "ioc_value": "89.34.90.31:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882577": [
        {
            "ioc_value": "95.81.77.88:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882578": [
        {
            "ioc_value": "93.152.223.199:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882579": [
        {
            "ioc_value": "45.227.254.161:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882580": [
        {
            "ioc_value": "45.227.254.53:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882581": [
        {
            "ioc_value": "154.29.74.221:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882582": [
        {
            "ioc_value": "31.214.157.161:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882583": [
        {
            "ioc_value": "45.151.106.204:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882575": [
        {
            "ioc_value": "136.244.100.54:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:46:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882570": [
        {
            "ioc_value": "http://196.251.107.186/zs/gate.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882571": [
        {
            "ioc_value": "http://196.251.107.186/svbia/uploads/31676eb5cfe66cf2_153.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882566": [
        {
            "ioc_value": "103.83.87.87:22300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882567": [
        {
            "ioc_value": "103.83.87.87:24900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882568": [
        {
            "ioc_value": "103.83.87.87:26900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882569": [
        {
            "ioc_value": "103.83.87.87:27900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882565": [
        {
            "ioc_value": "http://zakuiru.shop:9048/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 18:41:00",
            "last_seen_utc": "2026-08-19 19:51:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65af8ffdecfc2394c2a27c6d53880ad5b89de8fd201a69d33a34e31e320a3a5d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882564": [
        {
            "ioc_value": "http://zakuiru.shop:9048/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 18:40:59",
            "last_seen_utc": "2026-08-19 19:51:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/440cb05dbc1425d4e40e70c260ac1aed00152c2d348ecb7c87aa7a8198cd9eae/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882563": [
        {
            "ioc_value": "http://poagint.click:8592/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 18:40:48",
            "last_seen_utc": "2026-08-19 19:35:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/50774a5f75176f9698fc536e82a6106c04ccd1db4f1d788574fdb288952c6d7b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882410": [
        {
            "ioc_value": "95.38.161.209:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 18:32:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882483": [
        {
            "ioc_value": "conareras.study",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 18:32:47",
            "last_seen_utc": "2026-08-20 07:10:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882484": [
        {
            "ioc_value": "https://conareras.study/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 18:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882485": [
        {
            "ioc_value": "https://conareras.study/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 18:32:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882558": [
        {
            "ioc_value": "https://valokse.lol/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/valokse.lol",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882557": [
        {
            "ioc_value": "gkxzr7cj.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 18:26:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882556": [
        {
            "ioc_value": "whichkindwahalabethisonesooluwahelurboi.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:24:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4227301dd23eb6ebd80bf1f5e48455413ba78cf1a33be2296a857618d5588dd/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882555": [
        {
            "ioc_value": "155.103.69.20:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:24:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4227301dd23eb6ebd80bf1f5e48455413ba78cf1a33be2296a857618d5588dd/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882554": [
        {
            "ioc_value": "eventras.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 18:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2dae1df14d0cc6ea8e670e0b327101d0fe5c475dc06a376e99a6df426bddf418/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882546": [
        {
            "ioc_value": "94.26.83.82:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882547": [
        {
            "ioc_value": "45.151.106.204:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882548": [
        {
            "ioc_value": "158.94.210.192:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882549": [
        {
            "ioc_value": "94.130.164.187:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882550": [
        {
            "ioc_value": "209.17.118.17:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882551": [
        {
            "ioc_value": "154.29.74.221:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882552": [
        {
            "ioc_value": "144.31.151.223:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882553": [
        {
            "ioc_value": "178.16.55.234:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882531": [
        {
            "ioc_value": "178.16.52.194:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882532": [
        {
            "ioc_value": "136.244.100.54:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882533": [
        {
            "ioc_value": "95.81.77.88:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": "2026-08-19 18:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882534": [
        {
            "ioc_value": "104.251.181.138:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882535": [
        {
            "ioc_value": "84.201.6.21:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882536": [
        {
            "ioc_value": "45.227.254.162:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": "2026-08-19 18:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882537": [
        {
            "ioc_value": "45.227.254.161:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882538": [
        {
            "ioc_value": "95.179.181.208:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882539": [
        {
            "ioc_value": "31.76.103.233:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882540": [
        {
            "ioc_value": "45.227.254.163:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": "2026-08-19 18:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882541": [
        {
            "ioc_value": "93.152.223.199:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882542": [
        {
            "ioc_value": "89.34.90.31:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882543": [
        {
            "ioc_value": "93.152.224.75:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882544": [
        {
            "ioc_value": "38.110.228.8:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882545": [
        {
            "ioc_value": "195.123.219.75:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882529": [
        {
            "ioc_value": "45.227.254.53:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:29",
            "last_seen_utc": "2026-08-19 18:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882530": [
        {
            "ioc_value": "31.214.157.161:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:20:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882513": [
        {
            "ioc_value": "ingreedfx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882514": [
        {
            "ioc_value": "jeremitulsads.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882515": [
        {
            "ioc_value": "kileant.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882516": [
        {
            "ioc_value": "lenabwvtialpopito.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882517": [
        {
            "ioc_value": "lslshdbxbqwenda.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882518": [
        {
            "ioc_value": "macronex.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882519": [
        {
            "ioc_value": "mybananamoneygrammafon.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882520": [
        {
            "ioc_value": "nafnifnuf.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882521": [
        {
            "ioc_value": "poinsert.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882522": [
        {
            "ioc_value": "qiekqweantyyr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882523": [
        {
            "ioc_value": "quinterta.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882524": [
        {
            "ioc_value": "rl.domalnverlficatlon.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882525": [
        {
            "ioc_value": "securefunandcoolstuffhahalol.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882526": [
        {
            "ioc_value": "sfrevdsgd1.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882527": [
        {
            "ioc_value": "stustverif.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882528": [
        {
            "ioc_value": "ueoqlpahabibi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882504": [
        {
            "ioc_value": "bebarterkaw.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882505": [
        {
            "ioc_value": "bymeserv.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882506": [
        {
            "ioc_value": "candymani-ager.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882507": [
        {
            "ioc_value": "capitalscope.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882508": [
        {
            "ioc_value": "deepload.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882509": [
        {
            "ioc_value": "deeznutsinyomouthhahahalol.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882510": [
        {
            "ioc_value": "diganaa.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882511": [
        {
            "ioc_value": "drikkiianll.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882512": [
        {
            "ioc_value": "focusdailymarket.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 18:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882494": [
        {
            "ioc_value": "zasxcd.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882495": [
        {
            "ioc_value": "zxcdfr.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882487": [
        {
            "ioc_value": "bmnjhy.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882488": [
        {
            "ioc_value": "bvnbhy.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882489": [
        {
            "ioc_value": "cbvfrd.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882490": [
        {
            "ioc_value": "mkjiun.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882491": [
        {
            "ioc_value": "nmhjnu.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882492": [
        {
            "ioc_value": "ssefcv.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882493": [
        {
            "ioc_value": "xvbndr.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882486": [
        {
            "ioc_value": "103.59.103.170:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:13:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2089616109213569336",
            "tags": "SliverFox",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882482": [
        {
            "ioc_value": "134.122.136.84:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:07:12",
            "last_seen_utc": "2026-08-26 17:29:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/tdatwja/status/2089986369544405063",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882481": [
        {
            "ioc_value": "https://134.122.136.84:8383/ClientCSRSigningServlet",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 18:07:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/tdatwja/status/2089986369544405063",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882480": [
        {
            "ioc_value": "207.56.119.83:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 18:05:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/tdatwja/status/2089996616359174472",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882479": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/stroller-del/slicing/doornail",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 18:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882478": [
        {
            "ioc_value": "109.123.245.226:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 17:57:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5d5f894ef71d10255620990abd68ba7ef14b7da956f6317375e9adbe04f2e5a5/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882476": [
        {
            "ioc_value": "109.123.245.226:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 17:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5d5f894ef71d10255620990abd68ba7ef14b7da956f6317375e9adbe04f2e5a5/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882477": [
        {
            "ioc_value": "109.123.245.226:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 17:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5d5f894ef71d10255620990abd68ba7ef14b7da956f6317375e9adbe04f2e5a5/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882412": [
        {
            "ioc_value": "http://xightne.click:7242/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 17:49:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882411": [
        {
            "ioc_value": "pmue9zga.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 17:47:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882408": [
        {
            "ioc_value": "https://varzeshsb.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 17:30:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/varzeshsb.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882407": [
        {
            "ioc_value": "t3my1alw.cardioslim-tea.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 17:26:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882406": [
        {
            "ioc_value": "cardioslim-tea.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 17:23:54",
            "last_seen_utc": "2026-08-19 17:24:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882405": [
        {
            "ioc_value": "91.210.110.11:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 17:07:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882402": [
        {
            "ioc_value": "wer-ldr.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 17:01:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2090111458142994915",
            "tags": "Gafgyt,Mirai",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882403": [
        {
            "ioc_value": "wereng.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 17:01:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2090111458142994915",
            "tags": "Gafgyt,Mirai",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1882404": [
        {
            "ioc_value": "https://dugrangranitos.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 17:00:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dugrangranitos.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882401": [
        {
            "ioc_value": "192.142.53.225:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 16:58:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/39a180aeadc544e9423433352159ebc88407455a24eb9f0c266b1e78e134ac8f/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882400": [
        {
            "ioc_value": "79.133.57.37:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 16:57:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/490ab4a48bebf291311d3c71046e2b3d44d846401f5258b8e1f96355c7e7c3fd/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882399": [
        {
            "ioc_value": "kikaku.sadamula.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 16:57:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1da3b9d89c8932b5597e752fe1468ebe236d21328a2453769624f69becf05656/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882398": [
        {
            "ioc_value": "217.217.97.172:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 16:56:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d91a4c89713cfa5e9435141be213b568d9094b5e8d0f50f392140b019ddbd43/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882389": [
        {
            "ioc_value": "159.89.193.17:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 16:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882391": [
        {
            "ioc_value": "213.199.38.28:6920",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 16:54:23",
            "last_seen_utc": "2026-08-20 17:32:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "117ee8f56cb68a9f6a440e1b4329f856,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882396": [
        {
            "ioc_value": "ideiu88144.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 16:54:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882397": [
        {
            "ioc_value": "pulse.pulsevectorcore6.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 16:54:04",
            "last_seen_utc": "2026-08-19 16:54:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b3e1379e763c84c598fbf49006b46b6df57499efbaf6d018fdc5b236c756cdd8/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882390": [
        {
            "ioc_value": "valokse.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 16:06:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882387": [
        {
            "ioc_value": "ed8depc8.cardioslim-t.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 15:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882385": [
        {
            "ioc_value": "http://zakuiru.shop:9048/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:21:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882383": [
        {
            "ioc_value": "my-service.eu.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.spark_rat",
            "malware_alias": null,
            "malware_printable": "SparkRAT",
            "first_seen_utc": "2026-08-19 15:14:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/edaff13bad2401227db98e70ecef36c910a4ad7079796b03da6a7977e3b7713c/",
            "tags": "RAT,SparkRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882381": [
        {
            "ioc_value": "http://zakuiru.shop:9048/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:10:56",
            "last_seen_utc": "2026-08-19 16:02:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8e11c717fa2e8c37b5f1ed695d8c8e1898d4e1f40a976e79ece0a8f4260fa9b4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882380": [
        {
            "ioc_value": "http://zxdaone.click:6432/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:05:53",
            "last_seen_utc": "2026-08-19 16:08:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d1764ee1c71dd5da7339e1ac13b84fc6d041782ba66cd310bf268184fb43951/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882379": [
        {
            "ioc_value": "http://zxdaone.click:6432/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:05:51",
            "last_seen_utc": "2026-08-19 16:08:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/94ac07fc63269ca404c5f47a8298d92a227e8da5917e6fd3f96a1f06f90572b7/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882378": [
        {
            "ioc_value": "http://zakuiru.shop:9048/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:05:49",
            "last_seen_utc": "2026-08-19 16:08:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/94ac07fc63269ca404c5f47a8298d92a227e8da5917e6fd3f96a1f06f90572b7/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882377": [
        {
            "ioc_value": "107.175.88.92:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 15:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882376": [
        {
            "ioc_value": "134.209.112.52:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 15:05:06",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882375": [
        {
            "ioc_value": "38.76.183.197:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882374": [
        {
            "ioc_value": "85.239.144.17:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 15:03:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d1ad9929558eff7927026b4b9286c03b75640431955d37d22b77b920198ed22/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882373": [
        {
            "ioc_value": "http://zxdaone.click:6432/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:24",
            "last_seen_utc": "2026-08-19 16:02:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/edb7f446f91211fcb38d3d38b69dc3e503a554a7b1399700af6aa4635266af15/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882372": [
        {
            "ioc_value": "http://zxdaone.click:6432/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:22",
            "last_seen_utc": "2026-08-19 16:08:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/684716407fac9db2bf2540db8c7c74928b98dbfbebeae2181d7bd0aa73656a31/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882371": [
        {
            "ioc_value": "http://zxdaone.click:6432/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:21",
            "last_seen_utc": "2026-08-19 16:08:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab81e32fd9260645a5a4e6534a69d4a8c8db5e5c873a2a8f5aae600902bd4a8c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882370": [
        {
            "ioc_value": "http://zxdaone.click:6432/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:19",
            "last_seen_utc": "2026-08-19 16:02:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d9630814908b32ab2454226015db48cc39f32f6a6fc0829367b5fe7f6db5161b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882302": [
        {
            "ioc_value": "153.75.233.125:82",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-19 15:01:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882312": [
        {
            "ioc_value": "8.222.188.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 15:01:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882313": [
        {
            "ioc_value": "8.219.220.240:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 15:01:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882369": [
        {
            "ioc_value": "http://zakuiru.shop:9048/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:15",
            "last_seen_utc": "2026-08-19 16:08:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d9630814908b32ab2454226015db48cc39f32f6a6fc0829367b5fe7f6db5161b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882314": [
        {
            "ioc_value": "209.99.184.234:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 15:01:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882315": [
        {
            "ioc_value": "120.77.42.217:50000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 15:01:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882323": [
        {
            "ioc_value": "https://boulangeo.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 15:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882324": [
        {
            "ioc_value": "missed-upd.happyhatterreviews.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-19 15:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117122578470569567",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882353": [
        {
            "ioc_value": "lyqivo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 15:01:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882368": [
        {
            "ioc_value": "http://zakuiru.shop:9048/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:10",
            "last_seen_utc": "2026-08-19 16:08:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab81e32fd9260645a5a4e6534a69d4a8c8db5e5c873a2a8f5aae600902bd4a8c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882367": [
        {
            "ioc_value": "http://zakuiru.shop:9048/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:06",
            "last_seen_utc": "2026-08-19 16:08:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/684716407fac9db2bf2540db8c7c74928b98dbfbebeae2181d7bd0aa73656a31/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882366": [
        {
            "ioc_value": "http://zakuiru.shop:9048/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 15:01:04",
            "last_seen_utc": "2026-08-19 16:02:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/edb7f446f91211fcb38d3d38b69dc3e503a554a7b1399700af6aa4635266af15/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882365": [
        {
            "ioc_value": "laggdr7f.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 14:55:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882364": [
        {
            "ioc_value": "43.157.229.158:6432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 14:55:22",
            "last_seen_utc": "2026-08-20 03:21:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882363": [
        {
            "ioc_value": "118.107.9.136:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 14:55:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882362": [
        {
            "ioc_value": "147.93.7.66:2137",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 14:50:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/207410d97d1af036297be90cf72c1a7bbd209a891beddfec222f19a081c346fa/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882361": [
        {
            "ioc_value": "nexus.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 14:50:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/207410d97d1af036297be90cf72c1a7bbd209a891beddfec222f19a081c346fa/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882360": [
        {
            "ioc_value": "ivddwqnbt.billyflush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 14:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882359": [
        {
            "ioc_value": "http://brlogic.biz:6920",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 14:49:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882358": [
        {
            "ioc_value": "gw.cedarvault.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 14:46:48",
            "last_seen_utc": "2026-08-19 14:46:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6e15ca7dd35f30060885ed042912b306388abe7085bfdf3d3716df95a1f9459c/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882355": [
        {
            "ioc_value": "27.124.12.148:4453",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 14:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882354": [
        {
            "ioc_value": "27.124.12.148:4452",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 14:35:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882351": [
        {
            "ioc_value": "www.picturinghealth.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:51",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882347": [
        {
            "ioc_value": "wave7.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:50",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882348": [
        {
            "ioc_value": "www.ccvmurcia.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:50",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882349": [
        {
            "ioc_value": "www.elsieteceremonial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:50",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882350": [
        {
            "ioc_value": "www.galvaqro.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:50",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882339": [
        {
            "ioc_value": "toscawebdesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:49",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882340": [
        {
            "ioc_value": "tpmspa.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:49",
            "last_seen_utc": "2026-08-28 12:37:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882344": [
        {
            "ioc_value": "vkonsult.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:49",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882345": [
        {
            "ioc_value": "walshfunerals.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:49",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882333": [
        {
            "ioc_value": "sohantraders.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:48",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882334": [
        {
            "ioc_value": "swissroyall.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:48",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882338": [
        {
            "ioc_value": "theme.goodit.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:48",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882332": [
        {
            "ioc_value": "seuolhar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:21:47",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882330": [
        {
            "ioc_value": "wikkkipi12.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:20:08",
            "last_seen_utc": "2026-08-23 17:24:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882328": [
        {
            "ioc_value": "housemill9911.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:20:07",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882329": [
        {
            "ioc_value": "nailpiuwe8921.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:20:07",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882327": [
        {
            "ioc_value": "alcopiii876.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 14:20:06",
            "last_seen_utc": "2026-08-23 17:24:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882325": [
        {
            "ioc_value": "7xc27y42.eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 14:16:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882320": [
        {
            "ioc_value": "49.235.52.47:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882321": [
        {
            "ioc_value": "49.235.52.47:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882322": [
        {
            "ioc_value": "49.235.52.47:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882318": [
        {
            "ioc_value": "49.235.52.47:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882319": [
        {
            "ioc_value": "49.235.52.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882317": [
        {
            "ioc_value": "http://zakuiru.shop:9048/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 14:01:09",
            "last_seen_utc": "2026-08-19 15:21:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3840bcd452fbd7df0083393d79e5848192231195a7242a018c0b8a991e3d3f8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882316": [
        {
            "ioc_value": "http://kupzovo.shop:7567/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 14:00:52",
            "last_seen_utc": "2026-08-19 15:21:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3840bcd452fbd7df0083393d79e5848192231195a7242a018c0b8a991e3d3f8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882311": [
        {
            "ioc_value": "peridotskerry.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-19 13:56:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882310": [
        {
            "ioc_value": "https://peridotskerry.top/user/health-effect.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-19 13:56:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882309": [
        {
            "ioc_value": "https://lindenplumb.top/user/health-effect.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-19 13:53:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882308": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/stroller-del/shrouded/growl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 13:52:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882307": [
        {
            "ioc_value": "lindenplumb.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-19 13:48:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882306": [
        {
            "ioc_value": "https://lindenplumb.top/user/refresh-html",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-19 13:47:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1882304": [
        {
            "ioc_value": "http://vexdico.shop:8539/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:46:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882303": [
        {
            "ioc_value": "http://bravplo.click:7713/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:46:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882287": [
        {
            "ioc_value": "iosselin.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 13:35:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882288": [
        {
            "ioc_value": "https://iosselin.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 13:35:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882290": [
        {
            "ioc_value": "138.197.15.223:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 13:35:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882289": [
        {
            "ioc_value": "https://iosselin.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 13:35:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882301": [
        {
            "ioc_value": "http://vexdico.shop:8539/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:30:57",
            "last_seen_utc": "2026-08-19 15:15:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cce3ddac2dbcaf1a4f4db50b48fcc4e65341096b51c7bc6c13e7bd98c867e1f2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882300": [
        {
            "ioc_value": "http://poagint.click:8592/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:30:54",
            "last_seen_utc": "2026-08-19 15:15:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cce3ddac2dbcaf1a4f4db50b48fcc4e65341096b51c7bc6c13e7bd98c867e1f2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882299": [
        {
            "ioc_value": "http://kupzovo.shop:7567/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:30:49",
            "last_seen_utc": "2026-08-19 15:15:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cce3ddac2dbcaf1a4f4db50b48fcc4e65341096b51c7bc6c13e7bd98c867e1f2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882298": [
        {
            "ioc_value": "http://vexdico.shop:8539/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:25:51",
            "last_seen_utc": "2026-08-19 15:10:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71e5bb794cf80e7bfeae891138b6acaf5d391f75dd665d5ea7c6e024df8e2f9d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882297": [
        {
            "ioc_value": "http://poagint.click:8592/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:25:47",
            "last_seen_utc": "2026-08-19 15:10:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd77dd458f512935cc8912da7964570f1efe44bb497968204877890b397bbfac/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882296": [
        {
            "ioc_value": "http://poagint.click:8592/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:25:46",
            "last_seen_utc": "2026-08-19 15:10:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71e5bb794cf80e7bfeae891138b6acaf5d391f75dd665d5ea7c6e024df8e2f9d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882295": [
        {
            "ioc_value": "http://kupzovo.shop:7567/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:25:41",
            "last_seen_utc": "2026-08-19 15:10:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7ff4fe3f3d7784da58e257cc7ea7e4f7ce63255817e4b79be123144d3027cd62/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882294": [
        {
            "ioc_value": "http://kupzovo.shop:7567/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 13:25:40",
            "last_seen_utc": "2026-08-19 15:10:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd77dd458f512935cc8912da7964570f1efe44bb497968204877890b397bbfac/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882293": [
        {
            "ioc_value": "dsyuyfw2.cardio--slim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 13:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882292": [
        {
            "ioc_value": "cardio--slim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 13:22:44",
            "last_seen_utc": "2026-08-19 13:23:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882286": [
        {
            "ioc_value": "185.199.197.93:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882285": [
        {
            "ioc_value": "185.199.197.93:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882283": [
        {
            "ioc_value": "147.139.136.105:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882284": [
        {
            "ioc_value": "185.199.197.93:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882282": [
        {
            "ioc_value": "38.207.177.165:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 13:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882280": [
        {
            "ioc_value": "216.118.235.70:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 12:58:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AdaptixC2",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882281": [
        {
            "ioc_value": "82.153.241.181:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-19 12:58:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1882279": [
        {
            "ioc_value": "abondance.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 12:48:02",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882278": [
        {
            "ioc_value": "gjii3jk6.en-us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 12:47:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882269": [
        {
            "ioc_value": "boulangeo.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 12:47:19",
            "last_seen_utc": "2026-08-19 16:32:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882270": [
        {
            "ioc_value": "https://boulangeo.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 12:47:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882271": [
        {
            "ioc_value": "https://boulangeo.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 12:47:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1882272": [
        {
            "ioc_value": "qovifequ.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 12:47:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1882274": [
        {
            "ioc_value": "http://kupzovo.shop:7567/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 12:33:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882273": [
        {
            "ioc_value": "http://bravplo.click:7713/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 12:33:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1882267": [
        {
            "ioc_value": "147.139.136.105:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882268": [
        {
            "ioc_value": "147.139.136.105:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882266": [
        {
            "ioc_value": "147.139.136.105:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 12:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882265": [
        {
            "ioc_value": "2.57.241.129:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 11:48:03",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1882264": [
        {
            "ioc_value": "sensacoukwekch.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-19 11:47:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,lumma",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882260": [
        {
            "ioc_value": "inatehub.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-19 11:47:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,lumma",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882261": [
        {
            "ioc_value": "nucleji.my",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-19 11:47:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,lumma",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882262": [
        {
            "ioc_value": "lunarise.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-19 11:47:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,lumma",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882263": [
        {
            "ioc_value": "moonskyo.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-19 11:47:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,lumma",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882254": [
        {
            "ioc_value": "185.91.126.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:04",
            "last_seen_utc": "2026-08-28 00:41:26",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882255": [
        {
            "ioc_value": "45.74.3.160:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882256": [
        {
            "ioc_value": "77.110.108.14:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882257": [
        {
            "ioc_value": "80.97.160.237:23401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882258": [
        {
            "ioc_value": "87.120.244.219:13131",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882259": [
        {
            "ioc_value": "91.193.7.162:13309",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882247": [
        {
            "ioc_value": "104.251.181.148:1427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882248": [
        {
            "ioc_value": "104.251.181.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882249": [
        {
            "ioc_value": "104.251.181.148:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882250": [
        {
            "ioc_value": "144.24.14.113:7005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882251": [
        {
            "ioc_value": "15.204.115.143:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": "2026-08-28 15:49:59",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882252": [
        {
            "ioc_value": "185.116.238.123:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882253": [
        {
            "ioc_value": "185.91.126.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:46:03",
            "last_seen_utc": "2026-08-30 18:15:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882246": [
        {
            "ioc_value": "xoso6640.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882231": [
        {
            "ioc_value": "2301amarilloa.kozow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882232": [
        {
            "ioc_value": "aseguradora2026.kozow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882233": [
        {
            "ioc_value": "creatifanay.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882234": [
        {
            "ioc_value": "crushanytics.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882235": [
        {
            "ioc_value": "nordking.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882236": [
        {
            "ioc_value": "nordkingbackup.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882237": [
        {
            "ioc_value": "nordkingbackup1.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882238": [
        {
            "ioc_value": "nordkingbackup2.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882239": [
        {
            "ioc_value": "nordkingbackup3.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882240": [
        {
            "ioc_value": "smmrbysummerdesnoo.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882241": [
        {
            "ioc_value": "softcrewinc.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882242": [
        {
            "ioc_value": "www.ekramsales.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882243": [
        {
            "ioc_value": "www.ekramsalesbackup.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882244": [
        {
            "ioc_value": "www.ekramsalesbackup1.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882245": [
        {
            "ioc_value": "www.ekramsalesbackup2.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 11:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882229": [
        {
            "ioc_value": "phongtrosinhvien.living",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-19 11:43:14",
            "last_seen_utc": "2026-08-19 11:43:14",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882230": [
        {
            "ioc_value": "stephmiklo2019.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-19 11:43:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882228": [
        {
            "ioc_value": "koyet88723-44608.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-19 11:40:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,xworm",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882227": [
        {
            "ioc_value": "nagawar.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 11:40:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,mirai",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882226": [
        {
            "ioc_value": "peakypinkers.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:39:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1882225": [
        {
            "ioc_value": "https://pastebin.com/raw/9stYNLmi",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:39:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881638": [
        {
            "ioc_value": "162.243.240.81:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 11:31:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881640": [
        {
            "ioc_value": "http://45.120.161.86:59888/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-19 11:31:01",
            "last_seen_utc": "2026-08-25 00:19:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.120.161.86",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1881643": [
        {
            "ioc_value": "lavenderteodora.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 11:31:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1881788": [
        {
            "ioc_value": "qybari.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 11:31:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1881811": [
        {
            "ioc_value": "176.65.139.209:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 11:30:59",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1881966": [
        {
            "ioc_value": "greasy8742.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 11:30:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1881985": [
        {
            "ioc_value": "132.243.200.43:1420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 11:30:58",
            "last_seen_utc": "2026-08-19 15:40:09",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1881987": [
        {
            "ioc_value": "162.243.240.81:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 11:30:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1882224": [
        {
            "ioc_value": "https://kalekos.world/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 11:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kalekos.world",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1882223": [
        {
            "ioc_value": "kc4brp35.cardiosliim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 11:22:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1882222": [
        {
            "ioc_value": "cardiosliim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 11:22:11",
            "last_seen_utc": "2026-08-19 11:22:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1882221": [
        {
            "ioc_value": "f5e01b07215c84d925f8a49a2bd433d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-08-19 11:19:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882218": [
        {
            "ioc_value": "caf5b7d0873fbac47a3dd246a9130ffe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882219": [
        {
            "ioc_value": "ccdb7e8fe4ec5630bee8b7efe1ca7de0ad846aeb440b52acbb8222f2d647702f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-08-19 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882220": [
        {
            "ioc_value": "ccea8efb6893fb0792dd7dc868191a1123f7959b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-08-19 11:19:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882215": [
        {
            "ioc_value": "3212ab713cc6ca91540f471b11d00a2b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-19 11:19:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882216": [
        {
            "ioc_value": "34bae751324dcb623efb9c061f097d715b1d2d93587e9b0ea59017a9e5778f6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:19:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882217": [
        {
            "ioc_value": "e7653a59dce272f06f56a32c7aa92a1037941930",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:19:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882214": [
        {
            "ioc_value": "6cbc010f684d6552715551ea8bea6e139d342a23",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-19 11:19:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882212": [
        {
            "ioc_value": "59e887f4d4e402debb313703bfd4cde0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882213": [
        {
            "ioc_value": "3b0e67c8384659a3a63ac9706bad135985189e6909712e45d89dae934d9c02c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-19 11:19:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882209": [
        {
            "ioc_value": "7ff086f98f32a1ee98dffda3614c8410",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882210": [
        {
            "ioc_value": "0506df5c160a5ab06838647b26cac8a239f98a747b5aa8bfe7102cf0eaf32827",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882211": [
        {
            "ioc_value": "8b3e9632e1d132cb5148076c763f14cae0a7c12c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882207": [
        {
            "ioc_value": "9536ed4f62eece817fb9fdfce1a6804e04c7f05555880afb13abfc4acdaa44d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:19:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882208": [
        {
            "ioc_value": "cb74caa66f7e7ea94f64d375c4d7372f596e6211",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:19:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882204": [
        {
            "ioc_value": "d1231294e68f3d9ae6c795ea49253997684c68770e4f856cd8d8c734c1ca7cfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:19:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882205": [
        {
            "ioc_value": "8bb8092d668284942dc39b6f10fb485e1a0dab42",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:19:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882206": [
        {
            "ioc_value": "ce112e750fccda61b32cbaee6cfdc3d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:19:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882201": [
        {
            "ioc_value": "58373b38eeae8828e8b9b660942c74e6b1ab0fc62799d1e7e228670f7838be95",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882202": [
        {
            "ioc_value": "c435c1f68a84d5933ec60ae02188c0e4fb404da1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882203": [
        {
            "ioc_value": "61c8d09c13a669f8bf9b7bed9c957d65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:19:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882199": [
        {
            "ioc_value": "6d8bf8874c0ac7dddc63370689cab279f92c9d3e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882200": [
        {
            "ioc_value": "6699cdad824d4e21964db174cb9622d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:19:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882196": [
        {
            "ioc_value": "245d18548672cd138776b165d57dc59c94fc8e6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882197": [
        {
            "ioc_value": "68edc179300bbd24798773b1362111a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882198": [
        {
            "ioc_value": "6aba832d095cf90906b34335f698bee1debe024ce3422375ee9394aea94dc934",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:19:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882194": [
        {
            "ioc_value": "55ecbb206e755651ddc70297948d8753",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882195": [
        {
            "ioc_value": "787f169a719e78bcc790ce8edb42e8f737b99d00892a1a158cf97f19d7df2197",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882191": [
        {
            "ioc_value": "52bdbdd795fe564af2f8f235e2d6153f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882192": [
        {
            "ioc_value": "8910f0cb2eb97c3b1ced8b512bb34884a958ba7d81829841b2e60eb487157662",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882193": [
        {
            "ioc_value": "6539df0786d917bd699e0b197a1b6f90bfc592dd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 11:19:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882188": [
        {
            "ioc_value": "3f885c439c08d1e6ae554339d0f1bc3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882189": [
        {
            "ioc_value": "1c129e9920c0d9488cff21e6562ff95bc3b329e23c93d92c3799ab4a42f75251",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882190": [
        {
            "ioc_value": "0ae02d81e043c5c878f743b75c17c17f65ed6d3f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882187": [
        {
            "ioc_value": "f97a4e0c8f38544f38140ea05c87356e57f619ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882184": [
        {
            "ioc_value": "20f05a0d0a4c0c193c0facac5ea937e422260f56",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882185": [
        {
            "ioc_value": "4292346b14958dd443108324bd284d6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882186": [
        {
            "ioc_value": "dfa0e88fa2c28581d8c12b04d4f3e2518c578c62edc249dda867dbc7c0715d7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882182": [
        {
            "ioc_value": "9aebfd3ecb2d662dccc70919f1f66205",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882183": [
        {
            "ioc_value": "565c7e58d69911df063704f17049462faa012852053f034b6aacf6651515304f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882181": [
        {
            "ioc_value": "3a3cdce168ec5930d1df827adf86680df78cc7bf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882179": [
        {
            "ioc_value": "20b825c30a115515fc513b78f686a646",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882180": [
        {
            "ioc_value": "937904cca4fd1a67c8ca473e7894a84ee8db3fe48d015441fe876dd6b5113c88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:19:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882176": [
        {
            "ioc_value": "e5bd609ef62c5df53951f7c703f3bc42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882177": [
        {
            "ioc_value": "1d65b76219f184a4fc87d597b0ae50e2ef6f98a79558448b0f0868f761c5479f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882178": [
        {
            "ioc_value": "56aaabe7c67573359adb2b73befb59503376e839",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:19:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882174": [
        {
            "ioc_value": "64494586d79711a0c12ad714f5f895a5d14200247cc02f0434f2bcd8b3b8002f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882175": [
        {
            "ioc_value": "14b278902d4bd280d6cc89225437aff7984edbf6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 11:18:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882172": [
        {
            "ioc_value": "b149646eae65f70490466a0b196f659a192f8e8b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882173": [
        {
            "ioc_value": "4ffeee5993c69e77a2553981ee2f9ea0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882170": [
        {
            "ioc_value": "6dfc4bbd11e3ca3f9e4e25876fe6b932",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882171": [
        {
            "ioc_value": "2ecf04b3f001039184d841dd067d6e47bf192047ffe6b92c72a9d57bda6c6afe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882169": [
        {
            "ioc_value": "90a7c111e85d486d07ef1035ae25a2bf92693100",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882166": [
        {
            "ioc_value": "4db30b3e8128d8262c7d9401d53b46f9e39e849d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-19 11:18:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882167": [
        {
            "ioc_value": "036259e69237fb1d81f8f741a720db99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-19 11:18:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882168": [
        {
            "ioc_value": "0ecbba5d1aa1cfb32e96df6d6d7854929353733668ad1134256ec0451dc1a1da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882164": [
        {
            "ioc_value": "cdf69e3345e9e518a03633c28358268b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-19 11:18:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882165": [
        {
            "ioc_value": "be21ec6879ddc9457fb48e2da6fe49a4208ded546205b3a161c358dcb016e38f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-19 11:18:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882162": [
        {
            "ioc_value": "41aa2a9f47277b32efbb369b5b92c79d444d3c524cd55142d9e85603ddea3478",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-19 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882163": [
        {
            "ioc_value": "687ce6f9816eb8ad80f532ba2c832cf5476bdca0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-19 11:18:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882159": [
        {
            "ioc_value": "82b1a5ffdf569695f522537b98a78aa0dc655b7700efdbe80e1e664891cf709c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882160": [
        {
            "ioc_value": "da97a8cfeeecbc1af4d034bb877f9558840a4fe3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882161": [
        {
            "ioc_value": "987ea6e787945b049b32c1bdb31b54aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882157": [
        {
            "ioc_value": "14881a228c7220a44369127c85f64071627b5f22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:18:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882158": [
        {
            "ioc_value": "677d3e43a0ee2b00841b8e6eacb4f2b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:18:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882155": [
        {
            "ioc_value": "c24fe5ae59d1369775d162697d52e370",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vilsastealer",
            "malware_alias": null,
            "malware_printable": "Vilsa Stealer",
            "first_seen_utc": "2026-08-19 11:18:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882156": [
        {
            "ioc_value": "9f4e92d43db6f77fc3b5e7a764afb703ed327e595ff693bde6e03d7eb0e1cf19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:18:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882152": [
        {
            "ioc_value": "11f472e21a050d7c1e95bb99c395727e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882153": [
        {
            "ioc_value": "bbad922cd7ad33f2592c001d0956491d873ed2270766e0f0f81c8adc076c8307",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vilsastealer",
            "malware_alias": null,
            "malware_printable": "Vilsa Stealer",
            "first_seen_utc": "2026-08-19 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882154": [
        {
            "ioc_value": "dd2387171456dcf0a516d546b9afcddead39868b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vilsastealer",
            "malware_alias": null,
            "malware_printable": "Vilsa Stealer",
            "first_seen_utc": "2026-08-19 11:18:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882149": [
        {
            "ioc_value": "d9636241120eb6b38a28e010dc70fa01",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-19 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882150": [
        {
            "ioc_value": "717ef4a13841aa2766a3b38f615755d1e85228ac6ab6efa6ea662db7eca62961",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882151": [
        {
            "ioc_value": "82f8e25a1887573edb5a833d8248b323337a12f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882146": [
        {
            "ioc_value": "6ef10b9988bd4ad12f1576f78ce852c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-19 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882147": [
        {
            "ioc_value": "213c343ab852a0b185a2198677bf48ac0e7372467cce84d813fe8c5ddc7464b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-19 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882148": [
        {
            "ioc_value": "f609394cb065f651b68b29352f1538a4ce19627c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-19 11:18:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882143": [
        {
            "ioc_value": "8aaf63499dee285125da1de5bea8797d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882144": [
        {
            "ioc_value": "9e000b451c872404804000e33ca7ca8ad3b5f345f876a0500646c67a98453954",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-19 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882145": [
        {
            "ioc_value": "8c472e8959f21688390bc4466e5361d18c868293",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-19 11:18:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882141": [
        {
            "ioc_value": "6e642927debe1863e1821a1cd1f69646fad9ab981c798817bc72f3025bd72a82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882142": [
        {
            "ioc_value": "5432d698c7b87c67fa9159b409160d66ba25331d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882140": [
        {
            "ioc_value": "86b372464122ae0d5222b6ce5022696d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882138": [
        {
            "ioc_value": "e0b92c6a29b0f98e0bd3b348e4722b9e95eb66c3ca949207ebbca7ac889eb987",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882139": [
        {
            "ioc_value": "b5827081bd5ca78670a0aa662419a2752243b150",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882136": [
        {
            "ioc_value": "2347770ca04aa33eb77b224a460410594e125537",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882137": [
        {
            "ioc_value": "f82c8cefbe4905f4260c2b2238411a20",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882132": [
        {
            "ioc_value": "890ff801a3b6b69ff4de8585ae93814b9d5b6ec479cc694a8221292954801d66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882133": [
        {
            "ioc_value": "9a308e0b00c87501c482026a150ee426d30c02a6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882134": [
        {
            "ioc_value": "9bd75aced9f1d2dc40ce72b28e9cfa97",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882135": [
        {
            "ioc_value": "c3797af4b5fddb4175fe232c8c737abd54771dc72b130e8f98ea63900fd5c961",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882131": [
        {
            "ioc_value": "04ed9c390b38b990d11bb76c6fe17531",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882127": [
        {
            "ioc_value": "fb9ee49d0ade020d8c148cc58c983e60b43eeeed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882128": [
        {
            "ioc_value": "db9904b4b7c8738ae5e55b37cf3114a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882129": [
        {
            "ioc_value": "357931447e7411de3c2d5822e5c8255b25ec52c96dab3a058abd3dd420d1e864",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882130": [
        {
            "ioc_value": "33df7507dbdea3aed9043433cc6b46aa7ce816a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882125": [
        {
            "ioc_value": "927e2d8b1ba53acd877e45afcf6afcf3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882126": [
        {
            "ioc_value": "b4912f51ecd5dc4cb9c0380ca4486a1778189bd4e1a3a4e19a10c3593502dc0b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882123": [
        {
            "ioc_value": "b3e1379e763c84c598fbf49006b46b6df57499efbaf6d018fdc5b236c756cdd8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882124": [
        {
            "ioc_value": "58f4f79df3aaecc1b26aaab547be46c4c5c2baa0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882121": [
        {
            "ioc_value": "cd85709e9f72bab431004ad84f3d893cf77a853c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882122": [
        {
            "ioc_value": "82e41f23c05d8f337379bb2a27e0668e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882119": [
        {
            "ioc_value": "619b2c025b0d4cbae95bd064be438c16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882120": [
        {
            "ioc_value": "5b1295a7bec29c8d8fa0169f870d14e992663cc2992d1e64752fd8899a2b66cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882116": [
        {
            "ioc_value": "c38a56cb06c08facb6be7f7071be2d9a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882117": [
        {
            "ioc_value": "a4e1a50e45b05b9a5f7b566d50ac1bff826f74f558e312b9f97675d885b2f3ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882118": [
        {
            "ioc_value": "5ee52c324633ba2f7d7fef0287d4ac15560f1741",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882114": [
        {
            "ioc_value": "72364574683466a00a925b35c83ee2a547d73af304b06c386c59998345cef672",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882115": [
        {
            "ioc_value": "cee757eb3e4894a65cd6e773e0bb914674088984",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882111": [
        {
            "ioc_value": "b7c60bc7570406370984e95e12934ecb7e935558d473e9444cee85951d202c67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.krasue_rat",
            "malware_alias": null,
            "malware_printable": "Krasue RAT",
            "first_seen_utc": "2026-08-19 11:18:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882112": [
        {
            "ioc_value": "2de5befe8eadae9b86160fe9c79e8c3e2f8d0d90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.krasue_rat",
            "malware_alias": null,
            "malware_printable": "Krasue RAT",
            "first_seen_utc": "2026-08-19 11:18:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882113": [
        {
            "ioc_value": "3d9f8ae8d0d4c9238e86a11017cf8ead",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.krasue_rat",
            "malware_alias": null,
            "malware_printable": "Krasue RAT",
            "first_seen_utc": "2026-08-19 11:18:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882108": [
        {
            "ioc_value": "9db8ab0206207d0a57755d076367bd36a8e25a6ffca7c23140ab7f787894954d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882109": [
        {
            "ioc_value": "d23c5d3fc54dd047bfe17f3ff354eecc37cc4838",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882110": [
        {
            "ioc_value": "acb33e82e9f011ebace68af1cf93057d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882106": [
        {
            "ioc_value": "d405224e17b554f5de99d2a1f8674c3987e9aaa8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882107": [
        {
            "ioc_value": "39afe33dccf4fdacf20d0a6d3054b859",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882104": [
        {
            "ioc_value": "0f1dd2bb8f70af0cd0033c31c8d4115b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882105": [
        {
            "ioc_value": "efb6b9f3462cb8310b1cb8abe1a0d416f3ebf02507a95cca4a6d6591787e3c59",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882102": [
        {
            "ioc_value": "62c42b1094687e591deae00e0622b11b115e7591e8ff8de7d00f889473f13f33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882103": [
        {
            "ioc_value": "1be0253ce8a9f900953988dacaf3064e34924fe3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882099": [
        {
            "ioc_value": "43021e2b3978cc71c858c699713cdb9b3a68e70c4a8033e18c7df5d033354ed1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882100": [
        {
            "ioc_value": "56bafc15bc15c1017bdd64498573bdfc55c801c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882101": [
        {
            "ioc_value": "157624d744fda878065ceb4636194ea7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882097": [
        {
            "ioc_value": "61ffff8690f89dac22094a6692a92424bab764e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882098": [
        {
            "ioc_value": "b73947ec1ddb5531e81a324f58ed2d23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882095": [
        {
            "ioc_value": "a3379d4a262543b7d3355841b0b2d5f3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882096": [
        {
            "ioc_value": "4fbee9a23d421d30d52c78881ce2610ddb489a9bf49f24f6aec228d923a1a460",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882092": [
        {
            "ioc_value": "9e9470746cbecbc2a2829fa5db53ce24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882093": [
        {
            "ioc_value": "bd90a726c8a51d197dcaff3da30db946bfe10b3dfa96b73fd899b1ba30a4592b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882094": [
        {
            "ioc_value": "0db922df822cc229816cbf5802b26777e091e8b4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882089": [
        {
            "ioc_value": "000215417b048b83caf3b3b4aca42bce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882090": [
        {
            "ioc_value": "c2a61c109f687bcebfc42c9ada0884e60af406f5d4596c0e727262412036b311",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882091": [
        {
            "ioc_value": "45d18cbca348f7a3c03d155f892e791b296ccc5e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882087": [
        {
            "ioc_value": "a4b54cb00e44249af6d851b3a8210641287089436c3063dabc69f9af25f78c93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882088": [
        {
            "ioc_value": "bf56b79540d8b53d88b679fa3e6661e08711a92a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882085": [
        {
            "ioc_value": "6a036bfa591026ae3f291469609d6334493946c6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882086": [
        {
            "ioc_value": "c9c6187b7c82170c095ca147c782f59b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882083": [
        {
            "ioc_value": "31099f758cf96c70bde1abf35ad1eff2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882084": [
        {
            "ioc_value": "600c5da6e0dc51ed3ef6f2be2be931c477cbcba192ab80d1cf52637d8a6e7560",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882081": [
        {
            "ioc_value": "e3b4cd08ac1852d8c079299ca30895cbe5e8b9402e7f08858710c3c1a59a288d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882082": [
        {
            "ioc_value": "a38735e6480b94a94c8df7d510f7048734299ea0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882079": [
        {
            "ioc_value": "f768749575653ba3b83b46633fe57c477a58624e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:18:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882080": [
        {
            "ioc_value": "725eed1a191ecf0e74d7c382e12242a1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:18:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882076": [
        {
            "ioc_value": "a7b335b39c038d10f9c7dd77c4c427214b52c2a4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882077": [
        {
            "ioc_value": "08a7495f35870514fc60f8ac70f77547",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882078": [
        {
            "ioc_value": "9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:18:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882073": [
        {
            "ioc_value": "424c970d9a0912b1a5c5541da36b0829938665a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882074": [
        {
            "ioc_value": "4722cd9d199bcb21429ce0609f016f99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882075": [
        {
            "ioc_value": "4408d18ab8e5b18fcbb5f2bba5806927326d1bc91e617ed3a9059201300b6d17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882071": [
        {
            "ioc_value": "58e64cf9018578e85bbac64842367c8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882072": [
        {
            "ioc_value": "ad7d865ba9f5349594bbe34a67b0608b424525af9823841195a0b9837d17ae5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882068": [
        {
            "ioc_value": "a981c0e45e4a8a5ff3232b1a1d1626b4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882069": [
        {
            "ioc_value": "2e1e3bd6da854b3b4517c5e51754327308a9f8b7855aeab11d9cf36f3a4cc92e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882070": [
        {
            "ioc_value": "ba30ec2d232cb4a0cc7104229ded5cc6cf78f19a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882066": [
        {
            "ioc_value": "a0d550525750b126f141140df46b6877fac010e90eba0cb0bd7da24c1f5d678b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882067": [
        {
            "ioc_value": "f45475b7ea76d5cca8489288ab6ed692b9163c9e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882063": [
        {
            "ioc_value": "cd184c565ca09fec7cff3b81ad241f989c2f19dee16cb9ba3e75b965b5bd9ca8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882064": [
        {
            "ioc_value": "5fe8349c463afea65f99ee8e0801aa1dfc8a7f36",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882065": [
        {
            "ioc_value": "896a63d7f80ae784a6848e2b1aa22c1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882061": [
        {
            "ioc_value": "80d9faf85854e1d59cdae7a8d5971a9d725cc42b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882062": [
        {
            "ioc_value": "d922e360973f83e9bb18c35435d40d3e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882058": [
        {
            "ioc_value": "1022a10a6ad39530550ce314f6fda8a3999e4f16",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882059": [
        {
            "ioc_value": "6ca9deb4f5a024ada0f16859a0394480",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882060": [
        {
            "ioc_value": "12f9a24c868425d12425353a9d8d3aee5bc70198e8cca36d21e7e1f33c974a6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882056": [
        {
            "ioc_value": "f77d599ecfbc3c7bfe9b426997b0da40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882057": [
        {
            "ioc_value": "e36f4b3fe1df6c53ddccab621513caf56c1b8fe04437778c5566b86f5f0f753a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882053": [
        {
            "ioc_value": "debc35ce0a7b376ffdedd3a47c1384a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882054": [
        {
            "ioc_value": "de1d3e8aa4fdf2babf694112cd7ef6a681c1571744a9b509454fea7b7dde9cf4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882055": [
        {
            "ioc_value": "4c21318787bbf481c78568e18fe92f0afffe0082",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:18:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882050": [
        {
            "ioc_value": "a70784dbd95512ac7f622c5baab68714",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:18:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882051": [
        {
            "ioc_value": "5d4eb320ac73b9ea2ac0a5b35a9f686591622d8a52c3e7a4f5c230badc1251d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882052": [
        {
            "ioc_value": "a9b298bc905a43ce3261696ff6bbc765367c022d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882047": [
        {
            "ioc_value": "3305180e86a5d0c8a6801e6d0e0c8556",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882048": [
        {
            "ioc_value": "9544aea8f1b315d809504fe127868d755e3ea86a244b240b19b70149cf925dc7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:18:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882049": [
        {
            "ioc_value": "05b46b76724ed1a52ba76937f48937ccc1357f11",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:18:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882044": [
        {
            "ioc_value": "69eef609c1e8ee01f4f363b6975f436b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 11:18:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882045": [
        {
            "ioc_value": "a626ed27c70a231e990e329f6354f546d6346a17b83c749e9db187dbfa041392",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882046": [
        {
            "ioc_value": "10d61c5d20c45bd3b72680a36b543774de300dd2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 11:18:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882041": [
        {
            "ioc_value": "3008ccf1a125b55bcba760e62a9113a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 11:18:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882042": [
        {
            "ioc_value": "9cc4c6b0f959a85b2997922417c68088b947d974cedf3da6a9b9338226fd1f04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 11:18:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882043": [
        {
            "ioc_value": "96713078023e27c5bf44099012ce40e909d96711",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 11:18:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882039": [
        {
            "ioc_value": "459919673f8284b9888dcd2663187920cddb59cdc8fcdb95733dbb7f4676e35f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 11:18:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882040": [
        {
            "ioc_value": "ee7e7db7c1b68d709160c2035be7ec80c5d3a870",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 11:18:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882036": [
        {
            "ioc_value": "5fc1251e474eae9253362a08095e989edc2b63de21d76052a2c849efc6792c3f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:18:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882037": [
        {
            "ioc_value": "724f6ca2ea66dbf117c7eea42c99760716ec75b9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:18:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882038": [
        {
            "ioc_value": "439255736797bc88bd19f282449e0436",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:18:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882035": [
        {
            "ioc_value": "05dfd43c6bf3255d9b554b5ea17a1e45",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:18:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882033": [
        {
            "ioc_value": "883643e25fcb1190284f0b172eb6eb7f2f109f85def6a74ebad097910aba74bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:18:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882034": [
        {
            "ioc_value": "30eabbf1a0b64fddfb188851866a49b43b633dbd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:18:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882030": [
        {
            "ioc_value": "51ad4395011f9d4948841509fe0b55c2be732f8f405e2c85fc8c6df69922b619",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-19 11:17:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882031": [
        {
            "ioc_value": "04ef930cf3ee65428bca5380cd5a2ffeb73f1b17",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-19 11:17:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882032": [
        {
            "ioc_value": "0973a7c89d1da986fb0e44ce6f4d92f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-08-19 11:17:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882028": [
        {
            "ioc_value": "62bd93eea05115b55af74ad98e46c58745537027",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:17:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882029": [
        {
            "ioc_value": "21fde5c60081a59f7e3fd62bfc17d568",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:17:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882026": [
        {
            "ioc_value": "097cd41a5ff6823511032ea396871b89",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:17:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882027": [
        {
            "ioc_value": "3e5ee46a8876358fbf020a710c1107f8d04812a22cbc47e39241594b7b1cd159",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:17:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882023": [
        {
            "ioc_value": "17bd34772ea00305d904091322967e36",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882024": [
        {
            "ioc_value": "51495598feab3a74711ce8c8639eb526f2cdae10906ee9e4db490fa1b0f7f9ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:17:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882025": [
        {
            "ioc_value": "b71a3730a5b2a510c0dc1b1538c7ea4a440b329c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-19 11:17:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882021": [
        {
            "ioc_value": "c2591a52521a459865c32a36e05c636680857bb156a08a06cfa02fc427859b91",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882022": [
        {
            "ioc_value": "e8726c0888d0c80c2dbc1d1ee1933eeded2a526f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882018": [
        {
            "ioc_value": "554d9b7fcc6474d123eed0961e5c15b7959e8b7bcdda8f898f31fe1773c59b29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882019": [
        {
            "ioc_value": "8a8826c77437fab2505524a2e8611f807e3bdaa9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882020": [
        {
            "ioc_value": "555c58d81175e57b3ebabec198c12a70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882016": [
        {
            "ioc_value": "5aaf5f6d6bcfaa297e5c4824ac4595f94c9a6cd0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882017": [
        {
            "ioc_value": "7fa22ed61f4aa02d7e90bbdf07be982a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882014": [
        {
            "ioc_value": "eb77d1b6d71d1efefe59ca8f1275867f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-19 11:17:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882015": [
        {
            "ioc_value": "6744c53810ab9e423897f1f723e4b3ddda149372a4688012cfb43897544d430f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-19 11:17:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882011": [
        {
            "ioc_value": "dc95438760cc8ae9e8b9bcbfa6f63da3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882012": [
        {
            "ioc_value": "203af48227a87e5a219bb46ea7cd2fe5959d8d90025a026a67487526658095b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-19 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882013": [
        {
            "ioc_value": "2bf00f24a13a469845f8b2244e8d58dfba02ab31",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-19 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882008": [
        {
            "ioc_value": "f76964e620a4d0d9ae95a0cff1ceb4b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:17:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882009": [
        {
            "ioc_value": "396750d3837d60b8d8aa0253a5b569acfcdf872224e01ecd8f744dd73db4a850",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:17:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882010": [
        {
            "ioc_value": "7e5b9bc2c4c04125bb903ae5786788bf36c895ca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:17:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882006": [
        {
            "ioc_value": "607ebf52bd5ac2cda1e6ae58cf45ae2c73190c40e84efa8df011e0fdb459230d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:17:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882007": [
        {
            "ioc_value": "20dd0719b2ca844a186d93ccd87c9938e8c5c51b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-19 11:17:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882003": [
        {
            "ioc_value": "64d6925c0c945e4867e62a6218ab12415de10354471a99ccf32150b4efb36f8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882004": [
        {
            "ioc_value": "73a75c5bf80ea9c1c05e5eb64b44856bbe63ee54",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882005": [
        {
            "ioc_value": "a573f6f6fe0b8a7db4f8a002271612ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882000": [
        {
            "ioc_value": "f8a087e8bb376bde31086c42c4ba72bb5995749981e4af328e35473743814ef8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-19 11:17:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882001": [
        {
            "ioc_value": "b511bc4feb7e170fc3ccb950efbbc00f47094b7c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-19 11:17:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1882002": [
        {
            "ioc_value": "3126af6b225dbbd7382053e331a25ee5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-19 11:17:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881997": [
        {
            "ioc_value": "4bba11f8ae554be3cabbd44c1e67dde6a85c7f192e645c7aea7e35617ea38def",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:17:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881998": [
        {
            "ioc_value": "3a2a90eb248a88a2fd6ed475f120c26abd42f04e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:17:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881999": [
        {
            "ioc_value": "76a8df24185e2da245a9ca5b6d1c600d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 11:17:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881995": [
        {
            "ioc_value": "1cd117fd3614866247ca58bd308485e26b21b6d4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:17:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881996": [
        {
            "ioc_value": "8459f9cdeaaab6f25f4ee076dfc02770",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:17:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881993": [
        {
            "ioc_value": "30748be5ad86a1ffd22743f1cdf3297f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881994": [
        {
            "ioc_value": "2d666c5083b8c3cd511b58e14e0191fb31b2c2c7cb8788d5f152fbfd1734d081",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 11:17:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881990": [
        {
            "ioc_value": "50d829498390ba6fd2a4d5984ca71586",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881991": [
        {
            "ioc_value": "ba09e7d844575315ac839b80e2e306a9f6dd6de5dad5c10e47074e741899765d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881992": [
        {
            "ioc_value": "687dd0280cb66c3d5b18786d8e4dbc8f5746d690",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881988": [
        {
            "ioc_value": "7a43461961a2e4aa94b537b083b6ab090532857cbfe5a412efa142c637bc8f3e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881989": [
        {
            "ioc_value": "cb5df0beb15a2b8832666ccc4f4e2c646e546f31",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-08-19 11:17:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1881986": [
        {
            "ioc_value": "koldi.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 11:11:54",
            "last_seen_utc": "2026-08-26 21:54:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881984": [
        {
            "ioc_value": "204.77.130.57:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881983": [
        {
            "ioc_value": "47.94.58.70:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881981": [
        {
            "ioc_value": "111.170.148.132:36032",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881982": [
        {
            "ioc_value": "103.113.158.11:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881978": [
        {
            "ioc_value": "thewelchstreetjournal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 10:52:06",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881977": [
        {
            "ioc_value": "http://kupzovo.shop:7567/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 10:47:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1881975": [
        {
            "ioc_value": "195.177.94.85:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-19 10:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d62a76d0311297527849b772fcb42eb964d10bbb0eeced50d7b83a94a9e7ef7/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881973": [
        {
            "ioc_value": "allremdeskriki.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:45",
            "last_seen_utc": "2026-08-19 18:19:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881974": [
        {
            "ioc_value": "dubl1allremriki.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:45",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881972": [
        {
            "ioc_value": "woolvilli.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:44",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881969": [
        {
            "ioc_value": "http://dubl2allremriki.com/api/v2",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881970": [
        {
            "ioc_value": "http://allremdeskriki.com/api/v2",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881971": [
        {
            "ioc_value": "http://dubl1allremriki.com/api/v2",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881968": [
        {
            "ioc_value": "http://woolvilli.com/api/v2",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 10:27:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881965": [
        {
            "ioc_value": "185.34.147.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 10:05:07",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881964": [
        {
            "ioc_value": "185.34.147.33:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 10:05:06",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881963": [
        {
            "ioc_value": "22nbxu1y.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 10:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881962": [
        {
            "ioc_value": "95.179.189.194:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:56:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881961": [
        {
            "ioc_value": "95.179.189.194:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:56:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881960": [
        {
            "ioc_value": "revteoaraenttf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881959": [
        {
            "ioc_value": "2evjlhkn.app8k.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 09:54:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881957": [
        {
            "ioc_value": "212.2.32.17:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:53:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881958": [
        {
            "ioc_value": "212.2.32.17:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:53:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881956": [
        {
            "ioc_value": "grand-world-tour.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:53:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881955": [
        {
            "ioc_value": "http://196.251.107.186/acovp/login.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:51:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0196e-970b-7389-a7a8-fecf720b7752",
            "tags": "c2,Diamotrix,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881952": [
        {
            "ioc_value": "190.211.252.42:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:49:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4bba11f8ae554be3cabbd44c1e67dde6a85c7f192e645c7aea7e35617ea38def/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881953": [
        {
            "ioc_value": "190.211.252.42:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:49:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4bba11f8ae554be3cabbd44c1e67dde6a85c7f192e645c7aea7e35617ea38def/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881951": [
        {
            "ioc_value": "http://bx.varrysections.digital/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-19 09:48:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0196c-0490-779b-bb63-ec40c2fb4817",
            "tags": "c2,evilginx,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881949": [
        {
            "ioc_value": "94.26.3.52:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 09:46:55",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881950": [
        {
            "ioc_value": "95.133.229.218:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 09:46:55",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881948": [
        {
            "ioc_value": "94.20.141.82:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-19 09:46:53",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881947": [
        {
            "ioc_value": "31.77.228.179:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 09:45:53",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881946": [
        {
            "ioc_value": "https://relay-01-static.com/pages/login.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:45:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01969-5ab9-746e-9db5-2a93416478af",
            "tags": "c2,unam,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881945": [
        {
            "ioc_value": "https://strang-02-static.com/pages/login.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:45:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01969-56a4-7177-848c-25f5881151bf",
            "tags": "c2,unam,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881944": [
        {
            "ioc_value": "https://adobeartsia.com/pages/login.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:45:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01969-5336-708a-b813-7d1eaeea4a14",
            "tags": "c2,unam,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881943": [
        {
            "ioc_value": "http://117.72.72.254:8888/supershell/login",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-e30d-745f-b07e-8609e729e5de",
            "tags": "c2,supershell,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881942": [
        {
            "ioc_value": "209.99.186.201:55009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 09:44:57",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881941": [
        {
            "ioc_value": "http://8.138.180.67:8888/supershell/login",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-cb76-7209-b7c6-c9dfc1e5f24b",
            "tags": "c2,supershell,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881938": [
        {
            "ioc_value": "https://microsoft-account-service.de",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-b996-744c-ab29-54c66343f2fb",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881939": [
        {
            "ioc_value": "https://phish.sec.endpointas.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-bb2a-772f-97fc-c5ece7061207",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881940": [
        {
            "ioc_value": "https://hubspot-account.de",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-bcee-718a-9e4c-b53c75894e11",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881937": [
        {
            "ioc_value": "https://deutsche-post-info.de",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-b695-766b-92ad-e95c23b1341a",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881936": [
        {
            "ioc_value": "https://admin.perdania.co",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-b321-708f-a23a-b80f2192d2da",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881935": [
        {
            "ioc_value": "https://ec2-43-218-88-179.ap-southeast-3.compute.amazonaws.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-ade4-7031-a496-ccadf997859c",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881934": [
        {
            "ioc_value": "https://gophish.goin.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-abaa-7101-881d-980e5f6191e5",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881933": [
        {
            "ioc_value": "https://ec2-107-21-100-205.compute-1.amazonaws.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-a836-7291-82ef-16b53b2b4923",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881931": [
        {
            "ioc_value": "https://admin.csep-security.dk",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-a213-7670-be69-b2c06baab084",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881932": [
        {
            "ioc_value": "https://ps.faircode.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-a4e1-738a-8d47-b0b5b27574b5",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881930": [
        {
            "ioc_value": "https://appmail.dmsecurity.com.br",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:44:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01968-9e1a-7660-a50f-578e7113fb65",
            "tags": "c2,gophish,phishing,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881929": [
        {
            "ioc_value": "185.212.129.129:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-19 09:44:24",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881928": [
        {
            "ioc_value": "169.239.128.90:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-19 09:44:02",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881927": [
        {
            "ioc_value": "159.203.69.210:12262",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 09:43:54",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881926": [
        {
            "ioc_value": "118.107.23.86:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 09:43:22",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881925": [
        {
            "ioc_value": "94.154.32.171:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 09:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881914": [
        {
            "ioc_value": "188.132.165.148:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881915": [
        {
            "ioc_value": "45.202.1.52:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": "2026-08-23 17:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881916": [
        {
            "ioc_value": "95.214.53.90:2354",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881917": [
        {
            "ioc_value": "85.121.148.77:7675",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881918": [
        {
            "ioc_value": "85.121.148.77:1990",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881919": [
        {
            "ioc_value": "8.138.83.40:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": "2026-08-24 06:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881920": [
        {
            "ioc_value": "130.94.17.91:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881921": [
        {
            "ioc_value": "130.94.17.91:4783",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881922": [
        {
            "ioc_value": "79.141.175.186:5002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881923": [
        {
            "ioc_value": "45.88.91.40:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:47",
            "last_seen_utc": "2026-08-22 07:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881904": [
        {
            "ioc_value": "125.86.30.45:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": "2026-08-21 07:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881905": [
        {
            "ioc_value": "45.43.163.233:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": "2026-08-23 17:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881906": [
        {
            "ioc_value": "194.59.31.91:4530",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881907": [
        {
            "ioc_value": "108.186.112.220:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881908": [
        {
            "ioc_value": "42.193.188.121:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": "2026-08-21 09:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881909": [
        {
            "ioc_value": "194.63.145.99:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881910": [
        {
            "ioc_value": "94.154.32.204:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881911": [
        {
            "ioc_value": "103.216.158.80:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881912": [
        {
            "ioc_value": "104.239.66.189:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881913": [
        {
            "ioc_value": "204.194.54.68:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881894": [
        {
            "ioc_value": "154.23.189.222:17788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": "2026-08-22 06:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881895": [
        {
            "ioc_value": "13.213.146.45:22148",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881896": [
        {
            "ioc_value": "89.44.80.179:6033",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881897": [
        {
            "ioc_value": "89.44.80.179:1523",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881898": [
        {
            "ioc_value": "222.255.215.8:9123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": "2026-08-21 08:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881899": [
        {
            "ioc_value": "91.92.47.167:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881900": [
        {
            "ioc_value": "80.96.113.95:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": "2026-08-20 22:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881901": [
        {
            "ioc_value": "103.230.15.113:52334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881902": [
        {
            "ioc_value": "103.230.15.113:38411",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881903": [
        {
            "ioc_value": "94.136.184.96:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881886": [
        {
            "ioc_value": "188.137.176.225:5454",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881887": [
        {
            "ioc_value": "85.120.255.168:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881888": [
        {
            "ioc_value": "18.140.203.160:17092",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881889": [
        {
            "ioc_value": "118.126.97.69:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": "2026-08-21 08:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881890": [
        {
            "ioc_value": "103.230.15.171:44991",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881891": [
        {
            "ioc_value": "103.238.74.98:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": "2026-08-21 06:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881892": [
        {
            "ioc_value": "42.192.37.91:46999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": "2026-08-21 09:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881893": [
        {
            "ioc_value": "8.148.185.15:3347",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:44",
            "last_seen_utc": "2026-09-01 03:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881876": [
        {
            "ioc_value": "64.224.17.2:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881877": [
        {
            "ioc_value": "106.52.33.86:9322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881878": [
        {
            "ioc_value": "71.201.61.136:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881879": [
        {
            "ioc_value": "147.93.153.126:5103",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881880": [
        {
            "ioc_value": "39.107.60.199:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": "2026-08-23 17:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881881": [
        {
            "ioc_value": "178.157.82.246:7771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881882": [
        {
            "ioc_value": "91.92.243.176:61972",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": "2026-08-26 04:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881883": [
        {
            "ioc_value": "216.74.123.43:1",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": "2026-08-21 08:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881884": [
        {
            "ioc_value": "186.246.53.24:35789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881885": [
        {
            "ioc_value": "177.141.179.146:11964",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:43",
            "last_seen_utc": "2026-08-22 06:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881866": [
        {
            "ioc_value": "123.113.8.145:4285",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": "2026-08-22 06:05:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881867": [
        {
            "ioc_value": "192.154.105.131:1992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881868": [
        {
            "ioc_value": "45.61.177.22:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": "2026-08-29 03:05:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881869": [
        {
            "ioc_value": "89.125.121.126:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881870": [
        {
            "ioc_value": "189.253.224.195:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": "2026-08-21 07:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881871": [
        {
            "ioc_value": "144.172.108.98:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881872": [
        {
            "ioc_value": "178.16.55.56:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": "2026-08-21 08:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881873": [
        {
            "ioc_value": "15.235.172.216:5250",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881874": [
        {
            "ioc_value": "221.194.78.166:3309",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": "2026-08-24 05:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881875": [
        {
            "ioc_value": "45.148.244.200:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881856": [
        {
            "ioc_value": "38.147.191.159:43200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881857": [
        {
            "ioc_value": "45.39.241.28:4783",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881858": [
        {
            "ioc_value": "103.106.188.253:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": "2026-08-21 06:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881859": [
        {
            "ioc_value": "194.102.104.188:1969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": "2026-08-22 07:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881860": [
        {
            "ioc_value": "31.59.118.75:5599",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": "2026-08-21 09:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881861": [
        {
            "ioc_value": "193.108.114.185:17300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": "2026-08-27 07:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881862": [
        {
            "ioc_value": "192.166.82.131:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881863": [
        {
            "ioc_value": "91.92.240.197:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881864": [
        {
            "ioc_value": "104.251.180.79:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881865": [
        {
            "ioc_value": "62.133.61.75:37585",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:41",
            "last_seen_utc": "2026-08-22 09:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881853": [
        {
            "ioc_value": "144.31.223.153:25917",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881854": [
        {
            "ioc_value": "118.107.23.32:8657",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881855": [
        {
            "ioc_value": "118.107.23.32:8693",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-19 09:31:40",
            "last_seen_utc": "2026-08-21 06:05:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881852": [
        {
            "ioc_value": "194.56.225.150:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 09:29:13",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881850": [
        {
            "ioc_value": "https://ket.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 09:26:26",
            "last_seen_utc": "2026-08-27 04:27:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar,x4tte",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881851": [
        {
            "ioc_value": "ket.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 09:26:26",
            "last_seen_utc": "2026-08-27 04:27:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar,x4tte",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881848": [
        {
            "ioc_value": "ket.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 09:25:05",
            "last_seen_utc": "2026-08-27 07:26:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881849": [
        {
            "ioc_value": "https://ket.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 09:25:05",
            "last_seen_utc": "2026-08-27 07:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881843": [
        {
            "ioc_value": "203.12.31.141:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881844": [
        {
            "ioc_value": "193.124.130.25:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881845": [
        {
            "ioc_value": "54.46.17.182:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881846": [
        {
            "ioc_value": "104.233.251.191:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881847": [
        {
            "ioc_value": "49.7.54.75:32337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881830": [
        {
            "ioc_value": "95.216.144.182:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881831": [
        {
            "ioc_value": "213.165.37.30:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881832": [
        {
            "ioc_value": "185.207.105.80:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881833": [
        {
            "ioc_value": "118.27.151.93:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881834": [
        {
            "ioc_value": "206.245.132.180:35333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881835": [
        {
            "ioc_value": "45.227.255.111:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881836": [
        {
            "ioc_value": "46.8.236.121:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881837": [
        {
            "ioc_value": "103.67.184.198:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881838": [
        {
            "ioc_value": "47.91.30.143:40000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881839": [
        {
            "ioc_value": "103.244.91.230:9444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881840": [
        {
            "ioc_value": "20.205.136.20:65350",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881841": [
        {
            "ioc_value": "139.162.8.51:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881842": [
        {
            "ioc_value": "114.55.151.60:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881820": [
        {
            "ioc_value": "44.253.47.172:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881821": [
        {
            "ioc_value": "139.162.51.76:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881822": [
        {
            "ioc_value": "173.214.172.252:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881823": [
        {
            "ioc_value": "104.171.136.217:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881824": [
        {
            "ioc_value": "153.76.116.156:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881825": [
        {
            "ioc_value": "173.212.223.160:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881826": [
        {
            "ioc_value": "128.65.199.135:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881827": [
        {
            "ioc_value": "101.126.90.250:11337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881828": [
        {
            "ioc_value": "144.208.127.223:17575",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881829": [
        {
            "ioc_value": "130.94.66.97:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 09:21:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881819": [
        {
            "ioc_value": "burnpeak.us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 09:21:43",
            "last_seen_utc": "2026-08-19 09:22:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881818": [
        {
            "ioc_value": "burnpeakofficialsite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 09:20:45",
            "last_seen_utc": "2026-08-19 09:21:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881817": [
        {
            "ioc_value": "https://ket.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 09:20:05",
            "last_seen_utc": "2026-08-21 13:25:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881816": [
        {
            "ioc_value": "ket.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 09:20:04",
            "last_seen_utc": "2026-08-21 13:25:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881814": [
        {
            "ioc_value": "194.33.61.154:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:19:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3e5ee46a8876358fbf020a710c1107f8d04812a22cbc47e39241594b7b1cd159/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881815": [
        {
            "ioc_value": "194.33.61.154:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 09:19:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3e5ee46a8876358fbf020a710c1107f8d04812a22cbc47e39241594b7b1cd159/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881813": [
        {
            "ioc_value": "136.244.100.54:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 09:18:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6/",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881812": [
        {
            "ioc_value": "2.27.62.140:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-19 09:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/92b4af0bd6c1e058c9cce2fe34272ce6e15d5039aa57ac489022127aaafbdc3d/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881810": [
        {
            "ioc_value": "38.207.177.165:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881809": [
        {
            "ioc_value": "38.207.177.165:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881808": [
        {
            "ioc_value": "https://kakabrands.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 09:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kakabrands.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881807": [
        {
            "ioc_value": "dubl2allremriki.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 08:59:02",
            "last_seen_utc": "2026-08-19 18:19:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6/",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881805": [
        {
            "ioc_value": "http://136.244.100.54/api/v1/agent/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 08:56:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6/",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881806": [
        {
            "ioc_value": "http://136.244.100.54/api/v1/agent/register",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-08-19 08:56:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6/",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881802": [
        {
            "ioc_value": "154.13.7.199:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 08:54:11",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881803": [
        {
            "ioc_value": "209.99.186.201:55006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 08:54:11",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881799": [
        {
            "ioc_value": "185.235.137.195:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 08:53:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881801": [
        {
            "ioc_value": "41.100.227.210:3030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 08:53:12",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881797": [
        {
            "ioc_value": "s33mon3y.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 08:37:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b7c60bc7570406370984e95e12934ecb7e935558d473e9444cee85951d202c67/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881798": [
        {
            "ioc_value": "222align.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 08:37:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b7c60bc7570406370984e95e12934ecb7e935558d473e9444cee85951d202c67/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881796": [
        {
            "ioc_value": "64.89.160.127:4055",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 08:35:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b7c60bc7570406370984e95e12934ecb7e935558d473e9444cee85951d202c67/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881793": [
        {
            "ioc_value": "https://casaandaimemarica.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 08:30:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/casaandaimemarica.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881794": [
        {
            "ioc_value": "https://one1ppp.com.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 08:30:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/one1ppp.com.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881791": [
        {
            "ioc_value": "https://speed.hirebiz.pro/index-classic.html",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 08:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/speed.hirebiz.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881792": [
        {
            "ioc_value": "https://autosolutionsconnect.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 08:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/autosolutionsconnect.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881790": [
        {
            "ioc_value": "cdn.falconworks.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 08:25:39",
            "last_seen_utc": "2026-08-22 09:37:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64494586d79711a0c12ad714f5f895a5d14200247cc02f0434f2bcd8b3b8002f/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881789": [
        {
            "ioc_value": "iocriotao.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 08:22:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881787": [
        {
            "ioc_value": "triapfog.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 08:21:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881786": [
        {
            "ioc_value": "mioiooo.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 08:21:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881784": [
        {
            "ioc_value": "121.200.216.84:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 08:05:06",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881783": [
        {
            "ioc_value": "47.116.113.15:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881782": [
        {
            "ioc_value": "https://topqualityroofingsolutionsltd.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 08:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/topqualityroofingsolutionsltd.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881779": [
        {
            "ioc_value": "45.221.118.46:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:57:42",
            "last_seen_utc": "2026-08-24 12:51:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881780": [
        {
            "ioc_value": "147.139.245.149:801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:57:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881778": [
        {
            "ioc_value": "37.77.150.193:6062",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:53:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881777": [
        {
            "ioc_value": "188.245.219.133:8137",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 07:50:12",
            "last_seen_utc": "2026-08-30 23:25:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881776": [
        {
            "ioc_value": "j7sd6wjs.en-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 07:48:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881772": [
        {
            "ioc_value": "120.48.63.129:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:14:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.48.63.129#8090",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881771": [
        {
            "ioc_value": "38.247.165.127:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 07:13:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.247.165.127#443",
            "tags": "asyncrat,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881769": [
        {
            "ioc_value": "118.122.8.157:7634",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/118.122.8.157#7634",
            "tags": "c2,ProRat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881770": [
        {
            "ioc_value": "112.45.129.157:7634",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/112.45.129.157#7634",
            "tags": "c2,ProRat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881768": [
        {
            "ioc_value": "44.195.73.113:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:11:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/44.195.73.113#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881767": [
        {
            "ioc_value": "3.129.203.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:11:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.129.203.73#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881764": [
        {
            "ioc_value": "192.169.176.54:449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-19 07:11:04",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.169.176.54#449",
            "tags": "c2,havoc,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881765": [
        {
            "ioc_value": "13.51.79.99:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-19 07:11:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/13.51.79.99#443",
            "tags": "c2,havoc,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881766": [
        {
            "ioc_value": "45.76.0.96:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-19 07:11:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.76.0.96#443",
            "tags": "c2,havoc,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881763": [
        {
            "ioc_value": "45.197.12.73:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:09:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.197.12.73#8888",
            "tags": "c2,shodan,supershell",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881760": [
        {
            "ioc_value": "38.190.245.20:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.190.245.20#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881761": [
        {
            "ioc_value": "138.16.160.172:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.16.160.172#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881762": [
        {
            "ioc_value": "5.189.145.93:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.189.145.93#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881755": [
        {
            "ioc_value": "212.50.234.154:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.50.234.154#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881756": [
        {
            "ioc_value": "185.207.154.238:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.207.154.238#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881757": [
        {
            "ioc_value": "185.208.175.18:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.208.175.18#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881758": [
        {
            "ioc_value": "45.39.60.110:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.39.60.110#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881759": [
        {
            "ioc_value": "2.58.197.179:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/2.58.197.179#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881751": [
        {
            "ioc_value": "192.169.176.54:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.169.176.54#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881752": [
        {
            "ioc_value": "62.3.32.232:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.3.32.232#1337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881753": [
        {
            "ioc_value": "103.79.118.60:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.79.118.60#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881754": [
        {
            "ioc_value": "45.136.13.14:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-19 07:09:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.136.13.14#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881750": [
        {
            "ioc_value": "valeroks.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 07:09:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881749": [
        {
            "ioc_value": "kalekos.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 07:09:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1881743": [
        {
            "ioc_value": "81.17.101.18:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.17.101.18#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881744": [
        {
            "ioc_value": "34.69.181.211:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.69.181.211#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881745": [
        {
            "ioc_value": "172.234.208.153:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.234.208.153#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881746": [
        {
            "ioc_value": "20.82.45.152:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.82.45.152#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881747": [
        {
            "ioc_value": "157.245.42.93:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.245.42.93#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881748": [
        {
            "ioc_value": "57.129.100.77:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/57.129.100.77#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881737": [
        {
            "ioc_value": "138.2.168.165:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.2.168.165#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881738": [
        {
            "ioc_value": "34.57.211.177:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.57.211.177#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881739": [
        {
            "ioc_value": "34.60.126.85:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.60.126.85#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881740": [
        {
            "ioc_value": "34.80.62.77:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.80.62.77#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881741": [
        {
            "ioc_value": "195.66.24.49:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.66.24.49#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881742": [
        {
            "ioc_value": "136.110.112.87:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/136.110.112.87#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881733": [
        {
            "ioc_value": "34.138.65.248:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.138.65.248#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881734": [
        {
            "ioc_value": "85.210.172.79:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/85.210.172.79#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881735": [
        {
            "ioc_value": "34.16.89.64:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.16.89.64#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881736": [
        {
            "ioc_value": "194.156.67.69:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.156.67.69#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881732": [
        {
            "ioc_value": "154.12.24.149:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/154.12.24.149#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881729": [
        {
            "ioc_value": "54.250.85.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/54.250.85.43#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881730": [
        {
            "ioc_value": "23.149.36.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/23.149.36.116#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881727": [
        {
            "ioc_value": "43.203.36.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:08:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.203.36.6#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881721": [
        {
            "ioc_value": "38.60.216.38:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.60.216.38#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881722": [
        {
            "ioc_value": "106.13.186.173:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/106.13.186.173#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881723": [
        {
            "ioc_value": "134.209.219.114:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.209.219.114#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881724": [
        {
            "ioc_value": "167.233.157.154:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.233.157.154#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881718": [
        {
            "ioc_value": "43.156.210.9:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.156.210.9#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881719": [
        {
            "ioc_value": "195.245.229.109:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.245.229.109#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881720": [
        {
            "ioc_value": "62.171.176.111:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.171.176.111#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881716": [
        {
            "ioc_value": "8.130.81.118:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.130.81.118#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881717": [
        {
            "ioc_value": "167.71.105.40:4545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.71.105.40#4545",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881712": [
        {
            "ioc_value": "63.88.138.76:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/63.88.138.76#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881713": [
        {
            "ioc_value": "40.81.184.48:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/40.81.184.48#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881714": [
        {
            "ioc_value": "15.224.148.171:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/15.224.148.171#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881715": [
        {
            "ioc_value": "62.234.144.140:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.234.144.140#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881710": [
        {
            "ioc_value": "137.131.157.110:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.131.157.110#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881711": [
        {
            "ioc_value": "80.225.78.233:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/80.225.78.233#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881707": [
        {
            "ioc_value": "14.103.129.205:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/14.103.129.205#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881708": [
        {
            "ioc_value": "3.148.207.89:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.148.207.89#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881709": [
        {
            "ioc_value": "50.78.48.241:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/50.78.48.241#9443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881706": [
        {
            "ioc_value": "159.75.110.224:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 07:07:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.75.110.224#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881704": [
        {
            "ioc_value": "119.45.198.250:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:07:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/119.45.198.250#55555",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881705": [
        {
            "ioc_value": "118.24.42.214:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:07:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/118.24.42.214#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881701": [
        {
            "ioc_value": "172.232.97.189:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:07:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.232.97.189#4444",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881702": [
        {
            "ioc_value": "47.251.29.219:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:07:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.251.29.219#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881703": [
        {
            "ioc_value": "47.254.68.68:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 07:07:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.254.68.68#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1881699": [
        {
            "ioc_value": "213.199.53.152:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881700": [
        {
            "ioc_value": "213.199.53.152:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-19 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881697": [
        {
            "ioc_value": "app-api.embervault.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-19 06:58:24",
            "last_seen_utc": "2026-08-19 06:58:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8910f0cb2eb97c3b1ced8b512bb34884a958ba7d81829841b2e60eb487157662/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881692": [
        {
            "ioc_value": "rukkoldauwe87.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:19",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881693": [
        {
            "ioc_value": "sotopiingpi91.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:19",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881694": [
        {
            "ioc_value": "volvernimo31.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:19",
            "last_seen_utc": "2026-08-23 17:24:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881689": [
        {
            "ioc_value": "corrykro.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:18",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881690": [
        {
            "ioc_value": "flowerpii9831.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:18",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881691": [
        {
            "ioc_value": "rogethapi2134.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:18",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881688": [
        {
            "ioc_value": "atomento10.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881685": [
        {
            "ioc_value": "governorhobbies.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-19 06:47:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881686": [
        {
            "ioc_value": "sofazinc.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-19 06:47:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881687": [
        {
            "ioc_value": "snailsreading.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-19 06:47:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881681": [
        {
            "ioc_value": "mrevolucion.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:21",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881679": [
        {
            "ioc_value": "marcsons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:20",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881680": [
        {
            "ioc_value": "medprov.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:20",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881678": [
        {
            "ioc_value": "malishplastics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:19",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881674": [
        {
            "ioc_value": "kachafruit-barna.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:18",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881675": [
        {
            "ioc_value": "kakabrands.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:18",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881668": [
        {
            "ioc_value": "getmeitin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:16",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881669": [
        {
            "ioc_value": "getusitin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:16",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881670": [
        {
            "ioc_value": "herbalsolutions.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:16",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881666": [
        {
            "ioc_value": "enoria.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:15",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881667": [
        {
            "ioc_value": "familie.slieter.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:15",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881662": [
        {
            "ioc_value": "couvreursberthauxetfils.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:13",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881663": [
        {
            "ioc_value": "desafiomlh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:13",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881664": [
        {
            "ioc_value": "desihiphop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:13",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881659": [
        {
            "ioc_value": "cess.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:12",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881660": [
        {
            "ioc_value": "clickfive-ng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:12",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881657": [
        {
            "ioc_value": "blackiron.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:10",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881655": [
        {
            "ioc_value": "autosolutionsconnect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:09",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881653": [
        {
            "ioc_value": "alkalize.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:08",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881654": [
        {
            "ioc_value": "aluminiosalicante.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:08",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881650": [
        {
            "ioc_value": "adayay.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:45:07",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881649": [
        {
            "ioc_value": "markthunder.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-19 06:38:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881647": [
        {
            "ioc_value": "109.172.94.79:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 06:36:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1863c944ff0f5f06cafe0f98d6a6f54084ac266936c0dbc16a9d13ab03dda421/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881648": [
        {
            "ioc_value": "109.172.94.79:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-19 06:36:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1863c944ff0f5f06cafe0f98d6a6f54084ac266936c0dbc16a9d13ab03dda421/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881646": [
        {
            "ioc_value": "connectme.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/837278104e5d4ed94c286bd8ea3845377fd03c2f1fa4b7b43555b9fca3455115/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881645": [
        {
            "ioc_value": "195.177.94.25:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:27:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/79990567c7458e6c7274f0d61011f9ce4718c47f76dec51a604182f182e3aac7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881644": [
        {
            "ioc_value": "94.154.32.8:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:23:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d0e5808cea92aa335ba889cb401a51506a13e79f5fe18c21a1e765c8f5c897a3/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881641": [
        {
            "ioc_value": "testingherenigger.loophole.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 06:20:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3b1d59c71cf19f0be3f66f4ad7d89e3593bbcd1c461b835f663bce969d07dc53/",
            "tags": "EpsteinClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881639": [
        {
            "ioc_value": "bravecdp.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 06:17:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding,NetSupport,NetSupportManager,NetSupportRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881352": [
        {
            "ioc_value": "23.106.253.199:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:14",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881353": [
        {
            "ioc_value": "23.106.253.199:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:14",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881354": [
        {
            "ioc_value": "31.40.204.178:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:14",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881355": [
        {
            "ioc_value": "31.77.138.147:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:13",
            "last_seen_utc": "2026-08-19 06:03:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881356": [
        {
            "ioc_value": "31.77.138.147:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:13",
            "last_seen_utc": "2026-08-19 06:03:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881357": [
        {
            "ioc_value": "31.77.138.156:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:12",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881358": [
        {
            "ioc_value": "31.77.168.191:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:12",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881359": [
        {
            "ioc_value": "31.77.168.191:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:11",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881360": [
        {
            "ioc_value": "31.207.7.126:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:11",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881361": [
        {
            "ioc_value": "31.207.7.126:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:10",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881362": [
        {
            "ioc_value": "46.151.182.30:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:10",
            "last_seen_utc": "2026-09-01 02:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881363": [
        {
            "ioc_value": "46.151.182.30:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:09",
            "last_seen_utc": "2026-09-01 02:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881364": [
        {
            "ioc_value": "64.224.17.66:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:09",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881365": [
        {
            "ioc_value": "64.224.17.66:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:09",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881366": [
        {
            "ioc_value": "78.40.209.239:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:08",
            "last_seen_utc": "2026-09-01 02:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881367": [
        {
            "ioc_value": "78.40.209.239:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:08",
            "last_seen_utc": "2026-09-01 02:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881368": [
        {
            "ioc_value": "84.38.129.111:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:07",
            "last_seen_utc": "2026-08-19 06:03:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881369": [
        {
            "ioc_value": "84.38.129.111:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:07",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881370": [
        {
            "ioc_value": "89.106.83.159:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:06",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881371": [
        {
            "ioc_value": "89.106.83.159:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:06",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881372": [
        {
            "ioc_value": "91.92.47.111:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:06",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881373": [
        {
            "ioc_value": "91.92.47.111:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:04",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881374": [
        {
            "ioc_value": "91.92.120.61:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:04",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881375": [
        {
            "ioc_value": "91.92.120.61:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:03",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881376": [
        {
            "ioc_value": "93.127.160.86:32605",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:02",
            "last_seen_utc": "2026-08-19 06:03:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881377": [
        {
            "ioc_value": "94.26.3.211:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:01",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881378": [
        {
            "ioc_value": "94.154.32.73:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:01",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881379": [
        {
            "ioc_value": "103.141.235.248:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:01",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881380": [
        {
            "ioc_value": "103.141.235.248:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:00",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881381": [
        {
            "ioc_value": "104.168.70.163:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:06:00",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881382": [
        {
            "ioc_value": "107.174.146.6:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:59",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881383": [
        {
            "ioc_value": "107.174.146.6:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:59",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881384": [
        {
            "ioc_value": "147.124.221.0:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:59",
            "last_seen_utc": "2026-08-19 06:03:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881385": [
        {
            "ioc_value": "151.242.63.24:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:58",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881386": [
        {
            "ioc_value": "151.242.63.24:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:58",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881387": [
        {
            "ioc_value": "151.242.63.165:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:58",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881388": [
        {
            "ioc_value": "151.242.63.165:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:57",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881389": [
        {
            "ioc_value": "151.242.63.215:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:57",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881390": [
        {
            "ioc_value": "151.242.63.215:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:56",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881391": [
        {
            "ioc_value": "195.177.94.60:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:56",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881392": [
        {
            "ioc_value": "207.56.137.196:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:55",
            "last_seen_utc": "2026-08-19 06:03:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881393": [
        {
            "ioc_value": "209.54.103.173:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-19 06:05:55",
            "last_seen_utc": "2026-09-01 02:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@RecklessPush38671/117118098460752628",
            "tags": "C2,Censys,HypeAgent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1881449": [
        {
            "ioc_value": "topqualityroofingsolutionsltd.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:05:51",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "https://x.com/skocherhan/status/2089830470884143452",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1881457": [
        {
            "ioc_value": "captain-locataire.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-19 06:05:49",
            "last_seen_utc": "2026-08-26 21:54:37",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "https://x.com/skocherhan/status/2089834462951408044",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1881635": [
        {
            "ioc_value": "www.sphuatomotive.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 06:05:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12c2152d740d079902e326329ab53a9ac76bae36858475b5e0af1c217c4d46c3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881636": [
        {
            "ioc_value": "www.sphuatomotivebacku.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 06:05:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12c2152d740d079902e326329ab53a9ac76bae36858475b5e0af1c217c4d46c3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881637": [
        {
            "ioc_value": "www.sphuatomotivebacku1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 06:05:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12c2152d740d079902e326329ab53a9ac76bae36858475b5e0af1c217c4d46c3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881634": [
        {
            "ioc_value": "www.hxbgruop.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 06:05:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12c2152d740d079902e326329ab53a9ac76bae36858475b5e0af1c217c4d46c3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881395": [
        {
            "ioc_value": "201.79.5.223:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881396": [
        {
            "ioc_value": "43.128.113.133:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:26",
            "last_seen_utc": "2026-08-22 05:23:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881417": [
        {
            "ioc_value": "43.128.113.133:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:25",
            "last_seen_utc": "2026-08-31 18:21:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881418": [
        {
            "ioc_value": "https://62.238.98.35",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 06:05:25",
            "last_seen_utc": "2026-08-31 16:08:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "592a9e009f92c0e8eaea74a337b4f67c,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881423": [
        {
            "ioc_value": "150.109.93.78:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:24",
            "last_seen_utc": "2026-08-31 21:10:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881442": [
        {
            "ioc_value": "150.109.93.78:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:24",
            "last_seen_utc": "2026-09-01 01:35:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881479": [
        {
            "ioc_value": "43.110.42.102:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 06:05:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881480": [
        {
            "ioc_value": "1.117.61.139:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 06:05:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881481": [
        {
            "ioc_value": "38.60.125.131:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 06:05:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881482": [
        {
            "ioc_value": "159.75.118.45:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 06:05:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881483": [
        {
            "ioc_value": "45.115.124.43:1433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 06:05:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881491": [
        {
            "ioc_value": "43.128.113.133:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:10",
            "last_seen_utc": "2026-08-30 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881501": [
        {
            "ioc_value": "43.134.49.218:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:09",
            "last_seen_utc": "2026-08-26 12:27:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881502": [
        {
            "ioc_value": "142.93.205.111:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:09",
            "last_seen_utc": "2026-08-28 14:59:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881540": [
        {
            "ioc_value": "43.134.49.218:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:09",
            "last_seen_utc": "2026-08-31 17:48:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881544": [
        {
            "ioc_value": "http://223.123.43.192:48208/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-19 06:05:08",
            "last_seen_utc": "2026-08-25 00:19:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.192",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1881545": [
        {
            "ioc_value": "http://103.190.23.91:50560/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-19 06:05:08",
            "last_seen_utc": "2026-08-25 00:19:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.190.23.91",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1881546": [
        {
            "ioc_value": "http://153.117.13.31:50729/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-19 06:05:07",
            "last_seen_utc": "2026-08-25 00:19:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.13.31",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1881557": [
        {
            "ioc_value": "43.128.113.133:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:06",
            "last_seen_utc": "2026-08-28 06:57:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881565": [
        {
            "ioc_value": "xejaluze.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1881568": [
        {
            "ioc_value": "176.98.182.217:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:05",
            "last_seen_utc": "2026-08-20 05:48:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881592": [
        {
            "ioc_value": "https://ljr.1001gacor.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 06:05:05",
            "last_seen_utc": "2026-08-21 13:06:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "903ac24fcd9670b9ef2e674243d550d8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881597": [
        {
            "ioc_value": "64.227.187.82:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:04",
            "last_seen_utc": "2026-08-25 21:59:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881599": [
        {
            "ioc_value": "159.89.193.17:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:03",
            "last_seen_utc": "2026-08-24 10:35:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881600": [
        {
            "ioc_value": "ryluhy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 06:05:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1881602": [
        {
            "ioc_value": "150.109.93.78:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:05:01",
            "last_seen_utc": "2026-08-27 16:26:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881624": [
        {
            "ioc_value": "magnificent5240.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-19 06:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880982": [
        {
            "ioc_value": "154.90.70.23:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 06:04:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "capture-drop,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1880983": [
        {
            "ioc_value": "147.182.224.216:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-19 06:04:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot,ssh-dropper",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1881302": [
        {
            "ioc_value": "168.144.188.31:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:04:57",
            "last_seen_utc": "2026-08-27 13:36:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881309": [
        {
            "ioc_value": "176.96.138.73:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 06:04:57",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881311": [
        {
            "ioc_value": "85.209.129.102:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 06:04:57",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881310": [
        {
            "ioc_value": "213.111.148.180:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-19 06:04:56",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1881322": [
        {
            "ioc_value": "150.109.93.78:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:04:54",
            "last_seen_utc": "2026-08-27 14:06:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881323": [
        {
            "ioc_value": "43.134.49.218:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-19 06:04:54",
            "last_seen_utc": "2026-08-29 21:52:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1881326": [
        {
            "ioc_value": "https://randenbrink.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:54",
            "last_seen_utc": "2026-08-19 00:10:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117117856549686474",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881325": [
        {
            "ioc_value": "randenbrink.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:53",
            "last_seen_utc": "2026-08-19 00:10:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117117856549686474",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881327": [
        {
            "ioc_value": "https://randenbrink.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:52",
            "last_seen_utc": "2026-08-19 00:10:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117117856549686474",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881328": [
        {
            "ioc_value": "https://randenbrink.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117117856549686474",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881334": [
        {
            "ioc_value": "108.181.175.198:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 06:04:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8437f141b392c50cb27717fef260b9bc0509178eb7919afe96b637b30cdca5d8/",
            "tags": "AsyncRAT,hta,Mexico,WhatsApp",
            "anonymous": 0,
            "reporter": "isahjs6"
        }
    ],
    "1881335": [
        {
            "ioc_value": "108.181.175.198:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 06:04:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8437f141b392c50cb27717fef260b9bc0509178eb7919afe96b637b30cdca5d8/",
            "tags": "AsyncRAT,hta,Mexico,WhatsApp",
            "anonymous": 0,
            "reporter": "isahjs6"
        }
    ],
    "1881336": [
        {
            "ioc_value": "108.181.175.198:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-19 06:04:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8437f141b392c50cb27717fef260b9bc0509178eb7919afe96b637b30cdca5d8/",
            "tags": "AsyncRAT,hta,Mexico,WhatsApp",
            "anonymous": 0,
            "reporter": "isahjs6"
        }
    ],
    "1881337": [
        {
            "ioc_value": "108.181.175.198:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-19 06:04:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3dd9f794833b29db94173ee707a300162e388cf75357e494e328954b5d61c650/",
            "tags": "hta,Mexico,WhatsApp,XWorm",
            "anonymous": 0,
            "reporter": "isahjs6"
        }
    ],
    "1881344": [
        {
            "ioc_value": "https://vanloon.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:49",
            "last_seen_utc": "2026-08-18 20:09:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117118086922735381",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881343": [
        {
            "ioc_value": "vanloon.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:47",
            "last_seen_utc": "2026-08-18 20:09:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117118086922735381",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881345": [
        {
            "ioc_value": "https://vanloon.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:46",
            "last_seen_utc": "2026-08-18 20:09:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117118086922735381",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881346": [
        {
            "ioc_value": "https://vanloon.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-19 06:04:45",
            "last_seen_utc": "2026-08-18 20:09:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117118086922735381",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1881633": [
        {
            "ioc_value": "193.26.115.28:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:04:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ce97b609df1b5fe98cea4d8763bbd569d98ca7494a59ab0590cc9176e1907eb2/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881631": [
        {
            "ioc_value": "securefiles-cdn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/093db91d8a9c42faf74d6531eacab95e1175952a8defd0a86113ab92403e4f22/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881632": [
        {
            "ioc_value": "serv.therapasqualis.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/093db91d8a9c42faf74d6531eacab95e1175952a8defd0a86113ab92403e4f22/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881630": [
        {
            "ioc_value": "74.207.198.32:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-19 06:02:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/093db91d8a9c42faf74d6531eacab95e1175952a8defd0a86113ab92403e4f22/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881629": [
        {
            "ioc_value": "104.168.115.94:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 06:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881628": [
        {
            "ioc_value": "xiaovy4p.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 05:57:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881627": [
        {
            "ioc_value": "79040421b5a48dcc6e611dfe187b2f3e355791ad8511adb84f5c0948aa1d6c89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 05:36:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881626": [
        {
            "ioc_value": "7ay96hev.bio--dentix.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 05:21:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881623": [
        {
            "ioc_value": "149.88.66.234:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881621": [
        {
            "ioc_value": "47.108.86.120:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881622": [
        {
            "ioc_value": "47.108.86.120:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881620": [
        {
            "ioc_value": "forgedelaguiole.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 05:04:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881619": [
        {
            "ioc_value": "group-galore.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 05:04:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881617": [
        {
            "ioc_value": "0eviqnwu.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 04:56:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881616": [
        {
            "ioc_value": "swissambulance.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 04:54:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881613": [
        {
            "ioc_value": "alpen-initiative.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 04:44:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881614": [
        {
            "ioc_value": "tiafe.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 04:44:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881615": [
        {
            "ioc_value": "sistem-electromenager.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 04:44:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881612": [
        {
            "ioc_value": "galfetti.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 04:35:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881610": [
        {
            "ioc_value": "47.108.86.120:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881611": [
        {
            "ioc_value": "47.108.86.120:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881609": [
        {
            "ioc_value": "47.108.86.120:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-19 04:05:04",
            "last_seen_utc": "2026-09-01 02:47:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881608": [
        {
            "ioc_value": "http://gofkaxz.click:8137/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 03:47:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1881607": [
        {
            "ioc_value": "wanderingfoodie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:45:15",
            "last_seen_utc": "2026-08-19 15:14:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881606": [
        {
            "ioc_value": "winefolk.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:35:15",
            "last_seen_utc": "2026-08-19 15:14:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881603": [
        {
            "ioc_value": "cameliamihai.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:35:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881604": [
        {
            "ioc_value": "lesdomainesdulys.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:35:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881605": [
        {
            "ioc_value": "lueurbygreg.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:35:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881601": [
        {
            "ioc_value": "p9bh7aaa.usa-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 03:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881596": [
        {
            "ioc_value": "124.222.128.197:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 03:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881595": [
        {
            "ioc_value": "183.60.226.2:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881594": [
        {
            "ioc_value": "zemgeneve.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 03:02:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881593": [
        {
            "ioc_value": "ilgiardinodeibambini.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 03:01:52",
            "last_seen_utc": "2026-08-29 04:26:07",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,ErrTraffic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881591": [
        {
            "ioc_value": "tridegar.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:53:51",
            "last_seen_utc": "2026-08-19 15:14:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881590": [
        {
            "ioc_value": "nadiatanner.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 02:52:51",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,ErrTraffic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881589": [
        {
            "ioc_value": "thetinytravelerblog.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:51:50",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881588": [
        {
            "ioc_value": "http://bravplo.click:7713/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 02:48:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1881587": [
        {
            "ioc_value": "yf1vlynb.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 02:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881584": [
        {
            "ioc_value": "gtcarclub.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:31:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881585": [
        {
            "ioc_value": "lunaviaggi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:31:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881583": [
        {
            "ioc_value": "https://valeroks.click/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:30:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/valeroks.click",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881581": [
        {
            "ioc_value": "https://bob.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 02:26:16",
            "last_seen_utc": "2026-08-20 09:28:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar,x4tte",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881582": [
        {
            "ioc_value": "bob.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 02:26:16",
            "last_seen_utc": "2026-08-20 09:28:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar,x4tte",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881580": [
        {
            "ioc_value": "alpenschutzinitiative.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:21:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881579": [
        {
            "ioc_value": "maestranzaprecision.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 02:21:46",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881578": [
        {
            "ioc_value": "156.251.16.249:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 02:10:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881577": [
        {
            "ioc_value": "156.251.16.249:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 02:10:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881570": [
        {
            "ioc_value": "47.98.102.101:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881571": [
        {
            "ioc_value": "58.87.71.33:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-19 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881567": [
        {
            "ioc_value": "hzyocvyc.en-us-slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 01:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881566": [
        {
            "ioc_value": "tzmwem2q.usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-19 01:22:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881564": [
        {
            "ioc_value": "196.251.107.252:24027",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-19 00:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881561": [
        {
            "ioc_value": "intensivverlegung.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:46:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881562": [
        {
            "ioc_value": "aufstellungstage.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:46:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881563": [
        {
            "ioc_value": "dugrangranitos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:46:26",
            "last_seen_utc": "2026-08-26 21:54:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881559": [
        {
            "ioc_value": "http://vexdico.shop:8539/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 00:40:51",
            "last_seen_utc": "2026-08-19 03:47:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0ecbba5d1aa1cfb32e96df6d6d7854929353733668ad1134256ec0451dc1a1da/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881558": [
        {
            "ioc_value": "http://bravplo.click:7713/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 00:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0ecbba5d1aa1cfb32e96df6d6d7854929353733668ad1134256ec0451dc1a1da/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881556": [
        {
            "ioc_value": "intensivtransporte.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:36:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881555": [
        {
            "ioc_value": "cuveesdespedzes.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:36:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881554": [
        {
            "ioc_value": "http://poagint.click:8592/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 00:35:55",
            "last_seen_utc": "2026-08-19 15:10:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ecf04b3f001039184d841dd067d6e47bf192047ffe6b92c72a9d57bda6c6afe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881553": [
        {
            "ioc_value": "http://kupzovo.shop:7567/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 00:35:53",
            "last_seen_utc": "2026-08-19 15:10:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ecf04b3f001039184d841dd067d6e47bf192047ffe6b92c72a9d57bda6c6afe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881549": [
        {
            "ioc_value": "https://ljr.sm188daftar.mom/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 00:26:21",
            "last_seen_utc": "2026-08-20 09:28:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar,x4tte",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881550": [
        {
            "ioc_value": "ljr.sm188daftar.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-19 00:26:21",
            "last_seen_utc": "2026-08-20 09:28:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar,x4tte",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881551": [
        {
            "ioc_value": "globalstone.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:26:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881547": [
        {
            "ioc_value": "http://kupzovo.shop:7567/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-19 00:25:42",
            "last_seen_utc": "2026-08-19 01:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d65b76219f184a4fc87d597b0ae50e2ef6f98a79558448b0f0868f761c5479f/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881543": [
        {
            "ioc_value": "aguillage.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-19 00:16:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881542": [
        {
            "ioc_value": "202.61.84.89:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 00:15:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881541": [
        {
            "ioc_value": "202.61.84.89:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-19 00:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881520": [
        {
            "ioc_value": "hutchs.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 23:57:10",
            "last_seen_utc": "2026-08-29 11:28:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,nochain",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881513": [
        {
            "ioc_value": "https://ljr.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 23:55:05",
            "last_seen_utc": "2026-08-19 08:25:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881514": [
        {
            "ioc_value": "ljr.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 23:55:05",
            "last_seen_utc": "2026-08-19 08:25:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881515": [
        {
            "ioc_value": "https://ljr.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 23:55:05",
            "last_seen_utc": "2026-08-19 08:25:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881512": [
        {
            "ioc_value": "ljr.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 23:55:04",
            "last_seen_utc": "2026-08-19 08:25:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881511": [
        {
            "ioc_value": "yfqxbnsz.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 23:53:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881508": [
        {
            "ioc_value": "valeroks.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 23:50:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881494": [
        {
            "ioc_value": "u9rna55z.us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 23:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881492": [
        {
            "ioc_value": "47.94.224.229:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 23:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881487": [
        {
            "ioc_value": "resinov.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 22:20:50",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881455": [
        {
            "ioc_value": "117.50.195.220:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 22:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881456": [
        {
            "ioc_value": "109.248.160.184:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-18 22:05:04",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881454": [
        {
            "ioc_value": "brabe.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 22:00:47",
            "last_seen_utc": "2026-08-20 17:18:09",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881452": [
        {
            "ioc_value": "baltic-surveys.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 22:00:46",
            "last_seen_utc": "2026-08-18 23:57:09",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881453": [
        {
            "ioc_value": "adrianjonphotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 22:00:46",
            "last_seen_utc": "2026-08-18 23:57:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881443": [
        {
            "ioc_value": "pythg1jn.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 21:47:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881440": [
        {
            "ioc_value": "somapharm.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 21:40:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881439": [
        {
            "ioc_value": "o6h0n635.shop-theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 21:36:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881435": [
        {
            "ioc_value": "physiotherapie-baden.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 21:30:35",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881432": [
        {
            "ioc_value": "3070ptd6.us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 21:21:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881422": [
        {
            "ioc_value": "codography.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 21:10:30",
            "last_seen_utc": "2026-08-20 18:13:25",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881421": [
        {
            "ioc_value": "149.88.66.234:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881420": [
        {
            "ioc_value": "https://zillow-app.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 21:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zillow-app.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881419": [
        {
            "ioc_value": "https://s3hsyuj2k.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 21:01:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/s3hsyuj2k.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881415": [
        {
            "ioc_value": "124.220.34.180:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 20:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881416": [
        {
            "ioc_value": "124.220.34.180:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 20:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881414": [
        {
            "ioc_value": "124.220.34.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881413": [
        {
            "ioc_value": "117.72.125.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881412": [
        {
            "ioc_value": "flarclod.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 20:03:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881411": [
        {
            "ioc_value": "92.63.180.96:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 19:46:56",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881410": [
        {
            "ioc_value": "91.92.42.94:4851",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 19:46:55",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881409": [
        {
            "ioc_value": "91.92.243.36:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 19:46:53",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881408": [
        {
            "ioc_value": "46.63.0.187:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-18 19:46:23",
            "last_seen_utc": "2026-09-01 02:46:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881407": [
        {
            "ioc_value": "45.59.120.82:7001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-18 19:46:16",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881406": [
        {
            "ioc_value": "23.175.48.7:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 19:45:44",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881405": [
        {
            "ioc_value": "195.177.94.19:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 19:44:42",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881404": [
        {
            "ioc_value": "185.199.197.93:1488",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 19:44:23",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881403": [
        {
            "ioc_value": "178.211.155.154:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881402": [
        {
            "ioc_value": "176.96.138.71:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 19:44:13",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881401": [
        {
            "ioc_value": "172.252.172.33:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 19:44:08",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881400": [
        {
            "ioc_value": "172.252.172.31:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 19:44:07",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881399": [
        {
            "ioc_value": "154.222.16.160:9098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-18 19:43:45",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881398": [
        {
            "ioc_value": "124.198.131.129:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881397": [
        {
            "ioc_value": "102.117.161.35:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 19:43:03",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881394": [
        {
            "ioc_value": "8iqwcd0w.theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 19:19:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881351": [
        {
            "ioc_value": "103.83.87.183:1717",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-18 19:15:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a2229d944a164ef74389757ff84f6ec5572db1be83d53399638c4efa6503a436/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881349": [
        {
            "ioc_value": "no.ahanresaan.ir",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-18 19:10:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7219dc43efbd5d57c3b8af838ef26b2426483259c1c7b36a6e4e1d3c574496e0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881348": [
        {
            "ioc_value": "https://nhg.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 19:10:05",
            "last_seen_utc": "2026-08-18 23:25:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881347": [
        {
            "ioc_value": "nhg.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 19:10:04",
            "last_seen_utc": "2026-08-18 23:25:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881340": [
        {
            "ioc_value": "117.72.125.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881341": [
        {
            "ioc_value": "https://nhg.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 19:05:05",
            "last_seen_utc": "2026-08-18 23:25:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881342": [
        {
            "ioc_value": "117.72.125.206:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881339": [
        {
            "ioc_value": "nhg.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 19:05:04",
            "last_seen_utc": "2026-08-18 23:25:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1881333": [
        {
            "ioc_value": "193-233-126-53.sslip.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 18:58:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881332": [
        {
            "ioc_value": "wn82o2i1.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 18:53:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881329": [
        {
            "ioc_value": "glara.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 18:40:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc900a5a94804cc09fa2009055e3ef4aca1e3b18b32358e8d9884da4d374712b/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881324": [
        {
            "ioc_value": "3.80.49.187:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 18:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881321": [
        {
            "ioc_value": "62k1d7bn.shop-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 17:22:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881320": [
        {
            "ioc_value": "http://poagint.click:8592/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 17:20:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1881319": [
        {
            "ioc_value": "y01q42ad.theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 17:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881318": [
        {
            "ioc_value": "s3hsyuj2k.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 17:04:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881317": [
        {
            "ioc_value": "zillow-app.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 17:04:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881314": [
        {
            "ioc_value": "https://moat55.io/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 17:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/moat55.io",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881315": [
        {
            "ioc_value": "https://winrupees.com.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 17:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/winrupees.com.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881316": [
        {
            "ioc_value": "https://lankataxicabs.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 17:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lankataxicabs.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881313": [
        {
            "ioc_value": "https://zs777game.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 17:01:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zs777game.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1881312": [
        {
            "ioc_value": "http://mrlketo.shop:8932/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 17:01:00",
            "last_seen_utc": "2026-08-18 18:23:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86d57ebab870af93c1501db0a6c3404636174d0d5b5bffa493f956d77631c321/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881307": [
        {
            "ioc_value": "http://poagint.click:8592/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 16:49:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1881308": [
        {
            "ioc_value": "http://kupzovo.shop:7567/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 16:49:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1881306": [
        {
            "ioc_value": "gpbohyg5.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 16:45:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881303": [
        {
            "ioc_value": "infodatalis.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 16:44:27",
            "last_seen_utc": "2026-08-18 17:23:56",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881304": [
        {
            "ioc_value": "telemetryloop.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 16:44:27",
            "last_seen_utc": "2026-08-18 17:23:56",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881305": [
        {
            "ioc_value": "ukwearstore.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 16:44:27",
            "last_seen_utc": "2026-08-18 17:23:56",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881301": [
        {
            "ioc_value": "191.96.166.172:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-18 16:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/58711b6e9e099eebfb66358560d52878e75ed91d901fb95906d059a36500cdf3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881293": [
        {
            "ioc_value": "xylopak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:13",
            "last_seen_utc": "2026-08-28 10:56:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881294": [
        {
            "ioc_value": "ycn.coop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:13",
            "last_seen_utc": "2026-08-28 10:56:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881295": [
        {
            "ioc_value": "ymbforexpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:13",
            "last_seen_utc": "2026-08-28 10:56:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881297": [
        {
            "ioc_value": "zelenilo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:13",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881299": [
        {
            "ioc_value": "zibaeihome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:13",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881300": [
        {
            "ioc_value": "zn-meox.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:13",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881286": [
        {
            "ioc_value": "wisteriaboardingcattery.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:12",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881287": [
        {
            "ioc_value": "worcestertherapygroup.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:12",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881291": [
        {
            "ioc_value": "xipex.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:12",
            "last_seen_utc": "2026-08-28 10:55:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881278": [
        {
            "ioc_value": "walkeatlondon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:11",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881279": [
        {
            "ioc_value": "websitevoorstarter.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:11",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881280": [
        {
            "ioc_value": "westfjordsadventures.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:11",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881282": [
        {
            "ioc_value": "whichfranchisemaster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:11",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881283": [
        {
            "ioc_value": "whiskeyridgebeef.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:11",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881273": [
        {
            "ioc_value": "vicyouth.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:10",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881274": [
        {
            "ioc_value": "viraventos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:10",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881277": [
        {
            "ioc_value": "vitadatrader.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:10",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881265": [
        {
            "ioc_value": "vakileto24.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:09",
            "last_seen_utc": "2026-08-28 10:55:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881266": [
        {
            "ioc_value": "valorellc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:09",
            "last_seen_utc": "2026-08-28 10:55:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881268": [
        {
            "ioc_value": "vanheeschstukadoors.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:09",
            "last_seen_utc": "2026-08-28 10:55:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881269": [
        {
            "ioc_value": "vantaihoanguyen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:09",
            "last_seen_utc": "2026-08-28 10:55:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881271": [
        {
            "ioc_value": "verveineetpolitique.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:09",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881258": [
        {
            "ioc_value": "tsubakijapan.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:08",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881259": [
        {
            "ioc_value": "tuscany.camp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:08",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881260": [
        {
            "ioc_value": "tuscanytours.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:08",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881262": [
        {
            "ioc_value": "uk-carfinance.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:08",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881264": [
        {
            "ioc_value": "unser-denken.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:08",
            "last_seen_utc": "2026-08-28 10:55:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881250": [
        {
            "ioc_value": "toucansigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881251": [
        {
            "ioc_value": "tranbientown.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881252": [
        {
            "ioc_value": "transjambinews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881253": [
        {
            "ioc_value": "trautmann-sandersdorf.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881254": [
        {
            "ioc_value": "travelbuzau.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881255": [
        {
            "ioc_value": "trginternational.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881256": [
        {
            "ioc_value": "tricountywheelandrim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:07",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881246": [
        {
            "ioc_value": "thelearningtrust.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:06",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881247": [
        {
            "ioc_value": "themessengersl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:06",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881248": [
        {
            "ioc_value": "timswiss.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:06",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881249": [
        {
            "ioc_value": "tomstage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:06",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881240": [
        {
            "ioc_value": "teknomelt.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:05",
            "last_seen_utc": "2026-08-28 10:54:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881241": [
        {
            "ioc_value": "tetonflyfishing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:05",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881242": [
        {
            "ioc_value": "thaiannouncer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:05",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881243": [
        {
            "ioc_value": "the36thavenue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:05",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881244": [
        {
            "ioc_value": "theartofannihilation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:05",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881238": [
        {
            "ioc_value": "technilamp.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:35:04",
            "last_seen_utc": "2026-08-28 10:54:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881235": [
        {
            "ioc_value": "taplogic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:12",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881236": [
        {
            "ioc_value": "tbrubbishremovals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:12",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881237": [
        {
            "ioc_value": "tec-tic.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:12",
            "last_seen_utc": "2026-08-28 10:54:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881228": [
        {
            "ioc_value": "styleline.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:11",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881232": [
        {
            "ioc_value": "sweetformart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:11",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881234": [
        {
            "ioc_value": "synergysales.com.ph",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:11",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881222": [
        {
            "ioc_value": "slide-vibe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:10",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881223": [
        {
            "ioc_value": "starhit.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:10",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881224": [
        {
            "ioc_value": "starlinksatis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:10",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881225": [
        {
            "ioc_value": "stewardtech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:10",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881217": [
        {
            "ioc_value": "serraniaweb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:09",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881219": [
        {
            "ioc_value": "sheenakirti.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:09",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881220": [
        {
            "ioc_value": "showtimefinance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:09",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881221": [
        {
            "ioc_value": "simcardiotest.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:09",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881209": [
        {
            "ioc_value": "safety-inspire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:08",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881210": [
        {
            "ioc_value": "sagebrush.consulting",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:08",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881211": [
        {
            "ioc_value": "salonesoftsnuggles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:08",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881213": [
        {
            "ioc_value": "sarabutton.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:08",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881215": [
        {
            "ioc_value": "seemeinfood.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:08",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881203": [
        {
            "ioc_value": "redony-tiszafured.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:07",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881204": [
        {
            "ioc_value": "redpebblephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:07",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881205": [
        {
            "ioc_value": "reslerovaordinace.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:07",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881206": [
        {
            "ioc_value": "riscmtpnotes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:07",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881207": [
        {
            "ioc_value": "rokhthokmarathinews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:07",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881208": [
        {
            "ioc_value": "rotospace.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:07",
            "last_seen_utc": "2026-08-28 10:53:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881201": [
        {
            "ioc_value": "randysavages.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:06",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881202": [
        {
            "ioc_value": "rdltreinamentos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:34:06",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881196": [
        {
            "ioc_value": "predragzec.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:19",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881197": [
        {
            "ioc_value": "pressekort.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:19",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881200": [
        {
            "ioc_value": "prothaus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:19",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881188": [
        {
            "ioc_value": "pearl.school",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:18",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881189": [
        {
            "ioc_value": "pelota.com.do",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:18",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881190": [
        {
            "ioc_value": "pfm-uk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:18",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881193": [
        {
            "ioc_value": "polazmy.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:18",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881194": [
        {
            "ioc_value": "polskaszkolacroydon.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:18",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881182": [
        {
            "ioc_value": "ojasbharti.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:17",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881183": [
        {
            "ioc_value": "orascanka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:17",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881184": [
        {
            "ioc_value": "ortomedicajerezana.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:17",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881185": [
        {
            "ioc_value": "papierenkarton.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:17",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881175": [
        {
            "ioc_value": "neyshaboursugar.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:16",
            "last_seen_utc": "2026-08-28 10:52:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881178": [
        {
            "ioc_value": "northpeakthreads.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:16",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881179": [
        {
            "ioc_value": "nunaturelabs.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:16",
            "last_seen_utc": "2026-08-28 10:53:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881167": [
        {
            "ioc_value": "mortgage2go.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:15",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881168": [
        {
            "ioc_value": "motapoint.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:15",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881170": [
        {
            "ioc_value": "multiflexmeter.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:15",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881172": [
        {
            "ioc_value": "mycodailydose.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:15",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881173": [
        {
            "ioc_value": "myupbag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:15",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881160": [
        {
            "ioc_value": "menus.today",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:14",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881162": [
        {
            "ioc_value": "milin-dieteticienne.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:14",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881163": [
        {
            "ioc_value": "minsort.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:14",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881165": [
        {
            "ioc_value": "misjesalezjanie.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:33:14",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881152": [
        {
            "ioc_value": "magranite.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:29",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881153": [
        {
            "ioc_value": "mahimatech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:29",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881154": [
        {
            "ioc_value": "mamanesabz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:29",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881155": [
        {
            "ioc_value": "maneas-snacks.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:29",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881146": [
        {
            "ioc_value": "lindseywilliamsonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:28",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881151": [
        {
            "ioc_value": "maerchenweile.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:28",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881137": [
        {
            "ioc_value": "kulturfestivalbadgodesberg.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:27",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881138": [
        {
            "ioc_value": "kushtiarkagoj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:27",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881140": [
        {
            "ioc_value": "ledfak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:27",
            "last_seen_utc": "2026-08-28 10:51:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881142": [
        {
            "ioc_value": "legalbrief.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:27",
            "last_seen_utc": "2026-08-28 10:51:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881143": [
        {
            "ioc_value": "leongyengkit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:27",
            "last_seen_utc": "2026-08-28 10:51:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881145": [
        {
            "ioc_value": "lime4u.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:27",
            "last_seen_utc": "2026-08-28 10:52:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881136": [
        {
            "ioc_value": "klundertopeenkluitje.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:26",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881129": [
        {
            "ioc_value": "irancma.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:25",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881130": [
        {
            "ioc_value": "iroyokujyuusei.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:25",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881131": [
        {
            "ioc_value": "jodeehuishart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:25",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881132": [
        {
            "ioc_value": "jodydannerwalker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:25",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881134": [
        {
            "ioc_value": "johnnykhoury.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:25",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881117": [
        {
            "ioc_value": "hrdays.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881118": [
        {
            "ioc_value": "hukod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881121": [
        {
            "ioc_value": "igma.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881122": [
        {
            "ioc_value": "immigrationprous.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881123": [
        {
            "ioc_value": "in-shapefysiotherapie.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881124": [
        {
            "ioc_value": "incomelabai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881126": [
        {
            "ioc_value": "innerworkclub.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:24",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881111": [
        {
            "ioc_value": "heartwoodsolar2.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:23",
            "last_seen_utc": "2026-08-28 10:50:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881112": [
        {
            "ioc_value": "hedy.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:23",
            "last_seen_utc": "2026-08-28 10:50:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881113": [
        {
            "ioc_value": "hoangminhtien.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:23",
            "last_seen_utc": "2026-08-28 10:50:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881114": [
        {
            "ioc_value": "hong-lou-meng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:23",
            "last_seen_utc": "2026-08-28 10:51:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881116": [
        {
            "ioc_value": "hotelapollon.al",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:32:23",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881103": [
        {
            "ioc_value": "greatbusinessdirectory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:14",
            "last_seen_utc": "2026-08-28 10:31:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881105": [
        {
            "ioc_value": "growth-agency.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:14",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881107": [
        {
            "ioc_value": "grupoangal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:14",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881096": [
        {
            "ioc_value": "gadoithanhchuonggarita.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881097": [
        {
            "ioc_value": "gamehub.partners",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881098": [
        {
            "ioc_value": "gladstoneeyecare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881099": [
        {
            "ioc_value": "go-brand.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881100": [
        {
            "ioc_value": "goedmedicine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881101": [
        {
            "ioc_value": "goldenmuslin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881102": [
        {
            "ioc_value": "gongtongi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:13",
            "last_seen_utc": "2026-08-28 10:50:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881088": [
        {
            "ioc_value": "fernwehtravelguide.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:12",
            "last_seen_utc": "2026-08-28 10:50:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881089": [
        {
            "ioc_value": "feul.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:12",
            "last_seen_utc": "2026-08-28 10:50:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881090": [
        {
            "ioc_value": "flexi-pad.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:12",
            "last_seen_utc": "2026-08-28 10:50:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881093": [
        {
            "ioc_value": "freezfit.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:12",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881094": [
        {
            "ioc_value": "freikirche-forum.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:12",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881095": [
        {
            "ioc_value": "friesian.net.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:12",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881084": [
        {
            "ioc_value": "espaciohabit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:11",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881086": [
        {
            "ioc_value": "europajob.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:11",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881087": [
        {
            "ioc_value": "exovolar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:11",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881077": [
        {
            "ioc_value": "duyanhtravel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:10",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881078": [
        {
            "ioc_value": "ecoport.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:10",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881079": [
        {
            "ioc_value": "edion.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:10",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881080": [
        {
            "ioc_value": "egyensulyintezet.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:10",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881081": [
        {
            "ioc_value": "egygoldtv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:10",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881082": [
        {
            "ioc_value": "eiraterme.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:10",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881069": [
        {
            "ioc_value": "digital-minds-media.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:09",
            "last_seen_utc": "2026-08-28 10:48:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881070": [
        {
            "ioc_value": "digitalartmaker.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:09",
            "last_seen_utc": "2026-08-28 10:48:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881072": [
        {
            "ioc_value": "dkczysto.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:09",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881073": [
        {
            "ioc_value": "dniprocasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:09",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881074": [
        {
            "ioc_value": "donyayeasansor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:09",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881060": [
        {
            "ioc_value": "criticalbiomass.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:08",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881063": [
        {
            "ioc_value": "darkbluesgirls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:08",
            "last_seen_utc": "2026-08-28 10:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881064": [
        {
            "ioc_value": "ddpp.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:08",
            "last_seen_utc": "2026-08-28 10:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881065": [
        {
            "ioc_value": "desinformatieinjegemeente.weerbaarbestuur.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:08",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881066": [
        {
            "ioc_value": "devdesigns.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:08",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881067": [
        {
            "ioc_value": "dgmuc.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:08",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881052": [
        {
            "ioc_value": "chscantelli.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:07",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881055": [
        {
            "ioc_value": "cima-chile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:07",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881056": [
        {
            "ioc_value": "cityofcultures.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:07",
            "last_seen_utc": "2026-08-28 10:48:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881058": [
        {
            "ioc_value": "colegiopaternoster.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:07",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881059": [
        {
            "ioc_value": "conaip.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:07",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881050": [
        {
            "ioc_value": "chiewchanonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:06",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881051": [
        {
            "ioc_value": "chodigi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:31:06",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881044": [
        {
            "ioc_value": "cbnapoli.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:22",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881045": [
        {
            "ioc_value": "centerforlean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:22",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881046": [
        {
            "ioc_value": "cerepharm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:22",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881047": [
        {
            "ioc_value": "cgder.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:22",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881049": [
        {
            "ioc_value": "chiesiventures.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:22",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881041": [
        {
            "ioc_value": "canadianpeptidesolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:21",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881042": [
        {
            "ioc_value": "capitalpluspltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:21",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881043": [
        {
            "ioc_value": "cathlimera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:21",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881040": [
        {
            "ioc_value": "bunchm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:20",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881033": [
        {
            "ioc_value": "beunbound.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:19",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881034": [
        {
            "ioc_value": "bhutanxplore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:19",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881035": [
        {
            "ioc_value": "bilaflutningar.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:19",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881036": [
        {
            "ioc_value": "blainy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:19",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881037": [
        {
            "ioc_value": "bloomoose.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:19",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881029": [
        {
            "ioc_value": "baraem-eg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:18",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881030": [
        {
            "ioc_value": "basisestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:18",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881031": [
        {
            "ioc_value": "bdyea.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:18",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881032": [
        {
            "ioc_value": "bento.tur.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:18",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881024": [
        {
            "ioc_value": "avangfruit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:17",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881025": [
        {
            "ioc_value": "avatarembroidery.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:17",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881026": [
        {
            "ioc_value": "awaken2anewyou.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:17",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881027": [
        {
            "ioc_value": "azexpert.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:17",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881022": [
        {
            "ioc_value": "artstudio-neoklassika.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:16",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881017": [
        {
            "ioc_value": "amruae.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:15",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881011": [
        {
            "ioc_value": "agrofitness.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:14",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881012": [
        {
            "ioc_value": "agutonsky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:14",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881013": [
        {
            "ioc_value": "airscan5g.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:14",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881014": [
        {
            "ioc_value": "ait-hosting.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:14",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881016": [
        {
            "ioc_value": "alcove-concept.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:14",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881009": [
        {
            "ioc_value": "abardavavip.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:13",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881010": [
        {
            "ioc_value": "afyonhaberim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:13",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881007": [
        {
            "ioc_value": "1dconsultant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:12",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881008": [
        {
            "ioc_value": "212dentalacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 16:30:12",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881006": [
        {
            "ioc_value": "swissrentalselect.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 16:26:47",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881005": [
        {
            "ioc_value": "buttresshalcyon.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-18 16:17:31",
            "last_seen_utc": "2026-08-19 13:59:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881004": [
        {
            "ioc_value": "https://buttresshalcyon.top/policy/oauth-validator.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-18 16:17:02",
            "last_seen_utc": "2026-08-19 13:58:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1881003": [
        {
            "ioc_value": "https://91.92.243.51",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 16:10:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a45e6c914ff7da1d39558fc1ffb65d2a9e4422d37352957b17f1cabfdf7130c/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881002": [
        {
            "ioc_value": "110.42.255.63:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1881001": [
        {
            "ioc_value": "eggsjelly.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 16:04:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880995": [
        {
            "ioc_value": "102.220.160.58:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:43",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880996": [
        {
            "ioc_value": "102.220.160.58:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:43",
            "last_seen_utc": "2026-08-27 07:52:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880997": [
        {
            "ioc_value": "217.60.241.31:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:43",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880998": [
        {
            "ioc_value": "217.60.241.48:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:43",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880999": [
        {
            "ioc_value": "217.60.241.50:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:43",
            "last_seen_utc": "2026-08-27 07:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1881000": [
        {
            "ioc_value": "130.12.182.79:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:43",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880994": [
        {
            "ioc_value": "102.220.160.58:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-18 15:53:42",
            "last_seen_utc": "2026-08-27 07:52:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880993": [
        {
            "ioc_value": "207.56.217.9:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 15:50:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880992": [
        {
            "ioc_value": "27.124.12.180:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 15:50:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880991": [
        {
            "ioc_value": "27.124.12.180:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 15:50:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880990": [
        {
            "ioc_value": "156.234.7.60:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 15:50:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880989": [
        {
            "ioc_value": "156.234.7.60:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 15:50:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880988": [
        {
            "ioc_value": "http://ca242145.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-18 15:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880987": [
        {
            "ioc_value": "http://cm163840.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-18 15:50:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880986": [
        {
            "ioc_value": "184.105.237.196:2600",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-18 15:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880985": [
        {
            "ioc_value": "216.218.135.118:2600",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-18 15:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880981": [
        {
            "ioc_value": "fol9.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 15:31:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1880978": [
        {
            "ioc_value": "https://bytesolving.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bytesolving.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880979": [
        {
            "ioc_value": "https://3pattipkr.com.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/3pattipkr.com.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880980": [
        {
            "ioc_value": "https://777szgame.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/777szgame.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880970": [
        {
            "ioc_value": "https://dk999app.com.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dk999app.com.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880971": [
        {
            "ioc_value": "https://galonz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/galonz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880972": [
        {
            "ioc_value": "https://clubpkgame.vip/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/clubpkgame.vip",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880973": [
        {
            "ioc_value": "https://www.detoxiones.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.detoxiones.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880974": [
        {
            "ioc_value": "https://gbazzar.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gbazzar.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880975": [
        {
            "ioc_value": "https://caltexpoint.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/caltexpoint.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880976": [
        {
            "ioc_value": "https://bit2solutions.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bit2solutions.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880977": [
        {
            "ioc_value": "https://8jjbetgame.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/8jjbetgame.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880868": [
        {
            "ioc_value": "https://chappan.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 15:27:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880888": [
        {
            "ioc_value": "159.89.193.17:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 15:27:20",
            "last_seen_utc": "2026-08-26 19:39:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880889": [
        {
            "ioc_value": "https://ges.1131gg.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 15:27:20",
            "last_seen_utc": "2026-08-18 18:25:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "903ac24fcd9670b9ef2e674243d550d8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880965": [
        {
            "ioc_value": "te4n8jbw0v.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 15:27:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880969": [
        {
            "ioc_value": "rzuwk0yv.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 15:19:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880967": [
        {
            "ioc_value": "43.136.178.239:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880968": [
        {
            "ioc_value": "43.136.178.239:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880966": [
        {
            "ioc_value": "39.105.200.188:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880964": [
        {
            "ioc_value": "https://imworthdefending.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/imworthdefending.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880954": [
        {
            "ioc_value": "https://pakaviator.net.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pakaviator.net.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880955": [
        {
            "ioc_value": "https://pakaviatoor.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pakaviatoor.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880956": [
        {
            "ioc_value": "https://pak365game.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pak365game.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880957": [
        {
            "ioc_value": "https://www.makttravels.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.makttravels.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880958": [
        {
            "ioc_value": "https://k666game.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/k666game.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880959": [
        {
            "ioc_value": "https://leannepearson.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/leannepearson.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880960": [
        {
            "ioc_value": "https://laverie-saint-marc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/laverie-saint-marc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880961": [
        {
            "ioc_value": "https://laprensadecojedes.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/laprensadecojedes.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880962": [
        {
            "ioc_value": "https://kitkateventz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kitkateventz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880963": [
        {
            "ioc_value": "https://www.jahmadartstudio.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.jahmadartstudio.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880946": [
        {
            "ioc_value": "https://techfixlogic.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/techfixlogic.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880947": [
        {
            "ioc_value": "https://unifm1027.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/unifm1027.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880948": [
        {
            "ioc_value": "https://s92bet.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/s92bet.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880949": [
        {
            "ioc_value": "https://spinwinpkgame.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/spinwinpkgame.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880950": [
        {
            "ioc_value": "https://rr3game.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rr3game.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880951": [
        {
            "ioc_value": "https://royalpkr.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/royalpkr.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880952": [
        {
            "ioc_value": "https://purekhaddo.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/purekhaddo.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880953": [
        {
            "ioc_value": "https://pkcasino.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pkcasino.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880942": [
        {
            "ioc_value": "https://winbdd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/winbdd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880943": [
        {
            "ioc_value": "https://thetechinstruct.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thetechinstruct.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880944": [
        {
            "ioc_value": "https://www.waouhmonde.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.waouhmonde.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880945": [
        {
            "ioc_value": "https://vizanstudios.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 15:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vizanstudios.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880941": [
        {
            "ioc_value": "http://kupzovo.shop:7567/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 14:51:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1880940": [
        {
            "ioc_value": "wyuuzguim.belly-flush.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 14:47:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880939": [
        {
            "ioc_value": "https://ges.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 14:40:05",
            "last_seen_utc": "2026-08-18 15:25:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880938": [
        {
            "ioc_value": "ges.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 14:40:04",
            "last_seen_utc": "2026-08-18 15:25:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880890": [
        {
            "ioc_value": "ges.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 14:35:07",
            "last_seen_utc": "2026-08-18 18:25:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880886": [
        {
            "ioc_value": "briarvelarium.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-18 14:23:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880887": [
        {
            "ioc_value": "cygnetrampart.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-18 14:23:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880884": [
        {
            "ioc_value": "https://cygnetrampart.top/policy/oauth-validator.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-18 14:23:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880885": [
        {
            "ioc_value": "https://briarvelarium.top/status/alias-build.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-18 14:23:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880883": [
        {
            "ioc_value": "http://eu.auth.varrysections.digital/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 14:21:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01540-1603-7265-8f1a-6a1bacb9caa3",
            "tags": "c2,evilginx,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880881": [
        {
            "ioc_value": "http://fpt.varrysections.digital/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 14:21:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01540-0f06-741a-bffe-2ee85e355ad7",
            "tags": "c2,evilginx,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880882": [
        {
            "ioc_value": "https://cyberpunk.lab.evilginx.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 14:21:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01540-129d-75eb-aef5-738f5db07371",
            "tags": "c2,evilginx,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880880": [
        {
            "ioc_value": "http://dotfoods.varrysections.digital/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 14:21:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01540-0d9d-77c1-b166-e653130406e3",
            "tags": "c2,evilginx,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880879": [
        {
            "ioc_value": "http://cdn.varrysections.digital/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 14:21:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01540-0a5f-779f-9c61-c0722357003b",
            "tags": "c2,evilginx,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880878": [
        {
            "ioc_value": "https://cs9-korea.xxchangyou.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.spynote",
            "malware_alias": "CypherRat",
            "malware_printable": "SpyNote",
            "first_seen_utc": "2026-08-18 14:17:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0153c-39d1-76fe-bb7a-9cad63fb8d64",
            "tags": "c2,spynote,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880877": [
        {
            "ioc_value": "http://82.158.90.134:50555/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-18 14:17:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0153b-dd26-70c9-810f-0a92da97847e",
            "tags": "c2,hookbot,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880876": [
        {
            "ioc_value": "http://82.158.90.131:50555/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-18 14:17:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0153b-d9b1-735e-af74-6f9364a5f512",
            "tags": "c2,hookbot,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880875": [
        {
            "ioc_value": "http://82.158.90.133:50555/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-18 14:17:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0153b-d761-76ae-94c6-1321e33fa9cc",
            "tags": "c2,hookbot,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880874": [
        {
            "ioc_value": "https://ssj6u-6aaaa-aaaap-qsybq-cai.icp0.io/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-18 14:16:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a0153b-1ef3-77a8-a6f7-a5699de3113d",
            "tags": "Byakugan,c2,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880872": [
        {
            "ioc_value": "https://junjun002.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.spynote",
            "malware_alias": "CypherRat",
            "malware_printable": "SpyNote",
            "first_seen_utc": "2026-08-18 14:14:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01538-eca2-731f-b144-aa3495f014cb",
            "tags": "c2,spynote,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880871": [
        {
            "ioc_value": "https://junjun007.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.spynote",
            "malware_alias": "CypherRat",
            "malware_printable": "SpyNote",
            "first_seen_utc": "2026-08-18 14:14:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/01a01538-e5e2-71b4-b36f-40282c0d5876",
            "tags": "c2,spynote,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880870": [
        {
            "ioc_value": "cdn.zrorolite.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 14:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880869": [
        {
            "ioc_value": "https://cdn.zrorolite.com/5NPL.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 14:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880867": [
        {
            "ioc_value": "43.136.178.239:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880866": [
        {
            "ioc_value": "43.136.178.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 14:05:04",
            "last_seen_utc": "2026-08-20 09:02:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880860": [
        {
            "ioc_value": "64.227.187.82:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 14:03:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880841": [
        {
            "ioc_value": "2r1be19qxe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 14:03:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880845": [
        {
            "ioc_value": "lovaloku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 14:03:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880842": [
        {
            "ioc_value": "khpi2hz48i.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 14:03:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880844": [
        {
            "ioc_value": "64.227.187.82:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 14:03:09",
            "last_seen_utc": "2026-08-29 08:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880849": [
        {
            "ioc_value": "https://bob.1001gacor.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 14:03:07",
            "last_seen_utc": "2026-08-21 13:06:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "903ac24fcd9670b9ef2e674243d550d8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880851": [
        {
            "ioc_value": "31.77.227.102:9506",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-18 14:03:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1880852": [
        {
            "ioc_value": "31.77.227.102:9",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-18 14:03:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1880853": [
        {
            "ioc_value": "stevsns.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 14:03:06",
            "last_seen_utc": "2026-08-18 15:10:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117116679039975377",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880854": [
        {
            "ioc_value": "https://stevsns.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 14:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117116679039975377",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880855": [
        {
            "ioc_value": "https://stevsns.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 14:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117116679039975377",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880856": [
        {
            "ioc_value": "https://stevsns.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 14:03:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117116679039975377",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880858": [
        {
            "ioc_value": "cdnmedia.trailsyamahamotor.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-18 14:03:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117116685559499326",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880865": [
        {
            "ioc_value": "142.93.205.111:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 14:03:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880864": [
        {
            "ioc_value": "7x8grafo.en-us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 13:52:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880863": [
        {
            "ioc_value": "178.156.219.14:8592",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 13:45:55",
            "last_seen_utc": "2026-08-20 11:22:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c36f519a225ba04a6d463bd7f09428f695f0281fd5d8da0f6117a022b6b145aa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880862": [
        {
            "ioc_value": "http://poagint.click:8592/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 13:45:54",
            "last_seen_utc": "2026-08-19 15:15:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c36f519a225ba04a6d463bd7f09428f695f0281fd5d8da0f6117a022b6b145aa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880861": [
        {
            "ioc_value": "http://kupzovo.shop:7567/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 13:45:51",
            "last_seen_utc": "2026-08-18 17:20:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c36f519a225ba04a6d463bd7f09428f695f0281fd5d8da0f6117a022b6b145aa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880859": [
        {
            "ioc_value": "ay84niib.snaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 13:17:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880857": [
        {
            "ioc_value": "qso21i5y.phim18k.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 13:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880850": [
        {
            "ioc_value": "39.105.200.188:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880847": [
        {
            "ioc_value": "letti.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:58:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880848": [
        {
            "ioc_value": "marysemasse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:58:44",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880846": [
        {
            "ioc_value": "brainmoving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 12:58:43",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,ErrTraffic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880843": [
        {
            "ioc_value": "hackuarium.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:48:39",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880840": [
        {
            "ioc_value": "popkas.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:42:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1880836": [
        {
            "ioc_value": "godbleesss8912.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:36:31",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880837": [
        {
            "ioc_value": "norrykilu231.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:36:31",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880838": [
        {
            "ioc_value": "secretpi88122.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:36:31",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880839": [
        {
            "ioc_value": "speedpi12321.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:36:31",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880835": [
        {
            "ioc_value": "costum342183.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:36:30",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880833": [
        {
            "ioc_value": "vineriadeimir.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:33:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880834": [
        {
            "ioc_value": "cleancit.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:33:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880832": [
        {
            "ioc_value": "http://bravplo.click:7713/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 12:33:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1880792": [
        {
            "ioc_value": "103.84.230.85:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:28:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://bazaar.abuse.ch/sample/89e906327d8e85067e16f3eb077a4a891fd01773460363b235918035314703ea/",
            "tags": "gs-netcat,gsocket",
            "anonymous": 0,
            "reporter": "PeterGabaldon"
        }
    ],
    "1880262": [
        {
            "ioc_value": "scbpg34297.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 12:28:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880276": [
        {
            "ioc_value": "chappan.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 12:28:37",
            "last_seen_utc": "2026-08-18 17:08:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880277": [
        {
            "ioc_value": "https://chappan.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 12:28:37",
            "last_seen_utc": "2026-08-18 12:10:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880278": [
        {
            "ioc_value": "https://chappan.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 12:28:36",
            "last_seen_utc": "2026-08-18 12:10:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1880791": [
        {
            "ioc_value": "103.253.27.96:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:28:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://bazaar.abuse.ch/sample/89e906327d8e85067e16f3eb077a4a891fd01773460363b235918035314703ea/",
            "tags": "gs-netcat,gsocket",
            "anonymous": 0,
            "reporter": "PeterGabaldon"
        }
    ],
    "1880793": [
        {
            "ioc_value": "103.87.68.158:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:28:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://bazaar.abuse.ch/sample/89e906327d8e85067e16f3eb077a4a891fd01773460363b235918035314703ea/",
            "tags": "gs-netcat,gsocket",
            "anonymous": 0,
            "reporter": "PeterGabaldon"
        }
    ],
    "1880831": [
        {
            "ioc_value": "http://111.92.157.210:59265/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 12:28:32",
            "last_seen_utc": "2026-08-25 00:19:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.157.210",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1880829": [
        {
            "ioc_value": "94.26.106.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.moobot",
            "malware_alias": null,
            "malware_printable": "MooBot",
            "first_seen_utc": "2026-08-18 12:10:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.26.106.206#80",
            "tags": "c2,moobot,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880828": [
        {
            "ioc_value": "213.139.77.194:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-18 12:09:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/213.139.77.194#443",
            "tags": "c2,havoc,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880827": [
        {
            "ioc_value": "37.187.222.170:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nimplant",
            "malware_alias": null,
            "malware_printable": "Nimplant",
            "first_seen_utc": "2026-08-18 12:08:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.187.222.170#80",
            "tags": "c2,nimplant,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880816": [
        {
            "ioc_value": "rangeghasemi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880817": [
        {
            "ioc_value": "rikauto.co.ao",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880818": [
        {
            "ioc_value": "snglandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880819": [
        {
            "ioc_value": "tiesvanseumeren.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880820": [
        {
            "ioc_value": "tonkpiofficiel.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880822": [
        {
            "ioc_value": "vctraders.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880823": [
        {
            "ioc_value": "www.agenziagarau.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880824": [
        {
            "ioc_value": "www.madeverifiche.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880825": [
        {
            "ioc_value": "www.time-talk.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880826": [
        {
            "ioc_value": "www.vijayawadaselfdrivecars.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:15",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880804": [
        {
            "ioc_value": "datdadadat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880805": [
        {
            "ioc_value": "evolucaoinfo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880808": [
        {
            "ioc_value": "implantecenter.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880809": [
        {
            "ioc_value": "lankataxicabs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880811": [
        {
            "ioc_value": "littleolange.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880812": [
        {
            "ioc_value": "moat55.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880813": [
        {
            "ioc_value": "muslim.org.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880814": [
        {
            "ioc_value": "nawayahasna.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880815": [
        {
            "ioc_value": "polyron.com.my",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:14",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880795": [
        {
            "ioc_value": "activosinteligentes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880797": [
        {
            "ioc_value": "backlitwineracks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880798": [
        {
            "ioc_value": "216.128.179.190:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/216.128.179.190#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880799": [
        {
            "ioc_value": "bookybaby.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880800": [
        {
            "ioc_value": "box12martelinhodeouro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880801": [
        {
            "ioc_value": "brandbetterconsult.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880802": [
        {
            "ioc_value": "broom-handle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 12:08:13",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880794": [
        {
            "ioc_value": "217.77.6.50:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-18 12:06:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/217.77.6.50#443",
            "tags": "c2,quasar,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880789": [
        {
            "ioc_value": "162.35.165.76:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-08-18 12:06:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.35.165.76#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880790": [
        {
            "ioc_value": "46.19.143.117:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-08-18 12:06:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/46.19.143.117#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880788": [
        {
            "ioc_value": "15.204.248.160:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-08-18 12:06:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/15.204.248.160#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880785": [
        {
            "ioc_value": "45.227.254.77:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-18 12:05:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.227.254.77#5000",
            "tags": "c2,sectop,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880786": [
        {
            "ioc_value": "5.188.87.210:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-18 12:05:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.188.87.210#5000",
            "tags": "c2,sectop,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880787": [
        {
            "ioc_value": "98.142.252.140:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-18 12:05:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/98.142.252.140#5000",
            "tags": "c2,sectop,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880784": [
        {
            "ioc_value": "91.238.181.7:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-18 12:05:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.238.181.7#5000",
            "tags": "c2,sectop,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880783": [
        {
            "ioc_value": "110.42.255.63:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 12:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880782": [
        {
            "ioc_value": "110.42.255.63:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 12:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880780": [
        {
            "ioc_value": "139.196.181.1:8809",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880781": [
        {
            "ioc_value": "8.138.151.0:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880778": [
        {
            "ioc_value": "103.117.123.125:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.117.123.125#4433",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880779": [
        {
            "ioc_value": "194.182.87.116:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880777": [
        {
            "ioc_value": "64.90.10.227:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:05:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.90.10.227#8080",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880774": [
        {
            "ioc_value": "129.226.174.180:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.226.174.180#80",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880775": [
        {
            "ioc_value": "96.44.160.44:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/96.44.160.44#80",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880776": [
        {
            "ioc_value": "120.48.63.129:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.48.63.129#443",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880773": [
        {
            "ioc_value": "103.117.123.125:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:05:00",
            "last_seen_utc": "2026-08-18 12:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.117.123.125#80",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880771": [
        {
            "ioc_value": "maquillagepermanentbordelaisbystephanie.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 12:04:34",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,ErrTraffic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880770": [
        {
            "ioc_value": "wistar.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:04:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880768": [
        {
            "ioc_value": "110.40.147.249:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:04:29",
            "last_seen_utc": "2026-08-18 12:04:31",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/110.40.147.249#7777",
            "tags": "c2,shodan,supershell",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880769": [
        {
            "ioc_value": "23.106.131.15:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:04:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/23.106.131.15#8443",
            "tags": "c2,shodan,supershell",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880767": [
        {
            "ioc_value": "122.114.12.82:12340",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.shadowpad",
            "malware_alias": "POISONPLUG.SHADOW,XShellGhost",
            "malware_printable": "ShadowPad",
            "first_seen_utc": "2026-08-18 12:04:04",
            "last_seen_utc": "2026-08-18 12:04:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/122.114.12.82#12340",
            "tags": "c2,shadowpad,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880766": [
        {
            "ioc_value": "122.114.166.126:12340",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.shadowpad",
            "malware_alias": "POISONPLUG.SHADOW,XShellGhost",
            "malware_printable": "ShadowPad",
            "first_seen_utc": "2026-08-18 12:04:03",
            "last_seen_utc": "2026-08-18 12:04:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/122.114.166.126#12340",
            "tags": "c2,shadowpad,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880765": [
        {
            "ioc_value": "89.23.110.250:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.23.110.250#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880761": [
        {
            "ioc_value": "130.49.149.13:8010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/130.49.149.13#8010",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880762": [
        {
            "ioc_value": "186.244.227.52:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/186.244.227.52#9443",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880763": [
        {
            "ioc_value": "186.244.227.27:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/186.244.227.27#9443",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880764": [
        {
            "ioc_value": "104.244.89.232:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:41",
            "last_seen_utc": "2026-08-18 12:03:43",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.244.89.232#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880757": [
        {
            "ioc_value": "212.47.241.124:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:40",
            "last_seen_utc": "2026-08-18 12:03:42",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.47.241.124#55555",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880758": [
        {
            "ioc_value": "159.203.165.107:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:40",
            "last_seen_utc": "2026-08-18 12:03:42",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.203.165.107#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880759": [
        {
            "ioc_value": "216.118.235.68:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:40",
            "last_seen_utc": "2026-08-18 12:03:42",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/216.118.235.68#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880760": [
        {
            "ioc_value": "186.244.227.104:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:40",
            "last_seen_utc": "2026-08-18 12:03:43",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/186.244.227.104#9443",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880755": [
        {
            "ioc_value": "52.128.231.154:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:39",
            "last_seen_utc": "2026-08-18 12:03:42",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.128.231.154#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880756": [
        {
            "ioc_value": "149.202.227.107:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 12:03:39",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/149.202.227.107#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880754": [
        {
            "ioc_value": "216.126.236.168:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/216.126.236.168#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880749": [
        {
            "ioc_value": "34.145.5.205:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.145.5.205#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880750": [
        {
            "ioc_value": "64.227.176.189:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.227.176.189#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880751": [
        {
            "ioc_value": "141.125.111.183:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.125.111.183#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880752": [
        {
            "ioc_value": "141.98.154.146:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.98.154.146#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880753": [
        {
            "ioc_value": "172.233.168.65:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.233.168.65#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880745": [
        {
            "ioc_value": "20.223.13.151:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.223.13.151#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880746": [
        {
            "ioc_value": "173.212.213.138:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.212.213.138#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880747": [
        {
            "ioc_value": "220.158.194.222:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/220.158.194.222#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880748": [
        {
            "ioc_value": "172.232.176.54:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.232.176.54#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880741": [
        {
            "ioc_value": "164.52.199.72:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/164.52.199.72#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880742": [
        {
            "ioc_value": "62.244.225.145:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.244.225.145#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880743": [
        {
            "ioc_value": "203.185.67.223:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/203.185.67.223#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880744": [
        {
            "ioc_value": "77.237.239.166:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.237.239.166#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880738": [
        {
            "ioc_value": "35.200.224.221:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.200.224.221#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880739": [
        {
            "ioc_value": "35.194.54.154:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.194.54.154#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880740": [
        {
            "ioc_value": "136.66.108.120:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/136.66.108.120#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880737": [
        {
            "ioc_value": "45.79.246.83:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:03:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.79.246.83#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880736": [
        {
            "ioc_value": "3.39.168.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:02:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.39.168.106#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880733": [
        {
            "ioc_value": "180.104.118.242:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:02:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/180.104.118.242#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880730": [
        {
            "ioc_value": "47.82.213.176:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:02:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.82.213.176#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880731": [
        {
            "ioc_value": "35.79.67.124:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:02:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.79.67.124#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880729": [
        {
            "ioc_value": "74.225.205.31:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:02:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.225.205.31#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880727": [
        {
            "ioc_value": "156.225.27.190:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:02:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.225.27.190#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880723": [
        {
            "ioc_value": "3.13.145.57:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.13.145.57#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880724": [
        {
            "ioc_value": "20.14.208.6:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.14.208.6#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880725": [
        {
            "ioc_value": "151.253.161.154:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.253.161.154#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880726": [
        {
            "ioc_value": "50.75.178.90:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/50.75.178.90#8080",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880721": [
        {
            "ioc_value": "18.223.6.45:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/18.223.6.45#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880722": [
        {
            "ioc_value": "84.68.26.77:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.68.26.77#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880720": [
        {
            "ioc_value": "91.231.11.17:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.231.11.17#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880717": [
        {
            "ioc_value": "92.27.20.99:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/92.27.20.99#8081",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880718": [
        {
            "ioc_value": "147.124.221.15:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.124.221.15#9443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880719": [
        {
            "ioc_value": "40.121.46.121:8444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/40.121.46.121#8444",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880713": [
        {
            "ioc_value": "171.33.196.226:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/171.33.196.226#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880714": [
        {
            "ioc_value": "94.72.98.60:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.72.98.60#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880715": [
        {
            "ioc_value": "82.64.37.175:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.64.37.175#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880716": [
        {
            "ioc_value": "135.236.152.188:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/135.236.152.188#8080",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880711": [
        {
            "ioc_value": "71.184.151.34:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/71.184.151.34#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880712": [
        {
            "ioc_value": "146.20.137.210:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.20.137.210#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880709": [
        {
            "ioc_value": "202.29.172.25:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/202.29.172.25#8080",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880710": [
        {
            "ioc_value": "51.52.39.37:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.52.39.37#8080",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880707": [
        {
            "ioc_value": "24.106.83.199:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/24.106.83.199#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880708": [
        {
            "ioc_value": "203.158.140.81:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/203.158.140.81#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880706": [
        {
            "ioc_value": "3.147.90.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.147.90.9#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880705": [
        {
            "ioc_value": "130.94.94.118:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/130.94.94.118#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880701": [
        {
            "ioc_value": "173.230.130.248:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.230.130.248#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880702": [
        {
            "ioc_value": "68.178.205.17:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/68.178.205.17#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880703": [
        {
            "ioc_value": "207.180.58.107:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.180.58.107#4443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880704": [
        {
            "ioc_value": "108.143.227.46:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/108.143.227.46#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880697": [
        {
            "ioc_value": "74.0.32.96:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.0.32.96#4443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880698": [
        {
            "ioc_value": "65.49.231.115:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/65.49.231.115#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880699": [
        {
            "ioc_value": "159.89.232.174:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.89.232.174#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880700": [
        {
            "ioc_value": "64.227.87.165:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.227.87.165#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880694": [
        {
            "ioc_value": "185.223.207.38:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.223.207.38#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880695": [
        {
            "ioc_value": "5.9.89.201:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.9.89.201#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880696": [
        {
            "ioc_value": "192.129.226.132:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.129.226.132#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880691": [
        {
            "ioc_value": "45.32.60.15:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.32.60.15#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880692": [
        {
            "ioc_value": "89.106.78.234:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.106.78.234#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880693": [
        {
            "ioc_value": "199.245.176.16:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/199.245.176.16#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880687": [
        {
            "ioc_value": "64.188.28.250:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.188.28.250#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880688": [
        {
            "ioc_value": "156.224.28.224:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.224.28.224#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880689": [
        {
            "ioc_value": "162.14.101.126:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.14.101.126#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880690": [
        {
            "ioc_value": "79.133.42.25:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/79.133.42.25#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880684": [
        {
            "ioc_value": "121.78.127.232:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/121.78.127.232#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880685": [
        {
            "ioc_value": "37.27.180.218:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.27.180.218#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880686": [
        {
            "ioc_value": "199.188.100.215:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/199.188.100.215#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880680": [
        {
            "ioc_value": "143.198.125.30:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:38",
            "last_seen_utc": "2026-08-20 08:30:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/143.198.125.30#4443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880681": [
        {
            "ioc_value": "207.57.135.209:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.57.135.209#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880682": [
        {
            "ioc_value": "77.90.19.202:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.90.19.202#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880683": [
        {
            "ioc_value": "37.60.246.25:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.60.246.25#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880677": [
        {
            "ioc_value": "212.60.151.85:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.60.151.85#8443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880678": [
        {
            "ioc_value": "172.105.103.223:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.105.103.223#8443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880679": [
        {
            "ioc_value": "38.147.164.81:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.147.164.81#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880674": [
        {
            "ioc_value": "129.146.218.27:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.146.218.27#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880675": [
        {
            "ioc_value": "66.179.136.167:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.179.136.167#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880676": [
        {
            "ioc_value": "129.226.195.254:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.226.195.254#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880670": [
        {
            "ioc_value": "103.121.95.90:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.121.95.90#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880671": [
        {
            "ioc_value": "173.212.223.178:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.212.223.178#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880672": [
        {
            "ioc_value": "35.240.178.188:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.240.178.188#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880673": [
        {
            "ioc_value": "104.244.89.43:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.244.89.43#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880666": [
        {
            "ioc_value": "43.139.87.203:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.139.87.203#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880667": [
        {
            "ioc_value": "195.242.119.57:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.242.119.57#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880668": [
        {
            "ioc_value": "34.175.95.87:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.175.95.87#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880669": [
        {
            "ioc_value": "150.40.117.140:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/150.40.117.140#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880662": [
        {
            "ioc_value": "130.94.34.246:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/130.94.34.246#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880663": [
        {
            "ioc_value": "207.180.205.54:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.180.205.54#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880664": [
        {
            "ioc_value": "66.154.103.109:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.154.103.109#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880665": [
        {
            "ioc_value": "103.185.249.13:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.185.249.13#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880658": [
        {
            "ioc_value": "162.19.175.48:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.19.175.48#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880659": [
        {
            "ioc_value": "146.56.214.130:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.56.214.130#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880660": [
        {
            "ioc_value": "91.208.162.174:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.208.162.174#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880661": [
        {
            "ioc_value": "116.202.158.114:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/116.202.158.114#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880655": [
        {
            "ioc_value": "78.17.93.74:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/78.17.93.74#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880656": [
        {
            "ioc_value": "185.141.60.111:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.141.60.111#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880657": [
        {
            "ioc_value": "213.145.86.42:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/213.145.86.42#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880652": [
        {
            "ioc_value": "137.74.73.61:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.74.73.61#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880653": [
        {
            "ioc_value": "66.63.162.235:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.63.162.235#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880654": [
        {
            "ioc_value": "158.247.221.23:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/158.247.221.23#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880649": [
        {
            "ioc_value": "45.79.203.94:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.79.203.94#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880650": [
        {
            "ioc_value": "103.70.77.226:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.70.77.226#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880651": [
        {
            "ioc_value": "43.131.50.177:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.131.50.177#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880645": [
        {
            "ioc_value": "45.76.48.124:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.76.48.124#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880646": [
        {
            "ioc_value": "37.114.41.131:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.114.41.131#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880647": [
        {
            "ioc_value": "150.158.122.8:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/150.158.122.8#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880648": [
        {
            "ioc_value": "149.62.46.25:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/149.62.46.25#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880642": [
        {
            "ioc_value": "92.119.164.140:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/92.119.164.140#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880643": [
        {
            "ioc_value": "137.116.136.69:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.116.136.69#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880644": [
        {
            "ioc_value": "204.194.54.61:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/204.194.54.61#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880638": [
        {
            "ioc_value": "45.74.31.54:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.74.31.54#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880639": [
        {
            "ioc_value": "161.97.168.140:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/161.97.168.140#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880640": [
        {
            "ioc_value": "88.218.77.102:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/88.218.77.102#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880641": [
        {
            "ioc_value": "101.42.96.140:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.42.96.140#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880634": [
        {
            "ioc_value": "204.152.220.114:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/204.152.220.114#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880635": [
        {
            "ioc_value": "173.212.223.214:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.212.223.214#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880636": [
        {
            "ioc_value": "157.245.14.84:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.245.14.84#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880637": [
        {
            "ioc_value": "137.184.54.93:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.184.54.93#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880630": [
        {
            "ioc_value": "15.204.248.160:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/15.204.248.160#8443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880631": [
        {
            "ioc_value": "103.121.92.150:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.121.92.150#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880632": [
        {
            "ioc_value": "51.38.146.21:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.38.146.21#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880633": [
        {
            "ioc_value": "153.75.233.171:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-18 12:01:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/153.75.233.171#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880629": [
        {
            "ioc_value": "178.33.157.230:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.33.157.230#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880626": [
        {
            "ioc_value": "85.215.56.158:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/85.215.56.158#8080",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880627": [
        {
            "ioc_value": "194.226.142.191:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.226.142.191#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880628": [
        {
            "ioc_value": "146.103.123.143:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:01:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.103.123.143#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880624": [
        {
            "ioc_value": "101.43.65.12:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.43.65.12#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880625": [
        {
            "ioc_value": "178.128.9.240:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.128.9.240#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880621": [
        {
            "ioc_value": "113.30.189.38:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/113.30.189.38#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880622": [
        {
            "ioc_value": "37.60.242.138:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.60.242.138#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880623": [
        {
            "ioc_value": "159.198.79.76:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.198.79.76#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880618": [
        {
            "ioc_value": "193.126.118.126:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.126.118.126#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880619": [
        {
            "ioc_value": "83.229.123.190:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/83.229.123.190#8080",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880620": [
        {
            "ioc_value": "31.70.83.235:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.70.83.235#8080",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880615": [
        {
            "ioc_value": "64.176.226.47:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.176.226.47#5555",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880616": [
        {
            "ioc_value": "51.77.47.134:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.77.47.134#7777",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880617": [
        {
            "ioc_value": "45.136.14.160:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.136.14.160#8080",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880612": [
        {
            "ioc_value": "194.68.44.212:2053",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.68.44.212#2053",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880613": [
        {
            "ioc_value": "140.82.6.30:30001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/140.82.6.30#30001",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880614": [
        {
            "ioc_value": "172.105.40.31:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.105.40.31#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880610": [
        {
            "ioc_value": "204.168.238.206:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/204.168.238.206#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880611": [
        {
            "ioc_value": "138.36.238.226:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.36.238.226#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880609": [
        {
            "ioc_value": "161.97.184.153:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/161.97.184.153#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880608": [
        {
            "ioc_value": "185.202.238.199:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.202.238.199#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880606": [
        {
            "ioc_value": "95.0.200.36:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:51",
            "last_seen_utc": "2026-08-18 12:01:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/95.0.200.36#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880607": [
        {
            "ioc_value": "79.76.52.42:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/79.76.52.42#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880604": [
        {
            "ioc_value": "20.71.123.165:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.71.123.165#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880605": [
        {
            "ioc_value": "136.119.232.128:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/136.119.232.128#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880601": [
        {
            "ioc_value": "157.230.7.157:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.230.7.157#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880602": [
        {
            "ioc_value": "151.145.54.26:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.145.54.26#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880603": [
        {
            "ioc_value": "157.230.109.184:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.230.109.184#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880599": [
        {
            "ioc_value": "35.195.56.119:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.195.56.119#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880600": [
        {
            "ioc_value": "51.38.142.130:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.38.142.130#7777",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880598": [
        {
            "ioc_value": "152.136.211.93:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.136.211.93#9999",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880596": [
        {
            "ioc_value": "43.218.88.179:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:45",
            "last_seen_utc": "2026-08-18 12:01:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.218.88.179#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880597": [
        {
            "ioc_value": "118.25.137.16:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:45",
            "last_seen_utc": "2026-08-18 12:01:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/118.25.137.16#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880595": [
        {
            "ioc_value": "64.227.136.20:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.227.136.20#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880592": [
        {
            "ioc_value": "107.174.39.59:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:43",
            "last_seen_utc": "2026-08-18 12:01:19",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.174.39.59#8080",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880593": [
        {
            "ioc_value": "169.58.168.231:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.58.168.231#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880590": [
        {
            "ioc_value": "202.74.214.34:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/202.74.214.34#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880591": [
        {
            "ioc_value": "168.144.115.205:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/168.144.115.205#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880588": [
        {
            "ioc_value": "91.134.242.255:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.134.242.255#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880589": [
        {
            "ioc_value": "134.199.218.113:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.199.218.113#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880587": [
        {
            "ioc_value": "5.161.193.120:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.161.193.120#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880585": [
        {
            "ioc_value": "170.187.201.7:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/170.187.201.7#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880586": [
        {
            "ioc_value": "92.5.2.56:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/92.5.2.56#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880583": [
        {
            "ioc_value": "45.142.203.37:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.142.203.37#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880584": [
        {
            "ioc_value": "87.106.81.173:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/87.106.81.173#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880581": [
        {
            "ioc_value": "185.242.235.244:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.242.235.244#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880582": [
        {
            "ioc_value": "172.233.151.92:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.233.151.92#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880579": [
        {
            "ioc_value": "77.90.33.167:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.90.33.167#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880580": [
        {
            "ioc_value": "209.126.83.138:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.126.83.138#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880577": [
        {
            "ioc_value": "167.71.255.108:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.71.255.108#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880578": [
        {
            "ioc_value": "147.224.248.37:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.224.248.37#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880575": [
        {
            "ioc_value": "52.186.171.177:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.186.171.177#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880576": [
        {
            "ioc_value": "193.123.231.237:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.123.231.237#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880574": [
        {
            "ioc_value": "4.155.132.91:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.155.132.91#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880572": [
        {
            "ioc_value": "111.229.188.75:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/111.229.188.75#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880573": [
        {
            "ioc_value": "140.82.6.30:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/140.82.6.30#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880570": [
        {
            "ioc_value": "217.154.124.66:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/217.154.124.66#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880571": [
        {
            "ioc_value": "185.242.233.142:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.242.233.142#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880569": [
        {
            "ioc_value": "115.190.132.197:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/115.190.132.197#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880566": [
        {
            "ioc_value": "161.35.119.150:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/161.35.119.150#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880567": [
        {
            "ioc_value": "20.124.80.216:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.124.80.216#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880568": [
        {
            "ioc_value": "104.236.76.166:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.236.76.166#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880565": [
        {
            "ioc_value": "195.90.216.5:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.90.216.5#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880563": [
        {
            "ioc_value": "158.180.46.177:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/158.180.46.177#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880564": [
        {
            "ioc_value": "211.24.92.216:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/211.24.92.216#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880562": [
        {
            "ioc_value": "91.98.112.78:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.98.112.78#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880561": [
        {
            "ioc_value": "107.21.100.205:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:25",
            "last_seen_utc": "2026-08-18 12:01:19",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.21.100.205#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880560": [
        {
            "ioc_value": "159.203.57.121:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.203.57.121#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880558": [
        {
            "ioc_value": "194.163.144.171:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.163.144.171#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880559": [
        {
            "ioc_value": "209.160.251.122:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.160.251.122#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880556": [
        {
            "ioc_value": "2.207.238.100:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/2.207.238.100#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880557": [
        {
            "ioc_value": "195.133.74.137:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.133.74.137#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880554": [
        {
            "ioc_value": "89.116.24.9:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.116.24.9#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880555": [
        {
            "ioc_value": "2.27.45.193:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/2.27.45.193#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880553": [
        {
            "ioc_value": "147.182.255.108:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.182.255.108#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880552": [
        {
            "ioc_value": "51.138.224.23:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.138.224.23#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880551": [
        {
            "ioc_value": "84.88.36.28:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.88.36.28#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880550": [
        {
            "ioc_value": "205.235.2.2:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/205.235.2.2#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880548": [
        {
            "ioc_value": "104.244.95.43:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:16",
            "last_seen_utc": "2026-08-18 12:01:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.244.95.43#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880549": [
        {
            "ioc_value": "66.179.211.39:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.179.211.39#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880546": [
        {
            "ioc_value": "118.163.7.218:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/118.163.7.218#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880547": [
        {
            "ioc_value": "168.144.0.210:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/168.144.0.210#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880544": [
        {
            "ioc_value": "103.69.128.98:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.69.128.98#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880545": [
        {
            "ioc_value": "141.144.201.168:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.144.201.168#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880543": [
        {
            "ioc_value": "64.23.176.200:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.23.176.200#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880542": [
        {
            "ioc_value": "109.206.246.27:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/109.206.246.27#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880541": [
        {
            "ioc_value": "115.190.189.185:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/115.190.189.185#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880540": [
        {
            "ioc_value": "146.190.128.134:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.190.128.134#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880539": [
        {
            "ioc_value": "20.33.33.75:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.33.33.75#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880536": [
        {
            "ioc_value": "23.254.224.208:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/23.254.224.208#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880537": [
        {
            "ioc_value": "82.67.111.175:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.67.111.175#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880538": [
        {
            "ioc_value": "141.227.149.206:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 12:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.227.149.206#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880533": [
        {
            "ioc_value": "67.207.90.244:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/67.207.90.244#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880534": [
        {
            "ioc_value": "149.28.248.110:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/149.28.248.110#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880535": [
        {
            "ioc_value": "23.20.128.134:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/23.20.128.134#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880530": [
        {
            "ioc_value": "104.236.9.157:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.236.9.157#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880531": [
        {
            "ioc_value": "91.99.213.210:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.99.213.210#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880532": [
        {
            "ioc_value": "199.68.217.119:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/199.68.217.119#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880527": [
        {
            "ioc_value": "65.7.123.204:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/65.7.123.204#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880528": [
        {
            "ioc_value": "83.228.217.239:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/83.228.217.239#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880529": [
        {
            "ioc_value": "87.106.213.148:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/87.106.213.148#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880524": [
        {
            "ioc_value": "82.156.64.247:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.156.64.247#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880525": [
        {
            "ioc_value": "129.213.164.210:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.213.164.210#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880526": [
        {
            "ioc_value": "87.106.229.16:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/87.106.229.16#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880521": [
        {
            "ioc_value": "74.208.54.197:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.208.54.197#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880522": [
        {
            "ioc_value": "94.100.26.221:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.100.26.221#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880523": [
        {
            "ioc_value": "8.220.240.233:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.220.240.233#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880519": [
        {
            "ioc_value": "79.76.32.207:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/79.76.32.207#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880520": [
        {
            "ioc_value": "173.249.53.208:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.249.53.208#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880516": [
        {
            "ioc_value": "212.227.54.66:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.227.54.66#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880517": [
        {
            "ioc_value": "193.181.210.170:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.181.210.170#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880518": [
        {
            "ioc_value": "103.173.66.52:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.173.66.52#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880513": [
        {
            "ioc_value": "188.166.251.223:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/188.166.251.223#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880514": [
        {
            "ioc_value": "79.143.89.122:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/79.143.89.122#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880515": [
        {
            "ioc_value": "91.92.42.203:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.92.42.203#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880510": [
        {
            "ioc_value": "84.247.161.75:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.247.161.75#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880511": [
        {
            "ioc_value": "106.12.26.24:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/106.12.26.24#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880512": [
        {
            "ioc_value": "134.209.75.116:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.209.75.116#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880508": [
        {
            "ioc_value": "160.153.178.199:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/160.153.178.199#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880509": [
        {
            "ioc_value": "185.95.14.77:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.95.14.77#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880505": [
        {
            "ioc_value": "103.155.107.70:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.155.107.70#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880506": [
        {
            "ioc_value": "136.109.25.184:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/136.109.25.184#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880507": [
        {
            "ioc_value": "198.13.32.232:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/198.13.32.232#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880502": [
        {
            "ioc_value": "157.180.28.222:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.180.28.222#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880503": [
        {
            "ioc_value": "185.240.242.166:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.240.242.166#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880504": [
        {
            "ioc_value": "47.237.71.87:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.237.71.87#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880499": [
        {
            "ioc_value": "81.169.224.207:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.169.224.207#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880500": [
        {
            "ioc_value": "15.235.59.186:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/15.235.59.186#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880501": [
        {
            "ioc_value": "164.90.159.31:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/164.90.159.31#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880495": [
        {
            "ioc_value": "121.137.95.101:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/121.137.95.101#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880496": [
        {
            "ioc_value": "111.231.98.72:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/111.231.98.72#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880497": [
        {
            "ioc_value": "159.203.162.54:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.203.162.54#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880498": [
        {
            "ioc_value": "51.142.139.32:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.142.139.32#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880493": [
        {
            "ioc_value": "212.224.107.83:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.224.107.83#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880494": [
        {
            "ioc_value": "47.176.153.62:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.176.153.62#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880491": [
        {
            "ioc_value": "199.247.20.75:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/199.247.20.75#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880492": [
        {
            "ioc_value": "161.35.102.148:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/161.35.102.148#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880488": [
        {
            "ioc_value": "178.105.228.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:43",
            "last_seen_utc": "2026-08-18 12:01:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.105.228.199#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880489": [
        {
            "ioc_value": "37.60.225.162:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:43",
            "last_seen_utc": "2026-08-18 12:01:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.60.225.162#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880490": [
        {
            "ioc_value": "88.99.165.179:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/88.99.165.179#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880486": [
        {
            "ioc_value": "175.41.148.114:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:42",
            "last_seen_utc": "2026-08-18 12:01:17",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/175.41.148.114#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880487": [
        {
            "ioc_value": "195.26.240.215:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.26.240.215#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880484": [
        {
            "ioc_value": "162.35.187.190:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.35.187.190#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880485": [
        {
            "ioc_value": "152.42.144.85:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.42.144.85#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880481": [
        {
            "ioc_value": "40.84.43.13:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/40.84.43.13#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880482": [
        {
            "ioc_value": "54.249.139.244:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:40",
            "last_seen_utc": "2026-08-18 12:01:17",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/54.249.139.244#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880483": [
        {
            "ioc_value": "129.226.221.147:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.226.221.147#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880479": [
        {
            "ioc_value": "74.222.12.20:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:39",
            "last_seen_utc": "2026-08-18 12:01:16",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.222.12.20#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880480": [
        {
            "ioc_value": "110.42.6.177:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:39",
            "last_seen_utc": "2026-08-18 12:01:17",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/110.42.6.177#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880477": [
        {
            "ioc_value": "62.234.37.129:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.234.37.129#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880478": [
        {
            "ioc_value": "112.199.110.130:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/112.199.110.130#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880474": [
        {
            "ioc_value": "147.182.238.163:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.182.238.163#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880475": [
        {
            "ioc_value": "91.98.155.109:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.98.155.109#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880476": [
        {
            "ioc_value": "64.176.19.24:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.176.19.24#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880471": [
        {
            "ioc_value": "51.105.193.225:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.105.193.225#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880472": [
        {
            "ioc_value": "173.212.213.160:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.212.213.160#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880473": [
        {
            "ioc_value": "140.143.182.14:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/140.143.182.14#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880467": [
        {
            "ioc_value": "182.93.80.19:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/182.93.80.19#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880468": [
        {
            "ioc_value": "146.190.122.225:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.190.122.225#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880469": [
        {
            "ioc_value": "178.128.225.209:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.128.225.209#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880470": [
        {
            "ioc_value": "161.97.98.207:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/161.97.98.207#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880464": [
        {
            "ioc_value": "190.20.116.63:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:34",
            "last_seen_utc": "2026-08-18 12:01:16",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/190.20.116.63#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880465": [
        {
            "ioc_value": "43.136.134.87:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.136.134.87#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880466": [
        {
            "ioc_value": "203.145.168.114:7887",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/203.145.168.114#7887",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880462": [
        {
            "ioc_value": "91.107.198.222:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.107.198.222#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880463": [
        {
            "ioc_value": "138.197.40.76:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.197.40.76#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880459": [
        {
            "ioc_value": "89.167.116.198:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.167.116.198#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880460": [
        {
            "ioc_value": "140.82.6.30:30002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/140.82.6.30#30002",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880461": [
        {
            "ioc_value": "82.165.107.125:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.165.107.125#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880456": [
        {
            "ioc_value": "104.168.95.59:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.168.95.59#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880457": [
        {
            "ioc_value": "108.61.167.138:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/108.61.167.138#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880458": [
        {
            "ioc_value": "217.61.240.139:9205",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/217.61.240.139#9205",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880453": [
        {
            "ioc_value": "206.189.187.187:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/206.189.187.187#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880454": [
        {
            "ioc_value": "149.210.237.27:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/149.210.237.27#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880455": [
        {
            "ioc_value": "64.23.221.249:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.23.221.249#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880451": [
        {
            "ioc_value": "57.129.100.65:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:29",
            "last_seen_utc": "2026-08-18 12:01:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/57.129.100.65#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880452": [
        {
            "ioc_value": "67.207.80.64:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:29",
            "last_seen_utc": "2026-08-18 12:01:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/67.207.80.64#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880449": [
        {
            "ioc_value": "86.54.29.105:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/86.54.29.105#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880450": [
        {
            "ioc_value": "103.236.60.111:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:28",
            "last_seen_utc": "2026-08-18 12:01:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.236.60.111#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880447": [
        {
            "ioc_value": "85.111.86.99:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/85.111.86.99#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880448": [
        {
            "ioc_value": "137.184.205.40:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:27",
            "last_seen_utc": "2026-08-18 12:01:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.184.205.40#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880444": [
        {
            "ioc_value": "84.247.165.18:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.247.165.18#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880445": [
        {
            "ioc_value": "103.179.44.58:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.179.44.58#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880446": [
        {
            "ioc_value": "114.132.49.100:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:26",
            "last_seen_utc": "2026-08-18 12:01:14",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.132.49.100#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880441": [
        {
            "ioc_value": "81.95.108.92:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.95.108.92#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880442": [
        {
            "ioc_value": "81.68.238.141:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.68.238.141#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880443": [
        {
            "ioc_value": "129.121.84.227:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.121.84.227#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880438": [
        {
            "ioc_value": "101.34.243.103:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.34.243.103#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880439": [
        {
            "ioc_value": "35.214.74.71:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.214.74.71#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880440": [
        {
            "ioc_value": "77.38.125.37:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.38.125.37#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880436": [
        {
            "ioc_value": "147.182.183.223:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.182.183.223#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880437": [
        {
            "ioc_value": "178.156.174.122:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.156.174.122#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880434": [
        {
            "ioc_value": "204.168.253.216:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:22",
            "last_seen_utc": "2026-08-18 12:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/204.168.253.216#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880435": [
        {
            "ioc_value": "67.207.93.220:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/67.207.93.220#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880431": [
        {
            "ioc_value": "167.114.114.51:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.114.114.51#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880432": [
        {
            "ioc_value": "145.132.81.61:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/145.132.81.61#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880428": [
        {
            "ioc_value": "23.254.233.159:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:20",
            "last_seen_utc": "2026-08-18 12:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/23.254.233.159#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880429": [
        {
            "ioc_value": "88.99.165.179:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/88.99.165.179#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880430": [
        {
            "ioc_value": "216.238.121.111:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:20",
            "last_seen_utc": "2026-08-18 12:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/216.238.121.111#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880426": [
        {
            "ioc_value": "51.89.191.93:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.89.191.93#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880427": [
        {
            "ioc_value": "61.28.131.37:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:19",
            "last_seen_utc": "2026-08-18 12:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/61.28.131.37#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880424": [
        {
            "ioc_value": "210.16.65.37:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:18",
            "last_seen_utc": "2026-08-18 12:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/210.16.65.37#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880425": [
        {
            "ioc_value": "134.209.9.147:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:18",
            "last_seen_utc": "2026-08-18 12:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.209.9.147#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880421": [
        {
            "ioc_value": "1.14.193.53:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/1.14.193.53#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880422": [
        {
            "ioc_value": "35.77.200.163:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:17",
            "last_seen_utc": "2026-08-18 12:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.77.200.163#80",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880423": [
        {
            "ioc_value": "38.179.64.13:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.179.64.13#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880418": [
        {
            "ioc_value": "211.24.89.101:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/211.24.89.101#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880419": [
        {
            "ioc_value": "4.188.67.185:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.188.67.185#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880420": [
        {
            "ioc_value": "217.160.244.124:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/217.160.244.124#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880414": [
        {
            "ioc_value": "209.97.157.78:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.97.157.78#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880415": [
        {
            "ioc_value": "207.246.95.182:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:15",
            "last_seen_utc": "2026-08-18 12:01:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.246.95.182#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880416": [
        {
            "ioc_value": "192.210.135.124:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:15",
            "last_seen_utc": "2026-08-18 12:01:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.210.135.124#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880417": [
        {
            "ioc_value": "95.0.200.36:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:15",
            "last_seen_utc": "2026-08-18 12:01:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/95.0.200.36#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880411": [
        {
            "ioc_value": "34.128.95.189:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:14",
            "last_seen_utc": "2026-08-18 12:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.128.95.189#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880412": [
        {
            "ioc_value": "107.172.90.224:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:14",
            "last_seen_utc": "2026-08-18 12:01:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.172.90.224#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880413": [
        {
            "ioc_value": "51.79.146.29:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.79.146.29#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880408": [
        {
            "ioc_value": "138.199.144.32:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.199.144.32#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880409": [
        {
            "ioc_value": "51.83.76.215:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:13",
            "last_seen_utc": "2026-08-18 12:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.83.76.215#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880410": [
        {
            "ioc_value": "185.198.74.29:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.198.74.29#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880404": [
        {
            "ioc_value": "164.132.40.255:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:12",
            "last_seen_utc": "2026-08-18 12:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/164.132.40.255#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880405": [
        {
            "ioc_value": "103.27.133.120:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:12",
            "last_seen_utc": "2026-08-18 12:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.27.133.120#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880406": [
        {
            "ioc_value": "183.237.211.34:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:12",
            "last_seen_utc": "2026-08-18 12:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/183.237.211.34#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880407": [
        {
            "ioc_value": "154.9.232.209:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:12",
            "last_seen_utc": "2026-08-18 12:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/154.9.232.209#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880401": [
        {
            "ioc_value": "120.48.51.184:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:11",
            "last_seen_utc": "2026-08-18 12:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.48.51.184#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880402": [
        {
            "ioc_value": "36.212.223.87:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/36.212.223.87#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880403": [
        {
            "ioc_value": "195.228.150.125:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:11",
            "last_seen_utc": "2026-08-18 12:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.228.150.125#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880398": [
        {
            "ioc_value": "51.15.238.70:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.15.238.70#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880399": [
        {
            "ioc_value": "200.58.109.89:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:10",
            "last_seen_utc": "2026-08-18 12:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/200.58.109.89#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880400": [
        {
            "ioc_value": "185.84.47.181:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:10",
            "last_seen_utc": "2026-08-18 12:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.84.47.181#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880395": [
        {
            "ioc_value": "51.15.139.207:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.15.139.207#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880396": [
        {
            "ioc_value": "201.161.34.130:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:09",
            "last_seen_utc": "2026-08-18 12:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/201.161.34.130#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880397": [
        {
            "ioc_value": "77.95.252.240:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.95.252.240#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880393": [
        {
            "ioc_value": "145.241.98.7:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/145.241.98.7#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880394": [
        {
            "ioc_value": "159.89.44.68:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.89.44.68#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880391": [
        {
            "ioc_value": "162.43.55.101:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.43.55.101#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880392": [
        {
            "ioc_value": "43.166.246.26:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.166.246.26#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880388": [
        {
            "ioc_value": "51.81.254.201:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:06",
            "last_seen_utc": "2026-08-18 12:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.81.254.201#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880389": [
        {
            "ioc_value": "60.251.233.186:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/60.251.233.186#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880390": [
        {
            "ioc_value": "162.19.224.70:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:06",
            "last_seen_utc": "2026-08-18 12:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.19.224.70#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880385": [
        {
            "ioc_value": "146.59.83.148:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.59.83.148#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880386": [
        {
            "ioc_value": "4.152.69.149:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:05",
            "last_seen_utc": "2026-08-18 12:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.152.69.149#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880387": [
        {
            "ioc_value": "37.187.226.148:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.187.226.148#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880384": [
        {
            "ioc_value": "62.235.177.215:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:04",
            "last_seen_utc": "2026-08-18 12:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.235.177.215#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880381": [
        {
            "ioc_value": "162.243.39.41:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/162.243.39.41#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880382": [
        {
            "ioc_value": "65.49.232.115:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/65.49.232.115#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880383": [
        {
            "ioc_value": "143.198.25.46:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/143.198.25.46#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880378": [
        {
            "ioc_value": "169.58.3.208:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:00",
            "last_seen_utc": "2026-08-18 12:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.58.3.208#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880379": [
        {
            "ioc_value": "172.188.59.225:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:00",
            "last_seen_utc": "2026-08-18 12:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.188.59.225#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880380": [
        {
            "ioc_value": "152.32.189.145:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:59:00",
            "last_seen_utc": "2026-08-18 12:01:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.32.189.145#9999",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880376": [
        {
            "ioc_value": "93.177.77.142:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:59",
            "last_seen_utc": "2026-08-18 12:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/93.177.77.142#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880377": [
        {
            "ioc_value": "4.150.69.97:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.150.69.97#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880374": [
        {
            "ioc_value": "212.132.126.146:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:58",
            "last_seen_utc": "2026-08-18 12:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.132.126.146#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880375": [
        {
            "ioc_value": "13.140.159.174:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:58",
            "last_seen_utc": "2026-08-18 12:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/13.140.159.174#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880373": [
        {
            "ioc_value": "35.208.127.233:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:57",
            "last_seen_utc": "2026-08-18 12:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.208.127.233#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880371": [
        {
            "ioc_value": "18.163.48.70:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:56",
            "last_seen_utc": "2026-08-18 12:01:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/18.163.48.70#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880372": [
        {
            "ioc_value": "195.114.216.54:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.114.216.54#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880370": [
        {
            "ioc_value": "152.42.200.251:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:58:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.42.200.251#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880368": [
        {
            "ioc_value": "94.23.121.241:7433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.23.121.241#7433",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880369": [
        {
            "ioc_value": "88.119.174.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/88.119.174.86#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880365": [
        {
            "ioc_value": "129.28.122.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.28.122.92#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880366": [
        {
            "ioc_value": "193.112.191.222:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:25",
            "last_seen_utc": "2026-08-18 11:58:27",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.112.191.222#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880367": [
        {
            "ioc_value": "192.144.171.134:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.144.171.134#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880363": [
        {
            "ioc_value": "182.92.117.223:55000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:23",
            "last_seen_utc": "2026-08-18 15:05:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/182.92.117.223#55000",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880364": [
        {
            "ioc_value": "198.199.72.177:7771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/198.199.72.177#7771",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880362": [
        {
            "ioc_value": "39.106.80.126:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:20",
            "last_seen_utc": "2026-08-18 11:58:24",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/39.106.80.126#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880358": [
        {
            "ioc_value": "167.160.189.206:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.160.189.206#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880359": [
        {
            "ioc_value": "108.165.147.244:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/108.165.147.244#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880360": [
        {
            "ioc_value": "24.144.93.255:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/24.144.93.255#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880361": [
        {
            "ioc_value": "175.178.99.75:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:19",
            "last_seen_utc": "2026-08-18 11:58:24",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/175.178.99.75#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880354": [
        {
            "ioc_value": "178.16.52.177:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:18",
            "last_seen_utc": "2026-08-18 11:58:24",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.16.52.177#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880355": [
        {
            "ioc_value": "46.235.168.57:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/46.235.168.57#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880356": [
        {
            "ioc_value": "107.172.103.254:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:18",
            "last_seen_utc": "2026-08-18 11:58:26",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.172.103.254#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880357": [
        {
            "ioc_value": "213.111.157.231:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:18",
            "last_seen_utc": "2026-08-18 11:58:24",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/213.111.157.231#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880351": [
        {
            "ioc_value": "139.59.255.98:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/139.59.255.98#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880352": [
        {
            "ioc_value": "114.67.98.107:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:17",
            "last_seen_utc": "2026-08-18 11:58:24",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.67.98.107#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880353": [
        {
            "ioc_value": "80.32.135.143:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/80.32.135.143#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880347": [
        {
            "ioc_value": "203.12.31.100:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/203.12.31.100#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880348": [
        {
            "ioc_value": "147.182.194.198:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.182.194.198#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880349": [
        {
            "ioc_value": "43.242.97.95:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.242.97.95#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880350": [
        {
            "ioc_value": "43.252.213.228:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:16",
            "last_seen_utc": "2026-08-19 13:57:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.252.213.228#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880343": [
        {
            "ioc_value": "82.157.183.28:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:15",
            "last_seen_utc": "2026-08-18 11:58:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.157.183.28#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880344": [
        {
            "ioc_value": "47.251.21.59:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.251.21.59#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880345": [
        {
            "ioc_value": "47.86.9.253:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:15",
            "last_seen_utc": "2026-08-18 11:58:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.86.9.253#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880346": [
        {
            "ioc_value": "38.55.145.158:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:15",
            "last_seen_utc": "2026-08-18 11:58:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.55.145.158#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880340": [
        {
            "ioc_value": "175.24.134.99:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:14",
            "last_seen_utc": "2026-08-18 11:58:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/175.24.134.99#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880341": [
        {
            "ioc_value": "68.64.182.169:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/68.64.182.169#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880342": [
        {
            "ioc_value": "49.51.230.17:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/49.51.230.17#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880336": [
        {
            "ioc_value": "42.193.22.177:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:13",
            "last_seen_utc": "2026-08-18 11:58:22",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/42.193.22.177#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880337": [
        {
            "ioc_value": "213.199.55.80:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:13",
            "last_seen_utc": "2026-08-18 16:05:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/213.199.55.80#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880338": [
        {
            "ioc_value": "141.255.162.234:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.255.162.234#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880339": [
        {
            "ioc_value": "117.72.125.206:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:13",
            "last_seen_utc": "2026-08-18 19:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/117.72.125.206#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880332": [
        {
            "ioc_value": "1.14.104.208:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/1.14.104.208#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880333": [
        {
            "ioc_value": "118.24.187.152:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:12",
            "last_seen_utc": "2026-08-18 11:58:26",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/118.24.187.152#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880334": [
        {
            "ioc_value": "206.238.42.153:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/206.238.42.153#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880335": [
        {
            "ioc_value": "14.29.160.181:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:12",
            "last_seen_utc": "2026-08-18 21:05:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/14.29.160.181#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880328": [
        {
            "ioc_value": "158.94.208.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:11",
            "last_seen_utc": "2026-08-18 11:58:26",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/158.94.208.177#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880329": [
        {
            "ioc_value": "152.32.132.177:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:11",
            "last_seen_utc": "2026-08-18 21:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.32.132.177#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880330": [
        {
            "ioc_value": "169.58.121.189:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:11",
            "last_seen_utc": "2026-08-18 13:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.58.121.189#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880331": [
        {
            "ioc_value": "172.232.97.189:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:11",
            "last_seen_utc": "2026-08-18 11:58:22",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.232.97.189#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880324": [
        {
            "ioc_value": "158.94.208.177:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:10",
            "last_seen_utc": "2026-08-18 11:58:22",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/158.94.208.177#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880325": [
        {
            "ioc_value": "31.179.166.59:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.179.166.59#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880326": [
        {
            "ioc_value": "110.4.40.65:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/110.4.40.65#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880327": [
        {
            "ioc_value": "43.139.87.203:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:10",
            "last_seen_utc": "2026-08-18 16:05:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.139.87.203#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880321": [
        {
            "ioc_value": "91.92.42.118:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:09",
            "last_seen_utc": "2026-08-18 11:58:22",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.92.42.118#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880322": [
        {
            "ioc_value": "47.82.234.12:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:09",
            "last_seen_utc": "2026-08-18 17:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.82.234.12#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880323": [
        {
            "ioc_value": "43.155.169.245:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:09",
            "last_seen_utc": "2026-08-18 16:05:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.155.169.245#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880317": [
        {
            "ioc_value": "88.147.120.235:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/88.147.120.235#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880318": [
        {
            "ioc_value": "169.239.128.43:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.239.128.43#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880319": [
        {
            "ioc_value": "101.33.225.32:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:08",
            "last_seen_utc": "2026-08-18 17:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.33.225.32#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880320": [
        {
            "ioc_value": "47.96.254.114:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:08",
            "last_seen_utc": "2026-08-18 19:05:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.96.254.114#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880313": [
        {
            "ioc_value": "106.75.249.202:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:07",
            "last_seen_utc": "2026-08-18 18:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/106.75.249.202#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880314": [
        {
            "ioc_value": "192.210.226.113:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.210.226.113#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880315": [
        {
            "ioc_value": "119.45.160.160:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:07",
            "last_seen_utc": "2026-08-18 20:05:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/119.45.160.160#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880316": [
        {
            "ioc_value": "117.50.184.221:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/117.50.184.221#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880309": [
        {
            "ioc_value": "183.60.226.2:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:06",
            "last_seen_utc": "2026-08-20 03:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/183.60.226.2#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880310": [
        {
            "ioc_value": "47.251.165.63:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.251.165.63#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880311": [
        {
            "ioc_value": "157.230.253.244:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.230.253.244#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880312": [
        {
            "ioc_value": "124.220.34.180:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:06",
            "last_seen_utc": "2026-08-18 23:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/124.220.34.180#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880305": [
        {
            "ioc_value": "178.157.59.195:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:05",
            "last_seen_utc": "2026-08-18 11:58:21",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.157.59.195#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880306": [
        {
            "ioc_value": "84.252.8.28:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.252.8.28#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880307": [
        {
            "ioc_value": "14.225.212.124:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:05",
            "last_seen_utc": "2026-08-18 11:58:21",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/14.225.212.124#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880308": [
        {
            "ioc_value": "83.68.95.150:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/83.68.95.150#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880304": [
        {
            "ioc_value": "124.222.145.172:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:04",
            "last_seen_utc": "2026-08-18 22:05:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/124.222.145.172#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880303": [
        {
            "ioc_value": "156.239.252.191:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.239.252.191#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880300": [
        {
            "ioc_value": "169.58.82.229:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:01",
            "last_seen_utc": "2026-08-18 13:05:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.58.82.229#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880301": [
        {
            "ioc_value": "47.251.177.187:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.251.177.187#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880302": [
        {
            "ioc_value": "47.88.78.167:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.88.78.167#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880297": [
        {
            "ioc_value": "62.91.88.154:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.91.88.154#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880298": [
        {
            "ioc_value": "111.229.248.198:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:00",
            "last_seen_utc": "2026-08-18 18:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/111.229.248.198#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880299": [
        {
            "ioc_value": "114.67.204.86:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:58:00",
            "last_seen_utc": "2026-08-18 18:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.67.204.86#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880295": [
        {
            "ioc_value": "9.205.158.119:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:57:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/9.205.158.119#80",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880296": [
        {
            "ioc_value": "98.80.179.181:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:57:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/98.80.179.181#80",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880294": [
        {
            "ioc_value": "47.82.234.12:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:56:17",
            "last_seen_utc": "2026-08-18 16:05:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.82.234.12#8848",
            "tags": "c2,cobaltstrike,cs-watermark-1234567890,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880292": [
        {
            "ioc_value": "169.58.82.229:5556",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:56:08",
            "last_seen_utc": "2026-08-18 13:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.58.82.229#5556",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880293": [
        {
            "ioc_value": "169.58.82.229:8055",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:56:08",
            "last_seen_utc": "2026-08-18 15:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.58.82.229#8055",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1880291": [
        {
            "ioc_value": "23.148.212.123:2053",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:48:07",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880290": [
        {
            "ioc_value": "ossb6.oss-cn-beijing.aliyuncs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 11:47:40",
            "last_seen_utc": "2026-09-01 02:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880289": [
        {
            "ioc_value": "https://bob.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 11:45:07",
            "last_seen_utc": "2026-08-18 12:25:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880287": [
        {
            "ioc_value": "https://bob.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 11:45:06",
            "last_seen_utc": "2026-08-18 14:27:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880288": [
        {
            "ioc_value": "bob.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 11:45:06",
            "last_seen_utc": "2026-08-18 12:25:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880286": [
        {
            "ioc_value": "bob.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 11:45:05",
            "last_seen_utc": "2026-08-18 14:27:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1880285": [
        {
            "ioc_value": "6ao9axmp.goldalignn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 11:45:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880284": [
        {
            "ioc_value": "alpenschutz.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:44:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880283": [
        {
            "ioc_value": "gloriadiamanti.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:44:53",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880282": [
        {
            "ioc_value": "popkas.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 11:23:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880281": [
        {
            "ioc_value": "4lgtmqz7.slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 11:17:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880280": [
        {
            "ioc_value": "powerofwe.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:14:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880279": [
        {
            "ioc_value": "gite-auxiris.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:09:33",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880275": [
        {
            "ioc_value": "175.27.140.230:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880274": [
        {
            "ioc_value": "194.182.87.116:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880273": [
        {
            "ioc_value": "andreoni-meier.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 11:04:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880267": [
        {
            "ioc_value": "94.26.3.211:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-18 10:56:26",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880268": [
        {
            "ioc_value": "192.109.139.91:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-18 10:56:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880269": [
        {
            "ioc_value": "195.177.94.60:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-18 10:56:26",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880270": [
        {
            "ioc_value": "107.175.148.122:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-18 10:56:26",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880271": [
        {
            "ioc_value": "209.54.103.173:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-18 10:56:26",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880272": [
        {
            "ioc_value": "31.77.138.55:5654",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-18 10:56:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880266": [
        {
            "ioc_value": "ib3.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 10:53:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880265": [
        {
            "ioc_value": "groupes-artiste.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 10:46:55",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,ErrTraffic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880263": [
        {
            "ioc_value": "45.62.170.51:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-18 10:45:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7a42d5d51e97d4701f6b309508902faa5aea833bda338172d5c95f6fbb7f9a92/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880260": [
        {
            "ioc_value": "ville-haillicourt.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 10:36:53",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880261": [
        {
            "ioc_value": "tchaffe.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 10:36:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880259": [
        {
            "ioc_value": "http://fasnzect.click:4929/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 10:32:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1880258": [
        {
            "ioc_value": "tesladeathray.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 10:26:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880256": [
        {
            "ioc_value": "194.182.87.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 10:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880254": [
        {
            "ioc_value": "149.88.66.234:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880255": [
        {
            "ioc_value": "194.182.87.116:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880253": [
        {
            "ioc_value": "110.42.255.63:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880252": [
        {
            "ioc_value": "110.42.255.63:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880251": [
        {
            "ioc_value": "31.56.209.234:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-18 09:55:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77ffb26f8837c388039a3ed7267003a46a7f1ca6c3c1ba9ceb46fce5702ebdae/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880249": [
        {
            "ioc_value": "akb.cat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 09:50:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880248": [
        {
            "ioc_value": "95.216.220.204:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-18 09:47:49",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880246": [
        {
            "ioc_value": "68.178.202.150:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 09:47:23",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880247": [
        {
            "ioc_value": "68.178.205.17:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 09:47:23",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880244": [
        {
            "ioc_value": "45.11.181.85:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:46:48",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880245": [
        {
            "ioc_value": "45.11.181.85:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:46:48",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880243": [
        {
            "ioc_value": "36.248.232.166:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:46:37",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880242": [
        {
            "ioc_value": "31.56.209.245:5088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-18 09:46:30",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880241": [
        {
            "ioc_value": "213.199.53.152:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:45:34",
            "last_seen_utc": "2026-09-01 02:44:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880240": [
        {
            "ioc_value": "20.51.121.37:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 09:45:20",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880239": [
        {
            "ioc_value": "198.23.185.98:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 09:45:13",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880238": [
        {
            "ioc_value": "198.135.54.91:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 09:45:11",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880237": [
        {
            "ioc_value": "195.242.119.228:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 09:45:09",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880236": [
        {
            "ioc_value": "192.169.176.54:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 09:44:53",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880235": [
        {
            "ioc_value": "187.194.216.103:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:44:49",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880234": [
        {
            "ioc_value": "186.169.88.130:5011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 09:44:48",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880232": [
        {
            "ioc_value": "185.254.99.153:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880233": [
        {
            "ioc_value": "185.254.99.153:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880231": [
        {
            "ioc_value": "185.212.128.51:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-18 09:44:40",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880230": [
        {
            "ioc_value": "185.193.127.4:13370",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-18 09:44:38",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880229": [
        {
            "ioc_value": "178.211.155.154:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:30",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880228": [
        {
            "ioc_value": "176.96.138.71:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:25",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880225": [
        {
            "ioc_value": "172.252.172.30:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:18",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880226": [
        {
            "ioc_value": "172.252.172.30:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:18",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880227": [
        {
            "ioc_value": "172.252.172.30:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:44:18",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880224": [
        {
            "ioc_value": "154.248.45.157:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:43:52",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880223": [
        {
            "ioc_value": "137.175.30.119:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-18 09:43:37",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880222": [
        {
            "ioc_value": "128.90.112.33:2486",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-18 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880221": [
        {
            "ioc_value": "104.243.248.63:408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-18 09:43:14",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880220": [
        {
            "ioc_value": "mindglowingsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:38:06",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880219": [
        {
            "ioc_value": "https://chillifarmsukabumi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chillifarmsukabumi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1880217": [
        {
            "ioc_value": "170.62.130.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 09:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1692679c9f4e665f2570c0f7c9479288ae146755047b119388b07e74a20923fe/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880218": [
        {
            "ioc_value": "170.62.130.47:449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-18 09:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1692679c9f4e665f2570c0f7c9479288ae146755047b119388b07e74a20923fe/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1880215": [
        {
            "ioc_value": "cdtrefledor.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:22:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880213": [
        {
            "ioc_value": "bungeedance.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:22:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880211": [
        {
            "ioc_value": "9tj7h8tb.usa-us-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 09:18:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878800": [
        {
            "ioc_value": "8vfkm0gusw.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 09:15:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880175": [
        {
            "ioc_value": "https://mortilostart.com/5qdS7Aq.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 09:15:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880176": [
        {
            "ioc_value": "mortilostart.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 09:15:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880190": [
        {
            "ioc_value": "kegytamo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 09:15:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1880192": [
        {
            "ioc_value": "43.128.113.133:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 09:15:11",
            "last_seen_utc": "2026-08-31 17:50:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880177": [
        {
            "ioc_value": "195.35.37.15:4929",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 09:15:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8395ea90eca49b3f66c2a339ab377348,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880191": [
        {
            "ioc_value": "43.134.49.218:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 09:15:10",
            "last_seen_utc": "2026-08-31 01:15:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1880209": [
        {
            "ioc_value": "110.42.255.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880207": [
        {
            "ioc_value": "156.224.18.21:995",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880208": [
        {
            "ioc_value": "43.139.87.203:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880206": [
        {
            "ioc_value": "38.76.183.197:3478",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880204": [
        {
            "ioc_value": "bungeeyoga.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:02:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880205": [
        {
            "ioc_value": "bungee-training.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:02:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880199": [
        {
            "ioc_value": "vivactis-marketaccess.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:02:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880200": [
        {
            "ioc_value": "traitement-de-la-fibromyalgie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:02:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880201": [
        {
            "ioc_value": "ilayacare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:02:49",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880198": [
        {
            "ioc_value": "didox.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 09:02:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880197": [
        {
            "ioc_value": "y18pd2i2.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 09:00:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880194": [
        {
            "ioc_value": "studio-photo-lausanne.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:52:47",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880195": [
        {
            "ioc_value": "xn--wscherei-leo-gcb.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:52:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880196": [
        {
            "ioc_value": "papillon-schmuck.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:52:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880193": [
        {
            "ioc_value": "gvbbvohe.en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 08:51:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880189": [
        {
            "ioc_value": "alpeninitiative.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:42:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880187": [
        {
            "ioc_value": "garageduvignoble.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:42:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880188": [
        {
            "ioc_value": "srp-immobilienservice.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:42:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880185": [
        {
            "ioc_value": "http://kupzovo.shop:7567/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 08:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1880184": [
        {
            "ioc_value": "http://fasnzect.click:4929/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 08:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1880182": [
        {
            "ioc_value": "https://qorvi.pro/fdab9755.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:28:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880181": [
        {
            "ioc_value": "energisol.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 08:23:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880180": [
        {
            "ioc_value": "85.192.31.214:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 08:22:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1880179": [
        {
            "ioc_value": "costum342183.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 08:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1880178": [
        {
            "ioc_value": "secretpi88122.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 08:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1880174": [
        {
            "ioc_value": "carpet-sail.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 08:08:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880173": [
        {
            "ioc_value": "ajnfqs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-18 08:07:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1880172": [
        {
            "ioc_value": "38.76.183.197:10086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880170": [
        {
            "ioc_value": "38.76.183.197:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880171": [
        {
            "ioc_value": "38.76.183.197:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880169": [
        {
            "ioc_value": "103.236.84.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1880160": [
        {
            "ioc_value": "ytcasinochamp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880161": [
        {
            "ioc_value": "za-zen.nu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880162": [
        {
            "ioc_value": "zavarovanje-osiguranje.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880163": [
        {
            "ioc_value": "zedpoint.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880164": [
        {
            "ioc_value": "zeny50.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880165": [
        {
            "ioc_value": "zgsmtrafficlights.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880166": [
        {
            "ioc_value": "zodiacgemstonesgame.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": "2026-08-26 23:54:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880167": [
        {
            "ioc_value": "zpcou9qu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": "2026-08-20 19:47:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880168": [
        {
            "ioc_value": "zspohranicna.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:22",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880149": [
        {
            "ioc_value": "yellowwest.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": "2026-08-26 18:22:13",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880150": [
        {
            "ioc_value": "yh5lll.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": "2026-08-20 19:47:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880151": [
        {
            "ioc_value": "yildirimutu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880152": [
        {
            "ioc_value": "yolobet.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880153": [
        {
            "ioc_value": "yorcks-kebap.berlin",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": "2026-08-28 17:04:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880154": [
        {
            "ioc_value": "younan-aqar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880155": [
        {
            "ioc_value": "youngbuildingco.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880156": [
        {
            "ioc_value": "yourstudypartner.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880157": [
        {
            "ioc_value": "youssefnaitbelaid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880158": [
        {
            "ioc_value": "ysinchia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880159": [
        {
            "ioc_value": "yt54976.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880140": [
        {
            "ioc_value": "xn--grce-cosmetics-chb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880141": [
        {
            "ioc_value": "xn--hyvinknkeilaveteraanit-54ba.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880142": [
        {
            "ioc_value": "xn--residenciaenespaa-uxb.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": "2026-08-26 21:43:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880143": [
        {
            "ioc_value": "xtmetalparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880144": [
        {
            "ioc_value": "xxiibet.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880145": [
        {
            "ioc_value": "xxoo330.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": "2026-08-23 02:04:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880146": [
        {
            "ioc_value": "yakinikubbq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880147": [
        {
            "ioc_value": "yarasool.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880148": [
        {
            "ioc_value": "ydel.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:30:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880136": [
        {
            "ioc_value": "xebervar.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880137": [
        {
            "ioc_value": "xfbusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880138": [
        {
            "ioc_value": "xiaozhuikan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880139": [
        {
            "ioc_value": "xn--80aaucbciik5d5bzg.xn--p1ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:35",
            "last_seen_utc": "2026-08-27 06:29:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880122": [
        {
            "ioc_value": "winnernet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880123": [
        {
            "ioc_value": "winpokerstar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880124": [
        {
            "ioc_value": "winwayslotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880125": [
        {
            "ioc_value": "winwiseweekly.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880126": [
        {
            "ioc_value": "wizefelas.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880127": [
        {
            "ioc_value": "wizzsale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": "2026-08-26 20:03:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880128": [
        {
            "ioc_value": "wmpmng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880129": [
        {
            "ioc_value": "wmspilhaus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880130": [
        {
            "ioc_value": "womanlife.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880131": [
        {
            "ioc_value": "woodenproduct.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880132": [
        {
            "ioc_value": "wordress.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880133": [
        {
            "ioc_value": "worldbestcasinostories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880134": [
        {
            "ioc_value": "wulanstudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": "2026-08-18 12:38:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880135": [
        {
            "ioc_value": "xasesyfejofok.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880106": [
        {
            "ioc_value": "watfordsecurity.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880107": [
        {
            "ioc_value": "wearorastore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880108": [
        {
            "ioc_value": "web-staging.orchestra-cohort.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": "2026-08-18 15:50:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880109": [
        {
            "ioc_value": "web.baida-engineering.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880110": [
        {
            "ioc_value": "webmoney-ukraine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880111": [
        {
            "ioc_value": "welcome2emirates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880112": [
        {
            "ioc_value": "wellnesspicker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880113": [
        {
            "ioc_value": "westendsm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": "2026-08-20 19:47:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880114": [
        {
            "ioc_value": "westgatecasinolasvegas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880115": [
        {
            "ioc_value": "wetango.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880116": [
        {
            "ioc_value": "weton88buktijp.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880117": [
        {
            "ioc_value": "wfa.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880118": [
        {
            "ioc_value": "wiescribe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880119": [
        {
            "ioc_value": "win2wellness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880120": [
        {
            "ioc_value": "winbettingbonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880121": [
        {
            "ioc_value": "windowspcsecrets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:33",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880092": [
        {
            "ioc_value": "vipssales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880093": [
        {
            "ioc_value": "virginiebrissondiet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880094": [
        {
            "ioc_value": "viridi-realestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880095": [
        {
            "ioc_value": "vistaparaiso.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": "2026-08-26 23:54:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880096": [
        {
            "ioc_value": "vit.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880097": [
        {
            "ioc_value": "vitaplena.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880098": [
        {
            "ioc_value": "vivienmcdermid.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": "2026-08-28 16:54:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880099": [
        {
            "ioc_value": "vntxfe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880100": [
        {
            "ioc_value": "volkssolidaritaet-barnim.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": "2026-08-23 02:04:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880101": [
        {
            "ioc_value": "vortexpropertycare.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880102": [
        {
            "ioc_value": "voyagedams.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880103": [
        {
            "ioc_value": "vsvertriebsundservice.gmbh",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880104": [
        {
            "ioc_value": "vtronika.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": "2026-08-25 16:44:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880105": [
        {
            "ioc_value": "walden-grindestam.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880076": [
        {
            "ioc_value": "verejneakcevpraxi.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880077": [
        {
            "ioc_value": "viabet.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880078": [
        {
            "ioc_value": "viacasino.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880079": [
        {
            "ioc_value": "viaprestige-automobile.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880080": [
        {
            "ioc_value": "videoondemandvergelijken.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880081": [
        {
            "ioc_value": "vie-pratique.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": "2026-08-28 17:04:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880082": [
        {
            "ioc_value": "villablog.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880083": [
        {
            "ioc_value": "villaluxury.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880084": [
        {
            "ioc_value": "villapeople.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880085": [
        {
            "ioc_value": "villapro.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880086": [
        {
            "ioc_value": "villatip.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880087": [
        {
            "ioc_value": "vinhhaphuxuyen.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880088": [
        {
            "ioc_value": "vinyl-place.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880089": [
        {
            "ioc_value": "vipbettingslots.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880090": [
        {
            "ioc_value": "vipbettingworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880091": [
        {
            "ioc_value": "vipcasinocustomer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880060": [
        {
            "ioc_value": "uzuolaidosjums.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880061": [
        {
            "ioc_value": "vaern.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880062": [
        {
            "ioc_value": "vakantieparels.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880063": [
        {
            "ioc_value": "valecel.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880064": [
        {
            "ioc_value": "valeriaspano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880065": [
        {
            "ioc_value": "vanrosmalenhr.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880066": [
        {
            "ioc_value": "vasapelagic.edu.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880067": [
        {
            "ioc_value": "vbu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880068": [
        {
            "ioc_value": "vdipo.co.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880069": [
        {
            "ioc_value": "vecaphone.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880070": [
        {
            "ioc_value": "vectorenergy.ph",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880071": [
        {
            "ioc_value": "veerconstruction.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880072": [
        {
            "ioc_value": "vegaconfection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880073": [
        {
            "ioc_value": "vegasbettingcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880074": [
        {
            "ioc_value": "vegasbettinghouseonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880075": [
        {
            "ioc_value": "venus.spacejunk.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:30",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880044": [
        {
            "ioc_value": "uc6anq6b.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880045": [
        {
            "ioc_value": "udsantabarbara.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880046": [
        {
            "ioc_value": "ufabetattered.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880047": [
        {
            "ioc_value": "ultdpower.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880048": [
        {
            "ioc_value": "unclejunfilms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880049": [
        {
            "ioc_value": "ungkehh.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880050": [
        {
            "ioc_value": "univers-de-la-deco.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880051": [
        {
            "ioc_value": "upbikestore.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880052": [
        {
            "ioc_value": "upmc.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880053": [
        {
            "ioc_value": "urbanarch.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880054": [
        {
            "ioc_value": "urbandigestx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880055": [
        {
            "ioc_value": "urjaafitness.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880056": [
        {
            "ioc_value": "ustremblaytt.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880057": [
        {
            "ioc_value": "usu77.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880058": [
        {
            "ioc_value": "usu777.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880059": [
        {
            "ioc_value": "utshobit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880026": [
        {
            "ioc_value": "trendebook.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880027": [
        {
            "ioc_value": "trendpit.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880028": [
        {
            "ioc_value": "treppenlifte.staging-websites.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880029": [
        {
            "ioc_value": "trjoyinternationalschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880030": [
        {
            "ioc_value": "truban.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880031": [
        {
            "ioc_value": "trueaudiomiami.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880032": [
        {
            "ioc_value": "trungnguyendesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880033": [
        {
            "ioc_value": "truroyalconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880034": [
        {
            "ioc_value": "trustedonlinecasino77.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880035": [
        {
            "ioc_value": "trustedslotcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880036": [
        {
            "ioc_value": "trusttoner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880037": [
        {
            "ioc_value": "ttttm.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880038": [
        {
            "ioc_value": "tuhogarestrella.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880039": [
        {
            "ioc_value": "tunipellets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880040": [
        {
            "ioc_value": "tunisie-connect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": "2026-08-29 18:51:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880041": [
        {
            "ioc_value": "turismomeridiano.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880042": [
        {
            "ioc_value": "tvoficial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880043": [
        {
            "ioc_value": "uaejackpotcasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880010": [
        {
            "ioc_value": "topcasinohouseonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880011": [
        {
            "ioc_value": "topjackpotcasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880012": [
        {
            "ioc_value": "topluxuryapartments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880013": [
        {
            "ioc_value": "topzen.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880014": [
        {
            "ioc_value": "tornadoalleyweather.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880015": [
        {
            "ioc_value": "tosuninsaat.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-28 16:02:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880016": [
        {
            "ioc_value": "totoro-typhoon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880017": [
        {
            "ioc_value": "totoslotonline777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880018": [
        {
            "ioc_value": "towerdrivedevelopment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880019": [
        {
            "ioc_value": "trail-camera.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-26 19:34:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880020": [
        {
            "ioc_value": "transcriptdove.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880021": [
        {
            "ioc_value": "trattoria-peretti.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880022": [
        {
            "ioc_value": "travaux-decoration-maison.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": "2026-08-25 18:59:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880023": [
        {
            "ioc_value": "travelcampground.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880024": [
        {
            "ioc_value": "treinamentorio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880025": [
        {
            "ioc_value": "trem.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879993": [
        {
            "ioc_value": "thimargroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879994": [
        {
            "ioc_value": "thomaslecarrou.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879995": [
        {
            "ioc_value": "threebrothersandsiding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879996": [
        {
            "ioc_value": "ticconsulting.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879997": [
        {
            "ioc_value": "tictac-project.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879998": [
        {
            "ioc_value": "tiengvangfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879999": [
        {
            "ioc_value": "tipnet.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880000": [
        {
            "ioc_value": "tmi64.ovh",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880001": [
        {
            "ioc_value": "tnproje.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880002": [
        {
            "ioc_value": "tnu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880003": [
        {
            "ioc_value": "togelonlinegames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880004": [
        {
            "ioc_value": "tokochas.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880005": [
        {
            "ioc_value": "tokododel.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880006": [
        {
            "ioc_value": "tokoegypt.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880007": [
        {
            "ioc_value": "tokomurce.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880008": [
        {
            "ioc_value": "tokoseeia.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1880009": [
        {
            "ioc_value": "tontufashion.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879977": [
        {
            "ioc_value": "theexperiences.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879978": [
        {
            "ioc_value": "thegioigiatsay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879979": [
        {
            "ioc_value": "thegreenroomdallas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879980": [
        {
            "ioc_value": "thegsmspride.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879981": [
        {
            "ioc_value": "thehotellifediaries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879982": [
        {
            "ioc_value": "thekingofdealer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879983": [
        {
            "ioc_value": "thelyonnaise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879984": [
        {
            "ioc_value": "theonlinepokertournament.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879985": [
        {
            "ioc_value": "theparknonthaburi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": "2026-08-26 17:48:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879986": [
        {
            "ioc_value": "theplumbingbusiness.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879987": [
        {
            "ioc_value": "thesuncamping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879988": [
        {
            "ioc_value": "thesuryatravels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879989": [
        {
            "ioc_value": "thetogelonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879990": [
        {
            "ioc_value": "theuniversesdaughters.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879991": [
        {
            "ioc_value": "thewadi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879992": [
        {
            "ioc_value": "theworldofonlinecasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879974": [
        {
            "ioc_value": "thecornerstorepc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879975": [
        {
            "ioc_value": "thedevonshireteaguide.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879976": [
        {
            "ioc_value": "thedowntown.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:28:24",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879962": [
        {
            "ioc_value": "terrecorallo.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879963": [
        {
            "ioc_value": "testedlife.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879964": [
        {
            "ioc_value": "texaspokergamesbonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879965": [
        {
            "ioc_value": "textverkostung.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879966": [
        {
            "ioc_value": "tgfan.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879967": [
        {
            "ioc_value": "thaireportchannel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879968": [
        {
            "ioc_value": "theaffiliatehub.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": "2026-08-28 16:02:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879969": [
        {
            "ioc_value": "thebabyboomerpartyband.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879970": [
        {
            "ioc_value": "thebandarbola.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879971": [
        {
            "ioc_value": "thebridgebln.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879972": [
        {
            "ioc_value": "thecasinohouse.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879973": [
        {
            "ioc_value": "thecompanyscan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879945": [
        {
            "ioc_value": "taxiandorra.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879946": [
        {
            "ioc_value": "taximurciamercedes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879947": [
        {
            "ioc_value": "tbu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879948": [
        {
            "ioc_value": "team-aura.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879949": [
        {
            "ioc_value": "teameli.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879950": [
        {
            "ioc_value": "teamextreme.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879951": [
        {
            "ioc_value": "techcloudds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879952": [
        {
            "ioc_value": "techlogic.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879953": [
        {
            "ioc_value": "techonlinebetting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879954": [
        {
            "ioc_value": "tecnovacenter.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879955": [
        {
            "ioc_value": "tee.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879956": [
        {
            "ioc_value": "templeslotgacor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879957": [
        {
            "ioc_value": "tencowtees.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879958": [
        {
            "ioc_value": "tepkho.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879959": [
        {
            "ioc_value": "terang123.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879960": [
        {
            "ioc_value": "terangasenegalawards.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879961": [
        {
            "ioc_value": "terrangochmiljo.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:37",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879928": [
        {
            "ioc_value": "surpyaluminium.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879929": [
        {
            "ioc_value": "suzukislotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879930": [
        {
            "ioc_value": "svnhostingcomparison.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879931": [
        {
            "ioc_value": "svrbk.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879932": [
        {
            "ioc_value": "svtelindia.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879933": [
        {
            "ioc_value": "swanvalleyelectrical.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879934": [
        {
            "ioc_value": "sycomoreministries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": "2026-08-23 18:38:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879935": [
        {
            "ioc_value": "synergific.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879936": [
        {
            "ioc_value": "synergysecurity.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879937": [
        {
            "ioc_value": "szallas.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": "2026-08-27 05:28:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879938": [
        {
            "ioc_value": "szduchuan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": "2026-08-26 19:03:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879939": [
        {
            "ioc_value": "tabesh.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879940": [
        {
            "ioc_value": "taisaafiune.med.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": "2026-08-18 14:25:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879941": [
        {
            "ioc_value": "tajemniczyogrod.waw.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879942": [
        {
            "ioc_value": "takeaharishow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879943": [
        {
            "ioc_value": "tallerespachon.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879944": [
        {
            "ioc_value": "tamimfashionzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879911": [
        {
            "ioc_value": "studiodesury.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879912": [
        {
            "ioc_value": "studiolegaleinsarda.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879913": [
        {
            "ioc_value": "studiomaracuja.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879914": [
        {
            "ioc_value": "studiomodalf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879915": [
        {
            "ioc_value": "studioofficesutrecht.objectwebsite.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": "2026-08-24 11:17:26",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879916": [
        {
            "ioc_value": "studiorael.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879917": [
        {
            "ioc_value": "studiosonja.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879918": [
        {
            "ioc_value": "studycampus.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879919": [
        {
            "ioc_value": "stueberl.co.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879920": [
        {
            "ioc_value": "sudanfacts.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879921": [
        {
            "ioc_value": "superbpaper.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879922": [
        {
            "ioc_value": "supercasinoclubs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879923": [
        {
            "ioc_value": "supercasinogamblinghouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879924": [
        {
            "ioc_value": "support.relexa.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879925": [
        {
            "ioc_value": "supremedetailingca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879926": [
        {
            "ioc_value": "suraakademi.org.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": "2026-08-18 15:50:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879927": [
        {
            "ioc_value": "surinamegatewayservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879892": [
        {
            "ioc_value": "sportsbettinghouses.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879893": [
        {
            "ioc_value": "spproc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879894": [
        {
            "ioc_value": "spsolution.com.sa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879895": [
        {
            "ioc_value": "srilankasenaniholdings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879896": [
        {
            "ioc_value": "sse.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879897": [
        {
            "ioc_value": "starateljstvosumadijske.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879898": [
        {
            "ioc_value": "starjoker77.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879899": [
        {
            "ioc_value": "starkecontabilidade.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879900": [
        {
            "ioc_value": "start.ubiqu.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879901": [
        {
            "ioc_value": "stateofwellness.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879902": [
        {
            "ioc_value": "stc90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879903": [
        {
            "ioc_value": "stcconsulting.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": "2026-08-25 18:49:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879904": [
        {
            "ioc_value": "stentufft.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": "2026-08-25 16:44:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879905": [
        {
            "ioc_value": "sternerealtors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879906": [
        {
            "ioc_value": "stijliekids.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879907": [
        {
            "ioc_value": "stillalovelylifebyrachel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879908": [
        {
            "ioc_value": "stonetopsdirect.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879909": [
        {
            "ioc_value": "storinnsats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879910": [
        {
            "ioc_value": "studioanafreitas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879875": [
        {
            "ioc_value": "smsgeezer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": "2026-08-25 17:19:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879876": [
        {
            "ioc_value": "sofa1990.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879877": [
        {
            "ioc_value": "sofastslotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879878": [
        {
            "ioc_value": "softhires.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879879": [
        {
            "ioc_value": "solar-ascender.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879880": [
        {
            "ioc_value": "solar4bizpros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879881": [
        {
            "ioc_value": "sopropertyservices.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879882": [
        {
            "ioc_value": "sorflaten.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879883": [
        {
            "ioc_value": "sourcedo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879884": [
        {
            "ioc_value": "southcoastcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879885": [
        {
            "ioc_value": "soygema.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879886": [
        {
            "ioc_value": "spartan99.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879887": [
        {
            "ioc_value": "specialistes.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879888": [
        {
            "ioc_value": "speedyboiler.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879889": [
        {
            "ioc_value": "spincitycasinolive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879890": [
        {
            "ioc_value": "spinmasterslotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879891": [
        {
            "ioc_value": "sportiq.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:33",
            "last_seen_utc": "2026-08-25 17:59:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879859": [
        {
            "ioc_value": "slavn.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": "2026-08-25 16:44:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879860": [
        {
            "ioc_value": "slotcasinoserviceonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879861": [
        {
            "ioc_value": "slotgacorstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879862": [
        {
            "ioc_value": "slotgacorworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879863": [
        {
            "ioc_value": "slotjackpotdesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879864": [
        {
            "ioc_value": "slotonlinemachinemania.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879865": [
        {
            "ioc_value": "slotsagachamp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879866": [
        {
            "ioc_value": "slotsdesignclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879867": [
        {
            "ioc_value": "slotsgamblingclubhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879868": [
        {
            "ioc_value": "slotsmachinesgift.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879869": [
        {
            "ioc_value": "slotsoasisonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879870": [
        {
            "ioc_value": "sma.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879871": [
        {
            "ioc_value": "smartchoicesupport.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879872": [
        {
            "ioc_value": "smc.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879873": [
        {
            "ioc_value": "smiledesigneg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879874": [
        {
            "ioc_value": "smoothconfess.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879845": [
        {
            "ioc_value": "shopeaglehomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879846": [
        {
            "ioc_value": "showballsports.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879847": [
        {
            "ioc_value": "shreeenflamex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879848": [
        {
            "ioc_value": "shyshirts.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879849": [
        {
            "ioc_value": "sicilycountry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": "2026-08-23 02:04:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879850": [
        {
            "ioc_value": "silviachiola.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879851": [
        {
            "ioc_value": "silviaharmai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879852": [
        {
            "ioc_value": "simonesidor.arq.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879853": [
        {
            "ioc_value": "simpleslotmachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879854": [
        {
            "ioc_value": "simpresa.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879855": [
        {
            "ioc_value": "sinorte.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879856": [
        {
            "ioc_value": "situsslotgacormachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879857": [
        {
            "ioc_value": "sjty903.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879858": [
        {
            "ioc_value": "skyybanks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:31",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879828": [
        {
            "ioc_value": "semaconnection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879829": [
        {
            "ioc_value": "seminarioseafpo.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879830": [
        {
            "ioc_value": "sempoa88.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879831": [
        {
            "ioc_value": "sen4d.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879832": [
        {
            "ioc_value": "senar.com.sg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879833": [
        {
            "ioc_value": "senhoradopano.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879834": [
        {
            "ioc_value": "service-en-ligne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879835": [
        {
            "ioc_value": "servicioinnova.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879836": [
        {
            "ioc_value": "sesu.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879837": [
        {
            "ioc_value": "sfideholding.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879838": [
        {
            "ioc_value": "sfszach.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879839": [
        {
            "ioc_value": "shaileshmudgal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879840": [
        {
            "ioc_value": "sheffieldra.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879841": [
        {
            "ioc_value": "shellplux.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879842": [
        {
            "ioc_value": "shereegardnercogan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879843": [
        {
            "ioc_value": "shesellshotels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": "2026-08-23 18:38:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879844": [
        {
            "ioc_value": "shiblymarketing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879812": [
        {
            "ioc_value": "sappec-dz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879813": [
        {
            "ioc_value": "sarbanfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879814": [
        {
            "ioc_value": "saveproduction.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879815": [
        {
            "ioc_value": "sbaky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": "2026-08-26 18:42:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879816": [
        {
            "ioc_value": "sbc.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879817": [
        {
            "ioc_value": "sbsarchitectes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879818": [
        {
            "ioc_value": "schrijfhuis.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879819": [
        {
            "ioc_value": "sciberrasshuttles.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879820": [
        {
            "ioc_value": "scuoladiequitazionemicheletto.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879821": [
        {
            "ioc_value": "sd-fk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879822": [
        {
            "ioc_value": "sdmitivenur.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": "2026-08-23 18:38:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879823": [
        {
            "ioc_value": "seathekeys.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879824": [
        {
            "ioc_value": "seatskids.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879825": [
        {
            "ioc_value": "secretdardeche.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879826": [
        {
            "ioc_value": "seeindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879827": [
        {
            "ioc_value": "sellersvoice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879810": [
        {
            "ioc_value": "santamariaambiental.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879811": [
        {
            "ioc_value": "santingmode.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:27:28",
            "last_seen_utc": "2026-08-23 18:38:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879809": [
        {
            "ioc_value": "http://fasnzect.click:4929/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 07:26:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1879805": [
        {
            "ioc_value": "sandarienconsultingllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879806": [
        {
            "ioc_value": "sandwmetals.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879807": [
        {
            "ioc_value": "sankofaguesthouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879808": [
        {
            "ioc_value": "santahildegardaysumundo.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879787": [
        {
            "ioc_value": "royalslotonline888.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879788": [
        {
            "ioc_value": "rplcertified.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879789": [
        {
            "ioc_value": "rrla.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879790": [
        {
            "ioc_value": "rssolutions68.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879791": [
        {
            "ioc_value": "rsv-schwelentrup.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879792": [
        {
            "ioc_value": "rtpk-karlstad.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879793": [
        {
            "ioc_value": "rtpliveslotworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879794": [
        {
            "ioc_value": "rubiodolar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879795": [
        {
            "ioc_value": "rxvmd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-20 19:47:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879796": [
        {
            "ioc_value": "safeharbortsd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879797": [
        {
            "ioc_value": "safetrust.ph",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-23 18:38:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879798": [
        {
            "ioc_value": "saframeta.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879799": [
        {
            "ioc_value": "saggiasibilla.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-26 17:48:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879800": [
        {
            "ioc_value": "saintmichaelandallangels.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-25 17:29:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879801": [
        {
            "ioc_value": "salaourense.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-24 11:07:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879802": [
        {
            "ioc_value": "salvafamilypro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879803": [
        {
            "ioc_value": "salvatorepesce.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879804": [
        {
            "ioc_value": "sanchopanza.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:06",
            "last_seen_utc": "2026-08-25 17:29:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879770": [
        {
            "ioc_value": "ricasolire.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879771": [
        {
            "ioc_value": "rigolonclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879772": [
        {
            "ioc_value": "rivieramultimedia.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879773": [
        {
            "ioc_value": "riyanwakwaw.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879774": [
        {
            "ioc_value": "rna.richnguyen.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879775": [
        {
            "ioc_value": "roakus-e.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879776": [
        {
            "ioc_value": "rocketbatteries.co.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879777": [
        {
            "ioc_value": "rokomarishaad.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879778": [
        {
            "ioc_value": "romansshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879779": [
        {
            "ioc_value": "romatorres.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879780": [
        {
            "ioc_value": "rondalladecarcaixent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879781": [
        {
            "ioc_value": "rostislavflek.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879782": [
        {
            "ioc_value": "roulettelivegames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879783": [
        {
            "ioc_value": "royalclubcasinobonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879784": [
        {
            "ioc_value": "royalejackpot77.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879785": [
        {
            "ioc_value": "royalgamingworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879786": [
        {
            "ioc_value": "royallondonville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879751": [
        {
            "ioc_value": "redgram.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": "2026-08-23 18:38:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879752": [
        {
            "ioc_value": "redneckrave.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879753": [
        {
            "ioc_value": "redsmart.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879754": [
        {
            "ioc_value": "refrigeracionalva.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": "2026-08-23 02:04:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879755": [
        {
            "ioc_value": "rejestracja-pojazdow.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879756": [
        {
            "ioc_value": "replacementwindowstempe.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879757": [
        {
            "ioc_value": "researchgatmail.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879758": [
        {
            "ioc_value": "residenzaelettiva.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879759": [
        {
            "ioc_value": "reslotsonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879760": [
        {
            "ioc_value": "restaurantlephileasfogg-civrac.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879761": [
        {
            "ioc_value": "restaurooperedartetorino.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879762": [
        {
            "ioc_value": "reutercaminhoes.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879763": [
        {
            "ioc_value": "reverselive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879764": [
        {
            "ioc_value": "reviewmyhousevalue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879765": [
        {
            "ioc_value": "rex-tours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": "2026-08-25 17:29:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879766": [
        {
            "ioc_value": "rgconsult.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879767": [
        {
            "ioc_value": "rhemachapel.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879768": [
        {
            "ioc_value": "riad-darcouscous.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": "2026-08-26 18:22:13",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879769": [
        {
            "ioc_value": "ricambiautogenny.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879735": [
        {
            "ioc_value": "quickline.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879736": [
        {
            "ioc_value": "qwertyluxury.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879737": [
        {
            "ioc_value": "rachels-blackcabtours.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879738": [
        {
            "ioc_value": "raden98.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879739": [
        {
            "ioc_value": "rafaelanesto.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879740": [
        {
            "ioc_value": "raihanstore.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879741": [
        {
            "ioc_value": "rajacasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879742": [
        {
            "ioc_value": "ralore.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879743": [
        {
            "ioc_value": "raouldihal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879744": [
        {
            "ioc_value": "ravikapadia.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879745": [
        {
            "ioc_value": "razrabotki.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879746": [
        {
            "ioc_value": "rd-peinture83.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879747": [
        {
            "ioc_value": "readers2leaders.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": "2026-08-25 16:30:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879748": [
        {
            "ioc_value": "realmaq.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879749": [
        {
            "ioc_value": "rebandarbola.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879750": [
        {
            "ioc_value": "recicladeco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879729": [
        {
            "ioc_value": "qtu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879730": [
        {
            "ioc_value": "quagga.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:02",
            "last_seen_utc": "2026-08-25 17:49:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879731": [
        {
            "ioc_value": "qualityhomecleaner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879732": [
        {
            "ioc_value": "quenix.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879733": [
        {
            "ioc_value": "questions-travaux.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:02",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879734": [
        {
            "ioc_value": "questionsdactualite18.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:02",
            "last_seen_utc": "2026-08-26 18:12:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879726": [
        {
            "ioc_value": "qfslogistics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879727": [
        {
            "ioc_value": "qlwwxx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879728": [
        {
            "ioc_value": "qrjxween.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879708": [
        {
            "ioc_value": "projects-inn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879709": [
        {
            "ioc_value": "promitheas.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879710": [
        {
            "ioc_value": "promotii-scaune.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879711": [
        {
            "ioc_value": "prontoclinicaortopedica.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879712": [
        {
            "ioc_value": "propertyinvestmenttoolbox.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879713": [
        {
            "ioc_value": "proslotgacor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879714": [
        {
            "ioc_value": "proslotsmachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879715": [
        {
            "ioc_value": "przedszkole-happynest.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": "2026-08-26 21:54:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879716": [
        {
            "ioc_value": "przewozymagnum.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879717": [
        {
            "ioc_value": "ptengineering-rdc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879718": [
        {
            "ioc_value": "puae.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879719": [
        {
            "ioc_value": "pubx.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879720": [
        {
            "ioc_value": "pularihomoeopathichospital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879721": [
        {
            "ioc_value": "pulserascolores.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879722": [
        {
            "ioc_value": "punbet999.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879723": [
        {
            "ioc_value": "purewateridaho.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879724": [
        {
            "ioc_value": "purplesoul.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879725": [
        {
            "ioc_value": "qea.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879690": [
        {
            "ioc_value": "praktijkbriek.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-18 16:16:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879691": [
        {
            "ioc_value": "prayoskiosk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-18 16:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879692": [
        {
            "ioc_value": "preapuesta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-18 16:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879693": [
        {
            "ioc_value": "premident.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-18 21:20:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879694": [
        {
            "ioc_value": "premierchoicemortgage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-23 18:38:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879695": [
        {
            "ioc_value": "prenato31.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879696": [
        {
            "ioc_value": "prestigesmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879697": [
        {
            "ioc_value": "primecasinomachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879698": [
        {
            "ioc_value": "primes.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879699": [
        {
            "ioc_value": "primetaskdigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879700": [
        {
            "ioc_value": "princessnailsandspa.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879701": [
        {
            "ioc_value": "proba.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879702": [
        {
            "ioc_value": "probhabshali.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-26 18:32:15",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879703": [
        {
            "ioc_value": "problemas-de-filtro-de-particulas.pt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": "2026-08-23 18:38:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879704": [
        {
            "ioc_value": "proces.in.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879705": [
        {
            "ioc_value": "proelec60.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879706": [
        {
            "ioc_value": "profisolar.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879707": [
        {
            "ioc_value": "programapeace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879672": [
        {
            "ioc_value": "playslotonlinedesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:16:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879673": [
        {
            "ioc_value": "playslotonlinehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879674": [
        {
            "ioc_value": "playunlimitedonlinecasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879675": [
        {
            "ioc_value": "plowexports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879676": [
        {
            "ioc_value": "plural.tec.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879677": [
        {
            "ioc_value": "pm-support.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879678": [
        {
            "ioc_value": "pocketpenjing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879679": [
        {
            "ioc_value": "pokerceo.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:00:30",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879680": [
        {
            "ioc_value": "pokerparadiseonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879681": [
        {
            "ioc_value": "pokerstargames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879682": [
        {
            "ioc_value": "pole-g.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:00:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879683": [
        {
            "ioc_value": "popularonlinecasinogames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879684": [
        {
            "ioc_value": "pos-exklusiv.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879685": [
        {
            "ioc_value": "pousadacampinas.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879686": [
        {
            "ioc_value": "powercasinojackpot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:00:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879687": [
        {
            "ioc_value": "powerlung.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 21:40:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879688": [
        {
            "ioc_value": "pps-ace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879689": [
        {
            "ioc_value": "praguebikefest.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:58",
            "last_seen_utc": "2026-08-18 16:00:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879655": [
        {
            "ioc_value": "piensosdiva.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:06:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879656": [
        {
            "ioc_value": "pierre-philosophale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879657": [
        {
            "ioc_value": "pierrejoinery.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 21:40:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879658": [
        {
            "ioc_value": "pillarbusinesscoaching.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:00:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879659": [
        {
            "ioc_value": "pinecity.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 21:40:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879660": [
        {
            "ioc_value": "piramis.co.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879661": [
        {
            "ioc_value": "pishgamansabt.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:00:32",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879662": [
        {
            "ioc_value": "plaathuiskamer.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:00:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879663": [
        {
            "ioc_value": "planfinder.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:16:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879664": [
        {
            "ioc_value": "planstopermit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 21:40:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879665": [
        {
            "ioc_value": "play389.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:00:32",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879666": [
        {
            "ioc_value": "playduel.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:00:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879667": [
        {
            "ioc_value": "playfan.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:00:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879668": [
        {
            "ioc_value": "playluckycasino77.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879669": [
        {
            "ioc_value": "playonlineroulettehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879670": [
        {
            "ioc_value": "playpokeronlineway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:16:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879671": [
        {
            "ioc_value": "playslotcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:57",
            "last_seen_utc": "2026-08-18 16:06:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879641": [
        {
            "ioc_value": "pdfcashcow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 15:45:25",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879642": [
        {
            "ioc_value": "pdrhs.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 15:45:24",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879643": [
        {
            "ioc_value": "pecunio.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 16:00:30",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879644": [
        {
            "ioc_value": "pedicurepraktijkmillingen.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 16:00:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879645": [
        {
            "ioc_value": "perfectlylavishdesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879646": [
        {
            "ioc_value": "petathome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 16:00:32",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879647": [
        {
            "ioc_value": "petrotoday.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879648": [
        {
            "ioc_value": "petsotter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879649": [
        {
            "ioc_value": "pfseminars.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 16:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879650": [
        {
            "ioc_value": "phfcl.org.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 22:40:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879651": [
        {
            "ioc_value": "philippineshairtransplant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 16:00:32",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879652": [
        {
            "ioc_value": "phuquocbienngoc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879653": [
        {
            "ioc_value": "pibmesquita.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-18 16:00:30",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879654": [
        {
            "ioc_value": "picosbelmonte.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:23:56",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879630": [
        {
            "ioc_value": "parodontie.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-19 00:56:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879631": [
        {
            "ioc_value": "paroissevaldor.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-18 15:45:26",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879632": [
        {
            "ioc_value": "paroquiadagloria.org.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879633": [
        {
            "ioc_value": "parquedelaenergia.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-18 15:45:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879634": [
        {
            "ioc_value": "partner.movam.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-18 23:00:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879635": [
        {
            "ioc_value": "pastadellasalute.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879636": [
        {
            "ioc_value": "pateriyaconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879637": [
        {
            "ioc_value": "pathofpurity.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-23 18:38:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879638": [
        {
            "ioc_value": "patrickhelouarchitects.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": "2026-08-18 15:45:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879639": [
        {
            "ioc_value": "pbs.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879640": [
        {
            "ioc_value": "pbu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879614": [
        {
            "ioc_value": "orthodoxchurchsouthsudan.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-18 21:40:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879615": [
        {
            "ioc_value": "ostrajkostamenkovic.edu.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879616": [
        {
            "ioc_value": "ourcasinolife.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-18 15:45:25",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879617": [
        {
            "ioc_value": "outlookmagazine.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879618": [
        {
            "ioc_value": "owlord.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879619": [
        {
            "ioc_value": "ozlerticaret.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-19 00:56:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879620": [
        {
            "ioc_value": "ozonemall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879621": [
        {
            "ioc_value": "p2dsgn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-18 15:45:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879622": [
        {
            "ioc_value": "pacifichealthagency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-18 22:40:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879623": [
        {
            "ioc_value": "palacegagnant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-18 15:45:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879624": [
        {
            "ioc_value": "palko.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879625": [
        {
            "ioc_value": "panjatpoin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-18 15:45:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879626": [
        {
            "ioc_value": "pantu.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879627": [
        {
            "ioc_value": "papagiuseppecafe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-25 16:29:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879628": [
        {
            "ioc_value": "papercafe.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-23 02:04:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879629": [
        {
            "ioc_value": "paperval.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:39",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879598": [
        {
            "ioc_value": "oneshivangi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 21:50:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879599": [
        {
            "ioc_value": "onlinebettingmusic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:24",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879600": [
        {
            "ioc_value": "onlinebettingtv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:25",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879601": [
        {
            "ioc_value": "onlinecasinobonus888.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879602": [
        {
            "ioc_value": "onlinecasinohostle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:50:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879603": [
        {
            "ioc_value": "onlinegamblingshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:25",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879604": [
        {
            "ioc_value": "onlinelivecasinohome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879605": [
        {
            "ioc_value": "onlineslotbettingworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879606": [
        {
            "ioc_value": "onlineslothome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:24",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879607": [
        {
            "ioc_value": "opengstore.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879608": [
        {
            "ioc_value": "openhousemakers.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879609": [
        {
            "ioc_value": "optimeg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879610": [
        {
            "ioc_value": "oracion.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 21:50:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879611": [
        {
            "ioc_value": "orale-medizin-hannover.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-18 15:45:25",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879612": [
        {
            "ioc_value": "oranjestede.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879613": [
        {
            "ioc_value": "orecdn.edu.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879585": [
        {
            "ioc_value": "ofrenchtacos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 15:31:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879586": [
        {
            "ioc_value": "oieqcert.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 15:45:26",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879587": [
        {
            "ioc_value": "oikotimes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879588": [
        {
            "ioc_value": "okplusrayong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 21:50:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879589": [
        {
            "ioc_value": "okuloncesietkinlikzamani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879590": [
        {
            "ioc_value": "olilas.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 22:40:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879591": [
        {
            "ioc_value": "oltan-vet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879592": [
        {
            "ioc_value": "oluyelemercyfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 21:50:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879593": [
        {
            "ioc_value": "olx777.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 15:45:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879594": [
        {
            "ioc_value": "olxcasinogames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 15:45:26",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879595": [
        {
            "ioc_value": "olzvelnebulizer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-19 00:56:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879596": [
        {
            "ioc_value": "omeugestor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": "2026-08-18 21:40:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879597": [
        {
            "ioc_value": "omleurope.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879568": [
        {
            "ioc_value": "northwestingeneralbuildingsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:31:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879569": [
        {
            "ioc_value": "nossocertificado.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:31:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879570": [
        {
            "ioc_value": "novassur.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879571": [
        {
            "ioc_value": "noyonautomobile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:36:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879572": [
        {
            "ioc_value": "nsplsteel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879573": [
        {
            "ioc_value": "ntu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879574": [
        {
            "ioc_value": "nukbyyash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 22:40:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879575": [
        {
            "ioc_value": "nxpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-28 10:53:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879576": [
        {
            "ioc_value": "ny-therapy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:31:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879577": [
        {
            "ioc_value": "oasisfunding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879578": [
        {
            "ioc_value": "occfacility.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-25 16:44:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879579": [
        {
            "ioc_value": "oceanbix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879580": [
        {
            "ioc_value": "oddscountry.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:31:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879581": [
        {
            "ioc_value": "oddsflow.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:31:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879582": [
        {
            "ioc_value": "oddsleague.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:31:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879583": [
        {
            "ioc_value": "oddsplus.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 22:40:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879584": [
        {
            "ioc_value": "odisseo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:36",
            "last_seen_utc": "2026-08-18 15:21:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879551": [
        {
            "ioc_value": "newsteerth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879552": [
        {
            "ioc_value": "nextvia.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879553": [
        {
            "ioc_value": "nexusonlineslot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879554": [
        {
            "ioc_value": "nhaxis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:36:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879555": [
        {
            "ioc_value": "nice-imprim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:21:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879556": [
        {
            "ioc_value": "nicolas-ploumpidis-realisateur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:21:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879557": [
        {
            "ioc_value": "nicolekayrealty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:36:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879558": [
        {
            "ioc_value": "nihilo-webdesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879559": [
        {
            "ioc_value": "nikameh.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879560": [
        {
            "ioc_value": "nilaiku.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879561": [
        {
            "ioc_value": "nilyvillagelafoa.nc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879562": [
        {
            "ioc_value": "nineengenharia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879563": [
        {
            "ioc_value": "nithyanandamayiswami.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879564": [
        {
            "ioc_value": "nknonlineshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-23 18:38:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879565": [
        {
            "ioc_value": "no-squat-91.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879566": [
        {
            "ioc_value": "nomadesasturies.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879567": [
        {
            "ioc_value": "norestair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:35",
            "last_seen_utc": "2026-08-18 15:31:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879534": [
        {
            "ioc_value": "nasstel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879535": [
        {
            "ioc_value": "natalnine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:36:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879536": [
        {
            "ioc_value": "naughtyslotbonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879537": [
        {
            "ioc_value": "naukaidrustvo.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:16:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879538": [
        {
            "ioc_value": "navdeepshipping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879539": [
        {
            "ioc_value": "nazale.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-19 00:56:30",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879540": [
        {
            "ioc_value": "nazca40.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-23 18:38:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879541": [
        {
            "ioc_value": "nck11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:36:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879542": [
        {
            "ioc_value": "neogame.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 22:40:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879543": [
        {
            "ioc_value": "neotv.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879544": [
        {
            "ioc_value": "netbonus.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879545": [
        {
            "ioc_value": "netrice.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879546": [
        {
            "ioc_value": "neurofuture.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:16:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879547": [
        {
            "ioc_value": "newcasinowinstar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879548": [
        {
            "ioc_value": "newfather.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879549": [
        {
            "ioc_value": "news.finda.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879550": [
        {
            "ioc_value": "newsitemanager.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:34",
            "last_seen_utc": "2026-08-18 15:31:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879517": [
        {
            "ioc_value": "muj-koutek.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879518": [
        {
            "ioc_value": "multibygg.nu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-19 00:56:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879519": [
        {
            "ioc_value": "multyshades.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-24 00:44:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879520": [
        {
            "ioc_value": "muscleupmeals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879521": [
        {
            "ioc_value": "musicalalfa.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879522": [
        {
            "ioc_value": "mutiara96.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-18 14:40:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879523": [
        {
            "ioc_value": "muziek247.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-18 14:40:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879524": [
        {
            "ioc_value": "myfox9online.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879525": [
        {
            "ioc_value": "myitech.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-18 14:40:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879526": [
        {
            "ioc_value": "mymindbalance.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879527": [
        {
            "ioc_value": "myyogi.yoga",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879528": [
        {
            "ioc_value": "nadiaalexanderkhan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879529": [
        {
            "ioc_value": "naeemfoundation.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879530": [
        {
            "ioc_value": "naera.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879531": [
        {
            "ioc_value": "nancypreethavarshini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-18 15:01:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879532": [
        {
            "ioc_value": "naredcokarnataka.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-18 14:41:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879533": [
        {
            "ioc_value": "nasadomena.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:33",
            "last_seen_utc": "2026-08-18 14:40:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879502": [
        {
            "ioc_value": "mosaique-ingenierie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 14:40:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879503": [
        {
            "ioc_value": "motivationandlove.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879504": [
        {
            "ioc_value": "motordefect.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879505": [
        {
            "ioc_value": "mototaxiparisiens.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879506": [
        {
            "ioc_value": "moviezgo.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 14:40:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879507": [
        {
            "ioc_value": "mp2022.pzszach.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879508": [
        {
            "ioc_value": "mphamvu-now.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 14:51:02",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879509": [
        {
            "ioc_value": "mppso.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 14:40:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879510": [
        {
            "ioc_value": "mpropertyphuket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 23:00:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879511": [
        {
            "ioc_value": "mpu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879512": [
        {
            "ioc_value": "mrgame.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 14:51:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879513": [
        {
            "ioc_value": "ms-chauffeur-annecy.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879514": [
        {
            "ioc_value": "mtm-office.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879515": [
        {
            "ioc_value": "mubat.audioguides.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879516": [
        {
            "ioc_value": "mugargastrobar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:32",
            "last_seen_utc": "2026-08-18 14:51:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879483": [
        {
            "ioc_value": "miramerch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:25:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879484": [
        {
            "ioc_value": "mirand.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:25:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879485": [
        {
            "ioc_value": "missbenineurope.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-19 01:06:32",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879486": [
        {
            "ioc_value": "misscasinouniverse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 15:01:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879487": [
        {
            "ioc_value": "mitglieder.die-direktkontakter.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-26 17:48:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879488": [
        {
            "ioc_value": "mkishmish.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879489": [
        {
            "ioc_value": "mko88.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:41:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879490": [
        {
            "ioc_value": "mlns-guvernu.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879491": [
        {
            "ioc_value": "mobilier.e-terrasses.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879492": [
        {
            "ioc_value": "modaloca.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879493": [
        {
            "ioc_value": "modernkrirkuniversity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879494": [
        {
            "ioc_value": "mommymotif.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:40:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879495": [
        {
            "ioc_value": "moneyfornothing.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879496": [
        {
            "ioc_value": "moneyminded.guru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 23:21:02",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879497": [
        {
            "ioc_value": "monpremierpagne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:40:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879498": [
        {
            "ioc_value": "moodstyle.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879499": [
        {
            "ioc_value": "moqolobeaute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879500": [
        {
            "ioc_value": "moreleisure.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:51:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879501": [
        {
            "ioc_value": "moremother.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:31",
            "last_seen_utc": "2026-08-18 14:40:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879471": [
        {
            "ioc_value": "mesio.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 14:25:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879472": [
        {
            "ioc_value": "mestreengenheiro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 23:21:02",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879473": [
        {
            "ioc_value": "metalleiologos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 14:25:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879474": [
        {
            "ioc_value": "meugnot-travaux-publics-assainissement.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 14:25:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879475": [
        {
            "ioc_value": "mgconsultinggroup.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879476": [
        {
            "ioc_value": "mglpubblicita.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879477": [
        {
            "ioc_value": "mgplomberie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 23:21:03",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879478": [
        {
            "ioc_value": "microbialwarriorbiosecurity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-23 18:38:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879479": [
        {
            "ioc_value": "microbrewingcorner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 14:30:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879480": [
        {
            "ioc_value": "mightyhandsinc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 23:31:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879481": [
        {
            "ioc_value": "mindeyemetchiritema.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 14:25:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879482": [
        {
            "ioc_value": "miraiart.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:20:30",
            "last_seen_utc": "2026-08-18 14:25:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879462": [
        {
            "ioc_value": "meipiaosi.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 23:21:02",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879463": [
        {
            "ioc_value": "melassurance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 23:31:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879464": [
        {
            "ioc_value": "melbournehotelsaccommodation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-25 15:04:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879465": [
        {
            "ioc_value": "melloadvocacia.net.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 22:40:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879466": [
        {
            "ioc_value": "memoc.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 14:25:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879467": [
        {
            "ioc_value": "mentalcasinogames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 14:25:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879468": [
        {
            "ioc_value": "mercatus-eg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 14:25:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879469": [
        {
            "ioc_value": "mersinnet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 14:25:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879470": [
        {
            "ioc_value": "mesinrad.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:40",
            "last_seen_utc": "2026-08-18 14:25:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879446": [
        {
            "ioc_value": "mbullgroup.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:00:14",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879447": [
        {
            "ioc_value": "mbwbusiness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879448": [
        {
            "ioc_value": "mcnbholding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879449": [
        {
            "ioc_value": "mcrme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:00:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879450": [
        {
            "ioc_value": "mdekor.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879451": [
        {
            "ioc_value": "meatmozart.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:25:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879452": [
        {
            "ioc_value": "meblewidera.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879453": [
        {
            "ioc_value": "medbevor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:25:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879454": [
        {
            "ioc_value": "medi-mit-tieren.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879455": [
        {
            "ioc_value": "mediafi.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:25:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879456": [
        {
            "ioc_value": "mediatechcopy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-23 18:38:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879457": [
        {
            "ioc_value": "medsuresnigeria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-23 18:38:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879458": [
        {
            "ioc_value": "megaglass.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:25:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879459": [
        {
            "ioc_value": "megaonlineslotcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 23:21:03",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879460": [
        {
            "ioc_value": "megaslotonlinehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:25:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879461": [
        {
            "ioc_value": "mehergarh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:39",
            "last_seen_utc": "2026-08-18 14:25:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879432": [
        {
            "ioc_value": "martinihair.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 13:40:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879433": [
        {
            "ioc_value": "masjid-rsa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879434": [
        {
            "ioc_value": "masterjackpotcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 13:40:10",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879435": [
        {
            "ioc_value": "masterpokercasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 14:00:13",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879436": [
        {
            "ioc_value": "matchplaylex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879437": [
        {
            "ioc_value": "mathabane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-24 00:44:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879438": [
        {
            "ioc_value": "maxbonus.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 13:40:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879439": [
        {
            "ioc_value": "maxgames.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 14:00:14",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879440": [
        {
            "ioc_value": "maxus.com.bn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879441": [
        {
            "ioc_value": "mayasmilesproject.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 14:00:15",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879442": [
        {
            "ioc_value": "mayconnect.yt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 14:00:15",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879443": [
        {
            "ioc_value": "mayer-invest.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 13:40:10",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879444": [
        {
            "ioc_value": "mbebike.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 13:50:11",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879445": [
        {
            "ioc_value": "mbserviciosysoluciones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:38",
            "last_seen_utc": "2026-08-18 23:31:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879416": [
        {
            "ioc_value": "mamer.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 23:31:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879417": [
        {
            "ioc_value": "mana777jp.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 14:00:14",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879418": [
        {
            "ioc_value": "manaretaltech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 13:50:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879419": [
        {
            "ioc_value": "manelirasouli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879420": [
        {
            "ioc_value": "manganrealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 13:40:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879421": [
        {
            "ioc_value": "mangoes.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 14:00:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879422": [
        {
            "ioc_value": "manoirducapucin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-28 11:03:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879423": [
        {
            "ioc_value": "mantips.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 14:00:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879424": [
        {
            "ioc_value": "manuelcini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879425": [
        {
            "ioc_value": "manworld.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 14:00:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879426": [
        {
            "ioc_value": "marcablancamerchan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 13:50:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879427": [
        {
            "ioc_value": "margaritapr.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879428": [
        {
            "ioc_value": "marinsbeneficios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 14:00:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879429": [
        {
            "ioc_value": "mario365.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": "2026-08-18 13:40:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879430": [
        {
            "ioc_value": "markoliverinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879431": [
        {
            "ioc_value": "marseilia-con.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879399": [
        {
            "ioc_value": "lucky333.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 13:40:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879400": [
        {
            "ioc_value": "luckybettingcasinodesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 14:00:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879401": [
        {
            "ioc_value": "luckyreelsonlineslot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 14:00:13",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879402": [
        {
            "ioc_value": "luckystreakslotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 14:00:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879403": [
        {
            "ioc_value": "lumina.com.ng",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879404": [
        {
            "ioc_value": "lvwachat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 13:40:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879405": [
        {
            "ioc_value": "lyntro-36.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 13:40:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879406": [
        {
            "ioc_value": "lyrebirdfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 13:40:10",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879407": [
        {
            "ioc_value": "maclinica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 23:31:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879408": [
        {
            "ioc_value": "macmillancraig.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879409": [
        {
            "ioc_value": "madeinyaman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 13:40:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879410": [
        {
            "ioc_value": "maestro4d.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 14:00:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879411": [
        {
            "ioc_value": "magalileone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 14:00:13",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879412": [
        {
            "ioc_value": "mahandisports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879413": [
        {
            "ioc_value": "mail.mosodic.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 14:51:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879414": [
        {
            "ioc_value": "mailcliques.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-18 23:31:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879415": [
        {
            "ioc_value": "mairiedefadangourma.bf",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:36",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879384": [
        {
            "ioc_value": "liverpoolfuckbuddies.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 13:30:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879385": [
        {
            "ioc_value": "livingtherefinedlife.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 21:10:30",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879386": [
        {
            "ioc_value": "ljbuildingengineeringllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 13:19:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879387": [
        {
            "ioc_value": "lmsmind.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879388": [
        {
            "ioc_value": "loktantriksp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 23:31:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879389": [
        {
            "ioc_value": "londoncasinopokerclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 13:30:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879390": [
        {
            "ioc_value": "londonlegals.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-25 16:30:15",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879391": [
        {
            "ioc_value": "longevinews.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 13:30:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879392": [
        {
            "ioc_value": "longterm.rent-a-car.hr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879393": [
        {
            "ioc_value": "losremediosunited.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 13:30:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879394": [
        {
            "ioc_value": "louisepollardnutrition.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 23:31:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879395": [
        {
            "ioc_value": "loveinbible.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-24 00:42:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879396": [
        {
            "ioc_value": "lovuslights.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 21:20:32",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879397": [
        {
            "ioc_value": "lpagroundsmaintenance.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": "2026-08-18 13:40:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879398": [
        {
            "ioc_value": "lubov-georgievna.kiev.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879368": [
        {
            "ioc_value": "lesdixfuts.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-19 00:56:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879369": [
        {
            "ioc_value": "lespaniersfrais.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879370": [
        {
            "ioc_value": "letrangeodyssee.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:30:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879371": [
        {
            "ioc_value": "levemand.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:19:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879372": [
        {
            "ioc_value": "lexperts-comptables.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879373": [
        {
            "ioc_value": "lhu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879374": [
        {
            "ioc_value": "lidolasorgente.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879375": [
        {
            "ioc_value": "lifeplus-e.co.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-23 18:38:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879376": [
        {
            "ioc_value": "liliang.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:29:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879377": [
        {
            "ioc_value": "linhanhtrans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879378": [
        {
            "ioc_value": "linkebio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:19:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879379": [
        {
            "ioc_value": "lisiandrade.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:19:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879380": [
        {
            "ioc_value": "littlelandrd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 23:41:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879381": [
        {
            "ioc_value": "livecasinoart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:30:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879382": [
        {
            "ioc_value": "livecasinosolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:30:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879383": [
        {
            "ioc_value": "livejackpotcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:34",
            "last_seen_utc": "2026-08-18 13:30:02",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879352": [
        {
            "ioc_value": "lasvegasbellagiohotelcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:29:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879353": [
        {
            "ioc_value": "latiendadelashadas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:09:19",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879354": [
        {
            "ioc_value": "lauramfoley.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879355": [
        {
            "ioc_value": "laut888.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:19:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879356": [
        {
            "ioc_value": "lavoixdeladiaspora.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:19:22",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879357": [
        {
            "ioc_value": "lawbridge-co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:30:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879358": [
        {
            "ioc_value": "leaderkicking.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 23:31:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879359": [
        {
            "ioc_value": "leadvisorsplace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879360": [
        {
            "ioc_value": "leanteam.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879361": [
        {
            "ioc_value": "learaposo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879362": [
        {
            "ioc_value": "led-and-play.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879363": [
        {
            "ioc_value": "leferviagens.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:30:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879364": [
        {
            "ioc_value": "lembitlounge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 23:41:11",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879365": [
        {
            "ioc_value": "lepdh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 13:19:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879366": [
        {
            "ioc_value": "les-brasseries-de-lill.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": "2026-08-18 12:58:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879367": [
        {
            "ioc_value": "lesaramaviens.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879335": [
        {
            "ioc_value": "kroziautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 12:58:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879336": [
        {
            "ioc_value": "ktls.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 12:58:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879337": [
        {
            "ioc_value": "kubar-bau.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-19 00:26:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879338": [
        {
            "ioc_value": "kuechen-handel.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879339": [
        {
            "ioc_value": "kuensheytours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 13:30:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879340": [
        {
            "ioc_value": "kunenecoatings.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 23:31:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879341": [
        {
            "ioc_value": "kusslermartinho.adv.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879342": [
        {
            "ioc_value": "kyvisuallab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-19 00:01:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879343": [
        {
            "ioc_value": "laatech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879344": [
        {
            "ioc_value": "labdigital.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 23:31:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879345": [
        {
            "ioc_value": "lacantinadufresh.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 13:19:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879346": [
        {
            "ioc_value": "lacortedipoppea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879347": [
        {
            "ioc_value": "ladieslookhere.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 13:19:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879348": [
        {
            "ioc_value": "lahagora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-23 02:04:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879349": [
        {
            "ioc_value": "lalifedev.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-19 00:56:30",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879350": [
        {
            "ioc_value": "laptoprepairinkuwait.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 13:30:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879351": [
        {
            "ioc_value": "larot.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:32",
            "last_seen_utc": "2026-08-18 13:30:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879318": [
        {
            "ioc_value": "kiriaccounting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 13:09:19",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879319": [
        {
            "ioc_value": "kisles.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:48:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879320": [
        {
            "ioc_value": "kitainfos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879321": [
        {
            "ioc_value": "kkslawoffices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879322": [
        {
            "ioc_value": "klinisch-psychologe.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879323": [
        {
            "ioc_value": "kloppmann.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:48:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879324": [
        {
            "ioc_value": "kmaa65.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879325": [
        {
            "ioc_value": "kmaa78.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 13:09:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879326": [
        {
            "ioc_value": "kmbb54.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 13:09:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879327": [
        {
            "ioc_value": "kmbb71.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879328": [
        {
            "ioc_value": "kolkataida.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-19 00:01:17",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879329": [
        {
            "ioc_value": "kombuchakon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879330": [
        {
            "ioc_value": "kontrolsuspension.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-23 18:38:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879331": [
        {
            "ioc_value": "koralaserclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879332": [
        {
            "ioc_value": "kos138.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879333": [
        {
            "ioc_value": "kozhnye.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879334": [
        {
            "ioc_value": "krishamediatech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:31",
            "last_seen_utc": "2026-08-18 12:58:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879310": [
        {
            "ioc_value": "kimcorbisier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": "2026-08-18 12:48:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879311": [
        {
            "ioc_value": "kine-osteo-latrinitesurmer.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": "2026-08-18 12:58:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879312": [
        {
            "ioc_value": "kineprefecture.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": "2026-08-18 12:58:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879313": [
        {
            "ioc_value": "kingkong22.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": "2026-08-18 12:58:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879314": [
        {
            "ioc_value": "kingkong68.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": "2026-08-18 12:58:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879315": [
        {
            "ioc_value": "kingkong789.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": "2026-08-18 13:09:19",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879316": [
        {
            "ioc_value": "kingsofar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879317": [
        {
            "ioc_value": "kipepeoschool.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:19:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879303": [
        {
            "ioc_value": "kct-loko-liberec.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": "2026-08-18 12:58:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879304": [
        {
            "ioc_value": "kellyafiune.arq.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879305": [
        {
            "ioc_value": "kendal88.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": "2026-08-18 12:58:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879306": [
        {
            "ioc_value": "keratin-me.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879307": [
        {
            "ioc_value": "khudancudaresco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": "2026-08-18 13:09:19",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879308": [
        {
            "ioc_value": "kiddiesplayhousenj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": "2026-08-18 13:09:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879309": [
        {
            "ioc_value": "kimberleylmakeup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:24",
            "last_seen_utc": "2026-08-19 00:26:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879285": [
        {
            "ioc_value": "jtwhata.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:14:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879286": [
        {
            "ioc_value": "juanpablomdcirugiaplastica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879287": [
        {
            "ioc_value": "judoquinhas.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:14:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879288": [
        {
            "ioc_value": "julianfaust.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879289": [
        {
            "ioc_value": "jurien.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:04:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879290": [
        {
            "ioc_value": "jusyanmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:58:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879291": [
        {
            "ioc_value": "jyc.qa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-19 00:16:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879292": [
        {
            "ioc_value": "k3792.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:58:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879293": [
        {
            "ioc_value": "kafp.or.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879294": [
        {
            "ioc_value": "kaliwelnesscentre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-23 18:38:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879295": [
        {
            "ioc_value": "kambing89.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879296": [
        {
            "ioc_value": "kantahotel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 13:09:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879297": [
        {
            "ioc_value": "kareindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-19 00:16:19",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879298": [
        {
            "ioc_value": "karug3d.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879299": [
        {
            "ioc_value": "kathmanducrafts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:58:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879300": [
        {
            "ioc_value": "kaya369.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:58:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879301": [
        {
            "ioc_value": "kaynur.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-18 12:58:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879302": [
        {
            "ioc_value": "kazanimoveis.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:23",
            "last_seen_utc": "2026-08-19 00:56:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879267": [
        {
            "ioc_value": "jackpotcasinoplayhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879268": [
        {
            "ioc_value": "jackpotlivegames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879269": [
        {
            "ioc_value": "jacoenforcement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879270": [
        {
            "ioc_value": "jallinegea.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879271": [
        {
            "ioc_value": "jamiemeyer.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879272": [
        {
            "ioc_value": "jatidirimandiri.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879273": [
        {
            "ioc_value": "jcuarequenautiel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879274": [
        {
            "ioc_value": "jeffreyepstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879275": [
        {
            "ioc_value": "jehimybejarano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879276": [
        {
            "ioc_value": "jimenezbailey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:04:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879277": [
        {
            "ioc_value": "jjpstaalwerke.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879278": [
        {
            "ioc_value": "jobszones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879279": [
        {
            "ioc_value": "jocoaching.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879280": [
        {
            "ioc_value": "jogarduelo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879281": [
        {
            "ioc_value": "jopao.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879282": [
        {
            "ioc_value": "jp-lawoffice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879283": [
        {
            "ioc_value": "jphotographyvideo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879284": [
        {
            "ioc_value": "jsprendimai.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:22",
            "last_seen_utc": "2026-08-18 12:14:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879249": [
        {
            "ioc_value": "interlau.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879250": [
        {
            "ioc_value": "intfood.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879251": [
        {
            "ioc_value": "intrusioni0.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879252": [
        {
            "ioc_value": "invest.bhpatrimoine.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-25 16:30:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879253": [
        {
            "ioc_value": "ipearltechsolutions.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879254": [
        {
            "ioc_value": "ipet58.edu.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879255": [
        {
            "ioc_value": "iqraapdf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:34:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879256": [
        {
            "ioc_value": "isolaexperiences-sicily.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879257": [
        {
            "ioc_value": "israelmatters.africa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:44:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879258": [
        {
            "ioc_value": "issabidjan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879259": [
        {
            "ioc_value": "istryve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:44:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879260": [
        {
            "ioc_value": "isystore.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879261": [
        {
            "ioc_value": "it360degree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:49:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879262": [
        {
            "ioc_value": "itechboxbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:44:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879263": [
        {
            "ioc_value": "ivio.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879264": [
        {
            "ioc_value": "iwonabbq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:44:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879265": [
        {
            "ioc_value": "jachaldigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879266": [
        {
            "ioc_value": "jackenwelten.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:21",
            "last_seen_utc": "2026-08-18 11:44:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879231": [
        {
            "ioc_value": "indocasinoslothouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:50:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879232": [
        {
            "ioc_value": "indogamblerscasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879233": [
        {
            "ioc_value": "indonesiacasinoguy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879234": [
        {
            "ioc_value": "industrybar.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879235": [
        {
            "ioc_value": "industryboost.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879236": [
        {
            "ioc_value": "industrybox.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879237": [
        {
            "ioc_value": "industrynet.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879238": [
        {
            "ioc_value": "industrytime.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879239": [
        {
            "ioc_value": "industryweb.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879240": [
        {
            "ioc_value": "indwinbetguy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879241": [
        {
            "ioc_value": "infralimited.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879242": [
        {
            "ioc_value": "infusetheplanet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879243": [
        {
            "ioc_value": "ingaprint.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879244": [
        {
            "ioc_value": "inlovememory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879245": [
        {
            "ioc_value": "insaga.com.pe",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879246": [
        {
            "ioc_value": "instalmentloansera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:49:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879247": [
        {
            "ioc_value": "institutodrrafaelfreitas.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": "2026-08-18 11:44:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879248": [
        {
            "ioc_value": "intactnetworklimited.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879211": [
        {
            "ioc_value": "hyndol.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:24:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879212": [
        {
            "ioc_value": "hypedem876.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-25 16:44:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879213": [
        {
            "ioc_value": "hyperjumpfunds.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:24:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879214": [
        {
            "ioc_value": "ibizatattooconvention.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879215": [
        {
            "ioc_value": "iccc-cairo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879216": [
        {
            "ioc_value": "ienokangei.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:24:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879217": [
        {
            "ioc_value": "iesevilla.edu.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879218": [
        {
            "ioc_value": "iglolaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879219": [
        {
            "ioc_value": "ihsaanstore.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:24:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879220": [
        {
            "ioc_value": "ihsantomcat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:24:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879221": [
        {
            "ioc_value": "ihsprd.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:44:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879222": [
        {
            "ioc_value": "ikaikasway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879223": [
        {
            "ioc_value": "imagenseservicos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:44:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879224": [
        {
            "ioc_value": "imatfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:34:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879225": [
        {
            "ioc_value": "immdeutschland.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879226": [
        {
            "ioc_value": "impalaxr.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:44:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879227": [
        {
            "ioc_value": "in-press.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879228": [
        {
            "ioc_value": "indianadivorce.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879229": [
        {
            "ioc_value": "indobettingslothouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:50:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879230": [
        {
            "ioc_value": "indobettingslotmachine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:19",
            "last_seen_utc": "2026-08-18 11:44:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879194": [
        {
            "ioc_value": "hollywoodcasinovegas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:09:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879195": [
        {
            "ioc_value": "hollywoodcompletecare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879196": [
        {
            "ioc_value": "honeywatersa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879197": [
        {
            "ioc_value": "hoodmaps.com.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879198": [
        {
            "ioc_value": "horizoncashandcarry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879199": [
        {
            "ioc_value": "hotel-spessarttor.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-23 18:38:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879200": [
        {
            "ioc_value": "hotelsunsethill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879201": [
        {
            "ioc_value": "hoteltherising.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879202": [
        {
            "ioc_value": "houdodigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879203": [
        {
            "ioc_value": "househobby.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879204": [
        {
            "ioc_value": "housethings.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879205": [
        {
            "ioc_value": "housingonly.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879206": [
        {
            "ioc_value": "hqi.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879207": [
        {
            "ioc_value": "htu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879208": [
        {
            "ioc_value": "huianjiaotiao.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879209": [
        {
            "ioc_value": "huntscholarships.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879210": [
        {
            "ioc_value": "huraslotlogin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:18",
            "last_seen_utc": "2026-08-18 11:24:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879175": [
        {
            "ioc_value": "hennessysxlestwins.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879176": [
        {
            "ioc_value": "heragrup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 11:03:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879177": [
        {
            "ioc_value": "heritagebookpublishing.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-23 18:38:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879178": [
        {
            "ioc_value": "herreliv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 11:04:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879179": [
        {
            "ioc_value": "hesseeusa.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879180": [
        {
            "ioc_value": "hewho.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 11:04:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879181": [
        {
            "ioc_value": "hi-list.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 10:46:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879182": [
        {
            "ioc_value": "hibikism.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 10:53:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879183": [
        {
            "ioc_value": "hichambenohoud.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 10:36:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879184": [
        {
            "ioc_value": "hifilmcriticssociety.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879185": [
        {
            "ioc_value": "higherbuck.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879186": [
        {
            "ioc_value": "himalayansoftware.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879187": [
        {
            "ioc_value": "himalayanwellbeing.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 10:46:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879188": [
        {
            "ioc_value": "hip-hop-comms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 11:04:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879189": [
        {
            "ioc_value": "hmc-ye.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879190": [
        {
            "ioc_value": "hoddan.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 11:03:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879191": [
        {
            "ioc_value": "hojumbilvard.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879192": [
        {
            "ioc_value": "hollywoodcasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": "2026-08-18 11:03:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879193": [
        {
            "ioc_value": "hollywoodcasinoonlasvegas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879159": [
        {
            "ioc_value": "gurukulskills.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879160": [
        {
            "ioc_value": "gutprofessor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:04:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879161": [
        {
            "ioc_value": "habawaba.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-23 18:38:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879162": [
        {
            "ioc_value": "hackathonjouerpourgrandir.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:09:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879163": [
        {
            "ioc_value": "handright.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:03:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879164": [
        {
            "ioc_value": "handtastik.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:04:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879165": [
        {
            "ioc_value": "hanovernails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:09:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879166": [
        {
            "ioc_value": "harandi.studio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879167": [
        {
            "ioc_value": "hargamobilmu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 10:53:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879168": [
        {
            "ioc_value": "havenapp.it.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879169": [
        {
            "ioc_value": "hcdic-congo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:03:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879170": [
        {
            "ioc_value": "hcse.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879171": [
        {
            "ioc_value": "healthierliving.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 10:53:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879172": [
        {
            "ioc_value": "heatparts.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 11:09:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879173": [
        {
            "ioc_value": "heavenguesthouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-23 18:38:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879174": [
        {
            "ioc_value": "hellrocks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:16",
            "last_seen_utc": "2026-08-18 10:36:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879154": [
        {
            "ioc_value": "guardstraining.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:15",
            "last_seen_utc": "2026-08-18 11:09:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879155": [
        {
            "ioc_value": "guiapergamino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879156": [
        {
            "ioc_value": "guideduconseil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:15",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879157": [
        {
            "ioc_value": "guidinghands05.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:15",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879158": [
        {
            "ioc_value": "gunduzlaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:18:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879136": [
        {
            "ioc_value": "gonzalcar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:16:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879137": [
        {
            "ioc_value": "goodbuild.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879138": [
        {
            "ioc_value": "gorselkultur.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879139": [
        {
            "ioc_value": "goshudiary.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879140": [
        {
            "ioc_value": "gospelnehemias.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879141": [
        {
            "ioc_value": "gouabostore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879142": [
        {
            "ioc_value": "gpk-client.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:16:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879143": [
        {
            "ioc_value": "gpsite.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879144": [
        {
            "ioc_value": "graficasmarsur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879145": [
        {
            "ioc_value": "grandcasinoserviceonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879146": [
        {
            "ioc_value": "grandconsulting.org.et",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 15:45:24",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879147": [
        {
            "ioc_value": "grandjackpotcasinoonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:16:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879148": [
        {
            "ioc_value": "grandpalacebh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 09:56:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879149": [
        {
            "ioc_value": "greatachievermagazine.com.ng",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879150": [
        {
            "ioc_value": "greenclimat.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879151": [
        {
            "ioc_value": "growzen.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 09:43:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879152": [
        {
            "ioc_value": "grupoevolucao.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:16:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879153": [
        {
            "ioc_value": "grupolatamvirtual.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:25",
            "last_seen_utc": "2026-08-18 10:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879115": [
        {
            "ioc_value": "globalbettingcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879116": [
        {
            "ioc_value": "globalbmr77.news",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879117": [
        {
            "ioc_value": "globalcasinoplayhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879118": [
        {
            "ioc_value": "globalcasinoslothouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879119": [
        {
            "ioc_value": "globalcitygurugram.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 09:56:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879120": [
        {
            "ioc_value": "globalex.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879121": [
        {
            "ioc_value": "globemanagementservices.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879122": [
        {
            "ioc_value": "gmeansgo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879123": [
        {
            "ioc_value": "gmneclkz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879124": [
        {
            "ioc_value": "godoyindustries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:06:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879125": [
        {
            "ioc_value": "goergen-immobilien.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879126": [
        {
            "ioc_value": "goiembe.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879127": [
        {
            "ioc_value": "gokmobilya.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879128": [
        {
            "ioc_value": "gol369.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 09:43:08",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879129": [
        {
            "ioc_value": "golden9trip.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879130": [
        {
            "ioc_value": "goldencasinonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879131": [
        {
            "ioc_value": "goldencasinoplayclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879132": [
        {
            "ioc_value": "goldenslotsgaming.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:50",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879133": [
        {
            "ioc_value": "goldentransit.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 09:43:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879134": [
        {
            "ioc_value": "goldrushslotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 09:51:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879135": [
        {
            "ioc_value": "goldslotcasinoplay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:24",
            "last_seen_utc": "2026-08-18 10:16:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879096": [
        {
            "ioc_value": "genxtpms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:22:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879097": [
        {
            "ioc_value": "georgia-doll.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:33:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879098": [
        {
            "ioc_value": "geraambiental.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-23 02:04:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879099": [
        {
            "ioc_value": "geremeascountryclub.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:32:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879100": [
        {
            "ioc_value": "gestoriatorres.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:32:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879101": [
        {
            "ioc_value": "getreideland.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-25 16:30:16",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879102": [
        {
            "ioc_value": "ghanaweb.mobi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879103": [
        {
            "ioc_value": "gilanta.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 10:16:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879104": [
        {
            "ioc_value": "gilberttigerbaseball.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879105": [
        {
            "ioc_value": "gingerdouglass.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:43:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879106": [
        {
            "ioc_value": "ginsenga2000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-23 18:38:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879107": [
        {
            "ioc_value": "giochipergrandi.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:51:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879108": [
        {
            "ioc_value": "gites-vignerons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 09:51:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879109": [
        {
            "ioc_value": "gizfam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879110": [
        {
            "ioc_value": "glamazontechinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 10:16:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879111": [
        {
            "ioc_value": "glandaleind.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 10:16:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879112": [
        {
            "ioc_value": "gleneagles.co.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879113": [
        {
            "ioc_value": "gliannali.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879114": [
        {
            "ioc_value": "global-sports.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:23",
            "last_seen_utc": "2026-08-18 10:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879075": [
        {
            "ioc_value": "gagner-mieux.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:32:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879076": [
        {
            "ioc_value": "gaia360.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879077": [
        {
            "ioc_value": "galaxy505.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:32:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879078": [
        {
            "ioc_value": "gamepages.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879079": [
        {
            "ioc_value": "gameseatbugs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:32:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879080": [
        {
            "ioc_value": "gameslut.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879081": [
        {
            "ioc_value": "garciazarza.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879082": [
        {
            "ioc_value": "gardencentreeguide.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-28 08:53:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879083": [
        {
            "ioc_value": "gardensur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879084": [
        {
            "ioc_value": "garofalolawyer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879085": [
        {
            "ioc_value": "gartenbau-eckrath.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879086": [
        {
            "ioc_value": "garylynnjones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879087": [
        {
            "ioc_value": "gaspol136.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:22:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879088": [
        {
            "ioc_value": "gastroliver.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879089": [
        {
            "ioc_value": "gatilglamurosa.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879090": [
        {
            "ioc_value": "gearhy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879091": [
        {
            "ioc_value": "geltonayraviskas.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:01",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879092": [
        {
            "ioc_value": "gema.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:03",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879093": [
        {
            "ioc_value": "generalscouts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879094": [
        {
            "ioc_value": "genovotechnology.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879095": [
        {
            "ioc_value": "genteelwhite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:22",
            "last_seen_utc": "2026-08-18 09:33:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879057": [
        {
            "ioc_value": "framelessfanatix.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879058": [
        {
            "ioc_value": "france-avenir-isolation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879059": [
        {
            "ioc_value": "france-opportunite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:33:05",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879060": [
        {
            "ioc_value": "frarosacruzpy.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879061": [
        {
            "ioc_value": "freedoneconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:32:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879062": [
        {
            "ioc_value": "freeonlineslotbonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:32:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879063": [
        {
            "ioc_value": "friendsofgolanheights.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:33:00",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879064": [
        {
            "ioc_value": "fromagerie-bordeaux.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:33:03",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879065": [
        {
            "ioc_value": "fromfather.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:33:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879066": [
        {
            "ioc_value": "ftu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879067": [
        {
            "ioc_value": "fue.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879068": [
        {
            "ioc_value": "fuli300.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879069": [
        {
            "ioc_value": "fundacionconversacion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-28 06:09:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879070": [
        {
            "ioc_value": "futbolclubs.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-24 11:07:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879071": [
        {
            "ioc_value": "futu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879072": [
        {
            "ioc_value": "g-mos.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-23 18:38:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879073": [
        {
            "ioc_value": "g555game.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:32:59",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879074": [
        {
            "ioc_value": "gabonbatiment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:21",
            "last_seen_utc": "2026-08-18 09:38:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879038": [
        {
            "ioc_value": "fire-fly.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879039": [
        {
            "ioc_value": "fisalde.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879040": [
        {
            "ioc_value": "fixelictric.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879041": [
        {
            "ioc_value": "flamingovegascasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879042": [
        {
            "ioc_value": "flipbet.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879043": [
        {
            "ioc_value": "flowersbyesmeralda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879044": [
        {
            "ioc_value": "folkandcurious.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879045": [
        {
            "ioc_value": "foodforfuture.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879046": [
        {
            "ioc_value": "football.vobu.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879047": [
        {
            "ioc_value": "formation-enligne.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879048": [
        {
            "ioc_value": "formationrio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879049": [
        {
            "ioc_value": "formations-metiers-davenir.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-18 09:38:06",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879050": [
        {
            "ioc_value": "formazionerio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879051": [
        {
            "ioc_value": "formulaconsultoria.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-18 09:32:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879052": [
        {
            "ioc_value": "fortgage.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-23 18:38:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879053": [
        {
            "ioc_value": "fortroyalhomes.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879054": [
        {
            "ioc_value": "fortunemedia.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-18 09:32:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879055": [
        {
            "ioc_value": "fotocopiadorasjps.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-23 18:38:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879056": [
        {
            "ioc_value": "fotodronfilm.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:20",
            "last_seen_utc": "2026-08-18 09:22:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879020": [
        {
            "ioc_value": "fanscloset.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879021": [
        {
            "ioc_value": "farmanywhere.ag",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879022": [
        {
            "ioc_value": "fastcasinogames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879023": [
        {
            "ioc_value": "fathermagic.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879024": [
        {
            "ioc_value": "faunaundfeder.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879025": [
        {
            "ioc_value": "federalhomoeopathicmedicalcollege.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879026": [
        {
            "ioc_value": "felipeeferrari.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879027": [
        {
            "ioc_value": "femalelogic.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879028": [
        {
            "ioc_value": "fenndress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879029": [
        {
            "ioc_value": "feriirawan.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879030": [
        {
            "ioc_value": "ferreteriarekalde.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879031": [
        {
            "ioc_value": "ferroviaesociedade.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879032": [
        {
            "ioc_value": "fidubay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879033": [
        {
            "ioc_value": "figueroadj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879034": [
        {
            "ioc_value": "findexperience.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879035": [
        {
            "ioc_value": "findyourcolleges.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879036": [
        {
            "ioc_value": "finfacts.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879037": [
        {
            "ioc_value": "firangiburgers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879001": [
        {
            "ioc_value": "eurasiarealestategroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879002": [
        {
            "ioc_value": "eurekaproductions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879003": [
        {
            "ioc_value": "eurobettingcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879004": [
        {
            "ioc_value": "eurojob.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": "2026-08-23 02:04:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879005": [
        {
            "ioc_value": "eurotraffic.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879006": [
        {
            "ioc_value": "everic.consulting",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879007": [
        {
            "ioc_value": "everydayissaturday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879008": [
        {
            "ioc_value": "ewfilms.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879009": [
        {
            "ioc_value": "excelhealthcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879010": [
        {
            "ioc_value": "exosia.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879011": [
        {
            "ioc_value": "experienceblog.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879012": [
        {
            "ioc_value": "experiencethejourney.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879013": [
        {
            "ioc_value": "exprezesports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879014": [
        {
            "ioc_value": "extrabonusdepobos1.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879015": [
        {
            "ioc_value": "extrasahaphol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879016": [
        {
            "ioc_value": "eymisonic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879017": [
        {
            "ioc_value": "fahrmagie.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879018": [
        {
            "ioc_value": "falafelmakers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879019": [
        {
            "ioc_value": "familymother.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878987": [
        {
            "ioc_value": "epicestbon.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878988": [
        {
            "ioc_value": "erniechen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878989": [
        {
            "ioc_value": "ersa-consulting.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878990": [
        {
            "ioc_value": "ervindaneshazma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878991": [
        {
            "ioc_value": "erwinmuehlbauer.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878992": [
        {
            "ioc_value": "escolafreinet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878993": [
        {
            "ioc_value": "espace-reseau.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878994": [
        {
            "ioc_value": "esparragodemar.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878995": [
        {
            "ioc_value": "especialistavalidacoes.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878996": [
        {
            "ioc_value": "essencials.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878997": [
        {
            "ioc_value": "estelasalinas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878998": [
        {
            "ioc_value": "estima-med.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878999": [
        {
            "ioc_value": "estime.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1879000": [
        {
            "ioc_value": "estyrenics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:17:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878984": [
        {
            "ioc_value": "entouragetravelmorocco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:29",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878985": [
        {
            "ioc_value": "entropiastudios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:29",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878986": [
        {
            "ioc_value": "envirocompany.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:29",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878967": [
        {
            "ioc_value": "ellirose.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878968": [
        {
            "ioc_value": "elotecnico.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878969": [
        {
            "ioc_value": "elwatania4fiber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878970": [
        {
            "ioc_value": "embajadabh.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878971": [
        {
            "ioc_value": "emergencyservices.nyc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878972": [
        {
            "ioc_value": "empireofslotonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878973": [
        {
            "ioc_value": "empireuls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878974": [
        {
            "ioc_value": "empoweryouth.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878975": [
        {
            "ioc_value": "empresaahora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878976": [
        {
            "ioc_value": "energetiqueaudit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878977": [
        {
            "ioc_value": "eng.clubox.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878978": [
        {
            "ioc_value": "enjoythetime.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878979": [
        {
            "ioc_value": "enotecavinosfusomilano.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878980": [
        {
            "ioc_value": "enseignementsuptchad.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878981": [
        {
            "ioc_value": "enterpriseonlineca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878982": [
        {
            "ioc_value": "enthuellend.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878983": [
        {
            "ioc_value": "entiendepiu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:28",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878950": [
        {
            "ioc_value": "easysales.bz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878951": [
        {
            "ioc_value": "eba.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878952": [
        {
            "ioc_value": "eblinet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878953": [
        {
            "ioc_value": "ecoforingenieria.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878954": [
        {
            "ioc_value": "economatomauxiliadora.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878955": [
        {
            "ioc_value": "edilserr.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878956": [
        {
            "ioc_value": "editmax.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878957": [
        {
            "ioc_value": "educacenter.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878958": [
        {
            "ioc_value": "eeu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878959": [
        {
            "ioc_value": "effitrans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878960": [
        {
            "ioc_value": "eirenespace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878961": [
        {
            "ioc_value": "ekleelgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878962": [
        {
            "ioc_value": "ekspertlift.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878963": [
        {
            "ioc_value": "ekstraliga2021.pzszach.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878964": [
        {
            "ioc_value": "electronicsystem.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878965": [
        {
            "ioc_value": "eleoraevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878966": [
        {
            "ioc_value": "elhayahteam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:27",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878933": [
        {
            "ioc_value": "domy24.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878934": [
        {
            "ioc_value": "dongygiatruyentruongphihung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878935": [
        {
            "ioc_value": "doroticsworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": "2026-08-23 02:04:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878936": [
        {
            "ioc_value": "doudeche.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878937": [
        {
            "ioc_value": "dr-hallmann-foto.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878938": [
        {
            "ioc_value": "drb.enterprises",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878939": [
        {
            "ioc_value": "dreamcommun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878940": [
        {
            "ioc_value": "drvmm.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878941": [
        {
            "ioc_value": "dubailuckycasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878942": [
        {
            "ioc_value": "dubailuckyslotcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878943": [
        {
            "ioc_value": "duffusrepairs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878944": [
        {
            "ioc_value": "dunkingbooth.rentals",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878945": [
        {
            "ioc_value": "duttaradioandwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878946": [
        {
            "ioc_value": "dynamocloud.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878947": [
        {
            "ioc_value": "e3refblog.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878948": [
        {
            "ioc_value": "eachlondon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878949": [
        {
            "ioc_value": "earnwithcryptos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878916": [
        {
            "ioc_value": "dewaonlinecasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878917": [
        {
            "ioc_value": "dewi268.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878918": [
        {
            "ioc_value": "dexvio.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878919": [
        {
            "ioc_value": "diamondcasinolive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878920": [
        {
            "ioc_value": "diamondgoexpress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878921": [
        {
            "ioc_value": "diamondservicesltd.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878922": [
        {
            "ioc_value": "dichvuxinphepxaydunghcm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878923": [
        {
            "ioc_value": "digio.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878924": [
        {
            "ioc_value": "digitaldesktopwallpaper.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878925": [
        {
            "ioc_value": "digiteacheurope.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878926": [
        {
            "ioc_value": "dinhcudaquocgia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878927": [
        {
            "ioc_value": "dinizcontabilidade.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878928": [
        {
            "ioc_value": "divcibareturs.co.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878929": [
        {
            "ioc_value": "djeseconstruction.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878930": [
        {
            "ioc_value": "dmsbdgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878931": [
        {
            "ioc_value": "dmvrpmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878932": [
        {
            "ioc_value": "domainfordr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878899": [
        {
            "ioc_value": "dedicametz.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878900": [
        {
            "ioc_value": "deeteef.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878901": [
        {
            "ioc_value": "degomotosport.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878902": [
        {
            "ioc_value": "deliziedelpalatovarese.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878903": [
        {
            "ioc_value": "delso.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878904": [
        {
            "ioc_value": "deltatea.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878905": [
        {
            "ioc_value": "demetrasociale.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878906": [
        {
            "ioc_value": "denimology.azurewebsites.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878907": [
        {
            "ioc_value": "denimology.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878908": [
        {
            "ioc_value": "depannage-rideaux-metalliques-91.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-25 16:43:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878909": [
        {
            "ioc_value": "dermaspa-am-luegplatz.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-23 18:38:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878910": [
        {
            "ioc_value": "derr.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878911": [
        {
            "ioc_value": "desalviacostruzioni.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878912": [
        {
            "ioc_value": "desati.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878913": [
        {
            "ioc_value": "designjewelers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878914": [
        {
            "ioc_value": "desjoyaux-sud.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878915": [
        {
            "ioc_value": "devizesmusicaltheatre.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:24",
            "last_seen_utc": "2026-08-25 16:43:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878882": [
        {
            "ioc_value": "d2dphotographers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878883": [
        {
            "ioc_value": "dacsystem.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878884": [
        {
            "ioc_value": "daddycasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878885": [
        {
            "ioc_value": "dailyeuros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878886": [
        {
            "ioc_value": "dailyjustajoo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878887": [
        {
            "ioc_value": "dailykagojerdak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878888": [
        {
            "ioc_value": "damndad.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878889": [
        {
            "ioc_value": "danae.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878890": [
        {
            "ioc_value": "dancecourse.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878891": [
        {
            "ioc_value": "daralmansojat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878892": [
        {
            "ioc_value": "daring88.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878893": [
        {
            "ioc_value": "datablog.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878894": [
        {
            "ioc_value": "datahint.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878895": [
        {
            "ioc_value": "dauantrithucvadoanhnhan.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878896": [
        {
            "ioc_value": "de-meilleure-qualite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878897": [
        {
            "ioc_value": "deanshs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878898": [
        {
            "ioc_value": "declicrp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878864": [
        {
            "ioc_value": "crbinter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878865": [
        {
            "ioc_value": "creamylicious.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878866": [
        {
            "ioc_value": "creationcarepartners.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878867": [
        {
            "ioc_value": "creativefashionservices.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878868": [
        {
            "ioc_value": "crestprollc.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878869": [
        {
            "ioc_value": "crillion.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878870": [
        {
            "ioc_value": "crossfitelectron.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878871": [
        {
            "ioc_value": "cryptomarketfacts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878872": [
        {
            "ioc_value": "cscapeurope.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": "2026-08-28 07:03:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878873": [
        {
            "ioc_value": "cuaca999.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878874": [
        {
            "ioc_value": "cubix.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878875": [
        {
            "ioc_value": "curieuxdafrique.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878876": [
        {
            "ioc_value": "customerguide.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878877": [
        {
            "ioc_value": "customerhunt.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878878": [
        {
            "ioc_value": "customersquare.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878879": [
        {
            "ioc_value": "cybersheepstudios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878880": [
        {
            "ioc_value": "cyeller.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878881": [
        {
            "ioc_value": "cyreum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878843": [
        {
            "ioc_value": "companycatalogue.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878844": [
        {
            "ioc_value": "companyfever.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878845": [
        {
            "ioc_value": "companynow.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878846": [
        {
            "ioc_value": "companyplan.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878847": [
        {
            "ioc_value": "companytogether.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878848": [
        {
            "ioc_value": "companytrade.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878849": [
        {
            "ioc_value": "comprendemas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878850": [
        {
            "ioc_value": "condogo.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878851": [
        {
            "ioc_value": "conferenciaiecg.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878852": [
        {
            "ioc_value": "congiong.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878853": [
        {
            "ioc_value": "congresogombrowicz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878854": [
        {
            "ioc_value": "conspace.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878855": [
        {
            "ioc_value": "consulting.valuescale.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878856": [
        {
            "ioc_value": "continentaltowels.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878857": [
        {
            "ioc_value": "costaincorporadora.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878858": [
        {
            "ioc_value": "costaliving.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878859": [
        {
            "ioc_value": "costruzionisantonio.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878860": [
        {
            "ioc_value": "cozma.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878861": [
        {
            "ioc_value": "cozyloopstudio.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878862": [
        {
            "ioc_value": "cpl.pparena.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": "2026-08-18 16:00:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878863": [
        {
            "ioc_value": "cpl.red-peppers.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878842": [
        {
            "ioc_value": "comidacaseraloslagos.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-18 07:16:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878841": [
        {
            "ioc_value": "zao9axot.us-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 07:14:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878839": [
        {
            "ioc_value": "2.28.26.204:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878840": [
        {
            "ioc_value": "37.27.179.201:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878830": [
        {
            "ioc_value": "178.105.46.40:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878831": [
        {
            "ioc_value": "62.238.96.179:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878832": [
        {
            "ioc_value": "178.105.46.149:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878833": [
        {
            "ioc_value": "62.238.57.58:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878834": [
        {
            "ioc_value": "178.105.46.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878835": [
        {
            "ioc_value": "46.62.196.164:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878836": [
        {
            "ioc_value": "62.238.107.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878837": [
        {
            "ioc_value": "2.29.8.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878823": [
        {
            "ioc_value": "65.109.20.25:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878824": [
        {
            "ioc_value": "89.167.3.143:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878825": [
        {
            "ioc_value": "65.109.30.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878826": [
        {
            "ioc_value": "62.238.106.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878827": [
        {
            "ioc_value": "195.201.41.237:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878828": [
        {
            "ioc_value": "62.238.59.215:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878829": [
        {
            "ioc_value": "77.42.126.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878822": [
        {
            "ioc_value": "38.76.183.197:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 07:05:10",
            "last_seen_utc": "2026-09-01 02:47:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878821": [
        {
            "ioc_value": "38.76.183.197:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 07:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878820": [
        {
            "ioc_value": "103.236.84.103:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878819": [
        {
            "ioc_value": "103.236.84.103:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878818": [
        {
            "ioc_value": "rnd.sm188daftar.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878816": [
        {
            "ioc_value": "https://89.167.13.71/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878817": [
        {
            "ioc_value": "https://37.27.179.201/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878812": [
        {
            "ioc_value": "https://62.238.57.58/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:33",
            "last_seen_utc": "2026-08-21 08:03:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878813": [
        {
            "ioc_value": "https://178.105.46.54/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878814": [
        {
            "ioc_value": "https://46.62.196.164/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878815": [
        {
            "ioc_value": "https://62.238.107.2/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:33",
            "last_seen_utc": "2026-08-31 16:08:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878809": [
        {
            "ioc_value": "https://77.42.126.206/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878810": [
        {
            "ioc_value": "https://178.105.46.40/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878811": [
        {
            "ioc_value": "https://62.238.96.179/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878805": [
        {
            "ioc_value": "https://rnd.sm188daftar.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878806": [
        {
            "ioc_value": "https://65.109.30.141/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878807": [
        {
            "ioc_value": "https://62.238.106.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878808": [
        {
            "ioc_value": "https://195.201.41.237/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878804": [
        {
            "ioc_value": "https://www.pinterest.com/m1duus/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 07:04:30",
            "last_seen_utc": "2026-08-24 13:43:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878802": [
        {
            "ioc_value": "hnf94jta.get-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 06:46:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878801": [
        {
            "ioc_value": "http://vexdico.shop:8539/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 06:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878798": [
        {
            "ioc_value": "http://202.9.122.47:36267/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 06:25:19",
            "last_seen_utc": "2026-08-25 00:19:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.9.122.47",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1878799": [
        {
            "ioc_value": "http://36.255.33.118:34346/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 06:25:18",
            "last_seen_utc": "2026-08-25 00:19:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.33.118",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1878797": [
        {
            "ioc_value": "103.236.84.103:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878796": [
        {
            "ioc_value": "117.72.159.96:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878795": [
        {
            "ioc_value": "110.42.255.63:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 06:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878794": [
        {
            "ioc_value": "143.198.84.165:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:51:24",
            "last_seen_utc": "2026-08-28 14:58:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878793": [
        {
            "ioc_value": "whale-complex.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 05:41:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/891292d66392d8da0e92cf38abcb108a69e33fb1714f7920448301b1aa5094d5/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878792": [
        {
            "ioc_value": "https://sdsentura.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 05:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sdsentura.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878059": [
        {
            "ioc_value": "167.99.67.141:8811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 05:28:19",
            "last_seen_utc": "2026-08-31 19:01:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "974b6b4ed30ddaa4b6f4ec27976e52d8,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878060": [
        {
            "ioc_value": "lddjk79018.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:28:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878062": [
        {
            "ioc_value": "176.98.182.177:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:28:17",
            "last_seen_utc": "2026-08-31 15:00:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878069": [
        {
            "ioc_value": "api-workers.westinsinsurance.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-18 05:28:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117111648765961305",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878428": [
        {
            "ioc_value": "guilbert.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:28:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878429": [
        {
            "ioc_value": "https://guilbert.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:28:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878430": [
        {
            "ioc_value": "https://guilbert.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:28:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878446": [
        {
            "ioc_value": "apricotalys.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:28:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878476": [
        {
            "ioc_value": "https://maymun.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:25:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878477": [
        {
            "ioc_value": "https://maymun.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:25:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878478": [
        {
            "ioc_value": "https://maymun.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:25:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878480": [
        {
            "ioc_value": "https://maymun.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:25:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878479": [
        {
            "ioc_value": "https://maymun.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:25:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878481": [
        {
            "ioc_value": "maymun.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878496": [
        {
            "ioc_value": "168.144.188.31:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:12",
            "last_seen_utc": "2026-08-29 09:47:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878497": [
        {
            "ioc_value": "201.79.5.223:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:11",
            "last_seen_utc": "2026-08-29 09:48:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878498": [
        {
            "ioc_value": "161.35.74.220:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:11",
            "last_seen_utc": "2026-08-29 09:48:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878499": [
        {
            "ioc_value": "64.227.187.82:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:10",
            "last_seen_utc": "2026-08-29 09:49:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878500": [
        {
            "ioc_value": "138.197.15.223:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:09",
            "last_seen_utc": "2026-08-29 09:48:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878510": [
        {
            "ioc_value": "142.93.205.111:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:08",
            "last_seen_utc": "2026-08-29 09:47:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878511": [
        {
            "ioc_value": "159.89.193.17:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:07",
            "last_seen_utc": "2026-08-29 09:48:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878515": [
        {
            "ioc_value": "143.198.84.165:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:25:04",
            "last_seen_utc": "2026-08-29 09:48:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878551": [
        {
            "ioc_value": "http://103.225.191.191:34773/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 05:25:03",
            "last_seen_utc": "2026-08-25 00:19:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.191",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1878552": [
        {
            "ioc_value": "http://101.53.228.61:45415/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 05:25:02",
            "last_seen_utc": "2026-08-25 00:19:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.228.61",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1878593": [
        {
            "ioc_value": "almira88.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:25:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878640": [
        {
            "ioc_value": "176.65.139.202:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-18 05:25:00",
            "last_seen_utc": "2026-08-17 21:09:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1878641": [
        {
            "ioc_value": "rutrerford.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:59",
            "last_seen_utc": "2026-08-17 22:09:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117112666763880038",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878642": [
        {
            "ioc_value": "https://rutrerford.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:58",
            "last_seen_utc": "2026-08-17 22:09:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117112666763880038",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878643": [
        {
            "ioc_value": "https://rutrerford.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:58",
            "last_seen_utc": "2026-08-17 22:09:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117112666763880038",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878644": [
        {
            "ioc_value": "https://rutrerford.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:57",
            "last_seen_utc": "2026-08-17 21:10:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117112666763880038",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878645": [
        {
            "ioc_value": "159.89.193.17:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:56",
            "last_seen_utc": "2026-08-25 20:49:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878646": [
        {
            "ioc_value": "43.134.49.218:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:56",
            "last_seen_utc": "2026-09-01 02:12:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878652": [
        {
            "ioc_value": "161.35.74.220:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:55",
            "last_seen_utc": "2026-08-21 08:21:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878654": [
        {
            "ioc_value": "2d7c8780e97409770a9d4f31c66c9d63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:24:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/honeymyte-deploys-upgraded-coolclient-backdoor-in-cyber-espi-23ee7d40",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1878655": [
        {
            "ioc_value": "9460E150E1981D5C165043520C5C12FE",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:24:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/honeymyte-deploys-upgraded-coolclient-backdoor-in-cyber-espi-23ee7d40",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1878656": [
        {
            "ioc_value": "9717F005C5FB98E08D2AD983D88F94EE",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:24:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://threatcluster.io/cluster/honeymyte-deploys-upgraded-coolclient-backdoor-in-cyber-espi-23ee7d40",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcluster"
        }
    ],
    "1878664": [
        {
            "ioc_value": "hnxjd10649.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:24:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878667": [
        {
            "ioc_value": "143.198.84.165:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878672": [
        {
            "ioc_value": "https://kaybol.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878673": [
        {
            "ioc_value": "https://kaybol.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878674": [
        {
            "ioc_value": "https://kaybol.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878675": [
        {
            "ioc_value": "https://kaybol.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878676": [
        {
            "ioc_value": "https://kaybol.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878678": [
        {
            "ioc_value": "kaybol.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878679": [
        {
            "ioc_value": "161.35.74.220:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:43",
            "last_seen_utc": "2026-08-28 02:28:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878691": [
        {
            "ioc_value": "shhuster.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:42",
            "last_seen_utc": "2026-08-18 01:09:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878693": [
        {
            "ioc_value": "https://shhuster.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:42",
            "last_seen_utc": "2026-08-18 01:09:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878692": [
        {
            "ioc_value": "https://shhuster.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:41",
            "last_seen_utc": "2026-08-18 01:09:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878707": [
        {
            "ioc_value": "wazezajo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:24:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878728": [
        {
            "ioc_value": "https://shhuster.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-18 05:24:39",
            "last_seen_utc": "2026-08-18 01:09:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878729": [
        {
            "ioc_value": "https://essek.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878730": [
        {
            "ioc_value": "https://essek.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878731": [
        {
            "ioc_value": "https://essek.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878732": [
        {
            "ioc_value": "https://essek.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878733": [
        {
            "ioc_value": "https://essek.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878734": [
        {
            "ioc_value": "essek.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-18 05:24:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878735": [
        {
            "ioc_value": "http://111.92.157.255:49080/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 05:24:29",
            "last_seen_utc": "2026-08-25 00:19:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.157.255",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1878736": [
        {
            "ioc_value": "http://175.107.3.113:55166/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-18 05:24:28",
            "last_seen_utc": "2026-08-25 00:19:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.3.113",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1878740": [
        {
            "ioc_value": "http://196.251.121.142/install.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 05:24:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1878743": [
        {
            "ioc_value": "178.16.52.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:24:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "40999,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1878744": [
        {
            "ioc_value": "110.42.255.63:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:24:26",
            "last_seen_utc": "2026-08-21 07:57:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45090,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1878751": [
        {
            "ioc_value": "43.128.113.133:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:25",
            "last_seen_utc": "2026-09-01 03:02:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878757": [
        {
            "ioc_value": "0lzsb0vjg5.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:24:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878764": [
        {
            "ioc_value": "45.90.98.27:3778",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-18 05:24:24",
            "last_seen_utc": "2026-08-18 03:09:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1878775": [
        {
            "ioc_value": "xuhahyce.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:24:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878778": [
        {
            "ioc_value": "150.109.93.78:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-18 05:24:22",
            "last_seen_utc": "2026-08-31 10:06:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878783": [
        {
            "ioc_value": "20294fe9ec6b7763a8fd58f23be53be7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 05:24:22",
            "last_seen_utc": "2026-08-27 07:51:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Majinahanashi%20Ransomware",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1878786": [
        {
            "ioc_value": "y7m9sw9mvw.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-18 05:24:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878791": [
        {
            "ioc_value": "65vp9dlz.us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 05:15:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878789": [
        {
            "ioc_value": "117.72.159.96:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878790": [
        {
            "ioc_value": "117.72.159.96:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878788": [
        {
            "ioc_value": "117.72.159.96:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878787": [
        {
            "ioc_value": "wfev64yd.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 04:49:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878784": [
        {
            "ioc_value": "http://kupzovo.shop:7567/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 04:35:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878785": [
        {
            "ioc_value": "http://mrlketo.shop:8932/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-18 04:35:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878781": [
        {
            "ioc_value": "110.42.255.63:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 04:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878782": [
        {
            "ioc_value": "110.42.255.63:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-18 04:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878780": [
        {
            "ioc_value": "109.176.19.75:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878779": [
        {
            "ioc_value": "111.231.172.132:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878777": [
        {
            "ioc_value": "5efvflg4.en-en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 03:52:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878767": [
        {
            "ioc_value": "111.170.148.132:18000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878766": [
        {
            "ioc_value": "109.248.160.184:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-18 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878763": [
        {
            "ioc_value": "142.4.58.48:1223",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-18 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878762": [
        {
            "ioc_value": "kl9usd0a.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 01:45:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878753": [
        {
            "ioc_value": "radioteleafrique.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 01:15:21",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878752": [
        {
            "ioc_value": "r64h4yde.us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 01:13:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878750": [
        {
            "ioc_value": "https://kra.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 01:10:06",
            "last_seen_utc": "2026-08-18 01:25:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878748": [
        {
            "ioc_value": "https://kra.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 01:10:05",
            "last_seen_utc": "2026-08-18 11:25:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878749": [
        {
            "ioc_value": "kra.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 01:10:05",
            "last_seen_utc": "2026-08-18 01:25:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878747": [
        {
            "ioc_value": "kra.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-18 01:10:04",
            "last_seen_utc": "2026-08-18 11:25:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878739": [
        {
            "ioc_value": "sputim.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 00:45:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878738": [
        {
            "ioc_value": "skiimo.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-18 00:45:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878737": [
        {
            "ioc_value": "xoa01tps.gut--drops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 00:41:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878727": [
        {
            "ioc_value": "localbiz-ai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-18 00:05:13",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878720": [
        {
            "ioc_value": "poolservice-schroeder.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:55:10",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878722": [
        {
            "ioc_value": "pastefsuisse.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:55:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878723": [
        {
            "ioc_value": "partylokal.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:55:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878717": [
        {
            "ioc_value": "oviry.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:55:09",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878718": [
        {
            "ioc_value": "osmos.studio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:55:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878719": [
        {
            "ioc_value": "objectifvdi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:55:09",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878716": [
        {
            "ioc_value": "nrcie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 23:45:08",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878711": [
        {
            "ioc_value": "neos-group.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:35:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878708": [
        {
            "ioc_value": "mechbot.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:35:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878709": [
        {
            "ioc_value": "perfectcoupe.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:35:05",
            "last_seen_utc": "2026-08-18 16:33:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878710": [
        {
            "ioc_value": "myhandyplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 23:35:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878703": [
        {
            "ioc_value": "prod-mastery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 23:25:02",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878701": [
        {
            "ioc_value": "http://kupzovo.shop:7567/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 23:19:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878702": [
        {
            "ioc_value": "http://mrlketo.shop:8932/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 23:19:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878694": [
        {
            "ioc_value": "xdvhinxc.theslimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 23:14:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878687": [
        {
            "ioc_value": "nqsgvtlj.en-en-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 22:50:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878686": [
        {
            "ioc_value": "https://viaductanthology.top/middleware/scope-runtime.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 22:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878685": [
        {
            "ioc_value": "viaductanthology.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 22:48:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878683": [
        {
            "ioc_value": "http://bravplo.click:7713/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 22:47:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878684": [
        {
            "ioc_value": "http://kupzovo.shop:7567/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 22:47:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878682": [
        {
            "ioc_value": "http://indigocrest.top/middleware/scope-runtime.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 22:46:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878681": [
        {
            "ioc_value": "indigocrest.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 22:46:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878677": [
        {
            "ioc_value": "http://kupzovo.shop:7567/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 22:15:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/018937753ffa1fdc88796297948d82cff81b0b0beb1dae0335417b178eb581f2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878666": [
        {
            "ioc_value": "https://bolerkas.shop/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 21:31:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bolerkas.shop",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878665": [
        {
            "ioc_value": "https://bolerkas.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 21:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bolerkas.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878662": [
        {
            "ioc_value": "i79y6sn0.snaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 21:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878661": [
        {
            "ioc_value": "60.204.204.24:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878660": [
        {
            "ioc_value": "154.201.95.162:8886",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 21:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878659": [
        {
            "ioc_value": "172.93.221.193:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878658": [
        {
            "ioc_value": "https://games.ccsam.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 21:01:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/games.ccsam.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878653": [
        {
            "ioc_value": "om6q0drg.eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 20:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878651": [
        {
            "ioc_value": "https://guiapergamino.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/guiapergamino.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878650": [
        {
            "ioc_value": "lh3wghxa.belly--flush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 20:27:46",
            "last_seen_utc": "2026-08-21 03:44:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878649": [
        {
            "ioc_value": "peteux.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:24:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878648": [
        {
            "ioc_value": "http://shkpiva.shop:5627/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 20:20:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/797bcd9813c2c4f11e3abde7b4806e0d81531eaeb68dfa98d3482b7c9174a61d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878647": [
        {
            "ioc_value": "http://mrlketo.shop:8932/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 20:20:33",
            "last_seen_utc": "2026-08-19 10:41:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/797bcd9813c2c4f11e3abde7b4806e0d81531eaeb68dfa98d3482b7c9174a61d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878638": [
        {
            "ioc_value": "172.93.221.193:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878639": [
        {
            "ioc_value": "172.93.221.193:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878635": [
        {
            "ioc_value": "52.141.2.68:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878636": [
        {
            "ioc_value": "52.141.2.68:50000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878637": [
        {
            "ioc_value": "172.93.221.193:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 20:05:05",
            "last_seen_utc": "2026-08-19 07:57:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878633": [
        {
            "ioc_value": "bolerkas.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 20:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1878634": [
        {
            "ioc_value": "pokarse.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 20:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1878632": [
        {
            "ioc_value": "bolerkas.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 20:01:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1878627": [
        {
            "ioc_value": "https://klaragolez.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/klaragolez.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878628": [
        {
            "ioc_value": "https://exosia.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/exosia.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878629": [
        {
            "ioc_value": "https://campfire-hospitality.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/campfire-hospitality.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878630": [
        {
            "ioc_value": "https://www.bodycarer.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.bodycarer.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878631": [
        {
            "ioc_value": "https://formulaconsultoria.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 20:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/formulaconsultoria.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878626": [
        {
            "ioc_value": "94.143.231.61:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:46:54",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878625": [
        {
            "ioc_value": "83.229.120.106:45231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-17 19:46:42",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878624": [
        {
            "ioc_value": "64.89.160.127:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 19:46:32",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878622": [
        {
            "ioc_value": "46.246.6.16:2703",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 19:46:21",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878623": [
        {
            "ioc_value": "46.246.6.16:7049",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 19:46:21",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878621": [
        {
            "ioc_value": "45.61.114.254:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:46:15",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878620": [
        {
            "ioc_value": "38.240.47.77:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 19:45:59",
            "last_seen_utc": "2026-09-01 02:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878618": [
        {
            "ioc_value": "217.60.195.226:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:45:42",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878619": [
        {
            "ioc_value": "217.60.195.226:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:45:42",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878617": [
        {
            "ioc_value": "207.89.17.21:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-17 19:44:57",
            "last_seen_utc": "2026-09-01 02:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878616": [
        {
            "ioc_value": "2.27.63.240:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:44:49",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878615": [
        {
            "ioc_value": "194.59.30.183:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:44:41",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878614": [
        {
            "ioc_value": "194.110.247.114:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:44:40",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878613": [
        {
            "ioc_value": "179.61.227.148:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 19:44:19",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878612": [
        {
            "ioc_value": "178.16.52.100:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-17 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878611": [
        {
            "ioc_value": "172.98.22.177:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:44:12",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878610": [
        {
            "ioc_value": "164.160.187.69:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-17 19:44:00",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878609": [
        {
            "ioc_value": "159.223.145.166:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.poshc2",
            "malware_alias": null,
            "malware_printable": "PoshC2",
            "first_seen_utc": "2026-08-17 19:43:56",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PoshC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878608": [
        {
            "ioc_value": "155.138.175.126:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:43:48",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878606": [
        {
            "ioc_value": "154.222.16.226:9098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-17 19:43:47",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878607": [
        {
            "ioc_value": "154.222.16.250:9098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-17 19:43:47",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878604": [
        {
            "ioc_value": "154.205.145.162:48443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-08-17 19:43:46",
            "last_seen_utc": "2026-09-01 02:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878605": [
        {
            "ioc_value": "154.222.16.141:9098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-17 19:43:46",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878602": [
        {
            "ioc_value": "151.242.170.219:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:43:44",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878603": [
        {
            "ioc_value": "151.242.170.219:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:43:44",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878600": [
        {
            "ioc_value": "124.198.131.110:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878601": [
        {
            "ioc_value": "124.198.131.110:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878598": [
        {
            "ioc_value": "118.107.5.200:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:43:23",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878599": [
        {
            "ioc_value": "118.107.5.200:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 19:43:23",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878597": [
        {
            "ioc_value": "104.243.248.63:401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878596": [
        {
            "ioc_value": "http://kupzovo.shop:7567/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 19:42:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1878595": [
        {
            "ioc_value": "bolerkas.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 19:34:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878594": [
        {
            "ioc_value": "https://marjanalkhair.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/marjanalkhair.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878592": [
        {
            "ioc_value": "kyls6h84.slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 19:15:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878586": [
        {
            "ioc_value": "52.141.2.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 19:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878587": [
        {
            "ioc_value": "52.141.2.68:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 19:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878585": [
        {
            "ioc_value": "149.88.66.234:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878584": [
        {
            "ioc_value": "149.88.66.234:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878576": [
        {
            "ioc_value": "https://laboralmente.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/laboralmente.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878577": [
        {
            "ioc_value": "https://www.fabienne-mercier.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.fabienne-mercier.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878578": [
        {
            "ioc_value": "https://jzlightshow.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jzlightshow.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878579": [
        {
            "ioc_value": "https://harapouya.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/harapouya.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878580": [
        {
            "ioc_value": "https://realworldgrappling.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/realworldgrappling.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878581": [
        {
            "ioc_value": "https://koontyme.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/koontyme.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878582": [
        {
            "ioc_value": "https://pptrans.sk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pptrans.sk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878583": [
        {
            "ioc_value": "https://mpdumont.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mpdumont.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878567": [
        {
            "ioc_value": "https://bventuretech.com.my/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bventuretech.com.my",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878568": [
        {
            "ioc_value": "https://www.brefconcept.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.brefconcept.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878569": [
        {
            "ioc_value": "https://www.artemretouching.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.artemretouching.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878570": [
        {
            "ioc_value": "https://cyeller.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cyeller.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878571": [
        {
            "ioc_value": "https://ervindaneshazma.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ervindaneshazma.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878572": [
        {
            "ioc_value": "https://elitegorka.ru/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/elitegorka.ru",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878573": [
        {
            "ioc_value": "https://archevive.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/archevive.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878574": [
        {
            "ioc_value": "https://hbbuilding.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hbbuilding.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878575": [
        {
            "ioc_value": "https://estudiogurugu.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 19:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/estudiogurugu.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878563": [
        {
            "ioc_value": "headyconnection.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:45:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878560": [
        {
            "ioc_value": "https://www.theatrecharbon.fr/sandbox/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.theatrecharbon.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878561": [
        {
            "ioc_value": "https://www.sandomenicoets.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sandomenicoets.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878562": [
        {
            "ioc_value": "https://www.statusplan.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.statusplan.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878559": [
        {
            "ioc_value": "https://zetaclinic.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zetaclinic.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878555": [
        {
            "ioc_value": "skfwp.press",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:22:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878556": [
        {
            "ioc_value": "cv.cbrw.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:22:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878557": [
        {
            "ioc_value": "cv.jyla.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:22:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878558": [
        {
            "ioc_value": "6t.czlw.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:22:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878553": [
        {
            "ioc_value": "ou.qymj.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:22:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878554": [
        {
            "ioc_value": "qv.gahq.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:22:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878545": [
        {
            "ioc_value": "hgjbp.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:17:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878546": [
        {
            "ioc_value": "kihqk.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:17:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878547": [
        {
            "ioc_value": "zovdt.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:17:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878548": [
        {
            "ioc_value": "kypa.press",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:17:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878549": [
        {
            "ioc_value": "wydi.press",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:17:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878550": [
        {
            "ioc_value": "dyky.press",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:17:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878537": [
        {
            "ioc_value": "mmgdt.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878538": [
        {
            "ioc_value": "pksns.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878539": [
        {
            "ioc_value": "nrfwj.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878540": [
        {
            "ioc_value": "jvlmr.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878541": [
        {
            "ioc_value": "rhbqx.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878542": [
        {
            "ioc_value": "rwdfn.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878531": [
        {
            "ioc_value": "sulf.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878532": [
        {
            "ioc_value": "nygz.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878533": [
        {
            "ioc_value": "balp.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878534": [
        {
            "ioc_value": "licz.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878535": [
        {
            "ioc_value": "vclpg.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878536": [
        {
            "ioc_value": "ffjdc.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878524": [
        {
            "ioc_value": "neguh.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878525": [
        {
            "ioc_value": "jeqov.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878526": [
        {
            "ioc_value": "dynk.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878527": [
        {
            "ioc_value": "lykr.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878528": [
        {
            "ioc_value": "qupt.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878529": [
        {
            "ioc_value": "xelw.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878530": [
        {
            "ioc_value": "jipg.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:12:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878519": [
        {
            "ioc_value": "pexab.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878520": [
        {
            "ioc_value": "kepov.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878521": [
        {
            "ioc_value": "ciwid.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878522": [
        {
            "ioc_value": "mygar.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878523": [
        {
            "ioc_value": "sijyh.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878516": [
        {
            "ioc_value": "cyleb.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878517": [
        {
            "ioc_value": "fepez.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878518": [
        {
            "ioc_value": "sorov.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 18:07:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878507": [
        {
            "ioc_value": "https://ruthene-coachin.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ruthene-coachin.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878508": [
        {
            "ioc_value": "https://leadvisiontw.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/leadvisiontw.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878509": [
        {
            "ioc_value": "https://ultraanalogic.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ultraanalogic.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878501": [
        {
            "ioc_value": "https://journal-lb.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/journal-lb.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878502": [
        {
            "ioc_value": "https://savanamining.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/savanamining.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878503": [
        {
            "ioc_value": "https://www.locksmithmn247.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.locksmithmn247.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878504": [
        {
            "ioc_value": "https://www.maketechnology.sk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.maketechnology.sk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878505": [
        {
            "ioc_value": "https://oraville.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/oraville.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878506": [
        {
            "ioc_value": "https://lejardindunous.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 18:01:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lejardindunous.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878495": [
        {
            "ioc_value": "imb5g7cu.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878491": [
        {
            "ioc_value": "minak.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878492": [
        {
            "ioc_value": "fecif.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878493": [
        {
            "ioc_value": "sukum.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878494": [
        {
            "ioc_value": "kahox.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878486": [
        {
            "ioc_value": "cagom.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878487": [
        {
            "ioc_value": "mehig.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878488": [
        {
            "ioc_value": "jodob.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878489": [
        {
            "ioc_value": "sihen.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878490": [
        {
            "ioc_value": "genow.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878482": [
        {
            "ioc_value": "xtkdt.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878483": [
        {
            "ioc_value": "mzrln.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878484": [
        {
            "ioc_value": "ttxch.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878485": [
        {
            "ioc_value": "daqev.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:46:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878475": [
        {
            "ioc_value": "fhtnt.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878474": [
        {
            "ioc_value": "snhnv.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878473": [
        {
            "ioc_value": "nshpd.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878472": [
        {
            "ioc_value": "npknn.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878471": [
        {
            "ioc_value": "qmzks.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878470": [
        {
            "ioc_value": "xkpdf.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878468": [
        {
            "ioc_value": "rkblm.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878469": [
        {
            "ioc_value": "pmglw.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878467": [
        {
            "ioc_value": "djrtt.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878466": [
        {
            "ioc_value": "xmlvm.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878465": [
        {
            "ioc_value": "bbssj.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878464": [
        {
            "ioc_value": "ntmmh.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878463": [
        {
            "ioc_value": "qstfs.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878462": [
        {
            "ioc_value": "jskxw.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878461": [
        {
            "ioc_value": "fypal.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:41:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878460": [
        {
            "ioc_value": "topax.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:36:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878459": [
        {
            "ioc_value": "serer.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:35:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878458": [
        {
            "ioc_value": "tipaq.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:35:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878457": [
        {
            "ioc_value": "wyban.run",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:35:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878456": [
        {
            "ioc_value": "vsmml.press",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:35:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878455": [
        {
            "ioc_value": "blzqq.press",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:34:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878452": [
        {
            "ioc_value": "https://ejaz-sa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 17:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ejaz-sa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878453": [
        {
            "ioc_value": "https://globalswissalliance.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 17:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/globalswissalliance.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878454": [
        {
            "ioc_value": "https://fccakebread.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 17:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fccakebread.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878451": [
        {
            "ioc_value": "https://sto.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 17:30:06",
            "last_seen_utc": "2026-08-17 21:25:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878449": [
        {
            "ioc_value": "https://sto.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 17:30:05",
            "last_seen_utc": "2026-08-18 00:25:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878450": [
        {
            "ioc_value": "sto.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 17:30:05",
            "last_seen_utc": "2026-08-17 21:25:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878448": [
        {
            "ioc_value": "sto.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 17:30:04",
            "last_seen_utc": "2026-08-18 00:25:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1878445": [
        {
            "ioc_value": "http://kupzovo.shop:7567/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 17:20:42",
            "last_seen_utc": "2026-08-17 18:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e2b6dbb5b5c44863df8e9e79a6c0d0c4d8fe7bfca346335fbfcd4dc6ca5f9010/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1878444": [
        {
            "ioc_value": "verdigrisroundel.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 17:17:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878443": [
        {
            "ioc_value": "https://verdigrisroundel.top/realm/reset-response.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 17:16:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878442": [
        {
            "ioc_value": "4cz3yc22.en-us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 17:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878441": [
        {
            "ioc_value": "cpameyrin.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 17:04:57",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878440": [
        {
            "ioc_value": "https://apejese.org.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 17:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/apejese.org.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878439": [
        {
            "ioc_value": "ristorantealcapone.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:54:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878438": [
        {
            "ioc_value": "motorradankaufschweiz.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:39:55",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878435": [
        {
            "ioc_value": "https://smildner.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/smildner.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878436": [
        {
            "ioc_value": "https://www.smartbusiness.com.ec/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.smartbusiness.com.ec",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878437": [
        {
            "ioc_value": "https://windsorparknordic.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/windsorparknordic.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878434": [
        {
            "ioc_value": "pokarse.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 16:30:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878433": [
        {
            "ioc_value": "ut28h0im.americaeaglependant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 16:19:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878432": [
        {
            "ioc_value": "myline-b2b.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:15:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878425": [
        {
            "ioc_value": "codognolaserramenti.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:46",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878426": [
        {
            "ioc_value": "collomb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:46",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878427": [
        {
            "ioc_value": "colosseoapartments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:46",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878410": [
        {
            "ioc_value": "cintashop.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878411": [
        {
            "ioc_value": "cirianahautecoat.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878412": [
        {
            "ioc_value": "cl-chausseur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878413": [
        {
            "ioc_value": "claimlivecasinogames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878414": [
        {
            "ioc_value": "claraalbuquerque.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878415": [
        {
            "ioc_value": "claritymental.health",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878416": [
        {
            "ioc_value": "climate-service.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878417": [
        {
            "ioc_value": "clinicadentalpadros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878418": [
        {
            "ioc_value": "clinicaterezafilgueiras.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878419": [
        {
            "ioc_value": "cloud4office.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878420": [
        {
            "ioc_value": "clubedovepinho.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878421": [
        {
            "ioc_value": "cncpeventi.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878422": [
        {
            "ioc_value": "cnymnvwv.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878423": [
        {
            "ioc_value": "coboliste.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878424": [
        {
            "ioc_value": "cod-it.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:45",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878393": [
        {
            "ioc_value": "centrkrovly.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878394": [
        {
            "ioc_value": "centroagoraformacion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878395": [
        {
            "ioc_value": "cerealesjimenez.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878396": [
        {
            "ioc_value": "cerifostervoice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878397": [
        {
            "ioc_value": "cesarinilegal.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878398": [
        {
            "ioc_value": "cesarvillage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878399": [
        {
            "ioc_value": "charisma-resources.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878400": [
        {
            "ioc_value": "cherrycherie-burlesque.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878401": [
        {
            "ioc_value": "cherunjeet-kumar-mondal-uk.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 09:22:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878402": [
        {
            "ioc_value": "cherylroll.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878403": [
        {
            "ioc_value": "chez-gillou.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878404": [
        {
            "ioc_value": "chicagolandbullrentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878405": [
        {
            "ioc_value": "chiduanfengyinzheshijie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878406": [
        {
            "ioc_value": "chingu.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878407": [
        {
            "ioc_value": "choosingopenroads.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878408": [
        {
            "ioc_value": "churchcookbookrecipes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878409": [
        {
            "ioc_value": "cinema-les-etoiles.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:44",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878374": [
        {
            "ioc_value": "casinoroyalpokerhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878375": [
        {
            "ioc_value": "casinoslotonlinemachine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878376": [
        {
            "ioc_value": "casinovipmachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878377": [
        {
            "ioc_value": "casperpowercontrols.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878378": [
        {
            "ioc_value": "caspianequip.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878379": [
        {
            "ioc_value": "castleridgerxpharmacy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878380": [
        {
            "ioc_value": "catalystleader.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878381": [
        {
            "ioc_value": "cathytrenary.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878382": [
        {
            "ioc_value": "catslovecraps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878383": [
        {
            "ioc_value": "cbi.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878384": [
        {
            "ioc_value": "ccm.ci",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878385": [
        {
            "ioc_value": "cdefintervictoria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878386": [
        {
            "ioc_value": "cdelong.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878387": [
        {
            "ioc_value": "cdhoneyball.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878388": [
        {
            "ioc_value": "cec.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878389": [
        {
            "ioc_value": "cecolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878390": [
        {
            "ioc_value": "cedad.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878391": [
        {
            "ioc_value": "celebrityfashionwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878392": [
        {
            "ioc_value": "centretheologique66.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:43",
            "last_seen_utc": "2026-08-18 07:15:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878355": [
        {
            "ioc_value": "casino888machines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878356": [
        {
            "ioc_value": "casinobetapk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878357": [
        {
            "ioc_value": "casinocakes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878358": [
        {
            "ioc_value": "casinocleaning.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878359": [
        {
            "ioc_value": "casinoguyhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878360": [
        {
            "ioc_value": "casinohome.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878361": [
        {
            "ioc_value": "casinohype.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878362": [
        {
            "ioc_value": "casinoinjapan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878363": [
        {
            "ioc_value": "casinoinning.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878364": [
        {
            "ioc_value": "casinojerk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878365": [
        {
            "ioc_value": "casinomasterpieces.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878366": [
        {
            "ioc_value": "casinominutes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878367": [
        {
            "ioc_value": "casinoplaymachinehub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878368": [
        {
            "ioc_value": "casinoplayservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878369": [
        {
            "ioc_value": "casinopokerdesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878370": [
        {
            "ioc_value": "casinopokerhouseonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878371": [
        {
            "ioc_value": "casinopokerhubonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878372": [
        {
            "ioc_value": "casinopowerjackpot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878373": [
        {
            "ioc_value": "casinoroyalehouses.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:42",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878338": [
        {
            "ioc_value": "caclcc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878339": [
        {
            "ioc_value": "cacnorthamerica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878340": [
        {
            "ioc_value": "cactusespacesverts.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878341": [
        {
            "ioc_value": "caesarscasinoinlasvegas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878342": [
        {
            "ioc_value": "cafegarelli.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878343": [
        {
            "ioc_value": "calitas.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878344": [
        {
            "ioc_value": "caminoviejoproducciones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878345": [
        {
            "ioc_value": "camperduin.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878346": [
        {
            "ioc_value": "cantinalatina.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878347": [
        {
            "ioc_value": "carbodynamic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878348": [
        {
            "ioc_value": "cardspk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878349": [
        {
            "ioc_value": "cargofreightvoyage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878350": [
        {
            "ioc_value": "carlijndesigntekstzoeker.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878351": [
        {
            "ioc_value": "carllasbarros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-25 05:06:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878352": [
        {
            "ioc_value": "carrentalbari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878353": [
        {
            "ioc_value": "casastilotk.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878354": [
        {
            "ioc_value": "cashmagiccasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:41",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878319": [
        {
            "ioc_value": "buca.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878320": [
        {
            "ioc_value": "budapestcontroltx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878321": [
        {
            "ioc_value": "buffalophotoboothrentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878322": [
        {
            "ioc_value": "buildbonus.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878323": [
        {
            "ioc_value": "buildingdebate.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878324": [
        {
            "ioc_value": "buildleader.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878325": [
        {
            "ioc_value": "buildluxury.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878326": [
        {
            "ioc_value": "buildreport.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878327": [
        {
            "ioc_value": "bunnysagency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878328": [
        {
            "ioc_value": "businessbonus.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878329": [
        {
            "ioc_value": "businessfinancecoaching.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878330": [
        {
            "ioc_value": "buyacasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878331": [
        {
            "ioc_value": "buybuycar.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878332": [
        {
            "ioc_value": "bviru-adv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878333": [
        {
            "ioc_value": "bvu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878334": [
        {
            "ioc_value": "cabinetdekinesiologie.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878335": [
        {
            "ioc_value": "cablefaultlocator.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878336": [
        {
            "ioc_value": "cac-krs.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878337": [
        {
            "ioc_value": "cachacacapotira.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:40",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878300": [
        {
            "ioc_value": "bordadosropy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878301": [
        {
            "ioc_value": "borgodeglidei.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878302": [
        {
            "ioc_value": "bortroff.in.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878303": [
        {
            "ioc_value": "bossinternationalstudies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878304": [
        {
            "ioc_value": "bovairdgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878305": [
        {
            "ioc_value": "boystime.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878306": [
        {
            "ioc_value": "boysuniverse.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878307": [
        {
            "ioc_value": "branchbox.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878308": [
        {
            "ioc_value": "branchingouttreeandlandscapes.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878309": [
        {
            "ioc_value": "brantfordnoatry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878310": [
        {
            "ioc_value": "brasillinkeng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878311": [
        {
            "ioc_value": "brasserieeatenjoy.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878312": [
        {
            "ioc_value": "brevikssk.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878313": [
        {
            "ioc_value": "bricoblog.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878314": [
        {
            "ioc_value": "bright-stars-day-nursery.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878315": [
        {
            "ioc_value": "brilliantearthcom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878316": [
        {
            "ioc_value": "bringingbetterbusiness.net.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878317": [
        {
            "ioc_value": "britishcolumbiabusiness.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878318": [
        {
            "ioc_value": "brownlee-associates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:39",
            "last_seen_utc": "2026-08-24 11:12:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878281": [
        {
            "ioc_value": "binarstore.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878282": [
        {
            "ioc_value": "bingoblog.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878283": [
        {
            "ioc_value": "bionicsun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878284": [
        {
            "ioc_value": "biophilie-ecotherapie.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878285": [
        {
            "ioc_value": "bis-co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878286": [
        {
            "ioc_value": "bizandlove.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878287": [
        {
            "ioc_value": "bkmenglishonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878288": [
        {
            "ioc_value": "blackprint.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878289": [
        {
            "ioc_value": "blindcenter.or.th",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878290": [
        {
            "ioc_value": "blog.econauti.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-24 11:12:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878291": [
        {
            "ioc_value": "blog.microaid.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878292": [
        {
            "ioc_value": "bluesandbeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878293": [
        {
            "ioc_value": "bluumleaf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878294": [
        {
            "ioc_value": "bmreal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878295": [
        {
            "ioc_value": "bmroofingrepairs.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878296": [
        {
            "ioc_value": "boiprohor.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878297": [
        {
            "ioc_value": "bonusbay.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878298": [
        {
            "ioc_value": "bonusweb.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878299": [
        {
            "ioc_value": "boobakitesurf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:38",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878261": [
        {
            "ioc_value": "bestuaecasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878262": [
        {
            "ioc_value": "betagamingworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878263": [
        {
            "ioc_value": "betbigleague.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878264": [
        {
            "ioc_value": "betflex.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878265": [
        {
            "ioc_value": "betkingcasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878266": [
        {
            "ioc_value": "betleague.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878267": [
        {
            "ioc_value": "betonlineslotbonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878268": [
        {
            "ioc_value": "betsagaprozone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878269": [
        {
            "ioc_value": "betslotcasinoservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878270": [
        {
            "ioc_value": "betslotroyalcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878271": [
        {
            "ioc_value": "betterconstruction.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878272": [
        {
            "ioc_value": "betterhealthfast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878273": [
        {
            "ioc_value": "bettingcasinohouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878274": [
        {
            "ioc_value": "bhelektro.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878275": [
        {
            "ioc_value": "bhutanmaitreya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878276": [
        {
            "ioc_value": "bibliotekamaglaj.ba",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878277": [
        {
            "ioc_value": "bigbullcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878278": [
        {
            "ioc_value": "bigcasinoclubhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878279": [
        {
            "ioc_value": "bigcasinodaddy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878280": [
        {
            "ioc_value": "bigpopular.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:37",
            "last_seen_utc": "2026-08-23 02:04:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878246": [
        {
            "ioc_value": "belanjaslot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878247": [
        {
            "ioc_value": "belnovosti.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878248": [
        {
            "ioc_value": "benvegnuengenharia.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878249": [
        {
            "ioc_value": "beratung-steffen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878250": [
        {
            "ioc_value": "best-jap.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-20 19:47:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878251": [
        {
            "ioc_value": "bestcasinojackpothouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878252": [
        {
            "ioc_value": "bestcolor.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878253": [
        {
            "ioc_value": "besthollywoodcasino25.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878254": [
        {
            "ioc_value": "bestindustry.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878255": [
        {
            "ioc_value": "bestjackpotservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878256": [
        {
            "ioc_value": "bestonlinecasinopractices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878257": [
        {
            "ioc_value": "bestpokerservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878258": [
        {
            "ioc_value": "bestreviewsdata.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-25 16:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878259": [
        {
            "ioc_value": "bestslotcasinoclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878260": [
        {
            "ioc_value": "bestslotonlinehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:09:36",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878232": [
        {
            "ioc_value": "barbaralibertine.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878233": [
        {
            "ioc_value": "barfly-cologne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878234": [
        {
            "ioc_value": "bars-kzn.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878235": [
        {
            "ioc_value": "bartec.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878236": [
        {
            "ioc_value": "bartoszjagielski.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878237": [
        {
            "ioc_value": "basingstokelaptops.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878238": [
        {
            "ioc_value": "baskara88.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878239": [
        {
            "ioc_value": "basta-casinoonline.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878240": [
        {
            "ioc_value": "batamdieselindo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:14:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878241": [
        {
            "ioc_value": "bawarchimasalay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:15:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878242": [
        {
            "ioc_value": "baytelnoor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:15:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878243": [
        {
            "ioc_value": "bdfoto.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:15:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878244": [
        {
            "ioc_value": "bebe-box.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-18 07:15:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878245": [
        {
            "ioc_value": "bebigmi.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:55",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878214": [
        {
            "ioc_value": "autocarrozzeriacastagna.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878215": [
        {
            "ioc_value": "automiennam.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878216": [
        {
            "ioc_value": "awc-japan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878217": [
        {
            "ioc_value": "ayhanadienstverlening.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878218": [
        {
            "ioc_value": "azobshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878219": [
        {
            "ioc_value": "b1n.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878220": [
        {
            "ioc_value": "baccoucheautomobiles.tn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878221": [
        {
            "ioc_value": "bachconsultores.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878222": [
        {
            "ioc_value": "backesmotors.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878223": [
        {
            "ioc_value": "backfromthebrink.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878224": [
        {
            "ioc_value": "badgerprotectiongroup.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878225": [
        {
            "ioc_value": "baibu-japanese-restaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878226": [
        {
            "ioc_value": "baljagat.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 23:31:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878227": [
        {
            "ioc_value": "balver-hoehle.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878228": [
        {
            "ioc_value": "bambananishoppingcentre.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878229": [
        {
            "ioc_value": "bambuzen.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878230": [
        {
            "ioc_value": "bandenshop.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-18 07:14:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878231": [
        {
            "ioc_value": "banghieuachau.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:54",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878196": [
        {
            "ioc_value": "asiacasinoslotclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878197": [
        {
            "ioc_value": "asiacasinoslothub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878198": [
        {
            "ioc_value": "asistenciamigrante.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878199": [
        {
            "ioc_value": "asiu.com.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878200": [
        {
            "ioc_value": "astralisliving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878201": [
        {
            "ioc_value": "astraljundiai.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878202": [
        {
            "ioc_value": "asu.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878203": [
        {
            "ioc_value": "atfmultiservice.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878204": [
        {
            "ioc_value": "atg-system.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878205": [
        {
            "ioc_value": "athomeinteriorsla.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878206": [
        {
            "ioc_value": "atlasworkforce.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878207": [
        {
            "ioc_value": "atrprint.az",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878208": [
        {
            "ioc_value": "audiovisualexpres.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878209": [
        {
            "ioc_value": "auecomunica.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878210": [
        {
            "ioc_value": "autoankauf-berlin-24.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878211": [
        {
            "ioc_value": "autoankauf-bielefeld-24.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878212": [
        {
            "ioc_value": "autoankauf-dom.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878213": [
        {
            "ioc_value": "autobank-me.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:53",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878183": [
        {
            "ioc_value": "aptoaccounting.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878184": [
        {
            "ioc_value": "apviser.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878185": [
        {
            "ioc_value": "arabiancasinolive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878186": [
        {
            "ioc_value": "aramsty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878187": [
        {
            "ioc_value": "architalkz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878188": [
        {
            "ioc_value": "arecibohasitall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878189": [
        {
            "ioc_value": "arhistratig.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878190": [
        {
            "ioc_value": "arkyenpharmaceuticals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878191": [
        {
            "ioc_value": "artofcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878192": [
        {
            "ioc_value": "artsetcultureslunel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878193": [
        {
            "ioc_value": "artwisemirror.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878194": [
        {
            "ioc_value": "artycsoka.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878195": [
        {
            "ioc_value": "asad-bourg-la-reine.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:52",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878165": [
        {
            "ioc_value": "amyweber.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878166": [
        {
            "ioc_value": "anakainiseis-ktirion.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878167": [
        {
            "ioc_value": "angel-coming.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878168": [
        {
            "ioc_value": "angelecangola.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878169": [
        {
            "ioc_value": "antoniocolanero.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878170": [
        {
            "ioc_value": "anugrahfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878171": [
        {
            "ioc_value": "anyhappyhour.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878172": [
        {
            "ioc_value": "anznutraceuticals.co.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878173": [
        {
            "ioc_value": "aoc-figuedjebba.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878174": [
        {
            "ioc_value": "apartmanmallorca.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-23 18:38:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878175": [
        {
            "ioc_value": "apejese.org.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878176": [
        {
            "ioc_value": "api.boomsite.fm",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878177": [
        {
            "ioc_value": "apollon.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878178": [
        {
            "ioc_value": "aposentepleno.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878179": [
        {
            "ioc_value": "apostadegol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878180": [
        {
            "ioc_value": "apparelleague.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878181": [
        {
            "ioc_value": "appliancerepairlondoner.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878182": [
        {
            "ioc_value": "appliedmice.com.sg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:51",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878146": [
        {
            "ioc_value": "alkhamail.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878147": [
        {
            "ioc_value": "alleppeyoldlakehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878148": [
        {
            "ioc_value": "alliancesabze.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878149": [
        {
            "ioc_value": "allopreschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878150": [
        {
            "ioc_value": "almatycasinos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878151": [
        {
            "ioc_value": "alnabhani.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878152": [
        {
            "ioc_value": "alpspccare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878153": [
        {
            "ioc_value": "alramhan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878154": [
        {
            "ioc_value": "alsonic.lk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878155": [
        {
            "ioc_value": "altaleghje.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878156": [
        {
            "ioc_value": "alvyz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878157": [
        {
            "ioc_value": "alwaysplaycasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878158": [
        {
            "ioc_value": "amarinaserviciosintegrales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878159": [
        {
            "ioc_value": "americaslotclubhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878160": [
        {
            "ioc_value": "ami.edu.cv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878161": [
        {
            "ioc_value": "amiralenpizza.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878162": [
        {
            "ioc_value": "ammarsamejo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-23 18:38:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878163": [
        {
            "ioc_value": "amplaplasticos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878164": [
        {
            "ioc_value": "amref.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:50",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878128": [
        {
            "ioc_value": "afaescolapaisoscatalans.cat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878129": [
        {
            "ioc_value": "afetogo.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878130": [
        {
            "ioc_value": "afreegri.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878131": [
        {
            "ioc_value": "africa-princess.co.tz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878132": [
        {
            "ioc_value": "afrikfitness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878133": [
        {
            "ioc_value": "afrodias.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878134": [
        {
            "ioc_value": "agencialivve.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878135": [
        {
            "ioc_value": "agendaecia.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878136": [
        {
            "ioc_value": "ahmedelsayed.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878137": [
        {
            "ioc_value": "aivensconsulting.lu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878138": [
        {
            "ioc_value": "akademicerdas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878139": [
        {
            "ioc_value": "akademie.date2k.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878140": [
        {
            "ioc_value": "al-taysir.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878141": [
        {
            "ioc_value": "album-collection.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878142": [
        {
            "ioc_value": "alessandracristiani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878143": [
        {
            "ioc_value": "alexanderabrown.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878144": [
        {
            "ioc_value": "alexandremagalhaes.adv.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878145": [
        {
            "ioc_value": "alfahdautogroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:49",
            "last_seen_utc": "2026-08-18 07:14:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878110": [
        {
            "ioc_value": "a1investments.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878111": [
        {
            "ioc_value": "a2.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878112": [
        {
            "ioc_value": "aametisrael.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878113": [
        {
            "ioc_value": "aandapremierproperties.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878114": [
        {
            "ioc_value": "abbaziadipero.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878115": [
        {
            "ioc_value": "abnnfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878116": [
        {
            "ioc_value": "abouttrend.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878117": [
        {
            "ioc_value": "abufvs.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878118": [
        {
            "ioc_value": "accleverate.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878119": [
        {
            "ioc_value": "accreditedconceptsllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878120": [
        {
            "ioc_value": "acelltelecom.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878121": [
        {
            "ioc_value": "acquashow.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878122": [
        {
            "ioc_value": "adaalaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878123": [
        {
            "ioc_value": "adeba-energy.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878124": [
        {
            "ioc_value": "adelsebai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878125": [
        {
            "ioc_value": "adv88.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878126": [
        {
            "ioc_value": "adventurer.co.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878127": [
        {
            "ioc_value": "aeristelecom.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:48",
            "last_seen_utc": "2026-08-18 07:14:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878092": [
        {
            "ioc_value": "243news.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878093": [
        {
            "ioc_value": "2c-sociale.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878094": [
        {
            "ioc_value": "2d2g.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878095": [
        {
            "ioc_value": "303onlinedoorcasino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878096": [
        {
            "ioc_value": "365-ltd.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878097": [
        {
            "ioc_value": "381dizajn.in.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878098": [
        {
            "ioc_value": "3mteknoloji.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878099": [
        {
            "ioc_value": "420hydroponics.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878100": [
        {
            "ioc_value": "44a44b.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878101": [
        {
            "ioc_value": "4eko.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878102": [
        {
            "ioc_value": "777casinoonlinegames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878103": [
        {
            "ioc_value": "777companysas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878104": [
        {
            "ioc_value": "777vitalitylabs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878105": [
        {
            "ioc_value": "885588.tw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878106": [
        {
            "ioc_value": "888casinomachines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878107": [
        {
            "ioc_value": "8tk8.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878108": [
        {
            "ioc_value": "912600.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878109": [
        {
            "ioc_value": "925sites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:47",
            "last_seen_utc": "2026-08-18 07:14:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878087": [
        {
            "ioc_value": "010146.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:46",
            "last_seen_utc": "2026-08-18 07:14:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878088": [
        {
            "ioc_value": "100beautifulthings.ee",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:46",
            "last_seen_utc": "2026-08-18 07:14:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878089": [
        {
            "ioc_value": "100x4.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:46",
            "last_seen_utc": "2026-08-18 07:14:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878090": [
        {
            "ioc_value": "101homerenovation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:46",
            "last_seen_utc": "2026-08-18 07:14:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878091": [
        {
            "ioc_value": "2021rcp-congress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 16:08:46",
            "last_seen_utc": "2026-08-18 07:14:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878086": [
        {
            "ioc_value": "athome-champery.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 16:05:33",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878075": [
        {
            "ioc_value": "https://jbconstructionnyc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jbconstructionnyc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878076": [
        {
            "ioc_value": "https://www.depannage-serrurier-91.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.depannage-serrurier-91.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878077": [
        {
            "ioc_value": "https://ecomimperium.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ecomimperium.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878078": [
        {
            "ioc_value": "https://leitebrasil.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/leitebrasil.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878079": [
        {
            "ioc_value": "https://www.havenpresents.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.havenpresents.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878080": [
        {
            "ioc_value": "https://purnama-4d.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/purnama-4d.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878081": [
        {
            "ioc_value": "https://natuurlijkheidi.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/natuurlijkheidi.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878082": [
        {
            "ioc_value": "https://modernfuji-ksa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/modernfuji-ksa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878071": [
        {
            "ioc_value": "https://chumak.io/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chumak.io",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878072": [
        {
            "ioc_value": "https://leadsforest.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/leadsforest.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878073": [
        {
            "ioc_value": "https://bodychekwellness.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bodychekwellness.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878074": [
        {
            "ioc_value": "https://helpgrandparents.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 16:01:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/helpgrandparents.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878066": [
        {
            "ioc_value": "indicequalitesols.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 15:45:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878067": [
        {
            "ioc_value": "zentrum-freisein.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 15:45:30",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878065": [
        {
            "ioc_value": "2irsnrao.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 15:44:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878064": [
        {
            "ioc_value": "poplarmemoir.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 15:42:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878063": [
        {
            "ioc_value": "https://poplarmemoir.top/api/status-component.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 15:41:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878061": [
        {
            "ioc_value": "myhandyplus.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 15:25:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878058": [
        {
            "ioc_value": "8cos2bio.en-us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 15:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878057": [
        {
            "ioc_value": "huber-holzbau.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 15:05:26",
            "last_seen_utc": "2026-08-29 12:31:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,ErrTraffic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878056": [
        {
            "ioc_value": "38.54.95.51:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878053": [
        {
            "ioc_value": "43.128.113.133:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 15:00:38",
            "last_seen_utc": "2026-09-01 03:17:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878054": [
        {
            "ioc_value": "43.129.180.120:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 15:00:38",
            "last_seen_utc": "2026-08-31 20:36:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878052": [
        {
            "ioc_value": "hsxhsodcx.eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 14:46:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878051": [
        {
            "ioc_value": "niaoend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 14:30:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1878046": [
        {
            "ioc_value": "165.22.81.15:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 14:18:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878050": [
        {
            "ioc_value": "https://eelorme.lol/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-17 14:18:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878049": [
        {
            "ioc_value": "111.170.148.132:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878047": [
        {
            "ioc_value": "189.128.189.249:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 14:05:05",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878048": [
        {
            "ioc_value": "103.85.226.66:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877793": [
        {
            "ioc_value": "162.243.79.150:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 13:34:14",
            "last_seen_utc": "2026-08-17 13:15:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877833": [
        {
            "ioc_value": "64.227.165.222:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 13:34:14",
            "last_seen_utc": "2026-08-17 13:16:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877890": [
        {
            "ioc_value": "157.245.194.180:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 13:34:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877914": [
        {
            "ioc_value": "139.59.108.178:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 13:34:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877916": [
        {
            "ioc_value": "http://172.168.179.87:43221/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 13:34:11",
            "last_seen_utc": "2026-08-25 00:19:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/172.168.179.87",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877917": [
        {
            "ioc_value": "http://139.135.45.135:38747/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 13:34:11",
            "last_seen_utc": "2026-08-25 00:19:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.45.135",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877928": [
        {
            "ioc_value": "64.227.165.222:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 13:34:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878031": [
        {
            "ioc_value": "eelorme.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-17 13:34:10",
            "last_seen_utc": "2026-08-17 19:11:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878032": [
        {
            "ioc_value": "https://eelorme.lol/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-17 13:34:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878033": [
        {
            "ioc_value": "https://eelorme.lol/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-17 13:34:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1878044": [
        {
            "ioc_value": "89.19.223.68:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 13:34:08",
            "last_seen_utc": "2026-08-20 00:49:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1878043": [
        {
            "ioc_value": "povojiru.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 13:17:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1878042": [
        {
            "ioc_value": "vfgaunjv.usa-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 13:14:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878039": [
        {
            "ioc_value": "solasa.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878040": [
        {
            "ioc_value": "arnomorel.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878041": [
        {
            "ioc_value": "xn--bodenqualitt-qcb.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878037": [
        {
            "ioc_value": "martinspremiumhookah.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878038": [
        {
            "ioc_value": "agenceday.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878034": [
        {
            "ioc_value": "echelette.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:28",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878035": [
        {
            "ioc_value": "sittervalley.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:11:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878030": [
        {
            "ioc_value": "149.88.66.234:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878028": [
        {
            "ioc_value": "149.88.66.234:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878029": [
        {
            "ioc_value": "149.88.66.234:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878027": [
        {
            "ioc_value": "149.88.66.234:9200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878026": [
        {
            "ioc_value": "119.29.122.42:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878025": [
        {
            "ioc_value": "pericare.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878024": [
        {
            "ioc_value": "weinregion-drei-seen.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:26",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878020": [
        {
            "ioc_value": "swissquote-events.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878022": [
        {
            "ioc_value": "kirchehundwil.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878018": [
        {
            "ioc_value": "cameliakrupp.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878019": [
        {
            "ioc_value": "fondation-michelham.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1878015": [
        {
            "ioc_value": "https://shereegardnercogan.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 13:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/shereegardnercogan.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1878012": [
        {
            "ioc_value": "wildblut.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:37",
            "last_seen_utc": "2026-08-26 21:54:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878013": [
        {
            "ioc_value": "windsorparknordic.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:37",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878014": [
        {
            "ioc_value": "zetaclinic.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:37",
            "last_seen_utc": "2026-08-26 09:07:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877995": [
        {
            "ioc_value": "ruthene-coachin.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-26 09:16:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877996": [
        {
            "ioc_value": "rysiaisuvisuomene.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-25 17:19:27",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877997": [
        {
            "ioc_value": "sandomenicoets.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877998": [
        {
            "ioc_value": "savanamining.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877999": [
        {
            "ioc_value": "sjpatrimoine.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878001": [
        {
            "ioc_value": "smildner.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-26 09:16:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878003": [
        {
            "ioc_value": "tcsaasa.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878004": [
        {
            "ioc_value": "theatrecharbon.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-26 09:16:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878005": [
        {
            "ioc_value": "ticketloves.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878007": [
        {
            "ioc_value": "ultraanalogic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-26 09:16:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878009": [
        {
            "ioc_value": "vickiwusche.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1878011": [
        {
            "ioc_value": "wekeepit.social",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:36",
            "last_seen_utc": "2026-08-25 18:59:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877977": [
        {
            "ioc_value": "leitebrasil.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877978": [
        {
            "ioc_value": "lejardindunous.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877979": [
        {
            "ioc_value": "liebekenntkeinalter.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877982": [
        {
            "ioc_value": "marjanalkhair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 16:44:39",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877983": [
        {
            "ioc_value": "modernfuji-ksa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-26 09:07:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877984": [
        {
            "ioc_value": "mpdumont.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-26 09:16:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877985": [
        {
            "ioc_value": "natuurlijkheidi.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-26 08:57:48",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877988": [
        {
            "ioc_value": "pacesetterschurch.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-28 00:19:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877989": [
        {
            "ioc_value": "pptrans.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 16:44:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877990": [
        {
            "ioc_value": "purnama-4d.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-26 09:26:23",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877992": [
        {
            "ioc_value": "rollingriversafaris.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 17:59:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877993": [
        {
            "ioc_value": "rouletterebel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877994": [
        {
            "ioc_value": "roundesk.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:35",
            "last_seen_utc": "2026-08-25 17:29:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877962": [
        {
            "ioc_value": "goshenalliance.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877964": [
        {
            "ioc_value": "gtde.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877965": [
        {
            "ioc_value": "harapouya.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877966": [
        {
            "ioc_value": "havenpresents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-26 09:42:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877967": [
        {
            "ioc_value": "hbbuilding.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-26 09:42:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877968": [
        {
            "ioc_value": "helpgrandparents.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877971": [
        {
            "ioc_value": "jzlightshow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-26 09:07:53",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877974": [
        {
            "ioc_value": "laboralmente.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:34",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877945": [
        {
            "ioc_value": "creoo.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877947": [
        {
            "ioc_value": "dennistennis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-28 00:09:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877948": [
        {
            "ioc_value": "depannage-serrurier-91.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-25 16:43:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877950": [
        {
            "ioc_value": "dodeliver.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-25 16:43:46",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877951": [
        {
            "ioc_value": "domoredigital.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-28 00:09:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877952": [
        {
            "ioc_value": "eastmont.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877956": [
        {
            "ioc_value": "estudiogurugu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877957": [
        {
            "ioc_value": "fabienne-mercier.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:33",
            "last_seen_utc": "2026-08-26 09:16:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877934": [
        {
            "ioc_value": "archevive.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:32",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877935": [
        {
            "ioc_value": "arogabio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:32",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877936": [
        {
            "ioc_value": "artemretouching.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:32",
            "last_seen_utc": "2026-08-26 09:42:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877941": [
        {
            "ioc_value": "campfire-hospitality.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:32",
            "last_seen_utc": "2026-08-26 07:04:19",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877943": [
        {
            "ioc_value": "chumak.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 12:53:32",
            "last_seen_utc": "2026-08-28 00:59:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877933": [
        {
            "ioc_value": "numeda.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 12:52:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": null,
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877931": [
        {
            "ioc_value": "fdda100481ab895fa5c81d4b2ed55176d36b988feb213fa6145478c9fa197fa9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 12:51:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877932": [
        {
            "ioc_value": "raw.githubusercontent.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 12:51:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877930": [
        {
            "ioc_value": "ffec9d57ae6924f08a8d815ecf33d152e4d7783ac8177da2bad6912680eed45a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 12:51:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877929": [
        {
            "ioc_value": "ujdq6i5l.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 12:50:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877926": [
        {
            "ioc_value": "https://rex.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 12:40:07",
            "last_seen_utc": "2026-08-17 14:25:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877924": [
        {
            "ioc_value": "https://rex.1131gg.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 12:40:06",
            "last_seen_utc": "2026-08-17 17:25:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877925": [
        {
            "ioc_value": "rex.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 12:40:06",
            "last_seen_utc": "2026-08-17 14:25:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877923": [
        {
            "ioc_value": "rex.1131gg.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 12:40:05",
            "last_seen_utc": "2026-08-17 17:25:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877921": [
        {
            "ioc_value": "156.252.60.18:22011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 12:35:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41a0fee35a8894c4ea476ea17f212ea0b08ec55cfe2e8caab209dd6015fcb3dc/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877922": [
        {
            "ioc_value": "156.252.60.18:22012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 12:35:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41a0fee35a8894c4ea476ea17f212ea0b08ec55cfe2e8caab209dd6015fcb3dc/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877918": [
        {
            "ioc_value": "194.116.236.83:15608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-17 12:20:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fd7c3d18e60405f94ab0ae1aeccd609b803da3850e9950bc5104a646756db943/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877919": [
        {
            "ioc_value": "194.116.236.83:15609",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-17 12:20:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fd7c3d18e60405f94ab0ae1aeccd609b803da3850e9950bc5104a646756db943/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877915": [
        {
            "ioc_value": "76i045oo.alldayslimtea.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 12:09:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877901": [
        {
            "ioc_value": "https://www.phonglong.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.phonglong.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877902": [
        {
            "ioc_value": "https://simple88.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/simple88.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877903": [
        {
            "ioc_value": "https://glaube.at/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/glaube.at",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877904": [
        {
            "ioc_value": "https://www.singaporecasinogames.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.singaporecasinogames.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877905": [
        {
            "ioc_value": "https://www.carolinajane.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.carolinajane.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877906": [
        {
            "ioc_value": "https://zonreizen.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zonreizen.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877907": [
        {
            "ioc_value": "https://planetwearz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/planetwearz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877908": [
        {
            "ioc_value": "https://www.newyorkcasinohotels.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.newyorkcasinohotels.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877909": [
        {
            "ioc_value": "https://ope.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ope.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877910": [
        {
            "ioc_value": "https://asquareengineering.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/asquareengineering.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877911": [
        {
            "ioc_value": "https://www.shaikhsalman.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.shaikhsalman.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877912": [
        {
            "ioc_value": "https://www.moqolobeaute.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.moqolobeaute.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877913": [
        {
            "ioc_value": "https://www.sudanfacts.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sudanfacts.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877900": [
        {
            "ioc_value": "https://pixs.jp/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 12:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pixs.jp",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877899": [
        {
            "ioc_value": "c2.apamm.kdns.fr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 11:47:55",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877897": [
        {
            "ioc_value": "cira-gmbh.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:12",
            "last_seen_utc": "2026-08-23 02:04:36",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877898": [
        {
            "ioc_value": "jaremodel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:12",
            "last_seen_utc": "2026-08-18 07:18:22",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877894": [
        {
            "ioc_value": "scottishfood.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:11",
            "last_seen_utc": "2026-08-18 07:27:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877895": [
        {
            "ioc_value": "hplusweb.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:11",
            "last_seen_utc": "2026-08-18 07:18:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877896": [
        {
            "ioc_value": "baladna-fs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877892": [
        {
            "ioc_value": "talcgrindingmill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:10",
            "last_seen_utc": "2026-08-18 07:27:36",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877893": [
        {
            "ioc_value": "arenaremax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:10",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877891": [
        {
            "ioc_value": "unimedpl.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:40:09",
            "last_seen_utc": "2026-08-18 07:28:29",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877888": [
        {
            "ioc_value": "rodsua.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877889": [
        {
            "ioc_value": "sichtweisen.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877887": [
        {
            "ioc_value": "3aprod.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:30:07",
            "last_seen_utc": "2026-08-23 18:38:35",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877884": [
        {
            "ioc_value": "asp-roofing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:25:06",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877885": [
        {
            "ioc_value": "mentoria.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:25:06",
            "last_seen_utc": "2026-08-18 07:19:40",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877886": [
        {
            "ioc_value": "mediapulsegh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:25:06",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877882": [
        {
            "ioc_value": "2911digital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:10",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877883": [
        {
            "ioc_value": "crpdesign.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:10",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877879": [
        {
            "ioc_value": "cardiobc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:09",
            "last_seen_utc": "2026-08-18 07:15:35",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877880": [
        {
            "ioc_value": "olivewoodons-art.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:09",
            "last_seen_utc": "2026-08-18 07:20:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877881": [
        {
            "ioc_value": "mscottmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:09",
            "last_seen_utc": "2026-08-18 07:20:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877877": [
        {
            "ioc_value": "keysoft.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:08",
            "last_seen_utc": "2026-08-18 07:18:24",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877878": [
        {
            "ioc_value": "gites-vignerons.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:08",
            "last_seen_utc": "2026-08-18 07:17:23",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877874": [
        {
            "ioc_value": "pecunio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:07",
            "last_seen_utc": "2026-08-18 07:23:56",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877875": [
        {
            "ioc_value": "bestpressreleaseservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:07",
            "last_seen_utc": "2026-08-18 07:15:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877876": [
        {
            "ioc_value": "latreille-mediation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:07",
            "last_seen_utc": "2026-08-18 07:19:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877873": [
        {
            "ioc_value": "bqcx.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:15:06",
            "last_seen_utc": "2026-08-18 07:15:34",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877872": [
        {
            "ioc_value": "wua6s9ur.usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 11:11:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877870": [
        {
            "ioc_value": "7089aa793f37d0aadea082f32f157552fbcc42b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 11:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877871": [
        {
            "ioc_value": "65963e94f69b77eea2a76069f56e505e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 11:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877867": [
        {
            "ioc_value": "9fa2075f0e36f3b351b63965d4629a10115a01b8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877868": [
        {
            "ioc_value": "2dd28514241e2b87dbdb6625b04f418f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877869": [
        {
            "ioc_value": "d5a72f54e4cea54ef1bd5ec023e4c62420c8f6a18098495babd4616b65b11718",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 11:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877864": [
        {
            "ioc_value": "274f146ca31f60c0d21c4ad9a01edd50c9f8edb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-17 11:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877865": [
        {
            "ioc_value": "ce08cd51504080093e47127c0d5894c3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-17 11:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877866": [
        {
            "ioc_value": "24aa10a7b03a9ae4dcfda6eab4a06e634cd7012f77fb05d95a444f7a970aec05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877861": [
        {
            "ioc_value": "a4a89c3d81a7f88a4b8a20cb639aef7e9f300e3e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 11:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877862": [
        {
            "ioc_value": "4e90efe7de51f3551b96ba82e0d5db3e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 11:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877863": [
        {
            "ioc_value": "f2a19abee0adb079647cdbb742590710a395ec89b47cfde05842bcb9fbf6409b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-17 11:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877859": [
        {
            "ioc_value": "456a8cc2cd225eb0ceee3cbc457859dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877860": [
        {
            "ioc_value": "2f7fbb661828a3e4b29a509cd7dda3b0709663afc5cc30d3e16c6058326ac0d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 11:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877856": [
        {
            "ioc_value": "6fa3a2610674a2e92428266bb8521ccc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877857": [
        {
            "ioc_value": "3cc7dab11f0f333fad56e428efaa638ccbf7af16eb4dfc8dab2621732fb22d92",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877858": [
        {
            "ioc_value": "c8f8ba1ed5e7b069e829819041d841842c42c334",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877853": [
        {
            "ioc_value": "e2eeb94c707d4872149c0e85ef6a5991",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877854": [
        {
            "ioc_value": "2febd77a459f7f10ecf3bf36fa42689f765a333990ced7f04ab898e0595edbb2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877855": [
        {
            "ioc_value": "bcc296c1b06eaa631b5d07d38b9780444313ec15",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877851": [
        {
            "ioc_value": "bb796bb63f6985e75dbb6c1f8eb8640dee859f989f09a4a2fd9102d33918139b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877852": [
        {
            "ioc_value": "7ce0a02f6da71e83b09219a28166878d24a0015b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877850": [
        {
            "ioc_value": "3d58f699eb208987dc61ac72116aae65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877849": [
        {
            "ioc_value": "1e306b0a9f92d58b27af588937a93d31fdb733dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877847": [
        {
            "ioc_value": "c310a101987cdf1de355146f464af098",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-17 11:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877848": [
        {
            "ioc_value": "d97ea10d1dbfe2a69e0d2387e8985635b20628495918abd54c4b052c0acf05b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877844": [
        {
            "ioc_value": "d9bf7b1a5f8cb94f92ef00e67f7a285d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-17 11:09:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877845": [
        {
            "ioc_value": "480f2ddeaa596166f6a4a4334f797915f04c99fe233d51cc43b9b79a52464980",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-17 11:09:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877846": [
        {
            "ioc_value": "5013baa3c730c09b81bdbde13b27c094fb9fc23e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-17 11:09:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877842": [
        {
            "ioc_value": "a5268bb0447ddd8e13190ce95933ebd3c2a65a726df96a8662fe3d78bd874df8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-17 11:09:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877843": [
        {
            "ioc_value": "dc1fe4117917b32c9a0e44cdc052fe444af95237",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-17 11:09:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877839": [
        {
            "ioc_value": "bc4bfc479321f0ec2785e1488ed5421ab3f540fe55f4943748e49b1e6030fdeb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877840": [
        {
            "ioc_value": "dd7baeea71b4f30f37f5e747151bd6d7c7b0e315",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877841": [
        {
            "ioc_value": "c90cfe92b30a060a62e271a8d0b9de3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-17 11:09:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877836": [
        {
            "ioc_value": "859de3cf69bdc175a91c150ecc23c825bb38d999c6ef4e17955a9a78fa139943",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkcloud",
            "malware_alias": null,
            "malware_printable": "DarkCloud Stealer",
            "first_seen_utc": "2026-08-17 11:09:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877837": [
        {
            "ioc_value": "af038b12ca0d58d24556bb81b6bdb549a7420c00",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkcloud",
            "malware_alias": null,
            "malware_printable": "DarkCloud Stealer",
            "first_seen_utc": "2026-08-17 11:09:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877838": [
        {
            "ioc_value": "f060577086b62fa9df2ce231f2221291",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkcloud",
            "malware_alias": null,
            "malware_printable": "DarkCloud Stealer",
            "first_seen_utc": "2026-08-17 11:09:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877834": [
        {
            "ioc_value": "https://adlerbach.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/adlerbach.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877835": [
        {
            "ioc_value": "https://www.optimeg.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 11:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.optimeg.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877831": [
        {
            "ioc_value": "herault-elagage.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:10",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877832": [
        {
            "ioc_value": "emasrl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:10",
            "last_seen_utc": "2026-08-18 07:16:28",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877828": [
        {
            "ioc_value": "rochesterphotoboothrentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877829": [
        {
            "ioc_value": "aak.istanbul",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:09",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877830": [
        {
            "ioc_value": "casinogooroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:09",
            "last_seen_utc": "2026-08-18 07:15:36",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877825": [
        {
            "ioc_value": "wirthinger.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:08",
            "last_seen_utc": "2026-08-18 07:28:34",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877826": [
        {
            "ioc_value": "vb-howto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:08",
            "last_seen_utc": "2026-08-18 07:28:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877827": [
        {
            "ioc_value": "wateronlydries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:08",
            "last_seen_utc": "2026-08-18 07:28:33",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877822": [
        {
            "ioc_value": "aprireunlocale.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:07",
            "last_seen_utc": "2026-08-24 11:17:22",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877823": [
        {
            "ioc_value": "ditttos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:07",
            "last_seen_utc": "2026-08-18 07:16:25",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877824": [
        {
            "ioc_value": "dzakwan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:07",
            "last_seen_utc": "2026-08-18 07:16:26",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877821": [
        {
            "ioc_value": "jun99.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:59:06",
            "last_seen_utc": "2026-08-18 07:18:23",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877818": [
        {
            "ioc_value": "hopscotchva.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877819": [
        {
            "ioc_value": "farmaciaseminari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:25",
            "last_seen_utc": "2026-08-18 07:17:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877820": [
        {
            "ioc_value": "asquareengineering.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:25",
            "last_seen_utc": "2026-08-18 07:14:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877814": [
        {
            "ioc_value": "planetwearz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:24",
            "last_seen_utc": "2026-08-18 07:23:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877815": [
        {
            "ioc_value": "faceandbodystudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:24",
            "last_seen_utc": "2026-08-18 07:17:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877816": [
        {
            "ioc_value": "clinicadentalcasany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:24",
            "last_seen_utc": "2026-08-18 07:16:20",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877817": [
        {
            "ioc_value": "wulcano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:24",
            "last_seen_utc": "2026-08-18 07:28:34",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877811": [
        {
            "ioc_value": "shaikhsalman.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:23",
            "last_seen_utc": "2026-08-18 07:27:30",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877812": [
        {
            "ioc_value": "newyorkcasinohotels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:23",
            "last_seen_utc": "2026-08-18 07:20:35",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877813": [
        {
            "ioc_value": "360-solutions.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:23",
            "last_seen_utc": "2026-08-26 17:47:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877807": [
        {
            "ioc_value": "singaporecasinogames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:22",
            "last_seen_utc": "2026-08-18 07:27:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877808": [
        {
            "ioc_value": "prestigeurgentcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:22",
            "last_seen_utc": "2026-08-18 07:23:59",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877809": [
        {
            "ioc_value": "zonreizen.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:22",
            "last_seen_utc": "2026-08-18 07:30:22",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877810": [
        {
            "ioc_value": "ope.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877804": [
        {
            "ioc_value": "getmagicthimble.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:21",
            "last_seen_utc": "2026-08-24 11:17:23",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877805": [
        {
            "ioc_value": "gbs-guinee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:21",
            "last_seen_utc": "2026-08-18 07:17:22",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877806": [
        {
            "ioc_value": "offerteschilderwerken.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:21",
            "last_seen_utc": "2026-08-18 07:20:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877802": [
        {
            "ioc_value": "carolinajane.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:20",
            "last_seen_utc": "2026-08-24 11:12:17",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877803": [
        {
            "ioc_value": "phonglong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:48:20",
            "last_seen_utc": "2026-08-24 11:12:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877801": [
        {
            "ioc_value": "erubhug7.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 10:42:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877800": [
        {
            "ioc_value": "https://flintazimuth.top/private/session-util.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 10:42:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877799": [
        {
            "ioc_value": "flintazimuth.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 10:41:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877796": [
        {
            "ioc_value": "simple88.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:38:19",
            "last_seen_utc": "2026-08-18 07:27:31",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877797": [
        {
            "ioc_value": "glaube.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:38:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877798": [
        {
            "ioc_value": "datafruit.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:38:19",
            "last_seen_utc": "2026-08-18 07:16:23",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877794": [
        {
            "ioc_value": "tazebilgi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:38:18",
            "last_seen_utc": "2026-08-24 11:07:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877795": [
        {
            "ioc_value": "pixs.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:38:18",
            "last_seen_utc": "2026-08-18 07:23:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877792": [
        {
            "ioc_value": "holdenmed.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:28:18",
            "last_seen_utc": "2026-08-18 07:18:17",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877791": [
        {
            "ioc_value": "xray-gifts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:28:17",
            "last_seen_utc": "2026-08-18 07:30:20",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877763": [
        {
            "ioc_value": "https://svhost-update-service.casa/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-17 10:05:22",
            "last_seen_utc": "2026-09-01 02:18:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,PG,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877775": [
        {
            "ioc_value": "myrootsweb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 10:03:12",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877774": [
        {
            "ioc_value": "brled.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 10:03:11",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877768": [
        {
            "ioc_value": "horizoninfo.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 10:03:10",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877769": [
        {
            "ioc_value": "megaterasoln.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 10:03:10",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877764": [
        {
            "ioc_value": "https://www.talcgrindingmill.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 10:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.talcgrindingmill.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877751": [
        {
            "ioc_value": "95.133.229.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 09:47:53",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877750": [
        {
            "ioc_value": "94.250.190.137:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-17 09:47:52",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877749": [
        {
            "ioc_value": "86.48.16.94:3200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 09:47:39",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877748": [
        {
            "ioc_value": "83.136.211.230:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 09:47:35",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877747": [
        {
            "ioc_value": "82.158.90.134:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-17 09:47:34",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877745": [
        {
            "ioc_value": "82.158.90.131:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-17 09:47:33",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877746": [
        {
            "ioc_value": "82.158.90.133:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-17 09:47:33",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877744": [
        {
            "ioc_value": "217.60.195.226:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-17 09:46:26",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877743": [
        {
            "ioc_value": "204.13.234.19:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-17 09:45:33",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877742": [
        {
            "ioc_value": "193.32.162.108:4432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-17 09:45:13",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877741": [
        {
            "ioc_value": "186.112.73.78:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-17 09:44:57",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877740": [
        {
            "ioc_value": "178.128.14.67:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-17 09:44:35",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877739": [
        {
            "ioc_value": "169.58.180.142:30400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 09:44:22",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877738": [
        {
            "ioc_value": "145.63.130.104:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 09:43:51",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877737": [
        {
            "ioc_value": "107.173.160.185:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-17 09:43:20",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877698": [
        {
            "ioc_value": "https://willowgazette.top/callback/beta-ajax.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877699": [
        {
            "ioc_value": "belfryledger.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877700": [
        {
            "ioc_value": "https://belfryledger.top/callback/beta-ajax.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877701": [
        {
            "ioc_value": "olivenarthex.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:06",
            "last_seen_utc": "2026-08-17 09:03:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877702": [
        {
            "ioc_value": "https://olivenarthex.top/middleware/api-script.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877703": [
        {
            "ioc_value": "https://umbergalleon.top/status/alias-build.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877705": [
        {
            "ioc_value": "umbergalleon.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877706": [
        {
            "ioc_value": "https://loggiaelm.top/realm/reset-response.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877707": [
        {
            "ioc_value": "loggiaelm.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877708": [
        {
            "ioc_value": "https://pergolamimosa.top/alias/settings-render.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877709": [
        {
            "ioc_value": "pergolamimosa.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 09:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877719": [
        {
            "ioc_value": "shica.jp",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 09:22:56",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877716": [
        {
            "ioc_value": "calancha.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 09:12:55",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877710": [
        {
            "ioc_value": "0btzdnc3.us-en-us-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 09:09:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877704": [
        {
            "ioc_value": "38.190.196.19:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877692": [
        {
            "ioc_value": "https://searchranktraffic.live/jsx",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 08:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877693": [
        {
            "ioc_value": "168.144.30.198:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 08:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877695": [
        {
            "ioc_value": "brightdeltazone.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 08:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877696": [
        {
            "ioc_value": "https://brightdeltazone.top/legacy/proxy-util.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 08:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877697": [
        {
            "ioc_value": "https://hornbeamcairn.top/endpoint/handler-stylesheet.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-17 08:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877694": [
        {
            "ioc_value": "https://gbs-guinee.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 08:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gbs-guinee.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877691": [
        {
            "ioc_value": "8.163.59.20:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877690": [
        {
            "ioc_value": "43.225.157.17:1080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877689": [
        {
            "ioc_value": "137.220.225.62:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877339": [
        {
            "ioc_value": "azimuth-ai.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877340": [
        {
            "ioc_value": "bryanbuser.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877341": [
        {
            "ioc_value": "buddybucks.pro",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877342": [
        {
            "ioc_value": "drsdgrady.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877343": [
        {
            "ioc_value": "expat-advisors.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877345": [
        {
            "ioc_value": "floridatomatoexchange.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877344": [
        {
            "ioc_value": "ferienheimadelboden.ch",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877346": [
        {
            "ioc_value": "forestiptv.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877347": [
        {
            "ioc_value": "forge-de-laguiole.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877348": [
        {
            "ioc_value": "halaltrust.shop",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877349": [
        {
            "ioc_value": "i-water.ae",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877350": [
        {
            "ioc_value": "justtruckandvan.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877351": [
        {
            "ioc_value": "nexalgum.com.br",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877352": [
        {
            "ioc_value": "nexthireagency.ai",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877353": [
        {
            "ioc_value": "nixoniptv.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877354": [
        {
            "ioc_value": "nordicpouch.co.nz",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877356": [
        {
            "ioc_value": "revinternetcard.com.vn",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877355": [
        {
            "ioc_value": "rag.is",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877357": [
        {
            "ioc_value": "rmbatiment.fr",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877358": [
        {
            "ioc_value": "rock247.ca",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877359": [
        {
            "ioc_value": "rprf.org",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877360": [
        {
            "ioc_value": "saudiembassyattestation.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877361": [
        {
            "ioc_value": "sbmk.us",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877362": [
        {
            "ioc_value": "shemitah.co.za",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877363": [
        {
            "ioc_value": "shermanoakslockandsafe.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877364": [
        {
            "ioc_value": "showtimegraphics.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877365": [
        {
            "ioc_value": "skeye.media",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877366": [
        {
            "ioc_value": "skladpodatkowy.pl",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877367": [
        {
            "ioc_value": "smieciarki.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877368": [
        {
            "ioc_value": "smkn3-sukawati.sch.id",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:01:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877369": [
        {
            "ioc_value": "southernrooferskingsland.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877370": [
        {
            "ioc_value": "sparkling.ee",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877371": [
        {
            "ioc_value": "sprezarki.biz.pl",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877372": [
        {
            "ioc_value": "stiod.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877373": [
        {
            "ioc_value": "stockoptionscafe.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877374": [
        {
            "ioc_value": "styyleddigital.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877375": [
        {
            "ioc_value": "sugarmummies.co.ke",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877376": [
        {
            "ioc_value": "suzukimobiljakarta.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877377": [
        {
            "ioc_value": "tamidcafe.co.il",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877378": [
        {
            "ioc_value": "telethunder.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877379": [
        {
            "ioc_value": "terrariumbois.be",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877380": [
        {
            "ioc_value": "thehealthyglobe.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877381": [
        {
            "ioc_value": "themortgageinstitute.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877382": [
        {
            "ioc_value": "thequotes.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877383": [
        {
            "ioc_value": "therobotmower.co.uk",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877385": [
        {
            "ioc_value": "tokobarcode.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877384": [
        {
            "ioc_value": "thungxop.com.vn",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877386": [
        {
            "ioc_value": "tottare.se",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877387": [
        {
            "ioc_value": "toutautourdumonde.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877388": [
        {
            "ioc_value": "traditionsofthesun.org",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877389": [
        {
            "ioc_value": "tropicana-dryflowers.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877390": [
        {
            "ioc_value": "tsujidou.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877391": [
        {
            "ioc_value": "turpial.org.ve",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877392": [
        {
            "ioc_value": "ucc-madeeasy.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877393": [
        {
            "ioc_value": "uluwatusunsethills.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877394": [
        {
            "ioc_value": "undar.web.id",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877395": [
        {
            "ioc_value": "undergrindcafe.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877396": [
        {
            "ioc_value": "unishire.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877397": [
        {
            "ioc_value": "vailstables.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877398": [
        {
            "ioc_value": "www.bullinellarete.it",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877401": [
        {
            "ioc_value": "www.pspolo.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877399": [
        {
            "ioc_value": "www.erlebnisrundreisen.de",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877400": [
        {
            "ioc_value": "www.onpointdancelab.nl",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877402": [
        {
            "ioc_value": "www.qliteglobal.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877403": [
        {
            "ioc_value": "www.qpes.org",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877404": [
        {
            "ioc_value": "www.rothmania.net",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877405": [
        {
            "ioc_value": "www.sardandleff.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877406": [
        {
            "ioc_value": "www.seacuremouthpiece.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877407": [
        {
            "ioc_value": "www.secamcctv.rs",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877408": [
        {
            "ioc_value": "www.sgiicenter.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877409": [
        {
            "ioc_value": "www.steppe.mk.ua",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877411": [
        {
            "ioc_value": "www.takebacktheworkplacemarch.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877410": [
        {
            "ioc_value": "www.surba.net",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877412": [
        {
            "ioc_value": "www.tekkeli.com.tr",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877413": [
        {
            "ioc_value": "www.temteknikhirdavat.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877414": [
        {
            "ioc_value": "www.tomahawkdh.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877415": [
        {
            "ioc_value": "www.tpmspa.it",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877416": [
        {
            "ioc_value": "www.tucsonchatline.net",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877496": [
        {
            "ioc_value": "api-ext.bixbitemarketing.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877497": [
        {
            "ioc_value": "norrykilu231.digital",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 08:00:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877688": [
        {
            "ioc_value": "http://158.94.210.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-17 08:00:26",
            "last_seen_utc": "2026-08-30 22:47:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,userr",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877669": [
        {
            "ioc_value": "http://124.29.247.93:60584/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 08:00:01",
            "last_seen_utc": "2026-08-25 00:19:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.247.93",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877670": [
        {
            "ioc_value": "http://153.117.37.83:55674/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 08:00:00",
            "last_seen_utc": "2026-08-25 00:19:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.37.83",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877671": [
        {
            "ioc_value": "http://110.38.210.180:57109/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 08:00:00",
            "last_seen_utc": "2026-08-25 00:19:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.210.180",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877681": [
        {
            "ioc_value": "165.245.242.183:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 07:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877686": [
        {
            "ioc_value": "https://envio-colombia.blog/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 07:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4-72,card-theft,cloudflare,colombia,otp-relay,phishing,phishing-kit,telegram-exfil,tg.pe",
            "anonymous": 0,
            "reporter": "tgpe"
        }
    ],
    "1877687": [
        {
            "ioc_value": "xgfbzv46.theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 07:57:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877685": [
        {
            "ioc_value": "imagesafeplace.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-17 07:52:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877684": [
        {
            "ioc_value": "cufgin74.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 07:49:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877683": [
        {
            "ioc_value": "https://bib.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 07:45:05",
            "last_seen_utc": "2026-08-17 08:25:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877682": [
        {
            "ioc_value": "bib.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 07:45:04",
            "last_seen_utc": "2026-08-17 08:25:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877679": [
        {
            "ioc_value": "bib.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 07:35:05",
            "last_seen_utc": "2026-08-17 12:25:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877680": [
        {
            "ioc_value": "https://bib.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 07:35:05",
            "last_seen_utc": "2026-08-17 12:25:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877678": [
        {
            "ioc_value": "https://titatitato.net/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-17 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b41017f98f93938550a6655981a500ca5a5a97ea9503e3de89948f8d3cab057b/",
            "tags": "BlakcSeeStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877676": [
        {
            "ioc_value": "01wrcvpc.theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 07:09:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877675": [
        {
            "ioc_value": "47.108.140.10:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 07:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877673": [
        {
            "ioc_value": "114.132.46.254:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877674": [
        {
            "ioc_value": "120.79.192.53:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877672": [
        {
            "ioc_value": "glaube.li",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 06:29:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877668": [
        {
            "ioc_value": "babmalo.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 06:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877667": [
        {
            "ioc_value": "cem.mesoptik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 06:16:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877666": [
        {
            "ioc_value": "loepaord.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-17 06:16:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877665": [
        {
            "ioc_value": "185.34.147.32:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-17 06:05:06",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877664": [
        {
            "ioc_value": "34.150.91.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 06:05:05",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877338": [
        {
            "ioc_value": "allmobiletools.net",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-17 05:45:08",
            "last_seen_utc": "2026-08-16 19:58:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1877663": [
        {
            "ioc_value": "s570wlpz.us-us-us-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 05:42:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877146": [
        {
            "ioc_value": "43.129.180.120:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 05:38:27",
            "last_seen_utc": "2026-08-31 08:22:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877290": [
        {
            "ioc_value": "coldformat.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 05:38:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877269": [
        {
            "ioc_value": "bimba.anix-to.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 05:38:26",
            "last_seen_utc": "2026-08-16 15:09:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1877291": [
        {
            "ioc_value": "https://coldformat.info/usa",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-17 05:38:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877292": [
        {
            "ioc_value": "https://rnd.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 05:38:25",
            "last_seen_utc": "2026-08-17 07:25:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "726a8431d5d2ee941d0e6046b5948889,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877296": [
        {
            "ioc_value": "http://105.224.117.178:50959/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 05:38:24",
            "last_seen_utc": "2026-08-25 00:19:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/105.224.117.178",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877306": [
        {
            "ioc_value": "https://hadiordan.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:38:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877307": [
        {
            "ioc_value": "https://hadiordan.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:38:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877308": [
        {
            "ioc_value": "https://hadiordan.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:38:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877309": [
        {
            "ioc_value": "https://hadiordan.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:38:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877310": [
        {
            "ioc_value": "https://hadiordan.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:38:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877312": [
        {
            "ioc_value": "hadiordan.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:38:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877424": [
        {
            "ioc_value": "198.144.179.82:55650",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-17 05:38:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1877444": [
        {
            "ioc_value": "hehavewu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 05:38:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877445": [
        {
            "ioc_value": "jx1akqrgxx5exg.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 05:38:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877446": [
        {
            "ioc_value": "kotisine.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 05:38:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877447": [
        {
            "ioc_value": "ml6iyrcrbr.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 05:38:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877448": [
        {
            "ioc_value": "npeew21566.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 05:38:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877449": [
        {
            "ioc_value": "sihilagi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-17 05:38:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877511": [
        {
            "ioc_value": "43.106.16.169:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877512": [
        {
            "ioc_value": "47.251.17.93:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877513": [
        {
            "ioc_value": "54.149.132.52:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877514": [
        {
            "ioc_value": "47.254.74.124:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877515": [
        {
            "ioc_value": "158.247.224.146:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877517": [
        {
            "ioc_value": "64.83.47.231:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877516": [
        {
            "ioc_value": "101.42.183.92:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877518": [
        {
            "ioc_value": "64.90.17.97:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877519": [
        {
            "ioc_value": "47.254.3.109:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877520": [
        {
            "ioc_value": "70.39.181.128:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877521": [
        {
            "ioc_value": "140.99.130.213:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877522": [
        {
            "ioc_value": "120.48.91.111:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877523": [
        {
            "ioc_value": "103.193.151.121:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877524": [
        {
            "ioc_value": "101.34.235.48:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:38:01",
            "last_seen_utc": "2026-08-17 02:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877535": [
        {
            "ioc_value": "http://125.42.11.109:35349/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-17 05:38:00",
            "last_seen_utc": "2026-08-25 00:19:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.42.11.109",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877525": [
        {
            "ioc_value": "192.227.128.8:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:37:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877545": [
        {
            "ioc_value": "103.217.186.180:55554",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 05:37:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1877551": [
        {
            "ioc_value": "165.22.81.15:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 05:37:58",
            "last_seen_utc": "2026-08-22 14:09:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877577": [
        {
            "ioc_value": "https://hulusi.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:37:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e6463c87739f2d4d0b345ba5f8954070926b13a43176a50ca4a8d7b64e3676/",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877578": [
        {
            "ioc_value": "https://hulusi.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:37:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e6463c87739f2d4d0b345ba5f8954070926b13a43176a50ca4a8d7b64e3676/",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877579": [
        {
            "ioc_value": "https://hulusi.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e6463c87739f2d4d0b345ba5f8954070926b13a43176a50ca4a8d7b64e3676/",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877580": [
        {
            "ioc_value": "https://hulusi.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e6463c87739f2d4d0b345ba5f8954070926b13a43176a50ca4a8d7b64e3676/",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877581": [
        {
            "ioc_value": "https://hulusi.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e6463c87739f2d4d0b345ba5f8954070926b13a43176a50ca4a8d7b64e3676/",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877639": [
        {
            "ioc_value": "157.245.194.180:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 05:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877582": [
        {
            "ioc_value": "hulusi.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-17 05:37:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e6463c87739f2d4d0b345ba5f8954070926b13a43176a50ca4a8d7b64e3676/",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877637": [
        {
            "ioc_value": "168.144.30.198:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 05:37:53",
            "last_seen_utc": "2026-08-17 12:07:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877661": [
        {
            "ioc_value": "157.245.194.180:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 05:37:53",
            "last_seen_utc": "2026-08-17 06:45:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877662": [
        {
            "ioc_value": "157.230.84.95:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-17 05:37:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877659": [
        {
            "ioc_value": "https://amanahkita.com/index.php/id/amanahkita/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 05:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/amanahkita.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877660": [
        {
            "ioc_value": "https://svtelindia.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 05:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/svtelindia.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877658": [
        {
            "ioc_value": "103.140.154.201:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 05:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877657": [
        {
            "ioc_value": "103.140.154.201:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 05:30:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877656": [
        {
            "ioc_value": "118.107.0.196:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 05:20:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877655": [
        {
            "ioc_value": "118.107.0.196:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 05:20:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877650": [
        {
            "ioc_value": "http://mrlketo.shop:8932/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 05:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877651": [
        {
            "ioc_value": "http://vexdico.shop:8539/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 05:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877652": [
        {
            "ioc_value": "http://bravplo.click:7713/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 05:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877653": [
        {
            "ioc_value": "http://vexdico.shop:8539/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 05:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877654": [
        {
            "ioc_value": "http://kupzovo.shop:7567/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 05:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877649": [
        {
            "ioc_value": "http://bravplo.click:7713/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 05:14:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877644": [
        {
            "ioc_value": "p22mjr42.belly--flush.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 05:09:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877643": [
        {
            "ioc_value": "belly--flush.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 05:07:45",
            "last_seen_utc": "2026-08-18 14:46:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877642": [
        {
            "ioc_value": "156.251.16.29:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 05:05:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877641": [
        {
            "ioc_value": "156.251.16.29:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 05:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877640": [
        {
            "ioc_value": "https://62.238.59.215",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-17 05:02:15",
            "last_seen_utc": "2026-08-18 07:04:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d5a72f54e4cea54ef1bd5ec023e4c62420c8f6a18098495babd4616b65b11718/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877638": [
        {
            "ioc_value": "https://pateriyaconsulting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 04:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pateriyaconsulting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877636": [
        {
            "ioc_value": "202.162.99.165:441",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-17 04:20:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877634": [
        {
            "ioc_value": "47.93.42.22:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 04:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877635": [
        {
            "ioc_value": "102.117.164.62:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 04:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877633": [
        {
            "ioc_value": "111.170.148.132:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877632": [
        {
            "ioc_value": "111.170.148.132:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877630": [
        {
            "ioc_value": "https://loepaord.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 04:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/loepaord.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877631": [
        {
            "ioc_value": "https://hermanoscalatayud.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 04:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hermanoscalatayud.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877629": [
        {
            "ioc_value": "nqhazxh1.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:47:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877626": [
        {
            "ioc_value": "diversitytales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:34:46",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877622": [
        {
            "ioc_value": "https://ikbenymp.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 03:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ikbenymp.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877623": [
        {
            "ioc_value": "https://thewadi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 03:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thewadi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877624": [
        {
            "ioc_value": "https://www.stateofwellness.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 03:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.stateofwellness.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877621": [
        {
            "ioc_value": "https://multyshades.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 03:30:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/multyshades.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877620": [
        {
            "ioc_value": "mccar.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:24:46",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877616": [
        {
            "ioc_value": "absoluteav.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:14:44",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877612": [
        {
            "ioc_value": "kblea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:14:43",
            "last_seen_utc": "2026-08-26 17:47:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877613": [
        {
            "ioc_value": "coaching-center.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:14:43",
            "last_seen_utc": "2026-08-25 16:30:20",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877607": [
        {
            "ioc_value": "saboracoco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:14:42",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877605": [
        {
            "ioc_value": "esurveys.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:09:40",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877601": [
        {
            "ioc_value": "sb53vhba.bellyflushs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 03:08:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877598": [
        {
            "ioc_value": "120.79.192.53:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 03:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877597": [
        {
            "ioc_value": "120.79.192.53:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 03:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877596": [
        {
            "ioc_value": "186.241.79.63:11268",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 03:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877595": [
        {
            "ioc_value": "139.196.238.43:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877594": [
        {
            "ioc_value": "http://kupzovo.shop:7567/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-17 03:01:01",
            "last_seen_utc": "2026-08-17 04:12:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af12a273133b646805713254ad2012c5708be375c9dd1a3b11b3c2dd5811bc8c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877587": [
        {
            "ioc_value": "avtomoyka.kiev.ua",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 02:55:29",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877585": [
        {
            "ioc_value": "p4x5v5j7.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 02:49:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877583": [
        {
            "ioc_value": "https://avtomoyka.kiev.ua/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 02:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/avtomoyka.kiev.ua",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877576": [
        {
            "ioc_value": "bellablumaternity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 02:14:55",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877574": [
        {
            "ioc_value": "101.34.235.48:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 02:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877575": [
        {
            "ioc_value": "101.34.235.48:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 02:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877573": [
        {
            "ioc_value": "60.185.66.128:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-17 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877569": [
        {
            "ioc_value": "loepaord.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 02:01:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877568": [
        {
            "ioc_value": "http://cp917571.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-17 02:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877567": [
        {
            "ioc_value": "kodech.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 01:54:53",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877558": [
        {
            "ioc_value": "nomolesten.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 01:34:50",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877552": [
        {
            "ioc_value": "tkshns3r.belly-flush.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 01:08:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877550": [
        {
            "ioc_value": "belly-flush.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 01:06:36",
            "last_seen_utc": "2026-08-17 01:07:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877549": [
        {
            "ioc_value": "38.190.196.19:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 01:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877548": [
        {
            "ioc_value": "38.190.196.19:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 01:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877547": [
        {
            "ioc_value": "154.91.85.44:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877546": [
        {
            "ioc_value": "154.91.85.44:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-17 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877540": [
        {
            "ioc_value": "https://kodech.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kodech.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877541": [
        {
            "ioc_value": "https://alwhda.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alwhda.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877542": [
        {
            "ioc_value": "https://www.devloerenboerderij.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.devloerenboerderij.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877543": [
        {
            "ioc_value": "https://absoluteav.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/absoluteav.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877544": [
        {
            "ioc_value": "https://mathabane.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mathabane.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877538": [
        {
            "ioc_value": "https://www.collomb.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.collomb.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877539": [
        {
            "ioc_value": "https://bellablumaternity.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-17 01:01:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bellablumaternity.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877537": [
        {
            "ioc_value": "vepzr8ji.us-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 00:42:11",
            "last_seen_utc": "2026-08-18 07:15:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877536": [
        {
            "ioc_value": "http://a1078269.xsph.ru/5dff4277.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-17 00:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877534": [
        {
            "ioc_value": "babmalo.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-17 00:16:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877533": [
        {
            "ioc_value": "http://kkhouse.ml/kk2/fre.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-08-16 23:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Loki",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877531": [
        {
            "ioc_value": "23.148.212.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 23:47:35",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877532": [
        {
            "ioc_value": "38.190.196.19:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 23:47:35",
            "last_seen_utc": "2026-09-01 02:47:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877530": [
        {
            "ioc_value": "154.91.85.44:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 23:47:26",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877529": [
        {
            "ioc_value": "cdn.winservers-network.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 23:47:06",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877528": [
        {
            "ioc_value": "sk9sjwg4.snaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 23:35:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877509": [
        {
            "ioc_value": "http://glimqra.click:6534/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 23:22:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877510": [
        {
            "ioc_value": "http://shkpiva.shop:5627/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 23:22:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877507": [
        {
            "ioc_value": "u5pn5h4p.belly--flus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 23:07:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877506": [
        {
            "ioc_value": "belly--flus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 23:06:05",
            "last_seen_utc": "2026-08-16 23:07:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877504": [
        {
            "ioc_value": "https://moleroos.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 23:01:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/moleroos.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877502": [
        {
            "ioc_value": "https://sparkwords.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 23:01:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sparkwords.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877503": [
        {
            "ioc_value": "https://malware.dovgertz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 23:01:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/malware.dovgertz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877499": [
        {
            "ioc_value": "saiadvertisers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 22:54:45",
            "last_seen_utc": "2026-08-25 16:30:17",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877492": [
        {
            "ioc_value": "http://bravplo.click:7713/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 22:39:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877490": [
        {
            "ioc_value": "ibericacubiertas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 22:34:43",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877485": [
        {
            "ioc_value": "terrariumbois.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 22:29:41",
            "last_seen_utc": "2026-08-25 16:44:46",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877483": [
        {
            "ioc_value": "falconridgestables.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 22:29:40",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877480": [
        {
            "ioc_value": "backfrost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 22:29:39",
            "last_seen_utc": "2026-08-26 17:47:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877454": [
        {
            "ioc_value": "http://glimqra.click:6534/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 22:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877455": [
        {
            "ioc_value": "http://vexdico.shop:8539/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 22:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877443": [
        {
            "ioc_value": "43.143.118.200:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 22:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877440": [
        {
            "ioc_value": "infolinia.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 22:04:29",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877436": [
        {
            "ioc_value": "childrenwithspecialneeds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 21:54:28",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877432": [
        {
            "ioc_value": "yi394uif.app8k.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 21:50:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877425": [
        {
            "ioc_value": "ping.south-loop.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-16 21:25:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877423": [
        {
            "ioc_value": "tsadd1wd.beast--force.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 21:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877422": [
        {
            "ioc_value": "2.27.4.236:5552",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 21:06:08",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85cd6c3229f9ab547cc54f2cbdcf6ef2937987c0181e5ffa3c4205105df8e8fe/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877421": [
        {
            "ioc_value": "beast--force.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 21:05:32",
            "last_seen_utc": "2026-08-16 21:05:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877419": [
        {
            "ioc_value": "https://www.kentertiyatrosu.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 21:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.kentertiyatrosu.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877420": [
        {
            "ioc_value": "https://www.mkperinat.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 21:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.mkperinat.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877418": [
        {
            "ioc_value": "moleroos.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 20:39:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877417": [
        {
            "ioc_value": "67.216.197.83:5080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877337": [
        {
            "ioc_value": "n8e.us.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 19:50:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ff8235089a02e71d422a0c227f177f14052b58d1558324a6001ded65418bb498/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877336": [
        {
            "ioc_value": "http://vexdico.shop:8539/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 19:49:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877334": [
        {
            "ioc_value": "94.250.182.47:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-16 19:46:47",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877335": [
        {
            "ioc_value": "94.26.0.7:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-16 19:46:47",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877333": [
        {
            "ioc_value": "85.120.217.247:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 19:46:34",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877332": [
        {
            "ioc_value": "68.183.248.32:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-16 19:46:27",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877331": [
        {
            "ioc_value": "51.79.169.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:46:17",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877329": [
        {
            "ioc_value": "45.145.41.185:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:46:03",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877330": [
        {
            "ioc_value": "45.145.41.185:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:46:03",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877328": [
        {
            "ioc_value": "217.60.195.110:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:45:35",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877327": [
        {
            "ioc_value": "195.177.94.41:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:44:40",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877326": [
        {
            "ioc_value": "187.154.215.53:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877325": [
        {
            "ioc_value": "178.172.173.84:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-16 19:44:15",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877324": [
        {
            "ioc_value": "172.94.18.103:77",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 19:44:09",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877323": [
        {
            "ioc_value": "153.52.182.78:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 19:43:44",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877322": [
        {
            "ioc_value": "148.163.101.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:43:41",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877321": [
        {
            "ioc_value": "124.198.131.110:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877320": [
        {
            "ioc_value": "109.248.160.184:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-16 19:43:19",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877319": [
        {
            "ioc_value": "104.243.248.63:1002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877318": [
        {
            "ioc_value": "cbjahpiu.us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 19:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877317": [
        {
            "ioc_value": "https://samid.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 19:30:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/samid.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1877316": [
        {
            "ioc_value": "analysis-id-lfg.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-16 19:28:54",
            "last_seen_utc": "2026-08-24 00:39:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877315": [
        {
            "ioc_value": "bimba.anix-to.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-16 19:27:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877314": [
        {
            "ioc_value": "luzer.anix-to.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-16 19:27:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877313": [
        {
            "ioc_value": "salfetka.anix-to.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-16 19:27:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877311": [
        {
            "ioc_value": "pava21r5.slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 19:26:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877305": [
        {
            "ioc_value": "47.122.115.225:13152",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-16 19:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877304": [
        {
            "ioc_value": "http://ch737693.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 19:15:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877303": [
        {
            "ioc_value": "fneoe5ij.ballyflush.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 19:06:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877300": [
        {
            "ioc_value": "ballyflush.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 19:05:07",
            "last_seen_utc": "2026-08-16 19:05:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877301": [
        {
            "ioc_value": "108.174.153.97:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 19:05:07",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877302": [
        {
            "ioc_value": "101.42.104.134:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877299": [
        {
            "ioc_value": "47.94.224.229:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877297": [
        {
            "ioc_value": "47.94.224.229:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877298": [
        {
            "ioc_value": "47.94.224.229:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877295": [
        {
            "ioc_value": "https://rnd.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 18:15:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877293": [
        {
            "ioc_value": "rnd.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 18:15:05",
            "last_seen_utc": "2026-08-17 07:25:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877294": [
        {
            "ioc_value": "rnd.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 18:15:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877289": [
        {
            "ioc_value": "ia1m6hmw.aquasculptofficials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 17:07:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877287": [
        {
            "ioc_value": "103.199.102.27:446",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 17:05:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877286": [
        {
            "ioc_value": "1p3iya3c.usen-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 16:47:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877284": [
        {
            "ioc_value": "lustrous-strategy.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 16:38:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877285": [
        {
            "ioc_value": "weekly-evocation.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 16:38:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877282": [
        {
            "ioc_value": "fdsjhvcxmasd.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 16:38:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877283": [
        {
            "ioc_value": "el-4dfmiwuflwf.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 16:38:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877281": [
        {
            "ioc_value": "console.plan-stack2.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-16 16:33:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877280": [
        {
            "ioc_value": "103.240.196.115:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 16:15:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877279": [
        {
            "ioc_value": "103.240.196.115:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 16:15:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877278": [
        {
            "ioc_value": "http://tokjoza.shop:5200/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 15:45:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877277": [
        {
            "ioc_value": "http://glimqra.click:6534/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 15:45:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877276": [
        {
            "ioc_value": "deben.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 15:35:08",
            "last_seen_utc": "2026-08-26 13:16:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877275": [
        {
            "ioc_value": "http://vexdico.shop:8539/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 15:29:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877274": [
        {
            "ioc_value": "9ujl0507.shop-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 15:13:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877273": [
        {
            "ioc_value": "g5rdt6c1.aquaburnweb.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 15:06:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877272": [
        {
            "ioc_value": "43.106.132.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-16 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877271": [
        {
            "ioc_value": "204.194.54.54:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 15:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877270": [
        {
            "ioc_value": "aquaburnweb.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 15:04:04",
            "last_seen_utc": "2026-08-16 15:04:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877266": [
        {
            "ioc_value": "your-rio-hub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:55:07",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877267": [
        {
            "ioc_value": "yourriohub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:55:07",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877265": [
        {
            "ioc_value": "iborusovc.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:50:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877260": [
        {
            "ioc_value": "mindframedubai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:45:05",
            "last_seen_utc": "2026-08-25 16:44:40",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877259": [
        {
            "ioc_value": "dargaud-habitat.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:45:04",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877256": [
        {
            "ioc_value": "careerpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:45:02",
            "last_seen_utc": "2026-08-26 21:54:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877255": [
        {
            "ioc_value": "aliemac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:45:01",
            "last_seen_utc": "2026-08-26 21:54:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877253": [
        {
            "ioc_value": "schvz3s8.us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:41:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877250": [
        {
            "ioc_value": "coddoc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:35:00",
            "last_seen_utc": "2026-08-26 21:54:41",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877251": [
        {
            "ioc_value": "cocoshisha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 14:35:00",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877249": [
        {
            "ioc_value": "202.61.85.34:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 14:20:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877248": [
        {
            "ioc_value": "43.224.224.66:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 14:20:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877247": [
        {
            "ioc_value": "43.224.224.66:7811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 14:20:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877245": [
        {
            "ioc_value": "a2d100f8c337b073b53f0b34c4b1c22581476178",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:11:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877246": [
        {
            "ioc_value": "4cab81b8fa6b59e3b06b3aba29204a21",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:11:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877242": [
        {
            "ioc_value": "c96212fa882a2dc432e99b88fe62b7358d777b27",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-16 14:11:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877243": [
        {
            "ioc_value": "385f52df34c0e3f7f8f3602afedd70e3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-16 14:11:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877244": [
        {
            "ioc_value": "2dfe533cdd6c2ea50640338fd3a53ffb5620e82009575bd27aa10be5e7444897",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:11:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877240": [
        {
            "ioc_value": "1244f89ba4a6b12e3b885b58b66103a9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:11:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877241": [
        {
            "ioc_value": "7f11d92a1fc25ba81f808b62a075ccdfe06d441fcaa5adad483afc7508ee5000",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-16 14:11:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877238": [
        {
            "ioc_value": "81905d33a611d1230db493f85f1da36c6c10e0be29148b8cfb72060ade4dd027",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:11:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877239": [
        {
            "ioc_value": "a6af7c78098bd4c8f22215a6bacdc74145a5692c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:11:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877237": [
        {
            "ioc_value": "bf88a2fb1ef5472160508c236f3969df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-16 14:11:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877234": [
        {
            "ioc_value": "1e1f1336dd0fd523d8bea4dad1c963a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 14:11:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877235": [
        {
            "ioc_value": "47ec52063197ba9437b840fb297a0d8258f0a268856d961cd52732b4b80ad5e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-16 14:11:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877236": [
        {
            "ioc_value": "db68b3edf9d3166b4743ecc63883de73fee620e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-16 14:11:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877231": [
        {
            "ioc_value": "506559e72563e1c509818c8aa644e969",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877232": [
        {
            "ioc_value": "cf074b9eaad872281fca4a15ff70507bcf1b8cd904b8175bba9f352021495b33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 14:10:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877233": [
        {
            "ioc_value": "12bdaeec1a59e079a0d6ddca94bda3078c862875",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 14:10:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877228": [
        {
            "ioc_value": "a078c68a3dc025682f8133e5a268b7bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877229": [
        {
            "ioc_value": "1b3c95255961ab817b01345fa1095b52766117572cca86b5b75064dada960641",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877230": [
        {
            "ioc_value": "d74468e2a3a8fb06ea2d6cbac4eeb75d67e94e13",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877226": [
        {
            "ioc_value": "d6c4adba4d4d63cb2f9a28bde034851d9f66709748f9bf6b2f3fa3d9d057a054",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877227": [
        {
            "ioc_value": "f0e6e6d64aa7a2745fea4d70ccae1bee245f2254",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877224": [
        {
            "ioc_value": "770d6deede2900aa8a515845baa9e3292f8af18f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877225": [
        {
            "ioc_value": "cc2ec7c7af5b86192311053a3cfd50dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877221": [
        {
            "ioc_value": "600ba5a9b9e460f7c88d596c3beb03fa29cd30ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877222": [
        {
            "ioc_value": "7c25026a44e8ecef8bfd6bae85621f10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877223": [
        {
            "ioc_value": "627ae3be7421e6a19e5bdf028103912e8e6a47f8074705e82202672016e8957b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877218": [
        {
            "ioc_value": "ebd86f78196fcd174dcc6a45ca14570d6b982025",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877219": [
        {
            "ioc_value": "b6e9a73504c62a3ee0c15cc2a3cbe9e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877220": [
        {
            "ioc_value": "9ebf52f59547e6b9c2cc08c829f4f4d8ecf6a2063bb07cdc26d6d17920ef3213",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877216": [
        {
            "ioc_value": "853127445eba58f0a6a19a2b7590b91f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877217": [
        {
            "ioc_value": "d02990ae4b71c88a47d16a431de9f01b8259269faba3f79ddfd7b4e70e4bb70b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877213": [
        {
            "ioc_value": "b948a85eddaaee53dfa68d4099ecb93b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877214": [
        {
            "ioc_value": "7759ef88fc4e3eac81bac5e3e7768f8b2d2f3749a3379343c4f444975b2e0063",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877215": [
        {
            "ioc_value": "2d1a86072878d37552d55b6009f72ed25f442302",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877211": [
        {
            "ioc_value": "4d605371799007380d724ce132ffff8c0648e146373ab66444294efc5ae266a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877212": [
        {
            "ioc_value": "d530de44ea1ebebfa07d20c4feabac2c677b3c8b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877208": [
        {
            "ioc_value": "544334a6b499e38555c572f513c7f0719ede3c5cfc2e60ef7a687b141baa775e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877209": [
        {
            "ioc_value": "9a5c7563d2b820e1a4472945ba1657ac816dc797",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877210": [
        {
            "ioc_value": "7985836734f2b20f13a8b247a92016fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877206": [
        {
            "ioc_value": "1c652f9f414ba865c74b34ce81ba15869eddee01",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877207": [
        {
            "ioc_value": "fe01f9fc9b2cd5221d9eeea8c72145f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877203": [
        {
            "ioc_value": "c5538f79da9c43cab9850082a286af4d2b4c4744",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877204": [
        {
            "ioc_value": "c16f4547b8382591f560e1e37ae34f76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877205": [
        {
            "ioc_value": "80392ff7d3c3983f2ea170a9d5e362f1a91cfcdacb8553cb0fadb7b389681e18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877201": [
        {
            "ioc_value": "b98589017bd2e0ef83b4fe7dc963a784",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877202": [
        {
            "ioc_value": "25cd054fe1d163a5fa1bb32a7bc23dd7139111a727a5021b49b7d764335fef7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877200": [
        {
            "ioc_value": "d215290cd61bbe0feadb98a5c23168591f56512b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877197": [
        {
            "ioc_value": "37902fb92c305eb5185e0ce9d074406a4cbbdc59",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877198": [
        {
            "ioc_value": "4f449393902c0b4dc459129d5b37e2ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877199": [
        {
            "ioc_value": "d30c9d87c66d715810f77ca6db1e85b394b048a57cdd11d116a47c4536b3be18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877194": [
        {
            "ioc_value": "92db2091a27cbad295a61c652e9a9a57849536ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877195": [
        {
            "ioc_value": "d0dad3ca0e26691fc3ff057bb342539a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877196": [
        {
            "ioc_value": "9cb7ac08fb03c328fae8c37617ae4bd85871bc98cd78f0e75bdde8152262e3fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877191": [
        {
            "ioc_value": "d5f128208240d2d30405379767834753208ad258",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-16 14:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877192": [
        {
            "ioc_value": "922bc38742b4bf19df78d60f8f1ce9ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-16 14:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877193": [
        {
            "ioc_value": "5dae582d8434a65df04c4899d1ad4b377123ca11e44905c36dcac5a7d802ae50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877189": [
        {
            "ioc_value": "e989fab5128da2ce5cbbccea75b8b5e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 14:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877190": [
        {
            "ioc_value": "bce4b5338870d28c27190d56df547dd25fe42c419a01173e24e1594bdfaa85a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-16 14:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877186": [
        {
            "ioc_value": "684ed2249d26eba96bfb119752ba01a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877187": [
        {
            "ioc_value": "612150ea6972715f8b79d20aa153e2173bf06ca8d5d99e1d706332de1ae081c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 14:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877188": [
        {
            "ioc_value": "f1d72ea6c4d2ddcc5704bab16cbc5e3dd20ec755",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 14:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877183": [
        {
            "ioc_value": "f41c68d38d739ffb21cdc6d0371647bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877184": [
        {
            "ioc_value": "866f0c98d370c8fca1acc8156456372955c7e5e1ea0bafe9d335dbc30c5b81df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877185": [
        {
            "ioc_value": "a2adfbf3fc008c831cb39bf015a67a4168931133",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877181": [
        {
            "ioc_value": "9f4db76352f4314f4e0a6a9fd9173b1ccbb7be69993673ba194c0a8cfab33086",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877182": [
        {
            "ioc_value": "6243c0a7631b59bd26f33ab76d7a4fa6034cd475",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-16 14:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877178": [
        {
            "ioc_value": "8bbf13b6f3e2cde8a70f9a107a8814871f22ff7995554ba1db44fb985f3d16fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877179": [
        {
            "ioc_value": "cebdb639425af2319db496a7f01584762e022727",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877180": [
        {
            "ioc_value": "b3588fe90191e8f88f63af9090c7cbcd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877175": [
        {
            "ioc_value": "edc4460d3dd2fc1fcae6c617c8d2728ce311e8cd47f2d6a37d719b924c2ac868",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-16 14:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877176": [
        {
            "ioc_value": "54c5c2659e3af3aca44fa046fb366cd32f5ed387",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-16 14:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877177": [
        {
            "ioc_value": "dca6afeddc135645ec068160a47c9510",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-16 14:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877172": [
        {
            "ioc_value": "676791821fa7a173d3cfdf11087f9bc4078dc784b837158e89739728d419f745",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 14:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877173": [
        {
            "ioc_value": "8c6320f8b1b19c260e8ff5f2d1c4637c11c3efe5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 14:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877174": [
        {
            "ioc_value": "204936dc11b78d2a83682f88f69608a9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 14:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877170": [
        {
            "ioc_value": "a9c6add8397698ae207f768b042da14305b27905",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877171": [
        {
            "ioc_value": "849cdd8d1aff00a96171e09042b88259",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877167": [
        {
            "ioc_value": "d134cef036d35cdf137f08c7f8e838cedba7825c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 14:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877168": [
        {
            "ioc_value": "77419b9de019b422054b6560b7114441",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 14:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877169": [
        {
            "ioc_value": "6f9c2afe42a6728c17658a85bca31581113a50c3207c8a6279fbf561eb1a8d06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877165": [
        {
            "ioc_value": "11f45214e400e24c21f27371b26d5275",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 14:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877166": [
        {
            "ioc_value": "d05986e4e8a5d6818ae373894b7af0e78fddd99c57d1b3b76357dfcafefc0cbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 14:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877163": [
        {
            "ioc_value": "1a73320195db851f5cfb2869b2b44e28453510e1da7e6a669d7bafbe674da290",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 14:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877164": [
        {
            "ioc_value": "b1b4795864d07571873b07c9d2a54acb947947b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 14:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877162": [
        {
            "ioc_value": "1b6521fd5653b30f77fd1a44a0d3b3ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877160": [
        {
            "ioc_value": "b23fcd8667153dfcb3cf8361e80b0a0d119db93b4f4ce452572e55a247f8f223",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877161": [
        {
            "ioc_value": "1f751399827aefaca27afae720cb7bd17e44b9f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877158": [
        {
            "ioc_value": "c4976287d062159050b2dbad9e2268c538386690",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-16 14:10:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877159": [
        {
            "ioc_value": "0008d8b7ceb7b1cd9fa3cd596fe8ab3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-16 14:10:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877156": [
        {
            "ioc_value": "f63516ca88cd02e727a9e6f3d370ec24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877157": [
        {
            "ioc_value": "f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-16 14:10:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877153": [
        {
            "ioc_value": "eec176c797a642834c4c5471f6ed19e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-16 14:10:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877154": [
        {
            "ioc_value": "28255d065e55e13e9953b4b88338fa6f6e201e986f69060dd19c3d8d02725d66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877155": [
        {
            "ioc_value": "fa93302641d43f9047dc309a3152420ad2d0cf0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-16 14:10:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877152": [
        {
            "ioc_value": "03dff37f5d8fe0144ff7ff8b581966fce5f16550",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-16 14:10:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877149": [
        {
            "ioc_value": "eb985a8d61bbf41219337af58a0b78edfff9b633",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 14:10:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877150": [
        {
            "ioc_value": "1cc72f0e339f0b0e604c6ca8bc879085",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 14:10:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877151": [
        {
            "ioc_value": "73b3a8a8df3bc11ebfd7195028e2946a06f276a59e85c1e00ec1e28eec219f47",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-16 14:10:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877148": [
        {
            "ioc_value": "ececcb435fbbc457e047b8fd9301430158883837894cff1e843b1a375307318b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 14:10:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1877145": [
        {
            "ioc_value": "143.92.61.212:433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 13:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877144": [
        {
            "ioc_value": "107.148.46.100:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 13:30:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/470a41a0a6c204ac849fd7d224d81983fec2f27e91376a5025a6002508801639/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877143": [
        {
            "ioc_value": "202.61.85.34:7800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 13:30:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877137": [
        {
            "ioc_value": "107.148.46.100:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 13:20:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877136": [
        {
            "ioc_value": "sman1seputihagung.sch.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 13:14:57",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877132": [
        {
            "ioc_value": "cf3322kr.aqua--burn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 13:05:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876818": [
        {
            "ioc_value": "170.244.195.143:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-16 13:05:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876820": [
        {
            "ioc_value": "189.150.106.61:2320",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-16 13:05:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877131": [
        {
            "ioc_value": "139.95.24.51:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876819": [
        {
            "ioc_value": "79.100.86.116:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-16 13:05:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876821": [
        {
            "ioc_value": "207.189.23.198:1024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-08-16 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876824": [
        {
            "ioc_value": "43.156.61.27:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-16 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AdaptixC2",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877130": [
        {
            "ioc_value": "111.170.148.132:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876825": [
        {
            "ioc_value": "121.127.233.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876828": [
        {
            "ioc_value": "41.143.245.16:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-08-16 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NetSupport,NetSupportManager RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876826": [
        {
            "ioc_value": "154.179.0.98:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-16 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Nancrat,NanoCore,Nanocore RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877129": [
        {
            "ioc_value": "185.34.147.34:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 13:05:07",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876827": [
        {
            "ioc_value": "41.42.162.213:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-16 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Nancrat,NanoCore,Nanocore RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876829": [
        {
            "ioc_value": "141.94.14.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-16 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Remcos,RemcosRAT,Remvio,Socmer",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876830": [
        {
            "ioc_value": "193.46.255.208:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876831": [
        {
            "ioc_value": "193.233.82.160:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876832": [
        {
            "ioc_value": "89.124.85.135:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876833": [
        {
            "ioc_value": "87.199.205.242:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876834": [
        {
            "ioc_value": "195.63.164.44:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876835": [
        {
            "ioc_value": "145.63.138.138:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876836": [
        {
            "ioc_value": "145.63.138.63:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876837": [
        {
            "ioc_value": "46.161.27.105:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876838": [
        {
            "ioc_value": "46.101.194.206:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876839": [
        {
            "ioc_value": "45.227.254.91:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876840": [
        {
            "ioc_value": "2.27.5.253:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876841": [
        {
            "ioc_value": "87.199.203.185:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876842": [
        {
            "ioc_value": "145.63.138.87:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:05:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876843": [
        {
            "ioc_value": "96.62.218.212:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876844": [
        {
            "ioc_value": "151.59.23.18:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876845": [
        {
            "ioc_value": "141.98.80.155:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:04:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876846": [
        {
            "ioc_value": "91.238.181.7:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:04:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876847": [
        {
            "ioc_value": "151.59.143.212:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:04:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876848": [
        {
            "ioc_value": "193.143.1.44:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:04:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876850": [
        {
            "ioc_value": "149.104.28.73:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-16 13:04:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876851": [
        {
            "ioc_value": "103.253.42.34:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-16 13:04:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876852": [
        {
            "ioc_value": "85.11.167.165:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-16 13:04:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876853": [
        {
            "ioc_value": "66.78.40.188:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-16 13:04:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876854": [
        {
            "ioc_value": "167.71.14.20:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-16 13:04:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876855": [
        {
            "ioc_value": "129.208.124.105:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-16 13:04:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Bladabindi,Lime-Worm,NjRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876856": [
        {
            "ioc_value": "94.96.166.135:11",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-16 13:04:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876857": [
        {
            "ioc_value": "94.96.165.133:70",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-16 13:04:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876858": [
        {
            "ioc_value": "134.122.204.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.venom",
            "malware_alias": null,
            "malware_printable": "Venom RAT",
            "first_seen_utc": "2026-08-16 13:04:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Venom RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876859": [
        {
            "ioc_value": "146.71.85.53:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 13:04:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876860": [
        {
            "ioc_value": "39.102.87.142:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 13:04:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SuperShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876871": [
        {
            "ioc_value": "124.230.195.242:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-16 13:04:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Farfli,Gh0st RAT,Ghost RAT,PCRat",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876878": [
        {
            "ioc_value": "116.204.119.99:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 13:04:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876879": [
        {
            "ioc_value": "47.237.89.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 13:04:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876880": [
        {
            "ioc_value": "47.236.53.104:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 13:04:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876881": [
        {
            "ioc_value": "106.53.181.14:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 13:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876883": [
        {
            "ioc_value": "217.60.195.110:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:04:44",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876882": [
        {
            "ioc_value": "217.60.195.110:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:04:43",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876884": [
        {
            "ioc_value": "172.86.107.229:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:04:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876885": [
        {
            "ioc_value": "172.86.72.107:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:04:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876887": [
        {
            "ioc_value": "172.86.72.107:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:04:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876886": [
        {
            "ioc_value": "172.86.72.107:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:04:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876890": [
        {
            "ioc_value": "45.76.145.171:6667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876892": [
        {
            "ioc_value": "206.119.189.208:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876893": [
        {
            "ioc_value": "130.94.30.168:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876894": [
        {
            "ioc_value": "172.245.148.13:4567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876895": [
        {
            "ioc_value": "36.151.147.23:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:38",
            "last_seen_utc": "2026-08-18 01:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876896": [
        {
            "ioc_value": "101.35.161.46:9089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:38",
            "last_seen_utc": "2026-08-20 03:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876905": [
        {
            "ioc_value": "123.60.84.127:8666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876906": [
        {
            "ioc_value": "122.51.48.49:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876907": [
        {
            "ioc_value": "154.12.85.219:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876908": [
        {
            "ioc_value": "151.245.121.11:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876909": [
        {
            "ioc_value": "70.34.247.220:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876910": [
        {
            "ioc_value": "107.149.189.253:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876911": [
        {
            "ioc_value": "8.130.210.211:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876912": [
        {
            "ioc_value": "83.229.124.36:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876913": [
        {
            "ioc_value": "8.216.3.129:4455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:34",
            "last_seen_utc": "2026-08-18 01:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876914": [
        {
            "ioc_value": "82.23.246.97:8023",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876915": [
        {
            "ioc_value": "66.179.30.101:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876916": [
        {
            "ioc_value": "116.205.118.254:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876917": [
        {
            "ioc_value": "95.40.32.225:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876918": [
        {
            "ioc_value": "43.255.156.232:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876919": [
        {
            "ioc_value": "154.91.180.246:18081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876920": [
        {
            "ioc_value": "42.192.39.152:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:25",
            "last_seen_utc": "2026-08-18 01:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876921": [
        {
            "ioc_value": "13.207.158.234:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876922": [
        {
            "ioc_value": "124.220.11.206:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876923": [
        {
            "ioc_value": "23.225.71.207:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:22",
            "last_seen_utc": "2026-08-19 02:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876924": [
        {
            "ioc_value": "173.249.220.138:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876926": [
        {
            "ioc_value": "154.89.195.170:33060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876925": [
        {
            "ioc_value": "203.91.78.218:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:20",
            "last_seen_utc": "2026-08-18 02:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876927": [
        {
            "ioc_value": "8.219.208.193:60001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876928": [
        {
            "ioc_value": "49.232.91.148:8009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876929": [
        {
            "ioc_value": "45.192.103.102:18081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876930": [
        {
            "ioc_value": "107.161.168.217:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:18",
            "last_seen_utc": "2026-08-28 04:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876931": [
        {
            "ioc_value": "77.111.101.118:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876932": [
        {
            "ioc_value": "101.35.79.54:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876933": [
        {
            "ioc_value": "156.236.76.11:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:17",
            "last_seen_utc": "2026-08-19 02:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876934": [
        {
            "ioc_value": "124.223.113.245:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876935": [
        {
            "ioc_value": "154.213.181.153:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876936": [
        {
            "ioc_value": "101.43.18.99:8100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:15",
            "last_seen_utc": "2026-08-18 03:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876937": [
        {
            "ioc_value": "101.35.209.62:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876938": [
        {
            "ioc_value": "208.167.245.124:18884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:15",
            "last_seen_utc": "2026-08-25 19:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876939": [
        {
            "ioc_value": "104.143.32.40:12222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:04:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876863": [
        {
            "ioc_value": "https://casinodas.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876862": [
        {
            "ioc_value": "https://mathandchessss.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876864": [
        {
            "ioc_value": "https://sex-reputation.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876865": [
        {
            "ioc_value": "https://cooldogshistory.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876866": [
        {
            "ioc_value": "https://godhelp-us.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876867": [
        {
            "ioc_value": "https://ilikegoodpersontoo.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876868": [
        {
            "ioc_value": "https://youmustviewit.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876869": [
        {
            "ioc_value": "https://opendocumentsforfree.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876870": [
        {
            "ioc_value": "https://coolrecipients.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876872": [
        {
            "ioc_value": "youmustviewit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876873": [
        {
            "ioc_value": "opendocumentsforfree.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876874": [
        {
            "ioc_value": "coolrecipients.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876875": [
        {
            "ioc_value": "agnnk96522.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:53",
            "last_seen_utc": "2026-08-16 12:53:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876876": [
        {
            "ioc_value": "amber9390.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:52",
            "last_seen_utc": "2026-08-16 12:53:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876877": [
        {
            "ioc_value": "ihcji00295.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:52",
            "last_seen_utc": "2026-08-16 12:53:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876897": [
        {
            "ioc_value": "150.109.93.78:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:50",
            "last_seen_utc": "2026-09-01 00:26:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876900": [
        {
            "ioc_value": "165.245.242.183:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876902": [
        {
            "ioc_value": "46.101.133.159:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:49",
            "last_seen_utc": "2026-08-17 13:17:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876940": [
        {
            "ioc_value": "188.209.141.249:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:03:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876941": [
        {
            "ioc_value": "https://joe.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 13:03:41",
            "last_seen_utc": "2026-08-16 09:25:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6c0969259a3975582cd8a48f4c8913d7,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876945": [
        {
            "ioc_value": "admetricslab.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:41",
            "last_seen_utc": "2026-08-18 17:23:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876946": [
        {
            "ioc_value": "soft-update.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:41",
            "last_seen_utc": "2026-08-18 17:23:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876947": [
        {
            "ioc_value": "attr-sdk.tech",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876951": [
        {
            "ioc_value": "https://admetricslab.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876952": [
        {
            "ioc_value": "https://soft-update.dev",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876953": [
        {
            "ioc_value": "https://attr-sdk.tech",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-16 13:03:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876954": [
        {
            "ioc_value": "45.227.254.77:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:03:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1876955": [
        {
            "ioc_value": "176.98.182.216:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:38",
            "last_seen_utc": "2026-08-25 10:09:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876956": [
        {
            "ioc_value": "157.230.84.95:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:38",
            "last_seen_utc": "2026-08-17 06:46:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876962": [
        {
            "ioc_value": "http://153.117.15.132:46863/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:37",
            "last_seen_utc": "2026-08-25 00:19:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.132",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876964": [
        {
            "ioc_value": "http://101.53.225.41:57536/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:37",
            "last_seen_utc": "2026-08-25 00:19:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.225.41",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876963": [
        {
            "ioc_value": "http://59.96.138.214:53741/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:36",
            "last_seen_utc": "2026-08-25 00:19:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.96.138.214",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876965": [
        {
            "ioc_value": "http://103.194.92.132:53279/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:35",
            "last_seen_utc": "2026-08-25 00:19:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.194.92.132",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876966": [
        {
            "ioc_value": "https://paquetes-colombia.blog/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 13:03:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4-72,cloudflare,colombia,phishing,phishing-kit,telegram-exfil,tg.pe",
            "anonymous": 0,
            "reporter": "tgpe"
        }
    ],
    "1876981": [
        {
            "ioc_value": "salfetka.anix-to.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 13:03:34",
            "last_seen_utc": "2026-08-16 01:52:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1877124": [
        {
            "ioc_value": "aqua--burn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 13:03:34",
            "last_seen_utc": "2026-08-16 13:04:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1876984": [
        {
            "ioc_value": "43.128.113.133:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:33",
            "last_seen_utc": "2026-09-01 00:27:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876987": [
        {
            "ioc_value": "165.245.242.183:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:33",
            "last_seen_utc": "2026-08-17 13:48:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877005": [
        {
            "ioc_value": "176.98.182.218:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:33",
            "last_seen_utc": "2026-09-01 02:09:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877012": [
        {
            "ioc_value": "http://27.215.177.136:58121/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:32",
            "last_seen_utc": "2026-08-25 00:19:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.215.177.136",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877013": [
        {
            "ioc_value": "http://202.47.57.122:42694/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:31",
            "last_seen_utc": "2026-08-25 00:19:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.47.57.122",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877031": [
        {
            "ioc_value": "104.64.210.147:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:03:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877032": [
        {
            "ioc_value": "101.34.246.164:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:03:31",
            "last_seen_utc": "2026-08-18 04:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877034": [
        {
            "ioc_value": "141.147.50.196:10001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-16 13:03:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877035": [
        {
            "ioc_value": "212.128.97.161:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 13:03:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877036": [
        {
            "ioc_value": "91.98.26.114:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-16 13:03:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877037": [
        {
            "ioc_value": "176.98.182.216:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:28",
            "last_seen_utc": "2026-08-31 13:53:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877040": [
        {
            "ioc_value": "45.145.41.185:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:03:28",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877041": [
        {
            "ioc_value": "172.98.22.177:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:03:28",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877042": [
        {
            "ioc_value": "newwstan.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 13:03:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlquery.net/report/6f2942db-f30a-4faa-8fea-728840beebed",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1877051": [
        {
            "ioc_value": "150.109.93.78:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:26",
            "last_seen_utc": "2026-08-30 14:52:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877065": [
        {
            "ioc_value": "newstan.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-16 13:03:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1877073": [
        {
            "ioc_value": "vibemedia.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-16 13:03:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "kiwingulam4h"
        }
    ],
    "1877075": [
        {
            "ioc_value": "194.56.225.109:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 13:03:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877076": [
        {
            "ioc_value": "151.59.138.81:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-16 13:03:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877077": [
        {
            "ioc_value": "94.98.245.75:9080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-08-16 13:03:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,XTRAT,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877092": [
        {
            "ioc_value": "157.230.84.95:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877078": [
        {
            "ioc_value": "106.75.27.209:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 13:03:21",
            "last_seen_utc": "2026-08-18 11:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877079": [
        {
            "ioc_value": "80.78.19.238:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 13:03:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Unam,UnamPanel",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1877098": [
        {
            "ioc_value": "luzer.anix-to.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 13:03:20",
            "last_seen_utc": "2026-08-16 12:39:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1877101": [
        {
            "ioc_value": "http://139.135.40.141:44206/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:19",
            "last_seen_utc": "2026-08-25 00:19:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.40.141",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877102": [
        {
            "ioc_value": "http://153.117.8.152:40499/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:19",
            "last_seen_utc": "2026-08-25 00:19:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.8.152",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877103": [
        {
            "ioc_value": "http://103.68.31.233:33974/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:18",
            "last_seen_utc": "2026-08-25 00:19:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.68.31.233",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1877117": [
        {
            "ioc_value": "fmvpa30658.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:17",
            "last_seen_utc": "2026-08-16 22:07:02",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877119": [
        {
            "ioc_value": "lezizowi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:17",
            "last_seen_utc": "2026-08-16 22:07:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877118": [
        {
            "ioc_value": "hekeqy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:16",
            "last_seen_utc": "2026-08-16 22:07:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877116": [
        {
            "ioc_value": "8vznky1554.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:15",
            "last_seen_utc": "2026-08-16 22:07:02",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877120": [
        {
            "ioc_value": "pqoog68466.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:13",
            "last_seen_utc": "2026-08-16 22:07:04",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877121": [
        {
            "ioc_value": "pxjms26158.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877122": [
        {
            "ioc_value": "qagido.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:13",
            "last_seen_utc": "2026-08-16 22:07:04",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1877123": [
        {
            "ioc_value": "vilypebo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-16 13:03:12",
            "last_seen_utc": "2026-08-16 22:07:04",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876551": [
        {
            "ioc_value": "162.243.79.150:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876556": [
        {
            "ioc_value": "http://158.94.209.112/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-16 13:03:09",
            "last_seen_utc": "2026-09-01 03:04:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,V1",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876771": [
        {
            "ioc_value": "vinmporflowgroun.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 13:03:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2088682699129024911",
            "tags": "QuasarRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1876772": [
        {
            "ioc_value": "girroflobsny.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 13:03:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2088682699129024911",
            "tags": "QuasarRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1876779": [
        {
            "ioc_value": "http://61.173.162.42:50153/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:08",
            "last_seen_utc": "2026-08-25 00:19:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/61.173.162.42",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876780": [
        {
            "ioc_value": "http://103.26.86.217:56576/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-16 13:03:08",
            "last_seen_utc": "2026-08-25 00:19:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.86.217",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876789": [
        {
            "ioc_value": "43.129.180.120:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-16 13:03:07",
            "last_seen_utc": "2026-09-01 03:18:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1877114": [
        {
            "ioc_value": "plastiroom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 12:49:53",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877113": [
        {
            "ioc_value": "o-y-t-m.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 12:39:53",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877111": [
        {
            "ioc_value": "analysis-id-lfg.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 12:39:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877105": [
        {
            "ioc_value": "ramblingclubs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 12:19:50",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877096": [
        {
            "ioc_value": "rclentertainment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 11:49:47",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877095": [
        {
            "ioc_value": "osk9vrnj.usa-us-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 11:49:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877094": [
        {
            "ioc_value": "47.242.248.156:30001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 11:47:14",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877093": [
        {
            "ioc_value": "http://glimqra.click:6534/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 11:42:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877090": [
        {
            "ioc_value": "http://cv010035.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 11:20:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877086": [
        {
            "ioc_value": "meneghinzanardo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 11:09:44",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877082": [
        {
            "ioc_value": "q048bmxn.aqua-brn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 11:04:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877081": [
        {
            "ioc_value": "3hz2928l.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 11:04:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877080": [
        {
            "ioc_value": "aqua-brn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 11:03:33",
            "last_seen_utc": "2026-08-16 11:04:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877074": [
        {
            "ioc_value": "http://cq609149.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 10:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877071": [
        {
            "ioc_value": "http://tokjoza.shop:5200/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877072": [
        {
            "ioc_value": "http://shkpiva.shop:5627/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877066": [
        {
            "ioc_value": "http://mrlketo.shop:8932/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877067": [
        {
            "ioc_value": "http://vexdico.shop:8539/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877068": [
        {
            "ioc_value": "http://shkpiva.shop:5627/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877069": [
        {
            "ioc_value": "http://glimqra.click:6534/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877070": [
        {
            "ioc_value": "http://shkpiva.shop:5627/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 10:28:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877064": [
        {
            "ioc_value": "https://jax.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 10:10:08",
            "last_seen_utc": "2026-08-16 10:25:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877063": [
        {
            "ioc_value": "jax.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 10:10:07",
            "last_seen_utc": "2026-08-16 10:25:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877062": [
        {
            "ioc_value": "https://jax.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 10:05:09",
            "last_seen_utc": "2026-08-16 17:25:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877061": [
        {
            "ioc_value": "jax.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 10:05:08",
            "last_seen_utc": "2026-08-16 17:25:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1877059": [
        {
            "ioc_value": "45.156.87.224:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-16 09:45:53",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877058": [
        {
            "ioc_value": "31.59.137.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 09:45:38",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877057": [
        {
            "ioc_value": "217.60.195.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 09:45:26",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877056": [
        {
            "ioc_value": "217.60.195.110:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 09:45:25",
            "last_seen_utc": "2026-09-01 02:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877055": [
        {
            "ioc_value": "194.59.31.11:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 09:44:29",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877054": [
        {
            "ioc_value": "193.161.193.99:35711",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-16 09:44:26",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877053": [
        {
            "ioc_value": "192.162.199.185:38492",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-16 09:44:24",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877052": [
        {
            "ioc_value": "135.136.147.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-16 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877050": [
        {
            "ioc_value": "xn5nkp1j.us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 09:38:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877048": [
        {
            "ioc_value": "cvxxvcasdqehgfjg.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 09:14:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877049": [
        {
            "ioc_value": "el-5fmkdhfsfdsg.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 09:14:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877047": [
        {
            "ioc_value": "ka4yxanb.andliberty.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 09:05:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877046": [
        {
            "ioc_value": "andliberty.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 09:02:33",
            "last_seen_utc": "2026-08-16 09:03:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877045": [
        {
            "ioc_value": "elliptical-rabbit.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 08:58:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877044": [
        {
            "ioc_value": "43.132.212.50:661",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 08:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877043": [
        {
            "ioc_value": "43.132.212.50:662",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-16 08:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877039": [
        {
            "ioc_value": "85.17.151.21:55615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-16 08:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1877033": [
        {
            "ioc_value": "aefaa46082749a5d322ccada8e12edec3c24e34777db26865d1f357749261e6c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 07:59:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877029": [
        {
            "ioc_value": "prc.sm188daftar.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 07:29:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1db6b60a7989a6c1dbba63d5a78463f5a4d4fbff75af27c281e1a93a11bfe4ad/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877028": [
        {
            "ioc_value": "http://mrlketo.shop:8932/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 07:22:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1877025": [
        {
            "ioc_value": "111.170.148.132:18082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877024": [
        {
            "ioc_value": "oczzvkdm.americaneaglependant.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 07:03:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877023": [
        {
            "ioc_value": "americaneaglependant.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 07:01:55",
            "last_seen_utc": "2026-08-16 07:02:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877020": [
        {
            "ioc_value": "z8l6eurt.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 06:53:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877019": [
        {
            "ioc_value": "2bqvf65p.usa-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 06:47:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877017": [
        {
            "ioc_value": "https://178.105.46.149",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 06:33:23",
            "last_seen_utc": "2026-08-18 07:04:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9698c118c2ba58fb2c7944354687333bd4f0d58ce5b6710920cdfa682bc9944/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877018": [
        {
            "ioc_value": "https://2.29.8.156",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 06:33:23",
            "last_seen_utc": "2026-08-18 07:04:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/89a76ee1536416b632ddbfa183e001a875aea23fd30757fc21c3e4605431d942/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877016": [
        {
            "ioc_value": "prc.10001toto.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-16 06:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/250f9079f4018c6c1fed92b09b91e75222790a5f59379c4b7cb3185a9014f246/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877008": [
        {
            "ioc_value": "108.165.147.244:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877006": [
        {
            "ioc_value": "juristice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 05:59:26",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877004": [
        {
            "ioc_value": "101.42.255.92:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877003": [
        {
            "ioc_value": "2.27.63.244:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 05:05:05",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877002": [
        {
            "ioc_value": "p4wao0pc.americaneaglependant.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 05:03:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1877001": [
        {
            "ioc_value": "americaneaglependant.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 05:01:27",
            "last_seen_utc": "2026-08-16 05:02:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1877000": [
        {
            "ioc_value": "51jt9qzn.us-en-us-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 04:39:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876998": [
        {
            "ioc_value": "111.170.148.132:10001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876999": [
        {
            "ioc_value": "111.170.148.132:10003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876996": [
        {
            "ioc_value": "43.248.9.242:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-16 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876997": [
        {
            "ioc_value": "155.117.155.237:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-16 04:05:05",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876994": [
        {
            "ioc_value": "link.stillcreek.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-16 03:29:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876990": [
        {
            "ioc_value": "118.184.173.168:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 03:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876989": [
        {
            "ioc_value": "bvhqwydv.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 02:44:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876988": [
        {
            "ioc_value": "82.66.176.223:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-16 02:25:02",
            "last_seen_utc": "2026-08-17 14:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876982": [
        {
            "ioc_value": "6cad154538301583429bf7ebe03f812afa33e4d2207ce54b2e488f3cc74e4eba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 01:52:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876980": [
        {
            "ioc_value": "0w4jy1j1.usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-16 01:47:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876979": [
        {
            "ioc_value": "http://spareon.click:8811/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 01:25:42",
            "last_seen_utc": "2026-08-16 02:21:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4e869d592baf4370f850cbe71c7ae653ac1078646ef6633a4e769f6752b4d2e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876978": [
        {
            "ioc_value": "http://spareon.click:8811/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 01:25:41",
            "last_seen_utc": "2026-08-16 02:15:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cb1e15a47e40e7e1886531b829f4061c60b73ba4937e9161b4fc1fef846dfddb/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876977": [
        {
            "ioc_value": "http://mrlketo.shop:8932/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 01:25:36",
            "last_seen_utc": "2026-08-16 02:21:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4e869d592baf4370f850cbe71c7ae653ac1078646ef6633a4e769f6752b4d2e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876976": [
        {
            "ioc_value": "http://shkpiva.shop:5627/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 01:20:41",
            "last_seen_utc": "2026-08-16 10:28:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/997acaae90f21aebb154b75c2b2c787fa49e8d3d0cdf5c5893d6f7ddbb3d67b6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876975": [
        {
            "ioc_value": "94.183.184.53:6534",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 01:20:38",
            "last_seen_utc": "2026-08-17 14:23:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/997acaae90f21aebb154b75c2b2c787fa49e8d3d0cdf5c5893d6f7ddbb3d67b6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876974": [
        {
            "ioc_value": "http://glimqra.click:6534/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-16 01:20:37",
            "last_seen_utc": "2026-08-16 10:28:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/997acaae90f21aebb154b75c2b2c787fa49e8d3d0cdf5c5893d6f7ddbb3d67b6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876968": [
        {
            "ioc_value": "47.98.133.252:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876969": [
        {
            "ioc_value": "149.88.66.234:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-16 01:05:07",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876967": [
        {
            "ioc_value": "47.98.133.252:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-16 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876961": [
        {
            "ioc_value": "kv73gaf5.get-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 23:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876960": [
        {
            "ioc_value": "149.88.66.234:2020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 23:46:23",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876958": [
        {
            "ioc_value": "http://vexdico.shop:8539/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 23:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876959": [
        {
            "ioc_value": "http://kupzovo.shop:7567/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 23:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876957": [
        {
            "ioc_value": "2zslmvx8.theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 23:39:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876950": [
        {
            "ioc_value": "http://mrlketo.shop:8932/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 23:00:42",
            "last_seen_utc": "2026-08-16 00:16:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b00c7ebad267025b84e7b4d1c996eaefec34a065913d73ee0070b119217d1be/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876949": [
        {
            "ioc_value": "66.228.41.52:7567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 23:00:41",
            "last_seen_utc": "2026-08-21 17:06:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b00c7ebad267025b84e7b4d1c996eaefec34a065913d73ee0070b119217d1be/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876948": [
        {
            "ioc_value": "http://kupzovo.shop:7567/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 23:00:40",
            "last_seen_utc": "2026-08-16 00:16:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b00c7ebad267025b84e7b4d1c996eaefec34a065913d73ee0070b119217d1be/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876943": [
        {
            "ioc_value": "joe.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 22:55:05",
            "last_seen_utc": "2026-08-16 03:25:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876944": [
        {
            "ioc_value": "https://joe.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 22:55:05",
            "last_seen_utc": "2026-08-16 03:40:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876942": [
        {
            "ioc_value": "joe.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 22:55:04",
            "last_seen_utc": "2026-08-16 09:25:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876903": [
        {
            "ioc_value": "hmwtez6m.getbraindefender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 22:32:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876899": [
        {
            "ioc_value": "7cz5jg6k.enus-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 21:48:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876898": [
        {
            "ioc_value": "rilzg1u6.shop-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 21:40:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x0f14,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876891": [
        {
            "ioc_value": "dt6wrsv7.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 21:18:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xdcf2,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876889": [
        {
            "ioc_value": "172.93.144.140:8580",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876888": [
        {
            "ioc_value": "b199f70d109357f81c2f147318b424d91fd635449b19c9610f50e428a0c68e8e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 21:03:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876861": [
        {
            "ioc_value": "111.170.148.132:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876823": [
        {
            "ioc_value": "91.236.230.143:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 19:46:52",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876822": [
        {
            "ioc_value": "89.37.100.205:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:46:50",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876817": [
        {
            "ioc_value": "64.176.199.134:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-15 19:46:32",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876816": [
        {
            "ioc_value": "62.171.166.237:44300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-15 19:46:31",
            "last_seen_utc": "2026-09-01 02:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876815": [
        {
            "ioc_value": "1e2wdyj0.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 19:46:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876814": [
        {
            "ioc_value": "45.154.98.207:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-15 19:46:12",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876813": [
        {
            "ioc_value": "38.60.253.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-15 19:46:05",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876812": [
        {
            "ioc_value": "31.59.137.24:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:45:56",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876811": [
        {
            "ioc_value": "31.59.137.166:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:45:55",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876809": [
        {
            "ioc_value": "217.60.195.40:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:45:43",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876810": [
        {
            "ioc_value": "217.60.195.40:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:45:43",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876808": [
        {
            "ioc_value": "217.60.195.197:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:45:42",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876806": [
        {
            "ioc_value": "195.177.94.19:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:44:44",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876807": [
        {
            "ioc_value": "195.177.94.19:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:44:44",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876805": [
        {
            "ioc_value": "185.34.147.35:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 19:44:33",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876803": [
        {
            "ioc_value": "185.34.147.33:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 19:44:32",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876804": [
        {
            "ioc_value": "185.34.147.34:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 19:44:32",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876802": [
        {
            "ioc_value": "185.34.147.32:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 19:44:31",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876801": [
        {
            "ioc_value": "185.34.147.31:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876800": [
        {
            "ioc_value": "172.86.77.50:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-15 19:44:11",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876799": [
        {
            "ioc_value": "153.52.176.60:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:43:46",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876797": [
        {
            "ioc_value": "153.52.176.60:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:43:45",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876798": [
        {
            "ioc_value": "153.52.176.60:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:43:45",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876796": [
        {
            "ioc_value": "143.110.197.12:65000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 19:43:38",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876795": [
        {
            "ioc_value": "124.198.131.110:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876794": [
        {
            "ioc_value": "109.227.57.186:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-15 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876793": [
        {
            "ioc_value": "107.173.177.168:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 19:43:16",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876792": [
        {
            "ioc_value": "180.76.53.183:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876790": [
        {
            "ioc_value": "106.14.16.18:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876791": [
        {
            "ioc_value": "102.117.167.183:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 19:05:05",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876787": [
        {
            "ioc_value": "bxb41a9q.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 18:37:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876786": [
        {
            "ioc_value": "https://cuuwa.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 18:30:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cuuwa.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1876782": [
        {
            "ioc_value": "http://kupzovo.shop:7567/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 18:22:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876781": [
        {
            "ioc_value": "http://bravplo.click:7713/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 18:22:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876778": [
        {
            "ioc_value": "154.37.218.235:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 18:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876775": [
        {
            "ioc_value": "162.14.116.65:18084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 18:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876776": [
        {
            "ioc_value": "154.37.218.235:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 18:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876777": [
        {
            "ioc_value": "154.37.218.235:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 18:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876774": [
        {
            "ioc_value": "111.170.148.132:13000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 18:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876770": [
        {
            "ioc_value": "lpsbdveg.eng-usa--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 17:46:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876767": [
        {
            "ioc_value": "40ee71fb1e584d320db1dcbc71e8b00a2b1b0cac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:17:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876768": [
        {
            "ioc_value": "84412c10b460870f3f9a5db8df5c4fb1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:17:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876764": [
        {
            "ioc_value": "4f70d46d66a362d4c0ddc1242443223f20b9ca9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 17:17:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876765": [
        {
            "ioc_value": "082587256ff1ecbed29ca78dbfee706d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 17:17:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876766": [
        {
            "ioc_value": "d4aaf92e411b242f454647d7a6d1b3657a4699e419b273e7e4b63ce4d2cccb3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:17:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876762": [
        {
            "ioc_value": "f9c60eb51354ab07885428d7b868ade6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876763": [
        {
            "ioc_value": "5ee2f468fac76514a39aac80f78a48a36a3a6585460017bfccca54e4afeb13c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 17:17:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876759": [
        {
            "ioc_value": "56160fa06b16e3822879e77aa47f0764",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876760": [
        {
            "ioc_value": "63eedb85b370d3d55a6023987dc1ca36c49074b364804b3187aa9db9eac2dd33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876761": [
        {
            "ioc_value": "89dba32d78049d5650f10eb53173461a4969b673",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876757": [
        {
            "ioc_value": "dc33f06c86f021af72cc89e1feafa16dad624d43a79242ab738518480a0aef88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876758": [
        {
            "ioc_value": "6e6db8bfff48fb23ca12b33a4c0272d787633e06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876755": [
        {
            "ioc_value": "f3d99d574240983bcf016ef1c477d2d3c764966a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876756": [
        {
            "ioc_value": "57dacba3658cf6df28ae9d54c10c98c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876754": [
        {
            "ioc_value": "958f41d1487994caa3cacb8e52176712efa9d13115ea95587c6dec3658bbcee3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876752": [
        {
            "ioc_value": "0e555954137d88bde2aac58051f507c1c886e2e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 17:17:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876753": [
        {
            "ioc_value": "488e038d75bd71a749dcb98ca5f0006d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 17:17:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876749": [
        {
            "ioc_value": "fb837122ffb8b7041986db79fdd5e908d8ec38c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876750": [
        {
            "ioc_value": "4d4dad091692dc25b7ab60efab9fc5e3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876751": [
        {
            "ioc_value": "5320d565de984280aed253f7ba82c3a5f9d6a7be23300e746e10c63f2b583cbd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 17:17:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876747": [
        {
            "ioc_value": "9327108ce3c50647935244813d506f4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876748": [
        {
            "ioc_value": "f2b7f869036f558eabe71d5f73820dd56a58269d3db1435f26daeeb687c49f9d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876744": [
        {
            "ioc_value": "25f8beb77d6bbfd007a326d24978827e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876745": [
        {
            "ioc_value": "1d118a9482bb8f30bb53c18c8441d5aa8b21ee823206c630238edf0f99ec568e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876746": [
        {
            "ioc_value": "01e3a1b3b3f89bf99c183aea978f17cf890eea01",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876740": [
        {
            "ioc_value": "9d54fa92c215c6ae6eb7b238ba640c10d9ae2c2c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876741": [
        {
            "ioc_value": "b3fabcc24d9c8b12a02126d2102a48f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876742": [
        {
            "ioc_value": "769c5186f40c16fa4e4871bf488301c01e89e3e94f1244f979e1b12b7f244ded",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876743": [
        {
            "ioc_value": "77f274a99d94bdab1709eff41f801bf893393130",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876738": [
        {
            "ioc_value": "079d47dd089638b90a5741175e15760f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:17:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876739": [
        {
            "ioc_value": "8daa6c064b47a03c85bc0eff732da07e0e8966cfc69771e3b9597cad9a155b13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876735": [
        {
            "ioc_value": "d9e1f05c2fef02d320bc2b6aa901f4fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876736": [
        {
            "ioc_value": "aafaddd58c513931655be4a52b11317283b500ef27608a83af45d4e625568d20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:17:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876737": [
        {
            "ioc_value": "4068c64946bc4bafa70fba0bef12fd1568d62441",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:17:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876732": [
        {
            "ioc_value": "e729ad151614c96d872320b40e2f2ad2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-15 17:17:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876733": [
        {
            "ioc_value": "ed6a55a28e22520219c90adeb569c114ab8f01f1e1f2674e06615fe046e7a291",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876734": [
        {
            "ioc_value": "f24465bbae171b3b2dadc5403cac20e6a22bb7b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876728": [
        {
            "ioc_value": "c714a73211957aa0c71defa91d4d6beca8e4abb8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876729": [
        {
            "ioc_value": "45899f8f753e57ded07eb20ca57be0f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876730": [
        {
            "ioc_value": "5869e740ee9d36f62ee9e6e01b4deded4970043d6a6cdd792d0beb383b62c842",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-15 17:17:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876731": [
        {
            "ioc_value": "4eec8596628db00cac1983789a55ee8c540a2ddd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-15 17:17:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876725": [
        {
            "ioc_value": "de1efd1c7a44c5fd268cba68dd9ad9fbc4587536",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876726": [
        {
            "ioc_value": "762792354f7114f7de7420b0c2d77912",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876727": [
        {
            "ioc_value": "d44ff00fe9552510aefbf13c4b986dc094b5aefcd099fd3d7ad6dc816968a50b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876722": [
        {
            "ioc_value": "63a9e6a56ce653494116948cb043fd275b5ee5b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876723": [
        {
            "ioc_value": "e2ea952de8b1bb2afc5a2be3a268a433",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876724": [
        {
            "ioc_value": "2b5994f3a89f4efb1fc1459059b0b74c4935cb587981caeaae14598582058368",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876718": [
        {
            "ioc_value": "5316c1faefa33328e593d3cf4d54d6e25d7243862d65a67189f76d8b38a682ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876719": [
        {
            "ioc_value": "5808b595afc8bd757d53cb4f097fdc7e5608eb47",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876720": [
        {
            "ioc_value": "ed659ff4e9c2f5dca9866645cc7e8b50",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876721": [
        {
            "ioc_value": "cce7a3a488bbc717325a24528c733b820181feeda1a6c168f297c4a090aa3cb1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876715": [
        {
            "ioc_value": "1182e436076f313fb9f22b4cf27918570c50d0ec90fc10d6383a1e86448d68d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.gobrat",
            "malware_alias": null,
            "malware_printable": "GobRAT",
            "first_seen_utc": "2026-08-15 17:17:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876716": [
        {
            "ioc_value": "b55f349e8cd15c07158207942b29d7138ef9c7e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.gobrat",
            "malware_alias": null,
            "malware_printable": "GobRAT",
            "first_seen_utc": "2026-08-15 17:17:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876717": [
        {
            "ioc_value": "78cfe8bfbdad19f3afb54cd12d949db4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.gobrat",
            "malware_alias": null,
            "malware_printable": "GobRAT",
            "first_seen_utc": "2026-08-15 17:17:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876713": [
        {
            "ioc_value": "64964c760b8e54c6074606328da6ff51462a53c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876714": [
        {
            "ioc_value": "a3797091b6196e1b90f824d70e54a1c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876711": [
        {
            "ioc_value": "e5fb52cb4836455493489879979cf724",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876712": [
        {
            "ioc_value": "2ceeac4dd38579e87936343e2819492ac88dd27d489aa72ef5c622e772f9bf0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876709": [
        {
            "ioc_value": "5cc44ec9af3b258dc4cd4fddccfa03550e8f5d3aa57fe78eb9c0805ed0850182",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876710": [
        {
            "ioc_value": "35ac62eefcad505cd25e97b9aff3c147a608c27e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876707": [
        {
            "ioc_value": "a87d71802a427739e07f1cbb4c289491eb3161e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876708": [
        {
            "ioc_value": "bbf695c86f8e0ec38f0630b33766c655",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876704": [
        {
            "ioc_value": "93273d32065f099ae72fbf818e70fda2233acbc1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876705": [
        {
            "ioc_value": "5e973fd7c15c435631fc18e1df82592a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876706": [
        {
            "ioc_value": "b60ad1eee8bc9dcd7c721e381a095973c1aab6eb66f594663548f61e79b5091c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876702": [
        {
            "ioc_value": "fc2f88f368a32c8ba7257bd54a830068",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-15 17:17:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876703": [
        {
            "ioc_value": "ad1f1c29707bba2a41e9d964abb63ff0dc764ea98c3e2a1e38a39dd2c7bcfd6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876701": [
        {
            "ioc_value": "c81953bb0d5bf418cc1b84ed0dd0027ab448ee0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-15 17:17:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876699": [
        {
            "ioc_value": "5ece5582a6cca57b558b5a98290b3699",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-15 17:17:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876700": [
        {
            "ioc_value": "6702d4f508ebf248a56bb2d14b1afdc8557398b3b94c25a6d23eb61533647373",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-15 17:17:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876697": [
        {
            "ioc_value": "7e52031a2ef388824fd6e39f25b626b09be13e33a79d291a4790affdb9b93593",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-15 17:17:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876698": [
        {
            "ioc_value": "76b7d9208456ddfd5a59c99826af2217c3f86168",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-15 17:17:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876694": [
        {
            "ioc_value": "514fa7786356f49ad0e1164fec6fcfb3c2759db9c069beac2f89baa804f7d5fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876695": [
        {
            "ioc_value": "c5f1ea4f7fb4e9b3dd5a3257f051110edcd613d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876696": [
        {
            "ioc_value": "1d944ff591ebcff069f17e5e57180a6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876692": [
        {
            "ioc_value": "7913d064a91596b01112372ed372053a592b8b39",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876693": [
        {
            "ioc_value": "4618b1cf240c99032b4f7ca2d4af724f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876690": [
        {
            "ioc_value": "17ea6604b441e15f0e96d072aa67efe0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876691": [
        {
            "ioc_value": "c9698c118c2ba58fb2c7944354687333bd4f0d58ce5b6710920cdfa682bc9944",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876687": [
        {
            "ioc_value": "1e1831dac3e7b29ce85e256af3a59bc8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876688": [
        {
            "ioc_value": "57478a0f3dcf4df1c96dbb3cd9aa3b255814bd3a4185bf90ba768eb28b471797",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876689": [
        {
            "ioc_value": "19a544e28b2c0b70efd96ca0a8ec178c275c9bb0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876685": [
        {
            "ioc_value": "4f8b3ce56a567f4d1f5a3e4ef0fedcdfad707bfc1b4234397da600f8e2e32316",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876686": [
        {
            "ioc_value": "bcd816c8d313d033d5bbb36c6ffe89982456e7a4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:17:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876683": [
        {
            "ioc_value": "7dba100cce3032d656b51d04f0d21497853f7f37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876684": [
        {
            "ioc_value": "a3354ca3fec7b391f4512da8dd3421da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876680": [
        {
            "ioc_value": "ac9b909f8218706e0f9002303bed9c8961f5fe3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876681": [
        {
            "ioc_value": "1d84d94f80c74358c7bb2d2794f9c452",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876682": [
        {
            "ioc_value": "0775c10d939f7b0e7296492cf754fc34518e6fd66c86d3af81dca7e844f6ceae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876678": [
        {
            "ioc_value": "c5c0c41a5cef69021b0bf05eb5af5bc6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876679": [
        {
            "ioc_value": "35491352181d7598270320d15f331f250c848f94b09ce008d78d901b2b5950e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876676": [
        {
            "ioc_value": "2187038e66f6ebaeec12dd27ef3c423de821294ccd93e070ac13852a68df299f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876677": [
        {
            "ioc_value": "3b6a4aa0ec409408279990f5db31859e16b24c05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876673": [
        {
            "ioc_value": "2ba0d4a1d245911c3c1d6de462e6d43748cb855c5e43191ddb44e57f0e556c7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876674": [
        {
            "ioc_value": "08246c5389f6b61d4f2ada3d22671569f9737817",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876675": [
        {
            "ioc_value": "5bda45afc655e7c53a12fae62333d9d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876671": [
        {
            "ioc_value": "340bf1e84e50f99eb1d13b03fe3419899e706fbd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876672": [
        {
            "ioc_value": "d3893030cd2183ef27ca1ac845a6c5c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876670": [
        {
            "ioc_value": "acc1d1aab8acad7d56dd2a8dc98680e9c19b7c133d24f668a2e40e080badf30f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:17:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876669": [
        {
            "ioc_value": "b898f744e78063ad0e0ba1b249c9d77e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876666": [
        {
            "ioc_value": "00c6c592b1ecb9f1e73d6d458f001d09",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:17:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876667": [
        {
            "ioc_value": "8dd70bf61c236b0e0d9130b261d0d74ba740a53f695b30be2555d8429efb9cf6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876668": [
        {
            "ioc_value": "d281219e20e3ee81a0735baf954e1ab78f232408",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:17:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876663": [
        {
            "ioc_value": "71a61f1cd6274c59ada288288565632b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876664": [
        {
            "ioc_value": "d723ccbf086fa299a5513d2f5ebdbb8206cfbd2d034441db1809fdbc7afe3f70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876665": [
        {
            "ioc_value": "ec7fdc8ec0d72c705ca014a51dd5360c5c6b07cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876660": [
        {
            "ioc_value": "61a4fe4b3fd2331c05a5594a12b2c86e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876661": [
        {
            "ioc_value": "4b957314a35c2c055475a95ed0cf76b2ea51c2afd9c59ab14be0015d7fbea6be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876662": [
        {
            "ioc_value": "d43859ade6f1828829fad88d5be0441893828075",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876658": [
        {
            "ioc_value": "460001cd92917d1c8d4e538d0ec367abf02e6533e357083a8382a1e41f7be5ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876659": [
        {
            "ioc_value": "4e794424b5aedfbe473ceeca647d98a1056d7564",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876656": [
        {
            "ioc_value": "97ec6c8b562aaef59b10812d6deb527b898767d7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:16:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876657": [
        {
            "ioc_value": "c1165519430c253c6f0a78c2e1c9b4d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:16:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876655": [
        {
            "ioc_value": "6ca51deb014b8b313336ff09d44e9b308e55e1c4e8a08d315096250dea0ad853",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:16:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876653": [
        {
            "ioc_value": "9cab8d2908f3175077c525547476529c45d9d5d4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876654": [
        {
            "ioc_value": "c444b3012b12ec2b2d9f7f8e7696379a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876650": [
        {
            "ioc_value": "6dca242eceed2ac371c8df746a9ab90492256c17",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876651": [
        {
            "ioc_value": "ea71e89f31ae3244646c9e2eb671db99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876652": [
        {
            "ioc_value": "161df25bffff4b0d981544486a4de3cf0d08e7a911738644f6be07a7daca2a04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876648": [
        {
            "ioc_value": "fc979950fc9ea29928bee3be393a0fb1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876649": [
        {
            "ioc_value": "cbdb3f356ac398b781823870dce8f16d456b17a4a62081459666518924b0aefb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876645": [
        {
            "ioc_value": "9f762f6edf24c297545951a74df4d45d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-15 17:16:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876646": [
        {
            "ioc_value": "e163ebf5bb0e96f29c969887f54af7ec33b0dab489a67f2b4ca86f6a235c0833",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876647": [
        {
            "ioc_value": "2701f0ca767c453f8772fed548c3e21e19fcfd2c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-15 17:16:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876643": [
        {
            "ioc_value": "f2257d01dde12339f8bc370eabc74fa487e116b47f61f2094472885b9e4cb631",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-15 17:16:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876644": [
        {
            "ioc_value": "106ae11053f255c0c4e4472ce084e57b56488bb1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-15 17:16:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876641": [
        {
            "ioc_value": "652cddd50fc79e027162b7502b7fff935aecf2b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876642": [
        {
            "ioc_value": "cfc95149b7433840e6a64ff648a78575",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876639": [
        {
            "ioc_value": "1bf6b10fd0d4d4fa7bb67f56494d60ef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876640": [
        {
            "ioc_value": "580529f353d25341fb93ac3f616a58ad37ca8227866d0799e763191528878930",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876637": [
        {
            "ioc_value": "250f9079f4018c6c1fed92b09b91e75222790a5f59379c4b7cb3185a9014f246",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876638": [
        {
            "ioc_value": "76c95e013a5c6c57fb4d432df6121bf7b70aabc6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876635": [
        {
            "ioc_value": "1607b565ada67a4c0dc8eda7dc35e70582a362b7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.epsilon_stealer",
            "malware_alias": null,
            "malware_printable": "Epsilon Stealer",
            "first_seen_utc": "2026-08-15 17:16:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876636": [
        {
            "ioc_value": "6fbacb02382b2a52786994adeed3c8b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.epsilon_stealer",
            "malware_alias": null,
            "malware_printable": "Epsilon Stealer",
            "first_seen_utc": "2026-08-15 17:16:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876633": [
        {
            "ioc_value": "1e41d13dacd614db30c0627974e5f593",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-15 17:16:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876634": [
        {
            "ioc_value": "8502dd5e803f7583007481e1821f9242a6ba2774974f6757dd0535a688f6e1b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.epsilon_stealer",
            "malware_alias": null,
            "malware_printable": "Epsilon Stealer",
            "first_seen_utc": "2026-08-15 17:16:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876631": [
        {
            "ioc_value": "ddf9f33fc318bc91eea94a4046a2f03d36652057b9d0f5b985ce81ce4061c4e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-15 17:16:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876632": [
        {
            "ioc_value": "509b938cc18aadc1c0cb0dcfa27a50845837d13e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-15 17:16:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876628": [
        {
            "ioc_value": "79c3a51a94ba9e5013542d8169ffbe24781830d602d5eb18458ff4040dfcf56f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:16:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876629": [
        {
            "ioc_value": "fb882688bb7eb2054f08ec902dbee30556fb82ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:16:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876630": [
        {
            "ioc_value": "2f1f51762d96b0474441dd5fd8d2edde",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:16:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876626": [
        {
            "ioc_value": "12af70da22e14a25bb5a07aac153ee5a172a2e7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876627": [
        {
            "ioc_value": "f217aea5ab97ea04423b45e6e772c39e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876624": [
        {
            "ioc_value": "b87f70704fbd3bde2292f81c4faf03e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876625": [
        {
            "ioc_value": "2de6e101884f841fce0c313d685dd37c4c9d470988e33acf683cfde400bdee28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876621": [
        {
            "ioc_value": "3504bb4047f5e025033975e9f43e0894",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876622": [
        {
            "ioc_value": "72a9256d7d4b594e73816471b26d307dd45775143223ed5b95522d763567e692",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876623": [
        {
            "ioc_value": "c91469477ad1c9e50289d286c75dd623dd42b9cf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876618": [
        {
            "ioc_value": "f8882301be15d016c9d9c42dfadb8240",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876619": [
        {
            "ioc_value": "e65d6b1b86a1cca7c2290f1930306c47dded097c547878d1bad9fbf94a58ecc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876620": [
        {
            "ioc_value": "4208cd940dc0fd95aeca47d058ef56015d3a83fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876616": [
        {
            "ioc_value": "a8900715c5831700ecf8c7a089e0e30511f02f64ec34eba0ab02da4b4f00a37e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876617": [
        {
            "ioc_value": "1977c3eab0289dc6f8420040dd7e73e796782647",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876613": [
        {
            "ioc_value": "32c046428fa2df75cd8b454cfa6831930261f8e6f7c15e1adda189d15ba96d11",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876614": [
        {
            "ioc_value": "7a627072213aa23cffb1ac1090848553606c9dc2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876615": [
        {
            "ioc_value": "97e15bfbd81fc00ff0ecb61bce72a622",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876611": [
        {
            "ioc_value": "6a45d419476e10a44c1c3dd72e618852fec1f1bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876612": [
        {
            "ioc_value": "f982eb0d6692ff93a6331681783a4e09",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876608": [
        {
            "ioc_value": "5096c53e06c1cfe2bb7b1b8282243b5140cb7317",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876609": [
        {
            "ioc_value": "4163e1957558fd73ba4be5059ffccae2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876610": [
        {
            "ioc_value": "cfabae2edf939f81d3fea8a50ba20555639cebd70afb58e0b2c18f820b75a9d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876606": [
        {
            "ioc_value": "8d6a64f6d182ed18bec2b930aa5fd34b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876607": [
        {
            "ioc_value": "e4ce0480d600aee2aaad8df75b2e50ffe369b1f015d72f9ea7f7cbd38b3d684d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876604": [
        {
            "ioc_value": "3b8e7ffdd1469728a242a7b86bb168486dc2b7258b03aa15c52df604e1105e86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876605": [
        {
            "ioc_value": "c6312fe79928195b88a8cff0ee0bc91026ced2f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876601": [
        {
            "ioc_value": "4395c75e4e288387972513b9760f6c868e6b2c2da417c723c24bcf32f11d69fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876602": [
        {
            "ioc_value": "17b0d1c3de10aa582c7e7ce5350166074813c050",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876603": [
        {
            "ioc_value": "dcdf0ea233359364ef7cfd67c4d4b412",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876598": [
        {
            "ioc_value": "2f7470a242b074d8208318b1d5b743ac7ba730d0462e487763b38be7760543e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876599": [
        {
            "ioc_value": "c472c38b2bd11fe84431b44fb6410a13e2609f00",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876600": [
        {
            "ioc_value": "3119ebc3ac10e42ef6d9baa8720bd38b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876595": [
        {
            "ioc_value": "32c92e3a2f50c0d2e64bfaf78c6221de95cc23d4ca22045c70c8e237c60cf29f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 17:16:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876596": [
        {
            "ioc_value": "96863ca872571710a738462ee163aa7d68396496",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 17:16:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876597": [
        {
            "ioc_value": "59ac80a9f292b50f093a9979d2f0e569",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 17:16:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876592": [
        {
            "ioc_value": "f22823bc34ba3592e6f21001f7153e970bff3562ef770786d9beeda451a4b654",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876593": [
        {
            "ioc_value": "723d50f790002410a5be88b3b0a544a45cab3aac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876594": [
        {
            "ioc_value": "c0350c1306cca94724f676834faf1fd8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876589": [
        {
            "ioc_value": "b1dd31636a26d8811f470ccdc32b90ed291dba7cee4ff7d02a9cb01d85146126",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:16:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876590": [
        {
            "ioc_value": "3573283767223581ce41758669305a2164b84936",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:16:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876591": [
        {
            "ioc_value": "90e645041b6e91f8b83d0da2c62ec148",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:16:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876588": [
        {
            "ioc_value": "412de86f12d952ba9b818cbadb39e647",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876585": [
        {
            "ioc_value": "2bac3cc16309c1edfc33ec16cc92f86a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876586": [
        {
            "ioc_value": "574b25e2d65712a885dd877d89d73e446104db074c63ec5d8c8af3583bf83956",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876587": [
        {
            "ioc_value": "5c19b673162fcebf4924bf6fb87ddc93a0f056b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876582": [
        {
            "ioc_value": "511733f92427fb512d1f2747e760bad7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:16:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876583": [
        {
            "ioc_value": "6aec564e3390d3ed3414fadf51ff4151cb7d0671ef0833e839f0c914082b9751",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876584": [
        {
            "ioc_value": "b1671116e29b1a02dffece2df8b53bb7d590e86b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876580": [
        {
            "ioc_value": "813e1dd6f327354fdf8077fc9482fcfff32c357ed876da3cd197a16f596f0692",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:16:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876581": [
        {
            "ioc_value": "d565760037dfcd91f49229841c6f0d1e39497c4e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-15 17:16:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876578": [
        {
            "ioc_value": "7105315cec8e9218b73caf61179824f018f3c8f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876579": [
        {
            "ioc_value": "09c00cba625a481a2c1c53d316bbacbc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876575": [
        {
            "ioc_value": "d7c925b5887a46f252de23a9b9be79a1913d5937",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876576": [
        {
            "ioc_value": "000f253f7a53d91fc8b2ccfe79621341",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876577": [
        {
            "ioc_value": "e15e7f62c32fc341ae5c686c8a4f24e731476ced8bfcd67695edf7af1253e0e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876574": [
        {
            "ioc_value": "a1b7a27ccd4c49a1e0bb6ffd940d2e5eeae02d29739480f837b84152fbee16f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-15 17:16:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876571": [
        {
            "ioc_value": "5a4a0a529ae8c8ae85f1ea8017de76517b4d83f1c620a97c40b870ece19869f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876572": [
        {
            "ioc_value": "29dc5f936f70192ef4b9ad00b956d0c783e3324e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876573": [
        {
            "ioc_value": "c2bb935a456cacbb7fcc7fa1efcfaa32",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-15 17:16:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876568": [
        {
            "ioc_value": "7aff13bfb7e02f948cd94a0bd44a4c37b1fe527367523846b0424ccf43f9b760",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:16:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876569": [
        {
            "ioc_value": "ebb2f8fbffa61f055048586d04e06a603bee104a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:16:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876570": [
        {
            "ioc_value": "dba57404b491022f173ca04436c34d67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-15 17:16:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876565": [
        {
            "ioc_value": "c713bb386cb58f4e69960add340c8597fad9989cfb00a6bcfe2f4767dbf1cfc4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876566": [
        {
            "ioc_value": "574a023bbc7ed0f882f9f1db7a3e2ead6b356be9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876567": [
        {
            "ioc_value": "1ee4ee8d50272ccde07e24eb9b8337cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876562": [
        {
            "ioc_value": "79399d2ccde8a358e1f62b9422e4ba4d337d14b293f0d351b5f611549188cf19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876563": [
        {
            "ioc_value": "68b4f56cab5bd0adeab70377eb15f8bcbfaa906c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876564": [
        {
            "ioc_value": "23bb983a4f9612a8c5174a31ac11f1f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 17:16:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876560": [
        {
            "ioc_value": "b69960959a2a3027410b08b37cb233b1ef14d958",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:16:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876561": [
        {
            "ioc_value": "4533a423f75743a34bed873c0606fc17",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:16:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876559": [
        {
            "ioc_value": "7db44e145483e67e5fa9944a0d1e9df51e4cd6a0b50249cd882a38eca2443ec7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-15 17:16:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1876558": [
        {
            "ioc_value": "154.37.218.235:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 17:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876557": [
        {
            "ioc_value": "107.172.217.148:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 17:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876555": [
        {
            "ioc_value": "111.170.148.132:10086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 16:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876553": [
        {
            "ioc_value": "107.172.217.148:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876554": [
        {
            "ioc_value": "111.170.148.132:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876552": [
        {
            "ioc_value": "107.172.217.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 16:05:05",
            "last_seen_utc": "2026-08-16 13:07:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876550": [
        {
            "ioc_value": "k7o1ql3j.eng-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 15:49:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876205": [
        {
            "ioc_value": "4.253.8.171:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:43:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "8075,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1876206": [
        {
            "ioc_value": "102.205.170.11:8147",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-15 15:43:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "329556,c2,censys,quasar",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1876209": [
        {
            "ioc_value": "94.154.32.220:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 15:43:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "214961,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1876217": [
        {
            "ioc_value": "178.62.199.215:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-15 15:43:02",
            "last_seen_utc": "2026-08-18 12:37:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876218": [
        {
            "ioc_value": "167.99.214.118:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-15 15:43:02",
            "last_seen_utc": "2026-08-18 12:38:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876219": [
        {
            "ioc_value": "167.71.14.32:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-15 15:43:01",
            "last_seen_utc": "2026-08-18 12:37:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876245": [
        {
            "ioc_value": "45.38.249.63:14",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:43:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876246": [
        {
            "ioc_value": "45.38.249.63:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:43:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876247": [
        {
            "ioc_value": "45.38.249.63:1005",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:43:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876248": [
        {
            "ioc_value": "45.38.249.63:1003",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876249": [
        {
            "ioc_value": "45.38.249.63:1002",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876250": [
        {
            "ioc_value": "45.38.249.63:1001",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876251": [
        {
            "ioc_value": "45.38.249.63:1008",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876252": [
        {
            "ioc_value": "45.38.249.63:1013",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876253": [
        {
            "ioc_value": "45.38.249.63:1014",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876254": [
        {
            "ioc_value": "45.38.249.63:1007",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876255": [
        {
            "ioc_value": "45.38.249.63:1011",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876256": [
        {
            "ioc_value": "45.38.249.63:1006",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876257": [
        {
            "ioc_value": "45.38.249.63:1009",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876258": [
        {
            "ioc_value": "45.38.249.63:6969",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1875029": [
        {
            "ioc_value": "176.98.182.218:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:48",
            "last_seen_utc": "2026-09-01 03:17:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875031": [
        {
            "ioc_value": "https://poh.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 15:42:48",
            "last_seen_utc": "2026-08-14 18:25:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5fdb6df778631818165110294c620890,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875037": [
        {
            "ioc_value": "https://rodrigeez.surf/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 15:42:48",
            "last_seen_utc": "2026-08-15 00:11:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1875038": [
        {
            "ioc_value": "72.62.195.74:8839",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 15:42:47",
            "last_seen_utc": "2026-08-15 08:35:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a6416186c7730e38c492792c820881c3,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875086": [
        {
            "ioc_value": "150.109.93.78:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:44",
            "last_seen_utc": "2026-09-01 03:17:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875087": [
        {
            "ioc_value": "43.128.113.133:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:44",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875088": [
        {
            "ioc_value": "43.129.180.120:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:43",
            "last_seen_utc": "2026-09-01 03:03:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875089": [
        {
            "ioc_value": "43.134.49.218:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:43",
            "last_seen_utc": "2026-09-01 03:18:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875098": [
        {
            "ioc_value": "lthicpjqc7gkn5eq3epxndc2uig3yngvcbdya4u3m3byjod5km4yuwqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/14/majinahanashi-ransomware-another-japanese-locker/",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1875096": [
        {
            "ioc_value": "914ff51fb60247cf13897b1bc950a190",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:42",
            "last_seen_utc": "2026-08-27 07:51:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/14/majinahanashi-ransomware-another-japanese-locker/",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1875097": [
        {
            "ioc_value": "7ee443b0530bb9fe4c36c0faafdeb6bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:41",
            "last_seen_utc": "2026-08-27 07:51:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/14/majinahanashi-ransomware-another-japanese-locker/",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1875099": [
        {
            "ioc_value": "cc666mzpsjhn3yi6t7hqkwi5thjeh7prxg3mndpceb7xtchsbsmct3ad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/14/majinahanashi-ransomware-another-japanese-locker/",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1875100": [
        {
            "ioc_value": "rz45lyi2ehl2e2xs3ivwbah65tumebztmypmtqpc6cigc3wadwjicgad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/14/majinahanashi-ransomware-another-japanese-locker/",
            "tags": "majinahanashi,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1875102": [
        {
            "ioc_value": "http://153.117.13.202:57672/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:42:39",
            "last_seen_utc": "2026-08-25 00:19:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.13.202",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1875103": [
        {
            "ioc_value": "http://39.34.166.87:45475/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:42:39",
            "last_seen_utc": "2026-08-25 00:19:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.34.166.87",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1875104": [
        {
            "ioc_value": "http://218.0.112.226:51471/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:42:38",
            "last_seen_utc": "2026-08-25 00:19:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/218.0.112.226",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1875105": [
        {
            "ioc_value": "157.230.84.95:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:38",
            "last_seen_utc": "2026-08-17 13:49:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875106": [
        {
            "ioc_value": "46.101.133.159:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:38",
            "last_seen_utc": "2026-08-17 13:47:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875107": [
        {
            "ioc_value": "64.227.165.222:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:37",
            "last_seen_utc": "2026-08-17 13:50:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875108": [
        {
            "ioc_value": "139.59.108.178:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:37",
            "last_seen_utc": "2026-08-17 13:50:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875109": [
        {
            "ioc_value": "168.144.30.198:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:37",
            "last_seen_utc": "2026-08-17 13:14:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875110": [
        {
            "ioc_value": "157.245.194.180:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:36",
            "last_seen_utc": "2026-08-17 13:50:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875111": [
        {
            "ioc_value": "165.245.242.183:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:36",
            "last_seen_utc": "2026-08-17 13:17:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875112": [
        {
            "ioc_value": "162.243.79.150:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:35",
            "last_seen_utc": "2026-08-17 13:49:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876044": [
        {
            "ioc_value": "176.98.182.218:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:34",
            "last_seen_utc": "2026-08-31 08:24:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876049": [
        {
            "ioc_value": "89.19.223.68:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:33",
            "last_seen_utc": "2026-08-21 22:54:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876053": [
        {
            "ioc_value": "https://edgetoken2186.net/ue",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 15:42:33",
            "last_seen_utc": "2026-08-15 00:11:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117095511868487413",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1876054": [
        {
            "ioc_value": "edgetoken2186.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 15:42:32",
            "last_seen_utc": "2026-08-15 00:11:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117095511868487413",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1876055": [
        {
            "ioc_value": "169.58.168.81:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-15 15:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1876090": [
        {
            "ioc_value": "https://datapass2578.com/ue",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 15:42:32",
            "last_seen_utc": "2026-08-15 06:11:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117095683249617990",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1876091": [
        {
            "ioc_value": "datapass2578.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-15 15:42:31",
            "last_seen_utc": "2026-08-15 06:11:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/117095683249617990",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1876092": [
        {
            "ioc_value": "http://124.92.80.153:35984/bin.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:30",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "whack.sh",
            "anonymous": 0,
            "reporter": "whack_sh"
        }
    ],
    "1876093": [
        {
            "ioc_value": "http://42.176.120.191:54769/i",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:29",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "whack.sh",
            "anonymous": 0,
            "reporter": "whack_sh"
        }
    ],
    "1876094": [
        {
            "ioc_value": "http://222.127.220.233:54104/i",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:29",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "whack.sh",
            "anonymous": 0,
            "reporter": "whack_sh"
        }
    ],
    "1876095": [
        {
            "ioc_value": "http://221.202.17.138:38962/i",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:42:29",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "whack.sh",
            "anonymous": 0,
            "reporter": "whack_sh"
        }
    ],
    "1876097": [
        {
            "ioc_value": "165.245.242.183:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876133": [
        {
            "ioc_value": "https://gru.sm188dadu.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 15:42:28",
            "last_seen_utc": "2026-08-14 23:44:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "013c5d2d6312702c9bd8d7499170ed6b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876134": [
        {
            "ioc_value": "https://gru.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 15:42:27",
            "last_seen_utc": "2026-08-15 10:26:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aa462c8dcc4d1e29e6e35cbe1cd9ac85,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876137": [
        {
            "ioc_value": "176.98.182.177:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:27",
            "last_seen_utc": "2026-09-01 02:09:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876177": [
        {
            "ioc_value": "http://223.123.71.152:51877/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:42:25",
            "last_seen_utc": "2026-08-25 00:19:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.71.152",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876159": [
        {
            "ioc_value": "162.243.79.150:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:24",
            "last_seen_utc": "2026-08-17 12:06:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876160": [
        {
            "ioc_value": "176.98.182.216:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:24",
            "last_seen_utc": "2026-08-31 23:53:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876188": [
        {
            "ioc_value": "43.134.49.218:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:42:23",
            "last_seen_utc": "2026-09-01 03:03:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876240": [
        {
            "ioc_value": "http://111.127.232.94:58633/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:42:00",
            "last_seen_utc": "2026-08-25 00:19:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.127.232.94",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876238": [
        {
            "ioc_value": "http://223.123.42.233:58286/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:59",
            "last_seen_utc": "2026-08-25 00:19:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.42.233",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876239": [
        {
            "ioc_value": "http://14.1.107.87:59308/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:58",
            "last_seen_utc": "2026-08-25 00:19:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.107.87",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876241": [
        {
            "ioc_value": "http://105.186.143.37:55447/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:56",
            "last_seen_utc": "2026-08-25 00:19:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/105.186.143.37",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876242": [
        {
            "ioc_value": "http://223.123.44.116:50708/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:56",
            "last_seen_utc": "2026-08-25 00:19:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.44.116",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876244": [
        {
            "ioc_value": "176.98.182.217:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:41:55",
            "last_seen_utc": "2026-08-31 11:11:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876262": [
        {
            "ioc_value": "http://144.31.57.107/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-15 15:41:53",
            "last_seen_utc": "2026-08-15 15:01:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "build3,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876270": [
        {
            "ioc_value": "157.230.84.95:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:41:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876271": [
        {
            "ioc_value": "139.59.108.178:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:41:52",
            "last_seen_utc": "2026-08-17 11:01:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876277": [
        {
            "ioc_value": "uiccvbk.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 15:41:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e65d6b1b86a1cca7c2290f1930306c47dded097c547878d1bad9fbf94a58ecc8/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1876274": [
        {
            "ioc_value": "glaciermods.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 15:41:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1876278": [
        {
            "ioc_value": "mrlketo.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 15:41:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e65d6b1b86a1cca7c2290f1930306c47dded097c547878d1bad9fbf94a58ecc8/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1876279": [
        {
            "ioc_value": "vexdico.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 15:41:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e65d6b1b86a1cca7c2290f1930306c47dded097c547878d1bad9fbf94a58ecc8/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1876297": [
        {
            "ioc_value": "http://94.26.90.126/OTGQqXnM9XS4dsIiC",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 15:41:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Ghostx"
        }
    ],
    "1876298": [
        {
            "ioc_value": "https://pub-18653d64d62d4ec886510b90fdfce453.r2.dev/GCt12d.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 15:41:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Ghostx"
        }
    ],
    "1876299": [
        {
            "ioc_value": "http://pub-18653d64d62d4ec886510b90fdfce453.r2.dev/GCt12d.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 15:41:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Ghostx"
        }
    ],
    "1876300": [
        {
            "ioc_value": "http://94.26.90.126/yuavjgsc-bm7be83b-4rc7cenv-7euh4bmz/GCt12d.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 15:41:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Ghostx"
        }
    ],
    "1876324": [
        {
            "ioc_value": "64.227.165.222:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:41:44",
            "last_seen_utc": "2026-08-17 10:25:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876365": [
        {
            "ioc_value": "http://160.20.109.90/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-15 15:41:43",
            "last_seen_utc": "2026-09-01 03:22:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,newbuild,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876369": [
        {
            "ioc_value": "139.59.108.178:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:41:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876370": [
        {
            "ioc_value": "http://144.48.132.151:53976/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:42",
            "last_seen_utc": "2026-08-25 00:19:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.132.151",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876371": [
        {
            "ioc_value": "http://153.117.6.98:58283/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:41",
            "last_seen_utc": "2026-08-25 00:19:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.98",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876372": [
        {
            "ioc_value": "http://14.205.104.200:58915/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:41",
            "last_seen_utc": "2026-08-25 00:19:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.205.104.200",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876373": [
        {
            "ioc_value": "http://172.168.171.137:35698/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:40",
            "last_seen_utc": "2026-08-25 00:19:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/172.168.171.137",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876374": [
        {
            "ioc_value": "http://144.48.134.114:47663/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-15 15:41:40",
            "last_seen_utc": "2026-08-25 00:19:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.134.114",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1876386": [
        {
            "ioc_value": "168.144.30.198:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-15 15:41:39",
            "last_seen_utc": "2026-08-17 13:48:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876375": [
        {
            "ioc_value": "209.38.82.72:9048",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 15:41:38",
            "last_seen_utc": "2026-09-01 03:37:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1876549": [
        {
            "ioc_value": "gtuber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 15:39:50",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876548": [
        {
            "ioc_value": "23.95.48.157:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:37:18",
            "last_seen_utc": "2026-08-26 07:55:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876547": [
        {
            "ioc_value": "123.60.81.230:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:37:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876544": [
        {
            "ioc_value": "savemute.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-15 15:26:25",
            "last_seen_utc": "2026-08-17 07:52:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876542": [
        {
            "ioc_value": "107.172.217.148:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876540": [
        {
            "ioc_value": "1.13.19.103:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876541": [
        {
            "ioc_value": "1.13.19.103:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876539": [
        {
            "ioc_value": "1.13.19.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876514": [
        {
            "ioc_value": "a79bc3298b6b2de35d8f52b71a6d6545701f42b8cc1cfabfed24f62ed81801de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 14:57:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876515": [
        {
            "ioc_value": "f191f756996a14a11e5445fa7103d302efd510cf2fbf920e6c0c8ed51d512e36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 14:57:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876516": [
        {
            "ioc_value": "bezelek.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 14:57:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876513": [
        {
            "ioc_value": "ajnfqs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 14:53:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876508": [
        {
            "ioc_value": "webenysy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:37",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876509": [
        {
            "ioc_value": "wehisibo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:37",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876510": [
        {
            "ioc_value": "yzlik3jn4g.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:37",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876511": [
        {
            "ioc_value": "zrkpd48812.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:37",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876512": [
        {
            "ioc_value": "zuhase.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:37",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876503": [
        {
            "ioc_value": "rm4404x6us.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:36",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876504": [
        {
            "ioc_value": "tajajado.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:36",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876505": [
        {
            "ioc_value": "tun9dcocc3.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:36",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876506": [
        {
            "ioc_value": "umtck81817.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:36",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876507": [
        {
            "ioc_value": "vyjafi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:36",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876497": [
        {
            "ioc_value": "nkzfe53284.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:35",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876498": [
        {
            "ioc_value": "nuqica.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:35",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876499": [
        {
            "ioc_value": "nywge73755.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:35",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876500": [
        {
            "ioc_value": "obpcb01908.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:35",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876501": [
        {
            "ioc_value": "orofg28425.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:35",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876502": [
        {
            "ioc_value": "pugyqi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:35",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876492": [
        {
            "ioc_value": "fyumg68489.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:34",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876493": [
        {
            "ioc_value": "gludi69399.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:34",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876494": [
        {
            "ioc_value": "ixsnn39525.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:34",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876495": [
        {
            "ioc_value": "lemohuko.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:34",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876496": [
        {
            "ioc_value": "mosoxary.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:34",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876487": [
        {
            "ioc_value": "bluetybie.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:33",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876488": [
        {
            "ioc_value": "cdsaoufwvo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:33",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876489": [
        {
            "ioc_value": "cibiku.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:33",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876490": [
        {
            "ioc_value": "crimson4544.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:33",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876491": [
        {
            "ioc_value": "fudud35949.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:33",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876482": [
        {
            "ioc_value": "4rb0f78fcs.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:32",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876483": [
        {
            "ioc_value": "5wccis5lmb.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:32",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876484": [
        {
            "ioc_value": "69allied.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:32",
            "last_seen_utc": "2026-08-16 12:53:01",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876485": [
        {
            "ioc_value": "adakg39920.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:32",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876486": [
        {
            "ioc_value": "aquamarineleila.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:32",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876481": [
        {
            "ioc_value": "3cqku5jtal.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 14:46:31",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876480": [
        {
            "ioc_value": "ogtqavytw.usa--us-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 14:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876475": [
        {
            "ioc_value": "https://lagerraum-mieten-luzern.ch/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 14:30:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lagerraum-mieten-luzern.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1876395": [
        {
            "ioc_value": "23.141.12.111:1080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 14:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876396": [
        {
            "ioc_value": "1.13.19.103:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 14:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876393": [
        {
            "ioc_value": "111.170.148.132:82",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876394": [
        {
            "ioc_value": "123.56.147.227:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876392": [
        {
            "ioc_value": "https://nty.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 14:02:18",
            "last_seen_utc": "2026-08-15 22:25:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876391": [
        {
            "ioc_value": "nty.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 14:02:17",
            "last_seen_utc": "2026-08-16 06:33:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876389": [
        {
            "ioc_value": "https://nty.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 13:57:19",
            "last_seen_utc": "2026-08-15 14:46:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876388": [
        {
            "ioc_value": "nty.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 13:57:18",
            "last_seen_utc": "2026-08-15 14:27:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876387": [
        {
            "ioc_value": "4fm984rh.eng-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 13:44:38",
            "last_seen_utc": "2026-08-20 05:55:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876384": [
        {
            "ioc_value": "bpxotsbx.eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 13:38:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876379": [
        {
            "ioc_value": "111.170.148.132:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876380": [
        {
            "ioc_value": "111.170.148.132:36463",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876378": [
        {
            "ioc_value": "http://timelevel12.com/big",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-15 12:47:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876377": [
        {
            "ioc_value": "timelevel12.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-15 12:46:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876367": [
        {
            "ioc_value": "20.215.224.217:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-15 12:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876368": [
        {
            "ioc_value": "156.239.47.245:3232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 12:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876366": [
        {
            "ioc_value": "31.171.131.250:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 12:05:06",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876361": [
        {
            "ioc_value": "youcool.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 11:47:14",
            "last_seen_utc": "2026-09-01 02:35:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876353": [
        {
            "ioc_value": "jupagportal.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 11:47:12",
            "last_seen_utc": "2026-08-27 10:53:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876347": [
        {
            "ioc_value": "ka3xwdti.en-us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 11:44:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876344": [
        {
            "ioc_value": "canadianfriendsofyadsarah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 11:19:16",
            "last_seen_utc": "2026-08-26 21:48:12",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876339": [
        {
            "ioc_value": "104.243.248.63:412",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876338": [
        {
            "ioc_value": "111.170.148.132:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876337": [
        {
            "ioc_value": "http://mrlketo.shop:8932/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 10:57:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876336": [
        {
            "ioc_value": "http://bravplo.click:7713/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 10:57:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876332": [
        {
            "ioc_value": "byz.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 10:32:19",
            "last_seen_utc": "2026-08-15 11:27:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876333": [
        {
            "ioc_value": "https://byz.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 10:32:19",
            "last_seen_utc": "2026-08-15 11:38:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876330": [
        {
            "ioc_value": "byz.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 10:32:18",
            "last_seen_utc": "2026-08-15 13:27:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876331": [
        {
            "ioc_value": "https://byz.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 10:32:18",
            "last_seen_utc": "2026-08-15 13:27:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876328": [
        {
            "ioc_value": "mon-blanc-02.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 10:27:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1876325": [
        {
            "ioc_value": "aappicha.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 10:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32c92e3a2f50c0d2e64bfaf78c6221de95cc23d4ca22045c70c8e237c60cf29f/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876323": [
        {
            "ioc_value": "207.189.22.218:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 09:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876320": [
        {
            "ioc_value": "91.92.243.114:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 09:46:30",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876319": [
        {
            "ioc_value": "64.94.84.119:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 09:46:15",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876318": [
        {
            "ioc_value": "62.171.166.237:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-15 09:46:11",
            "last_seen_utc": "2026-09-01 02:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876317": [
        {
            "ioc_value": "45.61.177.23:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-15 09:45:57",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876316": [
        {
            "ioc_value": "45.154.98.207:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-15 09:45:51",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876315": [
        {
            "ioc_value": "38.147.162.163:15087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 09:45:42",
            "last_seen_utc": "2026-09-01 02:45:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876314": [
        {
            "ioc_value": "23.175.48.7:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 09:45:31",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876313": [
        {
            "ioc_value": "194.182.87.116:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 09:44:31",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876312": [
        {
            "ioc_value": "177.22.119.159:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-15 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876311": [
        {
            "ioc_value": "176.44.51.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-15 09:44:08",
            "last_seen_utc": "2026-09-01 02:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876310": [
        {
            "ioc_value": "qh00u7b9.en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 09:43:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876309": [
        {
            "ioc_value": "155.94.150.221:6745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 09:43:45",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876308": [
        {
            "ioc_value": "147.45.61.65:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-15 09:43:39",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876307": [
        {
            "ioc_value": "144.124.234.128:49999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 09:43:37",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876306": [
        {
            "ioc_value": "123.136.92.100:49999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-15 09:43:24",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876305": [
        {
            "ioc_value": "111.228.13.59:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:43:20",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876304": [
        {
            "ioc_value": "104.243.248.63:306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-15 09:43:13",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876303": [
        {
            "ioc_value": "104.194.132.192:24432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876290": [
        {
            "ioc_value": "http://mrlketo.shop:8932/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 09:05:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfabae2edf939f81d3fea8a50ba20555639cebd70afb58e0b2c18f820b75a9d0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876289": [
        {
            "ioc_value": "http://bravplo.click:7713/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 09:05:40",
            "last_seen_utc": "2026-08-15 15:47:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfabae2edf939f81d3fea8a50ba20555639cebd70afb58e0b2c18f820b75a9d0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876288": [
        {
            "ioc_value": "111.170.148.132:19000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876286": [
        {
            "ioc_value": "111.170.148.132:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876287": [
        {
            "ioc_value": "111.170.148.132:1080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876285": [
        {
            "ioc_value": "93.95.227.51:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:05:05",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876284": [
        {
            "ioc_value": "ecf6696f5ecd642a27033782163e51e890e59151762e37a76897637eb620db3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 09:03:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876283": [
        {
            "ioc_value": "https://flexsportpools.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 09:00:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/flexsportpools.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1876282": [
        {
            "ioc_value": "http://vexdico.shop:8539/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 08:45:51",
            "last_seen_utc": "2026-08-15 15:47:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32c046428fa2df75cd8b454cfa6831930261f8e6f7c15e1adda189d15ba96d11/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876281": [
        {
            "ioc_value": "http://bravplo.click:7713/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 08:45:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32c046428fa2df75cd8b454cfa6831930261f8e6f7c15e1adda189d15ba96d11/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876280": [
        {
            "ioc_value": "rn255nbo.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 08:37:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876276": [
        {
            "ioc_value": "http://uiccvbk.click:8839/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 08:35:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e65d6b1b86a1cca7c2290f1930306c47dded097c547878d1bad9fbf94a58ecc8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876275": [
        {
            "ioc_value": "http://mrlketo.shop:8932/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e65d6b1b86a1cca7c2290f1930306c47dded097c547878d1bad9fbf94a58ecc8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876273": [
        {
            "ioc_value": "111.229.216.164:7963",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876272": [
        {
            "ioc_value": "106.15.104.224:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876269": [
        {
            "ioc_value": "5bpers6h.en-en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 07:44:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876268": [
        {
            "ioc_value": "timelevel12.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-15 07:29:53",
            "last_seen_utc": "2026-08-27 05:28:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1876266": [
        {
            "ioc_value": "http://mrlketo.shop:8932/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 07:27:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876267": [
        {
            "ioc_value": "http://vexdico.shop:8539/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 07:27:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876263": [
        {
            "ioc_value": "204.194.53.9:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876264": [
        {
            "ioc_value": "204.194.53.9:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876265": [
        {
            "ioc_value": "207.148.126.156:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876261": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198657426610",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 06:41:36",
            "last_seen_utc": "2026-08-24 13:47:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/769c5186f40c16fa4e4871bf488301c01e89e3e94f1244f979e1b12b7f244ded/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876259": [
        {
            "ioc_value": "https://2.28.26.204",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 06:41:35",
            "last_seen_utc": "2026-08-18 07:04:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/769c5186f40c16fa4e4871bf488301c01e89e3e94f1244f979e1b12b7f244ded/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876260": [
        {
            "ioc_value": "https://telegram.me/m1duus",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-15 06:41:35",
            "last_seen_utc": "2026-08-24 13:48:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/769c5186f40c16fa4e4871bf488301c01e89e3e94f1244f979e1b12b7f244ded/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876237": [
        {
            "ioc_value": "47.95.222.141:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876236": [
        {
            "ioc_value": "39.96.3.65:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-15 06:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876234": [
        {
            "ioc_value": "nickanto.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 05:58:34",
            "last_seen_utc": "2026-08-15 11:15:36",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876235": [
        {
            "ioc_value": "mvb.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 05:58:34",
            "last_seen_utc": "2026-08-15 11:15:26",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876233": [
        {
            "ioc_value": "bvm9kxn7.gut--drops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 05:52:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876231": [
        {
            "ioc_value": "gtmdura4.en-us-slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 05:45:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876230": [
        {
            "ioc_value": "90uk7unu.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 05:43:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876226": [
        {
            "ioc_value": "https://blaze-x.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 04:30:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/blaze-x.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1876225": [
        {
            "ioc_value": "v22eqt8a.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 03:42:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876224": [
        {
            "ioc_value": "milpl8xr.eng-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 03:37:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876222": [
        {
            "ioc_value": "http://vexdico.shop:8539/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 03:20:57",
            "last_seen_utc": "2026-08-15 18:22:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/460001cd92917d1c8d4e538d0ec367abf02e6533e357083a8382a1e41f7be5ce/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876221": [
        {
            "ioc_value": "62.72.59.224:7713",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 03:20:51",
            "last_seen_utc": "2026-08-31 08:15:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/460001cd92917d1c8d4e538d0ec367abf02e6533e357083a8382a1e41f7be5ce/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876220": [
        {
            "ioc_value": "http://bravplo.click:7713/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 03:20:50",
            "last_seen_utc": "2026-08-16 17:37:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/460001cd92917d1c8d4e538d0ec367abf02e6533e357083a8382a1e41f7be5ce/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876215": [
        {
            "ioc_value": "flexsportpools.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 03:06:31",
            "last_seen_utc": "2026-08-15 11:47:11",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876212": [
        {
            "ioc_value": "wc2z5pjy.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 01:40:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876211": [
        {
            "ioc_value": "4fg0jkkv.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 01:39:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876210": [
        {
            "ioc_value": "desarrollosoftware.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 01:15:26",
            "last_seen_utc": "2026-08-15 11:09:49",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876208": [
        {
            "ioc_value": "47.84.15.240:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876207": [
        {
            "ioc_value": "47.84.15.240:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-15 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876204": [
        {
            "ioc_value": "zeohztla01.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:45",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876199": [
        {
            "ioc_value": "kuhola.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:44",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876200": [
        {
            "ioc_value": "lbdtd11760.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:44",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876201": [
        {
            "ioc_value": "lykezijo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:44",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876202": [
        {
            "ioc_value": "mauritachronic.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:44",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876203": [
        {
            "ioc_value": "tomecalu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:44",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876194": [
        {
            "ioc_value": "alliedjeralee.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:43",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876195": [
        {
            "ioc_value": "daxokoso.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:43",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876196": [
        {
            "ioc_value": "fb749p38a6.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:43",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876197": [
        {
            "ioc_value": "flat8435.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:43",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876198": [
        {
            "ioc_value": "fulakera.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-15 00:57:43",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,Cloudflare Inc.,gif,PHP,webshell,WordPress,workers.dev",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876193": [
        {
            "ioc_value": "dc6z7ywb.en-us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-15 00:46:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876192": [
        {
            "ioc_value": "http://vexdico.shop:8539/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:40:50",
            "last_seen_utc": "2026-08-16 11:15:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/57478a0f3dcf4df1c96dbb3cd9aa3b255814bd3a4185bf90ba768eb28b471797/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876191": [
        {
            "ioc_value": "http://vexdico.shop:8539/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:40:49",
            "last_seen_utc": "2026-08-24 19:25:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4f8b3ce56a567f4d1f5a3e4ef0fedcdfad707bfc1b4234397da600f8e2e32316/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876190": [
        {
            "ioc_value": "http://mrlketo.shop:8932/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:40:44",
            "last_seen_utc": "2026-08-19 15:15:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4f8b3ce56a567f4d1f5a3e4ef0fedcdfad707bfc1b4234397da600f8e2e32316/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876189": [
        {
            "ioc_value": "http://mrlketo.shop:8932/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:40:43",
            "last_seen_utc": "2026-08-15 08:08:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/57478a0f3dcf4df1c96dbb3cd9aa3b255814bd3a4185bf90ba768eb28b471797/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876187": [
        {
            "ioc_value": "38.242.157.137:7242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:35:51",
            "last_seen_utc": "2026-08-22 00:15:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/514fa7786356f49ad0e1164fec6fcfb3c2759db9c069beac2f89baa804f7d5fe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876186": [
        {
            "ioc_value": "http://palaera.click:7242/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:35:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/514fa7786356f49ad0e1164fec6fcfb3c2759db9c069beac2f89baa804f7d5fe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876185": [
        {
            "ioc_value": "http://mrlketo.shop:8932/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:35:48",
            "last_seen_utc": "2026-08-16 19:49:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/514fa7786356f49ad0e1164fec6fcfb3c2759db9c069beac2f89baa804f7d5fe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876182": [
        {
            "ioc_value": "http://bravplo.click:7713/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:32:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876183": [
        {
            "ioc_value": "http://mrlketo.shop:8932/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:32:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876184": [
        {
            "ioc_value": "http://vexdico.shop:8539/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:32:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876181": [
        {
            "ioc_value": "gate.runmanor.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-15 00:32:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876180": [
        {
            "ioc_value": "http://vexdico.shop:8539/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:30:56",
            "last_seen_utc": "2026-08-17 11:53:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ad1f1c29707bba2a41e9d964abb63ff0dc764ea98c3e2a1e38a39dd2c7bcfd6b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876179": [
        {
            "ioc_value": "http://shkpiva.shop:5627/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:30:52",
            "last_seen_utc": "2026-08-17 11:53:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ad1f1c29707bba2a41e9d964abb63ff0dc764ea98c3e2a1e38a39dd2c7bcfd6b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876178": [
        {
            "ioc_value": "http://mrlketo.shop:8932/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-15 00:30:50",
            "last_seen_utc": "2026-08-16 17:37:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ad1f1c29707bba2a41e9d964abb63ff0dc764ea98c3e2a1e38a39dd2c7bcfd6b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876173": [
        {
            "ioc_value": "blaze-x.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 00:05:23",
            "last_seen_utc": "2026-08-15 11:47:11",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876174": [
        {
            "ioc_value": "cantieregroup.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-15 00:05:23",
            "last_seen_utc": "2026-08-15 11:15:05",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876170": [
        {
            "ioc_value": "http://bravplo.click:7713/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 23:50:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876171": [
        {
            "ioc_value": "http://mrlketo.shop:8932/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 23:50:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876172": [
        {
            "ioc_value": "http://vexdico.shop:8539/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 23:50:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876169": [
        {
            "ioc_value": "47.84.15.240:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 23:46:57",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876168": [
        {
            "ioc_value": "kxkdfydq.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 23:41:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876165": [
        {
            "ioc_value": "hub4.cdndock.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-14 23:29:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876163": [
        {
            "ioc_value": "http://solirpa.click:9048/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 23:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876164": [
        {
            "ioc_value": "http://vexdico.shop:8539/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 23:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876161": [
        {
            "ioc_value": "cb2kljpv.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 22:37:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876157": [
        {
            "ioc_value": "y6w0rd50fe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:06",
            "last_seen_utc": "2026-08-15 14:46:37",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876158": [
        {
            "ioc_value": "zasanumy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:06",
            "last_seen_utc": "2026-08-15 14:46:37",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876153": [
        {
            "ioc_value": "ralezilo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:05",
            "last_seen_utc": "2026-08-15 14:46:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876154": [
        {
            "ioc_value": "tujage.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:05",
            "last_seen_utc": "2026-08-15 14:46:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876155": [
        {
            "ioc_value": "venusyjy.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:05",
            "last_seen_utc": "2026-08-15 14:46:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876156": [
        {
            "ioc_value": "xjixl13205.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:05",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876146": [
        {
            "ioc_value": "hvdkt93305.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876147": [
        {
            "ioc_value": "jonellhomely.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876148": [
        {
            "ioc_value": "karosivi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876149": [
        {
            "ioc_value": "mspo7btd5u.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 14:46:35",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876150": [
        {
            "ioc_value": "nikawusi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876151": [
        {
            "ioc_value": "npwfa66768.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 14:46:35",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876152": [
        {
            "ioc_value": "o2012pz1vs.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:04",
            "last_seen_utc": "2026-08-15 20:14:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876143": [
        {
            "ioc_value": "clinical96.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:03",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876144": [
        {
            "ioc_value": "fbytz48156.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:03",
            "last_seen_utc": "2026-08-15 14:46:33",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876145": [
        {
            "ioc_value": "fibydi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:03",
            "last_seen_utc": "2026-08-15 14:46:33",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876138": [
        {
            "ioc_value": "9474amethyst.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:01",
            "last_seen_utc": "2026-08-15 14:46:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876139": [
        {
            "ioc_value": "9biu5cm2ug.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:01",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876140": [
        {
            "ioc_value": "bagydoge.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:01",
            "last_seen_utc": "2026-08-15 14:46:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876141": [
        {
            "ioc_value": "banerobi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:01",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876142": [
        {
            "ioc_value": "biguwiqa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 22:06:01",
            "last_seen_utc": "2026-08-15 20:14:17",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1876136": [
        {
            "ioc_value": "gru.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 21:55:05",
            "last_seen_utc": "2026-08-14 23:28:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876135": [
        {
            "ioc_value": "gru.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 21:55:04",
            "last_seen_utc": "2026-08-15 10:26:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876102": [
        {
            "ioc_value": "dr4klu2c.buy-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 21:41:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876101": [
        {
            "ioc_value": "xp2v23h9.goldalignn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 21:30:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876100": [
        {
            "ioc_value": "64.94.84.119:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 21:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876098": [
        {
            "ioc_value": "64.94.84.119:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876099": [
        {
            "ioc_value": "64.94.84.119:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876096": [
        {
            "ioc_value": "https://89.167.3.143",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 20:55:57",
            "last_seen_utc": "2026-08-18 07:04:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d118a9482bb8f30bb53c18c8441d5aa8b21ee823206c630238edf0f99ec568e/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876088": [
        {
            "ioc_value": "boi.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 20:10:06",
            "last_seen_utc": "2026-08-14 21:25:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876089": [
        {
            "ioc_value": "https://boi.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 20:10:06",
            "last_seen_utc": "2026-08-14 21:50:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876086": [
        {
            "ioc_value": "boi.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 20:10:05",
            "last_seen_utc": "2026-08-14 21:26:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876087": [
        {
            "ioc_value": "https://boi.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 20:10:05",
            "last_seen_utc": "2026-08-14 21:48:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1876085": [
        {
            "ioc_value": "47.250.190.129:5001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876084": [
        {
            "ioc_value": "94.143.231.61:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:46:43",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876083": [
        {
            "ioc_value": "91.92.43.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-14 19:46:41",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876082": [
        {
            "ioc_value": "78.17.213.180:1907",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-14 19:46:27",
            "last_seen_utc": "2026-09-01 02:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876081": [
        {
            "ioc_value": "64.89.161.196:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-14 19:46:22",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876080": [
        {
            "ioc_value": "64.227.74.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 19:46:21",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876079": [
        {
            "ioc_value": "46.149.68.224:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-08-14 19:46:07",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876078": [
        {
            "ioc_value": "45.157.233.139:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:45:58",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876077": [
        {
            "ioc_value": "23.175.48.7:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 19:45:36",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876076": [
        {
            "ioc_value": "212.103.26.10:55000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-14 19:44:53",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876073": [
        {
            "ioc_value": "2.59.133.115:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:44:43",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876074": [
        {
            "ioc_value": "2.59.133.115:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:44:43",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876075": [
        {
            "ioc_value": "2.59.133.115:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:44:43",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876072": [
        {
            "ioc_value": "2.27.248.16:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-14 19:44:41",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876071": [
        {
            "ioc_value": "198.199.74.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876070": [
        {
            "ioc_value": "195.177.94.41:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:44:36",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876069": [
        {
            "ioc_value": "f8i37n8m.en-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 19:44:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876067": [
        {
            "ioc_value": "185.112.147.233:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-14 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876068": [
        {
            "ioc_value": "185.112.147.233:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-14 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876066": [
        {
            "ioc_value": "178.16.52.136:3009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 19:44:10",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876065": [
        {
            "ioc_value": "176.65.139.232:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 19:44:08",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876064": [
        {
            "ioc_value": "172.236.157.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:44:01",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876063": [
        {
            "ioc_value": "147.45.61.65:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876062": [
        {
            "ioc_value": "147.124.223.225:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:43:38",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876061": [
        {
            "ioc_value": "128.90.63.117:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876059": [
        {
            "ioc_value": "108.187.7.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:43:18",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876060": [
        {
            "ioc_value": "108.187.7.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:43:18",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876058": [
        {
            "ioc_value": "104.164.46.182:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 19:43:10",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876057": [
        {
            "ioc_value": "102.117.165.168:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1876056": [
        {
            "ioc_value": "fos41h2r.app8k.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 19:40:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876050": [
        {
            "ioc_value": "http://topxgax.click:4930/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 19:27:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876051": [
        {
            "ioc_value": "http://mrlketo.shop:8932/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 19:27:53",
            "last_seen_utc": "2026-08-15 03:23:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876052": [
        {
            "ioc_value": "http://vexdico.shop:8539/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 19:27:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1876046": [
        {
            "ioc_value": "45.66.248.156:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 19:05:07",
            "last_seen_utc": "2026-09-01 02:45:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876047": [
        {
            "ioc_value": "43.143.118.200:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876048": [
        {
            "ioc_value": "43.143.118.200:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1876030": [
        {
            "ioc_value": "yarpuzedebiyatdergisi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876032": [
        {
            "ioc_value": "yourplacerobe.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876033": [
        {
            "ioc_value": "youthmob.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876035": [
        {
            "ioc_value": "yunuscabakmak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876036": [
        {
            "ioc_value": "zackmediahub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876037": [
        {
            "ioc_value": "zappos.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876039": [
        {
            "ioc_value": "zconsulting-co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876040": [
        {
            "ioc_value": "zematoo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876041": [
        {
            "ioc_value": "zenflore.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876042": [
        {
            "ioc_value": "zslubosz.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876043": [
        {
            "ioc_value": "zsztechnical.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:50",
            "last_seen_utc": "2026-08-28 10:56:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876009": [
        {
            "ioc_value": "webuycars.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876011": [
        {
            "ioc_value": "wellness-management.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876012": [
        {
            "ioc_value": "wheepro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876013": [
        {
            "ioc_value": "widoostudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876015": [
        {
            "ioc_value": "wildlifedrones.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876018": [
        {
            "ioc_value": "wochenspiegel.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876019": [
        {
            "ioc_value": "woninghureninparamaribo.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876020": [
        {
            "ioc_value": "wood.al",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876021": [
        {
            "ioc_value": "workstudyluxembourg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876023": [
        {
            "ioc_value": "worldbreeding.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876024": [
        {
            "ioc_value": "wwww.travelphoto.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876025": [
        {
            "ioc_value": "wyraj.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:55:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876027": [
        {
            "ioc_value": "xmen.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:56:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876029": [
        {
            "ioc_value": "xn--trkiyemiyommerkezi-m6b.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:49",
            "last_seen_utc": "2026-08-28 10:56:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875989": [
        {
            "ioc_value": "violinflowcourse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875990": [
        {
            "ioc_value": "virtual-traction.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875992": [
        {
            "ioc_value": "vishkala.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875993": [
        {
            "ioc_value": "vitamineshop.co.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875994": [
        {
            "ioc_value": "vivagustavo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875996": [
        {
            "ioc_value": "vkcandles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875997": [
        {
            "ioc_value": "voltochvatten.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875998": [
        {
            "ioc_value": "von-hacht.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875999": [
        {
            "ioc_value": "vortex.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876000": [
        {
            "ioc_value": "voteangelareese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876002": [
        {
            "ioc_value": "vuorenvalloitus.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876003": [
        {
            "ioc_value": "vythirigreens.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876004": [
        {
            "ioc_value": "wassalongroningen.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876005": [
        {
            "ioc_value": "webcreative.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876007": [
        {
            "ioc_value": "website4electricians.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1876008": [
        {
            "ioc_value": "webtaj.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:48",
            "last_seen_utc": "2026-08-28 10:55:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875970": [
        {
            "ioc_value": "twoleafgarden.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875975": [
        {
            "ioc_value": "vantazhivka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875976": [
        {
            "ioc_value": "veldandsea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875977": [
        {
            "ioc_value": "velostar.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875982": [
        {
            "ioc_value": "vesta-objektmanagement.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875983": [
        {
            "ioc_value": "vidivinci.com.py",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875985": [
        {
            "ioc_value": "villavinea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875986": [
        {
            "ioc_value": "vinahi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:47",
            "last_seen_utc": "2026-08-28 10:55:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875946": [
        {
            "ioc_value": "thetransporter.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875948": [
        {
            "ioc_value": "thinkerstown.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875949": [
        {
            "ioc_value": "thomassillmann.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875950": [
        {
            "ioc_value": "tibetanmedicine-edu.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875953": [
        {
            "ioc_value": "tiw.center",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875954": [
        {
            "ioc_value": "tjsec.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875955": [
        {
            "ioc_value": "tobere.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875958": [
        {
            "ioc_value": "tomcip.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875960": [
        {
            "ioc_value": "transvale.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875963": [
        {
            "ioc_value": "tri-media.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875964": [
        {
            "ioc_value": "tribalsaltdealer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875965": [
        {
            "ioc_value": "trinhcongdecor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875966": [
        {
            "ioc_value": "trollmarker.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:46",
            "last_seen_utc": "2026-08-28 10:55:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875926": [
        {
            "ioc_value": "teachskillpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:54:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875927": [
        {
            "ioc_value": "tehlikeavi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:54:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875928": [
        {
            "ioc_value": "tehranhomekala.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:54:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875930": [
        {
            "ioc_value": "teoalaruona.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875931": [
        {
            "ioc_value": "teodorapetkova.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875932": [
        {
            "ioc_value": "terrassenprofi-nord.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875934": [
        {
            "ioc_value": "tezhe.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875935": [
        {
            "ioc_value": "thanhvuvp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875936": [
        {
            "ioc_value": "thebenjaminfranklinacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875937": [
        {
            "ioc_value": "thebumpushounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875940": [
        {
            "ioc_value": "thefamouscricketers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875945": [
        {
            "ioc_value": "theskillsmine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:45",
            "last_seen_utc": "2026-08-28 10:55:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875907": [
        {
            "ioc_value": "successwithsiri.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875909": [
        {
            "ioc_value": "sunbody.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875911": [
        {
            "ioc_value": "surverspace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875912": [
        {
            "ioc_value": "sw6.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875915": [
        {
            "ioc_value": "tabakhiha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875916": [
        {
            "ioc_value": "tadbirfarda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875917": [
        {
            "ioc_value": "tafaqqohmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875918": [
        {
            "ioc_value": "taherbearing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875919": [
        {
            "ioc_value": "taikakuu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875920": [
        {
            "ioc_value": "takok.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875921": [
        {
            "ioc_value": "tamkainds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875922": [
        {
            "ioc_value": "tamtinhhotel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875924": [
        {
            "ioc_value": "tarjetonimss.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:37:44",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875902": [
        {
            "ioc_value": "stream4analytics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:53",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875906": [
        {
            "ioc_value": "successwithsean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:53",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875885": [
        {
            "ioc_value": "spboguszyce.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875887": [
        {
            "ioc_value": "sportske.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875890": [
        {
            "ioc_value": "srieslab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875891": [
        {
            "ioc_value": "ssp2.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875892": [
        {
            "ioc_value": "stayanchoredministries.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875893": [
        {
            "ioc_value": "steelcatwalk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875895": [
        {
            "ioc_value": "stefandevries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875896": [
        {
            "ioc_value": "stefanoghesini.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875898": [
        {
            "ioc_value": "stolberger-geschichte.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875899": [
        {
            "ioc_value": "stopcovidvaccinesnow.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875900": [
        {
            "ioc_value": "stoplowbackpain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:52",
            "last_seen_utc": "2026-08-28 10:54:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875865": [
        {
            "ioc_value": "skandtconstructions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875867": [
        {
            "ioc_value": "sketchindia.co.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875868": [
        {
            "ioc_value": "skyart.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875869": [
        {
            "ioc_value": "skydivegoa.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875872": [
        {
            "ioc_value": "slnovin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875875": [
        {
            "ioc_value": "smt-group.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875877": [
        {
            "ioc_value": "socialpolicy.consulting",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875878": [
        {
            "ioc_value": "soeurs-de-lalliance.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875879": [
        {
            "ioc_value": "sonnanopn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875880": [
        {
            "ioc_value": "soolplaylist.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:51",
            "last_seen_utc": "2026-08-28 10:54:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875849": [
        {
            "ioc_value": "sewa-mobil-di-bali.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875850": [
        {
            "ioc_value": "sewinggal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875852": [
        {
            "ioc_value": "shintani.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875853": [
        {
            "ioc_value": "showdelaciudad.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875856": [
        {
            "ioc_value": "sianengenharia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875857": [
        {
            "ioc_value": "simbiose-agro.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875858": [
        {
            "ioc_value": "sindunipol.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875863": [
        {
            "ioc_value": "sixsteps.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875864": [
        {
            "ioc_value": "skan-tre.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:50",
            "last_seen_utc": "2026-08-28 10:54:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875828": [
        {
            "ioc_value": "sangiuseppedalmine.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875829": [
        {
            "ioc_value": "sanisecurities.com.np",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875831": [
        {
            "ioc_value": "sceniccycletours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875832": [
        {
            "ioc_value": "schneeschaufel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875834": [
        {
            "ioc_value": "schorisch-stahlwasserbau.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875835": [
        {
            "ioc_value": "schulkids-in-bewegung.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875836": [
        {
            "ioc_value": "scikingpc.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875837": [
        {
            "ioc_value": "scinovasearch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875838": [
        {
            "ioc_value": "scottash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875839": [
        {
            "ioc_value": "scrapingproxies.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875840": [
        {
            "ioc_value": "securion.agency",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875842": [
        {
            "ioc_value": "sekan.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875843": [
        {
            "ioc_value": "sendwegez.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875844": [
        {
            "ioc_value": "senionex.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875845": [
        {
            "ioc_value": "serptuga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875846": [
        {
            "ioc_value": "serradematos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:49",
            "last_seen_utc": "2026-08-28 10:54:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875809": [
        {
            "ioc_value": "royalcanaannairobi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:53:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875810": [
        {
            "ioc_value": "royallashandnails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:53:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875811": [
        {
            "ioc_value": "rtconsult.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:53:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875812": [
        {
            "ioc_value": "rugbygirlacademie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:53:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875814": [
        {
            "ioc_value": "rzhomestore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875815": [
        {
            "ioc_value": "sabiancreations.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875816": [
        {
            "ioc_value": "sacreative.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875818": [
        {
            "ioc_value": "safeguardproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875819": [
        {
            "ioc_value": "sagarmcclintock.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875820": [
        {
            "ioc_value": "sailrubyone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875824": [
        {
            "ioc_value": "samgp.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875825": [
        {
            "ioc_value": "samino.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875826": [
        {
            "ioc_value": "samonac.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875827": [
        {
            "ioc_value": "sanatarazalvand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:48",
            "last_seen_utc": "2026-08-28 10:54:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875790": [
        {
            "ioc_value": "restomotive.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875791": [
        {
            "ioc_value": "retireliketom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875792": [
        {
            "ioc_value": "rhm.org.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875793": [
        {
            "ioc_value": "rhoneassetservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875794": [
        {
            "ioc_value": "riagalan.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875795": [
        {
            "ioc_value": "riffvital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875796": [
        {
            "ioc_value": "rig94.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875798": [
        {
            "ioc_value": "ringkz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875803": [
        {
            "ioc_value": "rodneymoseng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875804": [
        {
            "ioc_value": "rojelan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875805": [
        {
            "ioc_value": "rollingstonebritish.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875806": [
        {
            "ioc_value": "rollitovegano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:47",
            "last_seen_utc": "2026-08-28 10:53:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875770": [
        {
            "ioc_value": "rabla.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875771": [
        {
            "ioc_value": "racingtolua.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875772": [
        {
            "ioc_value": "radiopueblito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875776": [
        {
            "ioc_value": "raitti181.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875778": [
        {
            "ioc_value": "ramonpuig.cat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875780": [
        {
            "ioc_value": "rdbois.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875781": [
        {
            "ioc_value": "re-public.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875787": [
        {
            "ioc_value": "rentmyhouse.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875788": [
        {
            "ioc_value": "reservfilter.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:46",
            "last_seen_utc": "2026-08-28 10:53:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875751": [
        {
            "ioc_value": "protilt.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875752": [
        {
            "ioc_value": "proviel.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875755": [
        {
            "ioc_value": "public360digital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875758": [
        {
            "ioc_value": "puremagicbaby.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875759": [
        {
            "ioc_value": "puretime.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875763": [
        {
            "ioc_value": "qazsport.news",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875765": [
        {
            "ioc_value": "quantumshield.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875767": [
        {
            "ioc_value": "quickbar.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875768": [
        {
            "ioc_value": "quironasesores.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:45",
            "last_seen_utc": "2026-08-28 10:53:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875731": [
        {
            "ioc_value": "playathemisfair.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875732": [
        {
            "ioc_value": "plentyshopcart.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875733": [
        {
            "ioc_value": "plugaki.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875734": [
        {
            "ioc_value": "pmtools.tools",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875736": [
        {
            "ioc_value": "polidecktech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875738": [
        {
            "ioc_value": "pondertee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875739": [
        {
            "ioc_value": "popolifratelli.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875740": [
        {
            "ioc_value": "postler-wohnanlagen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875741": [
        {
            "ioc_value": "pradosdepaz.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875742": [
        {
            "ioc_value": "prefabbricatilucchese.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875743": [
        {
            "ioc_value": "preiscapital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875746": [
        {
            "ioc_value": "prl.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875748": [
        {
            "ioc_value": "proarea.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:44",
            "last_seen_utc": "2026-08-28 10:53:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875712": [
        {
            "ioc_value": "parhamsteel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875713": [
        {
            "ioc_value": "parkhaus-goeppingen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875714": [
        {
            "ioc_value": "parkmanagementconsultants.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875716": [
        {
            "ioc_value": "paycars.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875717": [
        {
            "ioc_value": "peaberry.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875718": [
        {
            "ioc_value": "pearlskitchen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875719": [
        {
            "ioc_value": "pegasusmedia.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875720": [
        {
            "ioc_value": "penerbit-tanggailmu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875722": [
        {
            "ioc_value": "perceptionsbydavid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875723": [
        {
            "ioc_value": "perfisaeletro.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875724": [
        {
            "ioc_value": "perleronsale.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875725": [
        {
            "ioc_value": "pfeil-steuerberatung.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875726": [
        {
            "ioc_value": "photocherix.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875727": [
        {
            "ioc_value": "pilzschule-schwaebischer-wald.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875729": [
        {
            "ioc_value": "place-for-you.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875730": [
        {
            "ioc_value": "platformgapfiller.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:43",
            "last_seen_utc": "2026-08-28 10:53:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875711": [
        {
            "ioc_value": "paretsdent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:36:42",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875698": [
        {
            "ioc_value": "ole.as",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875701": [
        {
            "ioc_value": "oostenbrinkverhuur.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875702": [
        {
            "ioc_value": "optimizagrow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875703": [
        {
            "ioc_value": "oracygroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875704": [
        {
            "ioc_value": "orbitalsns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875707": [
        {
            "ioc_value": "osteopathie-and-more.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875708": [
        {
            "ioc_value": "pakphoom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:54",
            "last_seen_utc": "2026-08-28 10:53:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875678": [
        {
            "ioc_value": "nieuwontwerp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875679": [
        {
            "ioc_value": "nightlab365.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875681": [
        {
            "ioc_value": "nirviksangbad.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875684": [
        {
            "ioc_value": "noajinaquatics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875686": [
        {
            "ioc_value": "noottoestand.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875687": [
        {
            "ioc_value": "northeastohiolocal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875688": [
        {
            "ioc_value": "noticiasarequipa.pe",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875690": [
        {
            "ioc_value": "novaambienta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875692": [
        {
            "ioc_value": "novarapeptide.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:52:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875693": [
        {
            "ioc_value": "nutmeggerpr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:53:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875695": [
        {
            "ioc_value": "obrazkovyostrov.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875696": [
        {
            "ioc_value": "okanaganbowlingclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:53",
            "last_seen_utc": "2026-08-28 10:53:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875660": [
        {
            "ioc_value": "mycontractpilot.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875661": [
        {
            "ioc_value": "mycopycatrecipes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875662": [
        {
            "ioc_value": "mycorrhizal.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875664": [
        {
            "ioc_value": "nabburger-streuobst.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875665": [
        {
            "ioc_value": "nadibandar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875666": [
        {
            "ioc_value": "namgiaviet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875669": [
        {
            "ioc_value": "naudyweb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875671": [
        {
            "ioc_value": "nemchavikfoods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875672": [
        {
            "ioc_value": "netw.earth",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875674": [
        {
            "ioc_value": "nextgenclimatecontrol.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:52",
            "last_seen_utc": "2026-08-28 10:52:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875642": [
        {
            "ioc_value": "momentescape.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875646": [
        {
            "ioc_value": "moragturner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875650": [
        {
            "ioc_value": "mss-consult.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875652": [
        {
            "ioc_value": "mucha-design.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875653": [
        {
            "ioc_value": "muchalodges.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875655": [
        {
            "ioc_value": "munchkin-and-tiny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875658": [
        {
            "ioc_value": "muvipa.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875659": [
        {
            "ioc_value": "mybonusmultimedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:51",
            "last_seen_utc": "2026-08-28 10:52:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875621": [
        {
            "ioc_value": "miakz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875623": [
        {
            "ioc_value": "midasbytes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875624": [
        {
            "ioc_value": "migreencardya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875625": [
        {
            "ioc_value": "mihp.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875626": [
        {
            "ioc_value": "mijnonesie.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875627": [
        {
            "ioc_value": "mikeslegacy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875628": [
        {
            "ioc_value": "mincoal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875629": [
        {
            "ioc_value": "mindeltal-alpakas.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875630": [
        {
            "ioc_value": "minthospitality.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875631": [
        {
            "ioc_value": "miriamboljesikova.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875634": [
        {
            "ioc_value": "mivxi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875635": [
        {
            "ioc_value": "mizuasobiyado.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875636": [
        {
            "ioc_value": "mjfconstruction.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875639": [
        {
            "ioc_value": "mocdlarozwoju.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:50",
            "last_seen_utc": "2026-08-28 10:52:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875604": [
        {
            "ioc_value": "masaveuinmobiliaria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875606": [
        {
            "ioc_value": "maxbardin.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875607": [
        {
            "ioc_value": "mc2.network",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875608": [
        {
            "ioc_value": "mcnivenstrategies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875610": [
        {
            "ioc_value": "mediakitcliniclandshscompany.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875611": [
        {
            "ioc_value": "medicalpiercing.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875613": [
        {
            "ioc_value": "megamedacademics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875614": [
        {
            "ioc_value": "mehrariatech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875615": [
        {
            "ioc_value": "mehregansch.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875616": [
        {
            "ioc_value": "melegatticaffe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875618": [
        {
            "ioc_value": "merinobrewery.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:49",
            "last_seen_utc": "2026-08-28 10:52:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875583": [
        {
            "ioc_value": "macedonai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875584": [
        {
            "ioc_value": "madmin.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875585": [
        {
            "ioc_value": "magdelandalos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875587": [
        {
            "ioc_value": "magnetotherapie-cpsfrance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875589": [
        {
            "ioc_value": "maintainpress.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875590": [
        {
            "ioc_value": "majestichospitality.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875591": [
        {
            "ioc_value": "makeitcountboone.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875592": [
        {
            "ioc_value": "malibutimesmag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875594": [
        {
            "ioc_value": "mandallarealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875595": [
        {
            "ioc_value": "manmarine.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875596": [
        {
            "ioc_value": "manstuffministry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875597": [
        {
            "ioc_value": "marae.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875598": [
        {
            "ioc_value": "marashaberinmerkezi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875602": [
        {
            "ioc_value": "martinanohl.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:48",
            "last_seen_utc": "2026-08-28 10:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875562": [
        {
            "ioc_value": "lishanghong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875565": [
        {
            "ioc_value": "logantalent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875566": [
        {
            "ioc_value": "logimastery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875569": [
        {
            "ioc_value": "losouthstar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875571": [
        {
            "ioc_value": "lrmobi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875572": [
        {
            "ioc_value": "lscache-proisp.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875573": [
        {
            "ioc_value": "luciaberg.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875574": [
        {
            "ioc_value": "lucindayoga.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875578": [
        {
            "ioc_value": "lutellahair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:47",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875542": [
        {
            "ioc_value": "kulturstammtisch-zossen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875543": [
        {
            "ioc_value": "kusahaber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875544": [
        {
            "ioc_value": "kwaliteitstuin.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875545": [
        {
            "ioc_value": "kyle.sponable.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875547": [
        {
            "ioc_value": "lamthi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875548": [
        {
            "ioc_value": "langkammer.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875550": [
        {
            "ioc_value": "lbmoderndesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875551": [
        {
            "ioc_value": "leonardomarras.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875552": [
        {
            "ioc_value": "leoplastlh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875554": [
        {
            "ioc_value": "libido.health",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:51:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875555": [
        {
            "ioc_value": "lichtherzheilung.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:52:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875556": [
        {
            "ioc_value": "ligaphysio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:52:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875557": [
        {
            "ioc_value": "lilchick.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:52:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875558": [
        {
            "ioc_value": "limpiezascibeles.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:52:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875559": [
        {
            "ioc_value": "linhhuongrubber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875560": [
        {
            "ioc_value": "linkgate.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:46",
            "last_seen_utc": "2026-08-28 10:52:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875523": [
        {
            "ioc_value": "kevinokyerefoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875525": [
        {
            "ioc_value": "kfcmenu.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875527": [
        {
            "ioc_value": "kienthucanchay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875528": [
        {
            "ioc_value": "kientrucvanoithatdep.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875530": [
        {
            "ioc_value": "kimewilson.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875531": [
        {
            "ioc_value": "kingrenphoto.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875533": [
        {
            "ioc_value": "klauswangorsch.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875534": [
        {
            "ioc_value": "klosterskogen.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875536": [
        {
            "ioc_value": "kontrast.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875537": [
        {
            "ioc_value": "koreanair-online.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875538": [
        {
            "ioc_value": "kreditgate.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875539": [
        {
            "ioc_value": "kristineelizabeth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875541": [
        {
            "ioc_value": "kubikhod.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:45",
            "last_seen_utc": "2026-08-28 10:51:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875510": [
        {
            "ioc_value": "jordibranas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875511": [
        {
            "ioc_value": "kaffeporten.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875512": [
        {
            "ioc_value": "kairosatcrain.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875513": [
        {
            "ioc_value": "karatasmuhendislik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875516": [
        {
            "ioc_value": "kawaldomain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875517": [
        {
            "ioc_value": "kaynakegitimi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875518": [
        {
            "ioc_value": "keb-goeppingen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875519": [
        {
            "ioc_value": "kellenuniformes.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875521": [
        {
            "ioc_value": "kemptonpt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875522": [
        {
            "ioc_value": "keurmerkleegstandbeheer.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:35:44",
            "last_seen_utc": "2026-08-28 10:51:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875509": [
        {
            "ioc_value": "https://nu7.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 18:35:05",
            "last_seen_utc": "2026-08-14 19:46:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875508": [
        {
            "ioc_value": "nu7.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 18:35:04",
            "last_seen_utc": "2026-08-14 19:25:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875503": [
        {
            "ioc_value": "jfktrade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:47",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875505": [
        {
            "ioc_value": "joansbiz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:47",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875506": [
        {
            "ioc_value": "johntyler.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:47",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875507": [
        {
            "ioc_value": "jonssonscykelaffar.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:47",
            "last_seen_utc": "2026-08-28 10:51:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875484": [
        {
            "ioc_value": "inovie-fertilite.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875485": [
        {
            "ioc_value": "inquietudessur.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875487": [
        {
            "ioc_value": "intelligentsugar.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875488": [
        {
            "ioc_value": "interconsult.eu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875489": [
        {
            "ioc_value": "intraix.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875490": [
        {
            "ioc_value": "introvertidamente.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875494": [
        {
            "ioc_value": "ironapple.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875496": [
        {
            "ioc_value": "ius.co.rs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875497": [
        {
            "ioc_value": "jakubstaszkiewicz.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875498": [
        {
            "ioc_value": "jalome.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875499": [
        {
            "ioc_value": "jampaka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875500": [
        {
            "ioc_value": "jawijwillentrouwen.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:46",
            "last_seen_utc": "2026-08-28 10:51:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875461": [
        {
            "ioc_value": "homahrtrans.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875463": [
        {
            "ioc_value": "hotelvibecourse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875464": [
        {
            "ioc_value": "hotrokyso.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875465": [
        {
            "ioc_value": "hovisszanyero-telepites.hu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875467": [
        {
            "ioc_value": "huqagency.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875471": [
        {
            "ioc_value": "icjalliance.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875472": [
        {
            "ioc_value": "idealeducationsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875474": [
        {
            "ioc_value": "ident-it.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875475": [
        {
            "ioc_value": "idevicedoctorz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875477": [
        {
            "ioc_value": "ilikemoneynow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875478": [
        {
            "ioc_value": "imamaction.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875480": [
        {
            "ioc_value": "inaba-ciao.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875482": [
        {
            "ioc_value": "infatec.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:45",
            "last_seen_utc": "2026-08-28 10:51:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875439": [
        {
            "ioc_value": "hco.rocks",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875440": [
        {
            "ioc_value": "hebelschule-laufenburg.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875444": [
        {
            "ioc_value": "heladeriavialattea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875445": [
        {
            "ioc_value": "henima.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875447": [
        {
            "ioc_value": "heramakine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875448": [
        {
            "ioc_value": "herbalspainc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875449": [
        {
            "ioc_value": "hiddentrades.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875450": [
        {
            "ioc_value": "hilactosa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875451": [
        {
            "ioc_value": "hillspring.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875452": [
        {
            "ioc_value": "himaxploretravel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875453": [
        {
            "ioc_value": "historischeverenigingtenboer.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875454": [
        {
            "ioc_value": "hlaupahatid.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875455": [
        {
            "ioc_value": "hochzeitsfotografie-rheinhessen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:50:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875456": [
        {
            "ioc_value": "hole.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:51:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875457": [
        {
            "ioc_value": "hollandbrandinggroup.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:51:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875458": [
        {
            "ioc_value": "hollycrain.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:51:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875459": [
        {
            "ioc_value": "holstonia.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:44",
            "last_seen_utc": "2026-08-28 10:51:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875415": [
        {
            "ioc_value": "global-hr.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875416": [
        {
            "ioc_value": "globalpadelpartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875418": [
        {
            "ioc_value": "golfschmiede.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875419": [
        {
            "ioc_value": "gopleac.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875420": [
        {
            "ioc_value": "gorjico.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875421": [
        {
            "ioc_value": "gotlandska.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875422": [
        {
            "ioc_value": "gr-ulm.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875425": [
        {
            "ioc_value": "groclear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875426": [
        {
            "ioc_value": "groupazueropanama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875428": [
        {
            "ioc_value": "gtharrisandthegunslingers.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875429": [
        {
            "ioc_value": "guyintheblazer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875430": [
        {
            "ioc_value": "gynmater.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875432": [
        {
            "ioc_value": "hamconbuilders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875433": [
        {
            "ioc_value": "hammer.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875434": [
        {
            "ioc_value": "hanningfieldparklife.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875435": [
        {
            "ioc_value": "happy-gut.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875436": [
        {
            "ioc_value": "hausmeister-cvijetic.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875437": [
        {
            "ioc_value": "hawkcell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:43",
            "last_seen_utc": "2026-08-28 10:50:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875394": [
        {
            "ioc_value": "freebirthfamily.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875395": [
        {
            "ioc_value": "freie-waehler-eberbach.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875396": [
        {
            "ioc_value": "funplay-ns.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875397": [
        {
            "ioc_value": "gaarchs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875398": [
        {
            "ioc_value": "gabric.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875399": [
        {
            "ioc_value": "gaianow.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875401": [
        {
            "ioc_value": "gds-uae.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875403": [
        {
            "ioc_value": "georgiev-nikolova.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875405": [
        {
            "ioc_value": "ghrcca.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875406": [
        {
            "ioc_value": "giathanhloc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875407": [
        {
            "ioc_value": "giatsaycongnghieplg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875410": [
        {
            "ioc_value": "gioco-libero.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875412": [
        {
            "ioc_value": "glaizeapples.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875413": [
        {
            "ioc_value": "glelogistics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875414": [
        {
            "ioc_value": "glianimalireligiosi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:42",
            "last_seen_utc": "2026-08-28 10:50:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875368": [
        {
            "ioc_value": "espacoviladaserra.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875369": [
        {
            "ioc_value": "estelleducommun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875371": [
        {
            "ioc_value": "eugene-eugene.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875373": [
        {
            "ioc_value": "exceleratefs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875376": [
        {
            "ioc_value": "faceoffhadi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875377": [
        {
            "ioc_value": "factoryofbag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875378": [
        {
            "ioc_value": "falknart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875379": [
        {
            "ioc_value": "farotreinamentos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875380": [
        {
            "ioc_value": "fasthost.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875381": [
        {
            "ioc_value": "faucondigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875382": [
        {
            "ioc_value": "favor.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875383": [
        {
            "ioc_value": "fdtextil.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875386": [
        {
            "ioc_value": "fijan.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875389": [
        {
            "ioc_value": "flecker-bienen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875390": [
        {
            "ioc_value": "fleetdispatchservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:41",
            "last_seen_utc": "2026-08-28 10:50:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875345": [
        {
            "ioc_value": "edenvert3d-vendee.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875346": [
        {
            "ioc_value": "edgewoodaesthetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875347": [
        {
            "ioc_value": "eduard-henninger-shop.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875348": [
        {
            "ioc_value": "eevdeneve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875350": [
        {
            "ioc_value": "elbistanhabermerkezi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875354": [
        {
            "ioc_value": "elitecareup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875355": [
        {
            "ioc_value": "elitegroupswitzerland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875356": [
        {
            "ioc_value": "eljan-acblc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875357": [
        {
            "ioc_value": "elyttravel.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875358": [
        {
            "ioc_value": "embucollege.ac.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875361": [
        {
            "ioc_value": "ensuprecio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875362": [
        {
            "ioc_value": "enterstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875363": [
        {
            "ioc_value": "entrepreneursinaction.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875364": [
        {
            "ioc_value": "envoyprime.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875365": [
        {
            "ioc_value": "ergosolutions.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875366": [
        {
            "ioc_value": "erlebnisbaenke.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:40",
            "last_seen_utc": "2026-08-28 10:48:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875325": [
        {
            "ioc_value": "domainesdulys.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875327": [
        {
            "ioc_value": "dominicains-strasbourg.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875330": [
        {
            "ioc_value": "drdanaihairtrans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875331": [
        {
            "ioc_value": "dreamforceinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875332": [
        {
            "ioc_value": "drewnopiotrkow.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875333": [
        {
            "ioc_value": "drouot-expert-timbres.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875334": [
        {
            "ioc_value": "dubaiadaptor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875335": [
        {
            "ioc_value": "dubaidesertpoint.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875336": [
        {
            "ioc_value": "dugs.si",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875337": [
        {
            "ioc_value": "duo-cone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875338": [
        {
            "ioc_value": "duongconkhonglo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875342": [
        {
            "ioc_value": "earthaccordingtome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:39",
            "last_seen_utc": "2026-08-28 10:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875308": [
        {
            "ioc_value": "dandolf.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875310": [
        {
            "ioc_value": "dayspringtech.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875311": [
        {
            "ioc_value": "dcyber.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875312": [
        {
            "ioc_value": "densrl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875315": [
        {
            "ioc_value": "dev.mfood.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875316": [
        {
            "ioc_value": "diamondit.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875317": [
        {
            "ioc_value": "diariodominicano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875318": [
        {
            "ioc_value": "dicungthinh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875319": [
        {
            "ioc_value": "die-danz.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875320": [
        {
            "ioc_value": "dieto-strefa.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875322": [
        {
            "ioc_value": "djmaccountants.ie",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875323": [
        {
            "ioc_value": "dl8ydp.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:34:38",
            "last_seen_utc": "2026-08-28 10:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875286": [
        {
            "ioc_value": "coastlinemirissa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875287": [
        {
            "ioc_value": "colourfulminds.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875288": [
        {
            "ioc_value": "comuneonline.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875289": [
        {
            "ioc_value": "conachen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875293": [
        {
            "ioc_value": "conwick.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875294": [
        {
            "ioc_value": "coopgpaz.com.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875296": [
        {
            "ioc_value": "correctdesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875298": [
        {
            "ioc_value": "crechesdeschaerbeek.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875299": [
        {
            "ioc_value": "crookedhookrv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875300": [
        {
            "ioc_value": "cryptotraceback.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875301": [
        {
            "ioc_value": "cswenergy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875302": [
        {
            "ioc_value": "d-room.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875304": [
        {
            "ioc_value": "daily-ease.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875305": [
        {
            "ioc_value": "dailyvinhome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875306": [
        {
            "ioc_value": "dallasarthritis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:45",
            "last_seen_utc": "2026-08-28 10:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875263": [
        {
            "ioc_value": "cartoon-violence.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875264": [
        {
            "ioc_value": "casaamida.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875265": [
        {
            "ioc_value": "casadofusca.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875266": [
        {
            "ioc_value": "casavacanzeipini.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875267": [
        {
            "ioc_value": "catalans-beach-volley.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875268": [
        {
            "ioc_value": "catcraz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875269": [
        {
            "ioc_value": "cbaccountant.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875271": [
        {
            "ioc_value": "ccrat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875272": [
        {
            "ioc_value": "cerrajeriagaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875273": [
        {
            "ioc_value": "cesaraugusto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875274": [
        {
            "ioc_value": "cfdthub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875278": [
        {
            "ioc_value": "chiropractorbricknj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875279": [
        {
            "ioc_value": "chocolatdesvillages.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875280": [
        {
            "ioc_value": "christ-coaching.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875281": [
        {
            "ioc_value": "christophwuerfel.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875282": [
        {
            "ioc_value": "clinebell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875285": [
        {
            "ioc_value": "cluemd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:44",
            "last_seen_utc": "2026-08-28 10:48:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875238": [
        {
            "ioc_value": "bryemusic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875239": [
        {
            "ioc_value": "bsnhvn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875240": [
        {
            "ioc_value": "btaespana.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875242": [
        {
            "ioc_value": "btvindo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875243": [
        {
            "ioc_value": "buergerstiftung-offenburg.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875244": [
        {
            "ioc_value": "bunedo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875245": [
        {
            "ioc_value": "burger.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875246": [
        {
            "ioc_value": "burgosluxmundi.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875247": [
        {
            "ioc_value": "bushmansteelbuildingsales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875248": [
        {
            "ioc_value": "caeciliabrueggen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875249": [
        {
            "ioc_value": "cafedomek.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875250": [
        {
            "ioc_value": "camdohoanggia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875251": [
        {
            "ioc_value": "campalanscape.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875253": [
        {
            "ioc_value": "canvasclubkids.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875254": [
        {
            "ioc_value": "capcambio.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875255": [
        {
            "ioc_value": "capitalmarketforum.swiss",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875256": [
        {
            "ioc_value": "capriana.do",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875257": [
        {
            "ioc_value": "carbacan.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875258": [
        {
            "ioc_value": "carlcium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875259": [
        {
            "ioc_value": "carshowbio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875260": [
        {
            "ioc_value": "carshowgo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875261": [
        {
            "ioc_value": "carshowgo.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875262": [
        {
            "ioc_value": "carshownj.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:43",
            "last_seen_utc": "2026-08-28 10:47:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875214": [
        {
            "ioc_value": "beself-wear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875215": [
        {
            "ioc_value": "bestadultcamsites.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875216": [
        {
            "ioc_value": "bet888win.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875221": [
        {
            "ioc_value": "binarus.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875222": [
        {
            "ioc_value": "biomecaniquepodcast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875224": [
        {
            "ioc_value": "biuroaudyt.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875225": [
        {
            "ioc_value": "bkkrasomb.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875226": [
        {
            "ioc_value": "blissgrades.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875227": [
        {
            "ioc_value": "blogkollektiv.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875228": [
        {
            "ioc_value": "blue-hornet.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875232": [
        {
            "ioc_value": "boss-limited.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875234": [
        {
            "ioc_value": "bretagneromantique.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:42",
            "last_seen_utc": "2026-08-28 10:47:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875191": [
        {
            "ioc_value": "auftragskiller.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875192": [
        {
            "ioc_value": "aurapostbiotic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875193": [
        {
            "ioc_value": "auroraintlfoods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875196": [
        {
            "ioc_value": "avosnerja.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875197": [
        {
            "ioc_value": "awakenyourtransformation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875198": [
        {
            "ioc_value": "aymenturki.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875202": [
        {
            "ioc_value": "batishdrugs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875203": [
        {
            "ioc_value": "bautoscluster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875204": [
        {
            "ioc_value": "beatvoiceart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875208": [
        {
            "ioc_value": "bellwoodnursingcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875209": [
        {
            "ioc_value": "bellz-airtech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875210": [
        {
            "ioc_value": "benroxholdings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875213": [
        {
            "ioc_value": "beschriftung-geretsried.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:41",
            "last_seen_utc": "2026-08-28 10:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875168": [
        {
            "ioc_value": "ankeklein.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875169": [
        {
            "ioc_value": "annapedagogiaclinica.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875172": [
        {
            "ioc_value": "aquamarinemoonth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875173": [
        {
            "ioc_value": "aquerita.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875175": [
        {
            "ioc_value": "arghavanmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875176": [
        {
            "ioc_value": "arkije.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875177": [
        {
            "ioc_value": "arnold.al",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875178": [
        {
            "ioc_value": "arquitecturayedra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875179": [
        {
            "ioc_value": "arsalanelectric.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875180": [
        {
            "ioc_value": "asdieta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875183": [
        {
            "ioc_value": "aslim.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875184": [
        {
            "ioc_value": "associationenfantsparents.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875185": [
        {
            "ioc_value": "astarbarbers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875186": [
        {
            "ioc_value": "atelierallione.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875187": [
        {
            "ioc_value": "atelierdesmuseaux.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875190": [
        {
            "ioc_value": "athenamark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:40",
            "last_seen_utc": "2026-08-28 10:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875145": [
        {
            "ioc_value": "albertoscarpinato.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875149": [
        {
            "ioc_value": "aloc.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875150": [
        {
            "ioc_value": "alpenkaffee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875151": [
        {
            "ioc_value": "altenrather-sandhasen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875152": [
        {
            "ioc_value": "am-advisoring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875153": [
        {
            "ioc_value": "amandamillernutrition.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875154": [
        {
            "ioc_value": "amane.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875155": [
        {
            "ioc_value": "ambitionx.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875156": [
        {
            "ioc_value": "amgx.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875160": [
        {
            "ioc_value": "anandabhutan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875162": [
        {
            "ioc_value": "anatravel.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875163": [
        {
            "ioc_value": "andrea-gaessler.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875164": [
        {
            "ioc_value": "andrewplanck.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875165": [
        {
            "ioc_value": "angelprojects.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875166": [
        {
            "ioc_value": "anhquantrans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875167": [
        {
            "ioc_value": "animecristal.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:39",
            "last_seen_utc": "2026-08-28 10:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875122": [
        {
            "ioc_value": "aarthikportal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875123": [
        {
            "ioc_value": "abaxys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875124": [
        {
            "ioc_value": "abledent.care",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875127": [
        {
            "ioc_value": "acarrental.is",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875128": [
        {
            "ioc_value": "accountmobility.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-27 15:45:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875130": [
        {
            "ioc_value": "acquasepinia.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875131": [
        {
            "ioc_value": "acu-shield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875132": [
        {
            "ioc_value": "addiage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875133": [
        {
            "ioc_value": "ads-hk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875134": [
        {
            "ioc_value": "advokatfirmanvictor.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875138": [
        {
            "ioc_value": "agathof.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875139": [
        {
            "ioc_value": "agmedium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875140": [
        {
            "ioc_value": "ahanentekhab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875143": [
        {
            "ioc_value": "airproheating.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875144": [
        {
            "ioc_value": "alaricbozza.design",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:38",
            "last_seen_utc": "2026-08-28 10:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875115": [
        {
            "ioc_value": "13stars.media",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:37",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875117": [
        {
            "ioc_value": "4sh.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:37",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875118": [
        {
            "ioc_value": "9030psv.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:37",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875120": [
        {
            "ioc_value": "aagflightacademy.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:37",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875121": [
        {
            "ioc_value": "aarthikaswatanthra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 18:33:37",
            "last_seen_utc": "2026-08-28 10:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1875114": [
        {
            "ioc_value": "https://nu7.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 18:30:05",
            "last_seen_utc": "2026-08-14 19:44:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875113": [
        {
            "ioc_value": "nu7.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 18:30:04",
            "last_seen_utc": "2026-08-14 19:25:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875101": [
        {
            "ioc_value": "111.170.148.132:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 18:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875095": [
        {
            "ioc_value": "o0hs8g3u.web-sighttfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 17:40:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875094": [
        {
            "ioc_value": "7xonfe62.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 17:36:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875093": [
        {
            "ioc_value": "https://vuaketdinh.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 17:30:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vuaketdinh.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1875092": [
        {
            "ioc_value": "sys32.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 17:30:10",
            "last_seen_utc": "2026-08-28 10:54:28",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875091": [
        {
            "ioc_value": "qeecqeu6.go-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 17:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875090": [
        {
            "ioc_value": "104.234.168.143:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-14 16:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1875081": [
        {
            "ioc_value": "xoxuzepe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:37",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875082": [
        {
            "ioc_value": "xuvfb6h7be.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:37",
            "last_seen_utc": "2026-08-15 00:57:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875083": [
        {
            "ioc_value": "xuvonywa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:37",
            "last_seen_utc": "2026-08-15 00:57:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875084": [
        {
            "ioc_value": "zacotile.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:37",
            "last_seen_utc": "2026-08-15 00:57:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875085": [
        {
            "ioc_value": "zodysyhe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:37",
            "last_seen_utc": "2026-08-15 00:57:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875072": [
        {
            "ioc_value": "rebugere.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875073": [
        {
            "ioc_value": "rebylape.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875074": [
        {
            "ioc_value": "sajkx59243.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875075": [
        {
            "ioc_value": "smart985.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875076": [
        {
            "ioc_value": "sticky74.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875077": [
        {
            "ioc_value": "sudiha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875078": [
        {
            "ioc_value": "taziho.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875079": [
        {
            "ioc_value": "tuxebe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 14:46:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875080": [
        {
            "ioc_value": "xizidimi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:36",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875063": [
        {
            "ioc_value": "lyhyvaki.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875064": [
        {
            "ioc_value": "lyxoqo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875065": [
        {
            "ioc_value": "maroonermentrude.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875066": [
        {
            "ioc_value": "mukyzyxi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875067": [
        {
            "ioc_value": "nphpf05505.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875068": [
        {
            "ioc_value": "odi8527yw0.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-14 22:06:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875069": [
        {
            "ioc_value": "pezalafe.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875070": [
        {
            "ioc_value": "qatevuxa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875071": [
        {
            "ioc_value": "qatumo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:35",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875055": [
        {
            "ioc_value": "hugub60174.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875056": [
        {
            "ioc_value": "jilasu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875057": [
        {
            "ioc_value": "k6sgeuumoz.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875058": [
        {
            "ioc_value": "kegikica.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875059": [
        {
            "ioc_value": "kytuty.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875060": [
        {
            "ioc_value": "loranolo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875061": [
        {
            "ioc_value": "lotojalu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875062": [
        {
            "ioc_value": "lujeviki.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:34",
            "last_seen_utc": "2026-08-15 14:46:34",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875045": [
        {
            "ioc_value": "avyzs94897.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 14:46:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875046": [
        {
            "ioc_value": "confusedulla.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875047": [
        {
            "ioc_value": "cyzely.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875048": [
        {
            "ioc_value": "dykoqoli.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875049": [
        {
            "ioc_value": "fiqate.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875050": [
        {
            "ioc_value": "fu55xztbq0.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875051": [
        {
            "ioc_value": "gefyloje.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875052": [
        {
            "ioc_value": "gesysuky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875053": [
        {
            "ioc_value": "goldlucienne.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875054": [
        {
            "ioc_value": "gusfytgoqu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:33",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875039": [
        {
            "ioc_value": "2e52uth2ly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:32",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875040": [
        {
            "ioc_value": "526vx22m7w.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:32",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875041": [
        {
            "ioc_value": "52ricky.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:32",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875042": [
        {
            "ioc_value": "96qj5j9yr8.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:32",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875043": [
        {
            "ioc_value": "ardagood.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:32",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875044": [
        {
            "ioc_value": "avtuz17932.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 16:23:32",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1875035": [
        {
            "ioc_value": "111.170.148.132:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875036": [
        {
            "ioc_value": "68.64.181.23:19999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875033": [
        {
            "ioc_value": "poh.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:45:07",
            "last_seen_utc": "2026-08-14 17:25:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875034": [
        {
            "ioc_value": "https://poh.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:45:07",
            "last_seen_utc": "2026-08-14 18:10:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875032": [
        {
            "ioc_value": "poh.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:45:06",
            "last_seen_utc": "2026-08-14 18:25:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875030": [
        {
            "ioc_value": "svqta9j3.usa-us-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 15:38:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875028": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/kud-981/bunt@charred/error",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 15:25:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1875013": [
        {
            "ioc_value": "https://kee.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:22:00",
            "last_seen_utc": "2026-08-14 15:38:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "be6f50208246a51977f7066c1ea613a0,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874989": [
        {
            "ioc_value": "https://xdr.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:21:59",
            "last_seen_utc": "2026-08-14 13:41:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "be6f50208246a51977f7066c1ea613a0,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875001": [
        {
            "ioc_value": "https://tip.10001slot.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:21:58",
            "last_seen_utc": "2026-08-14 14:35:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,e9bf104a963da535b0fb5aaebe6f06e1,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875012": [
        {
            "ioc_value": "91.108.249.56:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 15:21:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875014": [
        {
            "ioc_value": "https://kee.sm188dadu.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 15:21:57",
            "last_seen_utc": "2026-08-14 15:35:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "51c45d4bde39c5d7874e05e8c68314ca,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875021": [
        {
            "ioc_value": "89.19.223.68:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 15:21:57",
            "last_seen_utc": "2026-08-22 19:10:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1875027": [
        {
            "ioc_value": "https://gonznlez.surf/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 15:21:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1875026": [
        {
            "ioc_value": "http://mrlketo.shop:8932/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 15:05:43",
            "last_seen_utc": "2026-08-14 16:10:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9fca5fad86800ea321191a1744a455d0d376d85970e9ae5781506292276f1a4a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1875025": [
        {
            "ioc_value": "111.170.148.132:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 15:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875024": [
        {
            "ioc_value": "111.170.148.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 15:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875023": [
        {
            "ioc_value": "111.170.148.132:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875022": [
        {
            "ioc_value": "62.85.24.150:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875020": [
        {
            "ioc_value": "https://wvtransportes.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 15:00:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wvtransportes.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1875019": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/kud-981/upstroke@main/unaware",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 14:56:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1875018": [
        {
            "ioc_value": "vawogtsax.phim18k.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 14:45:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875017": [
        {
            "ioc_value": "bwsrztte.en-en-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 14:44:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875015": [
        {
            "ioc_value": "kee.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 14:40:05",
            "last_seen_utc": "2026-08-14 15:25:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875016": [
        {
            "ioc_value": "kee.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 14:40:05",
            "last_seen_utc": "2026-08-14 15:25:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875011": [
        {
            "ioc_value": "210.2.169.213:29384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-14 14:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875010": [
        {
            "ioc_value": "172.111.139.163:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 14:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875009": [
        {
            "ioc_value": "118.196.95.249:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875008": [
        {
            "ioc_value": "116.198.42.177:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 14:05:06",
            "last_seen_utc": "2026-08-15 15:37:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875006": [
        {
            "ioc_value": "https://tkst.ac.th/home/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 14:00:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tkst.ac.th",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1875007": [
        {
            "ioc_value": "https://www.thefootix.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 14:00:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.thefootix.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1875005": [
        {
            "ioc_value": "https://116.202.1.107",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:57:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f3d0793c72028ec204e86a6156ed537433bd6d4dd1a020f90d7caa89b2d38e83/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1875003": [
        {
            "ioc_value": "tip.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:50:06",
            "last_seen_utc": "2026-08-14 14:25:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875004": [
        {
            "ioc_value": "https://tip.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:50:06",
            "last_seen_utc": "2026-08-14 14:25:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875002": [
        {
            "ioc_value": "tip.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:50:05",
            "last_seen_utc": "2026-08-14 14:25:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1875000": [
        {
            "ioc_value": "mnyok7h6.usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 13:39:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874999": [
        {
            "ioc_value": "166.0.192.57:6742",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 13:17:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1874998": [
        {
            "ioc_value": "2kask8yn.getbraindefender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 13:07:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874997": [
        {
            "ioc_value": "pull.valley-screen.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-14 13:05:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1874996": [
        {
            "ioc_value": "118.196.95.249:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 13:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874995": [
        {
            "ioc_value": "118.196.95.249:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874993": [
        {
            "ioc_value": "https://xdr.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:05:06",
            "last_seen_utc": "2026-08-14 13:42:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874994": [
        {
            "ioc_value": "118.196.95.249:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874991": [
        {
            "ioc_value": "xdr.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:05:05",
            "last_seen_utc": "2026-08-14 13:25:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874992": [
        {
            "ioc_value": "172.188.0.134:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-14 13:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874990": [
        {
            "ioc_value": "xdr.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 13:05:04",
            "last_seen_utc": "2026-08-14 13:25:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874988": [
        {
            "ioc_value": "stage.vibedisplay32.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-14 12:54:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1874721": [
        {
            "ioc_value": "https://rodrigeez.surf/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 12:45:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1874720": [
        {
            "ioc_value": "rodrigeez.surf",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 12:45:44",
            "last_seen_utc": "2026-08-17 07:11:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1874722": [
        {
            "ioc_value": "https://rodrigeez.surf/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 12:45:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1874984": [
        {
            "ioc_value": "188.166.11.109:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 12:45:43",
            "last_seen_utc": "2026-08-15 03:06:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874986": [
        {
            "ioc_value": "104.248.196.119:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 12:45:43",
            "last_seen_utc": "2026-08-15 03:07:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874985": [
        {
            "ioc_value": "209.38.103.27:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 12:45:42",
            "last_seen_utc": "2026-08-15 03:07:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874987": [
        {
            "ioc_value": "cuwsruwd.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:35:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874983": [
        {
            "ioc_value": "madisonjetskirentals.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874978": [
        {
            "ioc_value": "remember-autoparts.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874979": [
        {
            "ioc_value": "petsoftcrate.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874980": [
        {
            "ioc_value": "ptfesuppliers.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874981": [
        {
            "ioc_value": "cafedgrill.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874982": [
        {
            "ioc_value": "ginnastic.com.pk",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874973": [
        {
            "ioc_value": "1xyek.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874974": [
        {
            "ioc_value": "zerangbet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874975": [
        {
            "ioc_value": "yasbetkade.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874976": [
        {
            "ioc_value": "winenfejar.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874977": [
        {
            "ioc_value": "alvin.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874972": [
        {
            "ioc_value": "usa-prostawive.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 12:20:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874970": [
        {
            "ioc_value": "87ac54897c3cb1a2b15f46c5897254f2579e529e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874971": [
        {
            "ioc_value": "cdba3f620f58b3283c37ad512452a9d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874966": [
        {
            "ioc_value": "2fc0d48f26330997001a2cd70ee5ec504b7985178cee9a9ed16730502db7e42f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-14 12:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874967": [
        {
            "ioc_value": "ea79f600b22ef30ffac57a4dccecb08142b5380c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-14 12:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874968": [
        {
            "ioc_value": "3b5870ca6edb52e878ddadcaa9ade7f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-14 12:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874969": [
        {
            "ioc_value": "a86215689dcc155290c3bbf9cf9e0da4d82681ffccab1a490965805ba26d7d76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874964": [
        {
            "ioc_value": "b5248924bb215076323efa59a05a011d6199bbe1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874965": [
        {
            "ioc_value": "626e45681bd083f5f85acd0f6aefe5bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874961": [
        {
            "ioc_value": "920f619ff80cdf2532571d9a55fe7c4ec79ce02f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874962": [
        {
            "ioc_value": "476453e63cf65c3fbe54f9b2cb3cc649",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874963": [
        {
            "ioc_value": "375b42096406eed802c5470175c1b1a9f0a49933b17109cfbfb734593d1acd26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874958": [
        {
            "ioc_value": "edbc21717aa9547c84daafe4780bc848b1876d47",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874959": [
        {
            "ioc_value": "5a5171a49e704db4a7c0ac25c6713812",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874960": [
        {
            "ioc_value": "15f9f4389d34c8ffdc2ea7de5a4827e718b1d14e8a7b67b76bf8fc2486b5caff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874955": [
        {
            "ioc_value": "395cb23969206c1a5fabe746a0a891835d4c87e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874956": [
        {
            "ioc_value": "583614371adddbcaf7f6c087479c77ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874957": [
        {
            "ioc_value": "1a2f081585e05540a72ceb36178f9549ff5bc3c6505fddb6565b887aa55f54a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874952": [
        {
            "ioc_value": "61151b8e4db0fc9cc48a2c0a701955b13bbeca22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874953": [
        {
            "ioc_value": "51debef8194480827f1317a93fc93ca3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874954": [
        {
            "ioc_value": "8ab5ad6e0c8b4cc906d162eb529b417b0d10a140bf295fb963cb63e70173c795",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-14 12:10:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874949": [
        {
            "ioc_value": "63debe2bc11935cd1f2e7ff5429c640620f0d380",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:10:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874950": [
        {
            "ioc_value": "e5fe8fdb73df57602871e4cedeb3803a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:10:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874951": [
        {
            "ioc_value": "540b4dfb2bceb2f68f26d7173f07d195f3ed5a83942fefcb92ffb583c74ffc32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:10:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874948": [
        {
            "ioc_value": "191dccb04b3a98cf557a8bd994c6b8df433782653a3fa445bfa86ad5e6a5928a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:10:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874945": [
        {
            "ioc_value": "90c5ca87d0fe3fa240b01af3c85adafd9f90e841204cbb122c6a538a2dff6757",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874946": [
        {
            "ioc_value": "28b95a45c9a3b289d491f581e368280d85127565",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874947": [
        {
            "ioc_value": "790145cd39af7feeb893487af476e6dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874942": [
        {
            "ioc_value": "06fe9a22b45bfa76d0d8ae47a98525701494e47beae12cb13bca3dbf3b626315",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-14 12:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874943": [
        {
            "ioc_value": "b511b3d773d5755c0d156fa17c8cd92d55d3873f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-14 12:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874944": [
        {
            "ioc_value": "c7c613a0bd28cc5b344d21e16c0d1f58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-14 12:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874939": [
        {
            "ioc_value": "de96127b64c06e8e23cfb5d63e815272be085bd4c9406f3e89562873a595ec47",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874940": [
        {
            "ioc_value": "ad7905e1a2f0274e489f82a12e5b98b77bb7e504",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874941": [
        {
            "ioc_value": "5166de87a42870b861c2010a88c54db3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874937": [
        {
            "ioc_value": "1c9fd050813f4fe59bf46a0e18b29beefc85f34d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874938": [
        {
            "ioc_value": "107cfbddfd263ee8ea17f803460c7737",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874934": [
        {
            "ioc_value": "f87fc5eb62bd42d03bcbca42550191b4af6f9882",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874935": [
        {
            "ioc_value": "d49c8d6267f6bb798ccdde729ecb5142",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874936": [
        {
            "ioc_value": "91a5819aa766263d501d9bd87b70beb0a317faccd5352a42535ab9972274ad15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874932": [
        {
            "ioc_value": "d5249dd3223b35fa77fd8bbc8dd8ebb2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874933": [
        {
            "ioc_value": "3e1f41241199e638738b9b3c37c72b37f0a10779db1f3e9b5940c06947c4f573",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874929": [
        {
            "ioc_value": "d528a88783cf08461cfbeaea7a2026aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874930": [
        {
            "ioc_value": "62b048da14f665026de6aa2baf7955be391ce7e74b867219ef94012bd651c3ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874931": [
        {
            "ioc_value": "6987f4c6c62bdc743cad9b35f6ea97d3a3c6eb5b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874926": [
        {
            "ioc_value": "8756651fdf748d47f3f110de7cf801b6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874927": [
        {
            "ioc_value": "fbe6f3d7ce5c34cfc80f797ab75e18ed523d49aeeab515ed070bb7edfa64f8e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874928": [
        {
            "ioc_value": "4b4dbfe167080923481a4160c72e9cb1c42f0730",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874923": [
        {
            "ioc_value": "afe0f2b98650c554bcc1f7a2934898c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874924": [
        {
            "ioc_value": "ba773820fbd0d8c2c31e624823fbbae6c95afca73042a9c01f37281f249c48ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874925": [
        {
            "ioc_value": "ba223283945e3b52755729291294da5017678149",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874920": [
        {
            "ioc_value": "33cd067aa1d957161251b158ad3fbede",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874921": [
        {
            "ioc_value": "446fc9f0d0ed371ce92a9a49c44f5d69d88f0447cac03bbeb1e9c206ce6a3358",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874922": [
        {
            "ioc_value": "7be29a3c3d11c2ef18cab97f78d4d58d40bf861f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874918": [
        {
            "ioc_value": "696226345afe9f2508ab1a2c4532ec218b7bcaa8f55d688ed6030a7102cc4c70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874919": [
        {
            "ioc_value": "ac9455963ffa37142b021daabeac0fc674d4e57b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874915": [
        {
            "ioc_value": "bc655e22e9b4ca70ded595693a45250dada326d7cd643795a7de1e3d7d3e6d31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874916": [
        {
            "ioc_value": "6f52787cd0e8df460a2a9a73ec29ad865f87cc8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874917": [
        {
            "ioc_value": "35c673db1adf83ffe243cb416037c0eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874913": [
        {
            "ioc_value": "864315bfa84b9d838d6059b5fd16a78a03370279",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874914": [
        {
            "ioc_value": "a27942c0ce748ad03ce9e4fa83b2a45b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874910": [
        {
            "ioc_value": "70fc77cb3481bc264e2b662f47a6de437276ff8d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874911": [
        {
            "ioc_value": "f1990a805fd7833f9ac6ed3b74b073d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874912": [
        {
            "ioc_value": "f665011fe41c777404d4ddf8546d7ec9dcb67a5fcbee4e794b131a0e3143ff03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874908": [
        {
            "ioc_value": "c926d541d1858b9b9a0710a69c9dffbd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874909": [
        {
            "ioc_value": "62a4965ebf06ae0a213a3db30939d83372e6112f38a9e39f18ca01c1d697578d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874905": [
        {
            "ioc_value": "c3c6fcbdaf680694753732dd9d9d3211",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874906": [
        {
            "ioc_value": "8bb96be7e6cbe9a7793e6155b252eca8c857e79f00584f86016f9f039a28d03d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874907": [
        {
            "ioc_value": "12af4ce85bea4923d47dec36b02a7824a6f3949e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874902": [
        {
            "ioc_value": "ef80e9f38c08aaa16d1ff153ca9681bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874903": [
        {
            "ioc_value": "e5c7ebe019297fc64fcc8aa9fb3710d5f48c71b0422fee5c7f24aad1aea91e8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874904": [
        {
            "ioc_value": "3412d6dcae012f93400c8e658a7c34d721dad9e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874900": [
        {
            "ioc_value": "719643418c511d732bec5fc152b6b10f7a6db3cb20ff90ca8b15eb70be7365d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874901": [
        {
            "ioc_value": "1100e56d4d9f249f200ff7d335ef89b494b56f73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874898": [
        {
            "ioc_value": "f70f9f3e6850c04eb08e4490b7c76dbfed729900",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874899": [
        {
            "ioc_value": "3e2f82e4c1659407d9ca40ef6bf8f0ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874895": [
        {
            "ioc_value": "66729e4cfa0b929f65165ed1bc63254c7d3109d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874896": [
        {
            "ioc_value": "2405e1dc8dcceff8e931fc85bba1e691",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874897": [
        {
            "ioc_value": "75d9af34f110121ad462e7f03bd6a2847e53aabbdeaf8d7c8136401b862a62e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874892": [
        {
            "ioc_value": "d6960613391872839be66d49f73c392d8ec3c68a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874893": [
        {
            "ioc_value": "e417c5e9454ce4ccf67a0dd36a72b895",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874894": [
        {
            "ioc_value": "6f1cdf32760d3550e86f4c16129d1afd9ea91965de757846aa29dedad0d33bc6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874890": [
        {
            "ioc_value": "f8f91480b3bd577ed6930ce0abc40abe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874891": [
        {
            "ioc_value": "64eca9126a580871f159c8959807fe4d88dc66147c984a6af5ee42593d740a7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874888": [
        {
            "ioc_value": "79267cf01c1264ec5cfb85763e9592fa441b73a20808cb7a2f1b33919a7938d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874889": [
        {
            "ioc_value": "ad03278d6310cd3b9fba27b8e61f1ac6ee2e15d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874885": [
        {
            "ioc_value": "3bbc58914a614d2f8721d6a6f427a5bb479513c5f725b3179b3918de88d982de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874886": [
        {
            "ioc_value": "97f49fb8114c60ddeb5cf05dfed79df201728b5d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874887": [
        {
            "ioc_value": "5079451abbed8ac2eda09edff55a5277",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874882": [
        {
            "ioc_value": "f6abb35bdfc457526954594ede6a12701096603d0006f5af6e02e840a3dfff86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874883": [
        {
            "ioc_value": "97fd5bf8df55cb3b55b8cce75cb44b8783bf7fca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874884": [
        {
            "ioc_value": "015405d79d9d89da570cde5a8e8ba738",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874879": [
        {
            "ioc_value": "e10190bc2f1df8ad2288bb8112e9e35fd217fd0a800a7a0acbb7cc7cc04585c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874880": [
        {
            "ioc_value": "73c5392e874e24368f6a8080a2efdc496c56fb06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874881": [
        {
            "ioc_value": "f36640c8f38c1de6a992db5c1cd427fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874877": [
        {
            "ioc_value": "8b13beacaa635fc5fd5237250688dc53267fcaa8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874878": [
        {
            "ioc_value": "7e8098ea22d55401710ca6af67125d58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874873": [
        {
            "ioc_value": "bcb39f99cc8599ef6828599ced2e627998c6777c8792693fce8a0d999e8ce033",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874874": [
        {
            "ioc_value": "725e0630f3131d9e9ef1442fb3012acefa4b4246",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874875": [
        {
            "ioc_value": "6a7ee10febe8c58b0db1a2007b5aecde",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874876": [
        {
            "ioc_value": "d1e694cecf78d417237a31a5012d76ebe82616724ae2b86c91df09fd95ed0e28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874871": [
        {
            "ioc_value": "53c26d38de03c56d7d1a6d6f1401084437e7ff79",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874872": [
        {
            "ioc_value": "2b87d4786fdc8a9fdce84f20eb451698",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874869": [
        {
            "ioc_value": "ec13cd9cc9f2791af23531058b62dbf7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874870": [
        {
            "ioc_value": "cd3b2016e3a7c7d15a658b16ed8141d39204e32e087b41bb1b1e1c9c759b099d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874867": [
        {
            "ioc_value": "1268699ea51c41d311c2261c0a4a4f5c67a74a6aef64950d902d2005d95c45aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874868": [
        {
            "ioc_value": "30247323756ce5e42eb70550decf11c6b24c880e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874864": [
        {
            "ioc_value": "c7f69f17ee4ba629a37fcb9732b58591dd0236f9884959309ff67d574d04a642",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874865": [
        {
            "ioc_value": "d3a9b83e9ff588e4233c202348b6bc2e3564185b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874866": [
        {
            "ioc_value": "e17578a9e95a1572c3da5eee08605c69",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874862": [
        {
            "ioc_value": "13781c69b0a51078bcca8977dc98379a0abbfd66",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874863": [
        {
            "ioc_value": "ab663e7dc05b5a866e9db892922c80be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874859": [
        {
            "ioc_value": "0cb9ac2ae002d4ad086610847bfb1cb2ac32230b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874860": [
        {
            "ioc_value": "57feffb846ff30911e654e3e9974bbae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874861": [
        {
            "ioc_value": "e55dac904f2db446ecec048eb0fa48005bad2cb98f9956c777d788d753b3fc9b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874858": [
        {
            "ioc_value": "5a8b1642337e8e19fd54e8f9f03e899cfd66735ea3f2188a6182d49cbefab7b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874855": [
        {
            "ioc_value": "aeaee11e71e6f37930a85538a31af2c40cd0e710e5568bff012756f8afee1726",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874856": [
        {
            "ioc_value": "f0d5445acc06a606895804b254ade72d6948b3f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874857": [
        {
            "ioc_value": "d6f02dd77c737a5423c4a646484e6db3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874853": [
        {
            "ioc_value": "7a88e7e9123692d96327ae1b04cf56182ebd522f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874854": [
        {
            "ioc_value": "69b37db2fa63c34310b4718db61e543a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874850": [
        {
            "ioc_value": "c159a72fe91d5f36fc4f3aa36c6823ae823da3c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874851": [
        {
            "ioc_value": "99f13f0886ad6c6113abc0be4c4706c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874852": [
        {
            "ioc_value": "571fa749ae3fa2786a9dc2741cb7c99f4a347b34e9304be1d0ecebeec7ae14de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874848": [
        {
            "ioc_value": "4e743a7b01ff67230d56f2f58abfe384",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874849": [
        {
            "ioc_value": "49b1a1c68226c83a52f953cbb568fac850b7831c6d6c8c9e73e403eabb78febb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874846": [
        {
            "ioc_value": "cb0fce3c4789c2983e6f1dff0cc1e702382743c370886f987c58d19889436d6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874847": [
        {
            "ioc_value": "6f618943fdb10bdef25cb5ad25f7a72c866f6ff0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874844": [
        {
            "ioc_value": "ecfd65a0f6020241bc66e3599072f93585be85a8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874845": [
        {
            "ioc_value": "f3e85b6558e71146122537098796eff6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874842": [
        {
            "ioc_value": "f9f40d1ed33d176760de486f40c716a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874843": [
        {
            "ioc_value": "21f25150f46a34af15b086dc9aa72562feb60e34a0b6742edea74afde854bd7d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874840": [
        {
            "ioc_value": "055cb8ff6561adf21118a026c0adfed540a8236c4797401b4e28b6bcb283a472",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874841": [
        {
            "ioc_value": "1852b0849497b51b08a106eeca68d7e0893ff135",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874839": [
        {
            "ioc_value": "dffb75c5dd695a72d8e56654053e7e97",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-14 12:10:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874837": [
        {
            "ioc_value": "77bbee67bcd2f225a16dc300db094e019cc0e7cec79448f71590cb8e9cbacc0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-14 12:10:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874838": [
        {
            "ioc_value": "a5a827db1cb572b42ebd15353bb175c85bbe2dc5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-14 12:10:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874835": [
        {
            "ioc_value": "49777f45c5db174499147ea671968a45cda0c1f3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874836": [
        {
            "ioc_value": "ae131d66ca1040ac637cc57d84a8feb5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:10:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874833": [
        {
            "ioc_value": "5b4393659ecfbdc53b2e44fef04f1fa2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-14 12:09:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874834": [
        {
            "ioc_value": "71aa9766db343fa5de8e83e8d8eef912df3f7396116cd7ceef34631dd46ea2ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874831": [
        {
            "ioc_value": "aebc9415806e19d1ba80c52a3f56e6d179f4533719de573858dd000a16e39445",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-14 12:09:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874832": [
        {
            "ioc_value": "912fec8feb08f3d12c55a727e281ab1481f4ca78",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-14 12:09:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874828": [
        {
            "ioc_value": "3ccbd54fd6fdc48aa373f711e5605d4dc43ed0ffd889affc3a6f54a121f0fb1c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874829": [
        {
            "ioc_value": "8d79eac22a55b1fcd24d1554ebfb1754593fb884",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874830": [
        {
            "ioc_value": "88fc68ca8feb4f6f92ebbbe209aac64f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874826": [
        {
            "ioc_value": "dcc8ef83e4e3d049623a9332af88ec089668b257",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874827": [
        {
            "ioc_value": "874d95b5c266401f5d397312ee0d604f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874823": [
        {
            "ioc_value": "45b50d177e9f8a01f4f0c33c2dfff5563fa85efe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874824": [
        {
            "ioc_value": "12e9d8974b6021e549b309d3bb4828b2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874825": [
        {
            "ioc_value": "b68c10aec5bd9bf2d0e9824f9567a15dae7aa324611fbd3ca0bff6eeea16facc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874821": [
        {
            "ioc_value": "ec33eec246480c76716f671989cf9f88",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-14 12:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874822": [
        {
            "ioc_value": "9dd9b279ae65e62914145778f8cdb5b8f7625b923d6d962de7e95d4a3bd621bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874818": [
        {
            "ioc_value": "7cc5a4e4fc0916abe5e6d7fb53498690",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874819": [
        {
            "ioc_value": "c195a5af0a52953841461699e674037b289386e2a755c66b1c03615289f677bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-14 12:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874820": [
        {
            "ioc_value": "0137321ebd328c50947623dcfe46ad4d089791f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-08-14 12:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874815": [
        {
            "ioc_value": "590dc6eed412993e18a6533bfdbd28f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874816": [
        {
            "ioc_value": "19673cc34b19c23b617aaf6d23e9c84f9927a52d5a52fc6f4b307981a1e5f83d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874817": [
        {
            "ioc_value": "0eae8008b3213f39d8df55eb9ab411f49f8f5923",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874813": [
        {
            "ioc_value": "fba35bf2cde6a46079cf72f218f35cf4c8a9bbc1ceb28cc623b6049847e1f7ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874814": [
        {
            "ioc_value": "bf503f0336746c25efcbb3f92d700a8b63112a0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874810": [
        {
            "ioc_value": "90261947ce26f5ec40129b1a2d17f52a3f2624f2280133a3cf251d97473447d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874811": [
        {
            "ioc_value": "63082b4d441e76ea1ea2f7e724af67d1d9620452",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874812": [
        {
            "ioc_value": "7d8c5b360c3f4d254bf4b4907c8e12c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874807": [
        {
            "ioc_value": "c5efbad0aecc1f3070f43ec0a222d5683ddbe2c894772f0d1e174c3af7cfe24c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874808": [
        {
            "ioc_value": "430d468daffd7df6a26670763f9e876ef332ac51",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874809": [
        {
            "ioc_value": "743c5601c9a2834870c702fed2bf9235",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874805": [
        {
            "ioc_value": "d905578766cd113c273bafb9809bb430477d275b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874806": [
        {
            "ioc_value": "347b205a8351e822cd94a0864df9d558",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874803": [
        {
            "ioc_value": "0ae6dd01529c5f2430f5aa5cc5252fbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874804": [
        {
            "ioc_value": "b31fd00605f8ebe87e7e3244db6a20c1f94d777da1d51cbb6beb43e1596139ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874800": [
        {
            "ioc_value": "3daf04e0b37edc66c9554272cb93a0f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874801": [
        {
            "ioc_value": "580b441e2961739fd26e54e0a0ea08351cb10a51839519fc722cfa39ecd0c954",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874802": [
        {
            "ioc_value": "a493baebd6e8d238ea1bc50a9bee3bf5dfd7950d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874798": [
        {
            "ioc_value": "a85f239df1cce3eb2eb39b49633656be85ef4c043ae01fab28047cff7ad95243",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874799": [
        {
            "ioc_value": "ecbe5957c95ba153cb2effb90418a84842b566ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874796": [
        {
            "ioc_value": "91c685d8ad991e6896a638a171a84cc109144c03",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874797": [
        {
            "ioc_value": "3cd1af4eedd994d4bf44932deba36ab4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874793": [
        {
            "ioc_value": "c68419657f3057445e6ba70d0e44e4bc36f1cf9b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874794": [
        {
            "ioc_value": "1b4b59c708fe0aab3a3db82ac2c509a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874795": [
        {
            "ioc_value": "51b52d97f1bab106bc73dd5b3096db465a806a1687a2963b10077759e69afa9b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874791": [
        {
            "ioc_value": "5a12682193c8030f5b28bf08ff195bac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874792": [
        {
            "ioc_value": "0db4bd26f177b34118b3ff83829601ba8e9a345cf5a248f9a5078bfcee4402fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874790": [
        {
            "ioc_value": "955813ff6ed5b509d334ed666044655c0d920242",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874788": [
        {
            "ioc_value": "04f1503506575cf6f7c95f884d57b923",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874789": [
        {
            "ioc_value": "c4f172470b766f99f20bf7b4571f3b674d18b7709ca40ddcad6084fad695b15e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874786": [
        {
            "ioc_value": "c03aec10c77a1fdc01848fec5d0d028a63dffbe88bc5e8c8ea02ca8032b16437",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874787": [
        {
            "ioc_value": "4a9445ab75dd9e80e4bb96461304f89fe07c480b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874783": [
        {
            "ioc_value": "8311b4b8498ff76cec4cf33c6fd1e4007bb2a8014545035bf2c861d7d531930a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874784": [
        {
            "ioc_value": "0fba061d0c6aab4e7154ba2128e2b2bd7506770d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874785": [
        {
            "ioc_value": "7ac87a38a47cf6953ecee75df05be9fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874782": [
        {
            "ioc_value": "d8d95b3c979b9b529bb44b0880803da8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874779": [
        {
            "ioc_value": "8434d2285ae8c84ade10bfef75d24245",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874780": [
        {
            "ioc_value": "649580b6f18d2fad87a10a1694084e812f10b399af8e8532a13da809c61003e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874781": [
        {
            "ioc_value": "9c094c257ed256d574ed9c3a200219cac7518b41",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874777": [
        {
            "ioc_value": "97256a19691a695d84b620fb65d5c1f8c18f04cadf1085e20d7da5d61a6bcf7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874778": [
        {
            "ioc_value": "9f606bbe50f188fb667f56b5609e732c268bf5f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874776": [
        {
            "ioc_value": "a52f70b3d3e30147ba8864fd99100cb2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874774": [
        {
            "ioc_value": "675a7fdbf0c4c01bf862c2ea110ed1dca37903f61382661c56582ed9eb07bb63",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874775": [
        {
            "ioc_value": "d9e9b2fed384f1fa329231f9c3410b4306c193a8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874772": [
        {
            "ioc_value": "3192e10b72c2a2cc166be1505929161af0811047",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874773": [
        {
            "ioc_value": "e29f6d8a582917d16d2a261c53683ffc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874770": [
        {
            "ioc_value": "cdf1624eea02a5727f6ed4523d111ad8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874771": [
        {
            "ioc_value": "23703c6a917ac4afd0d26a4faf8cbf605c21ff1c7463f25d23c8ff6d80b47005",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874768": [
        {
            "ioc_value": "57f218fe464959ecb17cc274f584f0aa5d1a923d254e5409eea85503e250c5e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874769": [
        {
            "ioc_value": "0d0a7003b89f176e1db64b1dd6001084c9d8b5f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874766": [
        {
            "ioc_value": "86350494591be5d6a0f769ee2b99c3ec62df4488",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874767": [
        {
            "ioc_value": "05115f6395eea7899fbf157247166559",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874763": [
        {
            "ioc_value": "0ee60d7ea360bdad6b17d9ea13687a571d44dc18",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874764": [
        {
            "ioc_value": "01691505aead91816c6fba72094dffee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874765": [
        {
            "ioc_value": "bf1e307ac3c2d2a7e9c5b30b181d196888b1c2f3a01e5bc508e5f39e71c0275c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874761": [
        {
            "ioc_value": "6c2a45b3f8d19c8548636b8c37ca2579",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874762": [
        {
            "ioc_value": "c2c6cffcdb521a34cb160e0c68faaa519c3890fbc50ce6e1a1a33c3f3e455e18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874759": [
        {
            "ioc_value": "06ce22ab9a6477a1cf0b0961767dad0d6cb8e44990a81c50673bba8e30a9726c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874760": [
        {
            "ioc_value": "4664787f629cca7148fffbf373c8c7925ff27cc2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874756": [
        {
            "ioc_value": "b231c67fc102bd1784a10330a0b827e599ad66e08d9dc477f2d6c93efb581f85",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874757": [
        {
            "ioc_value": "c8a648d8703039cad8c630e4066fbce93586f9e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874758": [
        {
            "ioc_value": "3209f3fe564e9fb6eecd3c40a9563dc1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874753": [
        {
            "ioc_value": "27f0e595592b1ec8b82e87643f547d00530e7cbe021e806ad7da994d35f01309",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874754": [
        {
            "ioc_value": "6fbb8ef13c4e5cce341a50301c8fc9a78bd17097",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874755": [
        {
            "ioc_value": "4b53a223009a5eaea1ca162378f872a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874752": [
        {
            "ioc_value": "7ee3c63dd0b5788d5347521e82cde143",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874750": [
        {
            "ioc_value": "557f7843841a30372ea640f0f0b8e5f131c9047b33bf45d4e0ddee08ba5e7c22",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874751": [
        {
            "ioc_value": "500b40b5355d3d703b14b0fb8fbf63051b5996c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874748": [
        {
            "ioc_value": "05ee5b707b3302f3fb0c767ef2c7f37df658d9fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874749": [
        {
            "ioc_value": "e389403bf2581acabd957b982f27a1ca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874745": [
        {
            "ioc_value": "009937d35bcd51178714b283827a7d1ed57ff5b4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874746": [
        {
            "ioc_value": "6a15568931465270f44bece06bb2ae65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874747": [
        {
            "ioc_value": "1454e451998500a926850a670bca3bdbba05e019d5d17685bd74377bbedacaa9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874743": [
        {
            "ioc_value": "d359e37f01c454771d6f2a5266be4c06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 12:09:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874744": [
        {
            "ioc_value": "72e6cd9bb27f87f7a94773121686f9d1391e65e135b51715b7d90ed7929ee04e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:09:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874741": [
        {
            "ioc_value": "5334ab4eafeb63eaeab2d69bdfedf38cb92ed5d88dfe96564171cdfa22e3da17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 12:09:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874742": [
        {
            "ioc_value": "47aa4e2a552e8590fa17405e8ad536c00793a087",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 12:09:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874739": [
        {
            "ioc_value": "30f42fb8b856bbb8be79a0c3e0a85fd1d8c33549",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-14 12:09:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874740": [
        {
            "ioc_value": "e80bbf1cdab46a2ee238916fab1fb45e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-14 12:09:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874737": [
        {
            "ioc_value": "dfe81d3bfe9ed555b759f1ec06ff6ad0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:09:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874738": [
        {
            "ioc_value": "595de5b4652a6cb3743d44a3de3548d0efd879c7272d4f4bbdf4942b53bafd0e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-14 12:09:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874735": [
        {
            "ioc_value": "23437ab4e1de0de7907be7b9ba43454d85be19e4ff5476ae9154e6fe1cab922b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:09:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874736": [
        {
            "ioc_value": "2647f635ca5f9f50071c1e18fd0da2df6f8fd85c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:09:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874733": [
        {
            "ioc_value": "f7f9b71363f3ba30282cf093141164710a991463",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-14 12:09:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874734": [
        {
            "ioc_value": "c5a32a7a16d32f960b7387fc25ee7372",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-14 12:09:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874732": [
        {
            "ioc_value": "0e0bca2b782fb3d91cfe6c3dd55a59226f1b6b4e20453aebc34db216c5c0a81a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-14 12:09:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874730": [
        {
            "ioc_value": "6137850f5164e98e16cbe48abafe86114102bc27",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:09:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874731": [
        {
            "ioc_value": "22572deb99904d6257b6326e4fcf0d3c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:09:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874729": [
        {
            "ioc_value": "cdcf6356e2b101544a660c16e672ec81a0be2523f5bbee9abc36ae47ec93c8ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-14 12:09:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874727": [
        {
            "ioc_value": "ea5c785274943551d4e9c9853b4437f9e3fc1110",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-14 12:09:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874728": [
        {
            "ioc_value": "f59e7dbaaf872d9f22ef1bcb624c6a0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-14 12:09:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874724": [
        {
            "ioc_value": "9f686c07e2b380d46b6a1eacd3cc2b323281a347",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-14 12:09:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874725": [
        {
            "ioc_value": "c1414e595a76c9c5e2531d1d56b62d75",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-14 12:09:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874726": [
        {
            "ioc_value": "3267c5a04e1045b54b4518ec51b2267c0e5dd88dc6f33bef709604301d219c73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-08-14 12:09:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874723": [
        {
            "ioc_value": "ce25f7be28915f981b1b668cc770cb4152abc147a64a833f9b05e1606ea8d901",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-14 12:09:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1874719": [
        {
            "ioc_value": "116.198.42.177:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 12:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874717": [
        {
            "ioc_value": "116.198.42.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874718": [
        {
            "ioc_value": "116.198.42.177:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874715": [
        {
            "ioc_value": "https://set.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:05:06",
            "last_seen_utc": "2026-08-14 13:03:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874716": [
        {
            "ioc_value": "116.198.42.177:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874714": [
        {
            "ioc_value": "set.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 12:05:05",
            "last_seen_utc": "2026-08-14 12:25:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874713": [
        {
            "ioc_value": "117.72.159.96:9998",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 11:47:34",
            "last_seen_utc": "2026-09-01 02:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874711": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/kud-981/rt-3476@62fe780/kurt-38",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 11:40:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1874710": [
        {
            "ioc_value": "jsz9m5aa.usa-eng-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 11:39:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874379": [
        {
            "ioc_value": "https://sww.088idr.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:26:09",
            "last_seen_utc": "2026-08-14 09:37:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aa462c8dcc4d1e29e6e35cbe1cd9ac85,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874663": [
        {
            "ioc_value": "https://bib.088idr.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:26:07",
            "last_seen_utc": "2026-08-14 10:21:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6c0969259a3975582cd8a48f4c8913d7,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874685": [
        {
            "ioc_value": "172.233.46.25:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 11:26:06",
            "last_seen_utc": "2026-08-14 12:09:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874686": [
        {
            "ioc_value": "172.233.46.99:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 11:26:06",
            "last_seen_utc": "2026-08-14 12:09:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874687": [
        {
            "ioc_value": "https://sts.088idr.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:26:05",
            "last_seen_utc": "2026-08-14 10:42:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,e9bf104a963da535b0fb5aaebe6f06e1,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874694": [
        {
            "ioc_value": "https://eko.088idr.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:26:05",
            "last_seen_utc": "2026-08-14 11:03:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,cc382e7a75ab8441eee2f40142be37ed,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874705": [
        {
            "ioc_value": "gonznlez.surf",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 11:26:04",
            "last_seen_utc": "2026-08-17 12:10:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1874706": [
        {
            "ioc_value": "https://gonznlez.surf/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 11:26:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1874707": [
        {
            "ioc_value": "https://gonznlez.surf/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 11:26:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1874284": [
        {
            "ioc_value": "a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.aberebot",
            "malware_alias": "Escobar",
            "malware_printable": "Aberebot",
            "first_seen_utc": "2026-08-14 11:25:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874285": [
        {
            "ioc_value": "befaes.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 11:25:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1874292": [
        {
            "ioc_value": "68.183.221.133:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 11:25:56",
            "last_seen_utc": "2026-08-19 17:09:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874709": [
        {
            "ioc_value": "https://eko.sm188dadu.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:10:07",
            "last_seen_utc": "2026-08-14 11:53:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874708": [
        {
            "ioc_value": "eko.sm188dadu.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:10:06",
            "last_seen_utc": "2026-08-14 11:25:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874704": [
        {
            "ioc_value": "47.76.217.146:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 11:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874703": [
        {
            "ioc_value": "8.163.2.81:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 11:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874702": [
        {
            "ioc_value": "192.229.96.31:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874701": [
        {
            "ioc_value": "https://eko.10001slot.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:05:05",
            "last_seen_utc": "2026-08-14 11:57:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874699": [
        {
            "ioc_value": "eko.10001slot.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 11:05:04",
            "last_seen_utc": "2026-08-14 11:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874700": [
        {
            "ioc_value": "123.56.83.34:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874698": [
        {
            "ioc_value": "beatricemoren.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 10:58:03",
            "last_seen_utc": "2026-08-28 10:47:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,sepolia",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874697": [
        {
            "ioc_value": "https://eko.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 10:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874696": [
        {
            "ioc_value": "eko.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 10:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874695": [
        {
            "ioc_value": "eko.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 10:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874692": [
        {
            "ioc_value": "data.nomadhive.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-14 10:33:53",
            "last_seen_utc": "2026-08-14 10:33:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/498a5fedae9ec61339e1003a47f67834fb51a10866129b7228dcc16fa863e936/",
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874691": [
        {
            "ioc_value": "https://befaes.mom/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 10:30:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/befaes.mom",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1874689": [
        {
            "ioc_value": "sts.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 10:25:05",
            "last_seen_utc": "2026-08-14 10:25:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874690": [
        {
            "ioc_value": "https://sts.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 10:25:05",
            "last_seen_utc": "2026-08-14 10:42:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874688": [
        {
            "ioc_value": "sts.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 10:25:04",
            "last_seen_utc": "2026-08-14 10:25:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874684": [
        {
            "ioc_value": "118.195.158.209:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 10:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874682": [
        {
            "ioc_value": "43.143.118.200:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874683": [
        {
            "ioc_value": "110.42.211.101:13306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874681": [
        {
            "ioc_value": "43.143.118.200:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874680": [
        {
            "ioc_value": "rabvsryhs.phim18k.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 10:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874678": [
        {
            "ioc_value": "63.141.237.101:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 09:46:18",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874677": [
        {
            "ioc_value": "45.74.6.146:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-14 09:45:58",
            "last_seen_utc": "2026-09-01 02:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874676": [
        {
            "ioc_value": "23.111.14.80:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 09:45:27",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874675": [
        {
            "ioc_value": "217.60.241.247:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 09:45:24",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874674": [
        {
            "ioc_value": "qdfck9el.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 09:45:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874672": [
        {
            "ioc_value": "207.56.26.118:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 09:44:42",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874673": [
        {
            "ioc_value": "207.56.26.121:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 09:44:42",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874671": [
        {
            "ioc_value": "198.23.185.238:30305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 09:44:32",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874670": [
        {
            "ioc_value": "128.90.108.184:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-14 09:43:24",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874669": [
        {
            "ioc_value": "117.24.4.112:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 09:43:21",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874668": [
        {
            "ioc_value": "104.251.180.164:55009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-14 09:43:13",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874667": [
        {
            "ioc_value": "103.51.145.75:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-14 09:43:07",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874666": [
        {
            "ioc_value": "https://bib.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 09:40:06",
            "last_seen_utc": "2026-08-14 10:20:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874664": [
        {
            "ioc_value": "bib.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 09:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874665": [
        {
            "ioc_value": "bib.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 09:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874662": [
        {
            "ioc_value": "wsjmpkkq.usa--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 09:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874660": [
        {
            "ioc_value": "172.188.0.134:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-14 09:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874661": [
        {
            "ioc_value": "172.188.0.134:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-14 09:05:09",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874659": [
        {
            "ioc_value": "43.128.21.190:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874658": [
        {
            "ioc_value": "108.165.147.244:18080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874657": [
        {
            "ioc_value": "https://sww.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 09:05:05",
            "last_seen_utc": "2026-08-14 09:25:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874656": [
        {
            "ioc_value": "sww.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 09:05:04",
            "last_seen_utc": "2026-08-14 09:25:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874655": [
        {
            "ioc_value": "sww.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 09:00:09",
            "last_seen_utc": "2026-08-14 09:25:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874547": [
        {
            "ioc_value": "renaisenscoaching.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 08:58:29",
            "last_seen_utc": "2026-08-26 18:37:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,gated",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874525": [
        {
            "ioc_value": "pbkcoltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 08:58:27",
            "last_seen_utc": "2026-08-26 03:01:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,gated",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874445": [
        {
            "ioc_value": "keepme.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 08:57:35",
            "last_seen_utc": "2026-08-26 03:02:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,gated",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874380": [
        {
            "ioc_value": "28r8x9d2.get-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 08:57:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874305": [
        {
            "ioc_value": "fcc3e935fa91e60f7a5746dd70c7361aa40c8a73b16bdbd13f99b6cb2c8a1918",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 08:44:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874304": [
        {
            "ioc_value": "http://vexdico.shop:8539/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 08:35:50",
            "last_seen_utc": "2026-08-14 09:49:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/23437ab4e1de0de7907be7b9ba43454d85be19e4ff5476ae9154e6fe1cab922b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874303": [
        {
            "ioc_value": "http://shkpiva.shop:5627/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 08:35:46",
            "last_seen_utc": "2026-08-14 09:49:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/23437ab4e1de0de7907be7b9ba43454d85be19e4ff5476ae9154e6fe1cab922b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874302": [
        {
            "ioc_value": "http://mrlketo.shop:8932/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 08:35:42",
            "last_seen_utc": "2026-08-14 09:49:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/23437ab4e1de0de7907be7b9ba43454d85be19e4ff5476ae9154e6fe1cab922b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874299": [
        {
            "ioc_value": "734c7ad863767dbbcb39c57b3c6905c6df158988d50b0ff4253318e65f4f241c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 08:24:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874298": [
        {
            "ioc_value": "http://tqe2009.com/alex/five/fre.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-08-14 08:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Loki",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874296": [
        {
            "ioc_value": "47.79.98.75:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874297": [
        {
            "ioc_value": "68.64.182.169:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 08:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874294": [
        {
            "ioc_value": "212.87.199.197:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874295": [
        {
            "ioc_value": "47.79.98.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874293": [
        {
            "ioc_value": "212.87.199.197:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874291": [
        {
            "ioc_value": "https://nnu.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 07:55:05",
            "last_seen_utc": "2026-08-14 08:49:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874290": [
        {
            "ioc_value": "nnu.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 07:55:04",
            "last_seen_utc": "2026-08-14 08:25:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874289": [
        {
            "ioc_value": "befaes.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 07:54:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1874287": [
        {
            "ioc_value": "https://nnu.088idr.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 07:50:05",
            "last_seen_utc": "2026-08-14 08:51:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874286": [
        {
            "ioc_value": "nnu.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 07:50:04",
            "last_seen_utc": "2026-08-14 08:25:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874283": [
        {
            "ioc_value": "pjdxbok5.fus-u8k8fs-8.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 07:37:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874282": [
        {
            "ioc_value": "f1mrikc1.us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 07:36:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874281": [
        {
            "ioc_value": "beardiscovery.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-14 07:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874280": [
        {
            "ioc_value": "45.83.31.84:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-14 07:35:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d93f8957f5467e4ba5bf1f6ea0fa38c4e9d22f1b8eb94baf74212b1405adaa3c/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874279": [
        {
            "ioc_value": "124.198.131.91:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-14 07:34:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61366dc491bce133ceaeb4f1e93250b85431f99e9b5411ebea36c3f25a9b7467/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874278": [
        {
            "ioc_value": "bedpocket.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-14 07:33:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874276": [
        {
            "ioc_value": "89.208.103.186:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-14 07:32:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e61dd367859cf5e495a86ecaa7fa084ae84c1e38a049a68e03813e657651b192/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874277": [
        {
            "ioc_value": "89.208.103.186:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-14 07:32:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e61dd367859cf5e495a86ecaa7fa084ae84c1e38a049a68e03813e657651b192/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874275": [
        {
            "ioc_value": "43.226.47.184:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 07:31:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5334ab4eafeb63eaeab2d69bdfedf38cb92ed5d88dfe96564171cdfa22e3da17/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874274": [
        {
            "ioc_value": "yoda-time.ink",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-14 07:31:04",
            "last_seen_utc": "2026-08-25 14:36:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e61dd367859cf5e495a86ecaa7fa084ae84c1e38a049a68e03813e657651b192/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874272": [
        {
            "ioc_value": "sigmagranni1.fun",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 07:29:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9d435f7547926c1259d52301f8d95a28b0e39c0275a47d3b0e42cc81ef72e252/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874273": [
        {
            "ioc_value": "bratibobotito.fun",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 07:29:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9d435f7547926c1259d52301f8d95a28b0e39c0275a47d3b0e42cc81ef72e252/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874271": [
        {
            "ioc_value": "217.217.97.11:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-14 07:25:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1a2f081585e05540a72ceb36178f9549ff5bc3c6505fddb6565b887aa55f54a3/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874270": [
        {
            "ioc_value": "101.43.39.2:88",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 07:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-100000",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874263": [
        {
            "ioc_value": "2.26.81.46:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 07:19:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1874264": [
        {
            "ioc_value": "172.235.182.165:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 07:19:39",
            "last_seen_utc": "2026-08-14 09:13:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874265": [
        {
            "ioc_value": "172.235.191.232:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 07:19:38",
            "last_seen_utc": "2026-08-14 09:13:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874266": [
        {
            "ioc_value": "172.233.33.8:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-14 07:19:38",
            "last_seen_utc": "2026-08-14 09:13:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874269": [
        {
            "ioc_value": "1.94.145.106:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 07:19:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874268": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/kud-981/kirby-s1@3859d64/kk-w7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 07:14:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1874267": [
        {
            "ioc_value": "https://dallasbackstage.com/nfront.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-08-14 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/97846a49e8314d0d097da1590e04decb5e1570fdaf27157c91e211038dd5eeeb/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874257": [
        {
            "ioc_value": "photohub-vault.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-14 07:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874258": [
        {
            "ioc_value": "photosafe-docs.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-14 07:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874259": [
        {
            "ioc_value": "safevisa-hub.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-14 07:06:50",
            "last_seen_utc": "2026-08-17 07:52:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874260": [
        {
            "ioc_value": "secure-picstore.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-14 07:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874261": [
        {
            "ioc_value": "securehub-4pics.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-14 07:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874262": [
        {
            "ioc_value": "vault-picstore.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-14 07:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874256": [
        {
            "ioc_value": "47.79.98.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874254": [
        {
            "ioc_value": "212.87.199.197:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874255": [
        {
            "ioc_value": "47.79.98.75:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874253": [
        {
            "ioc_value": "https://46.62.249.147",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 07:01:07",
            "last_seen_utc": "2026-08-14 07:02:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71aa9766db343fa5de8e83e8d8eef912df3f7396116cd7ceef34631dd46ea2ad/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874250": [
        {
            "ioc_value": "https://digitalenterprise2026.com/ZxC9vBnM7lKjH3gF",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 07:00:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874251": [
        {
            "ioc_value": "cloudenterprise26.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 07:00:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874252": [
        {
            "ioc_value": "https://cloudenterprise26.com/ZxC9vBnM7lKjH3gF",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 07:00:32",
            "last_seen_utc": "2026-08-21 18:56:45",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874246": [
        {
            "ioc_value": "91.92.47.228:1383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874247": [
        {
            "ioc_value": "91.92.47.228:1394",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874248": [
        {
            "ioc_value": "91.92.47.228:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874249": [
        {
            "ioc_value": "91.92.47.228:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874239": [
        {
            "ioc_value": "91.92.47.228:1297",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874240": [
        {
            "ioc_value": "91.92.47.228:1313",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874241": [
        {
            "ioc_value": "91.92.47.228:1329",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874242": [
        {
            "ioc_value": "91.92.47.228:1342",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874243": [
        {
            "ioc_value": "91.92.47.228:1360",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874244": [
        {
            "ioc_value": "91.92.47.228:1366",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874245": [
        {
            "ioc_value": "91.92.47.228:1372",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874237": [
        {
            "ioc_value": "91.92.47.228:1180",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874238": [
        {
            "ioc_value": "91.92.47.228:1293",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 07:00:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874235": [
        {
            "ioc_value": "https://pod.turbo88jp.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:51:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874234": [
        {
            "ioc_value": "91.92.47.228:1154",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.noneuclid_rat",
            "malware_alias": "LiberiumRAT,ShadowRoot,SheetRAT",
            "malware_printable": "NonEuclid RAT",
            "first_seen_utc": "2026-08-14 06:51:24",
            "last_seen_utc": "2026-08-14 07:00:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/92f8f069c032422eb6048ce1a648bd140dab9d3cfca5c855e2b56e1ac6f1cc7b/",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874233": [
        {
            "ioc_value": "https://46.62.206.27",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:50:53",
            "last_seen_utc": "2026-08-14 06:51:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874226": [
        {
            "ioc_value": "cloudcrypt7069.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874227": [
        {
            "ioc_value": "cloudguard3537.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874228": [
        {
            "ioc_value": "coretoken8476.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874229": [
        {
            "ioc_value": "datapass8636.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874230": [
        {
            "ioc_value": "linkcast1961.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874231": [
        {
            "ioc_value": "linkmail5768.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874232": [
        {
            "ioc_value": "teleupdate6573.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874224": [
        {
            "ioc_value": "nodemetrics3379.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874225": [
        {
            "ioc_value": "apiupdate3921.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-08-14 06:46:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63963fc9dede449e5e40520f6c40e34888ef2cc0fa459772437ec6b69f44267e/",
            "tags": "MintsLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874221": [
        {
            "ioc_value": "https://ipo.088idr.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:35:05",
            "last_seen_utc": "2026-08-14 07:39:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874222": [
        {
            "ioc_value": "ipo.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:35:05",
            "last_seen_utc": "2026-08-14 07:25:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874223": [
        {
            "ioc_value": "https://ipo.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:35:05",
            "last_seen_utc": "2026-08-14 07:39:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874220": [
        {
            "ioc_value": "ipo.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:35:04",
            "last_seen_utc": "2026-08-14 07:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874218": [
        {
            "ioc_value": "http://vexdico.shop:8539/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 06:25:51",
            "last_seen_utc": "2026-08-14 07:00:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/191dccb04b3a98cf557a8bd994c6b8df433782653a3fa445bfa86ad5e6a5928a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874217": [
        {
            "ioc_value": "http://mrlketo.shop:8932/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 06:25:47",
            "last_seen_utc": "2026-08-14 07:00:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/191dccb04b3a98cf557a8bd994c6b8df433782653a3fa445bfa86ad5e6a5928a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873832": [
        {
            "ioc_value": "afterhours.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873833": [
        {
            "ioc_value": "imagiraffe.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873850": [
        {
            "ioc_value": "135.136.191.231:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873834": [
        {
            "ioc_value": "nightslikethis.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873835": [
        {
            "ioc_value": "chickenfriedwatermelonkoolaid.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873851": [
        {
            "ioc_value": "135.136.191.231:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873852": [
        {
            "ioc_value": "135.136.191.231:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873853": [
        {
            "ioc_value": "135.136.191.231:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873854": [
        {
            "ioc_value": "135.136.191.231:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873855": [
        {
            "ioc_value": "3.34.139.65:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873856": [
        {
            "ioc_value": "http://144.31.57.113/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-14 06:20:27",
            "last_seen_utc": "2026-08-15 15:18:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "build1,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873857": [
        {
            "ioc_value": "http://91.92.241.69/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-14 06:20:26",
            "last_seen_utc": "2026-08-27 07:29:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,L1,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873860": [
        {
            "ioc_value": "https://mathiuu.surf/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-14 06:20:26",
            "last_seen_utc": "2026-08-14 04:08:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873814": [
        {
            "ioc_value": "45.77.75.145:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 06:20:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlquery.net/queue/8565a541-dff7-49ef-9d5b-6778be8ab6ae",
            "tags": "WilsonC2",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1873811": [
        {
            "ioc_value": "178.16.55.227:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 06:20:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlquery.net/report/b17f966b-a7e8-4ab2-b17b-df77d504294a",
            "tags": "panel,PhantomStrikeC2",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1873813": [
        {
            "ioc_value": "79.133.42.25:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 06:20:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlquery.net/queue/e2cf8499-4168-451f-b4a6-6a9e52b0a0f7",
            "tags": "EvilgnixC2,Tr4nsHack",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1873812": [
        {
            "ioc_value": "38.76.165.176:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 06:20:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "panel,ZygiskC2",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1873809": [
        {
            "ioc_value": "http://202.63.202.222:35712/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-14 06:20:22",
            "last_seen_utc": "2026-08-25 00:20:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.63.202.222",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873808": [
        {
            "ioc_value": "http://175.107.221.53:58446/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-14 06:20:21",
            "last_seen_utc": "2026-08-25 00:20:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.221.53",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873807": [
        {
            "ioc_value": "http://72.255.32.20:60289/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-14 06:20:20",
            "last_seen_utc": "2026-08-25 00:19:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.20",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873875": [
        {
            "ioc_value": "odd-bar-f4c1.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:17",
            "last_seen_utc": "2026-08-13 23:51:04",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873876": [
        {
            "ioc_value": "160.119.71.120:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:20:16",
            "last_seen_utc": "2026-08-23 15:15:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873882": [
        {
            "ioc_value": "authorizecvv.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.aurastealer",
            "malware_alias": "AURA Stealer,AURASTEAL",
            "malware_printable": "Aura Stealer",
            "first_seen_utc": "2026-08-14 06:20:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AuraStealer,c2,domain",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873883": [
        {
            "ioc_value": "authorizecvv.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.aurastealer",
            "malware_alias": "AURA Stealer,AURASTEAL",
            "malware_printable": "Aura Stealer",
            "first_seen_utc": "2026-08-14 06:20:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AuraStealer,c2,domain",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873884": [
        {
            "ioc_value": "authorizecvv.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.aurastealer",
            "malware_alias": "AURA Stealer,AURASTEAL",
            "malware_printable": "Aura Stealer",
            "first_seen_utc": "2026-08-14 06:20:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AuraStealer,c2,domain",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873885": [
        {
            "ioc_value": "107.172.249.140:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.moonpeak",
            "malware_alias": null,
            "malware_printable": "MoonPeak",
            "first_seen_utc": "2026-08-14 06:20:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://lazarus.day/iocs/107.172.249.140/",
            "tags": "DPRK,Kimsuky,MoonPeak,Stella",
            "anonymous": 0,
            "reporter": "josephgerald"
        }
    ],
    "1873886": [
        {
            "ioc_value": "217.60.36.94:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.moonpeak",
            "malware_alias": null,
            "malware_printable": "MoonPeak",
            "first_seen_utc": "2026-08-14 06:20:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DPRK,Kimsuky,MoonPeak,Stella",
            "anonymous": 0,
            "reporter": "josephgerald"
        }
    ],
    "1873887": [
        {
            "ioc_value": "http://217.60.36.94/test/test.bef_fri",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.moonpeak",
            "malware_alias": null,
            "malware_printable": "MoonPeak",
            "first_seen_utc": "2026-08-14 06:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DPRK,Kimsuky,MoonPeak,Stella",
            "anonymous": 0,
            "reporter": "josephgerald"
        }
    ],
    "1873888": [
        {
            "ioc_value": "http://217.60.36.94/william/wi.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.moonpeak",
            "malware_alias": null,
            "malware_printable": "MoonPeak",
            "first_seen_utc": "2026-08-14 06:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DPRK,Kimsuky,MoonPeak,Stella",
            "anonymous": 0,
            "reporter": "josephgerald"
        }
    ],
    "1873889": [
        {
            "ioc_value": "http://217.60.36.94/test/p.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.moonpeak",
            "malware_alias": null,
            "malware_printable": "MoonPeak",
            "first_seen_utc": "2026-08-14 06:20:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DPRK,Kimsuky,MoonPeak,Stella",
            "anonymous": 0,
            "reporter": "josephgerald"
        }
    ],
    "1873890": [
        {
            "ioc_value": "877fb2b2d8800e7831f1912b37550627d97cd704a1592e16260a889473e90658",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.moonpeak",
            "malware_alias": null,
            "malware_printable": "MoonPeak",
            "first_seen_utc": "2026-08-14 06:20:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DPRK,Kimsuky,MoonPeak,Stella",
            "anonymous": 0,
            "reporter": "josephgerald"
        }
    ],
    "1873891": [
        {
            "ioc_value": "64.227.172.9:49152",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-14 06:20:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a7e3df9ee68883c34577fe1",
            "tags": "golang,zimbra,zimbra-exfil,ZMBX",
            "anonymous": 0,
            "reporter": "meff"
        }
    ],
    "1873892": [
        {
            "ioc_value": "http://64.227.172.9:8033/client_linux",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-14 06:20:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a7e3df9ee68883c34577fe1",
            "tags": "golang,zimbra,zimbra-exfil,ZMBX",
            "anonymous": 0,
            "reporter": "meff"
        }
    ],
    "1873893": [
        {
            "ioc_value": "http://64.227.172.9:8044/client_linux",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-14 06:20:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a7e3df9ee68883c34577fe1",
            "tags": "golang,zimbra,zimbra-exfil,ZMBX",
            "anonymous": 0,
            "reporter": "meff"
        }
    ],
    "1873894": [
        {
            "ioc_value": "39cef3a0e01334bf358bf0450209365bd5fbeff3b2ceea67684b7745e0c8f75c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-14 06:20:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a7e3df9ee68883c34577fe1",
            "tags": "golang,zimbra,zimbra-exfil,ZMBX",
            "anonymous": 0,
            "reporter": "meff"
        }
    ],
    "1873895": [
        {
            "ioc_value": "45.38.249.63:1004",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:09",
            "last_seen_utc": "2026-08-15 06:40:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873899": [
        {
            "ioc_value": "slon12.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:20:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873905": [
        {
            "ioc_value": "172.104.49.49:3667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:20:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1873910": [
        {
            "ioc_value": "176.98.182.217:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:20:07",
            "last_seen_utc": "2026-09-01 03:19:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873911": [
        {
            "ioc_value": "176.98.182.177:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:20:06",
            "last_seen_utc": "2026-09-01 03:18:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873912": [
        {
            "ioc_value": "176.98.182.218:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:20:06",
            "last_seen_utc": "2026-09-01 03:01:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873913": [
        {
            "ioc_value": "176.98.182.216:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:20:06",
            "last_seen_utc": "2026-09-01 03:17:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873921": [
        {
            "ioc_value": "557carlye.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873922": [
        {
            "ioc_value": "655particular.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873923": [
        {
            "ioc_value": "cwuia22936.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873924": [
        {
            "ioc_value": "dehamazo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873926": [
        {
            "ioc_value": "e6ednstx1d.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873925": [
        {
            "ioc_value": "dwahn22566.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873927": [
        {
            "ioc_value": "exquw91581.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873928": [
        {
            "ioc_value": "fy1j23u7c3.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873929": [
        {
            "ioc_value": "goldariela.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873931": [
        {
            "ioc_value": "jequfu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:20:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873930": [
        {
            "ioc_value": "hibusifa.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873932": [
        {
            "ioc_value": "jteqjafoxw.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873933": [
        {
            "ioc_value": "kdkcj10608.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873934": [
        {
            "ioc_value": "kovolovo.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873935": [
        {
            "ioc_value": "ksyuu99210.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873936": [
        {
            "ioc_value": "mijnf2c8ej.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873937": [
        {
            "ioc_value": "mldkv26213.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873938": [
        {
            "ioc_value": "nalywu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873941": [
        {
            "ioc_value": "q2ftyf36p9.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873939": [
        {
            "ioc_value": "pf13zvg8zm.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873940": [
        {
            "ioc_value": "potohi.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873942": [
        {
            "ioc_value": "s6ruklj35j.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873943": [
        {
            "ioc_value": "tubas96664.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873944": [
        {
            "ioc_value": "vwiue35687.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873945": [
        {
            "ioc_value": "wqczklqnha.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "cloudflare,php,webshell,wordpress,workes.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1873960": [
        {
            "ioc_value": "https://gdo.sm188castle.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:19:47",
            "last_seen_utc": "2026-08-14 02:02:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "013c5d2d6312702c9bd8d7499170ed6b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873961": [
        {
            "ioc_value": "https://gdo.beri303.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:19:47",
            "last_seen_utc": "2026-08-14 01:50:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5fdb6df778631818165110294c620890,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873968": [
        {
            "ioc_value": "98.80.179.181:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:19:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14618,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1873969": [
        {
            "ioc_value": "213.111.157.231:22222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:19:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1873973": [
        {
            "ioc_value": "64.176.12.165:8811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 06:19:46",
            "last_seen_utc": "2026-08-16 01:25:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a77f04bc08864469eb801630c24264ba,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873974": [
        {
            "ioc_value": "91.108.249.56:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:19:45",
            "last_seen_utc": "2026-08-14 17:19:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874125": [
        {
            "ioc_value": "palmvalehomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 06:19:10",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874116": [
        {
            "ioc_value": "https://gb0.beri303.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:19:09",
            "last_seen_utc": "2026-08-14 02:32:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6c0969259a3975582cd8a48f4c8913d7,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874122": [
        {
            "ioc_value": "bg678.tamilkamaveri.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-14 06:19:08",
            "last_seen_utc": "2026-08-14 02:32:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3c602fcb3fc8cecffc99454fa64e9ff28182d13b280055e4dce30d31210cb2f2",
            "tags": "asynrat,malware,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874129": [
        {
            "ioc_value": "https://kik.sm188cuan.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:19:07",
            "last_seen_utc": "2026-08-14 02:59:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "013c5d2d6312702c9bd8d7499170ed6b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874145": [
        {
            "ioc_value": "8629amber.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:04",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874146": [
        {
            "ioc_value": "a4kgz5fj4m.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:02",
            "last_seen_utc": "2026-08-15 00:57:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874147": [
        {
            "ioc_value": "g1130kgpqr.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:02",
            "last_seen_utc": "2026-08-14 22:06:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874148": [
        {
            "ioc_value": "jidufyle.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:02",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874149": [
        {
            "ioc_value": "juloly.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:19:00",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874150": [
        {
            "ioc_value": "lixobezu.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:59",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874151": [
        {
            "ioc_value": "hodi8527yw0.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874152": [
        {
            "ioc_value": "rocahode.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:58",
            "last_seen_utc": "2026-08-14 22:06:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874153": [
        {
            "ioc_value": "rosemaximum.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:58",
            "last_seen_utc": "2026-08-14 22:06:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874154": [
        {
            "ioc_value": "vevyhiby.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:55",
            "last_seen_utc": "2026-08-15 00:57:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874155": [
        {
            "ioc_value": "xpldell.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:55",
            "last_seen_utc": "2026-08-14 22:06:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874156": [
        {
            "ioc_value": "xtjzz52890.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:54",
            "last_seen_utc": "2026-08-14 22:06:05",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874157": [
        {
            "ioc_value": "zqret51773.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "php.shin_webshell",
            "malware_alias": null,
            "malware_printable": "php.shin_webshell",
            "first_seen_utc": "2026-08-14 06:18:54",
            "last_seen_utc": "2026-08-15 00:57:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "Cloudflare,gif,PHP,webshell,WordPress,workers.dev,wp-admin",
            "anonymous": 0,
            "reporter": "xscon"
        }
    ],
    "1874168": [
        {
            "ioc_value": "https://klk.088idr.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 06:18:52",
            "last_seen_utc": "2026-08-14 04:25:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "903ac24fcd9670b9ef2e674243d550d8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874176": [
        {
            "ioc_value": "176.98.182.217:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-14 06:18:51",
            "last_seen_utc": "2026-08-31 21:08:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1874182": [
        {
            "ioc_value": "160.119.71.134:2",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:18:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1874183": [
        {
            "ioc_value": "160.119.71.134:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:18:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1874184": [
        {
            "ioc_value": "160.119.71.134:23",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-14 06:18:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1874211": [
        {
            "ioc_value": "http://105.184.49.165:53813/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-14 06:18:49",
            "last_seen_utc": "2026-08-25 00:19:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/105.184.49.165",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1874212": [
        {
            "ioc_value": "http://36.70.68.244:54909/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-14 06:18:48",
            "last_seen_utc": "2026-08-25 00:19:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.70.68.244",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1874213": [
        {
            "ioc_value": "http://115.50.94.75:59466/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-14 06:18:48",
            "last_seen_utc": "2026-08-25 00:19:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.50.94.75",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1874209": [
        {
            "ioc_value": "119.29.122.42:5004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874208": [
        {
            "ioc_value": "20.187.120.42:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:05:07",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874205": [
        {
            "ioc_value": "20.187.120.42:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874206": [
        {
            "ioc_value": "20.187.120.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874207": [
        {
            "ioc_value": "20.187.120.42:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874204": [
        {
            "ioc_value": "73103b5b1f8db1dbca392fbe84313fdbc3804d3718c1db9d67e721f761ffec50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 06:04:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874200": [
        {
            "ioc_value": "https://pez.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:40:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874197": [
        {
            "ioc_value": "pez.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:40:05",
            "last_seen_utc": "2026-08-14 06:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874198": [
        {
            "ioc_value": "https://pez.088idr.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:40:05",
            "last_seen_utc": "2026-08-14 06:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874199": [
        {
            "ioc_value": "pez.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874196": [
        {
            "ioc_value": "i1zec9op.us-en-us-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 05:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874192": [
        {
            "ioc_value": "https://run.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:25:45",
            "last_seen_utc": "2026-08-14 05:30:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "d8b0m,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874193": [
        {
            "ioc_value": "run.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:25:45",
            "last_seen_utc": "2026-08-14 05:30:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "d8b0m,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1874191": [
        {
            "ioc_value": "https://run.088idr.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:25:05",
            "last_seen_utc": "2026-08-14 05:31:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874190": [
        {
            "ioc_value": "run.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 05:25:04",
            "last_seen_utc": "2026-08-14 05:25:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874189": [
        {
            "ioc_value": "43.225.157.17:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874187": [
        {
            "ioc_value": "43.128.21.190:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874188": [
        {
            "ioc_value": "43.128.21.190:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874186": [
        {
            "ioc_value": "06e948jz.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 04:47:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874185": [
        {
            "ioc_value": "e7w940t3.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 04:42:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874174": [
        {
            "ioc_value": "43.128.21.190:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 04:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874175": [
        {
            "ioc_value": "43.128.21.190:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 04:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874172": [
        {
            "ioc_value": "130.94.66.82:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874173": [
        {
            "ioc_value": "43.128.21.190:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-14 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874171": [
        {
            "ioc_value": "169.58.31.140:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 04:05:06",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874169": [
        {
            "ioc_value": "klk.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 04:00:05",
            "last_seen_utc": "2026-08-14 04:25:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874167": [
        {
            "ioc_value": "http://vexdico.shop:8539/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 03:45:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1874166": [
        {
            "ioc_value": "http://mrlketo.shop:8932/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 03:45:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1874163": [
        {
            "ioc_value": "https://k1k.088idr.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 03:45:05",
            "last_seen_utc": "2026-08-14 03:56:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874164": [
        {
            "ioc_value": "k1k.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 03:45:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874165": [
        {
            "ioc_value": "https://k1k.sm188cuan.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 03:45:05",
            "last_seen_utc": "2026-08-14 04:13:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874162": [
        {
            "ioc_value": "k1k.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 03:45:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874161": [
        {
            "ioc_value": "5bjdw8rn.theultimateoutlet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 03:38:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874159": [
        {
            "ioc_value": "web-thyrafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 03:25:40",
            "last_seen_utc": "2026-08-14 03:26:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1874158": [
        {
            "ioc_value": "us-usnervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 03:22:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1874142": [
        {
            "ioc_value": "kienthucquocphong.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 03:10:13",
            "last_seen_utc": "2026-08-25 16:44:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874138": [
        {
            "ioc_value": "124.222.109.22:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874136": [
        {
            "ioc_value": "169.58.31.140:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 03:05:04",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874137": [
        {
            "ioc_value": "120.26.210.31:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 03:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874134": [
        {
            "ioc_value": "karelgondormusic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 03:02:19",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874132": [
        {
            "ioc_value": "willowbrooktownhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-14 03:00:48",
            "last_seen_utc": "2026-08-14 05:13:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874130": [
        {
            "ioc_value": "kik.sm188cuan.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 02:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874128": [
        {
            "ioc_value": "https://kik.088idr.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 02:45:05",
            "last_seen_utc": "2026-08-14 03:40:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874127": [
        {
            "ioc_value": "kik.088idr.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 02:45:04",
            "last_seen_utc": "2026-08-14 03:25:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874126": [
        {
            "ioc_value": "usz5k088.eng-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 02:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874124": [
        {
            "ioc_value": "https://gb0.sm188castle.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 02:20:05",
            "last_seen_utc": "2026-08-14 02:25:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874123": [
        {
            "ioc_value": "gb0.sm188castle.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 02:20:04",
            "last_seen_utc": "2026-08-14 02:25:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874120": [
        {
            "ioc_value": "198.44.177.253:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 02:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874119": [
        {
            "ioc_value": "192.140.174.170:4431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874118": [
        {
            "ioc_value": "154.64.254.102:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874117": [
        {
            "ioc_value": "gb0.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 02:05:04",
            "last_seen_utc": "2026-08-14 02:25:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874111": [
        {
            "ioc_value": "https://gd0.beri303.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 01:55:05",
            "last_seen_utc": "2026-08-14 02:00:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874110": [
        {
            "ioc_value": "gd0.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 01:55:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1874108": [
        {
            "ioc_value": "uj36tvbs.theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 01:36:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1874107": [
        {
            "ioc_value": "toothnir23.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:38",
            "last_seen_utc": "2026-08-23 17:24:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874097": [
        {
            "ioc_value": "borrylistu898214.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874098": [
        {
            "ioc_value": "bromment41293.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874099": [
        {
            "ioc_value": "dolpi812.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874100": [
        {
            "ioc_value": "killswpi912.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874101": [
        {
            "ioc_value": "material813.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874102": [
        {
            "ioc_value": "nachoiuiwe123.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874103": [
        {
            "ioc_value": "nickilorr421.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874104": [
        {
            "ioc_value": "productpi121.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874105": [
        {
            "ioc_value": "roddyki9911.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874106": [
        {
            "ioc_value": "rokkko89123.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:34:37",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874088": [
        {
            "ioc_value": "www.a-imagine.co.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874089": [
        {
            "ioc_value": "www.asdugrandlyon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 12:37:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874090": [
        {
            "ioc_value": "www.becrepress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874092": [
        {
            "ioc_value": "www.entrepreneurspaper.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874093": [
        {
            "ioc_value": "www.goodiving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874094": [
        {
            "ioc_value": "www.lb-begeleiding.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874096": [
        {
            "ioc_value": "www.thephyllconnect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:52",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874064": [
        {
            "ioc_value": "probizlist.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874067": [
        {
            "ioc_value": "realcasadelatarjeta.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874068": [
        {
            "ioc_value": "reckeweg.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874070": [
        {
            "ioc_value": "sahermir.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874072": [
        {
            "ioc_value": "sampladigital.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874073": [
        {
            "ioc_value": "samsatcorner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874075": [
        {
            "ioc_value": "sangilpet.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874077": [
        {
            "ioc_value": "sdalirsyad01pwt.sch.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874078": [
        {
            "ioc_value": "she-explores.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874079": [
        {
            "ioc_value": "sinemergencia.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874080": [
        {
            "ioc_value": "singersavvyacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874081": [
        {
            "ioc_value": "thebloomtheory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874083": [
        {
            "ioc_value": "tmgroupcre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874084": [
        {
            "ioc_value": "tool-tectra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874085": [
        {
            "ioc_value": "topfordsecurity.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874086": [
        {
            "ioc_value": "trazoseguro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874087": [
        {
            "ioc_value": "vidiq.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:51",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874039": [
        {
            "ioc_value": "lawdhyan.sa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874040": [
        {
            "ioc_value": "lk21movies.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874044": [
        {
            "ioc_value": "mavibeautycenter.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874046": [
        {
            "ioc_value": "metaconsultancy.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874047": [
        {
            "ioc_value": "myluxproperty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874048": [
        {
            "ioc_value": "n00bventures.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874049": [
        {
            "ioc_value": "nateava.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874050": [
        {
            "ioc_value": "nissicye.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874052": [
        {
            "ioc_value": "nysapanipat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874053": [
        {
            "ioc_value": "officespacetorent.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874054": [
        {
            "ioc_value": "oltumuretoursandsafaris.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874055": [
        {
            "ioc_value": "ongnhom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874056": [
        {
            "ioc_value": "patzcuaro.gob.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874058": [
        {
            "ioc_value": "perspectiv-interieur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874059": [
        {
            "ioc_value": "piraguismoalgeciras.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874060": [
        {
            "ioc_value": "plantaodosvidros.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874061": [
        {
            "ioc_value": "pluzz899.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874062": [
        {
            "ioc_value": "poprockenlinea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:50",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874014": [
        {
            "ioc_value": "famat.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874017": [
        {
            "ioc_value": "firehosechicago.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874021": [
        {
            "ioc_value": "guntes.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874022": [
        {
            "ioc_value": "gvparkhotel.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874023": [
        {
            "ioc_value": "harisnf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874024": [
        {
            "ioc_value": "hbaw.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874025": [
        {
            "ioc_value": "henygee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874026": [
        {
            "ioc_value": "hermangeys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874027": [
        {
            "ioc_value": "homesajawat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874029": [
        {
            "ioc_value": "idenfragancias.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874030": [
        {
            "ioc_value": "investorsvisas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874033": [
        {
            "ioc_value": "jecoaff.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874035": [
        {
            "ioc_value": "killylanecottage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874037": [
        {
            "ioc_value": "kozojedka.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:49",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873992": [
        {
            "ioc_value": "atreyaayurvedawellness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873994": [
        {
            "ioc_value": "autocentarjana.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873995": [
        {
            "ioc_value": "bakermediaco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873996": [
        {
            "ioc_value": "basakcaypinar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873997": [
        {
            "ioc_value": "baydohardwoodfloor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874001": [
        {
            "ioc_value": "briwonacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874003": [
        {
            "ioc_value": "cassagrand.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874005": [
        {
            "ioc_value": "corrieredellaverita.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874006": [
        {
            "ioc_value": "dchme.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874009": [
        {
            "ioc_value": "doljanka.ba",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874010": [
        {
            "ioc_value": "duldulsports.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874011": [
        {
            "ioc_value": "ecoprobuilders.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874012": [
        {
            "ioc_value": "edmillo.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1874013": [
        {
            "ioc_value": "ellwooddaycare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:48",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873982": [
        {
            "ioc_value": "adwm.com.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873983": [
        {
            "ioc_value": "affectionaba.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873984": [
        {
            "ioc_value": "aguron.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873985": [
        {
            "ioc_value": "alarmasindustriales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873986": [
        {
            "ioc_value": "alkaramriceeng.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873987": [
        {
            "ioc_value": "alrushedsch.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873988": [
        {
            "ioc_value": "alsaadaoffcial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873989": [
        {
            "ioc_value": "asorewa.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873990": [
        {
            "ioc_value": "aster-lubaczow.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-14 01:31:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873972": [
        {
            "ioc_value": "60.185.66.75:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873971": [
        {
            "ioc_value": "47.250.190.129:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873970": [
        {
            "ioc_value": "47.96.5.12:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-14 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873967": [
        {
            "ioc_value": "dpwp5ghw.moqua8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:36:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873966": [
        {
            "ioc_value": "http://vexdico.shop:8539/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 00:30:53",
            "last_seen_utc": "2026-08-14 01:39:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/96641c2e9be0fbb4b59ef0e18755d795570b0125f9b0ea45d321d9d3380b32a8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873965": [
        {
            "ioc_value": "http://shkpiva.shop:5627/messages",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 00:30:49",
            "last_seen_utc": "2026-08-14 01:39:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/96641c2e9be0fbb4b59ef0e18755d795570b0125f9b0ea45d321d9d3380b32a8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873964": [
        {
            "ioc_value": "http://mrlketo.shop:8932/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 00:30:46",
            "last_seen_utc": "2026-08-14 01:39:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/96641c2e9be0fbb4b59ef0e18755d795570b0125f9b0ea45d321d9d3380b32a8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873962": [
        {
            "ioc_value": "gdo.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 00:25:05",
            "last_seen_utc": "2026-08-14 01:25:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873963": [
        {
            "ioc_value": "gdo.sm188castle.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 00:25:05",
            "last_seen_utc": "2026-08-14 01:25:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873959": [
        {
            "ioc_value": "https://65.109.20.25",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-14 00:10:49",
            "last_seen_utc": "2026-08-18 07:04:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e61dd367859cf5e495a86ecaa7fa084ae84c1e38a049a68e03813e657651b192/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873958": [
        {
            "ioc_value": "campgregoryveterans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:10:11",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873955": [
        {
            "ioc_value": "pcs-srl.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:10:10",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873956": [
        {
            "ioc_value": "ulisadekaj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:10:10",
            "last_seen_utc": "2026-08-25 16:44:47",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873954": [
        {
            "ioc_value": "http://mrlketo.shop:8932/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 00:05:44",
            "last_seen_utc": "2026-08-15 23:27:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/949d52a103ea1b3c8752abf5cdcdfe58363b157d031cb78c99f1e45029bfbcb5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873953": [
        {
            "ioc_value": "145.223.93.74:7748",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 00:05:43",
            "last_seen_utc": "2026-08-31 23:27:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/949d52a103ea1b3c8752abf5cdcdfe58363b157d031cb78c99f1e45029bfbcb5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873952": [
        {
            "ioc_value": "http://luwerae.click:7748/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-14 00:05:42",
            "last_seen_utc": "2026-08-15 23:27:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/949d52a103ea1b3c8752abf5cdcdfe58363b157d031cb78c99f1e45029bfbcb5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873948": [
        {
            "ioc_value": "lions-sternschnuppen.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:00:07",
            "last_seen_utc": "2026-08-28 11:03:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873947": [
        {
            "ioc_value": "traderomerhoca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:00:06",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873946": [
        {
            "ioc_value": "nelsoncortes.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-14 00:00:04",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873920": [
        {
            "ioc_value": "http://vexdico.shop:8539/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 23:50:49",
            "last_seen_utc": "2026-08-15 23:27:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d94c9ec16c386af1665b3eeaa16e9cff8478136f1f5c001e00a4e35dd550bf9/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873919": [
        {
            "ioc_value": "http://mrlketo.shop:8932/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 23:50:45",
            "last_seen_utc": "2026-08-15 23:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d94c9ec16c386af1665b3eeaa16e9cff8478136f1f5c001e00a4e35dd550bf9/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873918": [
        {
            "ioc_value": "59e14d45e25201284f047fa430e7f84301edf3a7f1ad95ad0f8dd6f945275b19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 23:50:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873917": [
        {
            "ioc_value": "185.92.190.175:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 23:46:59",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873916": [
        {
            "ioc_value": "113.52.135.27:19666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 23:46:48",
            "last_seen_utc": "2026-09-01 02:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873915": [
        {
            "ioc_value": "a042exok.app8k.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 23:35:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873914": [
        {
            "ioc_value": "xdcvmzg8.theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 23:34:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873909": [
        {
            "ioc_value": "http://vexdico.shop:8539/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 23:25:40",
            "last_seen_utc": "2026-08-17 22:47:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b0ec563cbabaa68e37d081d9538c1b66652c389467294f495bdd5437fd2a1fa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873908": [
        {
            "ioc_value": "62.171.169.111:5525",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 23:25:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b0ec563cbabaa68e37d081d9538c1b66652c389467294f495bdd5437fd2a1fa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873907": [
        {
            "ioc_value": "http://verbida.click:5525/users",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 23:25:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b0ec563cbabaa68e37d081d9538c1b66652c389467294f495bdd5437fd2a1fa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873906": [
        {
            "ioc_value": "http://mrlketo.shop:8932/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 23:25:35",
            "last_seen_utc": "2026-08-19 10:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b0ec563cbabaa68e37d081d9538c1b66652c389467294f495bdd5437fd2a1fa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873903": [
        {
            "ioc_value": "jackbelmontbarbers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 23:10:01",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873904": [
        {
            "ioc_value": "mecfpune.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 23:10:01",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873896": [
        {
            "ioc_value": "lemasdescarnassoles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 22:59:58",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873881": [
        {
            "ioc_value": "asturiasferreteria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 21:59:58",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873878": [
        {
            "ioc_value": "daacadelectric.co.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 21:59:57",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873879": [
        {
            "ioc_value": "dorsaroofandbuild.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 21:59:57",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873877": [
        {
            "ioc_value": "bauleitung-mallorca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 21:59:56",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873874": [
        {
            "ioc_value": "y7sb1j03.theslimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 21:34:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873873": [
        {
            "ioc_value": "auth.commonup.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-13 21:34:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873872": [
        {
            "ioc_value": "vkg9h21t.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 21:34:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873866": [
        {
            "ioc_value": "http://offdrer.click:8811/imports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 21:07:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873865": [
        {
            "ioc_value": "47.236.130.154:2095",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-13 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873864": [
        {
            "ioc_value": "103.83.87.158:4040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-13 20:56:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fa4d54b4720966445e20a0aeaf1761ea039089ada1b4f4fb3877a51cb6904ac8/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873862": [
        {
            "ioc_value": "q383qak6.en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 20:28:05",
            "last_seen_utc": "2026-08-20 17:48:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873861": [
        {
            "ioc_value": "edge.amberreport.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-13 20:19:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873859": [
        {
            "ioc_value": "82.157.13.47:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-13 20:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873858": [
        {
            "ioc_value": "https://sis.adkfarmerdan.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 20:00:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sis.adkfarmerdan.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873849": [
        {
            "ioc_value": "85.208.69.45:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-08-13 19:46:44",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873847": [
        {
            "ioc_value": "64.89.161.181:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:46:34",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873848": [
        {
            "ioc_value": "64.89.161.181:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:46:34",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873846": [
        {
            "ioc_value": "63.141.237.101:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 19:46:32",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873845": [
        {
            "ioc_value": "63.141.237.101:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 19:46:31",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873844": [
        {
            "ioc_value": "46.246.4.16:7049",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 19:46:22",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873843": [
        {
            "ioc_value": "45.88.91.74:7580",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 19:46:19",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873841": [
        {
            "ioc_value": "217.60.195.226:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:45:43",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873842": [
        {
            "ioc_value": "217.60.241.247:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 19:45:43",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873839": [
        {
            "ioc_value": "216.118.235.66:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 19:45:40",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873840": [
        {
            "ioc_value": "216.118.235.69:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 19:45:40",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873838": [
        {
            "ioc_value": "177.22.117.81:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-13 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873837": [
        {
            "ioc_value": "172.86.72.75:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 19:44:12",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873836": [
        {
            "ioc_value": "147.45.61.65:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873831": [
        {
            "ioc_value": "128.90.112.237:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873830": [
        {
            "ioc_value": "128.90.105.154:8624",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 19:43:28",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873826": [
        {
            "ioc_value": "108.187.43.137:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873827": [
        {
            "ioc_value": "108.187.43.137:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873828": [
        {
            "ioc_value": "108.187.43.144:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873829": [
        {
            "ioc_value": "108.187.43.144:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873825": [
        {
            "ioc_value": "104.251.180.164:55006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:15",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873824": [
        {
            "ioc_value": "104.239.66.245:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 19:43:13",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873823": [
        {
            "ioc_value": "102.117.162.167:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873822": [
        {
            "ioc_value": "hxouo2wg.snaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 19:33:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873821": [
        {
            "ioc_value": "metric3.viberun.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-13 19:21:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873819": [
        {
            "ioc_value": "134.122.200.208:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873820": [
        {
            "ioc_value": "183.60.226.2:33333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873817": [
        {
            "ioc_value": "68.64.182.169:110",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873818": [
        {
            "ioc_value": "68.64.182.169:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 19:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873810": [
        {
            "ioc_value": "uc3lofxv.app8k.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 18:34:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873806": [
        {
            "ioc_value": "http://vexdico.shop:8539/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 17:45:46",
            "last_seen_utc": "2026-08-19 15:10:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc2e438fe9cfd34f6af2078e063e600066e4b13b8d393ffa33843905038fc433/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873805": [
        {
            "ioc_value": "http://none/tasks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 17:45:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc2e438fe9cfd34f6af2078e063e600066e4b13b8d393ffa33843905038fc433/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873804": [
        {
            "ioc_value": "http://mrlketo.shop:8932/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 17:45:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc2e438fe9cfd34f6af2078e063e600066e4b13b8d393ffa33843905038fc433/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873803": [
        {
            "ioc_value": "sniwkcay.slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 17:35:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873802": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/kud-981/sandy-lumping-mandarin@a1fee8e/sys",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 17:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873801": [
        {
            "ioc_value": "12a761e8f69b99c232ee748498d8d5da5ef4da103409695afbd973eb1ea1557a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 17:12:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873800": [
        {
            "ioc_value": "101.42.255.92:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 17:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873798": [
        {
            "ioc_value": "http://mrlketo.shop:8932/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 17:00:56",
            "last_seen_utc": "2026-08-14 10:11:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e42a50d1a7ccec59d2fbf6d9574b42d1d5714f33da719ec4356db15cec5e956d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873788": [
        {
            "ioc_value": "9a1c9e8f89df354e7704a1bdba5404b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873789": [
        {
            "ioc_value": "67b59851c48c89880b692e238e54ad8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873790": [
        {
            "ioc_value": "95d91cdeaf8991fec3618ca52a5d8a7e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873791": [
        {
            "ioc_value": "1768e374535e5aeaec71002ab68838e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873792": [
        {
            "ioc_value": "6436a5ae81c78a3b38a2a2830bce2d36",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873793": [
        {
            "ioc_value": "57d0c8f4132cfe3d208f52a8fe89c16c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873794": [
        {
            "ioc_value": "3b5381e4e1a32953a8af4b98befc643f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873795": [
        {
            "ioc_value": "b24f5bf5582f6f0b5bc7ed2bf8c05c66",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873796": [
        {
            "ioc_value": "b072d316e930b12b03d3d58617ec0c14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 16:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/CRPX0%20Ransomware",
            "tags": "crpx0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1873797": [
        {
            "ioc_value": "31.40.204.178:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-13 16:50:12",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/797f2a8984090b782a158c170edeb51285a57d42df02aaf35e65e082f88e77e0/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873786": [
        {
            "ioc_value": "f9cl8k8o.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 16:34:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873774": [
        {
            "ioc_value": "https://ity.beri303.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 16:34:35",
            "last_seen_utc": "2026-08-14 00:23:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "903ac24fcd9670b9ef2e674243d550d8,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873785": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/zor-876/futures-import@04e2419/llm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 16:27:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873784": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/zor-876/futures-import@8b224a7/requests",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 16:16:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873783": [
        {
            "ioc_value": "j4bfscn7.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 16:16:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873782": [
        {
            "ioc_value": "http://tokjoza.shop:5200/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 16:16:00",
            "last_seen_utc": "2026-08-13 17:34:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbe1e5b3775966705c0f376fcf0b39c0ffa456971d99675f78a0cd6dfd2794bc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873781": [
        {
            "ioc_value": "http://shkpiva.shop:5627/sessions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 16:15:58",
            "last_seen_utc": "2026-08-13 17:34:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbe1e5b3775966705c0f376fcf0b39c0ffa456971d99675f78a0cd6dfd2794bc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873779": [
        {
            "ioc_value": "68.64.182.169:995",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 16:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873780": [
        {
            "ioc_value": "134.122.200.212:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 16:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873778": [
        {
            "ioc_value": "68.64.182.169:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873776": [
        {
            "ioc_value": "ity.sm188castle.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 16:05:05",
            "last_seen_utc": "2026-08-13 23:26:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873777": [
        {
            "ioc_value": "https://ity.sm188castle.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 16:05:05",
            "last_seen_utc": "2026-08-14 00:18:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873775": [
        {
            "ioc_value": "ity.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 16:05:04",
            "last_seen_utc": "2026-08-13 23:26:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873773": [
        {
            "ioc_value": "ueppwtrkonujissbbl.web-ignitra.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 16:02:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x1ca9,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873771": [
        {
            "ioc_value": "156.247.41.102:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 16:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873770": [
        {
            "ioc_value": "jbpqui.usslimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:54:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873769": [
        {
            "ioc_value": "109.172.54.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-13 15:51:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873767": [
        {
            "ioc_value": "media.barmaidlushness.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-13 15:40:27",
            "last_seen_utc": "2026-08-14 10:45:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873768": [
        {
            "ioc_value": "45.155.68.45:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-13 15:40:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873751": [
        {
            "ioc_value": "https://mylovemarry.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-13 15:34:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://app.any.run/tasks/2e0c668f-9f17-4ae0-a7f8-f70eab449540",
            "tags": "Eviltokens",
            "anonymous": 0,
            "reporter": "ThreatOpsX"
        }
    ],
    "1873754": [
        {
            "ioc_value": "synctime.australiaeast.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-08-13 15:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1873755": [
        {
            "ioc_value": "82.22.23.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 15:34:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://app.any.run/tasks/841e4f5f-fa0c-4128-aa5c-f3afef4f7c99",
            "tags": "Eviltokens",
            "anonymous": 0,
            "reporter": "ThreatOpsX"
        }
    ],
    "1873766": [
        {
            "ioc_value": "b7ttsc7s.shop-theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:33:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873765": [
        {
            "ioc_value": "rltczk86.us-en-us-nervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:31:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873764": [
        {
            "ioc_value": "us-en-us-nervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:30:35",
            "last_seen_utc": "2026-08-13 15:30:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873763": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/kud-981/9564-41286dbead85@d02d0a9/set",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873762": [
        {
            "ioc_value": "hirjnqvagnfswonyxw.web-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:18:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x1ca9,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873760": [
        {
            "ioc_value": "victorymarksllc20.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-13 15:18:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1873759": [
        {
            "ioc_value": "yvbtdo.us-sightfresh-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:07:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873758": [
        {
            "ioc_value": "us-sightfresh-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 15:07:25",
            "last_seen_utc": "2026-08-13 16:27:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873757": [
        {
            "ioc_value": "4.232.64.244:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 15:05:05",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873756": [
        {
            "ioc_value": "94.154.34.203:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 15:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873753": [
        {
            "ioc_value": "37.27.249.30:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-13 14:53:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1873752": [
        {
            "ioc_value": "https://62.238.97.30",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 14:45:45",
            "last_seen_utc": "2026-08-14 07:02:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c81219c7f169c9df974ae86e9169edf9b154efaae91c305199ef76ef7af2e32/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873750": [
        {
            "ioc_value": "3627f4ca552af942ed152739121766ac3fb853ad0137d7ea3f56ac2e14595471",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 14:30:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873749": [
        {
            "ioc_value": "https://www.thueringer-stuck.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 14:30:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.thueringer-stuck.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873748": [
        {
            "ioc_value": "beta.smartcore.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-13 14:29:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873742": [
        {
            "ioc_value": "45.39.33.177:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-13 14:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://any.run/report/61802c04497f157443cafe62b964f224953c527938aab3d3845acc058fcd5ae8/30b678d6-13b6-4a23-a3d2-bda8c50baa2c",
            "tags": "behance,decoy-pdf,freelancer-scam,lnk,powershell,swisstransfer,xor",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873743": [
        {
            "ioc_value": "160.119.71.120:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 14:25:06",
            "last_seen_utc": "2026-08-24 08:50:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873745": [
        {
            "ioc_value": "http://45.39.33.177/peter.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-13 14:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://any.run/report/61802c04497f157443cafe62b964f224953c527938aab3d3845acc058fcd5ae8/30b678d6-13b6-4a23-a3d2-bda8c50baa2c",
            "tags": "behance,decoy-pdf,freelancer-scam,lnk,powershell,swisstransfer,xor",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873747": [
        {
            "ioc_value": "bkwmqv.us-en-us-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 14:23:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873746": [
        {
            "ioc_value": "yrywkap.us-usa-thyrafemmebalance.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 14:22:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873744": [
        {
            "ioc_value": "us-usa-thyrafemmebalance.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 14:20:24",
            "last_seen_utc": "2026-08-14 05:08:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873740": [
        {
            "ioc_value": "http://vexdico.shop:8539/permissions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 14:13:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873741": [
        {
            "ioc_value": "http://shkpiva.shop:5627/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 14:13:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873739": [
        {
            "ioc_value": "http://mrlketo.shop:8932/transactions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 14:13:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873738": [
        {
            "ioc_value": "192.227.135.223:6040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 14:10:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873736": [
        {
            "ioc_value": "68.64.182.169:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873734": [
        {
            "ioc_value": "8.163.59.20:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873735": [
        {
            "ioc_value": "68.64.182.169:7010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873733": [
        {
            "ioc_value": "159.203.165.107:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 14:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873732": [
        {
            "ioc_value": "winnerscorner.gleeze.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 14:00:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eddc76033cea510a91a36ba5a6bfbc545986e51cbbb2a47e9601f777e4b951d8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873731": [
        {
            "ioc_value": "mainhold.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 14:00:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eddc76033cea510a91a36ba5a6bfbc545986e51cbbb2a47e9601f777e4b951d8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873730": [
        {
            "ioc_value": "trace.eastbox.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-13 13:58:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873725": [
        {
            "ioc_value": "iawfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:55:53",
            "last_seen_utc": "2026-08-25 16:30:17",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873724": [
        {
            "ioc_value": "https://microandsofty.com/serv.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 13:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78f108762b991c170d9eede8426028b538e9e0d7c56b3f479768eb7b819f437f/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873723": [
        {
            "ioc_value": "biralabwa.org.sa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:45:53",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873721": [
        {
            "ioc_value": "http://vexdico.shop:8539/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 13:45:49",
            "last_seen_utc": "2026-08-14 01:12:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873720": [
        {
            "ioc_value": "http://mrlketo.shop:8932/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 13:45:46",
            "last_seen_utc": "2026-08-14 01:12:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873719": [
        {
            "ioc_value": "9933d85274f9d34a652f1995a0ea80797087e2a563b87e196852d0d89c1d7f46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:40:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873718": [
        {
            "ioc_value": "194.12.15.34:8011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-08-13 13:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873717": [
        {
            "ioc_value": "dtmpzv.us-en-us-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:37:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873716": [
        {
            "ioc_value": "yyvqsuw.us-tinni-trol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:36:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873642": [
        {
            "ioc_value": "toothnir23.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 13:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,wordpress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873656": [
        {
            "ioc_value": "http://144.48.132.96:53462/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-13 13:35:54",
            "last_seen_utc": "2026-08-25 00:20:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.132.96",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873657": [
        {
            "ioc_value": "http://103.244.172.178:45019/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-13 13:35:53",
            "last_seen_utc": "2026-08-25 00:20:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.178",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873658": [
        {
            "ioc_value": "http://223.123.43.198:54438/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-13 13:35:53",
            "last_seen_utc": "2026-08-25 00:20:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.198",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873707": [
        {
            "ioc_value": "https://herndndes.beer/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-13 13:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873715": [
        {
            "ioc_value": "us-tinni-trol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:34:52",
            "last_seen_utc": "2026-08-13 13:35:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873714": [
        {
            "ioc_value": "dc16h0z3.energyrevolutionsystem.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:34:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873713": [
        {
            "ioc_value": "imkc64pm.us-en-us-keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:31:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873712": [
        {
            "ioc_value": "us-en-us-keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:30:13",
            "last_seen_utc": "2026-08-13 13:30:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873710": [
        {
            "ioc_value": "http://shkpiva.shop:5627/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 13:27:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873711": [
        {
            "ioc_value": "http://beljaro.shop:2536/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 13:27:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873709": [
        {
            "ioc_value": "mekzlixxdvhnahxfae.web-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 13:18:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x1ca9,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873705": [
        {
            "ioc_value": "91763fd9896d4e7c17058d566e903a94ab801127",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 13:09:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873706": [
        {
            "ioc_value": "7a0f3eebfb821131f22ff6ec2645b4fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 13:09:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873702": [
        {
            "ioc_value": "c3a0be16abf09c569acd2d61ebff4972549854d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-13 13:09:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873703": [
        {
            "ioc_value": "a56d67f5e2f1b15b2c3864ff9501d7cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-13 13:09:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873704": [
        {
            "ioc_value": "b9f992a46caa3b898a960ceb13b8be215054e74d80b288de82b662c028faecb6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 13:09:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873699": [
        {
            "ioc_value": "2794280875a99f47ddcf347f3eaa5f57ecc30058",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-13 13:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873700": [
        {
            "ioc_value": "757b7e2991187e4644f8092801547730",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-13 13:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873701": [
        {
            "ioc_value": "e2bebe7d6fcc4e9ce414fa6f2fb357a1ec517712e2d1597e25752b3616e2d650",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-13 13:09:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873696": [
        {
            "ioc_value": "3966dfc023858b3f3bd6aca6562964838aaa2e31",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-13 13:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873697": [
        {
            "ioc_value": "7d4dcace32850c5e3e9d5dff5a6ef08d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-13 13:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873698": [
        {
            "ioc_value": "664f8e49f45b3fda22f2deb4a164e9dd0737cd8ec65aef928526b86424bb3726",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-13 13:09:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873693": [
        {
            "ioc_value": "2571413368bb32f0b8eb3637b317a734978cf42b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-13 13:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873694": [
        {
            "ioc_value": "725368095f3e67cf813c8c442652ca97",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-13 13:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873695": [
        {
            "ioc_value": "4208d5e8fe67a312095ee467a08bd0d6ec6007f10922d03383e760b40e0e1dc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-13 13:09:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873690": [
        {
            "ioc_value": "3bb888cb49563f907b4b1305cd3c6a1eff227a5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-08-13 13:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873691": [
        {
            "ioc_value": "f0227e480e845b98b91e385b898e9b47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-08-13 13:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873692": [
        {
            "ioc_value": "bbbdcc7dc8d6ef0cdb2c72ddb0ed3858343db8705dfbd9b904a509342d6f4c12",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-13 13:09:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873688": [
        {
            "ioc_value": "8ad256c5b786abb5f1552d906df3482a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 13:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873689": [
        {
            "ioc_value": "c9548996fd7c80f449b61ab4706dce3d35307aa7215c8ff82788a513d6789e2d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-08-13 13:09:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873686": [
        {
            "ioc_value": "b3c2f9ac068664bb861d7f8a59db533810032bc26d75fad48dbd0e2ba26413b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 13:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873687": [
        {
            "ioc_value": "c321593cb3d8e279dfbdcf6d8bb94fac93cdc405",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 13:09:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873684": [
        {
            "ioc_value": "0578ccbe64ee7f6c1f90cf656095dad7059b1587",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-13 13:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873685": [
        {
            "ioc_value": "6ff68578110de0105fc3a1a1ab635dd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-13 13:09:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873681": [
        {
            "ioc_value": "46da9bf913828dfdc3cbfc435e414285ba5cb715",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-13 13:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873682": [
        {
            "ioc_value": "ef5b6211a47d0bec3ddb8d77b9c9586a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-13 13:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873683": [
        {
            "ioc_value": "c1770108b0d0e6dde3fd5d588a85af3409ad41581784b1734a3eec637fddb15d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-13 13:09:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873678": [
        {
            "ioc_value": "687e3c588e1d0482e8aae96a9ee780fe534dde01",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.void",
            "malware_alias": "VoidCrypt",
            "malware_printable": "Void",
            "first_seen_utc": "2026-08-13 13:09:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873679": [
        {
            "ioc_value": "36612c13573375fb4c796f3569eb50c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.void",
            "malware_alias": "VoidCrypt",
            "malware_printable": "Void",
            "first_seen_utc": "2026-08-13 13:09:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873680": [
        {
            "ioc_value": "d1ccedd9d262377aa1e28d0ba13b49cbd6511ccaa5e95db0e506064b2861f6f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-13 13:09:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873676": [
        {
            "ioc_value": "1ab183b92f988063206d8f415f1e6439",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 13:09:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873677": [
        {
            "ioc_value": "d0319eb0aad677d46a509fdcdf2c03e7c92cee9794cee70a79d3e84c564708c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.void",
            "malware_alias": "VoidCrypt",
            "malware_printable": "Void",
            "first_seen_utc": "2026-08-13 13:09:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873672": [
        {
            "ioc_value": "695fe5d40398a4f75c5125cffeb5bb1ab2117040",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 13:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873673": [
        {
            "ioc_value": "1bb0a4abcc83dd82f0c7da52ce5d9e8a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 13:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873674": [
        {
            "ioc_value": "9985a958af279455f1ccaf2c35ea527d08ca0c3289f88c084c3a2bd6260b3d03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 13:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873675": [
        {
            "ioc_value": "aef7e86df2479892739c5d13fb389b474489e846",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 13:09:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873671": [
        {
            "ioc_value": "e87d14fd46969a5a2341482f1e1082f00a84520b9d6fe7138807584c83a25269",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 13:09:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873669": [
        {
            "ioc_value": "159.203.165.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873670": [
        {
            "ioc_value": "159.203.165.107:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873668": [
        {
            "ioc_value": "178.128.80.204:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873667": [
        {
            "ioc_value": "https://soupart.ch/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 13:00:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/soupart.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873666": [
        {
            "ioc_value": "huqnry.us-en-us-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:51:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873665": [
        {
            "ioc_value": "us-en-us-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:51:09",
            "last_seen_utc": "2026-08-13 12:51:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873664": [
        {
            "ioc_value": "udsakhk.us-tinitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:50:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873663": [
        {
            "ioc_value": "us-tinitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:49:40",
            "last_seen_utc": "2026-08-13 12:49:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873662": [
        {
            "ioc_value": "31.77.138.55:56545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 12:45:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5d8412afa31465b53132d25931a36eb24c3660ea7a65b0669721adfecbd0d709/",
            "tags": "RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873661": [
        {
            "ioc_value": "153.52.162.73:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 12:24:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5640665b796ba1f43fa3813006910c8fa01e3f0ab82c16da4534432add7777a9/",
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873660": [
        {
            "ioc_value": "45.148.18.38:58798",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 12:23:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5640665b796ba1f43fa3813006910c8fa01e3f0ab82c16da4534432add7777a9/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873659": [
        {
            "ioc_value": "204.10.160.200:3608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-08-13 12:19:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/343d0f4a95e588f4b3e1888cd65f17f15591cc2a010c40baa01b2cbe68350bdb/",
            "tags": "RAT,STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873655": [
        {
            "ioc_value": "89.106.83.225:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-13 12:11:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6ffa64ce7b0cdb507e113c96dc0777cb340e6a03c559da332d152142eec604ab/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873652": [
        {
            "ioc_value": "91.92.47.238:7878",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 12:10:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2a73d34cc811730977a2364f3eb5e65b150cf58c9af6d3189182413f5ce9039/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873653": [
        {
            "ioc_value": "91.92.47.238:7979",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 12:10:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2a73d34cc811730977a2364f3eb5e65b150cf58c9af6d3189182413f5ce9039/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873654": [
        {
            "ioc_value": "91.92.47.238:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 12:10:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2a73d34cc811730977a2364f3eb5e65b150cf58c9af6d3189182413f5ce9039/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873650": [
        {
            "ioc_value": "prakashjadhav74.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 12:09:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2a73d34cc811730977a2364f3eb5e65b150cf58c9af6d3189182413f5ce9039/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873651": [
        {
            "ioc_value": "pradeepprabhu705.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 12:09:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2a73d34cc811730977a2364f3eb5e65b150cf58c9af6d3189182413f5ce9039/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873649": [
        {
            "ioc_value": "coerwt.us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873648": [
        {
            "ioc_value": "akoreoe.us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:05:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873647": [
        {
            "ioc_value": "toseuhlxdkhpqachkr.phim18k.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:05:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873644": [
        {
            "ioc_value": "68.64.182.169:993",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873645": [
        {
            "ioc_value": "68.64.182.169:4190",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873646": [
        {
            "ioc_value": "169.58.23.30:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 12:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873643": [
        {
            "ioc_value": "ngdt6tui.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 12:04:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873550": [
        {
            "ioc_value": "192.53.121.159:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873551": [
        {
            "ioc_value": "172.234.103.104:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:16",
            "last_seen_utc": "2026-08-13 12:54:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873581": [
        {
            "ioc_value": "www.thueringer-stuck.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-13 11:51:16",
            "last_seen_utc": "2026-08-13 20:59:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1873582": [
        {
            "ioc_value": "6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-13 11:51:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,EtherHiding,LummaC2",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1873583": [
        {
            "ioc_value": "649c6c95558f8ece4f927a68e3eed6fccf2118d45a371d5416e6bd19d66d9efd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-13 11:51:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,EtherHiding,LummaC2",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1873588": [
        {
            "ioc_value": "lzcoyg.usa-usa-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:51:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,DLL-sideload,WebDAV",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1873591": [
        {
            "ioc_value": "103.3.61.234:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873590": [
        {
            "ioc_value": "172.233.163.205:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873592": [
        {
            "ioc_value": "192.53.121.159:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:10",
            "last_seen_utc": "2026-08-13 12:54:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873593": [
        {
            "ioc_value": "104.105.140.237:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:10",
            "last_seen_utc": "2026-08-13 12:54:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873597": [
        {
            "ioc_value": "https://xor.beri303.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 11:51:09",
            "last_seen_utc": "2026-08-13 16:02:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "726a8431d5d2ee941d0e6046b5948889,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873602": [
        {
            "ioc_value": "103.3.61.234:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:09",
            "last_seen_utc": "2026-08-13 12:54:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873598": [
        {
            "ioc_value": "https://xor.sm188castle.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 11:51:08",
            "last_seen_utc": "2026-08-13 16:01:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "013c5d2d6312702c9bd8d7499170ed6b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873603": [
        {
            "ioc_value": "172.233.163.205:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 11:51:07",
            "last_seen_utc": "2026-08-13 12:53:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873614": [
        {
            "ioc_value": "clodflare.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:06",
            "last_seen_utc": "2026-08-13 17:27:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873616": [
        {
            "ioc_value": "pub-bb063fce842e49b7b855db509f5542a5.r2.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873615": [
        {
            "ioc_value": "https://clodflare.info/embed/580d7c9ae71ca504",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:05",
            "last_seen_utc": "2026-08-13 14:30:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873617": [
        {
            "ioc_value": "https://pub-bb063fce842e49b7b855db509f5542a5.r2.dev/DJCISODJ.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873619": [
        {
            "ioc_value": "ab49a2874151de565447e16c4e4b7c5f666fb74e7d54fe6e5ef94683b79bd208",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873620": [
        {
            "ioc_value": "https://morganmariedancer.com/rPBAN626w8J75gFWpw",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873621": [
        {
            "ioc_value": "https://morganmariedancer.com/g4c2wxvb-rhty7vn4-mc58pnhc-sjyaynxz/DJCISODJ.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:51:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,ErrTraffic,HijackLoader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873641": [
        {
            "ioc_value": "mail.nemail.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-08-13 11:48:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12de494db7efffd346e9c434950c72da25b8cd3f71b5d326870ef275c202cbbe/",
            "tags": "VIPKeylogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873640": [
        {
            "ioc_value": "91.92.42.118:13019",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:47:22",
            "last_seen_utc": "2026-09-01 02:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873639": [
        {
            "ioc_value": "118.31.18.77:2301",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:46:56",
            "last_seen_utc": "2026-09-01 02:46:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873638": [
        {
            "ioc_value": "recaptcha-check.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-13 11:46:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873637": [
        {
            "ioc_value": "cloudflare-check.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-13 11:46:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873636": [
        {
            "ioc_value": "94.26.90.126:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-13 11:46:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873635": [
        {
            "ioc_value": "194.116.236.54:2467",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-13 11:41:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03fe02608603b3bbb6cc9f88212f525e4cfd5d47d3b7aaf705b99da4279283d5/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873634": [
        {
            "ioc_value": "31.40.204.178:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 11:36:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e85add92ba9a9241098bd2df722604e45f96fa5c98563d7bfdcab090f185eab2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873633": [
        {
            "ioc_value": "107.175.101.136:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-13 11:35:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8337543f545f48ad93ef9794a9b1b55138e7b93d0712a04e008d71ccc898ebe9/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873632": [
        {
            "ioc_value": "45.152.183.18:8707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 11:35:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c7a9ed85f2352d7473dbb61391b94aa1538aa883972415c6a7a62e9b5eeba1f6/",
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873631": [
        {
            "ioc_value": "extranet-helpdesk26.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-13 11:33:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873630": [
        {
            "ioc_value": "szb4ajn8.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:31:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873629": [
        {
            "ioc_value": "chewira.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 11:25:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e1226a9e171ac22a369ad30520750a7385d2d674997f795e98563a654818b767/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873628": [
        {
            "ioc_value": "bkrsqb.usen-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:22:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873627": [
        {
            "ioc_value": "wvsvkdju.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:22:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873626": [
        {
            "ioc_value": "yyllojs.us-slimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:21:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873625": [
        {
            "ioc_value": "usen-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:19:45",
            "last_seen_utc": "2026-08-13 11:20:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873624": [
        {
            "ioc_value": "vlgwuglmapxtjsabtd.web-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:17:01",
            "last_seen_utc": "2026-08-21 10:53:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x1ca9,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873623": [
        {
            "ioc_value": "xqudjilf.en-en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:13:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xe447,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873622": [
        {
            "ioc_value": "gyoacuqjcvauminwrg.us-us-us-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x1ca9,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873618": [
        {
            "ioc_value": "vk10.waizerfly.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 11:10:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b3c2f9ac068664bb861d7f8a59db533810032bc26d75fad48dbd0e2ba26413b2/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873612": [
        {
            "ioc_value": "119.29.122.42:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873613": [
        {
            "ioc_value": "68.64.182.169:587",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873611": [
        {
            "ioc_value": "119.29.122.42:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873610": [
        {
            "ioc_value": "119.29.122.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873609": [
        {
            "ioc_value": "68.64.182.169:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873608": [
        {
            "ioc_value": "shkcinnc.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 11:03:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873607": [
        {
            "ioc_value": "https://awtar.co.il/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 11:00:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/awtar.co.il",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873606": [
        {
            "ioc_value": "202.181.188.64:1488",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-13 11:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873604": [
        {
            "ioc_value": "http://tokjoza.shop:5200/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873605": [
        {
            "ioc_value": "http://shkpiva.shop:5627/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873601": [
        {
            "ioc_value": "xor.sm188castle.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 10:40:06",
            "last_seen_utc": "2026-08-13 15:25:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873600": [
        {
            "ioc_value": "xor.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 10:40:05",
            "last_seen_utc": "2026-08-13 15:26:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873599": [
        {
            "ioc_value": "otmkyq.usen-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 10:39:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873596": [
        {
            "ioc_value": "zdklknv.us-en-us-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 10:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873595": [
        {
            "ioc_value": "usen-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 10:34:09",
            "last_seen_utc": "2026-08-13 10:34:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873594": [
        {
            "ioc_value": "us-en-us-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 10:33:40",
            "last_seen_utc": "2026-08-13 10:34:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873587": [
        {
            "ioc_value": "68.64.182.169:8010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 10:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873586": [
        {
            "ioc_value": "68.64.182.169:5727",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 10:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873585": [
        {
            "ioc_value": "68.64.182.169:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873584": [
        {
            "ioc_value": "68.64.182.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873580": [
        {
            "ioc_value": "38.240.32.5:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-13 10:00:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873579": [
        {
            "ioc_value": "hatmnfx.usen-tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:50:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873578": [
        {
            "ioc_value": "fprzbb.usechoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:49:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873576": [
        {
            "ioc_value": "usen-tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:48:12",
            "last_seen_utc": "2026-08-13 09:49:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873575": [
        {
            "ioc_value": "91.242.163.227:5174",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:47:21",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873574": [
        {
            "ioc_value": "86.124.168.48:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-08-13 09:47:14",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,SocGholish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873573": [
        {
            "ioc_value": "54.54.27.128:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 09:46:54",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873571": [
        {
            "ioc_value": "38.240.57.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 09:46:22",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873570": [
        {
            "ioc_value": "217.60.241.247:7722",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:46:03",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873569": [
        {
            "ioc_value": "8.210.155.34:6868",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 09:45:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873568": [
        {
            "ioc_value": "203.161.55.41:7691",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 09:45:09",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873567": [
        {
            "ioc_value": "202.73.4.82:44321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 09:45:08",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873566": [
        {
            "ioc_value": "194.76.226.90:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 09:44:52",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873563": [
        {
            "ioc_value": "193.138.195.29:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 09:44:48",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873564": [
        {
            "ioc_value": "193.138.195.29:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 09:44:48",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873565": [
        {
            "ioc_value": "193.138.195.29:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 09:44:48",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873561": [
        {
            "ioc_value": "185.34.147.34:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:44:40",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873562": [
        {
            "ioc_value": "185.34.147.35:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:44:40",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873559": [
        {
            "ioc_value": "185.34.147.31:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:44:39",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873560": [
        {
            "ioc_value": "185.34.147.32:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:44:39",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873558": [
        {
            "ioc_value": "185.199.197.93:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 09:44:32",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873557": [
        {
            "ioc_value": "172.111.134.94:56013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 09:44:13",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873556": [
        {
            "ioc_value": "154.36.188.233:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-13 09:43:51",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873555": [
        {
            "ioc_value": "139.180.136.200:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 09:43:39",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873554": [
        {
            "ioc_value": "130.12.182.39:2500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-13 09:43:32",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873553": [
        {
            "ioc_value": "103.54.153.49:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873552": [
        {
            "ioc_value": "103.182.16.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873549": [
        {
            "ioc_value": "llobae.usa-us-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873548": [
        {
            "ioc_value": "fqtdjda.usen-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:32:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873547": [
        {
            "ioc_value": "5iywfu2r.vongquay8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:32:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873545": [
        {
            "ioc_value": "usa-us-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:31:19",
            "last_seen_utc": "2026-08-13 09:32:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873544": [
        {
            "ioc_value": "usen-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:29:47",
            "last_seen_utc": "2026-08-13 09:30:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873543": [
        {
            "ioc_value": "opwvak.usa-us-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:22:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873541": [
        {
            "ioc_value": "tqgyfdh.us-en--nervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873539": [
        {
            "ioc_value": "us-ennervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:16:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873537": [
        {
            "ioc_value": "istounscnnd.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:09:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873538": [
        {
            "ioc_value": "mstclaudens.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:09:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873536": [
        {
            "ioc_value": "118.107.9.161:1112",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 09:06:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3a0ee05966e9cf4bf33ed736a8e519ee121a2d79b493f5206c9023804ef840f4/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873535": [
        {
            "ioc_value": "68.64.182.169:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873533": [
        {
            "ioc_value": "159.75.123.199:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873534": [
        {
            "ioc_value": "192.25.102.246:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-13 09:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873532": [
        {
            "ioc_value": "njnaqa.usa-usa-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 09:01:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873530": [
        {
            "ioc_value": "118.107.9.161:1113",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 09:00:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873529": [
        {
            "ioc_value": "usa-usa-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:59:38",
            "last_seen_utc": "2026-08-13 09:00:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873528": [
        {
            "ioc_value": "phgxuul.us-en--keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:56:50",
            "last_seen_utc": "2026-08-13 08:56:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873527": [
        {
            "ioc_value": "us-enkeyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:56:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873526": [
        {
            "ioc_value": "ongxxt.us-audizenn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:50:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873524": [
        {
            "ioc_value": "hhywcqm.us-eng-us-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:48:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873525": [
        {
            "ioc_value": "us-audizenn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:48:02",
            "last_seen_utc": "2026-08-13 08:48:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873523": [
        {
            "ioc_value": "216.250.249.188:62520",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-13 08:47:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2991abe51ce69b3b9737bfab89f6c46f993d80c0c05305dfd134171fb237ef37/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873521": [
        {
            "ioc_value": "us-eng-us-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:45:57",
            "last_seen_utc": "2026-08-13 08:46:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873520": [
        {
            "ioc_value": "smurab.usa-tinnitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:32:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873449": [
        {
            "ioc_value": "http://190.196.253.117:11933/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-13 08:30:47",
            "last_seen_utc": "2026-08-25 00:20:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/190.196.253.117",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873451": [
        {
            "ioc_value": "35bf80f0af528d458d53a7f7179e0ae284d6fb2be613bab904b8fe115e730b0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-13 08:30:47",
            "last_seen_utc": "2026-08-25 00:20:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/154.90.70.23",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873450": [
        {
            "ioc_value": "http://154.90.70.23/x86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-13 08:30:46",
            "last_seen_utc": "2026-08-25 00:20:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/154.90.70.23",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873464": [
        {
            "ioc_value": "https://validationreq.top/i-MXpmecIOMmvf/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 08:30:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "phishing,tg.pe",
            "anonymous": 0,
            "reporter": "tgpe"
        }
    ],
    "1873485": [
        {
            "ioc_value": "27.124.38.42:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "vbs.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified VBS 001",
            "first_seen_utc": "2026-08-13 08:30:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://www.microsoft.com/en-us/security/blog/2026/03/31/whatsapp-malware-campaign-delivers-vbs-payloads-msi-backdoors/",
            "tags": "c2,fake-bank-statement,ManageEngine,rmm-abuse,UEMS,vbs",
            "anonymous": 0,
            "reporter": "Jeffx109"
        }
    ],
    "1873486": [
        {
            "ioc_value": "134.122.136.2:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "vbs.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified VBS 001",
            "first_seen_utc": "2026-08-13 08:30:44",
            "last_seen_utc": "2026-08-26 17:29:16",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://www.microsoft.com/en-us/security/blog/2026/03/31/whatsapp-malware-campaign-delivers-vbs-payloads-msi-backdoors/",
            "tags": "c2,fake-bank-statement,ManageEngine,rmm-abuse,UEMS,vbs",
            "anonymous": 0,
            "reporter": "Jeffx109"
        }
    ],
    "1873487": [
        {
            "ioc_value": "bbs.baoxissde.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "vbs.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified VBS 001",
            "first_seen_utc": "2026-08-13 08:30:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://securelist.com/whatsapp-vbs-rmm-campaign/120290/",
            "tags": "fake-bank-statement,phishing,rmm-abuse,vbs",
            "anonymous": 0,
            "reporter": "Jeffx109"
        }
    ],
    "1873488": [
        {
            "ioc_value": "bbs.laokwmsde.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "vbs.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified VBS 001",
            "first_seen_utc": "2026-08-13 08:30:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://securelist.com/whatsapp-vbs-rmm-campaign/120290/",
            "tags": "fake-bank-statement,phishing,rmm-abuse,vbs",
            "anonymous": 0,
            "reporter": "Jeffx109"
        }
    ],
    "1873489": [
        {
            "ioc_value": "rukeyou.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "vbs.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified VBS 001",
            "first_seen_utc": "2026-08-13 08:30:43",
            "last_seen_utc": "2026-08-13 07:29:11",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://securelist.com/whatsapp-vbs-rmm-campaign/120290/",
            "tags": "fake-bank-statement,phishing,rmm-abuse,vbs",
            "anonymous": 0,
            "reporter": "Jeffx109"
        }
    ],
    "1873490": [
        {
            "ioc_value": "varzcommunity.abrdns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "vbs.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified VBS 001",
            "first_seen_utc": "2026-08-13 08:30:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://securelist.com/whatsapp-vbs-rmm-campaign/120290/",
            "tags": "fake-bank-statement,phishing,rmm-abuse,vbs",
            "anonymous": 0,
            "reporter": "Jeffx109"
        }
    ],
    "1873494": [
        {
            "ioc_value": "mbcasesores.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 08:30:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://www.joesandbox.com/analysis/1957293/0/html",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "Hellstorm"
        }
    ],
    "1873495": [
        {
            "ioc_value": "https://mbcasesores.com/tap/BBVA_pdf.zip",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-13 08:30:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://www.joesandbox.com/analysis/1957293/0/html",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "Hellstorm"
        }
    ],
    "1873504": [
        {
            "ioc_value": "http://91.92.34.11/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-13 08:30:34",
            "last_seen_utc": "2026-09-01 03:11:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,flka,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873510": [
        {
            "ioc_value": "trainingforwarriors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 08:30:33",
            "last_seen_utc": "2026-08-18 23:43:24",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7604",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1873519": [
        {
            "ioc_value": "68.64.183.127:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 08:29:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873518": [
        {
            "ioc_value": "68.64.183.127:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 08:29:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873517": [
        {
            "ioc_value": "139.196.217.227:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 08:29:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873516": [
        {
            "ioc_value": "xmpxsvb.usa-us-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:28:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873515": [
        {
            "ioc_value": "usa-tinnitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 08:27:33",
            "last_seen_utc": "2026-08-13 08:28:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873512": [
        {
            "ioc_value": "http://mrlketo.shop:8932/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 08:13:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873513": [
        {
            "ioc_value": "http://vexdico.shop:8539/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 08:13:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873511": [
        {
            "ioc_value": "http://shkpiva.shop:5627/teams",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 08:13:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873507": [
        {
            "ioc_value": "159.75.123.199:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873508": [
        {
            "ioc_value": "40.160.232.46:4429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873509": [
        {
            "ioc_value": "45.130.147.57:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-13 08:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873506": [
        {
            "ioc_value": "139.196.231.194:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873505": [
        {
            "ioc_value": "https://bc1collection.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 08:00:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bc1collection.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873503": [
        {
            "ioc_value": "kappadocia.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-13 07:59:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1873502": [
        {
            "ioc_value": "y2hs3ri6.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:58:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873501": [
        {
            "ioc_value": "mgogel.synptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:56:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873500": [
        {
            "ioc_value": "yreztzh.usa-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:52:28",
            "last_seen_utc": "2026-08-19 03:20:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873499": [
        {
            "ioc_value": "usa-usgoldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873498": [
        {
            "ioc_value": "elwbwcn.usa-us-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:50:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873497": [
        {
            "ioc_value": "usa-us-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:50:28",
            "last_seen_utc": "2026-08-13 07:51:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873491": [
        {
            "ioc_value": "f7z38ywt.tiroalpaloes.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:31:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873484": [
        {
            "ioc_value": "103.30.7.55:8477",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 07:25:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873483": [
        {
            "ioc_value": "whmakm.synaptigen-usa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:11:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873482": [
        {
            "ioc_value": "vthaoip.get-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 07:05:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873480": [
        {
            "ioc_value": "156.239.47.245:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873481": [
        {
            "ioc_value": "156.239.47.245:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 07:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873478": [
        {
            "ioc_value": "139.196.231.194:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873479": [
        {
            "ioc_value": "139.196.231.194:60000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873477": [
        {
            "ioc_value": "192.30.241.253:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 07:04:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/74849f5d619e6cb8e2e43675dab80f04b789fd765d141c7c8e822113ce0d93e2/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873476": [
        {
            "ioc_value": "maguire.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 07:04:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/74849f5d619e6cb8e2e43675dab80f04b789fd765d141c7c8e822113ce0d93e2/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873475": [
        {
            "ioc_value": "161.248.14.213:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 07:01:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/74dcca1c3b38fc8137d465a304926de895af6de4266235967bd3f6e8483f349e/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873474": [
        {
            "ioc_value": "http://vexdico.shop:8539/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 06:55:44",
            "last_seen_utc": "2026-08-13 08:08:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/246717653bc2ae2e09036bac56c9d79940c652972a73f4c6aa9b925c28cce095/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873473": [
        {
            "ioc_value": "http://shkpiva.shop:5627/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 06:55:41",
            "last_seen_utc": "2026-08-13 08:08:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/246717653bc2ae2e09036bac56c9d79940c652972a73f4c6aa9b925c28cce095/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873472": [
        {
            "ioc_value": "72.62.195.74:8932",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 06:55:40",
            "last_seen_utc": "2026-08-18 17:01:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/246717653bc2ae2e09036bac56c9d79940c652972a73f4c6aa9b925c28cce095/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873471": [
        {
            "ioc_value": "http://mrlketo.shop:8932/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-13 06:55:39",
            "last_seen_utc": "2026-08-13 08:08:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/246717653bc2ae2e09036bac56c9d79940c652972a73f4c6aa9b925c28cce095/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873470": [
        {
            "ioc_value": "161.248.14.213:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-13 06:55:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873469": [
        {
            "ioc_value": "93.152.223.39:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-13 06:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e3fbe466054844db78527a099d11a4e9d12c40a4bd9add4bef9faea10a902eae/",
            "tags": "Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873466": [
        {
            "ioc_value": "196.251.121.59:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c66052e6deca51833f260eeed639d78a7424bb244e9682ae736616d45d342e1c/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873467": [
        {
            "ioc_value": "196.251.121.59:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c66052e6deca51833f260eeed639d78a7424bb244e9682ae736616d45d342e1c/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873468": [
        {
            "ioc_value": "196.251.121.59:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c66052e6deca51833f260eeed639d78a7424bb244e9682ae736616d45d342e1c/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873465": [
        {
            "ioc_value": "2.56.245.239:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-13 06:45:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873462": [
        {
            "ioc_value": "186.224.3.167:7671",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 06:43:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10441b79973377e8ba1bf0fa16919566a7286ecfa771a1530df2d10eaeb3724b/",
            "tags": "DCRAt,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873461": [
        {
            "ioc_value": "azswaz.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 06:43:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10441b79973377e8ba1bf0fa16919566a7286ecfa771a1530df2d10eaeb3724b/",
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873459": [
        {
            "ioc_value": "189.93.202.137:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 06:41:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b6ec4bc228289231f84fbc7330402668cf9d79eaec0f5179148a15ca937c0c7b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873460": [
        {
            "ioc_value": "189.93.202.137:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 06:41:10",
            "last_seen_utc": "2026-08-13 06:41:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b6ec4bc228289231f84fbc7330402668cf9d79eaec0f5179148a15ca937c0c7b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873458": [
        {
            "ioc_value": "rx7brabo.ddns.com.br",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-13 06:41:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b6ec4bc228289231f84fbc7330402668cf9d79eaec0f5179148a15ca937c0c7b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873457": [
        {
            "ioc_value": "flowersvest.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-13 06:39:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873454": [
        {
            "ioc_value": "hpbbvnz.get-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 06:33:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873453": [
        {
            "ioc_value": "wgotxu.suger-mute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 06:25:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873452": [
        {
            "ioc_value": "r5zs3qn0.eng--cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 06:22:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873448": [
        {
            "ioc_value": "139.196.231.194:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 06:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873446": [
        {
            "ioc_value": "156.239.47.245:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873447": [
        {
            "ioc_value": "139.196.231.194:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873445": [
        {
            "ioc_value": "156.239.47.245:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 06:05:06",
            "last_seen_utc": "2026-08-13 08:29:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873444": [
        {
            "ioc_value": "198.199.86.166:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 06:05:05",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873443": [
        {
            "ioc_value": "189.12.226.123:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:56:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e1226a9e171ac22a369ad30520750a7385d2d674997f795e98563a654818b767/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873285": [
        {
            "ioc_value": "crownoasis.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 05:53:18",
            "last_seen_utc": "2026-08-12 21:32:21",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7542",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1873197": [
        {
            "ioc_value": "http://103.174.243.203:54166/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-13 05:53:17",
            "last_seen_utc": "2026-08-25 00:20:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.203",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1873209": [
        {
            "ioc_value": "162.243.240.81:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 05:53:17",
            "last_seen_utc": "2026-08-22 03:36:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873273": [
        {
            "ioc_value": "https://sep.beri303.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-13 05:53:17",
            "last_seen_utc": "2026-08-13 10:36:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aa462c8dcc4d1e29e6e35cbe1cd9ac85,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873288": [
        {
            "ioc_value": "sis.adkfarmerdan.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 05:53:16",
            "last_seen_utc": "2026-08-13 01:33:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1873305": [
        {
            "ioc_value": "38.207.178.195:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 05:53:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873318": [
        {
            "ioc_value": "mpe2000.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 05:53:15",
            "last_seen_utc": "2026-08-15 17:14:56",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7555",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1873326": [
        {
            "ioc_value": "https://botdev.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:53:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873327": [
        {
            "ioc_value": "https://botdev.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:53:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873328": [
        {
            "ioc_value": "https://botdev.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:53:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873329": [
        {
            "ioc_value": "https://botdev.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:53:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873330": [
        {
            "ioc_value": "https://botdev.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:53:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873331": [
        {
            "ioc_value": "botdev.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-13 05:53:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873342": [
        {
            "ioc_value": "198.211.96.18:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-13 05:53:11",
            "last_seen_utc": "2026-08-16 22:45:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873343": [
        {
            "ioc_value": "http://78.17.93.167/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-13 05:53:10",
            "last_seen_utc": "2026-08-27 07:29:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2307,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873345": [
        {
            "ioc_value": "https://cloud-flare-authenticator.link/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-13 05:53:09",
            "last_seen_utc": "2026-08-22 08:24:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,PG,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873344": [
        {
            "ioc_value": "http://144.31.57.92/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-13 05:53:08",
            "last_seen_utc": "2026-08-15 15:08:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "build0,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873347": [
        {
            "ioc_value": "143.92.60.219:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 05:53:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "152194,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1873348": [
        {
            "ioc_value": "68.64.182.169:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-13 05:53:07",
            "last_seen_utc": "2026-08-18 11:56:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "139659,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1873415": [
        {
            "ioc_value": "http://91.202.233.163/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-13 05:53:05",
            "last_seen_utc": "2026-09-01 02:13:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "321LL,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873416": [
        {
            "ioc_value": "https://fbdfsgfwrgerwefew.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-13 05:53:04",
            "last_seen_utc": "2026-09-01 03:38:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,kard,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873433": [
        {
            "ioc_value": "http://185.93.89.72/wget",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 05:53:04",
            "last_seen_utc": "2026-08-21 15:18:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1873437": [
        {
            "ioc_value": "piji.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 05:53:03",
            "last_seen_utc": "2026-08-18 07:23:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7580",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1873442": [
        {
            "ioc_value": "rtpkhff.enus-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 05:45:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873441": [
        {
            "ioc_value": "rofsaw.snaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 05:41:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873440": [
        {
            "ioc_value": "tjdmkxi.eng-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 05:37:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873439": [
        {
            "ioc_value": "ugkcnf.slimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 05:31:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873438": [
        {
            "ioc_value": "qqn5ukah.usen-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 05:30:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873436": [
        {
            "ioc_value": "156.239.47.245:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-13 05:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873435": [
        {
            "ioc_value": "51.38.39.19:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-13 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873434": [
        {
            "ioc_value": "51.38.39.19:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-13 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873431": [
        {
            "ioc_value": "zfabxz.slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 04:52:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873430": [
        {
            "ioc_value": "bhceaaf.eng-sighttfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 04:51:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873429": [
        {
            "ioc_value": "xkhhwp.sliimsound.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 04:51:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873426": [
        {
            "ioc_value": "cdn.deltapress.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-13 04:34:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873423": [
        {
            "ioc_value": "vqevfn.sightfreshusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 04:07:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873422": [
        {
            "ioc_value": "111.229.135.130:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-13 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873421": [
        {
            "ioc_value": "uyfzldi.eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 04:04:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873420": [
        {
            "ioc_value": "dnh8as3q.hyptoburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 03:43:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873419": [
        {
            "ioc_value": "fd4widp1.usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 03:29:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873418": [
        {
            "ioc_value": "yrlkjt.sight--fresh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 03:21:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873417": [
        {
            "ioc_value": "bdfhctm.eng-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 03:19:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873391": [
        {
            "ioc_value": "awtar.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-13 02:44:06",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873366": [
        {
            "ioc_value": "qddgay.sight--fresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 02:35:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873365": [
        {
            "ioc_value": "guioywy.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 02:35:27",
            "last_seen_utc": "2026-08-15 09:43:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873364": [
        {
            "ioc_value": "138.226.236.52:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 02:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873362": [
        {
            "ioc_value": "akxzgu.shop-theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 01:53:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873359": [
        {
            "ioc_value": "dtrzafj.eng--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 01:48:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873356": [
        {
            "ioc_value": "https://bob.adkfarmerdan.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-13 01:36:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873357": [
        {
            "ioc_value": "https://bib.adkfarmerdan.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-13 01:36:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873358": [
        {
            "ioc_value": "https://aaa.akoraofficial.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-13 01:36:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873355": [
        {
            "ioc_value": "https://sis.adkfarmerdan.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-13 01:34:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1873354": [
        {
            "ioc_value": "znqyh3v2.keraissentials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 01:28:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873353": [
        {
            "ioc_value": "f3fbe4cm.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 01:22:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873352": [
        {
            "ioc_value": "xaltvrv.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 01:07:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873351": [
        {
            "ioc_value": "8.134.51.218:8098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-13 01:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873349": [
        {
            "ioc_value": "89.110.91.35:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873350": [
        {
            "ioc_value": "89.110.91.35:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873346": [
        {
            "ioc_value": "wtdqav.shop-slimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 01:04:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873341": [
        {
            "ioc_value": "http://moyaki485g.temp.swtest.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-13 00:45:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873340": [
        {
            "ioc_value": "tteshyn.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 00:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873339": [
        {
            "ioc_value": "megtso.shop-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-13 00:18:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873338": [
        {
            "ioc_value": "89.110.91.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 00:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873337": [
        {
            "ioc_value": "138.226.236.52:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 00:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873336": [
        {
            "ioc_value": "138.226.236.52:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-13 00:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873335": [
        {
            "ioc_value": "120.55.93.58:10092",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 23:46:54",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873334": [
        {
            "ioc_value": "119.45.231.164:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 23:46:53",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873332": [
        {
            "ioc_value": "ainacostaroca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 23:42:24",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873325": [
        {
            "ioc_value": "hdvkjf.getsightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 23:37:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873324": [
        {
            "ioc_value": "oxzes6d2.gut--drops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 23:34:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873322": [
        {
            "ioc_value": "albeikcars.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 23:32:23",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873321": [
        {
            "ioc_value": "wxavzee.en-us-slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 23:31:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873320": [
        {
            "ioc_value": "https://ainacostaroca.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 23:30:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ainacostaroca.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873319": [
        {
            "ioc_value": "8n6qkl83.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 23:28:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873316": [
        {
            "ioc_value": "130.94.30.59:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 23:05:10",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873317": [
        {
            "ioc_value": "138.226.236.52:15112",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 23:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873315": [
        {
            "ioc_value": "185.34.147.33:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 23:05:05",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873312": [
        {
            "ioc_value": "yvjyer.getbraindefender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 22:48:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873311": [
        {
            "ioc_value": "ltpbrwx.en-us-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 22:47:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873310": [
        {
            "ioc_value": "jspoir.getbraindefender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 22:40:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873307": [
        {
            "ioc_value": "http://shkpiva.shop:5627/customers",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 22:40:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873308": [
        {
            "ioc_value": "http://mrlketo.shop:8932/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 22:40:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873309": [
        {
            "ioc_value": "http://vexdico.shop:8539/exports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 22:40:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873306": [
        {
            "ioc_value": "ssclkkv.en-us-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 22:14:53",
            "last_seen_utc": "2026-08-14 14:43:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873304": [
        {
            "ioc_value": "93.152.223.39:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 22:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873302": [
        {
            "ioc_value": "140.143.239.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873303": [
        {
            "ioc_value": "101.42.255.92:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 22:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873300": [
        {
            "ioc_value": "hfqdpl.usa-en-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 21:58:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873299": [
        {
            "ioc_value": "usa-en-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 21:53:25",
            "last_seen_utc": "2026-08-12 21:53:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873297": [
        {
            "ioc_value": "https://apartments-review2138768.sbs/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 21:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/apartments-review2138768.sbs",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873296": [
        {
            "ioc_value": "5dxt5zqn.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 21:28:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873295": [
        {
            "ioc_value": "gnszjls.en-us--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 21:27:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873293": [
        {
            "ioc_value": "galasoft.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 21:12:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873292": [
        {
            "ioc_value": "dhzbii.usa--echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 21:09:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873291": [
        {
            "ioc_value": "usaechoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 21:07:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873290": [
        {
            "ioc_value": "169.58.82.229:25",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873289": [
        {
            "ioc_value": "140.143.239.224:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 21:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873287": [
        {
            "ioc_value": "apartments-review2138768.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 20:52:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873286": [
        {
            "ioc_value": "fosmhvf.en-en-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 20:43:50",
            "last_seen_utc": "2026-08-13 20:25:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873284": [
        {
            "ioc_value": "vbpqhn.usa-audizen-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 20:23:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873283": [
        {
            "ioc_value": "http://zadno.run:4219",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 20:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873282": [
        {
            "ioc_value": "usa-audizen-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 20:22:03",
            "last_seen_utc": "2026-08-12 20:23:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873281": [
        {
            "ioc_value": "jydiadog.eng-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 20:21:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873280": [
        {
            "ioc_value": "https://65.109.35.163",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 20:05:51",
            "last_seen_utc": "2026-08-14 02:53:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/22ed18a454b32a12ea6a10d8f2f93569e2d3fb2c6fa2f317446cfe38dd112fc6/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873279": [
        {
            "ioc_value": "140.143.239.224:1099",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873276": [
        {
            "ioc_value": "https://sep.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 20:05:06",
            "last_seen_utc": "2026-08-13 10:25:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873277": [
        {
            "ioc_value": "140.143.239.224:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873278": [
        {
            "ioc_value": "140.143.239.224:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 20:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873275": [
        {
            "ioc_value": "sep.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 20:05:05",
            "last_seen_utc": "2026-08-13 10:25:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873274": [
        {
            "ioc_value": "sep.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 20:05:04",
            "last_seen_utc": "2026-08-13 10:25:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873272": [
        {
            "ioc_value": "89.110.91.35:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 19:46:45",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873270": [
        {
            "ioc_value": "87.58.201.47:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:46:44",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873271": [
        {
            "ioc_value": "87.58.201.47:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:46:44",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873269": [
        {
            "ioc_value": "87.199.206.169:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 19:46:43",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873268": [
        {
            "ioc_value": "80.76.49.54:2244",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:46:38",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873267": [
        {
            "ioc_value": "65.21.102.4:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 19:46:32",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873266": [
        {
            "ioc_value": "54.54.33.23:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:46:26",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873265": [
        {
            "ioc_value": "46.246.14.7:7049",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:46:19",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873264": [
        {
            "ioc_value": "46.246.14.7:2703",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:46:18",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873263": [
        {
            "ioc_value": "45.221.97.68:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:46:09",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873262": [
        {
            "ioc_value": "inhlpdz.trysynaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:46:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873261": [
        {
            "ioc_value": "44.251.4.9:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:46:03",
            "last_seen_utc": "2026-09-01 02:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873259": [
        {
            "ioc_value": "38.240.57.198:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:45:56",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873260": [
        {
            "ioc_value": "38.240.57.198:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:45:56",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873258": [
        {
            "ioc_value": "3.39.249.68:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 19:45:47",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873257": [
        {
            "ioc_value": "3.122.223.106:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:45:46",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873255": [
        {
            "ioc_value": "23.95.103.215:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:45:44",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873256": [
        {
            "ioc_value": "27.124.17.46:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:45:44",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873254": [
        {
            "ioc_value": "23.148.228.253:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:45:40",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873253": [
        {
            "ioc_value": "217.60.241.247:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:45:37",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873252": [
        {
            "ioc_value": "trysynaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:45:25",
            "last_seen_utc": "2026-08-12 19:46:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873249": [
        {
            "ioc_value": "194.59.30.170:1009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873250": [
        {
            "ioc_value": "194.59.30.170:60",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873251": [
        {
            "ioc_value": "194.59.30.170:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873243": [
        {
            "ioc_value": "185.34.147.32:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873244": [
        {
            "ioc_value": "185.34.147.33:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873245": [
        {
            "ioc_value": "185.34.147.33:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873246": [
        {
            "ioc_value": "185.34.147.34:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873247": [
        {
            "ioc_value": "185.34.147.35:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873248": [
        {
            "ioc_value": "185.34.147.35:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873240": [
        {
            "ioc_value": "185.34.147.31:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873241": [
        {
            "ioc_value": "185.34.147.31:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873242": [
        {
            "ioc_value": "185.34.147.32:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873237": [
        {
            "ioc_value": "183.90.187.196:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:44:18",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873238": [
        {
            "ioc_value": "183.90.187.196:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:44:18",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873239": [
        {
            "ioc_value": "183.90.187.196:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:44:18",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873236": [
        {
            "ioc_value": "182.16.29.36:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:44:17",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873235": [
        {
            "ioc_value": "168.222.251.83:56013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 19:44:01",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873234": [
        {
            "ioc_value": "158.94.208.101:666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:43:53",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873233": [
        {
            "ioc_value": "149.28.121.179:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-12 19:43:41",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873232": [
        {
            "ioc_value": "143.92.61.47:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873231": [
        {
            "ioc_value": "128.90.59.81:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873230": [
        {
            "ioc_value": "117.50.214.216:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:43:23",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873229": [
        {
            "ioc_value": "103.149.91.182:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:43:06",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873227": [
        {
            "ioc_value": "103.117.149.104:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873228": [
        {
            "ioc_value": "103.118.199.85:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-08-12 19:43:04",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873226": [
        {
            "ioc_value": "mstcyi.theslimsplitsmethod.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:38:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873225": [
        {
            "ioc_value": "theslimsplitsmethod.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:36:24",
            "last_seen_utc": "2026-08-12 19:37:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873223": [
        {
            "ioc_value": "6biyu5ds.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:26:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873222": [
        {
            "ioc_value": "2ky85g4j.goldalignn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873220": [
        {
            "ioc_value": "159.75.123.199:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873221": [
        {
            "ioc_value": "159.75.123.199:13306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 19:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873218": [
        {
            "ioc_value": "159.75.123.199:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873219": [
        {
            "ioc_value": "159.75.123.199:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873217": [
        {
            "ioc_value": "159.75.123.199:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 19:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873216": [
        {
            "ioc_value": "unwoeue.try-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 19:02:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873215": [
        {
            "ioc_value": "try-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:59:53",
            "last_seen_utc": "2026-08-12 19:00:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873214": [
        {
            "ioc_value": "vtniqu.theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:52:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873213": [
        {
            "ioc_value": "development.leandro.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-12 18:47:38",
            "last_seen_utc": "2026-08-12 18:47:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1873212": [
        {
            "ioc_value": "207.148.69.96:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:39:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873211": [
        {
            "ioc_value": "45.77.171.8:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:39:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873210": [
        {
            "ioc_value": "149.28.134.163:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:39:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873208": [
        {
            "ioc_value": "45.76.190.27:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:23:34",
            "last_seen_utc": "2026-08-12 18:40:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873207": [
        {
            "ioc_value": "207.148.122.188:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:23:31",
            "last_seen_utc": "2026-08-12 18:39:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873206": [
        {
            "ioc_value": "207.148.71.46:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:23:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873205": [
        {
            "ioc_value": "149.28.152.182:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:22:58",
            "last_seen_utc": "2026-08-12 18:39:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873204": [
        {
            "ioc_value": "149.28.148.248:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:22:56",
            "last_seen_utc": "2026-08-12 18:39:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873203": [
        {
            "ioc_value": "45.76.146.20:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:22:54",
            "last_seen_utc": "2026-08-12 18:39:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873202": [
        {
            "ioc_value": "139.180.130.81:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 18:22:48",
            "last_seen_utc": "2026-08-12 18:39:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873196": [
        {
            "ioc_value": "rjyqxdx.tinnitraul.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:16:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873195": [
        {
            "ioc_value": "tinnitraul.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:14:22",
            "last_seen_utc": "2026-08-12 18:14:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873193": [
        {
            "ioc_value": "debouche.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:12:11",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873192": [
        {
            "ioc_value": "ongjaz.theslimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:05:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873191": [
        {
            "ioc_value": "theslimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 18:05:22",
            "last_seen_utc": "2026-08-17 23:13:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873076": [
        {
            "ioc_value": "http://192.162.199.249/tzb10mmujurn",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873077": [
        {
            "ioc_value": "http://192.162.199.249/y6b3fuzj0w6pt97e",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873078": [
        {
            "ioc_value": "http://192.162.199.249/8w6vq50fsu",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873079": [
        {
            "ioc_value": "http://192.162.199.249/8jot5vdohds0imt4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873080": [
        {
            "ioc_value": "http://192.162.199.249/1edjop4tlj2d",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873081": [
        {
            "ioc_value": "http://192.162.199.249/zeb8cgwmkkpvu7pc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873082": [
        {
            "ioc_value": "http://192.162.199.249/ezaenul9",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873083": [
        {
            "ioc_value": "http://192.162.199.249/1vo6lm4y50k3ww0f",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,curl-bash,Gatekeeper-bypass,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873084": [
        {
            "ioc_value": "192.162.199.249:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "AMOS,AS214351,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873085": [
        {
            "ioc_value": "275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-12 17:32:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "adhoc-signed,AMOS,MachO,macOS",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873086": [
        {
            "ioc_value": "60ac3f2f287731e26eefd1b8d78b26549cd0abaa7521a80ebeb1435b2b84313c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "Electron,NSIS,packed,selfsigned",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873087": [
        {
            "ioc_value": "131ef9dcfd4fd0eb043c96aec544bbafe05916bf29105e679bc884c8d9a6baa3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "Electron,NSIS,packed,selfsigned",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873088": [
        {
            "ioc_value": "30762af09dad8d49540eae37af67ef21ac95842db9c766ce9650208813c1d014",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "Electron,NSIS,packed,selfsigned",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873089": [
        {
            "ioc_value": "e36f3cf3ed7ab2fe4bafe6629603615d6e091ba31b7a0ebe6cddd5649fbc6ca2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5d/",
            "tags": "Defender,DLL-sideloading,Go,MpCmdRun",
            "anonymous": 0,
            "reporter": "Ozzxuu"
        }
    ],
    "1873099": [
        {
            "ioc_value": "bob.adkfarmerdan.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:32:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1873100": [
        {
            "ioc_value": "corralos.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:32:28",
            "last_seen_utc": "2026-08-14 10:07:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873101": [
        {
            "ioc_value": "https://corralos.beer/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:32:27",
            "last_seen_utc": "2026-08-12 16:10:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873102": [
        {
            "ioc_value": "https://corralos.beer/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:32:26",
            "last_seen_utc": "2026-08-12 16:10:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873103": [
        {
            "ioc_value": "hightpi121.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873104": [
        {
            "ioc_value": "https://hightpi121.xyz/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873105": [
        {
            "ioc_value": "https://hightpi121.xyz/t.188cfd3975db.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873106": [
        {
            "ioc_value": "https://hightpi121.xyz/ext-b.f09b51201f23.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873107": [
        {
            "ioc_value": "https://hightpi121.xyz/ext.6dfae3398f34.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873108": [
        {
            "ioc_value": "62.60.156.132:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873114": [
        {
            "ioc_value": "31.77.227.121:18129",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6226892efe162b50777d27ff9c8960676c81fdd9e8069b20e4065955e8f1bcb6/",
            "tags": "honeypot,iot,sentinel",
            "anonymous": 0,
            "reporter": "abuserobot66609"
        }
    ],
    "1873118": [
        {
            "ioc_value": "material813.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873119": [
        {
            "ioc_value": "https://material813.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873120": [
        {
            "ioc_value": "https://material813.icu/t.188cfd3975db.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873122": [
        {
            "ioc_value": "https://material813.icu/ext.6dfae3398f34.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873121": [
        {
            "ioc_value": "https://material813.icu/ext-b.f09b51201f23.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873137": [
        {
            "ioc_value": "94.154.43.76:1312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-12 17:32:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1873123": [
        {
            "ioc_value": "185.173.147.10:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873138": [
        {
            "ioc_value": "68.183.221.133:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 17:32:14",
            "last_seen_utc": "2026-08-21 16:00:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873147": [
        {
            "ioc_value": "http://160.20.109.16/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 17:32:13",
            "last_seen_utc": "2026-08-27 07:29:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "bot2,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873148": [
        {
            "ioc_value": "http://95.135.181.73/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 17:32:12",
            "last_seen_utc": "2026-09-01 03:30:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,Mewwski,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873149": [
        {
            "ioc_value": "http://178.16.52.90/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 17:32:12",
            "last_seen_utc": "2026-08-27 07:29:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,Private,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873150": [
        {
            "ioc_value": "http://160.20.109.33/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 17:32:11",
            "last_seen_utc": "2026-08-27 07:29:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,tratata3",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873151": [
        {
            "ioc_value": "http://94.103.88.121/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 17:32:10",
            "last_seen_utc": "2026-08-27 07:29:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,MIX,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873152": [
        {
            "ioc_value": "http://91.92.242.73/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 17:32:09",
            "last_seen_utc": "2026-08-27 07:29:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,default,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1873155": [
        {
            "ioc_value": "https://corralos.beer/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:32:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873178": [
        {
            "ioc_value": "ef6b626051621f4788aa2be643c614a1e89ceaa82d2a6781fc046291c34cfc9d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "injector,loader,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873177": [
        {
            "ioc_value": "https://advanceslibrary.com/os",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "injector,loader,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873173": [
        {
            "ioc_value": "207.189.4.110:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remotecontrolclient",
            "malware_alias": "remotecontrolclient",
            "malware_printable": "RemoteControl",
            "first_seen_utc": "2026-08-12 17:32:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ScreenConnectRAT",
            "anonymous": 0,
            "reporter": "kirkderp"
        }
    ],
    "1873165": [
        {
            "ioc_value": "easygrillkit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7518",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1873158": [
        {
            "ioc_value": "c835ba84a93d89e0e29fc5a9992a553f3710ed4e40ccaf2c8baba63a24bb23d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:32:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "injector,TDS,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873157": [
        {
            "ioc_value": "dcf2ad62f04a113ad4fb9e92bea45597badc76b6fdfe9a666829dc9186551651",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "injector,TDS,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873069": [
        {
            "ioc_value": "bib.adkfarmerdan.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:31:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1873057": [
        {
            "ioc_value": "185.173.147.153:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873058": [
        {
            "ioc_value": "185.173.147.241:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873042": [
        {
            "ioc_value": "https://productpi121.icu/ext.6dfae3398f34.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873041": [
        {
            "ioc_value": "https://productpi121.icu/ext-b.f09b51201f23.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873040": [
        {
            "ioc_value": "https://productpi121.icu/t.188cfd3975db.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873039": [
        {
            "ioc_value": "https://productpi121.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873038": [
        {
            "ioc_value": "productpi121.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873037": [
        {
            "ioc_value": "https://herndndes.beer/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:31:34",
            "last_seen_utc": "2026-08-12 17:08:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873036": [
        {
            "ioc_value": "https://herndndes.beer/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:31:33",
            "last_seen_utc": "2026-08-12 17:08:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873035": [
        {
            "ioc_value": "herndndes.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 17:31:31",
            "last_seen_utc": "2026-08-13 19:09:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1873025": [
        {
            "ioc_value": "http://144.16.21.212:38553/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-12 17:31:29",
            "last_seen_utc": "2026-08-25 00:20:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.16.21.212",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872750": [
        {
            "ioc_value": "89.19.223.68:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 17:31:28",
            "last_seen_utc": "2026-08-22 22:03:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872733": [
        {
            "ioc_value": "89.19.223.68:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 17:31:27",
            "last_seen_utc": "2026-08-19 13:41:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872742": [
        {
            "ioc_value": "165.245.178.39:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 17:31:27",
            "last_seen_utc": "2026-08-13 07:43:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872727": [
        {
            "ioc_value": "aaa.akoraofficial.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:31:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1873188": [
        {
            "ioc_value": "https://vimcolors.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vimcolors.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873189": [
        {
            "ioc_value": "https://lalalapiano.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 17:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lalalapiano.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873187": [
        {
            "ioc_value": "yefwbcb.tinitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:29:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873186": [
        {
            "ioc_value": "tcqfcrlt.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:29:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873185": [
        {
            "ioc_value": "tinitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:28:54",
            "last_seen_utc": "2026-08-12 17:30:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873182": [
        {
            "ioc_value": "indiaeveryday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:22:09",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873180": [
        {
            "ioc_value": "ujimfy.tharafemme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:21:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873179": [
        {
            "ioc_value": "tharafemme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:19:51",
            "last_seen_utc": "2026-08-12 17:20:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873175": [
        {
            "ioc_value": "lalalapiano.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:12:08",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873172": [
        {
            "ioc_value": "xcvqqdw.thyraafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:08:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873171": [
        {
            "ioc_value": "thyraafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:03:21",
            "last_seen_utc": "2026-08-13 00:50:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873170": [
        {
            "ioc_value": "vimcolors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 17:02:07",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873168": [
        {
            "ioc_value": "ljnnay.synptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 16:35:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873167": [
        {
            "ioc_value": "synptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 16:34:24",
            "last_seen_utc": "2026-08-13 07:55:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873166": [
        {
            "ioc_value": "https://37.27.134.32",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 16:31:08",
            "last_seen_utc": "2026-08-13 15:27:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a7c488a8491dbe9dc2869ea788e486e8edbaec1ca934c717af399556ddceb7bf/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873164": [
        {
            "ioc_value": "qiziytn.theultimateoutlet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 16:23:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873163": [
        {
            "ioc_value": "theultimateoutlet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 16:18:00",
            "last_seen_utc": "2026-08-14 03:35:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873162": [
        {
            "ioc_value": "https://gii.beri303.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 16:15:05",
            "last_seen_utc": "2026-08-12 19:59:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873159": [
        {
            "ioc_value": "loadfilerun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-12 16:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "FakeDownload,PPI,Traffer",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1873160": [
        {
            "ioc_value": "mirolsoftstm.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-12 16:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "FakeDownload,PPI,Traffer",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1873161": [
        {
            "ioc_value": "gii.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 16:15:04",
            "last_seen_utc": "2026-08-12 19:26:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873154": [
        {
            "ioc_value": "103.140.154.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873153": [
        {
            "ioc_value": "47.254.73.23:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 16:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873146": [
        {
            "ioc_value": "https://gii.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 15:55:06",
            "last_seen_utc": "2026-08-12 19:26:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873143": [
        {
            "ioc_value": "pii.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 15:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873144": [
        {
            "ioc_value": "https://pii.beri303.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 15:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873145": [
        {
            "ioc_value": "gii.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 15:55:05",
            "last_seen_utc": "2026-08-12 19:26:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1873142": [
        {
            "ioc_value": "wqziqz.synaptigen-usa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:54:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873141": [
        {
            "ioc_value": "synaptigen-usa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:49:00",
            "last_seen_utc": "2026-08-13 07:09:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873139": [
        {
            "ioc_value": "http://shkpiva.shop:5627/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 15:47:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873140": [
        {
            "ioc_value": "http://tokjoza.shop:5200/articles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 15:47:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1873136": [
        {
            "ioc_value": "chuhrhh.theslimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873135": [
        {
            "ioc_value": "theslimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:31:31",
            "last_seen_utc": "2026-08-13 08:25:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873134": [
        {
            "ioc_value": "qjyrjxka.eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:27:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873133": [
        {
            "ioc_value": "oltxiw5v.eng-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:22:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873131": [
        {
            "ioc_value": "y7i9zpf0.go-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:10:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873130": [
        {
            "ioc_value": "103.140.154.7:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873129": [
        {
            "ioc_value": "103.140.154.7:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873128": [
        {
            "ioc_value": "zrmihx.sugermut.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 15:03:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873124": [
        {
            "ioc_value": "sugermut.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:58:21",
            "last_seen_utc": "2026-08-12 14:59:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873117": [
        {
            "ioc_value": "files.cachematrix.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-12 14:45:36",
            "last_seen_utc": "2026-08-14 10:33:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873116": [
        {
            "ioc_value": "hdagdyy.slimsplitsmethod.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:38:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873115": [
        {
            "ioc_value": "slimsplitsmethod.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:33:29",
            "last_seen_utc": "2026-08-13 05:37:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873113": [
        {
            "ioc_value": "bob.adkfarmerdan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 14:15:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873112": [
        {
            "ioc_value": "bleakhaven.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-12 14:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873111": [
        {
            "ioc_value": "ldebgt.suger-mute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873109": [
        {
            "ioc_value": "haskgfdslsla995djk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-12 14:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873110": [
        {
            "ioc_value": "imagesafephoto.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-12 14:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873098": [
        {
            "ioc_value": "suger-mute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:07:48",
            "last_seen_utc": "2026-08-13 06:24:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873097": [
        {
            "ioc_value": "libwfze.slimsplitsmethod.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:07:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873096": [
        {
            "ioc_value": "slimsplitsmethod.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:06:49",
            "last_seen_utc": "2026-08-13 05:36:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873095": [
        {
            "ioc_value": "194.59.30.105:9619",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-12 14:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "quasarrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873094": [
        {
            "ioc_value": "134.122.140.110:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 14:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873093": [
        {
            "ioc_value": "65.21.102.4:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873092": [
        {
            "ioc_value": "halongjunkcruise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 14:00:35",
            "last_seen_utc": "2026-08-25 16:30:19",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873075": [
        {
            "ioc_value": "bib.adkfarmerdan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 13:51:07",
            "last_seen_utc": "2026-08-12 14:15:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873070": [
        {
            "ioc_value": "duxnluh.slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 13:34:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873068": [
        {
            "ioc_value": "https://jackdohertycontracting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 13:31:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jackdohertycontracting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1873067": [
        {
            "ioc_value": "q3rir44c.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 13:27:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873066": [
        {
            "ioc_value": "112.213.110.210:441",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 13:26:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bcb6b3adcb435fd804e1b791bb687573b7df2e8f5c08517e0b4de9d4f3b9776/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873062": [
        {
            "ioc_value": "85.208.84.35:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-08-12 13:21:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHide,NetSupport",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873061": [
        {
            "ioc_value": "https://mysite2-1iz.pages.dev/index/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-08-12 13:21:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHide,NetSupport",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873060": [
        {
            "ioc_value": "uwasin.sugarmuite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 13:18:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873059": [
        {
            "ioc_value": "sugarmuite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 13:17:20",
            "last_seen_utc": "2026-08-12 13:17:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873033": [
        {
            "ioc_value": "cloud-flare-authenticator.link",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 13:05:17",
            "last_seen_utc": "2026-08-27 07:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/",
            "tags": "StealC",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873034": [
        {
            "ioc_value": "cloud-flare-authenticator.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 13:05:17",
            "last_seen_utc": "2026-08-27 07:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/",
            "tags": "StealC",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1873032": [
        {
            "ioc_value": "185.100.87.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 13:05:08",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873031": [
        {
            "ioc_value": "158.94.208.101:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873030": [
        {
            "ioc_value": "65.21.102.4:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 13:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873029": [
        {
            "ioc_value": "ygswcfd.sight--fresh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 12:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873027": [
        {
            "ioc_value": "sightfresh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 12:51:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1873026": [
        {
            "ioc_value": "axifkc.snaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 12:27:35",
            "last_seen_utc": "2026-08-18 13:16:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873024": [
        {
            "ioc_value": "uudoulafveuizhxzpz.en-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 12:08:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873023": [
        {
            "ioc_value": "doglyld.sight-fresh.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 12:06:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873019": [
        {
            "ioc_value": "65.21.102.4:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 12:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873018": [
        {
            "ioc_value": "185.100.87.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 12:05:06",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1873017": [
        {
            "ioc_value": "35ac7fd4f6a4a0c5205bc8ded0e95e8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873015": [
        {
            "ioc_value": "53189d7078ad0dafd0839c7abae6e7341fa231534d7679d55b4eb926a815f9e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873016": [
        {
            "ioc_value": "9a3663d69557c443d7b9a78d56e17a5a9c2c52fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873013": [
        {
            "ioc_value": "50b31d5497e5ddfc759cbd45e0fe1e3e65206e14",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-12 12:02:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873014": [
        {
            "ioc_value": "9d8769b7f24569f7354e9e02edb7da70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-12 12:02:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873011": [
        {
            "ioc_value": "30775e2858200f6e4c8fe45afd8a9668",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873012": [
        {
            "ioc_value": "9ad28b6bfe14bc39c7d39dcd8a14bc8de2bc82440bf987195282cd8da6b01e21",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-12 12:02:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873009": [
        {
            "ioc_value": "517911f9c99ca4a108b8ef55a7ebb146df64115645c11a414acfa12e7ef13d21",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873010": [
        {
            "ioc_value": "bd303a671cea5856574bd25e00abb2e66ffb4cea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873007": [
        {
            "ioc_value": "6e0b578df775a68eb99ec013b51f79500a185fdf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873008": [
        {
            "ioc_value": "e0c8055d7614d54fbd58c39fec94bfb9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873005": [
        {
            "ioc_value": "954a464ea9f549bb6b8d981bf74975a4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873006": [
        {
            "ioc_value": "ca69ffee2100206195db76e46b62110ac0c24f00b4a6a747f3cdf23f7349e3f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873003": [
        {
            "ioc_value": "caf81d3443e34f121fc641ac93d9d6e68e12ed08e365a222000ed1d81aa52bbd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873004": [
        {
            "ioc_value": "66fb5130e6f32a59681a051c294f81fa1fde783f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873001": [
        {
            "ioc_value": "1e52acbf413bc8f0f50f83a82678369e2a9089c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873002": [
        {
            "ioc_value": "a26ba6f15c730b9d942e53402fd6b5f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872998": [
        {
            "ioc_value": "50e8a8ab26190bb07c7c52176e3bb141f56c7703",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872999": [
        {
            "ioc_value": "b1067b88b5df6604a5d44ba996eed92c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1873000": [
        {
            "ioc_value": "fd977ee7a791e0145dbbda2063bed367ab71645e8778d7411a5df87f72342a32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872996": [
        {
            "ioc_value": "f7ee44b6744bec701d3079bb9b9a0a39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872997": [
        {
            "ioc_value": "3d07d921b00676d9fbb42130d30aa697917edfab1108e91c935abf11e7194302",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872994": [
        {
            "ioc_value": "22ef34056565ee2b894e77884d2d8abc160035e8be205beb0c9bcd627a6e5ee4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872995": [
        {
            "ioc_value": "6fe47b3afa82a7a96e0991a12059422b0e0014f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872992": [
        {
            "ioc_value": "dac520fec1cdcf559bacbf00f10c1a3a29d84de0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872993": [
        {
            "ioc_value": "9623eed7395d431ba8f0caf6ff0aa6b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872989": [
        {
            "ioc_value": "c1fb2aba9826930dfc6614c289add82675bde5e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:02:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872990": [
        {
            "ioc_value": "a80b168e8c58817e8a6bc21d0beab517",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:02:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872991": [
        {
            "ioc_value": "6fc1a755028e6cf2d7e30daff9fde36bed33bf0aa58ecf2c2172e1f4726888b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872987": [
        {
            "ioc_value": "dcc197be262948075fc309eefde4269a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872988": [
        {
            "ioc_value": "b47388d22151e585b1df5daaa085c7bce422fb4741090c54138eb74e847e80a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:02:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872985": [
        {
            "ioc_value": "7d836ba56c3d4e885d9afb613d48b508f116ca088b08d16778fc96f0ecfcbfaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872986": [
        {
            "ioc_value": "b72ae7a2207232c05b7bec9bf0ea52d1220207e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872983": [
        {
            "ioc_value": "c4c30892e9c6c612a45e1c76314f253c881f74e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872984": [
        {
            "ioc_value": "f8c9a1475fd00ddd2313a375d949bd5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872981": [
        {
            "ioc_value": "026cb64a22896b8dedda15d09743ef85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872982": [
        {
            "ioc_value": "a65817e195fcd10747c660a095477db65d317dcf1123c4a66b5b911765522f73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872980": [
        {
            "ioc_value": "4f9921b0c3dee76fd6208433735ec1047273da12",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872978": [
        {
            "ioc_value": "18758ab8f3baf84b20fe9cfff999afae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872979": [
        {
            "ioc_value": "db82d2e981b520a41d5b37fba7923eb3f10f4f9cec14cfb15578735cafed7fa6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872977": [
        {
            "ioc_value": "6e6e1b7b834b3c76f4f80a62b9c9579daeac2b93",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872974": [
        {
            "ioc_value": "45955ae6fb1ea88032c3b79281b893b627d86c53",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872975": [
        {
            "ioc_value": "c47bc35c5156c22e8fd944390145f3f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872976": [
        {
            "ioc_value": "0418670d867ae2d6481d618a1cd049c43649b834a1c501a817e5c06b3df9601c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872972": [
        {
            "ioc_value": "6e8acc3e0918331488137a328c8c8256",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872973": [
        {
            "ioc_value": "c480d70249e7bf29bf86a39d58045a134cdc9dafd21a01fddace4fc69c64f840",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872971": [
        {
            "ioc_value": "c535aaec5fc835c77cf7df62430cebadbde0af85",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872969": [
        {
            "ioc_value": "cfee3ef154667d22299db2cf0e6e8f6d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872970": [
        {
            "ioc_value": "e82442c4bd6886a8ae8923c05cfdef45ef6c7e19d4ea0710a567f8dc3e776f3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872966": [
        {
            "ioc_value": "a30317a63bcabcdcd88ad41aea168023",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872967": [
        {
            "ioc_value": "dad6eef7282e870027c65af61f7389e12288667efc28625deda908fc08da382c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872968": [
        {
            "ioc_value": "9fdc93ae90c77a3db83de9355beb0a5670dc5a27",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872965": [
        {
            "ioc_value": "cd9be540ca24d38ddb9d9cd04bcec094cb1e91dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872963": [
        {
            "ioc_value": "a997de65fee3d2660eda9946471f3b8c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872964": [
        {
            "ioc_value": "32c46219516fbeed17522e969fba3fd16639199160f039bdcfdcc839ed97d9d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872961": [
        {
            "ioc_value": "ee9330cbe7289c6c848cc7736069c9358d24dbef1e294689e6fdb0e9b3d0aba1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872962": [
        {
            "ioc_value": "f7e1a72ec337d5a8562ff45d264c05e4f0cbe3e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:02:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872959": [
        {
            "ioc_value": "38242a0fa76e5bff05cce7b54e4c3baca1dec492",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872960": [
        {
            "ioc_value": "89e8137110409d4b4e369118a4c7a759",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872957": [
        {
            "ioc_value": "bc652b3daee51fb12d20243fb85d9e94",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872958": [
        {
            "ioc_value": "99732f63e949eeffceb1c2a5022e77626a2bee6684dbddd31c759129feb3a5c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872956": [
        {
            "ioc_value": "613d4396572c426e3fe28ca42372a30edfe758fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872954": [
        {
            "ioc_value": "f240fcd6045c4ed504dc40ca77e4ed1e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872955": [
        {
            "ioc_value": "26f5a04d5b0650e00ee0dd74ba85c4915b3465d0b280e9d66418aead8c375a70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872953": [
        {
            "ioc_value": "d576cfdc5172c81978fc5a3c764b9af0b3aa8ebb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872951": [
        {
            "ioc_value": "c35237f4e5e0b03127dc0024ea6c8dd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872952": [
        {
            "ioc_value": "c9fd6c006c7833acb5417db9a98823bd6e7836339a8485b8e0a9f6e156793530",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872950": [
        {
            "ioc_value": "c7596c0f6aa7a2f695cef5125986f333df29d02f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872947": [
        {
            "ioc_value": "d48ca27c5b94752bc215829ce1329022785dc743",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872948": [
        {
            "ioc_value": "e38d1678928c12ca030390d295abf193",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872949": [
        {
            "ioc_value": "0261a9267c0c14bc8b0d0a65cd98431d7129887340458ec434764d59db8e4aff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872944": [
        {
            "ioc_value": "d7f71d84bb851d03172cf15f525a30dbdb8f4c73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872945": [
        {
            "ioc_value": "e2fbe4259663915ce9a8130953e62c5f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872946": [
        {
            "ioc_value": "8afa292780fe21d583fb6029d8cdf4f6e7463551004d7bb9a48424d0e8913f02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872942": [
        {
            "ioc_value": "5c2acad94a032dfa1f13b7cc6fa873a8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872943": [
        {
            "ioc_value": "3dc3a6d4431ce10cb1d50c7f0693297ab5bc146b48a78dce20e72cdbfec531d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872940": [
        {
            "ioc_value": "79c8aab13928e098a14e926a31d5f0e45b757ec1a16f5719620e143d6247448d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872941": [
        {
            "ioc_value": "22d1f0f0fe484fea263abecb9bd79ae435fc657e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872938": [
        {
            "ioc_value": "fe0591d386048bbb3453ea90e0a8ecfde733ba1e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872939": [
        {
            "ioc_value": "56d5c918136e6c55dd13fababf8d7cd1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872936": [
        {
            "ioc_value": "52250e007686601a8058a81495045d70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872937": [
        {
            "ioc_value": "bfb2f8066b380d622b3b9ce884cf8be789a3ff3dc48409ce13afc522e032ae86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872933": [
        {
            "ioc_value": "9131b67993a758f66691d3caafdd9d92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872934": [
        {
            "ioc_value": "b56178afabae918546daa871cef4e5d735c5a3f6d55ab99057d4399da3524007",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872935": [
        {
            "ioc_value": "2cf644e26dcaaaee054b69254b88558758d958ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872931": [
        {
            "ioc_value": "e218458a55fb3c24b6a57dc0069c5459052346c0b21a7f39f47966ed5b355dab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872932": [
        {
            "ioc_value": "60a0b9dd702cb719b3cf0647d4e25504bf79fd75",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872929": [
        {
            "ioc_value": "fad3f3014767b09a89b7d10babcfade38626d645",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872930": [
        {
            "ioc_value": "8d657dfd97113c1e4dd3a5d5a9c8c6b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872927": [
        {
            "ioc_value": "0e34168d76e3242205e85f7d4cef6b23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872928": [
        {
            "ioc_value": "daf0fc05e9868757403adcaac9c9ad7420c0b03f7a8682cc2de218691c80ae94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872926": [
        {
            "ioc_value": "9108d1ecd23e6a96497c221a10387a316aaeb1a0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872924": [
        {
            "ioc_value": "81c77db27424d8f51e4157c7af628253",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872925": [
        {
            "ioc_value": "a8664ed5c458be8b3a42d74273f16e6311bbf9b2a307896a5074c505cb085090",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872922": [
        {
            "ioc_value": "9bb6fa935cc1606308fae4980d5d880cc76db8e96e5b4f73f7278b93d5433f98",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872923": [
        {
            "ioc_value": "40dd8c9615a8e37afc8b44369f554f9c3669fefc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872920": [
        {
            "ioc_value": "a9fadc699c289be44bb10bacc96e00ccc1fd93f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872921": [
        {
            "ioc_value": "7103319d61b7335a60755933e264c40f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872918": [
        {
            "ioc_value": "9ddf65f2e2ed1525c0f78ed62579efbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872919": [
        {
            "ioc_value": "01770ee7687312bb30ca56990769c8dd527acc9e61956ab40ab5c75216f831dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872916": [
        {
            "ioc_value": "4d505705e19a7ddfc184cf6911536d2449d564ef6afc26b5e91c3ecfd19b080d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872917": [
        {
            "ioc_value": "d7ceca2957e6966b57c1acf10587c6e20b9d3b52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872914": [
        {
            "ioc_value": "31563dffa20cb9bafaf24da903a7beee98d7eea3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872915": [
        {
            "ioc_value": "e246d554ab5d7cbce5f0dd8956d22e40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872913": [
        {
            "ioc_value": "60266c619ae01caa5de17ac6cc8580093a830e1663cd710571542ecb9ca5a872",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872911": [
        {
            "ioc_value": "5d7722b943f00885e36f4753fd1f38c4f27fa413",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872912": [
        {
            "ioc_value": "4d90b1e99d379183f7d5c6d7f4652a60",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872909": [
        {
            "ioc_value": "83c5950a60b559579b88052b0072868f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872910": [
        {
            "ioc_value": "498666399cb1eafb5e8e2998d430ab67bccfa7b511e8bcb6be5011b09548eac4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872908": [
        {
            "ioc_value": "b7cc6e2011a2ed201c231ffd31f7def2fcbda2a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872907": [
        {
            "ioc_value": "0c727b71e15797ea16dc3ff98641b67d5dea0b101965711276a72bc03d2ebec3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872904": [
        {
            "ioc_value": "sight-fresh.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 12:01:29",
            "last_seen_utc": "2026-08-12 12:01:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872905": [
        {
            "ioc_value": "97341651db1f83d99307cc0cb1e6360f19504a2e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872906": [
        {
            "ioc_value": "b0030329a6f1600f4824f6af7624a6da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872902": [
        {
            "ioc_value": "74bfc2510a175a6b8da22aa473d57713",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872903": [
        {
            "ioc_value": "f6e3e77e61728d3700220f335da269a2731255f989fa6e37d132b81f37641c2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872899": [
        {
            "ioc_value": "9a67c9b6e5615f6a2fd61a4fe735ecaf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872900": [
        {
            "ioc_value": "d09dc67d4f9aa40df7d6a5d71b73a2f519e4c4188d2016a51943799eafd28599",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872901": [
        {
            "ioc_value": "f902599ec30dbc1cdea1bdd9fd2dc5c31f72672c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872897": [
        {
            "ioc_value": "d9a1b16e3fc0d328c3d1b79e8fb8ff1dd15846577856506dcb025fb88171e439",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872898": [
        {
            "ioc_value": "131dc47a166732bfa1995ddc8e481885fea011fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872895": [
        {
            "ioc_value": "ef3321a37adf320287c2c0a164ff7ed0d70b0cc3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872896": [
        {
            "ioc_value": "cc8a16c52d504291c9b0786cfcfe9078",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872894": [
        {
            "ioc_value": "4b4a326eb368c79cc941d9c159c8bae64e9f1678eae59a20e57e9a2debd36129",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872892": [
        {
            "ioc_value": "017435042a3734499c3bac9c93e52590e9c0e2ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872893": [
        {
            "ioc_value": "1e84b9aeebe223c59876380b8f27663a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872890": [
        {
            "ioc_value": "1f15b8c3999c5be1ca18960150b6830d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872891": [
        {
            "ioc_value": "a664c20de906022ed15084333d29baef039bb1b3a9eef796c64b9f304a2c8035",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872888": [
        {
            "ioc_value": "796a9204c0800bc08b0b618072a270bb73ce6aa2f2c3c4db693f22c3d4ad4841",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872889": [
        {
            "ioc_value": "fcfa75377c231a869ecd2fdb073e0bf396ea6d8c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872886": [
        {
            "ioc_value": "cfa60c46b9c07fa56bf245a3244fca76db0cabb8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872887": [
        {
            "ioc_value": "4bb01689507867d905f316a8df277f16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872883": [
        {
            "ioc_value": "762e60dbd59195ea952218ede23b730a8f7a1bb3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872884": [
        {
            "ioc_value": "26a023345c27a0a1d6ebc732a11e1368",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872885": [
        {
            "ioc_value": "e11d220af1f2fde5655d2523207a96be7fc286ef5080f1dd88b3e2db47172cd8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872881": [
        {
            "ioc_value": "04b118addc210113bd78f19b701a4efe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872882": [
        {
            "ioc_value": "85580c4a570daf046f0ac5dd88b5123af2acce5e30ed3afcf29001e8b963fd75",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872880": [
        {
            "ioc_value": "ce2bd1f694786d7055b9ea16f7344878c3f99db9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872878": [
        {
            "ioc_value": "f2536902e1aa6038a1ba0da46036fe2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872879": [
        {
            "ioc_value": "21f4413a443509325e360665c57c8ec70dbca2bdebc7a877cf677bd002bc492c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872876": [
        {
            "ioc_value": "d506288b76b34497fe3e54d3bf479c25acfaf5e6d44e74a0d56e0079090654c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872877": [
        {
            "ioc_value": "b50f35671649572eb3aaf13510fbc692491e2316",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872874": [
        {
            "ioc_value": "0567c62bb5f1f993fc5f13c61e081b8db685ccdc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872875": [
        {
            "ioc_value": "98dae1e323b9fd9d21bca7dcc735444d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872872": [
        {
            "ioc_value": "22f293d0d9e9f32fbf1269525a2bd427",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872873": [
        {
            "ioc_value": "a7048132a36eb057926831ba711c0884617688a95ce8fb28445e9fcc8a0cc201",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872870": [
        {
            "ioc_value": "a5e57e5a30cad012f4267e792cb3448ecaebc34ab2f1b5f4d086816c01c8c578",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872871": [
        {
            "ioc_value": "3b3fdeb95ab2510f6f047270e5fa2e10a1a77595",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872868": [
        {
            "ioc_value": "e0cb7e2cf5870a1e39540cb10e1fe54ce315d5ca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872869": [
        {
            "ioc_value": "df3cc875c6a7d205c2994161c968a3f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872865": [
        {
            "ioc_value": "a4318b4871de9f5901f6a9f9b71959e9b47c47cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-12 12:01:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872866": [
        {
            "ioc_value": "b03101e840749fea73d3119cdeed8d2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-12 12:01:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872867": [
        {
            "ioc_value": "4595f0908dd60be01fd2892d284ac3cd9bdd11cecfd4b38e3d222b27a5ca3170",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872863": [
        {
            "ioc_value": "291478270cfbc4c66b38ccfcc394b48c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872864": [
        {
            "ioc_value": "b77026879f04bcb5090933292303e6213b9ffb75d0921cac5d8bf5feb9c37191",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-12 12:01:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872861": [
        {
            "ioc_value": "c455c4186d3bc4e56bbca3bfa9d8d8900b15376102f9b201bab7997df3ac1d6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872862": [
        {
            "ioc_value": "6aa09edff8804e224eb28918f9a29cc473999681",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872859": [
        {
            "ioc_value": "f315be75ffb29ae21c01ae9eaff3c746d44a9a16",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872860": [
        {
            "ioc_value": "a9e16613460691f6f90df472a375f824",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872857": [
        {
            "ioc_value": "dedb5ff5853dd865c02f14e698144a80",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872858": [
        {
            "ioc_value": "acb5edae54f3bdb81ea6dba7940e436b6af0cb441d25c7b9710646da779be436",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872855": [
        {
            "ioc_value": "d4fbe4404c277bc058068e55d393688b135ad89a18e128a3300e478f020032fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872856": [
        {
            "ioc_value": "3f4add7b4655797b65a5fbc03199bbf4ed17f928",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872853": [
        {
            "ioc_value": "ba4a5126156520fc1d7e71b8e6151598b492bd5f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 12:01:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872854": [
        {
            "ioc_value": "655bc97584876b110db5e07464af6522",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 12:01:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872851": [
        {
            "ioc_value": "bbbdfed0b5588f27cf2a33b2b68831f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872852": [
        {
            "ioc_value": "80ffaa35ddfdbe219dc67158d1e456d49c8a813bed24b5a882f2f89e0ffe0297",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 12:01:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872850": [
        {
            "ioc_value": "859ec8bbb7dcbea9f846c2937d31ebacd577b136",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872848": [
        {
            "ioc_value": "ee4dbcf84c507d46442237c6bd6b8dba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:01:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872849": [
        {
            "ioc_value": "2056dc51b9861e65ea7098afb60c55219b34d309c0dd9bd235bf85eb76530504",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:01:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872846": [
        {
            "ioc_value": "b7b25004c3bb772500619d0c0c499fa4a138f714bb9dfede4fb5c684051fd3a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872847": [
        {
            "ioc_value": "6f7d95ddb2bdc7a26af4ee3914473e5eaf3342d8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872843": [
        {
            "ioc_value": "4b3154d853dc1b773e983cd7c1650975e9e1d1e9c4a776214b32597a0b0f1623",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872844": [
        {
            "ioc_value": "1007b0fc8f112d5ccb104a7ad145c33b7565a9b0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872845": [
        {
            "ioc_value": "b97390c98669836175aa7af33af45ba0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872842": [
        {
            "ioc_value": "c58cb816123ae729a8b704e971fca4da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872840": [
        {
            "ioc_value": "e3483b9d72df017cd2a7909ecf97b825d69d06e0ec204067c42e4658d91fdf00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872841": [
        {
            "ioc_value": "246702f89a6c11593bf1ac0d2a8965d3d5b4fdb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872838": [
        {
            "ioc_value": "cbdc703ea658ac35e46869a912067a93f90508c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872839": [
        {
            "ioc_value": "035e5276653ae2b45fd21bf44d467e58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872836": [
        {
            "ioc_value": "304daf902af97f8946738a363b14d721",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872837": [
        {
            "ioc_value": "3b6393dc2c7a9db73f7dfdd41edfbafd3ebd1dd31b90230d926c2725f9852c40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872835": [
        {
            "ioc_value": "6286f8598a2c9411cac81670fca173f7d14d32e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872833": [
        {
            "ioc_value": "3236850647855e13e4adf378c0e48ccf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872834": [
        {
            "ioc_value": "754ff67f11cd4f97f43ea7c00b000a593bbc0576550d818b052ac6d34f3cbd1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872832": [
        {
            "ioc_value": "322bc5548d6c4dc2548acc90563d4d894f60eb17",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872830": [
        {
            "ioc_value": "dae850441bbae54486beb48d43db17f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872831": [
        {
            "ioc_value": "9ed376aa28b2263ccba7fd72473d88e7aa5bcce6f3627993d1d74ffe2f98c11e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872829": [
        {
            "ioc_value": "f40d4494dfda63639bed94bf4d5f98d2d5ce5c0d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872827": [
        {
            "ioc_value": "58082a5543e9a04a66a49097c4da851b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-12 12:00:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872828": [
        {
            "ioc_value": "d76b7ea21ef2b421945234bf5b7c19deef9925ced2716678ae66026a67f352c5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872826": [
        {
            "ioc_value": "41ad155598fd9acb0d8c4b72ce9056b48ef9c3de",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-12 12:00:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872824": [
        {
            "ioc_value": "d7318dbc11b8fcd1af10b2a5d2b1c69b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-12 12:00:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872825": [
        {
            "ioc_value": "a83a0ea185e95684a202963b7f4acb40e4e148d670ef149aff96853dc46e16c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-12 12:00:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872822": [
        {
            "ioc_value": "4e8133acc2156fcf66e2ed0a3ced5a239d8e2dc2c4d34e0110f6eafa251f49d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-12 12:00:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872823": [
        {
            "ioc_value": "57453e529fee66e199e897e3fcbe17003eeb3a88",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-12 12:00:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872820": [
        {
            "ioc_value": "aa8337e0f927d381f9d0a1b108c5a7e0cc9e5a7e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 12:00:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872821": [
        {
            "ioc_value": "70a1588593816c6b10d1de3ed58d43cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 12:00:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872818": [
        {
            "ioc_value": "baa11e01313ba4da42f8071d7162ab29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-12 12:00:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872819": [
        {
            "ioc_value": "b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 12:00:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872816": [
        {
            "ioc_value": "ab0cbf4455b5a2a3e392f006bcaf4a4b23aa3628d047c6698ca3b7bdd173f6b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-12 12:00:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872817": [
        {
            "ioc_value": "b144a8f4742d9702d41936b78a1163bc7500b1b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-12 12:00:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872814": [
        {
            "ioc_value": "eeb2522814dfb5772b3e6aad6305b833185ea61e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872815": [
        {
            "ioc_value": "787660a571fe35cec3679726484f5121",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872812": [
        {
            "ioc_value": "dd450cb1b0762f18ac735f2d6ab10a95",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872813": [
        {
            "ioc_value": "df91b4bf1d00298e90ad6f91e8097eaa9ad63596ff00900a23d02d20cafa444d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872811": [
        {
            "ioc_value": "dda9a60a4074fa2fa1c04fb7d38731aee944bde6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872809": [
        {
            "ioc_value": "b7e9ab4228a2899cbdb8f64b4bc49f57",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872810": [
        {
            "ioc_value": "a296390de23c639a034c11e0a71988ddb23f70c22b6c4f5b9c249e2739242c6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872807": [
        {
            "ioc_value": "fa307f25415497d9199129e21d9511cfee130004bfb93d3caced89bb26b5cc88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872808": [
        {
            "ioc_value": "25654123c34e2965b0d8b031405f4e7698d52257",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872806": [
        {
            "ioc_value": "b46947a4f5da3d5b68d5973c834f2cdd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872805": [
        {
            "ioc_value": "bb9c0dcf420b9c45416caecde8ee4f8792e9abbe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872802": [
        {
            "ioc_value": "60fa61f63d58b9307abcce0adcf2cd4d1046f649",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872803": [
        {
            "ioc_value": "f06f0d26b6e12e5ddc77c626c300d91c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872804": [
        {
            "ioc_value": "f6d8426be30c080da3641a4f2e942e5d8c6950c9f76486489bf6074b7f090b34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872800": [
        {
            "ioc_value": "e7323a323da3fcc4acc5c997c14e18ef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872801": [
        {
            "ioc_value": "47f31eceabe0d668833dd83de1bc91e84072d40b9ec23a34e2ed9c6b065abd9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872798": [
        {
            "ioc_value": "bbc8291cac107236e91252435bd604577004a6e9e041772e08d28398ee0e6ac1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872799": [
        {
            "ioc_value": "b281be86388368af09f5bea82fd32a030478be90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872796": [
        {
            "ioc_value": "8dd96cba7d326859de27954d0a0d0aff24b91a33",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872797": [
        {
            "ioc_value": "28ee82bbce56ddfb87ed0cc19114d8de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872794": [
        {
            "ioc_value": "9b3b9059992e8f185f276f3e4b4833d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872795": [
        {
            "ioc_value": "fc9e50e39efbaa09fa433f1b30dea8332593be0b29ea74d5b1bc3150b7865862",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872793": [
        {
            "ioc_value": "20aad6827fdbdd1d702579cf167efab5dbdeb9ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872792": [
        {
            "ioc_value": "fd85311cde8c1da383c8f6ba88bcf79a29487b15c098b523d392e176b8ba8caa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872791": [
        {
            "ioc_value": "ede81706758ec87fb93848ae702a1f51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872790": [
        {
            "ioc_value": "3f5e6f145e861340e19c12fe97adb8ec39d463b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872787": [
        {
            "ioc_value": "165488aa42290c6ec27b2aa5868787bae79b6d5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872788": [
        {
            "ioc_value": "4128b92eacefd3fd7da5955639112951",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872789": [
        {
            "ioc_value": "aac28ced09009cba25fbb4580061a69c7c023c823128b67436d67ea5f2fd8c80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872785": [
        {
            "ioc_value": "7e414de844e2f8084a0265ee1bf549e8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872786": [
        {
            "ioc_value": "fc9de7d194ecc92019960412bbe30dd811824181b6539e796105590e5a174af1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872783": [
        {
            "ioc_value": "88f820c540b2112b12f28ea67f5b31fd299422faa30e7a22bb5ca3f5c55fdaa8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872784": [
        {
            "ioc_value": "906593ffc1808867fbda53f0cfbfb368749487fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872782": [
        {
            "ioc_value": "2b577b0a40bcf78b4a2605c75121f64d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872780": [
        {
            "ioc_value": "dc2a55970c4869ff637026397c60874733a4c59900e49a33f09de6b4793c136e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872781": [
        {
            "ioc_value": "e20c498cfff49764c225a756110de954feb98b34",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872778": [
        {
            "ioc_value": "a78750ed454dae47f2a5112421da8c3826543daa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872779": [
        {
            "ioc_value": "02f09837cac9cb0310729ab1a84f35d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872777": [
        {
            "ioc_value": "d2529ba4c3d2d629ab45b5b155c1a6c897ee46cef51531f281a4f97c820690f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872775": [
        {
            "ioc_value": "9415def91a9ac8bab08cc11bb2de417d90b67c44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-12 12:00:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872776": [
        {
            "ioc_value": "21b04f8aa0e5863a37d0ed62f4a62211",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-12 12:00:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872773": [
        {
            "ioc_value": "7e7c478b6016828d9bf035079574fdc5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 12:00:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872774": [
        {
            "ioc_value": "197cee5dc3836a5c7eefd646e8b86ff40112a81fd5673e2fd03575706851344e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-12 12:00:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872771": [
        {
            "ioc_value": "c37867e844f570179d9aaa3e417149223c847e6bc9d58ab4997d03a3c66882a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 12:00:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872772": [
        {
            "ioc_value": "3a06411733349a44886b515e228c68ab28583809",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-12 12:00:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872769": [
        {
            "ioc_value": "120e8c2be8f35063f785a2063e64ded47945d96a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872770": [
        {
            "ioc_value": "0048247afc0ad68c11c4d7d1c7c83df6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872768": [
        {
            "ioc_value": "812abe43796f6b78922fc9228e422465",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872766": [
        {
            "ioc_value": "9ba2562b2d7d5dec16a1e8281702d09c79b0ceb0771b727cc542ba843e2d16fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872767": [
        {
            "ioc_value": "9f3188fd1dbec2da32cd29be3ccf70cc38cb5a14",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-12 12:00:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872764": [
        {
            "ioc_value": "56784228c6253277a808b3e8404e2f43c6647f1d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-12 12:00:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872765": [
        {
            "ioc_value": "dd7cfd448f8fc48232a1a6576ee1fc14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-12 12:00:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872762": [
        {
            "ioc_value": "72bc2cd086ffc02895ba73b2cd814588",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872763": [
        {
            "ioc_value": "f02beda33cb97340412881e0805c32580be96de246afd46bac6b75562087ff0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-12 12:00:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872761": [
        {
            "ioc_value": "b93550fbce182cce074924decdb90156f9e0b132",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872760": [
        {
            "ioc_value": "4fa823c4439a01bd37c1184ba6e8d694cdef5dd77c074cbbadb2b9da0f8d4aa8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872758": [
        {
            "ioc_value": "05e65d358f84b7efcb9ffc9487b0b25ef4ef7456",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872759": [
        {
            "ioc_value": "7a933fff468a55cfe086b1939080127d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872757": [
        {
            "ioc_value": "ed44c0375058d416da981d3cb3cf9ca4fb5e506c36a2082a0b20ade834e1cbc1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 12:00:05",
            "last_seen_utc": "2026-08-24 04:18:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872752": [
        {
            "ioc_value": "45.11.231.147:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-12 11:45:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872751": [
        {
            "ioc_value": "jaeegq.slimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:41:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872749": [
        {
            "ioc_value": "https://aaa.akoraofficial.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 11:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aaa.akoraofficial.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872748": [
        {
            "ioc_value": "obcsii2g.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:26:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872747": [
        {
            "ioc_value": "jkyldz.slimsounds-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:24:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872746": [
        {
            "ioc_value": "nurgbrg.sightfreshh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:24:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872745": [
        {
            "ioc_value": "sightfreshh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:23:51",
            "last_seen_utc": "2026-08-12 11:24:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872744": [
        {
            "ioc_value": "slimsounds-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:23:09",
            "last_seen_utc": "2026-08-12 19:34:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872743": [
        {
            "ioc_value": "wmxdata.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 11:20:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c7a9ed85f2352d7473dbb61391b94aa1538aa883972415c6a7a62e9b5eeba1f6/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872738": [
        {
            "ioc_value": "178.128.80.204:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872736": [
        {
            "ioc_value": "117.72.100.236:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872737": [
        {
            "ioc_value": "194.59.30.170:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872735": [
        {
            "ioc_value": "https://psc-io.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 11:01:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/psc-io.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872734": [
        {
            "ioc_value": "uofx0255.getbraindefender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 11:00:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872732": [
        {
            "ioc_value": "yamin4d.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 10:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872731": [
        {
            "ioc_value": "aaa.akoraofficial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 10:47:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872729": [
        {
            "ioc_value": "http://beljaro.shop:2536/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 10:40:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/824570f6c57659b61ba7f8dad31d7cd37d61d58b417bda953a5eaa0b064df328/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872728": [
        {
            "ioc_value": "njlfltu.sight--fresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 10:38:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872726": [
        {
            "ioc_value": "xxltkb.slim-sounds.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 10:34:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872724": [
        {
            "ioc_value": "slim-sounds.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 10:32:36",
            "last_seen_utc": "2026-08-12 18:33:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872722": [
        {
            "ioc_value": "r6ud44az.eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 10:20:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872721": [
        {
            "ioc_value": "hatkldsksd392vbc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-12 10:16:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872720": [
        {
            "ioc_value": "169.58.82.229:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 10:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872718": [
        {
            "ioc_value": "169.58.121.189:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872719": [
        {
            "ioc_value": "169.58.121.189:222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 10:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872717": [
        {
            "ioc_value": "169.58.121.189:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872716": [
        {
            "ioc_value": "103.67.163.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 10:02:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872715": [
        {
            "ioc_value": "http://beljaro.shop:2536/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 10:00:41",
            "last_seen_utc": "2026-08-12 15:52:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bfce5b0c71ef1e46a4c6974182bb8c4ab955478ba216ab1a182593c41d9bd73b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872714": [
        {
            "ioc_value": "554c2e2d6f9cf520e85640600ac90f9a0d3860019f66178ca1f07012f1fc5961",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:52:55",
            "last_seen_utc": "2026-08-12 12:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872712": [
        {
            "ioc_value": "23.95.103.215:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 09:46:07",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872713": [
        {
            "ioc_value": "23.95.103.215:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 09:46:07",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872710": [
        {
            "ioc_value": "209.99.184.151:55006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:45:15",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872711": [
        {
            "ioc_value": "209.99.184.151:55009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:45:15",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872709": [
        {
            "ioc_value": "192.229.115.162:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872708": [
        {
            "ioc_value": "192.229.115.154:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872707": [
        {
            "ioc_value": "gqnkpa.slimsounds.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872706": [
        {
            "ioc_value": "178.211.155.64:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:44:25",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872705": [
        {
            "ioc_value": "177.22.118.236:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-12 09:44:22",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872704": [
        {
            "ioc_value": "175.43.223.196:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 09:44:20",
            "last_seen_utc": "2026-09-01 02:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872701": [
        {
            "ioc_value": "172.245.23.153:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:44:15",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872702": [
        {
            "ioc_value": "172.245.23.153:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:44:15",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872703": [
        {
            "ioc_value": "172.245.23.153:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-12 09:44:15",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872700": [
        {
            "ioc_value": "158.94.208.101:963",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 09:44:03",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872698": [
        {
            "ioc_value": "158.94.208.101:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 09:44:01",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872699": [
        {
            "ioc_value": "158.94.208.101:777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 09:44:01",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872697": [
        {
            "ioc_value": "xljgwes.sightfres.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872696": [
        {
            "ioc_value": "13.236.153.60:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.poshc2",
            "malware_alias": null,
            "malware_printable": "PoshC2",
            "first_seen_utc": "2026-08-12 09:43:32",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PoshC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872695": [
        {
            "ioc_value": "128.90.105.228:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-12 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872694": [
        {
            "ioc_value": "107.22.41.214:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 09:43:20",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872692": [
        {
            "ioc_value": "107.172.72.178:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-12 09:43:19",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872693": [
        {
            "ioc_value": "107.172.72.178:54398",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-12 09:43:19",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872691": [
        {
            "ioc_value": "104.243.248.63:410",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 09:43:16",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872690": [
        {
            "ioc_value": "103.146.231.107:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 09:43:06",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872689": [
        {
            "ioc_value": "103.140.154.7:32333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-12 09:43:05",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872688": [
        {
            "ioc_value": "sightfres.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:42:50",
            "last_seen_utc": "2026-08-12 09:43:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872687": [
        {
            "ioc_value": "slimsounds.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:42:09",
            "last_seen_utc": "2026-08-12 09:42:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872686": [
        {
            "ioc_value": "kdnwrc.slimsounds.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:34:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872685": [
        {
            "ioc_value": "slimsounds.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:32:26",
            "last_seen_utc": "2026-08-12 09:33:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872684": [
        {
            "ioc_value": "https://pacificrimindustries.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 09:31:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pacificrimindustries.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872682": [
        {
            "ioc_value": "9ldui2xv.usa--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:24:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872679": [
        {
            "ioc_value": "198.211.96.18:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 09:20:08",
            "last_seen_utc": "2026-08-23 00:16:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872677": [
        {
            "ioc_value": "162.243.240.81:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 09:20:07",
            "last_seen_utc": "2026-08-23 00:22:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872678": [
        {
            "ioc_value": "68.183.221.133:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 09:20:07",
            "last_seen_utc": "2026-08-23 00:21:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872681": [
        {
            "ioc_value": "https://tek.beri303.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 09:20:05",
            "last_seen_utc": "2026-08-12 15:26:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872680": [
        {
            "ioc_value": "tek.beri303.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 09:20:04",
            "last_seen_utc": "2026-08-12 15:26:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872676": [
        {
            "ioc_value": "mldasj.slim-sounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:13:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872670": [
        {
            "ioc_value": "https://tek.sm188castle.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 09:12:27",
            "last_seen_utc": "2026-08-12 15:50:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "013c5d2d6312702c9bd8d7499170ed6b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872672": [
        {
            "ioc_value": "89.19.223.68:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 09:12:27",
            "last_seen_utc": "2026-08-22 23:42:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872674": [
        {
            "ioc_value": "165.22.81.15:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-12 09:12:26",
            "last_seen_utc": "2026-08-23 00:17:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872675": [
        {
            "ioc_value": "slim-sounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:11:46",
            "last_seen_utc": "2026-08-12 09:12:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872673": [
        {
            "ioc_value": "shop-tinnitrol.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 09:10:31",
            "last_seen_utc": "2026-08-12 09:11:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872671": [
        {
            "ioc_value": "tek.sm188castle.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 09:10:05",
            "last_seen_utc": "2026-08-12 15:26:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872669": [
        {
            "ioc_value": "169.58.121.189:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 09:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872668": [
        {
            "ioc_value": "169.58.121.189:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 09:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872667": [
        {
            "ioc_value": "113.44.90.0:8788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 09:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872666": [
        {
            "ioc_value": "45.148.18.44:53522",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-12 09:00:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78b017913bb7d79037ad1b8f0c63060d48430bf122ea4825e07e370beefc68e4/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872665": [
        {
            "ioc_value": "powerflash64.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-12 09:00:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78b017913bb7d79037ad1b8f0c63060d48430bf122ea4825e07e370beefc68e4/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872664": [
        {
            "ioc_value": "qxaail.shop-tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:59:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872663": [
        {
            "ioc_value": "uwddobn.shop-sightfresh.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:54:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872662": [
        {
            "ioc_value": "shop-tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:53:56",
            "last_seen_utc": "2026-08-12 08:54:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872661": [
        {
            "ioc_value": "shop-sightfresh.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:52:13",
            "last_seen_utc": "2026-08-12 13:19:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872648": [
        {
            "ioc_value": "pacificrimindustries.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 08:48:33",
            "last_seen_utc": "2026-08-13 13:55:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7469",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872649": [
        {
            "ioc_value": "217.60.195.187:7075",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-12 08:48:33",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872660": [
        {
            "ioc_value": "151.241.154.218:2021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 08:44:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fef376731e94cafacb554ccd09aebc3e88d128b5744dc9c103af3707dbf9f235/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872659": [
        {
            "ioc_value": "wkblxv.shop-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872658": [
        {
            "ioc_value": "104.249.10.187:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 08:41:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba83558b7f966c94c3b25ad97f092173e02a1a0c620bde8fc1257a2580895011/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872657": [
        {
            "ioc_value": "2.27.62.172:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-12 08:36:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6888967d6ab35e6bcaca0e041e24e457226f39cf81d0c16d6e772d6a806e2ccb/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872656": [
        {
            "ioc_value": "zdbtyv.shop-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872655": [
        {
            "ioc_value": "shop-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:32:10",
            "last_seen_utc": "2026-08-12 08:43:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872654": [
        {
            "ioc_value": "107.174.20.215:8824",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 08:26:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a9b9cc2353486e2dffd166145f5ea3de476181a99946e3143bd985d7b27fc731/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872653": [
        {
            "ioc_value": "uqmvta.shop-theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872652": [
        {
            "ioc_value": "shop-theslimsplitsmethod.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:19:30",
            "last_seen_utc": "2026-08-18 19:17:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872651": [
        {
            "ioc_value": "217.60.195.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 08:12:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/84b7d6488b178558fcc7d9af32cff9491e6d46b1461027f70de3162415525d10/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872650": [
        {
            "ioc_value": "ftp.ulfl.co.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-12 08:09:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9b13a1e4bd7a99c7095b595e89f365aa9391322e1b077a0be87282dd52acc078/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872647": [
        {
            "ioc_value": "213.152.161.91:8707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 08:06:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03f994167591b065af5e50026ff4f89cc85966025ec8c92037ac2855d27e0978/",
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872645": [
        {
            "ioc_value": "156.248.73.84:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872646": [
        {
            "ioc_value": "43.128.130.45:56502",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872644": [
        {
            "ioc_value": "156.248.73.84:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 08:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872643": [
        {
            "ioc_value": "povuns.shop-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872641": [
        {
            "ioc_value": "genomiq.shop-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:02:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872640": [
        {
            "ioc_value": "ufhsqy.shop-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:01:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872639": [
        {
            "ioc_value": "shop-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 08:01:36",
            "last_seen_utc": "2026-08-12 08:02:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872638": [
        {
            "ioc_value": "nhglus.shop-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872636": [
        {
            "ioc_value": "nhapcode8k.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:53:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872635": [
        {
            "ioc_value": "68.65.123.172:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-12 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ff6fd5e3494dc16064da750116bb9d899c52560af353be6a430d42daeb6435b0/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872634": [
        {
            "ioc_value": "http://91.92.242.236/success?substr=mixfive&s=three&sub=nn",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 07:50:21",
            "last_seen_utc": "2026-08-22 10:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2/",
            "tags": "GCleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872629": [
        {
            "ioc_value": "http://91.92.242.236/dll",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 07:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2/",
            "tags": "GCleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872630": [
        {
            "ioc_value": "http://91.92.242.236/info",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 07:50:20",
            "last_seen_utc": "2026-08-22 10:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2/",
            "tags": "GCleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872631": [
        {
            "ioc_value": "http://91.92.242.236/update",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 07:50:20",
            "last_seen_utc": "2026-08-22 10:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2/",
            "tags": "GCleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872632": [
        {
            "ioc_value": "http://91.92.242.236/service",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 07:50:20",
            "last_seen_utc": "2026-08-22 10:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2/",
            "tags": "GCleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872633": [
        {
            "ioc_value": "http://91.92.242.236/ycl",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-08-12 07:50:20",
            "last_seen_utc": "2026-08-22 10:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4a7ddf60dea8767a93ea802ee13d39de4b2ac0ce9e1c4895d21235dd07130d2/",
            "tags": "GCleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872628": [
        {
            "ioc_value": "207.180.58.21:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 07:47:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/05ea2c8c8023b899976a271b825c2ef5cb3861101d167bf37949e6ffb2ee9b71/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872627": [
        {
            "ioc_value": "186.169.76.60:5047",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-12 07:44:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f05a40ebf3c3f081c0de3a602a920c69980e07e55856503904a3820d3396ebd1/",
            "tags": "EvolutionRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872626": [
        {
            "ioc_value": "elpolacopop.dynuddns.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-12 07:44:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f05a40ebf3c3f081c0de3a602a920c69980e07e55856503904a3820d3396ebd1/",
            "tags": "EvolutionRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872624": [
        {
            "ioc_value": "169.58.121.189:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 07:32:50",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872623": [
        {
            "ioc_value": "134.199.153.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 07:32:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872621": [
        {
            "ioc_value": "https://inelloelectric.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/inelloelectric.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872622": [
        {
            "ioc_value": "https://maletosr.world/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/maletosr.world",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872620": [
        {
            "ioc_value": "http://beljaro.shop:2536/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 07:26:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872619": [
        {
            "ioc_value": "8rncvwgu.us-en-us-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:23:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872618": [
        {
            "ioc_value": "https://friendihelp.info/fast.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 07:16:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872617": [
        {
            "ioc_value": "friendihelp.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-12 07:16:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/",
            "tags": "StealC",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872616": [
        {
            "ioc_value": "ftcfiu.shop-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:15:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872615": [
        {
            "ioc_value": "shop-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:13:21",
            "last_seen_utc": "2026-08-12 07:59:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872614": [
        {
            "ioc_value": "analysis-id-fmd.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 07:13:16",
            "last_seen_utc": "2026-08-24 00:39:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872613": [
        {
            "ioc_value": "maletosr.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 07:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872612": [
        {
            "ioc_value": "brusketaa.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-12 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872611": [
        {
            "ioc_value": "thu-ipad-02.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872610": [
        {
            "ioc_value": "jllzheu.shop-keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:11:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872609": [
        {
            "ioc_value": "dist.binarypilot.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-12 07:11:20",
            "last_seen_utc": "2026-08-27 08:13:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1e5352fed3ca6510912a8c28d09a2245e644ad47f274169dc399dc7dfd3f1f28/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872608": [
        {
            "ioc_value": "shop-keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 07:10:46",
            "last_seen_utc": "2026-08-12 07:11:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872607": [
        {
            "ioc_value": "217.144.187.85:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-12 07:09:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872606": [
        {
            "ioc_value": "yoda-gd1.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 07:07:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3b6393dc2c7a9db73f7dfdd41edfbafd3ebd1dd31b90230d926c2725f9852c40/",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872605": [
        {
            "ioc_value": "43.225.157.17:3970",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872604": [
        {
            "ioc_value": "43.225.157.17:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872603": [
        {
            "ioc_value": "i4vo8ukz.get-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872602": [
        {
            "ioc_value": "95.85.237.226:53535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-12 06:39:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5030d3965d51c4f42537ae6c90609b0e3d56e42f30c1994c1a90770960aab721/",
            "tags": "coinminer,XMRIG",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872601": [
        {
            "ioc_value": "beta.local-screen.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-12 06:38:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872580": [
        {
            "ioc_value": "calregistry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:29:26",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1872581": [
        {
            "ioc_value": "inelloelectric.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:29:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1872598": [
        {
            "ioc_value": "yyplhn.shop-slimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:24:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872597": [
        {
            "ioc_value": "shop-slimsplits.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:22:45",
            "last_seen_utc": "2026-08-13 05:29:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872596": [
        {
            "ioc_value": "wemivqe.shop-gutdrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:22:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872595": [
        {
            "ioc_value": "xwsub.cincv.group",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-12 06:20:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03f994167591b065af5e50026ff4f89cc85966025ec8c92037ac2855d27e0978/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872594": [
        {
            "ioc_value": "shop-gutdrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:20:13",
            "last_seen_utc": "2026-08-12 06:20:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872591": [
        {
            "ioc_value": "93.152.223.39:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 06:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872592": [
        {
            "ioc_value": "140.82.46.246:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 06:05:09",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872590": [
        {
            "ioc_value": "93.152.223.39:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 06:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872589": [
        {
            "ioc_value": "93.152.223.39:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 06:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872586": [
        {
            "ioc_value": "https://neihite.cc/gate/chunk",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 06:04:58",
            "last_seen_utc": "2026-08-12 21:59:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a571bd3aed290eb2ed071ed8207456975fa2309a9e179ee57512b5647e0364f9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872587": [
        {
            "ioc_value": "https://neihite.cc/gate/handshake",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 06:04:58",
            "last_seen_utc": "2026-08-12 21:59:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a571bd3aed290eb2ed071ed8207456975fa2309a9e179ee57512b5647e0364f9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872588": [
        {
            "ioc_value": "https://neihite.cc/gate/complete",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 06:04:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a571bd3aed290eb2ed071ed8207456975fa2309a9e179ee57512b5647e0364f9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872584": [
        {
            "ioc_value": "zlhoth.moqua8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 06:03:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872583": [
        {
            "ioc_value": "neihite.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 06:03:10",
            "last_seen_utc": "2026-08-12 21:59:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a571bd3aed290eb2ed071ed8207456975fa2309a9e179ee57512b5647e0364f9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872440": [
        {
            "ioc_value": "psc-io.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 05:57:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7415",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872449": [
        {
            "ioc_value": "mathiuu.surf",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 05:57:00",
            "last_seen_utc": "2026-08-14 09:08:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872450": [
        {
            "ioc_value": "https://mathiuu.surf/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 05:57:00",
            "last_seen_utc": "2026-08-12 04:10:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872451": [
        {
            "ioc_value": "https://mathiuu.surf/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-12 05:56:59",
            "last_seen_utc": "2026-08-12 04:10:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872490": [
        {
            "ioc_value": "http://39.34.167.77:45582/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-12 05:56:58",
            "last_seen_utc": "2026-08-25 00:20:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.34.167.77",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872491": [
        {
            "ioc_value": "http://103.82.121.89:34590/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-12 05:56:57",
            "last_seen_utc": "2026-08-25 00:20:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.82.121.89",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872492": [
        {
            "ioc_value": "http://39.65.92.172:50865/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-12 05:56:56",
            "last_seen_utc": "2026-08-25 00:20:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.65.92.172",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872533": [
        {
            "ioc_value": "https://gem.bercak4d.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 05:56:56",
            "last_seen_utc": "2026-08-12 03:50:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "013c5d2d6312702c9bd8d7499170ed6b,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872540": [
        {
            "ioc_value": "jackdohertycontracting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:56:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1872541": [
        {
            "ioc_value": "recoverhealbloom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:56:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "penislandrocket"
        }
    ],
    "1872576": [
        {
            "ioc_value": "152.32.240.167:9556",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified Linux 001",
            "first_seen_utc": "2026-08-12 05:56:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "cybersecproject"
        }
    ],
    "1872579": [
        {
            "ioc_value": "choosedigital.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 05:56:53",
            "last_seen_utc": "2026-08-12 05:37:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "ClearFake,compromised,EtherHiding,webinject",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872578": [
        {
            "ioc_value": "kqwogog.vongquay8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:32:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872577": [
        {
            "ioc_value": "vongquay8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:29:46",
            "last_seen_utc": "2026-08-13 09:30:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872575": [
        {
            "ioc_value": "cu3bm1vz.shop-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:23:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872574": [
        {
            "ioc_value": "46.246.14.7:7044",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-08-12 05:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872573": [
        {
            "ioc_value": "cl1yte93.en-us-goldaligns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:19:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872572": [
        {
            "ioc_value": "https://109.120.178.84",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 05:15:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/91a2cc02adfca746b0ed66a0ad9b84ad77407b34c91ea2d16e2d97e6c4ebd32e/",
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872571": [
        {
            "ioc_value": "bbbrqf.km8k.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:14:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872570": [
        {
            "ioc_value": "km8k.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 05:11:55",
            "last_seen_utc": "2026-08-12 05:12:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872569": [
        {
            "ioc_value": "93.152.223.39:5900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 05:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872567": [
        {
            "ioc_value": "93.152.223.39:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 05:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872568": [
        {
            "ioc_value": "93.152.223.39:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-12 05:05:06",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872566": [
        {
            "ioc_value": "139.129.23.109:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 05:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872565": [
        {
            "ioc_value": "72.56.52.200:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-12 04:57:11",
            "last_seen_utc": "2026-08-12 05:09:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-x7hdgszejc/behavioral1",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872564": [
        {
            "ioc_value": "cmd.5gf7jtfk0y.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-12 04:47:21",
            "last_seen_utc": "2026-08-12 04:47:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e6d15662369c2d44af106281f6004962602628593a1db184efb240af71a3b63a/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872563": [
        {
            "ioc_value": "ifaeybz.toolbcr2026.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:40:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872562": [
        {
            "ioc_value": "toolbcr2026.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:39:14",
            "last_seen_utc": "2026-08-12 04:40:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872561": [
        {
            "ioc_value": "https://tek.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:35:07",
            "last_seen_utc": "2026-08-12 08:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872558": [
        {
            "ioc_value": "tek.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:35:06",
            "last_seen_utc": "2026-08-12 08:26:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872559": [
        {
            "ioc_value": "https://tek.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:35:06",
            "last_seen_utc": "2026-08-12 09:03:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872560": [
        {
            "ioc_value": "tek.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:35:06",
            "last_seen_utc": "2026-08-12 08:26:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872557": [
        {
            "ioc_value": "eisgjj.code8k.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:25:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872556": [
        {
            "ioc_value": "code8k.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:21:23",
            "last_seen_utc": "2026-08-12 04:21:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872555": [
        {
            "ioc_value": "code8k.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:18:44",
            "last_seen_utc": "2026-08-12 04:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872554": [
        {
            "ioc_value": "nwmwpr.chezi8k.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:16:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872552": [
        {
            "ioc_value": "nul.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:15:06",
            "last_seen_utc": "2026-08-12 04:26:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872553": [
        {
            "ioc_value": "https://nul.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:15:06",
            "last_seen_utc": "2026-08-12 04:26:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872551": [
        {
            "ioc_value": "chezi8k.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:11:36",
            "last_seen_utc": "2026-08-14 04:34:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872550": [
        {
            "ioc_value": "https://nul.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:10:05",
            "last_seen_utc": "2026-08-12 04:26:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872549": [
        {
            "ioc_value": "nul.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 04:10:04",
            "last_seen_utc": "2026-08-12 04:26:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872548": [
        {
            "ioc_value": "139.129.23.109:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872546": [
        {
            "ioc_value": "142.4.58.48:1224",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872547": [
        {
            "ioc_value": "121.89.169.8:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 04:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872545": [
        {
            "ioc_value": "106.75.178.185:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872544": [
        {
            "ioc_value": "180.76.105.117:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 04:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872542": [
        {
            "ioc_value": "8kvip2.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 04:01:38",
            "last_seen_utc": "2026-08-12 04:02:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872539": [
        {
            "ioc_value": "8kbet18k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 03:51:33",
            "last_seen_utc": "2026-08-12 03:52:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872538": [
        {
            "ioc_value": "rffgfln.sukien8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 03:51:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872537": [
        {
            "ioc_value": "https://gem.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 03:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872536": [
        {
            "ioc_value": "gem.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 03:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872535": [
        {
            "ioc_value": "gem.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-12 03:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872534": [
        {
            "ioc_value": "8kbet18.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 03:49:14",
            "last_seen_utc": "2026-08-12 03:49:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872532": [
        {
            "ioc_value": "sukien8k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 03:48:45",
            "last_seen_utc": "2026-08-12 03:49:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872531": [
        {
            "ioc_value": "b52mhuti.shop-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 03:24:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872529": [
        {
            "ioc_value": "http://tokjoza.shop:5200/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 03:22:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872530": [
        {
            "ioc_value": "meta.calmshelf67.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-12 03:22:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872526": [
        {
            "ioc_value": "scan.journalfleet.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-12 03:22:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872527": [
        {
            "ioc_value": "http://shkpiva.shop:5627/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 03:22:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872528": [
        {
            "ioc_value": "http://beljaro.shop:2536/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 03:22:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872523": [
        {
            "ioc_value": "http://topxgax.click:4930/events",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 03:22:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872524": [
        {
            "ioc_value": "http://tokjoza.shop:5200/subscriptions",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 03:22:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872525": [
        {
            "ioc_value": "http://beljaro.shop:2536/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 03:22:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872522": [
        {
            "ioc_value": "core.coachdesk.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-12 03:17:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1872521": [
        {
            "ioc_value": "vhrtmqe.eng-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 03:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872517": [
        {
            "ioc_value": "khwupl.pu88.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:59:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872516": [
        {
            "ioc_value": "pu88.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:58:44",
            "last_seen_utc": "2026-08-12 02:59:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872515": [
        {
            "ioc_value": "vzxzmkr.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:56:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872514": [
        {
            "ioc_value": "nmhhsb.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:51:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872513": [
        {
            "ioc_value": "lkfgkq.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:43:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872512": [
        {
            "ioc_value": "iiuhvm1r.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:39:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872511": [
        {
            "ioc_value": "emqnmqv.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:32:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872510": [
        {
            "ioc_value": "odylia.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:30:50",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872509": [
        {
            "ioc_value": "wnhypy.get--ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 02:20:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872507": [
        {
            "ioc_value": "159.75.123.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872508": [
        {
            "ioc_value": "8.130.55.42:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-12 02:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872505": [
        {
            "ioc_value": "tbpvaoy.8kbetcc.it.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 01:37:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872504": [
        {
            "ioc_value": "analysis-id-fmd.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 01:35:36",
            "last_seen_utc": "2026-08-15 11:57:59",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872503": [
        {
            "ioc_value": "oygeuk.kerassyntials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 01:29:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872502": [
        {
            "ioc_value": "9phu1gul.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 01:23:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872501": [
        {
            "ioc_value": "http://tokjoza.shop:5200/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 01:20:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cea846a93d72c55d3a36191e995d89a8b6774f4b5de22680685b87f8c07d0d5e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872500": [
        {
            "ioc_value": "http://beljaro.shop:2536/reports",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-12 01:20:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cea846a93d72c55d3a36191e995d89a8b6774f4b5de22680685b87f8c07d0d5e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872498": [
        {
            "ioc_value": "159.75.123.199:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872499": [
        {
            "ioc_value": "159.75.123.199:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-12 01:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872497": [
        {
            "ioc_value": "176.149.202.136:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-12 01:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872495": [
        {
            "ioc_value": "luyzkvh.eng-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 00:48:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872494": [
        {
            "ioc_value": "fcfqwd.keraissentials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 00:40:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872493": [
        {
            "ioc_value": "7i2syccf.en-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 00:21:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872489": [
        {
            "ioc_value": "89.127.233.194:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-12 00:05:05",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872488": [
        {
            "ioc_value": "hkzhies.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-12 00:00:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872485": [
        {
            "ioc_value": "aeslfh.ijnitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 23:49:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872484": [
        {
            "ioc_value": "159.75.123.199:1111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 23:47:15",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872483": [
        {
            "ioc_value": "114.67.98.107:54325",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 23:47:05",
            "last_seen_utc": "2026-09-01 02:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872478": [
        {
            "ioc_value": "vb07w7bg.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 23:25:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872476": [
        {
            "ioc_value": "skugdro.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 23:10:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872475": [
        {
            "ioc_value": "blessdayservices.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 23:05:46",
            "last_seen_utc": "2026-08-19 19:31:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872474": [
        {
            "ioc_value": "113.44.90.0:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 23:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "viper",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872472": [
        {
            "ioc_value": "158.94.208.101:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 23:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872473": [
        {
            "ioc_value": "185.139.214.67:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 23:05:07",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872471": [
        {
            "ioc_value": "35.209.195.28:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 23:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872470": [
        {
            "ioc_value": "nwumcm.igni--tra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 22:59:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872469": [
        {
            "ioc_value": "ecdmso.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 22:49:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872467": [
        {
            "ioc_value": "yo1yin0j.enus-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 22:29:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872466": [
        {
            "ioc_value": "dzmmaqy.en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 22:16:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872465": [
        {
            "ioc_value": "188.49.80.159:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-11 22:05:06",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872464": [
        {
            "ioc_value": "35.209.195.28:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 22:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872463": [
        {
            "ioc_value": "kwcdmt.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 21:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872461": [
        {
            "ioc_value": "https://pak.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 21:40:06",
            "last_seen_utc": "2026-08-12 03:26:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872459": [
        {
            "ioc_value": "https://pak.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 21:40:05",
            "last_seen_utc": "2026-08-12 03:43:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872460": [
        {
            "ioc_value": "pak.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 21:40:05",
            "last_seen_utc": "2026-08-12 03:26:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872458": [
        {
            "ioc_value": "pak.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 21:40:04",
            "last_seen_utc": "2026-08-12 03:26:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872457": [
        {
            "ioc_value": "http://shkpiva.shop:5627/categories",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 21:35:38",
            "last_seen_utc": "2026-08-16 11:42:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ebebc96e841a785c39d0553a9ed6947cf6a801c09a531840c5ee72f4852aca84/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872456": [
        {
            "ioc_value": "http://beljaro.shop:2536/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 21:35:35",
            "last_seen_utc": "2026-08-13 10:53:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ebebc96e841a785c39d0553a9ed6947cf6a801c09a531840c5ee72f4852aca84/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872455": [
        {
            "ioc_value": "https://brusketaa.lol/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 21:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/brusketaa.lol",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872454": [
        {
            "ioc_value": "ekzsmwa.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 21:29:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872453": [
        {
            "ioc_value": "z048c6t8.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 21:21:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872448": [
        {
            "ioc_value": "xjfkun.get--ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 21:07:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872447": [
        {
            "ioc_value": "wempully.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 21:05:44",
            "last_seen_utc": "2026-08-26 00:05:10",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872446": [
        {
            "ioc_value": "35.209.195.28:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 21:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872444": [
        {
            "ioc_value": "43.225.157.17:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 21:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872445": [
        {
            "ioc_value": "35.209.195.28:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 21:05:08",
            "last_seen_utc": "2026-08-13 08:29:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872443": [
        {
            "ioc_value": "43.225.157.17:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872442": [
        {
            "ioc_value": "43.225.157.17:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 21:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872441": [
        {
            "ioc_value": "lnwmrko.buy-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 20:38:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872439": [
        {
            "ioc_value": "wzjhif.enus-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 20:17:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872438": [
        {
            "ioc_value": "46.246.14.13:7044",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-08-11 20:15:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872436": [
        {
            "ioc_value": "yoouslot88.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 20:10:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872437": [
        {
            "ioc_value": "29e0fc6e480dc73a81e1162b614c4aac0b1a2cf93159f8ff43dc2798bbd89171",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 20:10:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872435": [
        {
            "ioc_value": "43.225.157.17:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 20:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872433": [
        {
            "ioc_value": "43.225.157.17:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872434": [
        {
            "ioc_value": "43.225.157.17:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 20:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872432": [
        {
            "ioc_value": "http://92.119.165.248/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-11 19:55:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872431": [
        {
            "ioc_value": "47.122.116.54:13676",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-11 19:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872428": [
        {
            "ioc_value": "91.92.243.36:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:46:42",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872426": [
        {
            "ioc_value": "89.37.100.205:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:46:40",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872427": [
        {
            "ioc_value": "89.37.100.205:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:46:40",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872425": [
        {
            "ioc_value": "87.76.146.221:7771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 19:46:37",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872424": [
        {
            "ioc_value": "85.137.249.185:25729",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-11 19:46:34",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872423": [
        {
            "ioc_value": "64.188.69.73:7273",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-08-11 19:46:23",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872422": [
        {
            "ioc_value": "54.171.35.227:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:46:18",
            "last_seen_utc": "2026-09-01 02:46:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872421": [
        {
            "ioc_value": "45.88.91.103:2244",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 19:46:09",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872420": [
        {
            "ioc_value": "220.154.140.4:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:45:34",
            "last_seen_utc": "2026-09-01 02:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872419": [
        {
            "ioc_value": "217.60.241.19:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 19:45:32",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872418": [
        {
            "ioc_value": "209.99.184.151:55005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:44:49",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872417": [
        {
            "ioc_value": "193.221.201.164:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872415": [
        {
            "ioc_value": "182.16.29.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:44:15",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872416": [
        {
            "ioc_value": "182.16.29.37:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:44:15",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872414": [
        {
            "ioc_value": "18.171.60.199:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 19:44:13",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872413": [
        {
            "ioc_value": "uoitoks.8k-ze24kjf-9.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:44:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872412": [
        {
            "ioc_value": "168.222.251.83:56011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:43:59",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872411": [
        {
            "ioc_value": "154.40.62.125:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-08-11 19:43:44",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872410": [
        {
            "ioc_value": "153.80.249.203:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:43:42",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872409": [
        {
            "ioc_value": "130.12.182.39:5444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 19:43:27",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872408": [
        {
            "ioc_value": "124.198.131.169:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872406": [
        {
            "ioc_value": "124.198.131.169:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:43:24",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872407": [
        {
            "ioc_value": "124.198.131.169:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 19:43:24",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872405": [
        {
            "ioc_value": "8k-ze24kjf-9.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:42:55",
            "last_seen_utc": "2026-08-11 19:43:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872404": [
        {
            "ioc_value": "https://ptz.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 19:40:06",
            "last_seen_utc": "2026-08-11 21:25:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872402": [
        {
            "ioc_value": "https://ptz.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 19:40:05",
            "last_seen_utc": "2026-08-11 21:26:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872403": [
        {
            "ioc_value": "ptz.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 19:40:05",
            "last_seen_utc": "2026-08-11 21:25:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872401": [
        {
            "ioc_value": "ptz.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 19:40:04",
            "last_seen_utc": "2026-08-11 21:26:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872400": [
        {
            "ioc_value": "95.179.151.97:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-11 19:29:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f9336fd4d86ee47ec41fbec23925a9339a397e443ee4550d85b3da75d7a12ef5/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872399": [
        {
            "ioc_value": "dreamlinestream.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-11 19:28:43",
            "last_seen_utc": "2026-08-19 09:55:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f9336fd4d86ee47ec41fbec23925a9339a397e443ee4550d85b3da75d7a12ef5/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872398": [
        {
            "ioc_value": "stuqvv.eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872397": [
        {
            "ioc_value": "217.144.187.85:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-11 19:26:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1c42f5b56f4648f0df962e20f72808fd8e54305a1ac45195f9582c88dd5c8c6a/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872396": [
        {
            "ioc_value": "yodagoodie.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-08-11 19:25:22",
            "last_seen_utc": "2026-08-12 07:07:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1c42f5b56f4648f0df962e20f72808fd8e54305a1ac45195f9582c88dd5c8c6a/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872395": [
        {
            "ioc_value": "oksvcy.8kvn.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:23:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872394": [
        {
            "ioc_value": "j821h5f5.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:22:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872393": [
        {
            "ioc_value": "8kvn.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:21:23",
            "last_seen_utc": "2026-08-11 19:21:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872350": [
        {
            "ioc_value": "https://yelahaye.surf/api/v1/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-11 19:20:32",
            "last_seen_utc": "2026-08-11 19:12:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872331": [
        {
            "ioc_value": "bibifitstudio.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:20:30",
            "last_seen_utc": "2026-08-11 17:06:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7401",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872340": [
        {
            "ioc_value": "176.65.139.244:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:30",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872348": [
        {
            "ioc_value": "yelahaye.surf",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-11 19:20:30",
            "last_seen_utc": "2026-08-12 11:08:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872349": [
        {
            "ioc_value": "https://yelahaye.surf/api/v1/session",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-11 19:20:28",
            "last_seen_utc": "2026-08-11 19:12:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872358": [
        {
            "ioc_value": "r5dz2dz88wuideu.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:20:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7406",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872359": [
        {
            "ioc_value": "ondoperps.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:20:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7407",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872360": [
        {
            "ioc_value": "aimevbot.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:20:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7408",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872361": [
        {
            "ioc_value": "aifreeuse.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:20:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7409",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872362": [
        {
            "ioc_value": "aimevbot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 19:20:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7410",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872369": [
        {
            "ioc_value": "https://yelahaye.surf/api/v1/status",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-08-11 19:20:25",
            "last_seen_utc": "2026-08-11 19:12:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1872370": [
        {
            "ioc_value": "http://77.90.185.66/wget",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1872371": [
        {
            "ioc_value": "http://77.90.185.66/mirai.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1872372": [
        {
            "ioc_value": "http://77.90.185.66/mirai.mpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1872373": [
        {
            "ioc_value": "http://77.90.185.66/mirai.arm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1872374": [
        {
            "ioc_value": "http://77.90.185.66/mirai.arm5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1872375": [
        {
            "ioc_value": "http://77.90.185.66/mirai.arm7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 19:20:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "YaRi78"
        }
    ],
    "1872377": [
        {
            "ioc_value": "http://36.255.33.213:50864/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 19:20:23",
            "last_seen_utc": "2026-08-25 00:20:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.33.213",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872378": [
        {
            "ioc_value": "http://158.255.83.180:39837/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 19:20:22",
            "last_seen_utc": "2026-08-25 00:20:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/158.255.83.180",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872392": [
        {
            "ioc_value": "uzq4z9m2.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:17:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872391": [
        {
            "ioc_value": "dqstxo.8kvn.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 19:16:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872387": [
        {
            "ioc_value": "178.128.80.204:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 19:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872388": [
        {
            "ioc_value": "192.252.179.24:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 19:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872389": [
        {
            "ioc_value": "43.225.157.17:8009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 19:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872386": [
        {
            "ioc_value": "178.128.80.204:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 19:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872385": [
        {
            "ioc_value": "178.128.80.204:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 19:05:05",
            "last_seen_utc": "2026-08-25 08:51:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872384": [
        {
            "ioc_value": "tqhsnny.8k-wum35a-10.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:57:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872382": [
        {
            "ioc_value": "headycore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 18:56:44",
            "last_seen_utc": "2026-08-11 21:34:53",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872381": [
        {
            "ioc_value": "8k-wum35a-10.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:52:27",
            "last_seen_utc": "2026-08-11 18:52:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872380": [
        {
            "ioc_value": "xhodxu.8kvn.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:25:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872376": [
        {
            "ioc_value": "ke796qs7.eng-en-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:19:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872368": [
        {
            "ioc_value": "urlriux.8kwins.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:06:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872366": [
        {
            "ioc_value": "8kwins.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:01:52",
            "last_seen_utc": "2026-08-11 18:02:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872365": [
        {
            "ioc_value": "8k-vx6we-6k.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 18:00:39",
            "last_seen_utc": "2026-08-11 18:01:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872364": [
        {
            "ioc_value": "http://topxgax.click:4930/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 17:55:46",
            "last_seen_utc": "2026-08-24 20:38:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5facfcea1185730de6f3cb5b4692d7b9508e5d500f3199b08a737aaad429fbc4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872363": [
        {
            "ioc_value": "http://tokjoza.shop:5200/workspaces",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 17:55:42",
            "last_seen_utc": "2026-08-24 20:38:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5facfcea1185730de6f3cb5b4692d7b9508e5d500f3199b08a737aaad429fbc4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872357": [
        {
            "ioc_value": "jaskul.8kvn.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 17:35:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872356": [
        {
            "ioc_value": "8kvn.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 17:34:23",
            "last_seen_utc": "2026-08-11 17:35:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872355": [
        {
            "ioc_value": "lw8vwbgg.goldlign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 17:19:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872354": [
        {
            "ioc_value": "goldlign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 17:19:14",
            "last_seen_utc": "2026-08-11 17:19:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872352": [
        {
            "ioc_value": "rojbqzt.8k-vw33sx-6.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 17:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872351": [
        {
            "ioc_value": "8k-vw33sx-6.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 17:10:11",
            "last_seen_utc": "2026-08-11 17:10:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872345": [
        {
            "ioc_value": "odvino.8kusdt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 16:46:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872344": [
        {
            "ioc_value": "8kusdt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 16:43:51",
            "last_seen_utc": "2026-08-11 16:44:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872342": [
        {
            "ioc_value": "snpsbbo.mitolyncart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 16:21:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872341": [
        {
            "ioc_value": "mitolyncart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 16:19:55",
            "last_seen_utc": "2026-08-11 16:20:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872339": [
        {
            "ioc_value": "47.94.224.229:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 16:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872336": [
        {
            "ioc_value": "https://r5dz2dz88wuideu.xyz/exploit_registry.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 16:01:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/r5dz2dz88wuideu.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872337": [
        {
            "ioc_value": "https://aimevbot.com/exploit_registry.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 16:01:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aimevbot.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872338": [
        {
            "ioc_value": "https://aifreeuse.cc/exploit_registry.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 16:01:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aifreeuse.cc",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872334": [
        {
            "ioc_value": "https://aimevbot.cc/exploit_registry.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 16:01:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aimevbot.cc",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872335": [
        {
            "ioc_value": "https://ondoperps.us/exploit_registry.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 16:01:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ondoperps.us",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872333": [
        {
            "ioc_value": "texpni.8k-tu2wm-2k.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:58:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872332": [
        {
            "ioc_value": "8k-tu2wm-2k.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:53:22",
            "last_seen_utc": "2026-08-11 15:53:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872330": [
        {
            "ioc_value": "146.56.227.227:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 15:47:04",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872329": [
        {
            "ioc_value": "cf.lala1.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 15:46:46",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872328": [
        {
            "ioc_value": "lbpbgqz.keyslims.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:30:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872326": [
        {
            "ioc_value": "keyslims.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:29:01",
            "last_seen_utc": "2026-08-11 15:30:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872325": [
        {
            "ioc_value": "xsrapae.keyslim-drops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:23:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872324": [
        {
            "ioc_value": "ef1el70z.tiroalpaloes.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:22:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872323": [
        {
            "ioc_value": "https://dob.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 15:20:06",
            "last_seen_utc": "2026-08-11 19:26:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872321": [
        {
            "ioc_value": "https://dob.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 15:20:05",
            "last_seen_utc": "2026-08-11 19:26:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872322": [
        {
            "ioc_value": "dob.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 15:20:05",
            "last_seen_utc": "2026-08-11 19:26:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872320": [
        {
            "ioc_value": "dob.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 15:20:04",
            "last_seen_utc": "2026-08-11 19:26:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872319": [
        {
            "ioc_value": "93.171.14.7:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 15:08:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/deaeab9eb43fcf70d184c209e4bc1077ae6e7e2b182c1cbbc202dfdc053dc01c/",
            "tags": "coinminer,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872313": [
        {
            "ioc_value": "poslitasku.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 15:05:50",
            "last_seen_utc": "2026-08-12 13:11:26",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7393",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872314": [
        {
            "ioc_value": "dailyharbourservices.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 15:05:49",
            "last_seen_utc": "2026-08-11 16:46:41",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/7394",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1872318": [
        {
            "ioc_value": "gtpryq.8k-ru99dke-8.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:05:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872317": [
        {
            "ioc_value": "8k-ru99dke-8.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 15:02:53",
            "last_seen_utc": "2026-08-11 15:03:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872316": [
        {
            "ioc_value": "kbgmnze.keyslim-drops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:55:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872315": [
        {
            "ioc_value": "keyslim-drops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:50:51",
            "last_seen_utc": "2026-08-11 15:22:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872312": [
        {
            "ioc_value": "ftp.bvmexportsuk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-11 14:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4fc06941e07dbff9fe5756f2803fe0075f29a7eca3969db7947b4d33d8ff6601/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872310": [
        {
            "ioc_value": "http://tokjoza.shop:5200/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 14:30:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/67cf306a6ce1e508b84198b092adf819d8dc00da9ff4e6c9be24a78a386da130/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872309": [
        {
            "ioc_value": "http://shkpiva.shop:5627/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 14:30:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/67cf306a6ce1e508b84198b092adf819d8dc00da9ff4e6c9be24a78a386da130/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872308": [
        {
            "ioc_value": "http://beljaro.shop:2536/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 14:30:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/67cf306a6ce1e508b84198b092adf819d8dc00da9ff4e6c9be24a78a386da130/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872305": [
        {
            "ioc_value": "62.84.172.106:8033",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 14:23:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-rgbv5afn6z/behavioral1",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872306": [
        {
            "ioc_value": "217.217.243.76:8033",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 14:23:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-rgbv5afn6z/behavioral1",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872307": [
        {
            "ioc_value": "103.27.78.14:8033",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 14:23:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-rgbv5afn6z/behavioral1",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872304": [
        {
            "ioc_value": "skiy.mountpopclickgetnow.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-11 14:21:48",
            "last_seen_utc": "2026-08-11 14:21:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872303": [
        {
            "ioc_value": "leappoploaderinstantly.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-11 14:21:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872293": [
        {
            "ioc_value": "72.62.195.74:2536",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 14:19:31",
            "last_seen_utc": "2026-08-12 10:40:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6dbfb645e779dbadab696f0088d0b94c,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1872294": [
        {
            "ioc_value": "ntds.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-11 14:19:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1872295": [
        {
            "ioc_value": "https://ntds.shop/jsrepo",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-08-11 14:19:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding",
            "anonymous": 0,
            "reporter": "Sir_XX"
        }
    ],
    "1872302": [
        {
            "ioc_value": "ar88b3st.eng-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:18:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872301": [
        {
            "ioc_value": "nffwcr.8kbetke.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:17:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872300": [
        {
            "ioc_value": "8kbetke.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:12:18",
            "last_seen_utc": "2026-08-11 14:12:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872299": [
        {
            "ioc_value": "j4lpcxth.en-us-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:08:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872298": [
        {
            "ioc_value": "47.94.224.229:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 14:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872297": [
        {
            "ioc_value": "ohtvwmv.keyslimdrops-com.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 14:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872292": [
        {
            "ioc_value": "rijqlqe.keyslimdrops-com.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:47:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872291": [
        {
            "ioc_value": "https://moniskk.live/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 13:31:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/moniskk.live",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872290": [
        {
            "ioc_value": "lcdipg.nitrilyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:27:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872289": [
        {
            "ioc_value": "nitrilyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:21:50",
            "last_seen_utc": "2026-08-11 19:50:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872288": [
        {
            "ioc_value": "ipxzpxs.keyslimdrops-com.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:21:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872287": [
        {
            "ioc_value": "neuroxene.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:20:39",
            "last_seen_utc": "2026-08-11 13:21:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872286": [
        {
            "ioc_value": "wjmd7fjq.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:20:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872285": [
        {
            "ioc_value": "verif-key-code.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-11 13:20:00",
            "last_seen_utc": "2026-08-12 13:10:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872284": [
        {
            "ioc_value": "moniskk.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-11 13:19:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872283": [
        {
            "ioc_value": "keyslimdrops-com.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 13:16:18",
            "last_seen_utc": "2026-08-11 16:37:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872280": [
        {
            "ioc_value": "47.94.224.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 13:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872279": [
        {
            "ioc_value": "65.109.97.220:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 13:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872277": [
        {
            "ioc_value": "43.254.166.41:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872278": [
        {
            "ioc_value": "47.254.73.23:18789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 13:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872276": [
        {
            "ioc_value": "192.252.185.78:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 13:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872275": [
        {
            "ioc_value": "http://tokjoza.shop:5200/products",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 13:01:06",
            "last_seen_utc": "2026-08-24 20:38:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d6d7eb91a0244520c23bdc39e5bae2db67fd0156977936448748aac61d8802d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872274": [
        {
            "ioc_value": "http://shkpiva.shop:5627/documents",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 13:01:03",
            "last_seen_utc": "2026-08-15 08:08:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d6d7eb91a0244520c23bdc39e5bae2db67fd0156977936448748aac61d8802d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872273": [
        {
            "ioc_value": "http://beljaro.shop:2536/addresses",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-11 13:00:57",
            "last_seen_utc": "2026-08-13 17:34:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d6d7eb91a0244520c23bdc39e5bae2db67fd0156977936448748aac61d8802d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872269": [
        {
            "ioc_value": "54.91.129.132:5074",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872270": [
        {
            "ioc_value": "54.91.129.132:41694",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872271": [
        {
            "ioc_value": "54.91.223.28:1065",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872272": [
        {
            "ioc_value": "54.91.223.28:41667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872266": [
        {
            "ioc_value": "54.80.154.193:6490",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872267": [
        {
            "ioc_value": "54.80.154.193:19941",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872268": [
        {
            "ioc_value": "54.91.129.132:4403",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-11 12:59:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872232": [
        {
            "ioc_value": "http://175.107.224.91:53866/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 12:48:52",
            "last_seen_utc": "2026-08-25 00:20:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.224.91",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872223": [
        {
            "ioc_value": "176.65.139.236:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 12:48:51",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872231": [
        {
            "ioc_value": "http://153.117.6.14:54264/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 12:48:50",
            "last_seen_utc": "2026-08-25 00:20:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.14",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872230": [
        {
            "ioc_value": "http://42.234.235.197:41860/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 12:48:49",
            "last_seen_utc": "2026-08-25 00:20:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/42.234.235.197",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872233": [
        {
            "ioc_value": "http://103.82.120.159:40690/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 12:48:48",
            "last_seen_utc": "2026-08-25 00:20:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.82.120.159",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872234": [
        {
            "ioc_value": "http://144.48.135.194:43581/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 12:48:48",
            "last_seen_utc": "2026-08-25 00:20:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.135.194",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872264": [
        {
            "ioc_value": "qcuqgf.neuroxan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 12:32:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872263": [
        {
            "ioc_value": "neuroxan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 12:30:08",
            "last_seen_utc": "2026-08-11 12:30:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872262": [
        {
            "ioc_value": "8.222.247.229:60132",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872253": [
        {
            "ioc_value": "64.226.68.236:60128",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872254": [
        {
            "ioc_value": "8.219.155.47:60149",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872255": [
        {
            "ioc_value": "8.219.169.170:60119",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872256": [
        {
            "ioc_value": "8.219.210.218:60139",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872257": [
        {
            "ioc_value": "8.219.241.116:60106",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872258": [
        {
            "ioc_value": "8.219.62.229:60143",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872259": [
        {
            "ioc_value": "8.219.69.227:60133",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872260": [
        {
            "ioc_value": "8.219.85.120:60142",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872261": [
        {
            "ioc_value": "8.222.179.91:60122",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872244": [
        {
            "ioc_value": "47.236.180.235:60136",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872245": [
        {
            "ioc_value": "47.236.28.220:60115",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872246": [
        {
            "ioc_value": "47.236.70.102:60108",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872247": [
        {
            "ioc_value": "47.237.124.1:60108",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872248": [
        {
            "ioc_value": "47.237.127.21:60124",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872249": [
        {
            "ioc_value": "47.237.167.249:60128",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872250": [
        {
            "ioc_value": "47.245.111.51:60121",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872251": [
        {
            "ioc_value": "47.245.84.42:60116",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872252": [
        {
            "ioc_value": "49.235.101.101:60147",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872237": [
        {
            "ioc_value": "106.13.23.149:6819",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872238": [
        {
            "ioc_value": "114.67.87.14:60125",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872239": [
        {
            "ioc_value": "18.175.166.211:60101",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872240": [
        {
            "ioc_value": "222.213.23.56:60134",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872241": [
        {
            "ioc_value": "47.236.122.72:60123",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872242": [
        {
            "ioc_value": "47.236.146.147:60134",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872243": [
        {
            "ioc_value": "47.236.172.100:60117",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.p2pinfect",
            "malware_alias": null,
            "malware_printable": "P2Pinfect",
            "first_seen_utc": "2026-08-11 12:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,P2Pinfect",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872236": [
        {
            "ioc_value": "erkosju.kerassyntials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 12:28:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872225": [
        {
            "ioc_value": "reavercncv4.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 12:16:39",
            "last_seen_utc": "2026-08-11 12:16:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872226": [
        {
            "ioc_value": "voltagec2.tech",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 12:16:39",
            "last_seen_utc": "2026-08-11 12:16:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872227": [
        {
            "ioc_value": "api.mineblack.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 12:16:39",
            "last_seen_utc": "2026-08-11 12:16:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872228": [
        {
            "ioc_value": "manbipll.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 12:16:39",
            "last_seen_utc": "2026-08-12 12:34:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872229": [
        {
            "ioc_value": "69cnc.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 12:16:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1872222": [
        {
            "ioc_value": "tuzijcshbotvenxhog.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 12:05:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872221": [
        {
            "ioc_value": "gtnfycq.keraissentials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 12:04:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872220": [
        {
            "ioc_value": "keraissentials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 12:03:18",
            "last_seen_utc": "2026-08-13 01:27:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872214": [
        {
            "ioc_value": "download.pooping.pics",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 12:02:44",
            "last_seen_utc": "2026-08-12 03:37:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-n4kvrsdp3z/behavioral1",
            "tags": "coinminer,XMRIG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872215": [
        {
            "ioc_value": "download.poop-tree.christmas",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 12:02:44",
            "last_seen_utc": "2026-08-12 03:37:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-n4kvrsdp3z/behavioral1",
            "tags": "coinminer,XMRIG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872216": [
        {
            "ioc_value": "download.turd-lovers.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 12:02:44",
            "last_seen_utc": "2026-08-12 03:37:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-n4kvrsdp3z/behavioral1",
            "tags": "coinminer,XMRIG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872217": [
        {
            "ioc_value": "download.poop-diaper.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 12:02:44",
            "last_seen_utc": "2026-08-12 03:37:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-n4kvrsdp3z/behavioral1",
            "tags": "coinminer,XMRIG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872218": [
        {
            "ioc_value": "download.sf8edhuhy8e21juiz8dujh.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 12:02:44",
            "last_seen_utc": "2026-08-11 12:02:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-n4kvrsdp3z/behavioral1",
            "tags": "coinminer,XMRIG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872219": [
        {
            "ioc_value": "download.dancefloor.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-11 12:02:44",
            "last_seen_utc": "2026-08-11 12:02:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260811-n4kvrsdp3z/behavioral1",
            "tags": "coinminer,XMRIG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872213": [
        {
            "ioc_value": "https://api.sm188wins.buzz",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:50:45",
            "last_seen_utc": "2026-08-11 12:23:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d570c33a5dce595138f6c25b6a1ecd7b4e474e6f440f44a2831aa5c84c1016f3/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872212": [
        {
            "ioc_value": "https://162.55.174.85",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:50:39",
            "last_seen_utc": "2026-08-11 12:23:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9d53f499b024885aac98733a79cd09f4165e372402fb8e9519561f006c705a36/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872211": [
        {
            "ioc_value": "vamjuwk.ijnitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 11:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872210": [
        {
            "ioc_value": "47.94.224.229:1111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 11:48:37",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872208": [
        {
            "ioc_value": "36.140.162.173:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 11:48:28",
            "last_seen_utc": "2026-09-01 02:47:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872207": [
        {
            "ioc_value": "https://65.21.96.129",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:45:47",
            "last_seen_utc": "2026-08-11 12:23:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bfd64fc1e264185bceda2f503e1b0b73ed97003fd3d46b67dd4a4b33ceb33ac1/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872206": [
        {
            "ioc_value": "rmseyw.nerve-armore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 11:41:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872205": [
        {
            "ioc_value": "nerve-armore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 11:39:37",
            "last_seen_utc": "2026-08-11 18:38:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872204": [
        {
            "ioc_value": "87.120.104.144:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-11 11:37:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/181be5dc450b80840b8d5eeafb09f35645b430f5ac2910f3abaf477748dadf1a/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872202": [
        {
            "ioc_value": "17734864904d450104ab46e262797f47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-11 11:32:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872200": [
        {
            "ioc_value": "181be5dc450b80840b8d5eeafb09f35645b430f5ac2910f3abaf477748dadf1a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-11 11:32:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872201": [
        {
            "ioc_value": "db24b1fdeba493b442ac4d6aea6f3c8d05a3691a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-11 11:32:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1872191": [
        {
            "ioc_value": "181.214.136.12:404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 11:26:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872192": [
        {
            "ioc_value": "94.154.43.97:1302",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 11:26:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872193": [
        {
            "ioc_value": "94.154.43.97:4330",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 11:26:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872194": [
        {
            "ioc_value": "94.154.43.97:44321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-11 11:26:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1872199": [
        {
            "ioc_value": "https://rul.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:20:06",
            "last_seen_utc": "2026-08-11 14:26:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872196": [
        {
            "ioc_value": "rul.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:20:05",
            "last_seen_utc": "2026-08-11 14:26:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872197": [
        {
            "ioc_value": "https://rul.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:20:05",
            "last_seen_utc": "2026-08-11 14:26:22",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872198": [
        {
            "ioc_value": "rul.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 11:20:05",
            "last_seen_utc": "2026-08-11 14:26:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1872195": [
        {
            "ioc_value": "2p7gaujv.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 11:19:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872190": [
        {
            "ioc_value": "213.199.55.80:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 11:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872188": [
        {
            "ioc_value": "213.199.55.80:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872189": [
        {
            "ioc_value": "213.199.55.80:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872187": [
        {
            "ioc_value": "106.75.139.193:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872186": [
        {
            "ioc_value": "wgjwhhe.igni--tra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 11:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872184": [
        {
            "ioc_value": "fnwaiz.mitolyn-us-en.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 10:50:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872183": [
        {
            "ioc_value": "mitolyn-us-en.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 10:49:09",
            "last_seen_utc": "2026-08-11 10:49:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872177": [
        {
            "ioc_value": "ppcnewsfeed.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 10:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,SmartApeSG,webinject,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872179": [
        {
            "ioc_value": "windowsupdate.webhop.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 10:10:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d7eaa360c4a598592d707901fad1c719f295ce51c16edd3d4377968100641d8e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872178": [
        {
            "ioc_value": "newpapidnsorg.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-11 10:10:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9dadc0f51d3993652b7f6194eea07d28d3c6b6eedc59aef227f4fff124a4747a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872176": [
        {
            "ioc_value": "ovgkkdx.ignaitra.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 10:08:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872175": [
        {
            "ioc_value": "wazrhp.web-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 10:07:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872174": [
        {
            "ioc_value": "ignaitra.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 10:07:17",
            "last_seen_utc": "2026-08-11 10:07:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872173": [
        {
            "ioc_value": "94.198.96.165:62769",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-11 10:06:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48a200216cdaa3eb89f8a53dff18616f9b9fe45ed8eda50f11a676375cc4c930/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872172": [
        {
            "ioc_value": "privatehos.casacam.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-11 10:06:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48a200216cdaa3eb89f8a53dff18616f9b9fe45ed8eda50f11a676375cc4c930/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872170": [
        {
            "ioc_value": "31.56.209.60:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 10:05:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1a9136d68060fed63853979b333bfa6ac4f5e36a2c93119d695e6b5615a43e87/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872168": [
        {
            "ioc_value": "213.199.55.80:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 10:05:06",
            "last_seen_utc": "2026-08-22 09:02:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872169": [
        {
            "ioc_value": "213.199.55.80:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872166": [
        {
            "ioc_value": "106.75.139.193:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872167": [
        {
            "ioc_value": "192.252.185.78:65530",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 10:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872165": [
        {
            "ioc_value": "updatewindows.gotdns.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 10:01:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d7eaa360c4a598592d707901fad1c719f295ce51c16edd3d4377968100641d8e/",
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872164": [
        {
            "ioc_value": "ma8or18p.en-us-ignitraa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:59:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872163": [
        {
            "ioc_value": "23.251.34.31:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-08-11 09:57:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b8c508760c9a35304b17ac4156b93ee76b6b57bb05e2426c5f9912b65ffea0bd/",
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872162": [
        {
            "ioc_value": "109.168.160.73:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:52:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eddc0ac302105dc7ec74c269a7ae3162e120c0610976d662975c0dd3e089b1b7/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872161": [
        {
            "ioc_value": "98.156.49.133:2021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-11 09:47:24",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872159": [
        {
            "ioc_value": "57.181.120.61:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-08-11 09:46:52",
            "last_seen_utc": "2026-09-01 02:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872158": [
        {
            "ioc_value": "54.54.33.23:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:46:51",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872157": [
        {
            "ioc_value": "23.94.252.16:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-11 09:46:08",
            "last_seen_utc": "2026-09-01 02:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872153": [
        {
            "ioc_value": "192.229.115.156:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:46",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872154": [
        {
            "ioc_value": "192.229.115.156:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:46",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872155": [
        {
            "ioc_value": "192.229.115.156:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:46",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872156": [
        {
            "ioc_value": "192.229.115.162:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:46",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872151": [
        {
            "ioc_value": "192.229.115.154:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872152": [
        {
            "ioc_value": "192.229.115.154:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872150": [
        {
            "ioc_value": "185.174.101.235:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-11 09:44:32",
            "last_seen_utc": "2026-09-01 02:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872149": [
        {
            "ioc_value": "barikadeuku.freedev.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 09:44:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ab1203a41aa0208cb1d0123ffac2c284c62bbfaee0dcd1dc3eb38cc1021c66f/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872148": [
        {
            "ioc_value": "178.16.52.136:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 09:44:26",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872146": [
        {
            "ioc_value": "128.90.102.72:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-11 09:43:32",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872145": [
        {
            "ioc_value": "104.251.181.111:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-11 09:43:18",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872144": [
        {
            "ioc_value": "104.243.248.63:300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 09:43:17",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872143": [
        {
            "ioc_value": "without.kesug.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 09:41:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30b7576cc070132358e59dbbbad3e912e656719c9b3a7047b347aaeb33ebd891/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872141": [
        {
            "ioc_value": "132.243.225.173:7080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-11 09:39:03",
            "last_seen_utc": "2026-08-18 10:56:26",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99d031e1d29cc2711f9223e8152016ff58ad68fd9e14dce5b0a8dadfb741b088/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872113": [
        {
            "ioc_value": "nickilorr421.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872114": [
        {
            "ioc_value": "roggymo87.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872115": [
        {
            "ioc_value": "tullingpui.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872117": [
        {
            "ioc_value": "http://185.173.147.153/d657b8d5cb?force=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:11",
            "last_seen_utc": "2026-08-12 13:10:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872116": [
        {
            "ioc_value": "karburatorotzhigi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:10",
            "last_seen_utc": "2026-08-12 08:28:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872118": [
        {
            "ioc_value": "http://185.173.147.153/4adc82c51956cd?force=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:10",
            "last_seen_utc": "2026-08-12 13:10:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872119": [
        {
            "ioc_value": "http://185.173.147.153/f422ff057d106c?force=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:09",
            "last_seen_utc": "2026-08-12 13:10:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872120": [
        {
            "ioc_value": "62f8864271c69a990cd3bbb9369b452923b1a85d2b956b4058c33fd94c906c60",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:09",
            "last_seen_utc": "2026-08-12 13:10:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872121": [
        {
            "ioc_value": "600f0a11037422c503b642696ba599a1eaa4727e8380c74b8673faa49a029ae7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:09",
            "last_seen_utc": "2026-08-12 13:10:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872122": [
        {
            "ioc_value": "a00ca1b1edb9bad31ebaa66fd04f4423e8376af186d96dcae6864e364d1d9e1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:08",
            "last_seen_utc": "2026-08-12 13:10:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872123": [
        {
            "ioc_value": "www.oneclickstay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding,webinject,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872124": [
        {
            "ioc_value": "www.mandala-net.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:07",
            "last_seen_utc": "2026-08-20 18:13:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding,webinject,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872125": [
        {
            "ioc_value": "swtrade.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding,webinject,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872126": [
        {
            "ioc_value": "igualdad.iaa.csic.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:07",
            "last_seen_utc": "2026-08-20 18:13:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding,webinject,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872127": [
        {
            "ioc_value": "wcb.uge.mybluehost.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 09:19:06",
            "last_seen_utc": "2026-08-24 00:44:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHiding,webinject,WordPress",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872139": [
        {
            "ioc_value": "lfncbj.usa--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:18:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872138": [
        {
            "ioc_value": "h9wjuhba.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:17:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872137": [
        {
            "ioc_value": "vfepwox.hyptoburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:17:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872136": [
        {
            "ioc_value": "ie793b69.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:17:12",
            "last_seen_utc": "2026-08-20 15:31:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872135": [
        {
            "ioc_value": "hyptoburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:16:46",
            "last_seen_utc": "2026-08-13 03:43:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872134": [
        {
            "ioc_value": "usasightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 09:15:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872133": [
        {
            "ioc_value": "106.75.139.193:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 09:05:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872132": [
        {
            "ioc_value": "106.75.139.193:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 09:05:08",
            "last_seen_utc": "2026-08-12 07:32:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872131": [
        {
            "ioc_value": "mail.outlook-office365.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-11 09:03:53",
            "last_seen_utc": "2026-08-11 09:03:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/55be9d1e2a4edeede9d8223d5f932be9233872df7239501f2f3c305672bec4f2/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872130": [
        {
            "ioc_value": "195.250.27.46:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-11 09:02:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fe45e6bca6a874ed8fb80b0c112d66d4421e1a75506cef8db78eb663ee864731/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872129": [
        {
            "ioc_value": "tagmentos.bingbaochow.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 09:00:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872128": [
        {
            "ioc_value": "haghuer.bingbaochow.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 09:00:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872112": [
        {
            "ioc_value": "91.92.242.32:7407",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 08:52:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/",
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872111": [
        {
            "ioc_value": "combustu.bingbaochow.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-11 08:52:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/",
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872110": [
        {
            "ioc_value": "rkbqja.us-us-us-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 08:30:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872109": [
        {
            "ioc_value": "qvzuvdx.hypatoburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 08:29:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872108": [
        {
            "ioc_value": "hypatoburn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 08:26:15",
            "last_seen_utc": "2026-08-11 08:26:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872107": [
        {
            "ioc_value": "us-us-us-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 08:25:07",
            "last_seen_utc": "2026-08-13 10:58:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1872106": [
        {
            "ioc_value": "alert.livewave47.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 08:20:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc834c0c0982771016202f3ca1808d3bba329379eba79e1d04db31cafb1f43e1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872105": [
        {
            "ioc_value": "https://alert.livewave47.one/pipe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 08:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc834c0c0982771016202f3ca1808d3bba329379eba79e1d04db31cafb1f43e1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872103": [
        {
            "ioc_value": "1.14.193.53:7717",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 08:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872102": [
        {
            "ioc_value": "183.60.226.2:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 08:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872101": [
        {
            "ioc_value": "https://aware-cr1.com/api/beacon",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 07:52:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c577d3ec66832819cf86a0ff799143caf701ede1edf132f7fad5c3fddff830c5/",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872100": [
        {
            "ioc_value": "172.111.163.168:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-11 07:46:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f25ebc1d6d07a81ebb7f2d5bb5983a23f1b503a9badad26fa1989cc44e2fe18f/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872099": [
        {
            "ioc_value": "204.93.220.122:17508",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-11 07:45:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d0ee157e7de36b409fb97b9fccec05bbc05ec2f436f3d939abc6456d6e0bd29c/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872098": [
        {
            "ioc_value": "155.103.69.20:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-11 07:43:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a8a05bfa26a75cf0376d25a29aff297e40035ac70a20d7f49f255d95b385aa9e/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872097": [
        {
            "ioc_value": "cadltmk.gutdrops-us-eng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 07:37:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872094": [
        {
            "ioc_value": "hotrum.us-eng-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 07:35:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872092": [
        {
            "ioc_value": "82.157.33.67:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 07:32:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872091": [
        {
            "ioc_value": "139.162.38.41:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 07:32:31",
            "last_seen_utc": "2026-08-13 08:29:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872042": [
        {
            "ioc_value": "visitcameronparish.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 07:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872043": [
        {
            "ioc_value": "coincidentbitter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 07:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872044": [
        {
            "ioc_value": "printable.rhinoplax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 07:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872045": [
        {
            "ioc_value": "myhealthdiary.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 07:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872063": [
        {
            "ioc_value": "http://223.123.73.182:54176/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 07:30:07",
            "last_seen_utc": "2026-08-25 00:20:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.73.182",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872064": [
        {
            "ioc_value": "http://223.123.43.132:40473/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 07:30:07",
            "last_seen_utc": "2026-08-25 00:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.132",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872065": [
        {
            "ioc_value": "http://111.92.157.204:47463/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 07:30:07",
            "last_seen_utc": "2026-08-25 00:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.157.204",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1872090": [
        {
            "ioc_value": "hzydyub.gutdrops-store.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 07:27:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872088": [
        {
            "ioc_value": "vxcgzz.us-en-us-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 07:25:08",
            "last_seen_utc": "2026-08-12 10:33:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872086": [
        {
            "ioc_value": "tuko2n3j.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 07:20:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872085": [
        {
            "ioc_value": "zappelinej.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-11 07:13:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3a18a8e9053c2b3a16f052c2595fadf5af3313d2189b88c03d10adae2c2a424/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872084": [
        {
            "ioc_value": "152.89.162.7:49798",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-11 07:13:29",
            "last_seen_utc": "2026-08-11 14:19:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3a18a8e9053c2b3a16f052c2595fadf5af3313d2189b88c03d10adae2c2a424/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872082": [
        {
            "ioc_value": "101.32.34.248:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872083": [
        {
            "ioc_value": "166.0.27.224:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872081": [
        {
            "ioc_value": "101.132.120.245:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 07:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872080": [
        {
            "ioc_value": "104.249.10.95:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 07:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872079": [
        {
            "ioc_value": "155.103.70.232:14554",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-11 06:58:27",
            "last_seen_utc": "2026-09-01 00:01:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d6fd0e658ec1560ce283754920373825805e7e57176f371e6bc8b9270055bab0/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872078": [
        {
            "ioc_value": "derovj.us-en-us-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 06:57:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872076": [
        {
            "ioc_value": "82.23.163.207:10128",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-11 06:52:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CoinMiner,dropped-by-amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872075": [
        {
            "ioc_value": "dqjxvqn.gut--drops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 06:51:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872073": [
        {
            "ioc_value": "structuredolls.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-11 06:41:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872072": [
        {
            "ioc_value": "technocalfindersda.bounceme.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-11 06:40:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/45b1296b5c7de2b1a159bfb7d91cf4186d8b076452c9d683174ea47dad1ed5b1/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872071": [
        {
            "ioc_value": "http://46.151.182.189/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-11 06:32:15",
            "last_seen_utc": "2026-08-20 09:05:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872070": [
        {
            "ioc_value": "wss.infrastructurecore.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-11 06:29:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4153db289c9a3de57845890aadeec7951fcf5516fd39f25c6d8c3e42fc21f801/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872069": [
        {
            "ioc_value": "infrastructurecore.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-11 06:28:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4153db289c9a3de57845890aadeec7951fcf5516fd39f25c6d8c3e42fc21f801/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872068": [
        {
            "ioc_value": "217.60.241.91:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-11 06:23:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/56cbbf481154a08fbfec54484ca04f6045dfe0e2fc082c6249592ecc4aaf1c5e/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872067": [
        {
            "ioc_value": "94.154.32.228:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-11 06:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0eebdbd4fb46d04352fa09ce96cb34991bd5950cf8a8be9e403ddb1d485a870a/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872066": [
        {
            "ioc_value": "songsbeginner.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-11 06:22:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872060": [
        {
            "ioc_value": "102.220.160.58:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-11 06:17:57",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872061": [
        {
            "ioc_value": "102.220.160.58:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-11 06:17:57",
            "last_seen_utc": "2026-08-27 07:52:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872062": [
        {
            "ioc_value": "102.220.160.58:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-11 06:17:57",
            "last_seen_utc": "2026-08-27 07:52:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872059": [
        {
            "ioc_value": "102.220.160.58:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-11 06:17:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872051": [
        {
            "ioc_value": "1e7ca9074cc2eca8d366022629f665d9ffaa79e0621bb579bf5aabe681cb07e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872052": [
        {
            "ioc_value": "8ebaf3ba0be7b62269aaf333cfaf66c1dea6e8ee495a917691beb550b4bbf0ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872053": [
        {
            "ioc_value": "e3fb920aa70c7ad5c67b4d9b8e60954f5e0c1a07c0eba09505816b966f4d1a3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872054": [
        {
            "ioc_value": "165e94c87ef17389c8de25ba2a6c31b348e3c916dab89d0dd3708156414f3de5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872055": [
        {
            "ioc_value": "b55cf5af8b57e9d56c69d00e023e2384c7eb184614c2a2a283062ebeaf4a26c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872056": [
        {
            "ioc_value": "a46230a1638b9b341d15a640ead1b885548c1d1e5a149657e8e315540a068be8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872057": [
        {
            "ioc_value": "7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872058": [
        {
            "ioc_value": "ae9ee9db7c41e04c531298782b908766c769a899aa92df3f64f4a83baa77ad09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872048": [
        {
            "ioc_value": "1093b4045b45a8498d146e31788c25769f992056c8ffc582b5d8c06598598966",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872049": [
        {
            "ioc_value": "05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872050": [
        {
            "ioc_value": "bb9136494a546368e7c9b6252c2e1c5af9327c07947908a9ba6fdd78fb4bf4cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:14:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735",
            "tags": "WP2Shell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1872047": [
        {
            "ioc_value": "ijyzvm.shop-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 06:07:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872041": [
        {
            "ioc_value": "107.182.173.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-11 06:05:05",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872040": [
        {
            "ioc_value": "eqtatpq.go-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 06:01:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872039": [
        {
            "ioc_value": "jessespridecharters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:00:48",
            "last_seen_utc": "2026-08-11 09:27:59",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872037": [
        {
            "ioc_value": "https://yogasitesdev.wpengine.com/2/15.ps1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 06:00:38",
            "last_seen_utc": "2026-08-11 06:00:39",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872036": [
        {
            "ioc_value": "7zcef54a.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 05:48:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872035": [
        {
            "ioc_value": "myzxeb.shop-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 05:46:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871888": [
        {
            "ioc_value": "161.35.48.40:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-11 05:46:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871897": [
        {
            "ioc_value": "auracorp.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.aurastealer",
            "malware_alias": "AURA Stealer,AURASTEAL",
            "malware_printable": "Aura Stealer",
            "first_seen_utc": "2026-08-11 05:46:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "aurastealer,c2",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871905": [
        {
            "ioc_value": "bluepiip.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:46:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871906": [
        {
            "ioc_value": "https://bluepiip.digital/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:46:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871927": [
        {
            "ioc_value": "http://175.107.36.232:51731/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-11 05:46:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.36.232",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871932": [
        {
            "ioc_value": "154.213.233.164:48305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 05:46:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "132839,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1871933": [
        {
            "ioc_value": "52.202.75.213:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-11 05:46:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14618,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1871937": [
        {
            "ioc_value": "196.75.175.174:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-08-11 05:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "36903,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1871939": [
        {
            "ioc_value": "176.65.139.228:6677",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:46:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e4eaae680e23b413ec82a1cb66b4704f2d5df913520700f15e1a65c4ce10d322/",
            "tags": "honeypot,iot,sentinel",
            "anonymous": 0,
            "reporter": "abuserobot66609"
        }
    ],
    "1871940": [
        {
            "ioc_value": "176.65.139.228:6678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:46:02",
            "last_seen_utc": "2026-08-13 05:59:34",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e4eaae680e23b413ec82a1cb66b4704f2d5df913520700f15e1a65c4ce10d322/",
            "tags": "honeypot,iot,sentinel",
            "anonymous": 0,
            "reporter": "abuserobot66609"
        }
    ],
    "1871942": [
        {
            "ioc_value": "333fd9dd9d84b58c4eef84a8d07670dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:46:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871943": [
        {
            "ioc_value": "acd02a4f8b25e9106400e0a3af63a760",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:46:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871944": [
        {
            "ioc_value": "7d589f794115171949fa2a7e3b66dcd4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871945": [
        {
            "ioc_value": "a482d7e61ba199cbe005a549249894ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871946": [
        {
            "ioc_value": "31fe32bddd2bd4b825e355516d852476",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871947": [
        {
            "ioc_value": "3b97927cde6c906f6b6f03797c21efa7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871948": [
        {
            "ioc_value": "44da29144b151062bce633e9ce62de85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871949": [
        {
            "ioc_value": "direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871950": [
        {
            "ioc_value": "direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871951": [
        {
            "ioc_value": "direwolf3ddtab5anvhulcelauvoxu2a7l264hqs6vtxtgrqsjfvodid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware",
            "tags": "direwolf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1871955": [
        {
            "ioc_value": "38.207.178.195:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-11 05:45:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871958": [
        {
            "ioc_value": "justkias.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871959": [
        {
            "ioc_value": "https://siege-close.com/x9i32md/w1/la02",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:45:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872034": [
        {
            "ioc_value": "pmszxzb.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 05:42:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872030": [
        {
            "ioc_value": "https://testmyopinion.live/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/testmyopinion.live",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872031": [
        {
            "ioc_value": "https://belorks.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/belorks.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1872029": [
        {
            "ioc_value": "byy3qdk9.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 05:16:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872028": [
        {
            "ioc_value": "agioty.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 05:11:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872025": [
        {
            "ioc_value": "107.182.173.199:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-11 05:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872026": [
        {
            "ioc_value": "47.254.73.23:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 05:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872024": [
        {
            "ioc_value": "wlwjxpc.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872023": [
        {
            "ioc_value": "mool.mesoptik.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-11 04:58:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding,TELEPUZ,UvoxLiaison",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872020": [
        {
            "ioc_value": "https://lb.propertyfind.cc/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-11 04:50:56",
            "last_seen_utc": "2026-08-14 11:19:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872019": [
        {
            "ioc_value": "https://monitor.telemetry-controlsystem.in.net/8645-7f5a31344b9e",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-11 04:50:55",
            "last_seen_utc": "2026-08-14 11:19:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872017": [
        {
            "ioc_value": "https://health.winnererasable.cc/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-11 04:50:54",
            "last_seen_utc": "2026-08-14 11:19:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872018": [
        {
            "ioc_value": "https://monitor.telemetry-controlsystem.in.net/jquery.min.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-11 04:50:54",
            "last_seen_utc": "2026-08-14 11:19:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872016": [
        {
            "ioc_value": "monitor.telemetry-controlsystem.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.animate_clipper",
            "malware_alias": null,
            "malware_printable": "AnimateClipper",
            "first_seen_utc": "2026-08-11 04:50:53",
            "last_seen_utc": "2026-08-14 11:19:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AnimateClipper,ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872014": [
        {
            "ioc_value": "wts.tb88vip.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:50:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872015": [
        {
            "ioc_value": "https://wts.tb88vip.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:50:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872013": [
        {
            "ioc_value": "https://45.86.245.217",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872012": [
        {
            "ioc_value": "https://193.233.139.123",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:50:21",
            "last_seen_utc": "2026-08-11 04:50:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872011": [
        {
            "ioc_value": "https://91.92.242.142",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:50:11",
            "last_seen_utc": "2026-08-11 04:50:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872010": [
        {
            "ioc_value": "https://5.75.212.195",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872009": [
        {
            "ioc_value": "https://167.233.197.223",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:52",
            "last_seen_utc": "2026-08-11 04:50:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872008": [
        {
            "ioc_value": "https://167.233.133.101",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872007": [
        {
            "ioc_value": "xhlzvk.goldalignn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:49:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872006": [
        {
            "ioc_value": "https://167.233.137.121",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872004": [
        {
            "ioc_value": "dum.tb88soul.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:34",
            "last_seen_utc": "2026-08-11 04:50:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872005": [
        {
            "ioc_value": "https://dum.tb88soul.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:34",
            "last_seen_utc": "2026-08-11 04:50:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872003": [
        {
            "ioc_value": "https://91.98.108.158",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:32",
            "last_seen_utc": "2026-08-11 04:49:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872000": [
        {
            "ioc_value": "https://91.98.98.86",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:30",
            "last_seen_utc": "2026-08-11 04:49:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872001": [
        {
            "ioc_value": "kwt.tb88roki.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:30",
            "last_seen_utc": "2026-08-11 04:49:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1872002": [
        {
            "ioc_value": "https://kwt.tb88roki.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:30",
            "last_seen_utc": "2026-08-11 04:49:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871999": [
        {
            "ioc_value": "https://78.40.209.22",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871998": [
        {
            "ioc_value": "https://31.207.7.189",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871997": [
        {
            "ioc_value": "https://telegram.me/x0xprs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:10",
            "last_seen_utc": "2026-08-11 04:50:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871996": [
        {
            "ioc_value": "https://178.104.137.78",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:06",
            "last_seen_utc": "2026-08-11 04:50:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871995": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198662103927",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:03",
            "last_seen_utc": "2026-08-11 04:50:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871994": [
        {
            "ioc_value": "https://pik.tb88cuka.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:49:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871993": [
        {
            "ioc_value": "https://smc.tb88cuka.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:48:54",
            "last_seen_utc": "2026-08-11 04:48:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871991": [
        {
            "ioc_value": "https://telegram.me/t8l1ak",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:48:49",
            "last_seen_utc": "2026-08-11 04:50:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871990": [
        {
            "ioc_value": "ziwuqto.eng-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871988": [
        {
            "ioc_value": "https://188.245.165.232",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 04:40:51",
            "last_seen_utc": "2026-08-11 04:50:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871987": [
        {
            "ioc_value": "izvpbwe.eng-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:27:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871984": [
        {
            "ioc_value": "kgv6by8c.eng--cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:16:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871983": [
        {
            "ioc_value": "hhxujcp.eng-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:09:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871982": [
        {
            "ioc_value": "ardxjz.goldalaign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 04:08:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871981": [
        {
            "ioc_value": "132.232.245.164:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871978": [
        {
            "ioc_value": "101.43.115.8:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871979": [
        {
            "ioc_value": "119.45.105.71:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871980": [
        {
            "ioc_value": "111.229.232.3:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 04:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871974": [
        {
            "ioc_value": "https://ban.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 03:50:05",
            "last_seen_utc": "2026-08-11 10:26:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871975": [
        {
            "ioc_value": "ban.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 03:50:05",
            "last_seen_utc": "2026-08-11 10:25:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871976": [
        {
            "ioc_value": "https://ban.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 03:50:05",
            "last_seen_utc": "2026-08-11 10:25:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871973": [
        {
            "ioc_value": "ban.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-11 03:50:04",
            "last_seen_utc": "2026-08-11 10:26:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871972": [
        {
            "ioc_value": "wag1cew7.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 03:19:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871971": [
        {
            "ioc_value": "tknlci.go-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 03:15:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871970": [
        {
            "ioc_value": "qgcoxsq.eng--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 03:14:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871967": [
        {
            "ioc_value": "kuoquga.eng--neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 03:07:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871965": [
        {
            "ioc_value": "180.76.53.183:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-08-11 03:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871964": [
        {
            "ioc_value": "gcobdr.get-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 02:50:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871962": [
        {
            "ioc_value": "nlnnadg.en-us-thyrafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 02:16:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871960": [
        {
            "ioc_value": "verif-key-code.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 02:08:22",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871957": [
        {
            "ioc_value": "shnsji.get-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 02:00:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871954": [
        {
            "ioc_value": "jrnix9p0.eng-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 01:36:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871953": [
        {
            "ioc_value": "svwuxca.en-us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 01:26:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871941": [
        {
            "ioc_value": "ae5ap687.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 01:16:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871938": [
        {
            "ioc_value": "wtdqug.get--ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 01:05:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871930": [
        {
            "ioc_value": "qvmmaxk.en-us--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 00:36:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871929": [
        {
            "ioc_value": "dbfvnqy.en-us--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 00:31:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871926": [
        {
            "ioc_value": "nduzuc.get-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-11 00:14:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871924": [
        {
            "ioc_value": "43.254.166.41:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 23:46:52",
            "last_seen_utc": "2026-09-01 02:47:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871923": [
        {
            "ioc_value": "update.qzkgpqn.kdns.fr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 23:46:29",
            "last_seen_utc": "2026-09-01 02:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871922": [
        {
            "ioc_value": "jrplawb.en-us--neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:43:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871918": [
        {
            "ioc_value": "https://goo.bercak4d.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 23:40:05",
            "last_seen_utc": "2026-08-11 03:26:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871919": [
        {
            "ioc_value": "goo.sm188blood.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 23:40:05",
            "last_seen_utc": "2026-08-11 03:25:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871920": [
        {
            "ioc_value": "https://goo.sm188blood.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 23:40:05",
            "last_seen_utc": "2026-08-11 03:25:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871917": [
        {
            "ioc_value": "goo.bercak4d.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 23:40:04",
            "last_seen_utc": "2026-08-11 03:26:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871916": [
        {
            "ioc_value": "ikhppmm.buy-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:32:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871914": [
        {
            "ioc_value": "ccrcjzl.shop-mochalean.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:31:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871912": [
        {
            "ioc_value": "mfkxos.getbraindefender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:26:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871910": [
        {
            "ioc_value": "zs7rf4oz.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:18:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871909": [
        {
            "ioc_value": "gs8istwl.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:18:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871908": [
        {
            "ioc_value": "bkuseej.goldelign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 23:05:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871904": [
        {
            "ioc_value": "lydbvsp.shop-mochalean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 22:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871903": [
        {
            "ioc_value": "shop-mochalean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 22:34:41",
            "last_seen_utc": "2026-08-10 22:35:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871902": [
        {
            "ioc_value": "xgbkho.get-braindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 22:34:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871901": [
        {
            "ioc_value": "get-braindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 22:33:00",
            "last_seen_utc": "2026-08-10 22:33:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871900": [
        {
            "ioc_value": "nsfpfas.goldelign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 22:14:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871899": [
        {
            "ioc_value": "goldelign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 22:13:19",
            "last_seen_utc": "2026-08-11 07:57:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871898": [
        {
            "ioc_value": "vhdekj.en-web-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 21:47:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871896": [
        {
            "ioc_value": "en-web-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 21:42:28",
            "last_seen_utc": "2026-08-10 21:43:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871895": [
        {
            "ioc_value": "i0bx7ts6.en-en-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 21:25:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871894": [
        {
            "ioc_value": "jortbrc.goldaling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 21:24:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871893": [
        {
            "ioc_value": "goldaling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 21:22:49",
            "last_seen_utc": "2026-08-10 21:23:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871892": [
        {
            "ioc_value": "lvr1xtam.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 21:14:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871887": [
        {
            "ioc_value": "jqiltw.enus-tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 20:52:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871886": [
        {
            "ioc_value": "enus-tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 20:52:00",
            "last_seen_utc": "2026-08-10 20:52:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871885": [
        {
            "ioc_value": "qoommbx.goldalin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 20:33:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871884": [
        {
            "ioc_value": "goldalin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 20:32:17",
            "last_seen_utc": "2026-08-10 20:33:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871881": [
        {
            "ioc_value": "192.252.185.78:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 20:05:05",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871880": [
        {
            "ioc_value": "wnplhn.enus-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 20:02:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871879": [
        {
            "ioc_value": "enus-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 20:01:28",
            "last_seen_utc": "2026-08-10 20:02:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871878": [
        {
            "ioc_value": "91.92.42.22:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:46:44",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871877": [
        {
            "ioc_value": "85.137.252.216:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:46:36",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871876": [
        {
            "ioc_value": "64.89.160.127:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 19:46:25",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871875": [
        {
            "ioc_value": "5.133.102.33:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-10 19:46:16",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871874": [
        {
            "ioc_value": "46.151.182.113:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-10 19:46:12",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871873": [
        {
            "ioc_value": "45.88.91.145:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:46:10",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871872": [
        {
            "ioc_value": "38.54.45.183:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-08-10 19:45:52",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871871": [
        {
            "ioc_value": "37.244.251.138:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-10 19:45:48",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871870": [
        {
            "ioc_value": "31.76.125.2:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:45:45",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871869": [
        {
            "ioc_value": "216.250.254.245:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 19:45:31",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871868": [
        {
            "ioc_value": "186.168.97.172:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-10 19:44:23",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871867": [
        {
            "ioc_value": "181.215.49.119:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:44:14",
            "last_seen_utc": "2026-09-01 02:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871865": [
        {
            "ioc_value": "172.81.132.75:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:44:05",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871866": [
        {
            "ioc_value": "172.81.132.75:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:44:05",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871864": [
        {
            "ioc_value": "151.241.99.168:1447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 19:43:40",
            "last_seen_utc": "2026-09-01 02:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871863": [
        {
            "ioc_value": "118.99.88.240:10549",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871862": [
        {
            "ioc_value": "104.249.10.87:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 19:43:13",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871861": [
        {
            "ioc_value": "103.213.248.61:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 19:43:06",
            "last_seen_utc": "2026-09-01 02:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871860": [
        {
            "ioc_value": "nksdosz.goldalignn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 19:42:12",
            "last_seen_utc": "2026-08-18 11:44:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871858": [
        {
            "ioc_value": "http://shkpiva.shop:5627/comments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 19:35:35",
            "last_seen_utc": "2026-08-12 07:26:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b431762c4d8a0a25d9a210bbfdfa302c2be3dca39121cf10ede9575332b63ffc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871857": [
        {
            "ioc_value": "http://beljaro.shop:2536/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 19:35:31",
            "last_seen_utc": "2026-08-16 10:28:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b431762c4d8a0a25d9a210bbfdfa302c2be3dca39121cf10ede9575332b63ffc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871806": [
        {
            "ioc_value": "38.97.63.243:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.vo1d",
            "malware_alias": null,
            "malware_printable": "vo1d",
            "first_seen_utc": "2026-08-10 19:31:02",
            "last_seen_utc": "2026-09-01 02:09:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "loader,Vo1d",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871835": [
        {
            "ioc_value": "https://seversin.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 19:31:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871836": [
        {
            "ioc_value": "https://seversin.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 19:31:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871837": [
        {
            "ioc_value": "https://seversin.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 19:31:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871838": [
        {
            "ioc_value": "https://seversin.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 19:31:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871840": [
        {
            "ioc_value": "seversin.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 19:31:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871839": [
        {
            "ioc_value": "https://seversin.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 19:30:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871842": [
        {
            "ioc_value": "http://61.52.157.83:44657/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 19:30:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/61.52.157.83",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871843": [
        {
            "ioc_value": "http://153.117.14.15:48887/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 19:30:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.14.15",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871856": [
        {
            "ioc_value": "206.189.81.41:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-10 19:30:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871855": [
        {
            "ioc_value": "59qxatd0.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 19:16:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871854": [
        {
            "ioc_value": "fgauki.en-us-thyrafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 19:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871853": [
        {
            "ioc_value": "en-us-thyrafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 19:10:47",
            "last_seen_utc": "2026-08-11 07:57:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871851": [
        {
            "ioc_value": "192.252.179.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 19:05:07",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871850": [
        {
            "ioc_value": "http://tokjoza.shop:5200/images",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 19:00:59",
            "last_seen_utc": "2026-08-12 07:26:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bd899846f7782027431f3a4f582b166f6944bbc4fdbd86aadd78c248c57f485/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871849": [
        {
            "ioc_value": "http://shkpiva.shop:5627/reviews",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 19:00:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bd899846f7782027431f3a4f582b166f6944bbc4fdbd86aadd78c248c57f485/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871848": [
        {
            "ioc_value": "http://beljaro.shop:2536/projects",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 19:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7bd899846f7782027431f3a4f582b166f6944bbc4fdbd86aadd78c248c57f485/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871847": [
        {
            "ioc_value": "hmskuzk.get-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 18:51:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871846": [
        {
            "ioc_value": "get-thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 18:50:08",
            "last_seen_utc": "2026-08-11 07:57:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871845": [
        {
            "ioc_value": "vrswff.en-us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 18:22:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871844": [
        {
            "ioc_value": "en-us-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 18:20:18",
            "last_seen_utc": "2026-08-19 12:45:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871841": [
        {
            "ioc_value": "28jk0aeb.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 18:17:12",
            "last_seen_utc": "2026-08-17 10:41:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871834": [
        {
            "ioc_value": "jmnttbq.getsightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 18:05:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871833": [
        {
            "ioc_value": "http://tokjoza.shop:5200/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 18:01:04",
            "last_seen_utc": "2026-08-12 15:52:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/721e28946f79f65e9722d27fdb6fb384a3fb747c82b4c8c2f9dffc0fdc6c0a49/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871832": [
        {
            "ioc_value": "http://shkpiva.shop:5627/videos",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 18:01:01",
            "last_seen_utc": "2026-08-14 01:12:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/721e28946f79f65e9722d27fdb6fb384a3fb747c82b4c8c2f9dffc0fdc6c0a49/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871831": [
        {
            "ioc_value": "http://beljaro.shop:2536/contacts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 18:00:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/721e28946f79f65e9722d27fdb6fb384a3fb747c82b4c8c2f9dffc0fdc6c0a49/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871830": [
        {
            "ioc_value": "getsightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 17:59:41",
            "last_seen_utc": "2026-08-12 23:33:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871829": [
        {
            "ioc_value": "46.246.4.9:7044",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-08-10 17:45:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871828": [
        {
            "ioc_value": "http://wagosinga.ydns.eu:7044/is-ready",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.houdini",
            "malware_alias": "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi",
            "malware_printable": "Houdini",
            "first_seen_utc": "2026-08-10 17:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871827": [
        {
            "ioc_value": "http://tokjoza.shop:5200/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 17:40:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32c100b984e2a26d588fafc648dcdd7694788d0c18af15704e3601ffc001f334/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871826": [
        {
            "ioc_value": "http://none/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 17:40:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32c100b984e2a26d588fafc648dcdd7694788d0c18af15704e3601ffc001f334/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871825": [
        {
            "ioc_value": "http://beljaro.shop:2536/posts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 17:40:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32c100b984e2a26d588fafc648dcdd7694788d0c18af15704e3601ffc001f334/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871824": [
        {
            "ioc_value": "eolins.en-us-theenergyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 17:39:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871823": [
        {
            "ioc_value": "en-us-theenergyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 17:35:03",
            "last_seen_utc": "2026-08-10 17:35:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871819": [
        {
            "ioc_value": "phhqqp5d.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 17:16:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871818": [
        {
            "ioc_value": "aoy7vij2.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 17:16:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871815": [
        {
            "ioc_value": "ozfttik.get-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 17:10:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871812": [
        {
            "ioc_value": "ynbfqi.enus-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 16:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871811": [
        {
            "ioc_value": "enus-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 16:43:48",
            "last_seen_utc": "2026-08-10 16:44:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871810": [
        {
            "ioc_value": "5.223.80.130:318",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-10 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871809": [
        {
            "ioc_value": "bypraqr.get--ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 16:22:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871807": [
        {
            "ioc_value": "getignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 16:18:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871804": [
        {
            "ioc_value": "en-ussleeplean.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 16:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871803": [
        {
            "ioc_value": "en-us-sleep-leans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 16:04:46",
            "last_seen_utc": "2026-08-10 16:05:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871802": [
        {
            "ioc_value": "fhuyul.en-us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:53:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871801": [
        {
            "ioc_value": "hlzhpm.en-us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871800": [
        {
            "ioc_value": "en-us-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:44:11",
            "last_seen_utc": "2026-08-18 03:14:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871798": [
        {
            "ioc_value": "31.59.118.77:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 15:25:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30f8fdb26e5ef75f382fd927a35e00ea8accd504e677058b7fd28e6a73553d40/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871797": [
        {
            "ioc_value": "155.103.71.203:2233",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 15:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c803ce174f0688c83f94db7001b99d103b5d027be7d0d230494a5dfdb88c9619/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871796": [
        {
            "ioc_value": "oceanking.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:25:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bab65bff384cc974f7b0dc36080ab51841745997f9e7da4888445ce618ac3482/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871795": [
        {
            "ioc_value": "dunday.mytunnel.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:25:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bab65bff384cc974f7b0dc36080ab51841745997f9e7da4888445ce618ac3482/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871794": [
        {
            "ioc_value": "87.120.244.219:19601",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:20:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bf24bb51af4d6c922bcb3eb46a712fef9cf3ed76822ebde5669a62673bf1d300/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871793": [
        {
            "ioc_value": "anilmut.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/303a507698ff9aab2d8df60f2ed2080e14204f3083bea4d5d01705a54cf6fea8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871792": [
        {
            "ioc_value": "cgfmqtn.en-us-sightfrresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:17:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871791": [
        {
            "ioc_value": "en-us-sightfrresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:14:15",
            "last_seen_utc": "2026-08-10 15:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871790": [
        {
            "ioc_value": "fmtt8q1j.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:14:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871789": [
        {
            "ioc_value": "xndjbjo.enus-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:09:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871788": [
        {
            "ioc_value": "enus-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:09:05",
            "last_seen_utc": "2026-08-13 05:45:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871787": [
        {
            "ioc_value": "155.254.98.57:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 15:05:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/248d6fd4d064a4ced3a75ee493a43afb2a909d3c14726150685fb26147fc8d3b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871786": [
        {
            "ioc_value": "155.103.71.88:3456",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 15:05:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a83f8a2973445c7e801d8b470851a4fa6dfc51c776f8233c727c7fab9281fee/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871785": [
        {
            "ioc_value": "www.xmmtbxbackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:05:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871782": [
        {
            "ioc_value": "www.xmmtbx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:05:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871783": [
        {
            "ioc_value": "www.xmmtbxbackup.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:05:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871784": [
        {
            "ioc_value": "www.xmmtbxbackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 15:05:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871776": [
        {
            "ioc_value": "okqhiof.en-us--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 15:01:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871775": [
        {
            "ioc_value": "tvalui.en-us-sugermute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871774": [
        {
            "ioc_value": "en-us-sugermute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:53:35",
            "last_seen_utc": "2026-08-10 14:54:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871773": [
        {
            "ioc_value": "217.60.195.236:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:45:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871772": [
        {
            "ioc_value": "nslabqu.en-us--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:41:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871771": [
        {
            "ioc_value": "5.230.201.75:8996",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-10 14:39:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bc16cf19075de6200a10d31a5f8775461c6d98c0d2f41d2b59c1ed28659b62c3/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871770": [
        {
            "ioc_value": "87.120.244.219:17598",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:35:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fc48b40be3b232ad4cdd5630d857cfe50415fe05b6677f74510cb6af109328c0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871769": [
        {
            "ioc_value": "sysupdate.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 14:32:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca8f173b7f0f76ffef2672776582a05434138b4e0fcbd738157268cc54d32231/",
            "tags": "MeshAgent,RMM",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871768": [
        {
            "ioc_value": "191.215.37.40:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-10 14:27:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb024a4c3e301b740e986aecf768d0d7947a75b33dccde6e52baf15c0b0a59fc/",
            "tags": "Overlord,OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871767": [
        {
            "ioc_value": "clflwpz.en-us--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:27:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871766": [
        {
            "ioc_value": "161.97.162.13:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:25:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3ccb005c80531d21f8cfdf7823f55b16a55fc83a8b05935224b89f3aaa4e6320/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871765": [
        {
            "ioc_value": "107.172.134.28:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 14:25:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bf8d6c2f8125dc85a5a830c5e940951441c92823db6793794008301ba6f3f5d6/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871763": [
        {
            "ioc_value": "en-ussightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:24:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871631": [
        {
            "ioc_value": "64.227.68.158:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:14",
            "last_seen_utc": "2026-08-14 07:04:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871632": [
        {
            "ioc_value": "165.22.197.20:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:14",
            "last_seen_utc": "2026-08-16 02:28:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871633": [
        {
            "ioc_value": "165.232.87.245:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:13",
            "last_seen_utc": "2026-08-16 02:51:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871634": [
        {
            "ioc_value": "178.62.229.223:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:13",
            "last_seen_utc": "2026-08-15 09:44:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871636": [
        {
            "ioc_value": "159.223.209.14:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:12",
            "last_seen_utc": "2026-08-16 00:14:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871638": [
        {
            "ioc_value": "161.35.155.251:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:12",
            "last_seen_utc": "2026-08-14 07:03:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871637": [
        {
            "ioc_value": "167.71.67.197:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:11",
            "last_seen_utc": "2026-08-14 07:03:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871639": [
        {
            "ioc_value": "178.62.230.102:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:11",
            "last_seen_utc": "2026-08-16 04:23:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871640": [
        {
            "ioc_value": "142.93.139.221:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-10 14:24:10",
            "last_seen_utc": "2026-08-15 09:44:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871717": [
        {
            "ioc_value": "38.97.63.242:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.vo1d",
            "malware_alias": null,
            "malware_printable": "vo1d",
            "first_seen_utc": "2026-08-10 14:24:09",
            "last_seen_utc": "2026-09-01 03:40:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "loader,Vo1d",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871718": [
        {
            "ioc_value": "http://103.174.243.219:35630/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 14:24:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.219",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871719": [
        {
            "ioc_value": "http://120.229.79.252:33575/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 14:24:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/120.229.79.252",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871720": [
        {
            "ioc_value": "http://72.255.32.86:39014/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 14:24:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.86",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871721": [
        {
            "ioc_value": "http://175.107.233.255:52927/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 14:24:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.233.255",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871724": [
        {
            "ioc_value": "ebnlinfengv6l2ilx.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-10 14:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f5c235bf56a9c15afb65f83f437678cd6fac7e23b9a850b7806d395f4b778948/",
            "tags": null,
            "anonymous": 0,
            "reporter": "emmanualopsecgo"
        }
    ],
    "1871734": [
        {
            "ioc_value": "http://20.214.2.18/receive.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-10 14:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/b979f185-839a-4b4d-ae31-6dbb84a18675",
            "tags": "discord,generic,nodejs,nyxstealer,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871728": [
        {
            "ioc_value": "161.35.48.40:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-10 14:24:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871761": [
        {
            "ioc_value": "185.242.4.122:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:20:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/279e14ad7bad135f7b63e17c355c969116c2db600967061bbab107f66d62dbb6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871762": [
        {
            "ioc_value": "209.127.35.195:3533",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:20:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f66bd3ba1b2b9190f924031ebb2346338df2e26c189850ee3237ea80adc898eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871760": [
        {
            "ioc_value": "109.248.148.247:32734",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:20:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eb2cd2c52a03b20d87ea129eb09842e8ece28bf7476a61d3fefc229b0e8622ec/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871759": [
        {
            "ioc_value": "109.248.151.124:7575",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 14:15:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/428e478e4fd72979677f7fc4f568a2fd05a811cb3ff555a4bd068226e86b012f/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871758": [
        {
            "ioc_value": "86.106.84.151:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:10:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c961a6099fe726be83ed564f937b3f259cf6023451f09d6f22536ed4fba18011/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871757": [
        {
            "ioc_value": "31.13.190.82:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:10:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5d13cfc9ec95b80219e759f945661eb22e4781df28a181474a040dc72068562b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871756": [
        {
            "ioc_value": "kindjurt.myddns.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 14:10:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6bcc2de6becba2ea62a6766184c5003d379fc70c88dfdb53b0c3b184a81ac94/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871755": [
        {
            "ioc_value": "kwoeju.en-us-slimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:05:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871750": [
        {
            "ioc_value": "en-us-slimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 14:03:11",
            "last_seen_utc": "2026-08-21 07:16:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871748": [
        {
            "ioc_value": "37.120.146.146:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 13:50:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/08e9ee91c55772b2c30f2ca6d26b9960000f3b08d08bf878d5d95045c93fa7c8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871747": [
        {
            "ioc_value": "104.249.130.248:5960",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 13:50:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6b555912da38f884965345b7012569f6ad38292fb073157b4ff4fac15a00cc26/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871746": [
        {
            "ioc_value": "onboard.radiantfluxstudio.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 13:45:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8dba8da0a8c596b4f3a886f95c57bdb6d8b046ee356d3c52555c3bc3fb0cd114/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871744": [
        {
            "ioc_value": "46.183.218.151:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 13:40:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0c3a63f8f91965db6755ea623fe109ee291dbba63dda3022b1a22a9640bccee9/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871743": [
        {
            "ioc_value": "185.14.92.102:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 13:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871742": [
        {
            "ioc_value": "llasvij.en-us-odizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:38:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871741": [
        {
            "ioc_value": "196.251.121.163:14555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 13:35:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/132334806bc8620a8900f061ba535b049b2c756a3987c0a8a3bd58a82bf45579/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871740": [
        {
            "ioc_value": "en-us-odizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:33:45",
            "last_seen_utc": "2026-08-10 14:55:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871739": [
        {
            "ioc_value": "go78tteu.eng-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:17:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871738": [
        {
            "ioc_value": "nyerki.en-us-slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:15:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871737": [
        {
            "ioc_value": "en-us-slimsplits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:12:40",
            "last_seen_utc": "2026-08-18 11:15:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871736": [
        {
            "ioc_value": "0rwgfz6h.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:11:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871735": [
        {
            "ioc_value": "weqtrjme.eng-usa-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 13:07:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871727": [
        {
            "ioc_value": "czrsixg.en-us--neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 12:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871725": [
        {
            "ioc_value": "en-usneuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 12:43:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871723": [
        {
            "ioc_value": "cqyxny.enus-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 12:23:27",
            "last_seen_utc": "2026-08-12 20:41:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871722": [
        {
            "ioc_value": "enus-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 12:22:08",
            "last_seen_utc": "2026-08-13 06:30:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871716": [
        {
            "ioc_value": "pyfcdqnpvnbwagbyxe.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 12:06:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871715": [
        {
            "ioc_value": "ealceem.enus-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:54:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871714": [
        {
            "ioc_value": "enus-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:52:29",
            "last_seen_utc": "2026-08-11 22:28:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871711": [
        {
            "ioc_value": "de71cf8817c3e91c8a00c22198bb36d6655f00e32741098ae5d81ec09ea69918",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-10 11:49:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871712": [
        {
            "ioc_value": "5df985e256e32dd57aaac1bad79672fbb44788ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-10 11:49:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871713": [
        {
            "ioc_value": "662d653f550544643f67c3891ff2cf2c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-10 11:49:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871709": [
        {
            "ioc_value": "1441b32780ec0e76d09af693f62819c2d1ae8125",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-10 11:49:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871710": [
        {
            "ioc_value": "33d103a950e97fb4c0f28d8cff985ba6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-10 11:49:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871707": [
        {
            "ioc_value": "0e260f328a81040da84f79bb21d54953",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 11:49:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871708": [
        {
            "ioc_value": "904bb06ad9ad3c8e4aa980b96cbecad85c14bd994af013d77121723c85a5e1a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-10 11:49:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871706": [
        {
            "ioc_value": "965974f7bb6bd5c71da7d0ae843ea3f84229b74c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 11:49:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871702": [
        {
            "ioc_value": "2a167fbe58a9d874dda8798e9b0d773d9316a217256a7e3f1d0c5e3e26f9f03a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 11:49:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871703": [
        {
            "ioc_value": "666974fd5ab2ab200c8c87e1945708c9e4f2e76e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 11:49:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871704": [
        {
            "ioc_value": "325dd213f9a6f78e41cad30c49e0a178",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 11:49:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871705": [
        {
            "ioc_value": "da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 11:49:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871699": [
        {
            "ioc_value": "c829ecdfad04daba449fb93106f176c5fd065f3642b70cc46ab4285246a3057d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-10 11:49:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871700": [
        {
            "ioc_value": "40bb4c848b9e8843d48884ded074af0dc183778d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-10 11:49:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871701": [
        {
            "ioc_value": "0bc755a061e932971b5e642b99adda04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-10 11:49:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871697": [
        {
            "ioc_value": "9b490baf8909538616aded33ffa0502f8a6fa085",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:49:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871698": [
        {
            "ioc_value": "a02aa86b025c34615a99437e118128fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:49:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871695": [
        {
            "ioc_value": "1b00808e8d58b136cd389361d01eb377",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-10 11:49:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871696": [
        {
            "ioc_value": "bbb3837bc8706b87668877a86fcda6a69ace99739e19caa744bef624570a7c0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:49:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871693": [
        {
            "ioc_value": "90b2ceb05b34ed6012d20b547cec83a2dacbe56659eb4479150f30015172c3c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-10 11:49:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871694": [
        {
            "ioc_value": "3692fc83c64796ce846099f9dc651a9b2140c10e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-10 11:49:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871690": [
        {
            "ioc_value": "5d8353255bc5b09aaed218f2d6f016ceda78354cfb1a3f0d36d939d142f3a8f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:49:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871691": [
        {
            "ioc_value": "673a985979c3381c4b1b5103816a0a2a11f29bee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:49:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871692": [
        {
            "ioc_value": "59e90d4e4072484541636b873c35a4a6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:49:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871689": [
        {
            "ioc_value": "092821e77feade246a230168b2c0b775",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-10 11:49:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871687": [
        {
            "ioc_value": "b752cd26bfd88495e011ca4ace567f6715d1323bab0803d47b2736cfbc5db955",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-10 11:48:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871688": [
        {
            "ioc_value": "5fcb20277dab30f4ae6a46f9596d68d2cea74609",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-10 11:48:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871685": [
        {
            "ioc_value": "4c34f12dbee3457a9c1cf5185f59fc56084de8b8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-10 11:48:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871686": [
        {
            "ioc_value": "2e4aa86a1df193c715970aee3096bf3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-10 11:48:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871682": [
        {
            "ioc_value": "2f7c74580c7031ba7d9ad89771032eca0ab61758",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 11:48:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871683": [
        {
            "ioc_value": "b24376060623dd8dabec2c3dd423361c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 11:48:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871684": [
        {
            "ioc_value": "843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-10 11:48:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871679": [
        {
            "ioc_value": "b267d67a00e870fe7f6b2b595842231ddace2657",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 11:48:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871680": [
        {
            "ioc_value": "48d66a8f0f2a7d144cfa1f6b7a006c69",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 11:48:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871681": [
        {
            "ioc_value": "8e5e251d971957c982721ef54328000815d80c744f184fac3bb1afd64dd3624a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 11:48:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871677": [
        {
            "ioc_value": "f466e3112ffdfa965f4457c98dee5b92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871678": [
        {
            "ioc_value": "1d60903c4cf77503ae2ccbc0e1f33e455033bca93d1a289531df7e1a166a5449",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 11:48:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871676": [
        {
            "ioc_value": "55f6b5e510fe2149eb713cce3aa68ec07d313c12",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871675": [
        {
            "ioc_value": "fd7cee5a13218f6d00b40e85579c6f4b4f06d5432b9fb785b0b81f8547c197f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871673": [
        {
            "ioc_value": "eb63f8a9af89d85b71ca649ed826c4244aa81e39",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871674": [
        {
            "ioc_value": "ae9893c7a60b298f3f45b85726e09a98",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871670": [
        {
            "ioc_value": "6c8ee646afb6b19ade6af5333c52c5263103f949",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871671": [
        {
            "ioc_value": "2be02d3def1b116c668cc84e628e2065",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871672": [
        {
            "ioc_value": "24d5d3e5095d9bd866d657c646d5c4035e64315c7ba3c17b230415f0bef8c0d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871667": [
        {
            "ioc_value": "2ac9f75fc9bc14e8f57e319630c3f9dde3a814f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871668": [
        {
            "ioc_value": "a65f533d10703afcd9cc1210ca559b75",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871669": [
        {
            "ioc_value": "45c985d787b9f8730c4b05555f8ecf28f9c58f0948c5180108ca185441ab145a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871666": [
        {
            "ioc_value": "ee8bd9222c943d35f0702143c7606aef6a62b229ffc109a468537322e917a9e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871665": [
        {
            "ioc_value": "fdb6448a3ac57e511a53cda07945be8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-10 11:48:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871662": [
        {
            "ioc_value": "893cf55eb5c958896580854b7f5c44e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:48:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871663": [
        {
            "ioc_value": "f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-10 11:48:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871664": [
        {
            "ioc_value": "35170d38f2089910e6dc71ea9a2fd202f6dd2736",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-10 11:48:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871660": [
        {
            "ioc_value": "a6a6674d13230442f10b0b6663a5e659f9d3a072b8e575fd332baa5ff685a1d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:48:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871661": [
        {
            "ioc_value": "0c20fb53da56369ffb8c90706b8d1c05e76fc3e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-10 11:48:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871659": [
        {
            "ioc_value": "123.207.203.20:55501",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 11:47:37",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871658": [
        {
            "ioc_value": "117.24.4.112:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 11:47:33",
            "last_seen_utc": "2026-09-01 02:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871657": [
        {
            "ioc_value": "bztmkx.en-us-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:33:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871656": [
        {
            "ioc_value": "en-us-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:31:36",
            "last_seen_utc": "2026-08-12 22:45:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871655": [
        {
            "ioc_value": "enus-sleeplean.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:22:20",
            "last_seen_utc": "2026-08-10 11:23:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871650": [
        {
            "ioc_value": "78sgh99h.en-us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871647": [
        {
            "ioc_value": "skrfpet.en-us-ignitraa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:02:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871646": [
        {
            "ioc_value": "en-us-ignitraa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 11:01:55",
            "last_seen_utc": "2026-08-11 09:56:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871645": [
        {
            "ioc_value": "http://tokjoza.shop:5200/webhooks",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 10:50:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871644": [
        {
            "ioc_value": "http://none/profiles",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 10:50:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871643": [
        {
            "ioc_value": "http://beljaro.shop:2536/invoices",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 10:50:39",
            "last_seen_utc": "2026-08-20 08:48:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871642": [
        {
            "ioc_value": "cahnzr.prosta--vive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 10:32:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871641": [
        {
            "ioc_value": "zfeodhb.en-us-goldaligns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 10:25:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871635": [
        {
            "ioc_value": "en-us-goldaligns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 10:23:34",
            "last_seen_utc": "2026-08-12 05:18:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871630": [
        {
            "ioc_value": "http://tokjoza.shop:5200/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 10:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871629": [
        {
            "ioc_value": "http://shkpiva.shop:5627/tokens",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 10:00:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871628": [
        {
            "ioc_value": "http://beljaro.shop:2536/accounts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 10:00:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871626": [
        {
            "ioc_value": "98.191.191.44:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-10 09:46:58",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871625": [
        {
            "ioc_value": "91.92.42.22:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 09:46:52",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871624": [
        {
            "ioc_value": "91.92.34.73:43283",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-10 09:46:51",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871623": [
        {
            "ioc_value": "77.237.97.58:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-10 09:46:36",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871622": [
        {
            "ioc_value": "31.77.195.32:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-10 09:45:53",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871621": [
        {
            "ioc_value": "209.99.190.23:56014",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 09:44:52",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871620": [
        {
            "ioc_value": "167.233.161.42:3287",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-10 09:43:58",
            "last_seen_utc": "2026-09-01 02:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871619": [
        {
            "ioc_value": "159.203.69.210:8401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 09:43:52",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871618": [
        {
            "ioc_value": "149.28.121.179:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-10 09:43:38",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871617": [
        {
            "ioc_value": "104.239.66.245:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871616": [
        {
            "ioc_value": "uhfazu.tiroalpaloes.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 09:40:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871615": [
        {
            "ioc_value": "ronaldbeck.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 09:35:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ee9918abc39d7d0b46c5cf7891f5b845d0ae5acc0e88f22ecd6ad19099260651/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871614": [
        {
            "ioc_value": "beckronald.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 09:35:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ee9918abc39d7d0b46c5cf7891f5b845d0ae5acc0e88f22ecd6ad19099260651/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871613": [
        {
            "ioc_value": "ftp.holzbrenzii.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-10 09:34:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e9855bdf3f45a2ed0148a1f6714f6ce081f4da526aeb044d2e58ee394e62078b/",
            "tags": "AgentTesl",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871612": [
        {
            "ioc_value": "otp.vagrancyvirus.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-10 09:33:33",
            "last_seen_utc": "2026-08-14 11:19:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd598cea811d8f73ca7afffa40e5963be9a82e01bad8ffcebb104b475c091faa/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871611": [
        {
            "ioc_value": "ucooyac.enus-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 09:33:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871610": [
        {
            "ioc_value": "volrko.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-10 09:31:55",
            "last_seen_utc": "2026-08-10 10:56:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871607": [
        {
            "ioc_value": "147.124.212.143:4333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 09:26:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1871606": [
        {
            "ioc_value": "igxpbym.enus-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 09:24:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871605": [
        {
            "ioc_value": "meow.schoolprojectxyz.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-10 09:21:57",
            "last_seen_utc": "2026-08-10 09:21:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/809ea6ebd9a87909a033616519d3c7d596b25136662da8a496ad971dbde62cf2/",
            "tags": "Mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871603": [
        {
            "ioc_value": "dqfqjllc.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 09:11:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871602": [
        {
            "ioc_value": "index.ridgefield.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-10 09:05:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1871601": [
        {
            "ioc_value": "enskbzl.enus-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 09:03:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871600": [
        {
            "ioc_value": "enus-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 09:02:14",
            "last_seen_utc": "2026-08-15 21:45:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871599": [
        {
            "ioc_value": "sqq7n7q0.eng-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 08:55:07",
            "last_seen_utc": "2026-08-11 22:15:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871598": [
        {
            "ioc_value": "http://luwmera.shop:5200",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 08:50:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1871597": [
        {
            "ioc_value": "xpeidl.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 08:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871596": [
        {
            "ioc_value": "rypqfjc.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 08:43:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871593": [
        {
            "ioc_value": "folder-photohotel.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-10 08:28:48",
            "last_seen_utc": "2026-08-13 04:38:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871594": [
        {
            "ioc_value": "guestsafeimage.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-08-10 08:28:48",
            "last_seen_utc": "2026-08-12 10:16:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871591": [
        {
            "ioc_value": "154.29.72.36:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 08:22:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a167fbe58a9d874dda8798e9b0d773d9316a217256a7e3f1d0c5e3e26f9f03a/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871588": [
        {
            "ioc_value": "204.77.130.227:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 08:21:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871589": [
        {
            "ioc_value": "204.77.130.227:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 08:21:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871590": [
        {
            "ioc_value": "204.77.130.227:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 08:21:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871580": [
        {
            "ioc_value": "89.167.18.40:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871581": [
        {
            "ioc_value": "62.238.20.117:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871582": [
        {
            "ioc_value": "46.62.173.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871583": [
        {
            "ioc_value": "2.28.53.243:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871585": [
        {
            "ioc_value": "178.104.167.253:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871586": [
        {
            "ioc_value": "2.28.63.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871587": [
        {
            "ioc_value": "78.47.230.34:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871579": [
        {
            "ioc_value": "89.167.23.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:21:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871577": [
        {
            "ioc_value": "mittenmint.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-10 08:20:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871575": [
        {
            "ioc_value": "spc.sinism188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871576": [
        {
            "ioc_value": "tis.sinism188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871559": [
        {
            "ioc_value": "sep.beras1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871560": [
        {
            "ioc_value": "rha.beras1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871561": [
        {
            "ioc_value": "gve.beras1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871562": [
        {
            "ioc_value": "ttf.beras1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871563": [
        {
            "ioc_value": "rne.sm188auto.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871564": [
        {
            "ioc_value": "ndd.sm188auto.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871565": [
        {
            "ioc_value": "sep.sm188auto.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871566": [
        {
            "ioc_value": "rha.sm188auto.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871567": [
        {
            "ioc_value": "gve.sm188auto.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871568": [
        {
            "ioc_value": "ttf.sm188auto.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871569": [
        {
            "ioc_value": "blh.slotmacau188e.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871570": [
        {
            "ioc_value": "dfd.slotmacau188e.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871571": [
        {
            "ioc_value": "ran.slotmacau188e.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871572": [
        {
            "ioc_value": "ign.slotmacau188e.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871573": [
        {
            "ioc_value": "xox.slotmacau188bd.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": "2026-08-30 18:46:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871574": [
        {
            "ioc_value": "xox.sinism188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871556": [
        {
            "ioc_value": "pas.bikhoki.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871557": [
        {
            "ioc_value": "rne.beras1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871558": [
        {
            "ioc_value": "ndd.beras1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871550": [
        {
            "ioc_value": "https://46.62.173.126/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871551": [
        {
            "ioc_value": "https://2.28.53.243/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:14",
            "last_seen_utc": "2026-08-11 04:50:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871552": [
        {
            "ioc_value": "https://46.62.167.86/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:14",
            "last_seen_utc": "2026-08-13 08:04:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871553": [
        {
            "ioc_value": "https://178.104.167.253/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871554": [
        {
            "ioc_value": "https://2.28.63.136/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871555": [
        {
            "ioc_value": "https://78.47.230.34/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:14",
            "last_seen_utc": "2026-09-01 01:30:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871546": [
        {
            "ioc_value": "https://spc.sinism188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871547": [
        {
            "ioc_value": "https://tis.sinism188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871548": [
        {
            "ioc_value": "https://89.167.18.40/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:13",
            "last_seen_utc": "2026-08-21 08:27:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871549": [
        {
            "ioc_value": "https://62.238.20.117/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:13",
            "last_seen_utc": "2026-08-11 04:50:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871540": [
        {
            "ioc_value": "https://dfd.slotmacau188e.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871541": [
        {
            "ioc_value": "https://ran.slotmacau188e.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871542": [
        {
            "ioc_value": "https://www.slotmacau188e.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871543": [
        {
            "ioc_value": "https://ign.slotmacau188e.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871544": [
        {
            "ioc_value": "https://xox.slotmacau188bd.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871545": [
        {
            "ioc_value": "https://xox.sinism188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871534": [
        {
            "ioc_value": "https://ndd.sm188auto.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871535": [
        {
            "ioc_value": "https://sep.sm188auto.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871536": [
        {
            "ioc_value": "https://rha.sm188auto.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871537": [
        {
            "ioc_value": "https://gve.sm188auto.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871538": [
        {
            "ioc_value": "https://ttf.sm188auto.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871539": [
        {
            "ioc_value": "https://blh.slotmacau188e.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871530": [
        {
            "ioc_value": "https://sep.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871531": [
        {
            "ioc_value": "https://rha.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871532": [
        {
            "ioc_value": "https://gve.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871533": [
        {
            "ioc_value": "https://ttf.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871526": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198660175584",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:09",
            "last_seen_utc": "2026-08-24 12:07:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871527": [
        {
            "ioc_value": "https://telegram.me/j0tt0s",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:09",
            "last_seen_utc": "2026-08-24 13:49:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871528": [
        {
            "ioc_value": "https://rne.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871529": [
        {
            "ioc_value": "https://ndd.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:19:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871525": [
        {
            "ioc_value": "task.pantryly83.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-10 08:18:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1871523": [
        {
            "ioc_value": "uybwveyvyt62rc.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-10 08:18:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871524": [
        {
            "ioc_value": "zsv2c62243.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-10 08:18:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871521": [
        {
            "ioc_value": "https://xop.beras1.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 08:15:05",
            "last_seen_utc": "2026-08-12 03:55:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1871519": [
        {
            "ioc_value": "7ve71wpr.eng-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 08:14:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871518": [
        {
            "ioc_value": "119.45.239.141:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 08:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871517": [
        {
            "ioc_value": "49.235.110.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 08:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871515": [
        {
            "ioc_value": "hhhazm.shop-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 07:59:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871514": [
        {
            "ioc_value": "64.89.160.16:3322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:58:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6eba72e816768b1c383487af637ddc3d64e5feacaed1bd7312b983bf28478ecd/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871513": [
        {
            "ioc_value": "customers.googlesecuritysystem.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:58:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6eba72e816768b1c383487af637ddc3d64e5feacaed1bd7312b983bf28478ecd/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871512": [
        {
            "ioc_value": "kjwhklm.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 07:55:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871511": [
        {
            "ioc_value": "142.132.253.231:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-10 07:51:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6a89afd80bcfccc8ade155c0ef92a770de44610efdcac2b6a21650dc136dca5/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871510": [
        {
            "ioc_value": "yuming.zx-infinity.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-10 07:45:30",
            "last_seen_utc": "2026-08-10 07:45:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b32181caa8383569167918025e985ed2e629cf2f0f001dcfd576044c8f31599f/",
            "tags": "CoinMiner,dropped-by-gcleaner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871509": [
        {
            "ioc_value": "tax-preparer-security-viewer.federal-portal.es",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:41:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/52dd8b2f9145907477a6ebc4ad406c1e4b221ea967f1c2ce8bc23faa83b663d8/",
            "tags": "BreezeRMM",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871507": [
        {
            "ioc_value": "52.203.242.163:7835",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:38:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f50e1120cc6cb993c6f6ba8c734df7855df0cd37cf634d407abffbb9f0660702/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871508": [
        {
            "ioc_value": "52.203.242.163:7890",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:38:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f50e1120cc6cb993c6f6ba8c734df7855df0cd37cf634d407abffbb9f0660702/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871489": [
        {
            "ioc_value": "https://versionpi81.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871490": [
        {
            "ioc_value": "https://riderls32.life/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871491": [
        {
            "ioc_value": "https://rogethat231.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871492": [
        {
            "ioc_value": "fashion-chicken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871493": [
        {
            "ioc_value": "https://id-verif-code.info/api.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871494": [
        {
            "ioc_value": "158.94.211.92:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871495": [
        {
            "ioc_value": "https://dolpi812.life/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871496": [
        {
            "ioc_value": "https://accrenpi813.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871497": [
        {
            "ioc_value": "https://thankingpi.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871499": [
        {
            "ioc_value": "https://bunntyca.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871498": [
        {
            "ioc_value": "https://wikkkipi12.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871500": [
        {
            "ioc_value": "https://tokerjoker.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871501": [
        {
            "ioc_value": "https://atomento10.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871502": [
        {
            "ioc_value": "https://frontalback91.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871503": [
        {
            "ioc_value": "https://corrykro.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871504": [
        {
            "ioc_value": "https://rumbaju42.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871505": [
        {
            "ioc_value": "https://nick-metry.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871506": [
        {
            "ioc_value": "https://borrowskol312.icu/t.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871483": [
        {
            "ioc_value": "https://babacan.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:22:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871471": [
        {
            "ioc_value": "babacan.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-10 07:22:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 0,
            "reporter": "Whanos"
        }
    ],
    "1871472": [
        {
            "ioc_value": "http://72.255.19.251:56706/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 07:22:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.19.251",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871484": [
        {
            "ioc_value": "https://babacan.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:21:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871485": [
        {
            "ioc_value": "https://babacan.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:21:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871486": [
        {
            "ioc_value": "https://babacan.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:21:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871487": [
        {
            "ioc_value": "https://babacan.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-10 07:21:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871488": [
        {
            "ioc_value": "http://cc602316.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-10 07:20:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871482": [
        {
            "ioc_value": "64.89.161.78:2817",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-10 07:15:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71bbe25652524477008004b568cb32d3ed5c07693c763fc7ae673060a2e04d1a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871481": [
        {
            "ioc_value": "4i3lqas7.en-us-en-prostawive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 07:09:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871480": [
        {
            "ioc_value": "lahtbx.shop-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 07:09:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871479": [
        {
            "ioc_value": "noiojjl.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 07:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871475": [
        {
            "ioc_value": "102.117.174.217:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 07:05:05",
            "last_seen_utc": "2026-09-01 02:43:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871474": [
        {
            "ioc_value": "files.orchestratorlabs.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-10 06:38:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871473": [
        {
            "ioc_value": "117.24.4.112:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 06:28:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871320": [
        {
            "ioc_value": "161.35.48.40:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-10 06:18:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871351": [
        {
            "ioc_value": "mail.cope.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-10 06:18:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871352": [
        {
            "ioc_value": "smtp.cope.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-10 06:18:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871357": [
        {
            "ioc_value": "46.151.182.200:60195",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-10 06:18:05",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1871376": [
        {
            "ioc_value": "testmyopinion.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-10 06:18:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/Malwarehunterr/status/2086517188085871074",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1871377": [
        {
            "ioc_value": "ownnewstoday.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-10 06:18:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/Malwarehunterr/status/2086517188085871074",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1871399": [
        {
            "ioc_value": "91.219.238.82:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-10 06:18:03",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1911456",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1871400": [
        {
            "ioc_value": "91.219.238.166:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-10 06:18:03",
            "last_seen_utc": "2026-08-09 20:17:25",
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1911456",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1871401": [
        {
            "ioc_value": "91.219.238.82:8541",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-10 06:18:02",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1911456",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1871402": [
        {
            "ioc_value": "91.219.238.166:8045",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-10 06:18:01",
            "last_seen_utc": null,
            "confidence_level": 66,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1911456",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1871412": [
        {
            "ioc_value": "180.93.116.41:56999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-10 06:18:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1871422": [
        {
            "ioc_value": "http://178.16.54.109/bolodo",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-10 06:18:00",
            "last_seen_utc": "2026-08-22 14:19:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Download,Phorpiex",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871419": [
        {
            "ioc_value": "https://89.167.23.148",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 06:17:59",
            "last_seen_utc": "2026-08-12 21:41:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4abfe3aee56aad747a75a5aba1eefaa3,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871423": [
        {
            "ioc_value": "riderls32.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 06:17:58",
            "last_seen_utc": "2026-08-12 09:40:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871424": [
        {
            "ioc_value": "dolpi812.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 06:17:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871428": [
        {
            "ioc_value": "https://fashion-chicken.com/x9i32md/w1/la02",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 06:17:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "exfil,Magecart,skimmer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871435": [
        {
            "ioc_value": "http://175.107.36.125:37662/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-10 06:17:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.36.125",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871429": [
        {
            "ioc_value": "https://pas.bikhoki.cc",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 06:17:54",
            "last_seen_utc": "2026-08-19 16:20:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a25ee28cbbb467ba56cb86c45a2edf9e,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871470": [
        {
            "ioc_value": "mzpdgxi.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 06:17:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871438": [
        {
            "ioc_value": "https://vokhmiwmncjba.vivaldinotabot.com/s/psc4?cl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-10 06:17:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "0xKyle"
        }
    ],
    "1871440": [
        {
            "ioc_value": "130.94.14.110:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 06:17:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "2914,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1871439": [
        {
            "ioc_value": "206.237.12.167:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-10 06:17:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "932,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1871441": [
        {
            "ioc_value": "34.11.43.142:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-10 06:17:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "396982,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1871445": [
        {
            "ioc_value": "130.12.180.51:43782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-08-10 06:17:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,redtail",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871455": [
        {
            "ioc_value": "137.184.70.190:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-10 06:17:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871459": [
        {
            "ioc_value": "https://rne.sm188auto.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 06:17:48",
            "last_seen_utc": "2026-08-12 03:54:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a25ee28cbbb467ba56cb86c45a2edf9e,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871463": [
        {
            "ioc_value": "https://xop.sm188auto.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-10 06:17:48",
            "last_seen_utc": "2026-08-10 10:25:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a25ee28cbbb467ba56cb86c45a2edf9e,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871468": [
        {
            "ioc_value": "expressbatteryreplacement.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 06:17:47",
            "last_seen_utc": "2026-08-20 19:47:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871469": [
        {
            "ioc_value": "pdlgsg.shop-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 06:17:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871467": [
        {
            "ioc_value": "kfbhnux.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 05:27:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871466": [
        {
            "ioc_value": "ehhzba.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 05:26:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871465": [
        {
            "ioc_value": "lh3i8c4x.en-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 05:08:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871464": [
        {
            "ioc_value": "qtu3bnjl.eng-en-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 04:44:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871461": [
        {
            "ioc_value": "hcbjmx.nurvearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 04:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871460": [
        {
            "ioc_value": "zwaorbx.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 04:33:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871457": [
        {
            "ioc_value": "tdflhz.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 03:46:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871456": [
        {
            "ioc_value": "qspkxyl.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 03:37:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871454": [
        {
            "ioc_value": "vfq871xi.eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 03:14:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871453": [
        {
            "ioc_value": "meogaidw.en-en-eng-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 03:05:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871452": [
        {
            "ioc_value": "169.58.150.130:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-10 03:05:06",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871450": [
        {
            "ioc_value": "qmxskr.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 02:54:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871449": [
        {
            "ioc_value": "lseeetm.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 02:47:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871448": [
        {
            "ioc_value": "sxvgrh.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 02:08:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871447": [
        {
            "ioc_value": "zgeetmr.enus-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 01:56:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871444": [
        {
            "ioc_value": "hqwgki.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 01:13:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871443": [
        {
            "ioc_value": "4lmn5pp8.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 01:07:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871442": [
        {
            "ioc_value": "nojalsd.eng--cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 01:07:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871437": [
        {
            "ioc_value": "5gghr1ol.eng-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 00:34:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871436": [
        {
            "ioc_value": "zwqbnl.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 00:26:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871434": [
        {
            "ioc_value": "aqfcvod.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 00:15:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871433": [
        {
            "ioc_value": "http://tokjoza.shop:5200/files",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 00:05:49",
            "last_seen_utc": "2026-08-10 01:09:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/43b7219764a030a1b3f8466421890f8433928152aee42a497d0d2e4ed1284a98/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871432": [
        {
            "ioc_value": "http://shkpiva.shop:5627/attachments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 00:05:48",
            "last_seen_utc": "2026-08-10 01:09:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/43b7219764a030a1b3f8466421890f8433928152aee42a497d0d2e4ed1284a98/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871431": [
        {
            "ioc_value": "http://beljaro.shop:2536/payments",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-10 00:05:46",
            "last_seen_utc": "2026-08-10 01:09:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/43b7219764a030a1b3f8466421890f8433928152aee42a497d0d2e4ed1284a98/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871430": [
        {
            "ioc_value": "xqsxioa.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-10 00:04:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871427": [
        {
            "ioc_value": "ykmmud.en-us-en-gold-align.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 23:33:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871426": [
        {
            "ioc_value": "en-us-en-gold-align.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 23:31:15",
            "last_seen_utc": "2026-08-09 23:31:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871421": [
        {
            "ioc_value": "wbdstjk.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 23:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871420": [
        {
            "ioc_value": "hujg7soj.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 23:04:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871418": [
        {
            "ioc_value": "khivoeg.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 22:49:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871417": [
        {
            "ioc_value": "kbagif.en-us-energyrevolutionsystem.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 22:43:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871415": [
        {
            "ioc_value": "a0xhb08v.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 22:14:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871414": [
        {
            "ioc_value": "qcijapw.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 21:58:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871413": [
        {
            "ioc_value": "pfnwcz.en-us-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 21:50:48",
            "last_seen_utc": "2026-08-18 21:18:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871411": [
        {
            "ioc_value": "vwychan.en-us-en-usa-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 21:08:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871410": [
        {
            "ioc_value": "xlmr6eq6.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 21:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871409": [
        {
            "ioc_value": "pfbaej.enus-en-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 21:01:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871408": [
        {
            "ioc_value": "enus-en-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 20:59:43",
            "last_seen_utc": "2026-08-09 21:00:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871407": [
        {
            "ioc_value": "http://tokjoza.shop:5200/settings",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 20:50:49",
            "last_seen_utc": "2026-08-09 22:10:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3f52c9d217c625a8e8b12be29c828d27dbec62bf021d5f0d481dcced080043e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871406": [
        {
            "ioc_value": "http://shkpiva.shop:5627/notifications",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 20:50:46",
            "last_seen_utc": "2026-08-09 22:10:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3f52c9d217c625a8e8b12be29c828d27dbec62bf021d5f0d481dcced080043e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871405": [
        {
            "ioc_value": "http://beljaro.shop:2536/folders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 20:50:42",
            "last_seen_utc": "2026-08-09 22:10:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3f52c9d217c625a8e8b12be29c828d27dbec62bf021d5f0d481dcced080043e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871404": [
        {
            "ioc_value": "3igbupne.eng-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 20:23:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871403": [
        {
            "ioc_value": "mgeehor.prostavve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 20:21:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871398": [
        {
            "ioc_value": "fhodxy.en-us-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 20:14:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871396": [
        {
            "ioc_value": "en-us-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 20:09:33",
            "last_seen_utc": "2026-08-09 20:10:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871395": [
        {
            "ioc_value": "91.202.233.151:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 19:46:19",
            "last_seen_utc": "2026-09-01 02:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871394": [
        {
            "ioc_value": "91.202.233.151:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 19:46:18",
            "last_seen_utc": "2026-09-01 02:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871393": [
        {
            "ioc_value": "85.209.87.84:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 19:46:13",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871392": [
        {
            "ioc_value": "49.235.153.53:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-09 19:45:52",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871390": [
        {
            "ioc_value": "45.140.204.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-08-09 19:45:38",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871391": [
        {
            "ioc_value": "45.140.204.12:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-08-09 19:45:38",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871389": [
        {
            "ioc_value": "217.60.77.60:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 19:45:16",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871388": [
        {
            "ioc_value": "2.50.170.49:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-09 19:44:29",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871387": [
        {
            "ioc_value": "128.90.59.58:1110",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-09 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871386": [
        {
            "ioc_value": "107.172.133.190:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-09 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871385": [
        {
            "ioc_value": "104.164.46.182:52203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 19:43:08",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871384": [
        {
            "ioc_value": "rgutfmf.prosta--vive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 19:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871383": [
        {
            "ioc_value": "bebnmr.enus-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 19:21:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871381": [
        {
            "ioc_value": "enus-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 19:18:45",
            "last_seen_utc": "2026-08-09 19:19:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871380": [
        {
            "ioc_value": "d9ycd24u.pro--prostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 19:05:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871375": [
        {
            "ioc_value": "hasebtb.en-us--gold-align.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 18:36:16",
            "last_seen_utc": "2026-08-09 18:36:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871374": [
        {
            "ioc_value": "en-usgold-align.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 18:35:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871373": [
        {
            "ioc_value": "ezhlrk.en-usechoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 18:30:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871372": [
        {
            "ioc_value": "en-usechoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 18:28:12",
            "last_seen_utc": "2026-08-13 09:49:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871371": [
        {
            "ioc_value": "http://tokjoza.shop:5200/orders",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 18:01:03",
            "last_seen_utc": "2026-08-09 19:21:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfa7e41d09f3d4fa04300b72f0f71f6b8af79369de528eeaf03a813ee1636ee5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871370": [
        {
            "ioc_value": "http://onesdto.shop:2535/collections",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 18:00:58",
            "last_seen_utc": "2026-08-09 19:21:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfa7e41d09f3d4fa04300b72f0f71f6b8af79369de528eeaf03a813ee1636ee5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871369": [
        {
            "ioc_value": "http://beljaro.shop:2536/tags",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 18:00:54",
            "last_seen_utc": "2026-08-09 19:21:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfa7e41d09f3d4fa04300b72f0f71f6b8af79369de528eeaf03a813ee1636ee5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871368": [
        {
            "ioc_value": "uaawnpt.en-us-en-us-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 17:47:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871367": [
        {
            "ioc_value": "en-us-en-us-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 17:45:03",
            "last_seen_utc": "2026-08-09 17:46:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871366": [
        {
            "ioc_value": "tfgrzf.enus-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 17:38:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871365": [
        {
            "ioc_value": "enus-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 17:37:42",
            "last_seen_utc": "2026-08-10 01:55:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871364": [
        {
            "ioc_value": "h0snck00.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 17:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871362": [
        {
            "ioc_value": "od8872b0.nurvearmor.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 17:03:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871361": [
        {
            "ioc_value": "kiavqge.en-us-en-usa-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 16:59:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871360": [
        {
            "ioc_value": "en-us-en-usa-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 16:54:31",
            "last_seen_utc": "2026-08-09 21:07:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871359": [
        {
            "ioc_value": "qkyear.en-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 16:39:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871358": [
        {
            "ioc_value": "uv8fudow.eng--keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 16:14:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871355": [
        {
            "ioc_value": "uamidyb.en-us-en-prostawive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 15:58:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871353": [
        {
            "ioc_value": "en-us-en-prostawive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 15:54:00",
            "last_seen_utc": "2026-08-10 07:08:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871350": [
        {
            "ioc_value": "khypcp.en-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 15:36:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871346": [
        {
            "ioc_value": "5j5spglj.engus-prostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 15:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871345": [
        {
            "ioc_value": "wxfruqi.shop-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 14:57:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871344": [
        {
            "ioc_value": "prozenith-en-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 14:41:20",
            "last_seen_utc": "2026-08-09 14:41:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871343": [
        {
            "ioc_value": "bhnyau.en-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 14:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871342": [
        {
            "ioc_value": "prozeanith.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 14:31:26",
            "last_seen_utc": "2026-08-09 14:32:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871341": [
        {
            "ioc_value": "prozeanith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 14:27:51",
            "last_seen_utc": "2026-08-09 14:28:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871337": [
        {
            "ioc_value": "72.61.112.206:2536",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 14:01:05",
            "last_seen_utc": "2026-08-11 13:00:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1a51a0bda4c9e0659b94221fe0001d55038ceb742767df9b49e6e610b8592ebe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871336": [
        {
            "ioc_value": "http://beljaro.shop:2536",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 14:01:04",
            "last_seen_utc": "2026-08-09 15:18:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1a51a0bda4c9e0659b94221fe0001d55038ceb742767df9b49e6e610b8592ebe/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871334": [
        {
            "ioc_value": "hkzkwr.shop-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 13:36:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871333": [
        {
            "ioc_value": "shop-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 13:34:29",
            "last_seen_utc": "2026-08-10 07:58:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871332": [
        {
            "ioc_value": "alzbomz.prostavve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 13:32:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871330": [
        {
            "ioc_value": "prostavve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 13:27:18",
            "last_seen_utc": "2026-08-09 20:17:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871322": [
        {
            "ioc_value": "maceqk.shop-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 12:36:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871321": [
        {
            "ioc_value": "shop-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 12:33:59",
            "last_seen_utc": "2026-08-09 12:35:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871319": [
        {
            "ioc_value": "wupmugp.prosta--vive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 12:27:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871318": [
        {
            "ioc_value": "prostavive.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 12:27:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871234": [
        {
            "ioc_value": "159.203.172.232:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-09 12:20:57",
            "last_seen_utc": "2026-08-13 07:44:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871235": [
        {
            "ioc_value": "http://64.89.160.97:2404/login",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-09 12:20:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2086356374930468925",
            "tags": null,
            "anonymous": 0,
            "reporter": "solostalking"
        }
    ],
    "1871236": [
        {
            "ioc_value": "http://2.26.227.212:2404/login",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-09 12:20:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2086356374930468925",
            "tags": null,
            "anonymous": 0,
            "reporter": "solostalking"
        }
    ],
    "1871250": [
        {
            "ioc_value": "38.207.178.195:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-09 12:20:56",
            "last_seen_utc": "2026-08-12 02:20:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871288": [
        {
            "ioc_value": "167.172.188.177:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-09 12:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871312": [
        {
            "ioc_value": "http://223.123.35.145:36473/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 12:20:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.35.145",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871313": [
        {
            "ioc_value": "http://99.105.56.184:51774/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 12:20:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/99.105.56.184",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871314": [
        {
            "ioc_value": "http://175.107.233.143:40008/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 12:20:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.233.143",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871315": [
        {
            "ioc_value": "http://190.196.253.37:10261/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 12:20:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/190.196.253.37",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871311": [
        {
            "ioc_value": "fh32dvqs.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 12:13:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871310": [
        {
            "ioc_value": "nljtg5vk.eng--cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 12:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871308": [
        {
            "ioc_value": "idlmwh.shop-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:34:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871307": [
        {
            "ioc_value": "shop-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:33:28",
            "last_seen_utc": "2026-08-09 11:34:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871306": [
        {
            "ioc_value": "jklqnwn.pro--prostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:27:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871304": [
        {
            "ioc_value": "proprostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:26:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871303": [
        {
            "ioc_value": "p6b6yovt.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:25:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871302": [
        {
            "ioc_value": "kirvnj.shop-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:23:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871301": [
        {
            "ioc_value": "vtptolt.pink-salt.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:23:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871300": [
        {
            "ioc_value": "rvpsviz.pink-salt.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:14:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871299": [
        {
            "ioc_value": "pink-salt.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:11:48",
            "last_seen_utc": "2026-08-09 11:22:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871298": [
        {
            "ioc_value": "hhypswg.pinksalt-prozenith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:09:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871297": [
        {
            "ioc_value": "pinksalt-prozenith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 11:04:58",
            "last_seen_utc": "2026-08-09 11:05:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871296": [
        {
            "ioc_value": "utgadz.shop-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 10:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871295": [
        {
            "ioc_value": "shop-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 10:46:16",
            "last_seen_utc": "2026-08-09 11:22:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871293": [
        {
            "ioc_value": "dzbptpb.nurvearmor.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 10:06:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871292": [
        {
            "ioc_value": "nurvearmor.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 10:04:07",
            "last_seen_utc": "2026-08-09 17:02:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871291": [
        {
            "ioc_value": "eovrhf.shop-digestistart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:57:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871290": [
        {
            "ioc_value": "shop-digestistart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:56:25",
            "last_seen_utc": "2026-08-09 09:56:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871289": [
        {
            "ioc_value": "zfnv2q4q.dayvillelaundry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:49:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871285": [
        {
            "ioc_value": "72.14.136.55:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:46:40",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871286": [
        {
            "ioc_value": "72.14.136.55:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:46:40",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871287": [
        {
            "ioc_value": "72.14.136.55:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:46:40",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871284": [
        {
            "ioc_value": "69.164.245.180:4000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-09 09:46:39",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871282": [
        {
            "ioc_value": "43.134.169.103:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 09:46:06",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871283": [
        {
            "ioc_value": "43.134.169.103:40056",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 09:46:06",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871281": [
        {
            "ioc_value": "212.103.26.10:54321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-09 09:44:59",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871280": [
        {
            "ioc_value": "209.99.190.23:55010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:57",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871279": [
        {
            "ioc_value": "20.243.82.8:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 09:44:49",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871278": [
        {
            "ioc_value": "198.37.105.30:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-09 09:44:43",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871277": [
        {
            "ioc_value": "185.247.208.91:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:28",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871275": [
        {
            "ioc_value": "172.252.172.33:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:10",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871276": [
        {
            "ioc_value": "172.252.172.33:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:10",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871272": [
        {
            "ioc_value": "172.252.172.29:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871273": [
        {
            "ioc_value": "172.252.172.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871274": [
        {
            "ioc_value": "172.252.172.31:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871269": [
        {
            "ioc_value": "172.245.136.99:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:08",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871270": [
        {
            "ioc_value": "172.245.136.99:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:08",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871271": [
        {
            "ioc_value": "172.245.136.99:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:08",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871268": [
        {
            "ioc_value": "168.222.251.83:56012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:44:04",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871264": [
        {
            "ioc_value": "138.2.87.233:25745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 09:43:33",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871265": [
        {
            "ioc_value": "138.2.87.233:30462",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 09:43:33",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871266": [
        {
            "ioc_value": "138.2.87.233:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-08-09 09:43:33",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871267": [
        {
            "ioc_value": "139.162.113.221:64321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-09 09:43:33",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871263": [
        {
            "ioc_value": "134.122.132.3:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-09 09:43:29",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871262": [
        {
            "ioc_value": "130.12.182.39:2700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-09 09:43:26",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871261": [
        {
            "ioc_value": "124.221.215.82:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-09 09:43:24",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871260": [
        {
            "ioc_value": "105.108.109.255:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-09 09:43:14",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871259": [
        {
            "ioc_value": "ftayov.shop-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:30:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871258": [
        {
            "ioc_value": "shop-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:27:36",
            "last_seen_utc": "2026-08-10 07:08:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871257": [
        {
            "ioc_value": "pv0onuvi.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:25:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871256": [
        {
            "ioc_value": "60guam39.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:23:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871255": [
        {
            "ioc_value": "xkycfjc.nurvearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:05:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871254": [
        {
            "ioc_value": "nurvearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 09:04:08",
            "last_seen_utc": "2026-08-10 04:34:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871253": [
        {
            "ioc_value": "35416ynp.thecharcuteriebeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871252": [
        {
            "ioc_value": "snuidm.shop-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:28:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871251": [
        {
            "ioc_value": "shop-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:27:04",
            "last_seen_utc": "2026-08-10 06:16:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871249": [
        {
            "ioc_value": "syztfq.proznith.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871248": [
        {
            "ioc_value": "proznith.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:11:23",
            "last_seen_utc": "2026-08-09 08:12:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871247": [
        {
            "ioc_value": "prozeniths.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:10:11",
            "last_seen_utc": "2026-08-09 08:10:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871246": [
        {
            "ioc_value": "coowyhw.nuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:09:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871245": [
        {
            "ioc_value": "p85gkugy.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:07:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871243": [
        {
            "ioc_value": "45.61.136.78:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 08:05:08",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871240": [
        {
            "ioc_value": "207.189.23.189:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-09 08:05:05",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871239": [
        {
            "ioc_value": "nuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 08:03:39",
            "last_seen_utc": "2026-08-09 08:04:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871238": [
        {
            "ioc_value": "dmrhew.prozenith-pinksalt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:57:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871237": [
        {
            "ioc_value": "prozenith-pinksalt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:54:57",
            "last_seen_utc": "2026-08-09 07:56:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871233": [
        {
            "ioc_value": "waiwqo.alifpaints.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:13:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871232": [
        {
            "ioc_value": "alifpaints.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:11:47",
            "last_seen_utc": "2026-08-09 07:12:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871231": [
        {
            "ioc_value": "rhdqfzs.en-try-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871227": [
        {
            "ioc_value": "alifbuy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:03:34",
            "last_seen_utc": "2026-08-09 07:04:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871226": [
        {
            "ioc_value": "en-try-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 07:03:07",
            "last_seen_utc": "2026-08-09 07:04:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871225": [
        {
            "ioc_value": "vmi3469820.contaboserver.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 06:59:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c7b2edcd0f5c24dd5e571a1983c5c514e7d2e6ef2e0268a3f43d50d79076e69e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871150": [
        {
            "ioc_value": "159.203.172.232:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-09 06:31:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871154": [
        {
            "ioc_value": "191.252.159.33:8539",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-09 06:31:00",
            "last_seen_utc": "2026-08-22 20:29:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,d2a9afc03e8d4d0f85017c9598f91db6,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1871166": [
        {
            "ioc_value": "mail.coping.ink",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-09 06:30:59",
            "last_seen_utc": "2026-08-09 07:39:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871167": [
        {
            "ioc_value": "79.143.191.7:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-09 06:30:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871170": [
        {
            "ioc_value": "http://153.117.9.227:35316/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.9.227",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871171": [
        {
            "ioc_value": "http://202.141.104.249:60065/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.141.104.249",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871172": [
        {
            "ioc_value": "http://223.123.126.147:40242/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.126.147",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871173": [
        {
            "ioc_value": "http://101.53.225.7:52865/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.225.7",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871174": [
        {
            "ioc_value": "fashion-chicken.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-09 06:30:56",
            "last_seen_utc": "2026-08-09 23:45:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1871180": [
        {
            "ioc_value": "smtp.coping.ink",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-09 06:30:56",
            "last_seen_utc": "2026-08-09 07:39:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871184": [
        {
            "ioc_value": "94.154.43.87:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-09 06:30:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1871186": [
        {
            "ioc_value": "stoppingignpi.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 06:30:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871187": [
        {
            "ioc_value": "rogethat231.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 06:30:54",
            "last_seen_utc": "2026-08-10 07:21:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871188": [
        {
            "ioc_value": "tokerjoker.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 06:30:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871220": [
        {
            "ioc_value": "http://223.123.124.0:54646/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.124.0",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871221": [
        {
            "ioc_value": "http://115.55.183.61:57147/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.55.183.61",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871222": [
        {
            "ioc_value": "http://182.116.13.153:48985/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.116.13.153",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871223": [
        {
            "ioc_value": "http://61.71.179.32:58000/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-09 06:30:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/61.71.179.32",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871219": [
        {
            "ioc_value": "zodem5ma.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 06:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871218": [
        {
            "ioc_value": "202.60.232.182:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 06:05:06",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871217": [
        {
            "ioc_value": "34.26.129.189:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-09 06:05:05",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871216": [
        {
            "ioc_value": "icovaj.sivasumutemlak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 06:04:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871215": [
        {
            "ioc_value": "ubmjfvn.en-thyrafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 06:03:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871214": [
        {
            "ioc_value": "en-thyrafemme-balance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 06:03:00",
            "last_seen_utc": "2026-08-09 06:03:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871213": [
        {
            "ioc_value": "eqppqrur.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 05:38:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871211": [
        {
            "ioc_value": "ueplmeq.vivmart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 05:04:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871209": [
        {
            "ioc_value": "fihwfp.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 05:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871208": [
        {
            "ioc_value": "vivmart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 05:02:08",
            "last_seen_utc": "2026-08-09 05:03:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871206": [
        {
            "ioc_value": "dm6oaevq.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 04:05:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871202": [
        {
            "ioc_value": "bmebamc.eng-usa--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 04:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871201": [
        {
            "ioc_value": "nmcjvm.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 04:02:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871198": [
        {
            "ioc_value": "xzzxhqm.eng-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:55:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871197": [
        {
            "ioc_value": "dtcjz3h1.takeoffdallas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:55:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871196": [
        {
            "ioc_value": "jhjokx.sweethannahs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:54:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871195": [
        {
            "ioc_value": "jlwaxyd.eng-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:54:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871194": [
        {
            "ioc_value": "ivxxyaq.eng-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:48:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871193": [
        {
            "ioc_value": "hhmqcnz.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:40:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871192": [
        {
            "ioc_value": "sholap.sweethannahs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 03:24:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871189": [
        {
            "ioc_value": "rvwwzcz.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 02:49:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871185": [
        {
            "ioc_value": "dgvrvb.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 02:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871183": [
        {
            "ioc_value": "hfwex7a5.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 02:04:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871182": [
        {
            "ioc_value": "sync.aspenframe.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-09 02:03:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1871181": [
        {
            "ioc_value": "dkzsusg.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 01:50:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871179": [
        {
            "ioc_value": "m60mkvir.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 01:28:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871178": [
        {
            "ioc_value": "querem.supremepaintingandrestoration.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 01:26:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871177": [
        {
            "ioc_value": "145.63.135.73:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-08-09 00:55:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/525b378c9abf58b083365cd178a7a611c19ae0107346a714df6ba450eed172ab/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871176": [
        {
            "ioc_value": "nidyjdv.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 00:48:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871175": [
        {
            "ioc_value": "livfaj.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 00:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871168": [
        {
            "ioc_value": "ofzkhtts.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-09 00:02:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871165": [
        {
            "ioc_value": "68.64.183.64:9088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-08 23:47:03",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871164": [
        {
            "ioc_value": "ovssliq.eng-usa--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 23:47:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871163": [
        {
            "ioc_value": "gpkqkb.engus-prostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 23:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871162": [
        {
            "ioc_value": "5pv60e6t.tadkaindiaka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 22:55:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871161": [
        {
            "ioc_value": "axeypjx.eng-us-us-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 22:48:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871157": [
        {
            "ioc_value": "bnqvfp.eng-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 22:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871156": [
        {
            "ioc_value": "sgkg29g4.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 22:03:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871155": [
        {
            "ioc_value": "tidptlj.buy-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 21:46:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871153": [
        {
            "ioc_value": "jyhdzq.eng-us--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 21:19:06",
            "last_seen_utc": "2026-08-17 15:41:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871152": [
        {
            "ioc_value": "eng-usgoldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 21:18:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871151": [
        {
            "ioc_value": "s6inec20.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 21:15:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871148": [
        {
            "ioc_value": "185.199.199.159:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 20:50:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a792f7bf2b52e165d6c27df4e467a6d6b45e749f90ec2d4be421e1a18ae5849e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871149": [
        {
            "ioc_value": "185.199.199.159:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 20:50:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a792f7bf2b52e165d6c27df4e467a6d6b45e749f90ec2d4be421e1a18ae5849e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871147": [
        {
            "ioc_value": "45.92.170.238:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 20:47:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4c9dfdcf21998d5012eb939188ff8cd02e34d9b4ca6cc2ad477b17b333ba0553/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871146": [
        {
            "ioc_value": "halbckb.en-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 20:45:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871145": [
        {
            "ioc_value": "en-theslimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 20:44:57",
            "last_seen_utc": "2026-08-19 07:46:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871144": [
        {
            "ioc_value": "https://144.172.94.130/api/v1/agent/enroll",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 20:42:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69551d4d5a91e5dcc6d8744a2ba3cc1fda7d5c7f7e855036c7f61a6c5137a66a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871143": [
        {
            "ioc_value": "144.172.94.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 20:42:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69551d4d5a91e5dcc6d8744a2ba3cc1fda7d5c7f7e855036c7f61a6c5137a66a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871142": [
        {
            "ioc_value": "23.146.240.36:62520",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-08 20:38:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78ce74d34c1d16e2b11f9823c7b43a8b32015d26e9f59354e80cc50d394ab0cb/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871141": [
        {
            "ioc_value": "193.148.56.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 20:36:29",
            "last_seen_utc": "2026-08-27 07:29:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d490ac7dc0854bea4728b0a4497727fdf74a8b1a4a9dc10d040c71b1814586bd/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871140": [
        {
            "ioc_value": "http://193.148.56.206/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 20:36:26",
            "last_seen_utc": "2026-09-01 03:34:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d490ac7dc0854bea4728b0a4497727fdf74a8b1a4a9dc10d040c71b1814586bd/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871097": [
        {
            "ioc_value": "http://223.123.43.197:49453/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 20:32:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.197",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871098": [
        {
            "ioc_value": "http://153.117.50.22:60485/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 20:32:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.50.22",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871099": [
        {
            "ioc_value": "http://111.92.153.194:47148/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 20:32:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.153.194",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871100": [
        {
            "ioc_value": "http://105.184.74.46:44527/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 20:32:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/105.184.74.46",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1871139": [
        {
            "ioc_value": "bgrrcs.eng--us-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 20:18:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871137": [
        {
            "ioc_value": "engus-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 20:17:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871136": [
        {
            "ioc_value": "j26nezfv.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 20:01:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871135": [
        {
            "ioc_value": "wgxdvlm.en-synaptigen-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 19:47:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871134": [
        {
            "ioc_value": "91.92.40.5:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 19:46:26",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871133": [
        {
            "ioc_value": "57.182.128.31:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-08-08 19:46:05",
            "last_seen_utc": "2026-09-01 02:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871131": [
        {
            "ioc_value": "52.128.231.157:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:46:03",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871132": [
        {
            "ioc_value": "52.128.231.158:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:46:03",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871129": [
        {
            "ioc_value": "52.128.231.155:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:46:02",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871130": [
        {
            "ioc_value": "52.128.231.156:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:46:02",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871128": [
        {
            "ioc_value": "43.139.114.212:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:45:40",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871127": [
        {
            "ioc_value": "34.150.91.139:19443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 19:45:33",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871126": [
        {
            "ioc_value": "207.189.18.213:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:44:39",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871125": [
        {
            "ioc_value": "194.69.162.217:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:44:25",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871124": [
        {
            "ioc_value": "en-synaptigen-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 19:44:23",
            "last_seen_utc": "2026-08-08 19:44:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871123": [
        {
            "ioc_value": "191.111.244.175:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-08 19:44:19",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871122": [
        {
            "ioc_value": "172.252.172.33:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:58",
            "last_seen_utc": "2026-09-01 02:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871121": [
        {
            "ioc_value": "169.58.64.151:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 19:43:55",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871120": [
        {
            "ioc_value": "159.203.69.210:48202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 19:43:49",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871119": [
        {
            "ioc_value": "157.10.52.2:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871118": [
        {
            "ioc_value": "151.242.170.219:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871116": [
        {
            "ioc_value": "125.62.77.141:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871117": [
        {
            "ioc_value": "125.62.77.141:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871112": [
        {
            "ioc_value": "112.121.176.3:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:17",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871113": [
        {
            "ioc_value": "112.121.176.4:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:17",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871114": [
        {
            "ioc_value": "112.121.176.5:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:17",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871115": [
        {
            "ioc_value": "112.121.176.6:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:17",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871111": [
        {
            "ioc_value": "104.239.66.95:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 19:43:11",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871110": [
        {
            "ioc_value": "1.92.135.168:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 19:43:01",
            "last_seen_utc": "2026-09-01 02:43:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871109": [
        {
            "ioc_value": "wyrntv.eng-usa-us-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 19:20:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871108": [
        {
            "ioc_value": "eng-usa-us-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 19:17:23",
            "last_seen_utc": "2026-08-21 17:32:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871102": [
        {
            "ioc_value": "lsfccqf.en-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 18:45:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871101": [
        {
            "ioc_value": "en-superbrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 18:43:57",
            "last_seen_utc": "2026-08-08 18:44:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871096": [
        {
            "ioc_value": "rcslfw.eng-usa-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 18:17:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871095": [
        {
            "ioc_value": "eng-usa-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 18:16:56",
            "last_seen_utc": "2026-08-08 18:17:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871094": [
        {
            "ioc_value": "38.60.227.165:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 18:05:08",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871093": [
        {
            "ioc_value": "37.72.168.212:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 18:05:07",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871090": [
        {
            "ioc_value": "mwf64ejt.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:59:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871089": [
        {
            "ioc_value": "4pm3ff8r.tacticalk9familycoin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:56:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871088": [
        {
            "ioc_value": "blessedongrace.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-08 17:50:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4e816325a4d8ca11aea96fa9f0118200acee2cfb8b4e94e1f06b8d336c1dac3d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871087": [
        {
            "ioc_value": "kmvurly.en-slimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:44:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1871086": [
        {
            "ioc_value": "en-slimsplitsmethod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:43:26",
            "last_seen_utc": "2026-08-08 17:43:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1871084": [
        {
            "ioc_value": "217.60.241.48:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:06",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871085": [
        {
            "ioc_value": "130.12.182.79:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:06",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871071": [
        {
            "ioc_value": "130.12.182.79:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871072": [
        {
            "ioc_value": "130.12.182.79:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-11 06:17:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871073": [
        {
            "ioc_value": "130.12.182.79:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871074": [
        {
            "ioc_value": "217.60.241.31:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871075": [
        {
            "ioc_value": "217.60.241.50:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871076": [
        {
            "ioc_value": "130.12.182.79:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871077": [
        {
            "ioc_value": "217.60.241.48:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871078": [
        {
            "ioc_value": "217.60.241.48:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871079": [
        {
            "ioc_value": "130.12.182.79:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871080": [
        {
            "ioc_value": "217.60.241.50:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871081": [
        {
            "ioc_value": "217.60.241.31:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871082": [
        {
            "ioc_value": "217.60.241.31:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871083": [
        {
            "ioc_value": "217.60.241.50:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:05",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871058": [
        {
            "ioc_value": "217.60.241.31:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871059": [
        {
            "ioc_value": "130.12.182.79:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871060": [
        {
            "ioc_value": "130.12.182.79:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871061": [
        {
            "ioc_value": "217.60.241.31:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871062": [
        {
            "ioc_value": "130.12.182.79:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871063": [
        {
            "ioc_value": "130.12.182.79:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-11 06:17:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871064": [
        {
            "ioc_value": "130.12.182.79:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871065": [
        {
            "ioc_value": "217.60.241.31:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871066": [
        {
            "ioc_value": "217.60.241.50:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871067": [
        {
            "ioc_value": "130.12.182.79:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871068": [
        {
            "ioc_value": "217.60.241.48:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871069": [
        {
            "ioc_value": "130.12.182.79:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871070": [
        {
            "ioc_value": "130.12.182.79:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:04",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871052": [
        {
            "ioc_value": "217.60.241.48:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:03",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871053": [
        {
            "ioc_value": "217.60.241.31:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:03",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871054": [
        {
            "ioc_value": "217.60.241.50:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:03",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871055": [
        {
            "ioc_value": "217.60.241.31:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:03",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871056": [
        {
            "ioc_value": "217.60.241.48:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:03",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871057": [
        {
            "ioc_value": "217.60.241.50:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:03",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871039": [
        {
            "ioc_value": "217.60.241.48:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871040": [
        {
            "ioc_value": "217.60.241.50:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871041": [
        {
            "ioc_value": "217.60.241.31:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871042": [
        {
            "ioc_value": "217.60.241.50:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871043": [
        {
            "ioc_value": "217.60.241.48:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871044": [
        {
            "ioc_value": "217.60.241.31:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871045": [
        {
            "ioc_value": "217.60.241.50:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871046": [
        {
            "ioc_value": "217.60.241.31:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871047": [
        {
            "ioc_value": "217.60.241.48:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871048": [
        {
            "ioc_value": "217.60.241.48:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871049": [
        {
            "ioc_value": "217.60.241.50:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871050": [
        {
            "ioc_value": "217.60.241.48:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871051": [
        {
            "ioc_value": "217.60.241.50:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:01",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871030": [
        {
            "ioc_value": "217.60.241.48:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871031": [
        {
            "ioc_value": "217.60.241.50:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871032": [
        {
            "ioc_value": "217.60.241.31:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871033": [
        {
            "ioc_value": "217.60.241.31:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871034": [
        {
            "ioc_value": "217.60.241.50:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871035": [
        {
            "ioc_value": "217.60.241.48:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871036": [
        {
            "ioc_value": "217.60.241.48:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871037": [
        {
            "ioc_value": "217.60.241.50:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871038": [
        {
            "ioc_value": "217.60.241.31:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-08 17:35:00",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1871029": [
        {
            "ioc_value": "01f84e942908ccb2fc657d9dd1caf8b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 17:27:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871028": [
        {
            "ioc_value": "c6cc775f76f0aced85206c313b452f29334c6ac9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 17:27:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871024": [
        {
            "ioc_value": "8d945e37a9d8f4f68fb34b623e628aed9cce8c8ea6593a8e2bbcbba33e166537",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871025": [
        {
            "ioc_value": "b30bbd5be515a837e21a3c9ac34afab886f67d59",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871026": [
        {
            "ioc_value": "b426a480de03b7a15e739cf07f7fac88",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871027": [
        {
            "ioc_value": "30064a241c39541e287ccbe04f1027a037a10918528384479d27b53a23c2b1aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 17:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871023": [
        {
            "ioc_value": "ce86bec69c0991c8cd99787e5f8a2c4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871020": [
        {
            "ioc_value": "52986c188bb52d99b07384a20d73289e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:27:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871021": [
        {
            "ioc_value": "14cfc813ef030e8b3f0e85fe8c140e1b746b52c76fff8352d0d92eb46f725470",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871022": [
        {
            "ioc_value": "41fdddf38a9b635306213d33d15ae2f6c6bde502",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871017": [
        {
            "ioc_value": "4d56b55b133743418061a05b4c09cb74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871018": [
        {
            "ioc_value": "d82fd1f36b81436d7fd9096cec50e2d08dbe148680ff1281e59b10d0fe806448",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:27:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871019": [
        {
            "ioc_value": "d5738f928da3c4feede8a2f510a792a1bb306e08",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:27:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871015": [
        {
            "ioc_value": "a42df8053e42a3f98ce47aa8a0d130c0aa939d3dd9a8585011ddd665a8463fe0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871016": [
        {
            "ioc_value": "a5833eec48932d697f0cdc1780e4010667513f0d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871012": [
        {
            "ioc_value": "690b3aacb438e50788ca6018d18caa7bd1d18121e71649e7d2e36067919ca0d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871013": [
        {
            "ioc_value": "e4dc5c08c21d06255cab4b527b36a4a3c834028d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871014": [
        {
            "ioc_value": "fd97ea4b8cfbe711cdeff06d6e8c502f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:27:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871008": [
        {
            "ioc_value": "8401e96f3e47f9e0fb2544424acd1434",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-08 17:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871009": [
        {
            "ioc_value": "2b45aeb88bf38dd8dfbb13390c5b0f5efd6a298a6f967ac773cf47b2489ee5ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 17:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871010": [
        {
            "ioc_value": "3526ba1e856cf7c229ac3149ba05eeacf74fa7d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 17:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871011": [
        {
            "ioc_value": "23ed3c85947705b76a5bc6dfaaff0b41",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 17:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871006": [
        {
            "ioc_value": "f4b24101f0917af773057ae219396c0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871007": [
        {
            "ioc_value": "30584a4b5f16c8125f62bfdbc24c939d21be3784",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-08 17:26:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871003": [
        {
            "ioc_value": "65cef1e97cc1dbaa4fe794599838e434",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871004": [
        {
            "ioc_value": "4050513fd2c0e7872d037adc911283a8362a5173ff1910ff5eb8890b980e7994",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871005": [
        {
            "ioc_value": "cbf24d71c84ee8a087d205c43a089a276c4fc342",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871001": [
        {
            "ioc_value": "4115dfac942c3e99fa356fcd89cb30ecbeb8156da57b1fb0d8c8270699b6417b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871002": [
        {
            "ioc_value": "4b2314b9fcae13e7c9e93ac93d08404bddea1a90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870998": [
        {
            "ioc_value": "dc1e2425521c3ff8344ea04a2294730e8ddda29da11b809421b85c896a693cad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 17:26:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870999": [
        {
            "ioc_value": "365ee4d8c9c3b3b10f07b41b316a745452e8e00b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 17:26:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1871000": [
        {
            "ioc_value": "d5cf90d75595ae54fad924f7ea2861dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 17:26:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870995": [
        {
            "ioc_value": "7fe1c82d5a257a35d527e78f05d35592c015f0dd8de1956d1e7f02ca70462f4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870996": [
        {
            "ioc_value": "b8601376c42b9ffdd0c599fa9650ab4f64674007",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870997": [
        {
            "ioc_value": "a7896d977fe660b80c214495486f1f4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870993": [
        {
            "ioc_value": "2bc8a0dc10a195172f9ab72e38c4ef38c2aa1d97",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-08 17:26:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870994": [
        {
            "ioc_value": "68ccd17f80bcc61bec8759b77cb80b24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-08 17:26:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870992": [
        {
            "ioc_value": "ed71b72c1e0d19a627fea10181438779fb02bcfcd67870ce57e363a7c5168e94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-08 17:26:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870990": [
        {
            "ioc_value": "bbdbbbaa2596aa7a8a85fa4d4090c4a0387d7d74",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-08 17:26:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870991": [
        {
            "ioc_value": "2d4fe10deb30092875ad0e5327904cd9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-08 17:26:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870987": [
        {
            "ioc_value": "02c8512b8bc8cce7e46a4d28ea46250076edef9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870988": [
        {
            "ioc_value": "6da5f33515b187df3620e7463fab9995",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870989": [
        {
            "ioc_value": "07b1a32c53c1efab24f54151b1158bad7404374f0dfdee558e7ad80ad278575a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-08 17:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870984": [
        {
            "ioc_value": "912baf829d387831d0dd450744b5cc0d5496000d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870985": [
        {
            "ioc_value": "2f89f9431bd97dba2fab3cd2f02d6f10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870986": [
        {
            "ioc_value": "b9cf80a5e63577b018937534f6219eb29876c2163f0cdad7341acc2deef2859f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870982": [
        {
            "ioc_value": "11b388e073236318b3851c168aa1abde",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-08 17:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870983": [
        {
            "ioc_value": "467ed1f5cfbbb2bbb6f90f75d1b2bcd99dbeb38a65cc4bcc7bd39767a62d5676",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870979": [
        {
            "ioc_value": "11f2b24989b0edce6ffa5113c7e61470",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870980": [
        {
            "ioc_value": "254412f2ca69b69f8b686f874374e2584aaf55ad5c3e8ed6eddfa69f3fe6ea2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-08 17:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870981": [
        {
            "ioc_value": "3b2ce84bea55b35c195a046f40dd838931960270",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-08 17:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870976": [
        {
            "ioc_value": "f0d062c4f07188525d9b14c975e871ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870977": [
        {
            "ioc_value": "cdde719462e36f6a902e40859fab9e057acc944a02cc56c43353ab449efe6105",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870978": [
        {
            "ioc_value": "8a7cc667b001f6c5e2eb56759ca725c3a1694276",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870975": [
        {
            "ioc_value": "8616383a669c0d3ba743bc9f122954257fb28bd9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870972": [
        {
            "ioc_value": "8a7ad515a23953f1dc2eebd140f434e7a61cda9d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870973": [
        {
            "ioc_value": "e9c8477a7011ac3fdc936f8b57ae9344",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870974": [
        {
            "ioc_value": "e1ee2b7aeeb62f063134d78df6e522afde0952eca1701fb8d0835abe18ef16bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870969": [
        {
            "ioc_value": "a4933d27e1f7f7331a3a0ab54d6b53339a412777",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870970": [
        {
            "ioc_value": "58a519430128d0e52fc10b3bc7fdb717",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870971": [
        {
            "ioc_value": "c5125a9712a4bece5cc1d53da1914ec5ac7ba147ab37242b03ce488bc2909137",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870966": [
        {
            "ioc_value": "50e9dd0c02bc1927862be248b90d3d9bdb0fcc86",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870967": [
        {
            "ioc_value": "a216558b0c9403010e3682e37bad4b0c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870968": [
        {
            "ioc_value": "ddf8b517a8fed544e1adac815a5d85d4c917717449dd52d1354c03f599f05779",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870963": [
        {
            "ioc_value": "cd1378bb22fa98439afecc6cf3e657b3633ed37b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-08-08 17:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870964": [
        {
            "ioc_value": "fde4bb9242202ad2ec42ab19a0fdd453",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-08-08 17:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870965": [
        {
            "ioc_value": "e234be44eeafaf0250d9ef2cef198e223264e1541cff78d30a98163c5a7dde67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870961": [
        {
            "ioc_value": "e964a5e37ad3c1c0478ff13ac5b32c65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870962": [
        {
            "ioc_value": "10505f035b1e6569cb22d42614829e85fd432e014418f457e2e1dfc31dcd505c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-08-08 17:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870958": [
        {
            "ioc_value": "9209c4f81950da9422311103c970cb42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-08 17:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870959": [
        {
            "ioc_value": "604540e8f61d04ed0bde2678ace8d1d9a43461e0a2b8533d371891d6bf4089a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870960": [
        {
            "ioc_value": "53f5dc9f1f5b05d38f927b11145a4fb93351324b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870955": [
        {
            "ioc_value": "ab85fd8e14032d3f07865e7da41191ae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870956": [
        {
            "ioc_value": "60a779d7f51d106e4a8d14e6fe987ca6b7ec4b6c7942c665bb6653a0dae0fc4d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-08 17:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870957": [
        {
            "ioc_value": "29581ba87e3feedf1dafcc133820f9259fb38e0c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-08 17:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870953": [
        {
            "ioc_value": "1e5be4fab2e11a5a450d10e056be635d6695e10ba02933db46f49d2631c7d910",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870954": [
        {
            "ioc_value": "e9e85b7ad49171ae07ced4a298be3ccd7c0efbac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870950": [
        {
            "ioc_value": "88e9161f6548b523c713702db766a5e18b77129db89aabb2e6150f0b6e781569",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 17:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870951": [
        {
            "ioc_value": "0260fa7f703aeef4b962495016e3176b2b577f96",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 17:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870952": [
        {
            "ioc_value": "7831a775e41a76f5688adcfd3fd002c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 17:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870947": [
        {
            "ioc_value": "599584e6e42436721a66c2d3fbc29fe0d9be0b0e3f9e0f5f0333293e293920fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870948": [
        {
            "ioc_value": "7277302b2aff555f45fa7839aef63797dfd958de",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870949": [
        {
            "ioc_value": "cb7a54e77e833e0cfd984ef4a9c49a3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870945": [
        {
            "ioc_value": "372f738c4548c59adb53f576454285d8372e8557",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 17:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870946": [
        {
            "ioc_value": "d9e58b4fa83412f34ee5f5c3cec259e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 17:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870942": [
        {
            "ioc_value": "2232c9a8947107e20de838446c715d13cba10f90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870943": [
        {
            "ioc_value": "9ee92ca39c8c4ea09084d6a3152c7620",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870944": [
        {
            "ioc_value": "2a6ebbf3901296ecc772eaed7e22b5cfa0e2c316323ac5f74253f63b77823f31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 17:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870940": [
        {
            "ioc_value": "1877ec10e90000f32f87a2c754fc028d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870941": [
        {
            "ioc_value": "bde027623ac81616afb0be9a3ff9f7ec718278f89bf684feded59738175cc114",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870938": [
        {
            "ioc_value": "e615cc96f7eec986fe4c10b109739dfb9a4ceaa8d0df87ef03474cf46b71b19a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870939": [
        {
            "ioc_value": "d4afcca2b8e956a2a31d9e4d931f0d610e61aba3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870936": [
        {
            "ioc_value": "494832005793fe3cf94814a79cdbda455dbfc197",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-08 17:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870937": [
        {
            "ioc_value": "c3b3b58a8af1db66d1545d96c0eb78ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-08 17:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870934": [
        {
            "ioc_value": "04bca2eac61465824f49f8f978137a6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870935": [
        {
            "ioc_value": "5c047137f0216fadb95aaf302809eb0ac2f3db0c36729152c1351fb821d94fca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-08 17:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870931": [
        {
            "ioc_value": "b54cef50367e935f57e7a23d17ff85ae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870932": [
        {
            "ioc_value": "c43acf99103c323dec615c0f2b7f6af9c77c89c4988c51f2bfb2b1f5523b4127",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870933": [
        {
            "ioc_value": "283e4a8874a4f627e32514a30160a01c79ec2a81",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870930": [
        {
            "ioc_value": "f91e2ed24c38f9a727ab441e609077e329f281b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870926": [
        {
            "ioc_value": "1e7b81bdbf126727fa8fd61049f68025deede33c2204c2fb8af9465cee9cbd82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870927": [
        {
            "ioc_value": "8b3d1515aa4c139e5e49e1d855f19b2e363dc07a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870928": [
        {
            "ioc_value": "a9c6b8aa8dcad8c23bbafd75f9874231",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870929": [
        {
            "ioc_value": "1e9bbc30c454a22cf03638880a94b274e09c195b85278f3f25297fd514b06871",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870923": [
        {
            "ioc_value": "a4895d35b29bd056cfedbf16a7fc28f4d1ce00795e395a68155c02eb89d616bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.electro_rat",
            "malware_alias": null,
            "malware_printable": "ElectroRAT",
            "first_seen_utc": "2026-08-08 17:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870924": [
        {
            "ioc_value": "17e2bab3497fe60327d2f145e93f5e6cf22abae6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.electro_rat",
            "malware_alias": null,
            "malware_printable": "ElectroRAT",
            "first_seen_utc": "2026-08-08 17:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870925": [
        {
            "ioc_value": "37ac69c903d0c1c196b3159a55417dcb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.electro_rat",
            "malware_alias": null,
            "malware_printable": "ElectroRAT",
            "first_seen_utc": "2026-08-08 17:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870920": [
        {
            "ioc_value": "c723fbd5be4242ff25d2dd6d1f59dee47033c78ee096ac0241cd6ff43ddab7a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870921": [
        {
            "ioc_value": "c8237f0af18ef97ac33a14a4b6d4312187ad87e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870922": [
        {
            "ioc_value": "fba7ca7cebadd9c91d0c477ea66e212c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870918": [
        {
            "ioc_value": "d2df9fe60198d53c63081dc5544e7b9fc758aed8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870919": [
        {
            "ioc_value": "42e5384c554e2768bb5dd4f67b95eaac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870914": [
        {
            "ioc_value": "3c36d36eb80d6f3a505cb2e780428d13a5cb5db555ee2b5de28025643295f318",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870915": [
        {
            "ioc_value": "62e12703cdf4a91f38d10596857cdd17d0d1631e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870916": [
        {
            "ioc_value": "e1351bf5883a824ce84522ae345f03b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870917": [
        {
            "ioc_value": "90eb16162aa7723a74dd8a1a8e49a3a659dd982afaf4abd7c93e455ec8cf8f99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870912": [
        {
            "ioc_value": "0648463248ae9e6a255c8e07c9cc08277b406ea6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 17:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870913": [
        {
            "ioc_value": "f31bae04dadf2712d4e4d82a96a56156",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 17:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870909": [
        {
            "ioc_value": "9e69795f8536df8d9fef86295b1e329b038c4400",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870910": [
        {
            "ioc_value": "18daa4731d5b880e9566d8a231e872c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870911": [
        {
            "ioc_value": "db0424208bbbb7fa162719bfc67b6d36c33caf7c924e6b675312adbd26d9634d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 17:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870907": [
        {
            "ioc_value": "e2f9584c8db75f3924c1f838ca571580",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870908": [
        {
            "ioc_value": "26a079d8aa4562500ba24d38f4c93d8696e90ccb91d8481f581f7995b235d9b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 17:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870904": [
        {
            "ioc_value": "a7a46aaaa90771d4633e2974cccf1645",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870905": [
        {
            "ioc_value": "3ae9f263c7a093592db83592768848686292828e0bdf80706f85f3e882b8c818",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870906": [
        {
            "ioc_value": "d55aa9375ff8844ebf905739dea455053fdcc49b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870902": [
        {
            "ioc_value": "cf75e3b29c4a5ae4dbb09ec6a6e236daa0f6d6bc7e5a5fe26293effd1a1fbf77",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870903": [
        {
            "ioc_value": "27b3bf608ff261deb6245057ff1f4823c207de77",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870899": [
        {
            "ioc_value": "374a443a1c7a7eb124c94bad6d37dc1a28fdfeef19cc598d0d49815ccc79742d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870900": [
        {
            "ioc_value": "4e506a74d753aade278826d4b5c6f7fcf5f1d34b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870901": [
        {
            "ioc_value": "78bed56c1df063c2d5a4fef941c1b4e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-08 17:26:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870895": [
        {
            "ioc_value": "b484a8a47908c65583c06881e4b8733b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870896": [
        {
            "ioc_value": "49e95f2f47eba1031337bef9940f363fbe3491085a570f1ed4f6a20f058600ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870897": [
        {
            "ioc_value": "18cf30c933001ccb163329937fb9c14fdeb7c5fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870898": [
        {
            "ioc_value": "3cab2600fe139a02cb5b9661a0ac107e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870892": [
        {
            "ioc_value": "4f125db7a5d0f5dfa9c31f7ca013f98c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870893": [
        {
            "ioc_value": "cd9bf36c14c7a115978c8c9ff4637d46b7069982fdbd65a9c3ad3371161bd786",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870894": [
        {
            "ioc_value": "e49d4f225f7251faf9ed344742a80d30e082a13e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870891": [
        {
            "ioc_value": "523801dc065de6a2c68793f9dadbef481c7f59b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870889": [
        {
            "ioc_value": "59f06cb48041648dcc8eb5b4b6555bbd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870890": [
        {
            "ioc_value": "91774c1e1cb384509ce516a6205b93596d6860794c81c7ac1bb4b31048e0ea07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870886": [
        {
            "ioc_value": "f640fea8ed325c4cb449f84d9b73c63f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870887": [
        {
            "ioc_value": "d04443f5bd667bc8a3f4433bb1868011b19b3105263333f80f6eb69e2c0dce8f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870888": [
        {
            "ioc_value": "c214749f50cedd9bf61c5bb42517da09e8d01ca4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-08 17:26:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870883": [
        {
            "ioc_value": "61267b7c51bdb2fa0f28cc5023a14bf3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870884": [
        {
            "ioc_value": "7e65e1b7f079bfebcdfe244793aee4782d46e7633e029d8335e665981d739bba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870885": [
        {
            "ioc_value": "d3bb712c5ad8c74155f0b7655847c08b18d2921d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870880": [
        {
            "ioc_value": "22be169a8b8005c07238dca6df6ecbf8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-08 17:26:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870881": [
        {
            "ioc_value": "f5f88d7d79a58147988ee2995768c923fab8720181a8091a6cb1acb77ab17e9f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870882": [
        {
            "ioc_value": "94e6e4b416547ee957bd4321ef13cec3f42cc0dd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-08 17:26:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870879": [
        {
            "ioc_value": "eea4c4329e23baa399cfdc5e04bf06cc63d48325",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-08 17:26:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870876": [
        {
            "ioc_value": "20c588c7387b49e1d8c75c67881c41ae302ea5a9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-08 17:26:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870877": [
        {
            "ioc_value": "bbbcac5f44769f56780085fc5c455173",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-08 17:26:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870878": [
        {
            "ioc_value": "6da94ae29b7c3f8a3983ea42ca891eb24a784ae2bc0b9377724dafebacfdf7d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-08 17:26:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870873": [
        {
            "ioc_value": "01037a2a57053ff0c178c4f7099a071dc58fff67",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-08 17:26:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870874": [
        {
            "ioc_value": "f89cad44baf7b71f0546119d74f45d1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-08 17:26:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870875": [
        {
            "ioc_value": "7aee8fbe1e1c74f6128f977d9e5ebe46adce4faa1f7a61f95b02c73e5a760ceb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-08 17:26:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870871": [
        {
            "ioc_value": "be45167f9f2bbda577096e81c99e8bf5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870872": [
        {
            "ioc_value": "971ca31a18582eed3b1ddfe11533d698a9d3a2b5027a591cde01f7cfaa2d7cc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-08 17:26:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870869": [
        {
            "ioc_value": "12833af0f0d1c3c193cf0aeadb7c2dbb3b6b9f4a600e65b43e3997fcd6621e88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870870": [
        {
            "ioc_value": "f4ca86e22a20f8822987925213b56c71ddabbbee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:26:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870867": [
        {
            "ioc_value": "6790e1cbf6798382504915d09bbf8b5aacc10dfe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870868": [
        {
            "ioc_value": "858d6d91e6d04cb26acb51fcb516f9c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870866": [
        {
            "ioc_value": "0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870864": [
        {
            "ioc_value": "7181e13d83d7e6fa61590fc4b565601da16e419b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870865": [
        {
            "ioc_value": "e2fc1a8f0375978c269481f1908fbdb7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870861": [
        {
            "ioc_value": "c11961ace6157d86482167527927cbe937a8a38a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870862": [
        {
            "ioc_value": "ebd0b8e0f53ea8a997823dab5224f2e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870863": [
        {
            "ioc_value": "a43853c12573d2dd8792b2380c895118266c289f10e659c457354a009efdb47c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:26:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870858": [
        {
            "ioc_value": "d97a0827c8bf43c817d930952116d5e37cb91f59",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:25:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870859": [
        {
            "ioc_value": "3315621101aa61260d1ab6828a78c155",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:25:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870860": [
        {
            "ioc_value": "a82ddf1015b9f676b2aa720f33e351330418e7739da9e90ddb6ebed1304dcd40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 17:25:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870854": [
        {
            "ioc_value": "99830a24d6aed654adff341b2c6ad2ba6c971c028dfce1ca455a37d1fbdf4617",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870855": [
        {
            "ioc_value": "dc9a3e8c88c518b5984c99af2e0e9051b0242f87",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870856": [
        {
            "ioc_value": "93617a98e627a01092973d8f2d1829ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870857": [
        {
            "ioc_value": "2262f032e08a958b540a04c9a83adec6f004aec8df1d7537d959edf6d4e5a0f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-08 17:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870851": [
        {
            "ioc_value": "f0a10f8d919b4e785e04461ed2adde2d51608e50f69e1e4995c85b71472272b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870852": [
        {
            "ioc_value": "dd210299c394d68f2ff766283c1bbe6423a532da",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870853": [
        {
            "ioc_value": "097b3b7c38e22a3b1e5e434c907f5261",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870849": [
        {
            "ioc_value": "c8986e58af9d9e391da72b8f716eb090c06d3506",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870850": [
        {
            "ioc_value": "07c7ceae2f3b9ef378e2ba0ffabeb5d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870846": [
        {
            "ioc_value": "93fd0312b65fb1cf6c58232a517d0629ceb019bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870847": [
        {
            "ioc_value": "04dd7b095c77dede0d747dc0c1c1f63f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870848": [
        {
            "ioc_value": "dd76c6129d0f99a35b4b4c5e5ff641a2620ad7a20bbcdfd41b849bf3af246df6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870843": [
        {
            "ioc_value": "ddd0d82daf6548bf6b6d92aafbeded924ec8ee4d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-08 17:25:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870844": [
        {
            "ioc_value": "531962f97a5f6ae7580f8d895d9177f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-08 17:25:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870845": [
        {
            "ioc_value": "94d78f73cb60d9c167cd640d1769a78ccc26020bcbf691dc2dd43ffd342948e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-08 17:25:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870841": [
        {
            "ioc_value": "http://185.199.199.159:8080/api/endpoint.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 17:25:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870842": [
        {
            "ioc_value": "a8efe4ee25da7ed2f6255f18f3db86e0a204c7b4a275e57bcfc9a6adf3c52532",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-08 17:25:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870838": [
        {
            "ioc_value": "a6ca175a3e90cb6ed4821199638c6ddf898abebd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-08 17:25:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870839": [
        {
            "ioc_value": "a0b2deb23eb23221d713916f461230bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-08 17:25:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870840": [
        {
            "ioc_value": "http://185.199.199.159:8080/api/server.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 17:25:52",
            "last_seen_utc": "2026-08-08 20:50:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870835": [
        {
            "ioc_value": "a3acb9e0ef8bdd2fb0225613864bd08cb44df87d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:25:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870836": [
        {
            "ioc_value": "8f82374cae854dcc3df5a9a6e849de1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:25:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870837": [
        {
            "ioc_value": "3fd9f4172c8588c4df27fff1875a78da23ddc8242c0b3d07f87d45020c0d475d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-08 17:25:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870833": [
        {
            "ioc_value": "861a9b7ff7e91010cf002fb2b669bf1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:25:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870834": [
        {
            "ioc_value": "9a77e80a5ad7cf9df388338fc4988ac2b05c6f31249bdb356cc86f66be232022",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:25:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870831": [
        {
            "ioc_value": "cfd5919b1f3d3add639bd324514c39f3807f93bbd75eb8efd576c72d26eea1bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:25:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870832": [
        {
            "ioc_value": "f8715cf08dfd25ac10accf8f8d930d9cfbb606ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:25:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870830": [
        {
            "ioc_value": "dallas.baltos.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-08 17:18:17",
            "last_seen_utc": "2026-08-08 17:18:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/971ca31a18582eed3b1ddfe11533d698a9d3a2b5027a591cde01f7cfaa2d7cc9/",
            "tags": "Overlord,OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870828": [
        {
            "ioc_value": "104.239.66.207:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-08 17:18:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/971ca31a18582eed3b1ddfe11533d698a9d3a2b5027a591cde01f7cfaa2d7cc9/",
            "tags": "Overlord,OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870829": [
        {
            "ioc_value": "104.239.66.207:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-08 17:18:15",
            "last_seen_utc": "2026-08-24 13:22:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/971ca31a18582eed3b1ddfe11533d698a9d3a2b5027a591cde01f7cfaa2d7cc9/",
            "tags": "Overlord,OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870827": [
        {
            "ioc_value": "yxmyci.eng-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:17:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870826": [
        {
            "ioc_value": "son2.1368.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:16:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6c3290de54b94a0df32b50a045ea0f90380c7b57bd8992f6a71cca6b1ad2574f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870824": [
        {
            "ioc_value": "150.241.226.176:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:16:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6c3290de54b94a0df32b50a045ea0f90380c7b57bd8992f6a71cca6b1ad2574f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870825": [
        {
            "ioc_value": "150.241.226.176:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:16:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6c3290de54b94a0df32b50a045ea0f90380c7b57bd8992f6a71cca6b1ad2574f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870823": [
        {
            "ioc_value": "150.241.226.176:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:16:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6c3290de54b94a0df32b50a045ea0f90380c7b57bd8992f6a71cca6b1ad2574f/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870822": [
        {
            "ioc_value": "eng-usa-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:16:25",
            "last_seen_utc": "2026-08-20 15:56:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870819": [
        {
            "ioc_value": "102.165.46.31:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:13:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfd5919b1f3d3add639bd324514c39f3807f93bbd75eb8efd576c72d26eea1bf/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870820": [
        {
            "ioc_value": "102.165.46.31:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:13:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfd5919b1f3d3add639bd324514c39f3807f93bbd75eb8efd576c72d26eea1bf/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870821": [
        {
            "ioc_value": "102.165.46.31:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:13:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfd5919b1f3d3add639bd324514c39f3807f93bbd75eb8efd576c72d26eea1bf/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870816": [
        {
            "ioc_value": "154.39.0.248:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:12:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a77e80a5ad7cf9df388338fc4988ac2b05c6f31249bdb356cc86f66be232022/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870817": [
        {
            "ioc_value": "154.39.0.248:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:12:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a77e80a5ad7cf9df388338fc4988ac2b05c6f31249bdb356cc86f66be232022/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870818": [
        {
            "ioc_value": "154.39.0.248:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 17:12:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a77e80a5ad7cf9df388338fc4988ac2b05c6f31249bdb356cc86f66be232022/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870815": [
        {
            "ioc_value": "porteralarm.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-08 17:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870814": [
        {
            "ioc_value": "ops4.coralpark.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-08 17:07:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1870813": [
        {
            "ioc_value": "pinchildren.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-08 17:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870809": [
        {
            "ioc_value": "35x7940o.thelovebugsband.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 17:04:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870808": [
        {
            "ioc_value": "45.142.182.137:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 16:59:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870763": [
        {
            "ioc_value": "http://178.16.54.109/locopoco",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 16:47:49",
            "last_seen_utc": "2026-08-21 10:55:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Download,Phorpiex",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870781": [
        {
            "ioc_value": "94.154.43.46:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 16:47:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1870785": [
        {
            "ioc_value": "103.214.146.46:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-08 16:47:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870793": [
        {
            "ioc_value": "94.154.43.97:9931",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 16:47:47",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1870797": [
        {
            "ioc_value": "188.166.222.192:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-08 16:47:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870803": [
        {
            "ioc_value": "217.60.195.187:8529",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 16:47:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1870807": [
        {
            "ioc_value": "bpiaasi.en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 16:45:34",
            "last_seen_utc": "2026-08-10 21:25:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870806": [
        {
            "ioc_value": "bitsjq.eng--usa-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 16:18:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870804": [
        {
            "ioc_value": "engusa-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 16:15:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870799": [
        {
            "ioc_value": "coaa0h4a.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 16:01:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870798": [
        {
            "ioc_value": "wwdvqwb.en-sightfresh-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 15:43:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870795": [
        {
            "ioc_value": "oczdcn.eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 15:16:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870794": [
        {
            "ioc_value": "eng-usa-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 15:15:13",
            "last_seen_utc": "2026-08-19 01:19:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870788": [
        {
            "ioc_value": "18inchgermanylovercapybara.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 14:50:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870787": [
        {
            "ioc_value": "apilcta.eng-us-us-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 14:43:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870786": [
        {
            "ioc_value": "eng-us-us-sugarmute.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 14:42:29",
            "last_seen_utc": "2026-08-08 22:46:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870784": [
        {
            "ioc_value": "malekras.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-08 14:23:40",
            "last_seen_utc": "2026-08-08 17:00:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870783": [
        {
            "ioc_value": "lpchaf.eng-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 14:19:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870782": [
        {
            "ioc_value": "eng-usa-sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 14:14:42",
            "last_seen_utc": "2026-08-15 07:44:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870777": [
        {
            "ioc_value": "161.248.179.92:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 14:05:06",
            "last_seen_utc": "2026-09-01 02:43:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870774": [
        {
            "ioc_value": "19uir4dz.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 13:59:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870773": [
        {
            "ioc_value": "eltiaeb.engus-prostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 13:46:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870772": [
        {
            "ioc_value": "engus-prostavive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 13:41:21",
            "last_seen_utc": "2026-08-09 15:02:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870771": [
        {
            "ioc_value": "ehkqhm.eng-usa-prozenith-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 13:15:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870770": [
        {
            "ioc_value": "eng-usa-prozenith-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 13:14:11",
            "last_seen_utc": "2026-08-08 13:14:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870762": [
        {
            "ioc_value": "f1ny7ogq.sweethannahs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 12:54:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870761": [
        {
            "ioc_value": "8mime2et.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 12:54:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870760": [
        {
            "ioc_value": "uvdifyv.eng-usa-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 12:43:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870759": [
        {
            "ioc_value": "zgvdmh.eng-usa-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 12:14:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870758": [
        {
            "ioc_value": "eng-usa-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 12:13:32",
            "last_seen_utc": "2026-08-13 09:21:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870757": [
        {
            "ioc_value": "core2.craft-hq19.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-08 12:06:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1870754": [
        {
            "ioc_value": "myi88a45.eng-gutdrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 12:00:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870753": [
        {
            "ioc_value": "rkuepjvspjokrqjehy.nygyrowillmar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 11:53:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870752": [
        {
            "ioc_value": "185.92.190.177:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-08 11:47:11",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870751": [
        {
            "ioc_value": "vvigese.eng-usa--goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 11:42:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870749": [
        {
            "ioc_value": "eng-usagoldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 11:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870748": [
        {
            "ioc_value": "wscrwm.eng-sighttfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 11:13:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870747": [
        {
            "ioc_value": "eng-sighttfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 11:12:49",
            "last_seen_utc": "2026-08-13 04:50:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870727": [
        {
            "ioc_value": "fix.unknower.win",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:26",
            "last_seen_utc": "2026-08-08 11:02:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CVE-2026-60004",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870728": [
        {
            "ioc_value": "http://176.65.148.250:6556/ok",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870729": [
        {
            "ioc_value": "176.65.148.250:6556",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870730": [
        {
            "ioc_value": "http://fix.unknower.win/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870731": [
        {
            "ioc_value": "https://kworker.eth.limo/kworker/api",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870732": [
        {
            "ioc_value": "https://kworker.eth.link/kworker/api",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870733": [
        {
            "ioc_value": "kworker.eth.limo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870734": [
        {
            "ioc_value": "kworker.eth.link",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870735": [
        {
            "ioc_value": "167.179.119.120:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870736": [
        {
            "ioc_value": "34.70.205.211:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870737": [
        {
            "ioc_value": "216.98.10.60:55555",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870739": [
        {
            "ioc_value": "193.41.68.194:53535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:19",
            "last_seen_utc": "2026-08-12 06:39:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870740": [
        {
            "ioc_value": "95.85.237.149:53535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:19",
            "last_seen_utc": "2026-08-12 06:39:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870741": [
        {
            "ioc_value": "2.26.99.68:53535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-08 11:09:19",
            "last_seen_utc": "2026-08-12 06:39:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,CVE-2026-60004,Gitea,monero,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870725": [
        {
            "ioc_value": "edkrtky.eng-usa-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 10:40:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870724": [
        {
            "ioc_value": "eng-usa-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 10:39:49",
            "last_seen_utc": "2026-08-13 08:31:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870676": [
        {
            "ioc_value": "a1-analytics.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-08 10:33:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/stefant/status/2085807973356494898",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870677": [
        {
            "ioc_value": "b2-analytics.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-08 10:33:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/stefant/status/2085807973356494898",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870678": [
        {
            "ioc_value": "a2-analytics.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-08 10:33:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/stefant/status/2085807973356494898",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870691": [
        {
            "ioc_value": "career.cityu.edu.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-08 10:33:08",
            "last_seen_utc": "2026-08-08 12:04:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870722": [
        {
            "ioc_value": "khmqyz.eng-sightfresh-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 10:30:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870721": [
        {
            "ioc_value": "eng-sightfresh-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 10:27:18",
            "last_seen_utc": "2026-08-08 15:42:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870717": [
        {
            "ioc_value": "zj7mfpt3.visionfordsales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:57:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870716": [
        {
            "ioc_value": "hkipyer.eng-usa-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:53:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870715": [
        {
            "ioc_value": "eng-usa-digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:52:07",
            "last_seen_utc": "2026-08-10 13:04:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870714": [
        {
            "ioc_value": "95.133.229.173:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:46:41",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870713": [
        {
            "ioc_value": "88.129.145.223:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-08 09:46:32",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870712": [
        {
            "ioc_value": "68.178.202.150:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 09:46:21",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870710": [
        {
            "ioc_value": "45.56.165.197:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:45:58",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870711": [
        {
            "ioc_value": "45.56.165.197:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:45:58",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870709": [
        {
            "ioc_value": "45.157.117.186:27487",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 09:45:54",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870708": [
        {
            "ioc_value": "34.81.234.183:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-08 09:45:42",
            "last_seen_utc": "2026-09-01 02:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870707": [
        {
            "ioc_value": "31.77.145.53:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 09:45:41",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870706": [
        {
            "ioc_value": "217.60.195.187:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 09:45:29",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870705": [
        {
            "ioc_value": "209.99.190.23:55011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870704": [
        {
            "ioc_value": "203.98.68.17:1111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-08 09:44:39",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870703": [
        {
            "ioc_value": "2.59.133.115:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:44:36",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870702": [
        {
            "ioc_value": "2.26.30.62:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-08-08 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870701": [
        {
            "ioc_value": "195.242.119.86:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-08 09:44:30",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870700": [
        {
            "ioc_value": "194.59.31.175:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 09:44:28",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870699": [
        {
            "ioc_value": "172.252.172.32:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:43:59",
            "last_seen_utc": "2026-09-01 02:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870698": [
        {
            "ioc_value": "136.244.96.75:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 09:43:27",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870697": [
        {
            "ioc_value": "134.122.132.35:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-08 09:43:26",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870696": [
        {
            "ioc_value": "129.146.57.192:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-08 09:43:22",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870695": [
        {
            "ioc_value": "uysldb.eng--sightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870693": [
        {
            "ioc_value": "engsightfresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:41:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870692": [
        {
            "ioc_value": "eng-prozenith-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:40:27",
            "last_seen_utc": "2026-08-08 09:40:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870689": [
        {
            "ioc_value": "nvgszqq.eng-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:09:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870688": [
        {
            "ioc_value": "eng-usa-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 09:06:39",
            "last_seen_utc": "2026-08-13 00:17:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870682": [
        {
            "ioc_value": "qhtesx.eng--prostavaive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:57:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870680": [
        {
            "ioc_value": "engprostavaive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:54:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870679": [
        {
            "ioc_value": "0ksjitt3.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870675": [
        {
            "ioc_value": "xoxnfbr.eng--tinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:23:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870673": [
        {
            "ioc_value": "engtinnitrol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:21:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870672": [
        {
            "ioc_value": "hitpanels.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 08:13:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870671": [
        {
            "ioc_value": "asnhna.en-gold-align.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:11:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870670": [
        {
            "ioc_value": "en-gold-align.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 08:09:56",
            "last_seen_utc": "2026-08-08 08:10:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870665": [
        {
            "ioc_value": "3ongg3jv.victoryshoescorp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 07:59:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870656": [
        {
            "ioc_value": "workvmailbox-central.berrygleam.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.telegram_grabber",
            "malware_alias": null,
            "malware_printable": "TelegramGrabber",
            "first_seen_utc": "2026-08-08 07:57:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io",
            "tags": "botnet,phishing,telegram-c2",
            "anonymous": 0,
            "reporter": "natigz"
        }
    ],
    "1870657": [
        {
            "ioc_value": "serwis-o2.netlify.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.telegram_grabber",
            "malware_alias": null,
            "malware_printable": "TelegramGrabber",
            "first_seen_utc": "2026-08-08 07:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io",
            "tags": "phishing,telegram-c2",
            "anonymous": 0,
            "reporter": "natigz"
        }
    ],
    "1870658": [
        {
            "ioc_value": "tankstars-mod.systemtutos.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.telegram_grabber",
            "malware_alias": null,
            "malware_printable": "TelegramGrabber",
            "first_seen_utc": "2026-08-08 07:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io",
            "tags": "modapk,stealer,telegram-c2",
            "anonymous": 0,
            "reporter": "natigz"
        }
    ],
    "1870659": [
        {
            "ioc_value": "fexdeliverypro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.telegram_grabber",
            "malware_alias": null,
            "malware_printable": "TelegramGrabber",
            "first_seen_utc": "2026-08-08 07:57:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io",
            "tags": "fedex,phishing,telegram-c2",
            "anonymous": 0,
            "reporter": "natigz"
        }
    ],
    "1870664": [
        {
            "ioc_value": "9sb5ntsb.supremepaintingandrestoration.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 07:54:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870662": [
        {
            "ioc_value": "hitspanels.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 07:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898817/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870661": [
        {
            "ioc_value": "185.174.101.132:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 07:51:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898817/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870660": [
        {
            "ioc_value": "hardware-data.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 07:50:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870655": [
        {
            "ioc_value": "vicspanel.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 07:38:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898812/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870654": [
        {
            "ioc_value": "155.2.192.94:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 07:38:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898812/",
            "tags": "brand-impresonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870653": [
        {
            "ioc_value": "paeabsi.eng--thyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 07:37:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870651": [
        {
            "ioc_value": "engthyrafemmebalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 07:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870650": [
        {
            "ioc_value": "177.3.208.226:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-08 07:35:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ddf8b517a8fed544e1adac815a5d85d4c917717449dd52d1354c03f599f05779/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870649": [
        {
            "ioc_value": "94.154.43.12:32",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-08 07:33:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ce6877673a5562fddb23109127fb9534be420e0a3191284c06775b277295fa90/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870648": [
        {
            "ioc_value": "xhlxtx.eng-nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 07:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870647": [
        {
            "ioc_value": "203.159.90.31:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 07:25:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898807/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870646": [
        {
            "ioc_value": "vps133panel.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 07:25:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898807/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870641": [
        {
            "ioc_value": "192.169.176.54:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 07:05:05",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870640": [
        {
            "ioc_value": "zirzuuw.eng-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870639": [
        {
            "ioc_value": "eng-sugarmute.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:50:07",
            "last_seen_utc": "2026-08-08 06:50:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870638": [
        {
            "ioc_value": "hitstp.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:48:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898752/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870637": [
        {
            "ioc_value": "155.2.192.235:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:48:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3898752/",
            "tags": "brand-impersonation,ConnectWise,docusign,docusign-lure,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870636": [
        {
            "ioc_value": "njdwpg.eng--nitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:47:37",
            "last_seen_utc": "2026-08-12 20:20:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870635": [
        {
            "ioc_value": "engnitrilean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:46:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870476": [
        {
            "ioc_value": "89.163.242.204:2993",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-08 06:35:55",
            "last_seen_utc": "2026-08-09 03:19:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,e51631e2c6024577816cb6eb1b5ea14e,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870481": [
        {
            "ioc_value": "https://set.turbo88galaxy.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-08 06:35:55",
            "last_seen_utc": "2026-08-14 19:16:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,c948db7ccfb97f2f0bfa248274085e2d,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870482": [
        {
            "ioc_value": "https://yeni.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870483": [
        {
            "ioc_value": "https://yeni.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870484": [
        {
            "ioc_value": "https://yeni.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870486": [
        {
            "ioc_value": "https://yeni.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870485": [
        {
            "ioc_value": "https://yeni.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:35:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870487": [
        {
            "ioc_value": "yeni.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-08 06:35:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870494": [
        {
            "ioc_value": "aiplaymate.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870495": [
        {
            "ioc_value": "assholesgonewild.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870496": [
        {
            "ioc_value": "captainpepe.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870498": [
        {
            "ioc_value": "duobizhi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870497": [
        {
            "ioc_value": "dadshirts.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870499": [
        {
            "ioc_value": "excellentquantum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870501": [
        {
            "ioc_value": "pepesnix.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870500": [
        {
            "ioc_value": "maxidogetoken.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870504": [
        {
            "ioc_value": "134.122.204.55:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 06:35:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2085850140334489715",
            "tags": "SilverFox,ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870503": [
        {
            "ioc_value": "134.122.204.55:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-08 06:35:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2085850140334489715",
            "tags": "SilverFox,ValleyRAT",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870507": [
        {
            "ioc_value": "strictbondage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870508": [
        {
            "ioc_value": "http://86.107.168.105/boss.tst",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870512": [
        {
            "ioc_value": "jaiho-win.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870513": [
        {
            "ioc_value": "westonresearch.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870514": [
        {
            "ioc_value": "northlakeresearch.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870515": [
        {
            "ioc_value": "eastvaleresearch.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870516": [
        {
            "ioc_value": "elmstonegroup.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870517": [
        {
            "ioc_value": "clearfieldreports.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870518": [
        {
            "ioc_value": "weinsureillinois.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,steganography,SVG,WASM",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870554": [
        {
            "ioc_value": "http://103.225.191.17:49732/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 06:35:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.17",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870560": [
        {
            "ioc_value": "167.99.64.180:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-08 06:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870569": [
        {
            "ioc_value": "eng-en-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870570": [
        {
            "ioc_value": "burn-flow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:38",
            "last_seen_utc": "2026-08-08 01:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870571": [
        {
            "ioc_value": "eng-burn-flow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870572": [
        {
            "ioc_value": "enus-burnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870573": [
        {
            "ioc_value": "us-usa-burnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870574": [
        {
            "ioc_value": "burnflowmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870575": [
        {
            "ioc_value": "en-usa-prostadefend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870577": [
        {
            "ioc_value": "usa-tupitea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870579": [
        {
            "ioc_value": "duskwarden.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870576": [
        {
            "ioc_value": "en-usa-metabodrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870578": [
        {
            "ioc_value": "web-tupitea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:35:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870596": [
        {
            "ioc_value": "accrenpi813.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870597": [
        {
            "ioc_value": "thankingpi.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870598": [
        {
            "ioc_value": "wikkkipi12.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870599": [
        {
            "ioc_value": "bunntyca.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870600": [
        {
            "ioc_value": "versionpi81.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 06:35:31",
            "last_seen_utc": "2026-08-10 07:21:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870601": [
        {
            "ioc_value": "https://indigocrest.top/middleware/scope-runtime.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-08 06:35:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870602": [
        {
            "ioc_value": "indigocrest.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-08 06:35:30",
            "last_seen_utc": "2026-08-12 13:10:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870609": [
        {
            "ioc_value": "http://178.16.54.109/molakc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-08 06:35:29",
            "last_seen_utc": "2026-08-22 00:02:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Download,Phorpiex",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870614": [
        {
            "ioc_value": "139.59.144.8:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-08 06:35:28",
            "last_seen_utc": "2026-08-11 16:54:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1870630": [
        {
            "ioc_value": "http://59.103.217.15:54294/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 06:35:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.103.217.15",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870631": [
        {
            "ioc_value": "http://223.123.72.204:42931/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 06:35:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.204",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870632": [
        {
            "ioc_value": "http://153.117.6.63:41336/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 06:35:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.63",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870633": [
        {
            "ioc_value": "http://221.15.226.18:57698/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-08 06:35:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/221.15.226.18",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870634": [
        {
            "ioc_value": "vmi3474645.contaboserver.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-08 06:23:18",
            "last_seen_utc": "2026-08-09 06:59:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6e679d77e2ca2f8cfbbe65306d0dea83fc3363ab2254a2afe33ac82f821fdd87/",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870628": [
        {
            "ioc_value": "bezsyyl.eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:05:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870627": [
        {
            "ioc_value": "xjzupm.eng-neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 06:02:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870626": [
        {
            "ioc_value": "ztnr4f37.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 05:58:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870625": [
        {
            "ioc_value": "axinjur.eng--slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 05:21:09",
            "last_seen_utc": "2026-08-16 14:46:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870624": [
        {
            "ioc_value": "engslimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 05:19:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870623": [
        {
            "ioc_value": "qhqrmp.eng--neuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 05:18:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870621": [
        {
            "ioc_value": "engneuroxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 05:15:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870620": [
        {
            "ioc_value": "gsbjjy.eng--nervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 04:35:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870619": [
        {
            "ioc_value": "hrwzfeq.eng-sleep-lean.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 04:34:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870618": [
        {
            "ioc_value": "eng-sleep-lean.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 04:33:34",
            "last_seen_utc": "2026-08-08 04:34:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870617": [
        {
            "ioc_value": "004wisu6.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 04:33:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870615": [
        {
            "ioc_value": "engnervearmor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 04:30:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870610": [
        {
            "ioc_value": "68.178.205.17:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 04:05:05",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870608": [
        {
            "ioc_value": "enh878lb.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:56:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870607": [
        {
            "ioc_value": "ssjwwje.eng-eng-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:53:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870606": [
        {
            "ioc_value": "eng-eng-gutdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:48:03",
            "last_seen_utc": "2026-08-08 03:48:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870605": [
        {
            "ioc_value": "jhmysc.eng--mitoyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:45:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870603": [
        {
            "ioc_value": "engmitoyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:44:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870591": [
        {
            "ioc_value": "cjyssde.eng-eng-eng-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870590": [
        {
            "ioc_value": "eng-eng-eng-synaptigen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:02:36",
            "last_seen_utc": "2026-08-08 03:03:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870589": [
        {
            "ioc_value": "rloafi.engmitolyn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 03:02:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870588": [
        {
            "ioc_value": "engmitolyn.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 02:59:26",
            "last_seen_utc": "2026-08-08 02:59:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870587": [
        {
            "ioc_value": "z94z50ta.storageinridgecrest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 02:53:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870586": [
        {
            "ioc_value": "jmveds.engmitolyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 02:19:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870585": [
        {
            "ioc_value": "swjkenz.eng-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 02:18:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870584": [
        {
            "ioc_value": "eng-energyrevolution.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 02:17:06",
            "last_seen_utc": "2026-08-12 00:17:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870568": [
        {
            "ioc_value": "0i16tvqj.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 01:58:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870567": [
        {
            "ioc_value": "luuxkin.eng-en-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 01:33:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870566": [
        {
            "ioc_value": "eng-en-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 01:31:32",
            "last_seen_utc": "2026-08-11 18:18:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870565": [
        {
            "ioc_value": "edheqw.eng--keyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 01:31:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870564": [
        {
            "ioc_value": "engkeyslimdrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 01:28:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870559": [
        {
            "ioc_value": "nzvutkh.eng-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:46:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870558": [
        {
            "ioc_value": "eng-echoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:46:20",
            "last_seen_utc": "2026-08-10 00:33:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870557": [
        {
            "ioc_value": "jektcp.eng-gutdrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:44:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870556": [
        {
            "ioc_value": "eng-gutdrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:42:51",
            "last_seen_utc": "2026-08-08 11:57:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870555": [
        {
            "ioc_value": "duaozkgx.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:23:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870543": [
        {
            "ioc_value": "lereindeflash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:09:01",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870527": [
        {
            "ioc_value": "telemetras.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:02:43",
            "last_seen_utc": "2026-08-08 01:19:32",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870528": [
        {
            "ioc_value": "http://199.217.99.6/Troubleshoot.ps1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-08 00:02:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870526": [
        {
            "ioc_value": "ueyhxow.eng--echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:01:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870524": [
        {
            "ioc_value": "engechoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-08 00:00:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870523": [
        {
            "ioc_value": "zabejp.eng-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 23:58:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870522": [
        {
            "ioc_value": "eng-en-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 23:57:23",
            "last_seen_utc": "2026-08-15 13:44:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870521": [
        {
            "ioc_value": "mlz3n0k4.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 23:56:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870520": [
        {
            "ioc_value": "121.5.27.17:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 23:46:45",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870519": [
        {
            "ioc_value": "1302768123-l3a4w496qm.ap-shanghai.tencentscf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 23:46:29",
            "last_seen_utc": "2026-09-01 02:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870511": [
        {
            "ioc_value": "kxrvczi.echo-xen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 23:16:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870510": [
        {
            "ioc_value": "pcsarm.eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 23:14:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870509": [
        {
            "ioc_value": "eng-eng-slimsounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 23:11:51",
            "last_seen_utc": "2026-08-20 03:27:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870506": [
        {
            "ioc_value": "giyypma.dewa111.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 22:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870505": [
        {
            "ioc_value": "lurxrx.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 22:28:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870493": [
        {
            "ioc_value": "h431ijjv.dusanperisicmd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 21:54:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870492": [
        {
            "ioc_value": "8qkm1lut.mspa-naperville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 21:54:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870490": [
        {
            "ioc_value": "yyxwfsq.buy-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 21:44:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870489": [
        {
            "ioc_value": "rufmpt.eng-eng-braindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 21:43:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870488": [
        {
            "ioc_value": "eng-eng-braindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 21:40:50",
            "last_seen_utc": "2026-08-07 21:41:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870480": [
        {
            "ioc_value": "vmiyjlp.brain--defender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:59:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870479": [
        {
            "ioc_value": "noopyr.eng--braindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:57:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870477": [
        {
            "ioc_value": "engbraindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:55:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870475": [
        {
            "ioc_value": "vcxddac.eng--digestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:15:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870474": [
        {
            "ioc_value": "7dee819b76bf7a145dc60d279411b721",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-07 20:13:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870470": [
        {
            "ioc_value": "d350f6e5d712c389f863c98e0f2abc4caa5924b7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 20:13:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870471": [
        {
            "ioc_value": "0689d044737e10bb9764f0e3d07def1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 20:13:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870472": [
        {
            "ioc_value": "d42b84a94d990cb280c33739284c7a2318e466754584d9c99de7fca99d650157",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-07 20:13:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870473": [
        {
            "ioc_value": "19da7a33ccc9c5cf690f7cc9dcca33cd04c95e6f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-07 20:13:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870467": [
        {
            "ioc_value": "313ebf27b9e1a2f1a3b6457d2418b5a60f8525d7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-07 20:13:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870468": [
        {
            "ioc_value": "26f33ae36ad05582393a6d6ec6cb3273",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-07 20:13:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870469": [
        {
            "ioc_value": "d1fdec2d2fb38eb21e69a9c93e55f0a42917f1d3bec19fb1e63d4a12cc0807ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 20:13:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870464": [
        {
            "ioc_value": "3249538fbf42402e1e5bedddba234e1755b3e975",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:13:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870465": [
        {
            "ioc_value": "2b1caed38122d1e0336af79b88c5801b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:13:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870466": [
        {
            "ioc_value": "abf83c4d6bbf508504398ac56031c566ed662c3cc7e7b490494d9ee72eece870",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-07 20:13:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870460": [
        {
            "ioc_value": "39c69cb0f29f8e9f41fa305cb1adf34762e5d8131ae348553b089377236c4f38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 20:13:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870461": [
        {
            "ioc_value": "936b0aa520ef5ad9c5ad14a306a4e95eacf65600",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 20:13:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870462": [
        {
            "ioc_value": "083316688a2a0e61f45c74a953053f55",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 20:13:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870463": [
        {
            "ioc_value": "552497b4c1f9b3cf5514ce59292a1f715f3673c375fd1944bb5930f646383e41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:13:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870457": [
        {
            "ioc_value": "a7632f145e45c8d932f6f1a8ccbbf65e7ae97b0d339c45dfb548e29186db1144",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-07 20:13:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870458": [
        {
            "ioc_value": "99fbd400260206d8480d97d2a1f1b0de9c0bb44b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-07 20:13:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870459": [
        {
            "ioc_value": "5b11b38bf0eb3f0952f306ad5be9d5eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-08-07 20:13:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870454": [
        {
            "ioc_value": "4ab36399059f32090619c70d8dbeb6fbf3136383b85bfef1a4f1c0c3b32f837b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 20:13:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870455": [
        {
            "ioc_value": "2fd62761d69d28f5067397bc9e5d6827794fc257",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 20:13:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870456": [
        {
            "ioc_value": "53380f2665f35cff7d00e6137a70bf27",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 20:13:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870452": [
        {
            "ioc_value": "873fd304f61c5a036ebeff0ccd79cc659a70e10d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870453": [
        {
            "ioc_value": "ac250397bf3f4d207b568c4f40b29f17",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870449": [
        {
            "ioc_value": "a1b692780d5727be7643316df9ac66b2e841f288",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870450": [
        {
            "ioc_value": "3c3cb5457de640745a61405ee4f157a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870451": [
        {
            "ioc_value": "cd1966788983c1d70afe0055483e3968b1c2951576c2a3a962e808071792d886",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870446": [
        {
            "ioc_value": "015a1b2d4c10af211b9d400ca44c263d9badc960",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-07 20:13:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870447": [
        {
            "ioc_value": "ed4ae654e0bbb7058128fef7bcad32a1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-07 20:13:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870448": [
        {
            "ioc_value": "1e3dd6caa009c9eac37fe6ab54fb27f84e34c48d1c28b2bd93612ba44ae14b93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870443": [
        {
            "ioc_value": "32181b725f0ebada1c09c1de78c97d8a2fef74c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870444": [
        {
            "ioc_value": "ec4577b2e1c7bcc6f903cfb0bdc02f64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870445": [
        {
            "ioc_value": "5067ae4261feea16e5b765d748a743eb9f55d86cf795c0213ac3769049e7dfba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-07 20:13:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870440": [
        {
            "ioc_value": "594c0f31ddffd8007e579d3757a7e93482b67ca7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870441": [
        {
            "ioc_value": "3082ed63bb7d87f051c6a167d371b20b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870442": [
        {
            "ioc_value": "f3ef2636d9b60715c2ea7c032cfd20492b7701bfa72ed3652b2bc540760988a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870438": [
        {
            "ioc_value": "6e0da4c118ec3a4e2c78f2382c7cf70d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:13:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870439": [
        {
            "ioc_value": "212199a413252df5ad9be87d8070083d74a9f3e7919b3c005db2ed7fe6793343",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870435": [
        {
            "ioc_value": "842c0ec2c16fd14a656b3caa6b0d93fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:13:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870436": [
        {
            "ioc_value": "722635285b6ed905f035850ac097bb619e4f6cf805bbd5d468f053e8f362bcfc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:13:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870437": [
        {
            "ioc_value": "e8eedbbae67af06f0b7929eb8be036c70015b0ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:13:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870433": [
        {
            "ioc_value": "8a494cf5613a27de7739d417506a93aa98c51453230f61de36d18d53e5456d97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:13:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870434": [
        {
            "ioc_value": "0617b24e963b97ba0fa031d09509b05ab06176d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:13:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870431": [
        {
            "ioc_value": "0045f51bbd0f4285fc59b60f9652e6a6ad0f8242",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:13:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870432": [
        {
            "ioc_value": "f3053fed83a4d313e8aa9cace5db69ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:13:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870428": [
        {
            "ioc_value": "70c24a2bb97c0b995bce9c7cee42d1cc856d177b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-07 20:13:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870429": [
        {
            "ioc_value": "ac061db892ad8cd21a565996bdb33d5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-07 20:13:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870430": [
        {
            "ioc_value": "2a73cad53d7b6ee5df6fce0d9f5761891c6bf42d674130dab5a634ffcd9b3423",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:13:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870425": [
        {
            "ioc_value": "f8f6dc9dd47c48a9e3ab66cf07bea628e4c06b34",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870426": [
        {
            "ioc_value": "6d3ec0d0e31dc8d2e52d545f317a88fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870427": [
        {
            "ioc_value": "135732f938ca6b6e1fd1974ba172665d3c474b5346e035ea24c37b03500fb4e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-07 20:13:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870423": [
        {
            "ioc_value": "af49d090af04cd0acba34c3308c45d23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870424": [
        {
            "ioc_value": "5c113804b804fb934afe84965e69a2bd912cef31203b2e4f367d8986b8783c93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870421": [
        {
            "ioc_value": "295ea6d0c0e8948edec19dea2b6778d9b21cd52c2f1c29efe30462801f4efbac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870422": [
        {
            "ioc_value": "44bb52939808600f5b230801404afa5e8a90ef64",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870420": [
        {
            "ioc_value": "6506c1b800a28853ef8af5a466e12e8d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870417": [
        {
            "ioc_value": "266f2cfe9aecf638c06b3efcbdd07756",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:13:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870418": [
        {
            "ioc_value": "66b98067cb4b20d0da1e9459f5851b7d86e046afa9a78ff87b9bb1c641e3a771",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870419": [
        {
            "ioc_value": "617210d8feb0679a0f675269300fc19b4c49e66c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870415": [
        {
            "ioc_value": "dd17e871204619a3de34126e366221b64e684ec13e24dfc871698abe343acbff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:13:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870416": [
        {
            "ioc_value": "2dab1463c97284de02f3abb10812c45eed5fe6b8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:13:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870411": [
        {
            "ioc_value": "930114eafd4d5b3b863c795bb99e9ce5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-07 20:13:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870412": [
        {
            "ioc_value": "8cce14a06ff19f92020cefcf42c0040495c0dca18543f8449159ba1e78f69f29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870413": [
        {
            "ioc_value": "97454d2f3186331f68be1815e277488d891bbe16",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870414": [
        {
            "ioc_value": "c763e05c8ed4b4cad85c610abdefc5f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-07 20:13:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870408": [
        {
            "ioc_value": "b2daee69272ac088ba3af90e630a7b73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.networm",
            "malware_alias": null,
            "malware_printable": "NetWorm",
            "first_seen_utc": "2026-08-07 20:13:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870409": [
        {
            "ioc_value": "f0e29d11e1800cf4ef616458f74cd3cfccd0e39559423344e92574fc78023259",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-07 20:13:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870410": [
        {
            "ioc_value": "7ef9a8e90e0f3dc0f51d87eec0fc00716e572e71",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-07 20:13:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870404": [
        {
            "ioc_value": "cd94511537ddca34a232b7638e30e0c439e71231",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870405": [
        {
            "ioc_value": "b89d071659f8f1a5160a08148b34c959",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870406": [
        {
            "ioc_value": "a1b471e7cb4cabe80828dfb0b96cc6f5f87bf867969c66bc8511715ecd70459e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.networm",
            "malware_alias": null,
            "malware_printable": "NetWorm",
            "first_seen_utc": "2026-08-07 20:13:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870407": [
        {
            "ioc_value": "6682841224071055bf109254dfc7a65d46ffbb9e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.networm",
            "malware_alias": null,
            "malware_printable": "NetWorm",
            "first_seen_utc": "2026-08-07 20:13:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870401": [
        {
            "ioc_value": "b779772c9c9e4b8974ed7a3e01938ee1cdb43ea8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870402": [
        {
            "ioc_value": "e4a57306d4d3d0271a3578643693ace9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870403": [
        {
            "ioc_value": "4957dc632215a7500070fa697a4c9439bce4d35d27ab4f62c67f72b8178ca92e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870398": [
        {
            "ioc_value": "837cb1d0bd9b2e0a2e18ec5f257064c8717fb94a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870399": [
        {
            "ioc_value": "a4d5724a971bd46250c60267456bdec9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870400": [
        {
            "ioc_value": "feb0d77be627d1f050fd5ff77c1e1c2c2342b79b28a4a629f35875ad0aebb4ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870395": [
        {
            "ioc_value": "626553675e5f326a8251e880d5032e793382416f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870396": [
        {
            "ioc_value": "327a35bb8db59c80c7aca194e04a9578",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870397": [
        {
            "ioc_value": "5273b7575eb3efe33117a8209684e11ca42a66ed779ecd32bc9ead5b2a9f0d30",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870392": [
        {
            "ioc_value": "5707a2b7c3ce31544b627354182418dafb7307c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870393": [
        {
            "ioc_value": "ad425d7410a864bf63a61ed811a8e77b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870394": [
        {
            "ioc_value": "6c16fb794b6ae6e193e5ca07e5bec0aeeda83d61ddc45f0a66944dde69b210a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870388": [
        {
            "ioc_value": "f6f133e53b98fc3e0d108357e848f7250ad9fe1b8af75cabe379c03d01e13a81",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870389": [
        {
            "ioc_value": "14d696393464aa44bc72199105b825d9ea2a96bb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870390": [
        {
            "ioc_value": "1187112573cb0257eeaaddc6e18b36cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870391": [
        {
            "ioc_value": "add0e262bd554841dc12c106294dda4f8c6b73e7f28fca51a6f57e4d52fa16dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870385": [
        {
            "ioc_value": "12411713c6d011f83666bd855708a673e8f3d98e3b9555a3cc10857a74e47a58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870386": [
        {
            "ioc_value": "0f5f0b2d7a359dd8cb35a8dd4abc31fff4ac6d5e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870387": [
        {
            "ioc_value": "8fdc8eb2b0739cdea9e5559342cf9152",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870384": [
        {
            "ioc_value": "e5c4a6f40f5bbd19f090c1f95626687a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870380": [
        {
            "ioc_value": "4bd636293f63519b3f1f438fa164a1f5cc10fc53",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870381": [
        {
            "ioc_value": "5be302261ca861b71f8b75a21e635618",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870382": [
        {
            "ioc_value": "a43abf1be5dd450dd88370d503721ea3d1b228d06a3ad4957f57a08a73cad669",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870383": [
        {
            "ioc_value": "84d492bc761bace055e847f34a410f57cd90f53f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870377": [
        {
            "ioc_value": "bee0adee9ff4bd8cce13bef4381c5f6dcee3aa25",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870378": [
        {
            "ioc_value": "fdb6c03e9d9e120f85e827954d55bd88",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870379": [
        {
            "ioc_value": "2f029858b8ecca8fb6c156eb2d046a2463e8b67d356c1003e5567339681a71be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870374": [
        {
            "ioc_value": "1d766b04adda359f3a5b062f6abfc20e1a32e1e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870375": [
        {
            "ioc_value": "683223a69f91887a6cb4f68b50adefb2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870376": [
        {
            "ioc_value": "4b1f69dcea99ca1e1884a377ed2481ee1f0d543e7faade27f6ac3dc850042233",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870373": [
        {
            "ioc_value": "3caaa5e8cab6d0ec2932ea20fb71301eeea20ea16ea18d4cde08f8130a59fd25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870370": [
        {
            "ioc_value": "b8bec7b45605da355b092c9f3e40bab447928839d4eef5a9290cb5bb1dd50f2d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870371": [
        {
            "ioc_value": "8ffcd01fed2d1735914475f51e33801fd13cceaf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870372": [
        {
            "ioc_value": "bab937bd0f559a42ebd338416f5ed99f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870367": [
        {
            "ioc_value": "cdf1259459502c82ce1bcb0651d6dba80d6f0bb2c7418e6a4ab75d0c4718536c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870368": [
        {
            "ioc_value": "000c5d3519a58d1c7aa14b63b04cea34d1a39ee1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870369": [
        {
            "ioc_value": "37af0be3dccc41a28468d76454485b4f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870364": [
        {
            "ioc_value": "b5f7df56de192f53a8122e1e6a7d83c80344d94b401d140004cff8cf04252757",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870365": [
        {
            "ioc_value": "65a8062fbb1555872ba67e696dfc9b67a8a334e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870366": [
        {
            "ioc_value": "455f63ee9d170effdb2305c22977cef8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870361": [
        {
            "ioc_value": "60df12c872628826a9a5289474082ffe1ea55819133219dde1d656bdb0d502fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870362": [
        {
            "ioc_value": "e18b8195f4b99f8f4d4b2ab72f52ff479d26b33d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870363": [
        {
            "ioc_value": "9f8c1135c656b7b91f1da74cbfee5ea2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870358": [
        {
            "ioc_value": "1d9a1b096c4ae71f9c0403802667ea0b3492de2d57281a6d4145ba5758e74bad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870359": [
        {
            "ioc_value": "3d927f1e53fcb9d1873527fd760e6910eccd8b21",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870360": [
        {
            "ioc_value": "1c3de5d59d0d41f5c593c4ecf152cfc0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870355": [
        {
            "ioc_value": "5b2d48b4ea0599e4cfa18fd532be04ce24fcb559d789432a64708feea05bf83f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870356": [
        {
            "ioc_value": "1fbd1a082a9ee5c24578e77d913b6461c48f7411",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870357": [
        {
            "ioc_value": "fe44783ba824629a0e2b909a6a9b80a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:13:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870352": [
        {
            "ioc_value": "accbe9fca34638def5aa8a0c9d4cd7a536cc631c00a391d75e5a7b7548bade4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 20:13:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870353": [
        {
            "ioc_value": "a36c2fcdb5895a8ab12f57409b855bb945f11112",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 20:13:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870354": [
        {
            "ioc_value": "b0eac77c609e979069a74923fe5816de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 20:13:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870349": [
        {
            "ioc_value": "652f91bcf60dc148e7af64bf509cd4f7e4ffac685030bc260c59c7b869585ac9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870350": [
        {
            "ioc_value": "7c43762eb07a44ba9add9301546b77e4e6d5bfa7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870351": [
        {
            "ioc_value": "e79ad54bd794375224a5d76d56f3180b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-07 20:13:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870346": [
        {
            "ioc_value": "e2affa0d6d98ca6cd8dbb05f8db955a71127b37c631a9cea4c967bdc992c93e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870347": [
        {
            "ioc_value": "cbe184ae6fff5254b172b160e127de27dee3409e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870348": [
        {
            "ioc_value": "05c80e5463a628b7c823595f3b1f4bbf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:13:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870344": [
        {
            "ioc_value": "0465401a1bc1b5efbf9d8bd8c3db20a3cc571111",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:13:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870345": [
        {
            "ioc_value": "a0ebe1250b23cb60d919aa4e7dbd7e40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:13:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870340": [
        {
            "ioc_value": "717d84b07335ef125dd27c00ef3341933ae2a508",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870341": [
        {
            "ioc_value": "f32f66f210c25ea6dd97348034bb698b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870342": [
        {
            "ioc_value": "2055a6d22f882f79211a9209556b9d2e14498da87a112007e5fe0d3bf5cbd2fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870337": [
        {
            "ioc_value": "56b6322ec04bb397dcdcab70d50275e689312c4e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-07 20:12:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870338": [
        {
            "ioc_value": "d8fcb7a4ef513ffff9cd2b3448c2b0e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-07 20:12:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870339": [
        {
            "ioc_value": "94c78e0d80e3364e1c90d6f5311e6e4104bfa8e831d3351ba8cb875620d0dc64",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870334": [
        {
            "ioc_value": "9ba5a8bf9564e71f333406b3e4962cac35e33a38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870335": [
        {
            "ioc_value": "066dab36fbf44cfa930929d002a07cb3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870336": [
        {
            "ioc_value": "d4cfab5e052df4c049f258e226d11825cb37b0359be454b83241edd59b295f08",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-07 20:12:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870332": [
        {
            "ioc_value": "09683b2cb19f16818d0a60264663cac2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870333": [
        {
            "ioc_value": "84b8ec2f3b29a10f88d21fc7617cdfecac1c2c76303086b41471beb5f563f65c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870329": [
        {
            "ioc_value": "91dddfbe6ec0216a43e4266acd65e7c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870330": [
        {
            "ioc_value": "89c3ba702d5c424a14c58c3809897b9fc0a66a84c9e4becd4363972e4077756b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870331": [
        {
            "ioc_value": "0b77288fca4555e501c9cb4474cd689bee669c98",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-07 20:12:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870327": [
        {
            "ioc_value": "72b0ee76e31527fa94e063ef15580037a2148bf59d6f981faab92a82f5403d58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870328": [
        {
            "ioc_value": "474b10003a3ba9ecca035757c37570df3529bcc5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870326": [
        {
            "ioc_value": "91ca1348736c8b8e8845aea6bf944845",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870322": [
        {
            "ioc_value": "388c773164294c5548bada60336384ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870323": [
        {
            "ioc_value": "engdigestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870324": [
        {
            "ioc_value": "025d859dbc0b8811ed5e8590ea238cce6a932166eee0b6eb3a6744941c6fccfc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870325": [
        {
            "ioc_value": "69cb29c1673b641688c94545956d42d4331f8c1b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870319": [
        {
            "ioc_value": "9d5a7bfc3f5c2a224970c91a4130f797",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870320": [
        {
            "ioc_value": "a2eaeea6c061fef9dcca3ee823b828f6aca5168b8b1da3303bc94b29860f8b9f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870321": [
        {
            "ioc_value": "ffe093ec36876e7a5e05aab5d118084e12f30626",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870317": [
        {
            "ioc_value": "bd51fc7e4074899f0af3125bfdfd449b312995511472b846c09883c5a055723b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870318": [
        {
            "ioc_value": "c19daf8c801ddd965e24a66a0b9e2b3903b94da1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870314": [
        {
            "ioc_value": "1a191d57ec8e1268d084676a4ebfeaa19ff97e63ffae740dca6d0b041faf8740",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870315": [
        {
            "ioc_value": "e802460d89a7e607e70c051e24fd29b3a4b237d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870316": [
        {
            "ioc_value": "5f63a87ae3e1594cb3bfac8e3c5729e8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870313": [
        {
            "ioc_value": "dc5235041961a6f4de3d35e1a13a1b93",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870310": [
        {
            "ioc_value": "8ef70ff2c501ca4e271dd549e29d1ad1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 20:12:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870311": [
        {
            "ioc_value": "55fd126063af89eb1c5639a56dcf365f2e817813a45758b3f12a18f12d5561d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870312": [
        {
            "ioc_value": "011d0f62705b791f0931356d0fcfb30079c546b7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870308": [
        {
            "ioc_value": "93fedc7b3f885aa9741fe7bbe171baded81188a5aeee3fecc636f3721587b702",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 20:12:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870309": [
        {
            "ioc_value": "bf8d02a3f3c536fcf917fb4327060979d1f75509",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 20:12:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870306": [
        {
            "ioc_value": "f36d28dcd12a3995f0d1b95530720f5dbf4a974c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870307": [
        {
            "ioc_value": "2af59df51773ab85d855e54abf3832ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870303": [
        {
            "ioc_value": "8c21a9815d0d6d82a82e00ec8c047606b0022ecc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870304": [
        {
            "ioc_value": "7d289e6e0baa505ca6a4852958b61139",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870305": [
        {
            "ioc_value": "7e1e424f3c184c3c037235494158be38a9e7b15e0bd4a97c7f854ab03a1f09ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870300": [
        {
            "ioc_value": "4479eaf6ed86a3fc385f60c6e6521e5e341e6d99",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-07 20:12:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870301": [
        {
            "ioc_value": "6108296a2c9c763a4b56e3cb611ab096",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-07 20:12:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870302": [
        {
            "ioc_value": "51498477da8c0c5abf4cca3de0704a83d513c4005c2f4f3bb09fc8121e1189dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870297": [
        {
            "ioc_value": "68a6877be539bdc70f6956c2b3f2aabe095b9d3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 20:12:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870298": [
        {
            "ioc_value": "fe720b7550466baa14994a090eed156d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 20:12:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870299": [
        {
            "ioc_value": "ba7ef674b42b85717ae947a9cab116e0256f4996e949a8fdad8c5404aeef7a20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-08-07 20:12:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870294": [
        {
            "ioc_value": "d3d7deaac01485bff55d6e6d1553bbcfaa45554f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:12:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870295": [
        {
            "ioc_value": "6ab8540db2cc96cd482583c84b2bac2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:12:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870296": [
        {
            "ioc_value": "664c8ea6640f0e3f8bd5ba3429656635d59f8272e37e0cdf646a1613efda9d8f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 20:12:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870290": [
        {
            "ioc_value": "644667c869b560afdd523a5c2dae1e4a6753481f7b155df378cd59377e4b2b55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870291": [
        {
            "ioc_value": "b6406eecefa66d9fbfbe721d1bb3c38c1ddbc91a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870292": [
        {
            "ioc_value": "9d30b8f55df5cd82604271e8ee6f727d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-07 20:12:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870293": [
        {
            "ioc_value": "615a472ec89ed0f34c7c4a51131e19ee154b2e49d70bf51f04119de521c05d48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:12:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870288": [
        {
            "ioc_value": "f0c95addd0f6d77d8ada755ce186b66515344f46",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:12:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870289": [
        {
            "ioc_value": "4ba88b5790e327ce805843417d2708c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:12:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870284": [
        {
            "ioc_value": "31700814400f94fee4d2b9bff13d7423c3cbfb9578a05ccf4a39a6df57d2639f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-07 20:12:38",
            "last_seen_utc": "2026-08-08 17:27:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870285": [
        {
            "ioc_value": "b166b11b6d38492a9d24b42721203112603fd00e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-07 20:12:38",
            "last_seen_utc": "2026-08-08 17:27:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870286": [
        {
            "ioc_value": "aecc5551bc3c5777277681e6eb357f8a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-07 20:12:38",
            "last_seen_utc": "2026-08-08 17:27:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870287": [
        {
            "ioc_value": "1fce06baa55f455053a1d5094513a1d509d14cc0270241d329d287feb9a66820",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-07 20:12:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870281": [
        {
            "ioc_value": "fd2479e51259747153a3ce46264e0f3f3fac1d6eadcc0efb915ba5f35ccc5b18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:37",
            "last_seen_utc": "2026-08-08 17:27:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870282": [
        {
            "ioc_value": "802f55bbb5a7039babe432b2d784dcc699fa7a13",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:37",
            "last_seen_utc": "2026-08-08 17:27:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870283": [
        {
            "ioc_value": "7da1c529f1cde0f28f08d5e90a64f19c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-07 20:12:37",
            "last_seen_utc": "2026-08-08 17:27:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870277": [
        {
            "ioc_value": "7544d0d40c63ea020416d01832a366e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "js.bateleur",
            "malware_alias": null,
            "malware_printable": "Bateleur",
            "first_seen_utc": "2026-08-07 20:12:36",
            "last_seen_utc": "2026-08-08 17:27:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870278": [
        {
            "ioc_value": "c894ed71694fd28d60113b5594f9e61e5133a18f410960849e868b60b8beb973",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:12:36",
            "last_seen_utc": "2026-08-08 17:27:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870279": [
        {
            "ioc_value": "2a5e7de67590ca8a60e1e3d518ac505ada2d5c28",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:12:36",
            "last_seen_utc": "2026-08-08 17:27:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870280": [
        {
            "ioc_value": "5d4037b55e48dad64c3fdd1fe565ff5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:12:36",
            "last_seen_utc": "2026-08-08 17:27:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870274": [
        {
            "ioc_value": "62026426767207280fe942f9cc6e9aab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:12:35",
            "last_seen_utc": "2026-08-08 17:27:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870275": [
        {
            "ioc_value": "802dee2011a757a13f6afc236e66c6e8440bc733eb001d849286c22d43b0017e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.bateleur",
            "malware_alias": null,
            "malware_printable": "Bateleur",
            "first_seen_utc": "2026-08-07 20:12:35",
            "last_seen_utc": "2026-08-08 17:27:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870276": [
        {
            "ioc_value": "659986fef1ee9fb6f019304a435a69ffe9335082",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "js.bateleur",
            "malware_alias": null,
            "malware_printable": "Bateleur",
            "first_seen_utc": "2026-08-07 20:12:35",
            "last_seen_utc": "2026-08-08 17:27:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870271": [
        {
            "ioc_value": "0a9f93b87901a403fa1f1b1362455f13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 20:12:34",
            "last_seen_utc": "2026-08-08 17:27:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870272": [
        {
            "ioc_value": "c1d55538417d22ca041f9a269866ccba8957c40ee698860be340b297713eb8d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:12:34",
            "last_seen_utc": "2026-08-08 17:27:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870273": [
        {
            "ioc_value": "0950d60a82c2f2f4a2e4b0575ae7a15124245aff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-07 20:12:34",
            "last_seen_utc": "2026-08-08 17:27:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870270": [
        {
            "ioc_value": "997e7cf6edd424e6346a791ad82702ebb3e2ca9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 20:12:33",
            "last_seen_utc": "2026-08-08 17:27:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870267": [
        {
            "ioc_value": "923ae59f2983bf854f2a6222083b55f5ac886cb7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-07 20:12:32",
            "last_seen_utc": "2026-08-08 17:27:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870268": [
        {
            "ioc_value": "9cf073fefffea51d7e6780b3b886f00c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-07 20:12:32",
            "last_seen_utc": "2026-08-08 17:27:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870269": [
        {
            "ioc_value": "78efb35e7b51882913109c68e386b0bd2941901a451a35022bf5e5a2f018dfcb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 20:12:32",
            "last_seen_utc": "2026-08-08 17:27:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870264": [
        {
            "ioc_value": "a93025d59b1a913d257062e6770f6ea1e186b073",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:12:31",
            "last_seen_utc": "2026-08-08 17:27:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870265": [
        {
            "ioc_value": "2ab61292e17ca7d65cbc94c6efd000bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:12:31",
            "last_seen_utc": "2026-08-08 17:27:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870266": [
        {
            "ioc_value": "45f245b964952e7ab59f50597ba1458ea8a3dfe42f0bc9a12696af02a810fbac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-07 20:12:31",
            "last_seen_utc": "2026-08-08 17:27:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870261": [
        {
            "ioc_value": "2eccdb5dec5d8b1189e2d5a4c5310638fa33a82c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:30",
            "last_seen_utc": "2026-08-08 17:27:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870262": [
        {
            "ioc_value": "c7f29deef6de0b2079c7651855fcdad0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:30",
            "last_seen_utc": "2026-08-08 17:27:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870263": [
        {
            "ioc_value": "960ae7aabae262723177420c318c5e1d834f081ba917f044cc52c9bf39fa4e2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 20:12:30",
            "last_seen_utc": "2026-08-08 17:27:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870260": [
        {
            "ioc_value": "96000ea06d9c60f12db32c005400fab457443b2ee57a9fa1dad28816cf3fa2ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-07 20:12:29",
            "last_seen_utc": "2026-08-08 17:27:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1870259": [
        {
            "ioc_value": "4szrc49l.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:11:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870258": [
        {
            "ioc_value": "escalatefud.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-07 20:10:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/07b1a32c53c1efab24f54151b1158bad7404374f0dfdee558e7ad80ad278575a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870257": [
        {
            "ioc_value": "oynxhn.eng-bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 20:10:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870256": [
        {
            "ioc_value": "194.59.31.77:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-07 20:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870255": [
        {
            "ioc_value": "4uc7neco.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 19:54:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870254": [
        {
            "ioc_value": "94.154.32.48:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 19:46:31",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870253": [
        {
            "ioc_value": "87.120.196.221:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 19:46:22",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870252": [
        {
            "ioc_value": "43.135.34.69:43911",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-07 19:45:42",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870251": [
        {
            "ioc_value": "38.18.229.217:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 19:45:39",
            "last_seen_utc": "2026-09-01 02:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870250": [
        {
            "ioc_value": "217.60.97.106:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 19:45:24",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870249": [
        {
            "ioc_value": "207.231.104.146:1447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 19:44:41",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870248": [
        {
            "ioc_value": "207.189.18.213:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 19:44:40",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870247": [
        {
            "ioc_value": "186.169.88.130:9002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 19:44:18",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870246": [
        {
            "ioc_value": "185.212.128.59:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-07 19:44:13",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870244": [
        {
            "ioc_value": "172.239.45.42:82",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-07 19:43:59",
            "last_seen_utc": "2026-09-01 02:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870245": [
        {
            "ioc_value": "172.86.117.104:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 19:43:59",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870243": [
        {
            "ioc_value": "167.172.145.141:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 19:43:55",
            "last_seen_utc": "2026-09-01 02:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870242": [
        {
            "ioc_value": "159.203.69.210:11088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 19:43:49",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870241": [
        {
            "ioc_value": "124.198.131.130:1907",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870240": [
        {
            "ioc_value": "104.238.57.23:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 19:43:11",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870239": [
        {
            "ioc_value": "103.158.191.249:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 19:43:06",
            "last_seen_utc": "2026-09-01 02:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870238": [
        {
            "ioc_value": "hnbowps.eng--cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 19:32:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870237": [
        {
            "ioc_value": "engcognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 19:27:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870236": [
        {
            "ioc_value": "clxurg.eng--bpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 19:25:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870234": [
        {
            "ioc_value": "engbpzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 19:24:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870230": [
        {
            "ioc_value": "bmcmdwj.eng-brain-defender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 18:47:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870228": [
        {
            "ioc_value": "141.94.148.37:1224",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 18:42:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/416e7d7ed1d47f077b3630436bdbeaa43a669b536f6982efe54260492d4fb469/",
            "tags": "contagious-interview",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870227": [
        {
            "ioc_value": "eng-brain-defender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 18:41:44",
            "last_seen_utc": "2026-08-07 18:42:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870226": [
        {
            "ioc_value": "nomaos.ecchoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 18:40:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870225": [
        {
            "ioc_value": "en-en-eng-cognisurge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 18:40:35",
            "last_seen_utc": "2026-08-21 17:31:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870224": [
        {
            "ioc_value": "ecchoxen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 18:38:49",
            "last_seen_utc": "2026-08-07 18:39:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870216": [
        {
            "ioc_value": "103.83.86.215:2",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870217": [
        {
            "ioc_value": "103.83.86.215:2222",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870218": [
        {
            "ioc_value": "103.83.86.215:4231",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870219": [
        {
            "ioc_value": "103.83.86.215:7012",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870220": [
        {
            "ioc_value": "103.83.86.215:6969",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870221": [
        {
            "ioc_value": "103.83.86.215:4567",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870222": [
        {
            "ioc_value": "103.83.86.215:5555",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870223": [
        {
            "ioc_value": "103.83.86.215:2381",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 18:33:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1870213": [
        {
            "ioc_value": "http://115.51.80.33:54187/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-07 18:20:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.51.80.33",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870214": [
        {
            "ioc_value": "http://139.135.40.99:46495/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-07 18:20:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.40.99",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1870215": [
        {
            "ioc_value": "vmi3462151.contaboserver.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-07 18:19:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1870212": [
        {
            "ioc_value": "tuzjypl.en-echoxen-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:56:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870211": [
        {
            "ioc_value": "en-echoxen-echoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:55:08",
            "last_seen_utc": "2026-08-07 17:55:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870200": [
        {
            "ioc_value": "grove53.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-07 17:54:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/stage4_payload.md",
            "tags": "ClickFix,DANTE,macOS,stealer",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1870201": [
        {
            "ioc_value": "161.35.146.120:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-07 17:54:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/stage4_payload.md",
            "tags": "ClickFix,DANTE,macOS,stealer",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1870202": [
        {
            "ioc_value": "http://161.35.146.120/contact",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-07 17:54:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/stage4_payload.md",
            "tags": "ClickFix,DANTE,exfiltration,macOS",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1870203": [
        {
            "ioc_value": "95ab5a61a0970410ada36ba843e55e270f38cb8e2eebf79254434948e11c870f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-07 17:54:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/stage4_payload.md",
            "tags": "AppleScript,ClickFix,DANTE,macOS,stealer",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1870204": [
        {
            "ioc_value": "85ffd3ab8ed16a565046b0dd1dfe88a1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-07 17:54:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/stage4_payload.md",
            "tags": "AppleScript,ClickFix,DANTE,macOS,stealer",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1870210": [
        {
            "ioc_value": "0zrbstse.tiptop-shops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:54:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870209": [
        {
            "ioc_value": "byqpgf.digeststart.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:53:48",
            "last_seen_utc": "2026-08-20 13:30:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870208": [
        {
            "ioc_value": "wwtbgml.en-audizenn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:12:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870206": [
        {
            "ioc_value": "lvksnl.diegestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:09:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870205": [
        {
            "ioc_value": "diegestistart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 17:07:24",
            "last_seen_utc": "2026-08-07 17:08:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870199": [
        {
            "ioc_value": "jvvd7wco.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 16:52:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870198": [
        {
            "ioc_value": "telemetras.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 16:43:17",
            "last_seen_utc": "2026-08-08 11:01:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870197": [
        {
            "ioc_value": "jycatdj.echoxien.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 16:25:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870196": [
        {
            "ioc_value": "echoxien.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 16:24:03",
            "last_seen_utc": "2026-08-07 16:24:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1870195": [
        {
            "ioc_value": "vwydbb.cognisurgeusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 16:23:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870194": [
        {
            "ioc_value": "cognisurgeusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 16:21:55",
            "last_seen_utc": "2026-08-07 16:22:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869965": [
        {
            "ioc_value": "prunarok.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869966": [
        {
            "ioc_value": "wuserrosok.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869967": [
        {
            "ioc_value": "noabasteb.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869968": [
        {
            "ioc_value": "violcuglu.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869969": [
        {
            "ioc_value": "frimwanbav.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869970": [
        {
            "ioc_value": "kefaisce.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869971": [
        {
            "ioc_value": "feafetoboary.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869972": [
        {
            "ioc_value": "wuscokosh.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869973": [
        {
            "ioc_value": "fleewakig.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869974": [
        {
            "ioc_value": "voskuzapoud.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869975": [
        {
            "ioc_value": "spinbode.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869976": [
        {
            "ioc_value": "nujusnex.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869977": [
        {
            "ioc_value": "freesilkirk.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869979": [
        {
            "ioc_value": "loajituzio.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869978": [
        {
            "ioc_value": "bairvitu.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869980": [
        {
            "ioc_value": "pingtrack.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer,tracker",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869981": [
        {
            "ioc_value": "b0209a56237964228cbd95cfe7ee4c639e20da8bfb01bc19e84e43cb3d832c01",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869982": [
        {
            "ioc_value": "c4a461b72c5bfa08d4bffa4d10d265d3777efeb4066566442b11220cd48b88c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869983": [
        {
            "ioc_value": "f31df9170d3d70c2e3a84e56f1dabe093f19c79013a4d741cda3697ab2a93eed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869984": [
        {
            "ioc_value": "5fa116e699f23e230c6c17a47d499feae725069ec5186196df24a7346e0f77f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1869985": [
        {
            "ioc_value": "a7e8bb5263b34be020d8b5c938b4c4187f390b9240f9ce757cae953da9988227",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-08-07 16:03:26",
            "last_seen_utc": "2026-08-08 17:26:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding",
            "tags": "Amatera,EtherHiding,loader,MSBuild,RenPyLoader,stealer",
            "anonymous": 0,
            "reporter": "Xorbit"
        }
    ],
    "1870193": [
        {
            "ioc_value": "eyy5zzl6.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 16:03:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1870184": [
        {
            "ioc_value": "ilhadospatudos.pt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-07 15:53:37",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "https://x.com/craiu/status/2085753478039662997",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870186": [
        {
            "ioc_value": "glcontentstudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-07 15:53:37",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "https://x.com/craiu/status/2085753478039662997",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1870117": [
        {
            "ioc_value": "safetyman.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-07 15:53:34",
            "last_seen_utc": "2026-08-25 05:06:08",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "https://x.com/craiu/status/2085753478039662997",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1869986": [
        {
            "ioc_value": "di8fisku.tinyzonetv.im",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:52:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869964": [
        {
            "ioc_value": "https://ttf.slotmacau188e.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 15:45:05",
            "last_seen_utc": "2026-08-27 16:26:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869963": [
        {
            "ioc_value": "ttf.slotmacau188e.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 15:45:04",
            "last_seen_utc": "2026-08-27 16:26:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869962": [
        {
            "ioc_value": "irical.cogniserge.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:41:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869961": [
        {
            "ioc_value": "xwnmveu.echoxenweb.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:40:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869960": [
        {
            "ioc_value": "echoxenweb.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:39:01",
            "last_seen_utc": "2026-08-07 15:39:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869959": [
        {
            "ioc_value": "cogniserge.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:36:24",
            "last_seen_utc": "2026-08-07 15:36:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869943": [
        {
            "ioc_value": "https://test-project-one-xi-63.vercel.app/api",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 15:26:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "env-exfiltration,infostealer,nodejs,rce,vercel",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869958": [
        {
            "ioc_value": "https://ttf.bayototo.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 15:25:05",
            "last_seen_utc": "2026-08-14 08:26:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869957": [
        {
            "ioc_value": "ttf.bayototo.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 15:25:04",
            "last_seen_utc": "2026-08-14 08:26:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869956": [
        {
            "ioc_value": "64.89.163.215:666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 15:19:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1cad417279c955d47c97202a38ec1c9a4a1cf5a8c458e8cf09806fd70d81bdda/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869950": [
        {
            "ioc_value": "osteriamorini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:13:48",
            "last_seen_utc": "2026-08-26 21:54:37",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869947": [
        {
            "ioc_value": "whocanroastthemost.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 15:13:47",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869884": [
        {
            "ioc_value": "167.172.188.177:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 14:59:47",
            "last_seen_utc": "2026-08-13 13:22:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869938": [
        {
            "ioc_value": "hcnppie.echo-xen-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:55:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869937": [
        {
            "ioc_value": "nmkxhp.buy-prozenith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869936": [
        {
            "ioc_value": "echo-xen-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:53:05",
            "last_seen_utc": "2026-08-07 14:53:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869935": [
        {
            "ioc_value": "buy-prozenith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:50:54",
            "last_seen_utc": "2026-08-07 14:51:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869925": [
        {
            "ioc_value": "45.203.220.93:6668",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 14:40:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/960ae7aabae262723177420c318c5e1d834f081ba917f044cc52c9bf39fa4e2a/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869926": [
        {
            "ioc_value": "45.203.220.93:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 14:40:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/960ae7aabae262723177420c318c5e1d834f081ba917f044cc52c9bf39fa4e2a/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869910": [
        {
            "ioc_value": "45.203.220.93:8886",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 14:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869874": [
        {
            "ioc_value": "cal.snehamumbai.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:17:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869875": [
        {
            "ioc_value": "a2ec2f6652726cc4d491e1dfd86f206837cef57a1d81fa5c6c0e7bbd364fbcd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:17:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869876": [
        {
            "ioc_value": "id-verif-code.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:17:41",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869863": [
        {
            "ioc_value": "161.35.48.40:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 14:12:06",
            "last_seen_utc": "2026-08-13 08:59:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869873": [
        {
            "ioc_value": "rqappw.buy-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:10:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869872": [
        {
            "ioc_value": "ltojraf.echo-xen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:09:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869871": [
        {
            "ioc_value": "echo-xen.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:07:30",
            "last_seen_utc": "2026-08-07 23:15:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869870": [
        {
            "ioc_value": "buy-ignitra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 14:05:23",
            "last_seen_utc": "2026-08-11 20:33:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869868": [
        {
            "ioc_value": "137.220.155.75:6667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 14:00:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869867": [
        {
            "ioc_value": "202.60.229.104:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-08-07 14:00:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "XenoRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869866": [
        {
            "ioc_value": "http://cy060322.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 14:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869865": [
        {
            "ioc_value": "196.251.107.252:22061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-07 14:00:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869864": [
        {
            "ioc_value": "ar33krmg.tigersmartialarts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 13:55:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869860": [
        {
            "ioc_value": "health.winnererasable.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-07 13:30:44",
            "last_seen_utc": "2026-08-18 16:47:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869859": [
        {
            "ioc_value": "gdhpgxg.echoxenmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 13:24:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869842": [
        {
            "ioc_value": "http://59.103.119.119:43992/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-07 13:23:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.103.119.119",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869843": [
        {
            "ioc_value": "http://103.146.110.200:47709/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-07 13:23:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.146.110.200",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869855": [
        {
            "ioc_value": "165.245.178.39:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 13:23:31",
            "last_seen_utc": "2026-08-13 12:16:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869858": [
        {
            "ioc_value": "iieqea.buy-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 13:22:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869857": [
        {
            "ioc_value": "echoxenmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 13:22:02",
            "last_seen_utc": "2026-08-07 13:23:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869856": [
        {
            "ioc_value": "buy-goldalign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 13:19:44",
            "last_seen_utc": "2026-08-14 21:40:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869849": [
        {
            "ioc_value": "sjwtvp.buy-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 12:39:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869848": [
        {
            "ioc_value": "ifnlnog.echoxan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 12:37:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869847": [
        {
            "ioc_value": "echoxan.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 12:36:26",
            "last_seen_utc": "2026-08-07 12:37:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869846": [
        {
            "ioc_value": "buy-audizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 12:34:21",
            "last_seen_utc": "2026-08-07 12:34:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869845": [
        {
            "ioc_value": "46.151.182.225:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-07 12:20:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03c07c02503cd44bb8119b9e2f74111cb8c75685b67a2744af27c7b9f62febc1/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869844": [
        {
            "ioc_value": "tmplsnd.cabvlliahermosa.com.mx",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-07 12:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03c07c02503cd44bb8119b9e2f74111cb8c75685b67a2744af27c7b9f62febc1/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869818": [
        {
            "ioc_value": "https://ocalp.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 12:15:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869819": [
        {
            "ioc_value": "https://ocalp.lol/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 12:15:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869820": [
        {
            "ioc_value": "https://ocalp.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 12:15:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869821": [
        {
            "ioc_value": "https://ocalp.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 12:15:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869822": [
        {
            "ioc_value": "https://ocalp.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 12:15:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869823": [
        {
            "ioc_value": "ocalp.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 12:15:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869841": [
        {
            "ioc_value": "161.35.48.40:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 12:15:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869840": [
        {
            "ioc_value": "193.29.58.172:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-07 12:09:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869838": [
        {
            "ioc_value": "45.148.18.40:58268",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-07 12:06:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cf4ebc8e5121ece3f32be7e760a99273d170411b74bc6aa1d2f8e8509560f90c/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869839": [
        {
            "ioc_value": "45.148.18.40:58798",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-07 12:06:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cf4ebc8e5121ece3f32be7e760a99273d170411b74bc6aa1d2f8e8509560f90c/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869837": [
        {
            "ioc_value": "molerok.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 12:05:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869836": [
        {
            "ioc_value": "hbtij6h8.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869835": [
        {
            "ioc_value": "v1l1cn91.therodeoroundup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:52:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869834": [
        {
            "ioc_value": "9tee6lq0.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869833": [
        {
            "ioc_value": "iggcnveibsaaztompd.oasteadomnuluidiaspora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:52:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869832": [
        {
            "ioc_value": "kgfgvgm.audizyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869831": [
        {
            "ioc_value": "goifahq.audizyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869830": [
        {
            "ioc_value": "hiusxy.braindyfender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:49:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869829": [
        {
            "ioc_value": "kfplmpbmdmxewleiom.oasteadomnuluidiaspora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:47:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869828": [
        {
            "ioc_value": "mejeuqh.audizyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:45:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869827": [
        {
            "ioc_value": "xwloww.braindyfender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869825": [
        {
            "ioc_value": "braindyfender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:41:38",
            "last_seen_utc": "2026-08-07 11:49:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869824": [
        {
            "ioc_value": "windonws.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-07 11:40:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c894ed71694fd28d60113b5594f9e61e5133a18f410960849e868b60b8beb973/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869814": [
        {
            "ioc_value": "swcosh.braindifender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 11:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869813": [
        {
            "ioc_value": "slaxbvv.audizenus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:59:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869812": [
        {
            "ioc_value": "beta9.coralfabric.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-07 10:59:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869811": [
        {
            "ioc_value": "audizenus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:58:48",
            "last_seen_utc": "2026-08-07 10:59:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869809": [
        {
            "ioc_value": "braindifender.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:56:07",
            "last_seen_utc": "2026-08-07 10:57:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869808": [
        {
            "ioc_value": "t622q131.therodeoroundup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869807": [
        {
            "ioc_value": "braindifender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:55:18",
            "last_seen_utc": "2026-08-07 10:55:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869806": [
        {
            "ioc_value": "xtjcss.braindefendr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:41:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869805": [
        {
            "ioc_value": "185.215.151.16:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-07 10:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ef69216d58bbdb5e87757a404ab392fb4fb243ce6fdc898bde7344fa9b24e2e8/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869804": [
        {
            "ioc_value": "Pb3089EP3WAwzicHHzF9zQ==",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-07 10:20:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ef69216d58bbdb5e87757a404ab392fb4fb243ce6fdc898bde7344fa9b24e2e8/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869802": [
        {
            "ioc_value": "rbuttt.braindefendr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:14:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869801": [
        {
            "ioc_value": "cgupvay.audizen-eng-usa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:14:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869800": [
        {
            "ioc_value": "braindefendr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:13:46",
            "last_seen_utc": "2026-08-07 10:39:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869799": [
        {
            "ioc_value": "audizen-eng-usa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 10:13:20",
            "last_seen_utc": "2026-08-07 10:14:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869796": [
        {
            "ioc_value": "193.26.115.17:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 10:08:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b873c981db25d16bd539aef3952a2e869dd55c27e0937064cafc5dafb70c79a/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869797": [
        {
            "ioc_value": "193.26.115.17:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 10:08:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b873c981db25d16bd539aef3952a2e869dd55c27e0937064cafc5dafb70c79a/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869798": [
        {
            "ioc_value": "193.26.115.17:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 10:08:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b873c981db25d16bd539aef3952a2e869dd55c27e0937064cafc5dafb70c79a/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869794": [
        {
            "ioc_value": "43.139.87.203:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 10:05:08",
            "last_seen_utc": "2026-09-01 02:47:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869790": [
        {
            "ioc_value": "mrarmksmsx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 10:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d17eba397f2feb1aac83499c9b89475b476a586cd4776bb1485c376516c89655/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869788": [
        {
            "ioc_value": "136.244.104.161:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 10:02:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d17eba397f2feb1aac83499c9b89475b476a586cd4776bb1485c376516c89655/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869789": [
        {
            "ioc_value": "136.244.104.161:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 10:02:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d17eba397f2feb1aac83499c9b89475b476a586cd4776bb1485c376516c89655/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869787": [
        {
            "ioc_value": "findupdatereu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 10:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d17eba397f2feb1aac83499c9b89475b476a586cd4776bb1485c376516c89655/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869786": [
        {
            "ioc_value": "https://serve.eastpeak.xyz/health",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 09:59:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/efb06d67ffdd28113cbf7bed214a7b56b0c151c9f04034052f9cc7eedeaf7a71/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869785": [
        {
            "ioc_value": "serve.eastpeak.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 09:59:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/efb06d67ffdd28113cbf7bed214a7b56b0c151c9f04034052f9cc7eedeaf7a71/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869784": [
        {
            "ioc_value": "id-verif-code.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 09:56:53",
            "last_seen_utc": "2026-08-10 07:21:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869783": [
        {
            "ioc_value": "hgdktvy.audeezen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:49:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869782": [
        {
            "ioc_value": "audeezen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:47:17",
            "last_seen_utc": "2026-08-07 09:48:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869781": [
        {
            "ioc_value": "85.209.87.84:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 09:46:36",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869780": [
        {
            "ioc_value": "78.17.71.8:5025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 09:46:29",
            "last_seen_utc": "2026-09-01 02:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869779": [
        {
            "ioc_value": "64.89.161.196:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-07 09:46:24",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869778": [
        {
            "ioc_value": "45.89.48.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 09:46:10",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869777": [
        {
            "ioc_value": "34.106.101.107:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 09:45:46",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869776": [
        {
            "ioc_value": "3.75.210.48:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-07 09:45:43",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869775": [
        {
            "ioc_value": "207.32.217.227:21903",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 09:44:48",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869774": [
        {
            "ioc_value": "203.98.68.17:1009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869773": [
        {
            "ioc_value": "185.212.129.152:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-07 09:44:19",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869772": [
        {
            "ioc_value": "185.212.128.170:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-07 09:44:18",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869771": [
        {
            "ioc_value": "159.203.69.210:35203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 09:43:53",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869769": [
        {
            "ioc_value": "154.30.132.30:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 09:43:42",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869770": [
        {
            "ioc_value": "154.40.62.125:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-08-07 09:43:42",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869768": [
        {
            "ioc_value": "124.198.131.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 09:43:22",
            "last_seen_utc": "2026-09-01 02:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869767": [
        {
            "ioc_value": "103.249.116.184:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 09:43:06",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869766": [
        {
            "ioc_value": "cpnazr.braindefendere.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:40:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869735": [
        {
            "ioc_value": "85.31.60.169:2535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-07 09:39:44",
            "last_seen_utc": "2026-08-07 18:54:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "81a64890ca97bd87f0c9d35bc6501f4d,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869751": [
        {
            "ioc_value": "2.56.244.52:9022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-07 09:39:43",
            "last_seen_utc": "2026-08-08 10:38:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869755": [
        {
            "ioc_value": "139.59.144.8:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 09:39:43",
            "last_seen_utc": "2026-08-09 20:30:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869765": [
        {
            "ioc_value": "braindefendere.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:38:56",
            "last_seen_utc": "2026-08-07 09:39:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869764": [
        {
            "ioc_value": "wik301dg.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:37:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869763": [
        {
            "ioc_value": "195.177.94.245:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:37:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869762": [
        {
            "ioc_value": "217.217.97.36:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:36:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869761": [
        {
            "ioc_value": "talkhome.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-07 09:35:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869760": [
        {
            "ioc_value": "104.239.66.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:34:26",
            "last_seen_utc": "2026-08-27 15:33:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d9a1b096c4ae71f9c0403802667ea0b3492de2d57281a6d4145ba5758e74bad/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869759": [
        {
            "ioc_value": "195.177.94.26:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:32:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b5f7df56de192f53a8122e1e6a7d83c80344d94b401d140004cff8cf04252757/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869758": [
        {
            "ioc_value": "195.177.94.80:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:32:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b8bec7b45605da355b092c9f3e40bab447928839d4eef5a9290cb5bb1dd50f2d/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869757": [
        {
            "ioc_value": "94.154.32.185:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:31:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b1f69dcea99ca1e1884a377ed2481ee1f0d543e7faade27f6ac3dc850042233/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869756": [
        {
            "ioc_value": "192.159.99.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:29:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869754": [
        {
            "ioc_value": "45.88.186.14:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-07 09:29:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5273b7575eb3efe33117a8209684e11ca42a66ed779ecd32bc9ead5b2a9f0d30/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869752": [
        {
            "ioc_value": "molerok.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 09:17:47",
            "last_seen_utc": "2026-08-07 11:13:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869750": [
        {
            "ioc_value": "203.98.68.17:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 09:05:08",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869748": [
        {
            "ioc_value": "114.67.204.86:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-07 09:05:07",
            "last_seen_utc": "2026-08-20 09:02:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869744": [
        {
            "ioc_value": "hkckpom.aoudizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:02:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869743": [
        {
            "ioc_value": "aoudizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 09:01:46",
            "last_seen_utc": "2026-08-07 09:02:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869742": [
        {
            "ioc_value": "s1x30duk.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:56:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869741": [
        {
            "ioc_value": "sfaofd.brain--defender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:55:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869739": [
        {
            "ioc_value": "braindefender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869738": [
        {
            "ioc_value": "achoxen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:52:35",
            "last_seen_utc": "2026-08-07 08:53:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869737": [
        {
            "ioc_value": "qcxwddc.aaudizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:51:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869736": [
        {
            "ioc_value": "rmawet.bp-zone.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:51:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869734": [
        {
            "ioc_value": "185.250.180.40:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 08:36:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869733": [
        {
            "ioc_value": "mhvigyc.aaudizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869732": [
        {
            "ioc_value": "147.45.39.50:41117",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 08:31:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869731": [
        {
            "ioc_value": "aaudizen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:30:16",
            "last_seen_utc": "2026-08-09 09:21:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869730": [
        {
            "ioc_value": "tziuge.bp-zone.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869729": [
        {
            "ioc_value": "bp-zone.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 08:29:37",
            "last_seen_utc": "2026-08-09 14:22:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869728": [
        {
            "ioc_value": "m4ch.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 08:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/609d4dad043796f9be8db28cb3a7312c82c4478bb99f0db71d8b48f43db5ce54/",
            "tags": "Mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869727": [
        {
            "ioc_value": "bd.p0p3w4sh3r3.boats",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 08:06:44",
            "last_seen_utc": "2026-08-07 08:06:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/46f1352141944e4c758c5c145f7f278e0bf2378595587d22675c71111e309274/",
            "tags": "Mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869718": [
        {
            "ioc_value": "65.109.127.15:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869719": [
        {
            "ioc_value": "62.238.60.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869720": [
        {
            "ioc_value": "167.233.217.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869721": [
        {
            "ioc_value": "167.233.168.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869722": [
        {
            "ioc_value": "116.202.186.230:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869723": [
        {
            "ioc_value": "167.233.174.147:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869714": [
        {
            "ioc_value": "65.109.72.175:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869715": [
        {
            "ioc_value": "167.233.160.192:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869716": [
        {
            "ioc_value": "178.105.30.143:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869717": [
        {
            "ioc_value": "167.233.125.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869710": [
        {
            "ioc_value": "https://65.109.127.15/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:48",
            "last_seen_utc": "2026-08-23 16:04:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869711": [
        {
            "ioc_value": "https://167.233.217.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869712": [
        {
            "ioc_value": "https://167.233.168.67/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869713": [
        {
            "ioc_value": "https://167.233.174.147/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869706": [
        {
            "ioc_value": "https://65.109.72.175/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869707": [
        {
            "ioc_value": "https://167.233.160.192/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869708": [
        {
            "ioc_value": "https://178.105.30.143/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:47",
            "last_seen_utc": "2026-08-11 04:50:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869709": [
        {
            "ioc_value": "https://167.233.125.232/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-07 08:02:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869705": [
        {
            "ioc_value": "test.txtensatorxgyt.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-07 08:01:41",
            "last_seen_utc": "2026-08-07 08:01:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/93808e10eac891a5957a61a82ae15922f76d809f58ebafe08f110667135123fb/",
            "tags": "Mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869704": [
        {
            "ioc_value": "864zcnq3.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 07:57:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869701": [
        {
            "ioc_value": "144.202.40.202:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 07:56:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/accbe9fca34638def5aa8a0c9d4cd7a536cc631c00a391d75e5a7b7548bade4b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869702": [
        {
            "ioc_value": "144.202.40.202:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 07:56:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/accbe9fca34638def5aa8a0c9d4cd7a536cc631c00a391d75e5a7b7548bade4b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869703": [
        {
            "ioc_value": "144.202.40.202:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-07 07:56:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/accbe9fca34638def5aa8a0c9d4cd7a536cc631c00a391d75e5a7b7548bade4b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869700": [
        {
            "ioc_value": "dcozart.tsfrecords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 07:47:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869699": [
        {
            "ioc_value": "dxpzop.wakap21.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 07:46:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869569": [
        {
            "ioc_value": "housemill9911.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-07 07:25:14",
            "last_seen_utc": "2026-08-07 06:58:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macOS,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869580": [
        {
            "ioc_value": "grove-89.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/payload_analysis.md",
            "tags": "beacon,ClickFix,DANTE,macOS",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1869583": [
        {
            "ioc_value": "29be0f56275f051181ea3ec37ddc3d3807cde34cb65de855709fae0e13786a40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/payload_analysis.md",
            "tags": "ClickFix,clipboard,macOS",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1869584": [
        {
            "ioc_value": "2169ff5e7be77fc3ff72758f9fa50658",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/raimurokko/macos-threat-tracking/blob/main/campaigns/2026-08-04-cloudflare-clickfix/payload_analysis.md",
            "tags": "ClickFix,clipboard,macOS",
            "anonymous": 0,
            "reporter": "raimurokko"
        }
    ],
    "1869593": [
        {
            "ioc_value": "139.59.144.8:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 07:25:12",
            "last_seen_utc": "2026-08-13 11:10:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869647": [
        {
            "ioc_value": "someapiz.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869648": [
        {
            "ioc_value": "jardinemajorelle.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869649": [
        {
            "ioc_value": "cliffsfomoher.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869650": [
        {
            "ioc_value": "cliffsomoher.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869651": [
        {
            "ioc_value": "cliiffsofmoher.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869652": [
        {
            "ioc_value": "clifsofmoher.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869653": [
        {
            "ioc_value": "cliffsmouhur.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869654": [
        {
            "ioc_value": "blarneycastle.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869655": [
        {
            "ioc_value": "museummacan.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869656": [
        {
            "ioc_value": "mediamarkt.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869657": [
        {
            "ioc_value": "arqenntta.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869658": [
        {
            "ioc_value": "argennnta.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869659": [
        {
            "ioc_value": "argnetta.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869619": [
        {
            "ioc_value": "159.203.172.232:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-07 07:25:05",
            "last_seen_utc": "2026-08-13 05:36:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869660": [
        {
            "ioc_value": "mallaak.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869661": [
        {
            "ioc_value": "otphankahr.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869662": [
        {
            "ioc_value": "biancomonte.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869663": [
        {
            "ioc_value": "gvnlwdcrl.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869664": [
        {
            "ioc_value": "astrolline.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-ticket,payment-fraud,phishing,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869671": [
        {
            "ioc_value": "helixr2sncrd3ndsz5oho6mzqw3x5u7mvox5zcsngc5wm7v4l5k7oryd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:25:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2085594656537256384",
            "tags": "helix,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869672": [
        {
            "ioc_value": "helix2kvkqjzrkh3ospyukij7uemxwvbdmqberjmrudjmqy4hspwzzqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2085594656537256384",
            "tags": "helix,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869681": [
        {
            "ioc_value": "https://generatoryieldlab.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "offer-proxy,TDS,webinject",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869680": [
        {
            "ioc_value": "https://quietshalecompany.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "offer-proxy,TDS,webinject",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869682": [
        {
            "ioc_value": "https://simplecopseholding.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "offer-proxy,TDS,webinject",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869683": [
        {
            "ioc_value": "http://165.22.69.214/cat.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:51",
            "last_seen_utc": "2026-08-07 17:50:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1869689": [
        {
            "ioc_value": "msdnsreset.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,mshta,payload-host",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869688": [
        {
            "ioc_value": "0x0321c73150543faa9d016c9c46abf293eb6839e4",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:24:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "contract,EtherHiding,sepolia",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869698": [
        {
            "ioc_value": "uzibfmopqrkgcjl.is-a-therapist.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-07 07:19:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9cff99340825973883bfebb79264a463470d84d8e7fb13db85fa9b6808f2b98c/",
            "tags": "geo,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869697": [
        {
            "ioc_value": "pdubvw.vitalmarkings.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 07:01:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869696": [
        {
            "ioc_value": "rxgpfyy.vonshiprock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 07:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869695": [
        {
            "ioc_value": "6710ekqg.specialtypopupevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 06:55:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869694": [
        {
            "ioc_value": "rdduwa.vistapropertyllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 06:18:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869693": [
        {
            "ioc_value": "vkebuqp.uplandmealsonwheels.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 06:15:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869692": [
        {
            "ioc_value": "159.203.69.210:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-07 06:05:06",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869685": [
        {
            "ioc_value": "yedwwl.turbo-course.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 05:29:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869684": [
        {
            "ioc_value": "tcrmynh.univchristianchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 05:28:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869665": [
        {
            "ioc_value": "uhs3ppkp.spareing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 04:53:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869646": [
        {
            "ioc_value": "bisblj.visionfordsales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 04:47:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869645": [
        {
            "ioc_value": "mssbksu.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 04:44:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869644": [
        {
            "ioc_value": "sx6qkomj.gamestwists.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 04:36:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869638": [
        {
            "ioc_value": "gyayquk.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 04:00:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869637": [
        {
            "ioc_value": "wxmqed.victoryshoescorp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 03:58:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869636": [
        {
            "ioc_value": "602a5sud.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 03:47:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869635": [
        {
            "ioc_value": "vygjdt.trustcsbs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 03:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869634": [
        {
            "ioc_value": "bopdifq.tethercars.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 03:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869630": [
        {
            "ioc_value": "s6tqoka5.sonnysdetailshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 02:51:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869629": [
        {
            "ioc_value": "gtmspy.triumphplumbinginc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 02:28:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869628": [
        {
            "ioc_value": "tsdezjb.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 02:25:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869627": [
        {
            "ioc_value": "http://touggch.click:9022",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-07 02:24:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869625": [
        {
            "ioc_value": "vadjlx.tnrautomotive.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 01:42:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869624": [
        {
            "ioc_value": "jbumbtg.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 01:40:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869618": [
        {
            "ioc_value": "nvzekr.tiroalpaloes.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:56:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869617": [
        {
            "ioc_value": "hjnnsbj.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869616": [
        {
            "ioc_value": "h9tiiej7.sivasumutemlak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:50:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869607": [
        {
            "ioc_value": "iyyutr.valley-open-mri.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869606": [
        {
            "ioc_value": "hgtaqyp.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:09:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869601": [
        {
            "ioc_value": "valley-open-mri.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:08:57",
            "last_seen_utc": "2026-08-09 08:56:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869594": [
        {
            "ioc_value": "bimbalok.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-07 00:04:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869592": [
        {
            "ioc_value": "151.242.125.190:9527",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 23:46:46",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869591": [
        {
            "ioc_value": "n4eotjlu.necedubd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 23:36:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869590": [
        {
            "ioc_value": "k25qo8xh.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 23:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869589": [
        {
            "ioc_value": "rabijv.valleynewsandbooze.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 23:25:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869588": [
        {
            "ioc_value": "qtmcovw.wayneandersonracing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 23:23:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869587": [
        {
            "ioc_value": "valleynewsandbooze.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 23:23:25",
            "last_seen_utc": "2026-08-06 23:24:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869585": [
        {
            "ioc_value": "xc1zdm30.singermegha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 22:51:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869579": [
        {
            "ioc_value": "pijjrfa.warrenumcpgh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 22:38:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869578": [
        {
            "ioc_value": "vgqjzg.usapoolsupplies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 22:38:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869577": [
        {
            "ioc_value": "usapoolsupplies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 22:37:53",
            "last_seen_utc": "2026-08-06 22:38:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869576": [
        {
            "ioc_value": "warrenumcpgh.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 22:37:17",
            "last_seen_utc": "2026-08-06 22:37:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869575": [
        {
            "ioc_value": "eortnc.uplandmealsonwheels.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:55:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869574": [
        {
            "ioc_value": "uplandmealsonwheels.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:52:27",
            "last_seen_utc": "2026-08-07 06:14:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869573": [
        {
            "ioc_value": "hgpmjev.wakap21.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869572": [
        {
            "ioc_value": "wakap21.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:51:47",
            "last_seen_utc": "2026-08-07 07:44:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869571": [
        {
            "ioc_value": "vonshiprock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:50:34",
            "last_seen_utc": "2026-08-07 07:00:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869570": [
        {
            "ioc_value": "bimbalok.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 21:42:29",
            "last_seen_utc": "2026-08-07 00:30:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869568": [
        {
            "ioc_value": "ssmekr.univchristianchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:08:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869567": [
        {
            "ioc_value": "univchristianchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:07:02",
            "last_seen_utc": "2026-08-07 05:29:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869566": [
        {
            "ioc_value": "ykdnqco.vivequeretaro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:06:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869565": [
        {
            "ioc_value": "vivequeretaro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 21:05:05",
            "last_seen_utc": "2026-08-06 21:06:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869564": [
        {
            "ioc_value": "w8avjtdi.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 20:50:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869563": [
        {
            "ioc_value": "solrig.turbo-course.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 20:24:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869562": [
        {
            "ioc_value": "turbo-course.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 20:21:23",
            "last_seen_utc": "2026-08-07 05:28:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869561": [
        {
            "ioc_value": "efcudif.vitalmarkings.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 20:20:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869560": [
        {
            "ioc_value": "vitalmarkings.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 20:20:07",
            "last_seen_utc": "2026-08-07 06:59:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869558": [
        {
            "ioc_value": "91.92.40.56:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:46:26",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869556": [
        {
            "ioc_value": "80.76.49.3:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:46:15",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869557": [
        {
            "ioc_value": "80.76.49.3:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:46:15",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869555": [
        {
            "ioc_value": "64.89.161.42:13834",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:46:09",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869554": [
        {
            "ioc_value": "31.59.137.166:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:45:33",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869553": [
        {
            "ioc_value": "217.60.97.106:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-06 19:45:21",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869552": [
        {
            "ioc_value": "185.212.128.232:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-06 19:44:11",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869551": [
        {
            "ioc_value": "156.251.16.212:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869550": [
        {
            "ioc_value": "154.37.154.36:1443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:43:38",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869549": [
        {
            "ioc_value": "153.75.88.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869547": [
        {
            "ioc_value": "188.166.222.192:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 19:41:32",
            "last_seen_utc": "2026-08-08 05:55:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869548": [
        {
            "ioc_value": "fpmzry.tsfrecords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 19:41:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869546": [
        {
            "ioc_value": "tsfrecords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 19:35:52",
            "last_seen_utc": "2026-08-07 07:46:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869545": [
        {
            "ioc_value": "bsonzsk.vistapropertyllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 19:35:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869544": [
        {
            "ioc_value": "vistapropertyllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 19:34:16",
            "last_seen_utc": "2026-08-07 06:13:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869522": [
        {
            "ioc_value": "apg3but9.zjz-service.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "apex,botnet,multi-arch",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1869523": [
        {
            "ioc_value": "152.136.59.90:22428",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:08",
            "last_seen_utc": "2026-08-06 18:25:41",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "apex,botnet,payload-delivery",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1869524": [
        {
            "ioc_value": "196.251.121.185:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:07",
            "last_seen_utc": "2026-08-10 12:48:16",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "apex,botnet,payload-delivery",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1869527": [
        {
            "ioc_value": "155.103.69.225:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:07",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869525": [
        {
            "ioc_value": "5.182.210.174:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:06",
            "last_seen_utc": "2026-08-28 14:30:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1869528": [
        {
            "ioc_value": "216.9.226.211:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:05",
            "last_seen_utc": "2026-08-06 18:43:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869529": [
        {
            "ioc_value": "216.9.226.211:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:05",
            "last_seen_utc": "2026-08-06 18:43:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869530": [
        {
            "ioc_value": "216.9.226.211:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:04",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869531": [
        {
            "ioc_value": "38.207.178.195:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 19:28:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869532": [
        {
            "ioc_value": "156.246.90.214:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 19:28:03",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869543": [
        {
            "ioc_value": "zjfpv65t.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 19:26:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869538": [
        {
            "ioc_value": "task.nextland18.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-06 18:57:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869537": [
        {
            "ioc_value": "uizkpdr.visionfordsales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:53:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869536": [
        {
            "ioc_value": "mahzls.trustcsbs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869534": [
        {
            "ioc_value": "9tczi7ct.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:50:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869533": [
        {
            "ioc_value": "visionfordsales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:48:30",
            "last_seen_utc": "2026-08-08 09:57:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869526": [
        {
            "ioc_value": "z9x8xddp.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869521": [
        {
            "ioc_value": "45.61.114.66:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-06 18:13:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a39e0d2de10ebb4b2fe2ea71fcc53bc491985033004b8de96537896bc44dfbe/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869520": [
        {
            "ioc_value": "107.174.142.91:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-06 18:12:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/63d9ee9be6336b953a7e82fd8d951db99d4c0518a98b7a49a2b6f0b3b4ddcb7e/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869495": [
        {
            "ioc_value": "dirtynightmare92.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 18:07:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macOS,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869503": [
        {
            "ioc_value": "atomento10.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 18:07:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macOS,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869509": [
        {
            "ioc_value": "188.166.222.192:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 18:07:50",
            "last_seen_utc": "2026-08-08 07:30:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869514": [
        {
            "ioc_value": "206.189.81.41:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 18:07:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869519": [
        {
            "ioc_value": "109.248.151.11:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 18:06:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32f7eefee64db549de9a1299ae677db39d34df0736d6bd3f1b69dcd1a67284a9/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869518": [
        {
            "ioc_value": "dkqirk.triumphplumbinginc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:06:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869517": [
        {
            "ioc_value": "triumphplumbinginc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:04:50",
            "last_seen_utc": "2026-08-09 03:56:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869516": [
        {
            "ioc_value": "soyqjhw.victoryshoescorp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869515": [
        {
            "ioc_value": "victoryshoescorp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 18:03:03",
            "last_seen_utc": "2026-08-08 07:57:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869513": [
        {
            "ioc_value": "lrfrzrt.vicsaboveallgrillsbbq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 17:22:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869512": [
        {
            "ioc_value": "ovywvh.transportationacademy.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 17:22:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869511": [
        {
            "ioc_value": "transportationacademy.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 17:19:20",
            "last_seen_utc": "2026-08-06 17:20:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869508": [
        {
            "ioc_value": "o0o766h7.osbratstvojedinstvo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 16:49:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869507": [
        {
            "ioc_value": "orwwvz.the-beggar-kings-bride.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 16:35:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869506": [
        {
            "ioc_value": "the-beggar-kings-bride.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 16:33:52",
            "last_seen_utc": "2026-08-06 16:34:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869505": [
        {
            "ioc_value": "dqxyqip.totalconstructionsolutionswi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 16:33:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869504": [
        {
            "ioc_value": "totalconstructionsolutionswi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 16:31:58",
            "last_seen_utc": "2026-08-06 16:33:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869502": [
        {
            "ioc_value": "ytgrvf.tethercars.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:51:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869501": [
        {
            "ioc_value": "vfytosq.topspeedmoving.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:48:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869499": [
        {
            "ioc_value": "topspeedmoving.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:46:29",
            "last_seen_utc": "2026-08-06 15:47:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869496": [
        {
            "ioc_value": "hjikdbbu.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:15:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869494": [
        {
            "ioc_value": "qjxgog.terraincastlerock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:04:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869493": [
        {
            "ioc_value": "wwhllpi.tongdailyphanphoi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:03:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869492": [
        {
            "ioc_value": "terraincastlerock.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:02:49",
            "last_seen_utc": "2026-08-06 15:03:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869491": [
        {
            "ioc_value": "tongdailyphanphoi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 15:01:00",
            "last_seen_utc": "2026-08-06 15:01:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869489": [
        {
            "ioc_value": "172.111.163.163:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 14:55:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77d1ccd3b57dea0ff34ee568a1027cd8ea74f14f3580acbc0aba8587f96f7a6c/",
            "tags": "RAT,RemcosRAt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869488": [
        {
            "ioc_value": "173.231.188.244:21590",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 14:53:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/24a13d4a670d42aae40168fbde79f28b5d280b5a9a5483831201a8aff83467a0/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869486": [
        {
            "ioc_value": "172.94.53.34:19700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 14:52:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/da195e43d62a6e527e4625b53ec54df68c5209ac8fa6a6acb06a8b99a7f48ea1/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869485": [
        {
            "ioc_value": "195.186.4.217:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 14:50:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/211da6838b46bd9cb8361f420589373edaeaa2b5c47a12d0d4c9424af7a1f070/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869484": [
        {
            "ioc_value": "9haaqrsv.ryanposocco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 14:49:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869481": [
        {
            "ioc_value": "https://enter-pverif-code.info/a29445abc0f12a36",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 14:44:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding,Polygon,powershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869482": [
        {
            "ioc_value": "https://enter-pverif-code.info/api.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 14:44:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding,Polygon,powershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869480": [
        {
            "ioc_value": "173.224.219.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 14:40:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8fd8208e5cbb67f5fcc38769b1eb2e90bac83115e9d0e64fc4b0f589121f0130/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869479": [
        {
            "ioc_value": "108.181.253.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 14:40:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/753d9d15ce2409f6381f6ac02641db61a86d3a44790db82e28750b5fee75ad74/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869478": [
        {
            "ioc_value": "ftp.4bagh.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-06 14:37:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5fc8146428d65afc46a1138d4fd7f9cf50b3f1afcbe444659dc6e29cf60b1679/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869443": [
        {
            "ioc_value": "ff709591615a26f037a465ce97cc59d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-08-06 14:21:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869444": [
        {
            "ioc_value": "1ecaf7098bedaa4ffae0fff3e077f937",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-08-06 14:21:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869445": [
        {
            "ioc_value": "ba77ebc4ee8500a0baaa5e2cddf8076a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-08-06 14:21:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/INC-Lynx%20Ransomware",
            "tags": "inc,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869446": [
        {
            "ioc_value": "7997927159d0477fcb755d0befa26ca2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-08-06 14:21:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/INC-Lynx%20Ransomware",
            "tags": "inc,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869447": [
        {
            "ioc_value": "3279610d12c4309a5b2fdc7ebc9cfb66",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-08-06 14:21:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/INC-Lynx%20Ransomware",
            "tags": "inc,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869448": [
        {
            "ioc_value": "974e9a9579927b2935140b6813f89692",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-08-06 14:21:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/INC-Lynx%20Ransomware",
            "tags": "inc,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869449": [
        {
            "ioc_value": "1a2bcaa7ccee237163bb2a03f1c08e55",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-08-06 14:20:59",
            "last_seen_utc": "2026-08-06 13:38:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/INC-Lynx%20Ransomware",
            "tags": "inc,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869450": [
        {
            "ioc_value": "frontalback91.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 14:20:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macOS,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869456": [
        {
            "ioc_value": "https://siege-close.com/x9i32md/w1/la02",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 14:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,ClickFix,EXT,fingerprinting",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869457": [
        {
            "ioc_value": "systemformating.rest",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 14:20:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/30449da3f53d195fefe33f595df235d5b79df1d15504ed7ca81e6c75aef2965e",
            "tags": "ClickFix,loader,stealer",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869458": [
        {
            "ioc_value": "brokenheart.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 14:20:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/30449da3f53d195fefe33f595df235d5b79df1d15504ed7ca81e6c75aef2965e",
            "tags": "ClickFix,loader,stealer",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869459": [
        {
            "ioc_value": "zolotoy.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 14:20:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/30449da3f53d195fefe33f595df235d5b79df1d15504ed7ca81e6c75aef2965e",
            "tags": "ClickFix,loader,stealer",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869463": [
        {
            "ioc_value": "encofradosamazon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 14:20:52",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix,compromised,EXT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869474": [
        {
            "ioc_value": "grvzzd.templeofazrael.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 14:18:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869473": [
        {
            "ioc_value": "templeofazrael.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 14:17:19",
            "last_seen_utc": "2026-08-06 14:18:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869472": [
        {
            "ioc_value": "xpxxxro.tnrautomotive.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 14:16:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869453": [
        {
            "ioc_value": "103.213.248.61:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 14:05:06",
            "last_seen_utc": "2026-09-01 02:43:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869442": [
        {
            "ioc_value": "kiwqhe.telenet-webmail.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 13:35:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869441": [
        {
            "ioc_value": "dwmlcjt4.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 13:34:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869440": [
        {
            "ioc_value": "hshnbea.tiroalpaloes.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 13:32:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869439": [
        {
            "ioc_value": "telenet-webmail.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 13:31:46",
            "last_seen_utc": "2026-08-06 13:32:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869432": [
        {
            "ioc_value": "a7fd97ff3685cb971650922c12725e8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869430": [
        {
            "ioc_value": "843df3ad51fb7c3d35e6f65545bb710b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869431": [
        {
            "ioc_value": "dd7f096c647581f6c639e5c3dc7d1e7e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869433": [
        {
            "ioc_value": "016802863edd6de4503ffa5d815d90b4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869434": [
        {
            "ioc_value": "2bc0e73148e07ade9ea1f2df31ca1c1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869435": [
        {
            "ioc_value": "3c624e9f786189d001dab2649ade0eb9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869437": [
        {
            "ioc_value": "758c6a86871370406e477e8ea53d2d8d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869436": [
        {
            "ioc_value": "66b521a1eccf3b28906299768ee77222",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:36",
            "last_seen_utc": "2026-08-06 13:31:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869438": [
        {
            "ioc_value": "c6bf6be91257d4625dc4e8778b313d6b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.warlock",
            "malware_alias": null,
            "malware_printable": "WarLock",
            "first_seen_utc": "2026-08-06 13:31:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Warlock%20Ransomware",
            "tags": "ransomware,warlock",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1869429": [
        {
            "ioc_value": "takeoffdallas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 13:30:28",
            "last_seen_utc": "2026-08-09 03:54:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869422": [
        {
            "ioc_value": "77.246.110.198:3050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 13:23:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ngate",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1869428": [
        {
            "ioc_value": "112.213.111.79:668",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 13:22:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00bd5139c999eb52f586b15621e306b48de4c5aac3db318fcfbc14af32802677/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869427": [
        {
            "ioc_value": "tiktokshop.men",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 13:20:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/00bd5139c999eb52f586b15621e306b48de4c5aac3db318fcfbc14af32802677/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869426": [
        {
            "ioc_value": "http://58.218.215.67:443/cloud-site/header-and-footer/shopping-cart.png",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 13:20:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3170f50b5cc1dad6eaccd300929d3f93ce7db1c25c7c5f31d86d1ba548464502/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869425": [
        {
            "ioc_value": "http://118.112.10.10:443/common/advertisement/Fixed/float/smile.svg",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 13:20:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3170f50b5cc1dad6eaccd300929d3f93ce7db1c25c7c5f31d86d1ba548464502/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869424": [
        {
            "ioc_value": "http://113.113.100.46:443/cloud-site/header-and-footer/shopping-cart.png",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 13:20:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3170f50b5cc1dad6eaccd300929d3f93ce7db1c25c7c5f31d86d1ba548464502/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869423": [
        {
            "ioc_value": "http://113.113.100.45:443/common/advertisement/Fixed/float/smile.svg",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 13:20:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3170f50b5cc1dad6eaccd300929d3f93ce7db1c25c7c5f31d86d1ba548464502/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869394": [
        {
            "ioc_value": "burministr5123.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869373": [
        {
            "ioc_value": "borrowskol312.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 13:15:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869387": [
        {
            "ioc_value": "rumbaju42.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 13:15:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869391": [
        {
            "ioc_value": "http://61.53.8.56:50916/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-06 13:15:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/61.53.8.56",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869392": [
        {
            "ioc_value": "http://139.135.46.28:55160/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-06 13:15:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.46.28",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869395": [
        {
            "ioc_value": "butterbread1122.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869396": [
        {
            "ioc_value": "elizium999.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869397": [
        {
            "ioc_value": "faircloud512421.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869398": [
        {
            "ioc_value": "fochinal5123.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869399": [
        {
            "ioc_value": "korichniuu122.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869400": [
        {
            "ioc_value": "trokkypi512122.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-06 13:15:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EXT,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869414": [
        {
            "ioc_value": "143.198.206.191:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 13:15:37",
            "last_seen_utc": "2026-08-10 04:48:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869421": [
        {
            "ioc_value": "82.21.185.243:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-06 13:13:23",
            "last_seen_utc": "2026-08-06 13:26:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/522d1b1c915fcf7d6e7113bd6c53aa435a01b77b8c12316bb2ca53472cf66beb/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869420": [
        {
            "ioc_value": "82.21.185.81:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-06 13:10:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/960a805c5686d1145914bb57caab5fc12b420a35fc23b39b5604d78f47597149/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869415": [
        {
            "ioc_value": "154.221.25.38:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 13:05:05",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869416": [
        {
            "ioc_value": "154.221.25.38:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 13:05:05",
            "last_seen_utc": "2026-08-12 07:32:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869413": [
        {
            "ioc_value": "sm2ztett.rossandrossenterprisesinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:48:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869412": [
        {
            "ioc_value": "rwyzls.tadkaindiaka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:45:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869411": [
        {
            "ioc_value": "dfxwbjt.tiptop-shops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869410": [
        {
            "ioc_value": "tadkaindiaka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:45:00",
            "last_seen_utc": "2026-08-09 14:42:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869409": [
        {
            "ioc_value": "tiptop-shops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:44:26",
            "last_seen_utc": "2026-08-07 17:53:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869408": [
        {
            "ioc_value": "gbugugpucukhbnvwxg.oasteadomnuluidiaspora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:44:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869406": [
        {
            "ioc_value": "xvaqhrg.tinyzonetv.im",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:40:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869405": [
        {
            "ioc_value": "tinyzonetv.im",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:39:31",
            "last_seen_utc": "2026-08-07 15:52:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869403": [
        {
            "ioc_value": "hzrhky.tacticalk9familycoin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:31:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869402": [
        {
            "ioc_value": "tacticalk9familycoin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:29:56",
            "last_seen_utc": "2026-08-08 17:54:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869401": [
        {
            "ioc_value": "aqnkjcr.tigersmartialarts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:26:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869386": [
        {
            "ioc_value": "loerpos.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 12:03:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869383": [
        {
            "ioc_value": "8.135.68.39:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 11:47:32",
            "last_seen_utc": "2026-09-01 02:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869382": [
        {
            "ioc_value": "185.92.190.176:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 11:47:16",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869381": [
        {
            "ioc_value": "185.92.190.173:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 11:47:15",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869380": [
        {
            "ioc_value": "139.199.3.92:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 11:47:09",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869379": [
        {
            "ioc_value": "wwohee.sweethannahs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 11:46:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869378": [
        {
            "ioc_value": "sweethannahs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 11:44:53",
            "last_seen_utc": "2026-08-09 03:53:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869377": [
        {
            "ioc_value": "aavehmy.therodeoroundup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 11:39:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869376": [
        {
            "ioc_value": "therodeoroundup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 11:38:44",
            "last_seen_utc": "2026-08-07 11:52:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869375": [
        {
            "ioc_value": "health.duskpoint27.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-06 11:20:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869374": [
        {
            "ioc_value": "46.151.182.135:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 11:15:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/706010061f5682cf131c7be3e1ae82a779994ec61ab2efec5d7921f08c6abe8b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869372": [
        {
            "ioc_value": "ugf0s31h.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 11:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869370": [
        {
            "ioc_value": "gxtjuf.supremepaintingandrestoration.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 11:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869369": [
        {
            "ioc_value": "45.88.91.117:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-06 11:00:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa6656a2c30c4ac0a97d8b1ac86692f5c0a5d41092ac02be096b74e1533405a4/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869368": [
        {
            "ioc_value": "supremepaintingandrestoration.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:58:53",
            "last_seen_utc": "2026-08-09 01:22:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869364": [
        {
            "ioc_value": "robotpi8812.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 10:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869365": [
        {
            "ioc_value": "https://robotpi8812.buzz/ext.175bff89979f.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869366": [
        {
            "ioc_value": "https://robotpi8812.buzz/ext-b.69c10e7bc29b.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 10:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869367": [
        {
            "ioc_value": "https://robotpi8812.buzz/t.188cfd3975db.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 10:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869363": [
        {
            "ioc_value": "qxowqwa.theriveroaks1603.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:54:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869362": [
        {
            "ioc_value": "theriveroaks1603.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:53:15",
            "last_seen_utc": "2026-08-06 10:54:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869361": [
        {
            "ioc_value": "n7u8r9di.romeroautodetails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:49:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869360": [
        {
            "ioc_value": "pik.tb88cuka.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-06 10:40:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869353": [
        {
            "ioc_value": "loerpos.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 10:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869350": [
        {
            "ioc_value": "oqavsq.sunvalleysurf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:18:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869349": [
        {
            "ioc_value": "freshmorningdew.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-08-06 10:18:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869348": [
        {
            "ioc_value": "sunvalleysurf.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:13:35",
            "last_seen_utc": "2026-08-06 10:13:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869347": [
        {
            "ioc_value": "rgiisgy.thelovebugsband.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:10:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869346": [
        {
            "ioc_value": "thelovebugsband.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 10:07:44",
            "last_seen_utc": "2026-08-08 17:04:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869339": [
        {
            "ioc_value": "94.154.32.48:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 09:46:43",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869338": [
        {
            "ioc_value": "88.214.26.49:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 09:46:35",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869337": [
        {
            "ioc_value": "80.225.83.93:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 09:46:27",
            "last_seen_utc": "2026-09-01 02:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869336": [
        {
            "ioc_value": "57.154.16.251:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 09:46:15",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869335": [
        {
            "ioc_value": "31.77.145.53:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 09:45:42",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869334": [
        {
            "ioc_value": "209.99.190.23:56013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 09:44:47",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869333": [
        {
            "ioc_value": "207.174.0.234:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 09:44:43",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869332": [
        {
            "ioc_value": "206.123.129.171:7720",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-06 09:44:42",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869331": [
        {
            "ioc_value": "20.168.52.142:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 09:44:38",
            "last_seen_utc": "2026-09-01 02:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869330": [
        {
            "ioc_value": "20.150.148.238:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 09:44:37",
            "last_seen_utc": "2026-09-01 02:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869329": [
        {
            "ioc_value": "196.64.146.72:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 09:44:32",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869327": [
        {
            "ioc_value": "186.112.66.56:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-08-06 09:44:19",
            "last_seen_utc": "2026-09-01 02:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869328": [
        {
            "ioc_value": "186.169.88.130:9031",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-06 09:44:19",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869326": [
        {
            "ioc_value": "172.239.45.42:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-06 09:43:59",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869324": [
        {
            "ioc_value": "159.203.69.210:22555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-06 09:43:50",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869325": [
        {
            "ioc_value": "159.203.69.210:5800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-06 09:43:50",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869323": [
        {
            "ioc_value": "134.122.132.28:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-06 09:43:25",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869322": [
        {
            "ioc_value": "clqidi.sunluckchineserestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 09:30:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869321": [
        {
            "ioc_value": "sunluckchineserestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 09:27:55",
            "last_seen_utc": "2026-08-06 09:28:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869320": [
        {
            "ioc_value": "xrafxsq.thefenceguysinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 09:23:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869319": [
        {
            "ioc_value": "thefenceguysinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 09:22:14",
            "last_seen_utc": "2026-08-06 09:22:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869318": [
        {
            "ioc_value": "imobilityes.cabvlliahermosa.com.mx",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-06 09:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9b07add3577cc11ab7b2db5e506dd6b7780b5d51618472ff1de02d8066a68b79/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869317": [
        {
            "ioc_value": "46.151.182.234:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-06 09:18:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9b07add3577cc11ab7b2db5e506dd6b7780b5d51618472ff1de02d8066a68b79/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869316": [
        {
            "ioc_value": "ftp.sanchezamador.com.mx",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-06 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869313": [
        {
            "ioc_value": "93.152.221.158:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 09:03:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d55810c4d73327ddfa13bb3603699cb46a7a8b61d34823ade9c1dc6416e666d6/",
            "tags": "RAT,RemcosRAt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869312": [
        {
            "ioc_value": "217.60.195.118:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 09:02:08",
            "last_seen_utc": "2026-08-31 09:13:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a99039b4ba0da4c05516d43a10dbccc34757b1e3c7b9de7a67d35d667b19948b/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869311": [
        {
            "ioc_value": "lxxlxxnew.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-06 08:47:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9f3a86b405215f41fbead814db46b71b70fdc6d3be85d8e0a963914642335f31/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869310": [
        {
            "ioc_value": "c6ta3e1a.remenacevintage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 08:46:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869309": [
        {
            "ioc_value": "161.248.179.98:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 08:45:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1785db0cee90d76004983b741c8a059d9e1b3811765723ec38bff1da10c4e5f3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869308": [
        {
            "ioc_value": "rtvzcs.sultan88.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 08:45:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869307": [
        {
            "ioc_value": "sultan88.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 08:42:29",
            "last_seen_utc": "2026-08-06 08:43:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869306": [
        {
            "ioc_value": "ngzhdgm.thecharcuteriebeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 08:42:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869305": [
        {
            "ioc_value": "49.13.169.214:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-08-06 08:38:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869303": [
        {
            "ioc_value": "022kgyq9.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 08:36:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869304": [
        {
            "ioc_value": "thecharcuteriebeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 08:36:37",
            "last_seen_utc": "2026-08-09 08:55:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869302": [
        {
            "ioc_value": "54.80.154.193:5751",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-06 08:32:18",
            "last_seen_utc": "2026-08-11 12:59:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3a2584e9d358beacb1c65df6697c26e08d3bbd40febb1f4d94e3bc615b55a126/",
            "tags": "geo,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869301": [
        {
            "ioc_value": "vmi3467394.contaboserver.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-06 08:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3897688/",
            "tags": "geo,Grandoreiro,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869300": [
        {
            "ioc_value": "46.151.182.172:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-06 08:11:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e799024a27c1f6be7cc01701f95b509cebc661e5302a5ea498c52798689d3931/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869296": [
        {
            "ioc_value": "64.89.161.65:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-06 08:05:06",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869295": [
        {
            "ioc_value": "isqacg.streamsurge.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:59:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869294": [
        {
            "ioc_value": "streamsurge.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:56:56",
            "last_seen_utc": "2026-08-06 07:57:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869291": [
        {
            "ioc_value": "http://2.26.252.48:8080/gate/handshake",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 07:53:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10d70c37b96b76b15e379358151bbd65216b9409e5fb9aefe2561afa40e73e85/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869292": [
        {
            "ioc_value": "http://2.26.252.48:8080/gate/complete",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 07:53:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10d70c37b96b76b15e379358151bbd65216b9409e5fb9aefe2561afa40e73e85/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869293": [
        {
            "ioc_value": "http://2.26.252.48:8080/gate/chunk",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 07:53:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10d70c37b96b76b15e379358151bbd65216b9409e5fb9aefe2561afa40e73e85/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869290": [
        {
            "ioc_value": "sribcag.starfishdancestudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869289": [
        {
            "ioc_value": "starfishdancestudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:51:08",
            "last_seen_utc": "2026-08-06 07:51:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869288": [
        {
            "ioc_value": "asyfrainvite.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-06 07:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,ScreenConnect",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869287": [
        {
            "ioc_value": "144.202.88.116:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 07:27:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a83566043e748093119720d9365ee26c3cefebf431fa98e556de2bfc4da50b60/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869286": [
        {
            "ioc_value": "https://2.26.96.192/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 07:25:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f5c2c34d612134649f0cae07b5bd9abb7e23e778d163c2fbc6c61407a4a2f1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869285": [
        {
            "ioc_value": "2.26.96.192:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 07:25:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f5c2c34d612134649f0cae07b5bd9abb7e23e778d163c2fbc6c61407a4a2f1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869284": [
        {
            "ioc_value": "154.221.25.38:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 07:24:00",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869283": [
        {
            "ioc_value": "83.229.123.185:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 07:23:47",
            "last_seen_utc": "2026-08-06 11:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869274": [
        {
            "ioc_value": "110.42.64.35:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 07:15:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869282": [
        {
            "ioc_value": "zyzdto.storia-riferimenti.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:13:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869281": [
        {
            "ioc_value": "wcsfgwq.springsconstruction.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:12:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869280": [
        {
            "ioc_value": "storia-riferimenti.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:11:29",
            "last_seen_utc": "2026-08-06 07:12:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869279": [
        {
            "ioc_value": "springsconstruction.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 07:10:07",
            "last_seen_utc": "2026-08-08 00:03:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869259": [
        {
            "ioc_value": "http://27.215.126.152:33758/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-06 07:02:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.215.126.152",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869270": [
        {
            "ioc_value": "216.9.226.211:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 07:02:54",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869271": [
        {
            "ioc_value": "216.9.226.211:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 07:02:54",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869273": [
        {
            "ioc_value": "188.166.222.192:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 07:02:53",
            "last_seen_utc": "2026-08-13 12:49:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869272": [
        {
            "ioc_value": "156.246.90.214:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-06 07:02:52",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1869269": [
        {
            "ioc_value": "hxbvznvv.naolemedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:57:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869268": [
        {
            "ioc_value": "sz3f5zti.reconciliationintl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:46:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869267": [
        {
            "ioc_value": "donta.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 06:35:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/140aca6ee1b19a24e5056fbf3049e5fdd54b1b84cb4390fcb3cec785ac0c9c93/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869266": [
        {
            "ioc_value": "103.83.86.143:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 06:26:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/671c01c2dd70bc8f367cae2b177ef2b65f7ec0e88da4e812fb89f09f3e48b9c4/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869265": [
        {
            "ioc_value": "qsfmut.storageinridgecrest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:26:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869264": [
        {
            "ioc_value": "storageinridgecrest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:25:44",
            "last_seen_utc": "2026-08-08 02:52:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869263": [
        {
            "ioc_value": "kpwogzd.spotlightstudioofdance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:25:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869262": [
        {
            "ioc_value": "spotlightstudioofdance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:24:37",
            "last_seen_utc": "2026-08-06 06:25:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869261": [
        {
            "ioc_value": "oiewpbg.spirosnet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:23:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869260": [
        {
            "ioc_value": "155.103.69.20:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 06:23:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c096d3606a939429c0ebd8e53ae76cb7c67fd2098848fd3b1af7af34ef332f8b/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869258": [
        {
            "ioc_value": "194.59.31.174:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 06:15:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/591c06caf5213c5c0ed508696e1eae0fd31c90928252f4bd053e2399d7a0027e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869257": [
        {
            "ioc_value": "195.186.4.217:2466",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-06 06:12:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5b6dd7d1749c50fd6bb306055f570f78e9fb939f2dc7cab54e1bb69b8cbb269b/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869255": [
        {
            "ioc_value": "dexvfy.sivasumutemlak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 06:01:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869254": [
        {
            "ioc_value": "141.98.10.179:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-06 05:52:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca928e3611a0c99121b7969b1207153bbd86e7273b3b0dc384a1699856718636/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869253": [
        {
            "ioc_value": "46.151.182.159:11200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-06 05:51:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75e5f9ac8c8e44fa09fbe405296bc6644668458a5951f7e2625e271526a0e67f/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869251": [
        {
            "ioc_value": "nick-metry.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869252": [
        {
            "ioc_value": "194.33.35.80:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869248": [
        {
            "ioc_value": "196.251.107.131:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 05:39:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869249": [
        {
            "ioc_value": "196.251.107.131:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 05:39:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869250": [
        {
            "ioc_value": "196.251.107.131:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 05:39:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869247": [
        {
            "ioc_value": "xxhgrvi.specialtypopupevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 05:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869246": [
        {
            "ioc_value": "http://192.162.199.186/zpzp/get.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-06 05:37:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/124cf79f222ef8b88f4d0e2e474378c5a7ab8a3c513d2434037ef0acfd79c984/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869243": [
        {
            "ioc_value": "87.58.197.40:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 05:35:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32dffaea1d2a0713f83910f760ec3ad0562555ff2c2f4bb7edf5c3c0a37c7b89/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869244": [
        {
            "ioc_value": "87.58.197.40:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 05:35:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32dffaea1d2a0713f83910f760ec3ad0562555ff2c2f4bb7edf5c3c0a37c7b89/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869245": [
        {
            "ioc_value": "87.58.197.40:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-06 05:35:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32dffaea1d2a0713f83910f760ec3ad0562555ff2c2f4bb7edf5c3c0a37c7b89/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869242": [
        {
            "ioc_value": "specialtypopupevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 05:32:53",
            "last_seen_utc": "2026-08-08 00:03:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869239": [
        {
            "ioc_value": "berg-lifesciences.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 05:21:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869240": [
        {
            "ioc_value": "schaffhauserbuchwoche.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 05:21:40",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869208": [
        {
            "ioc_value": "dzcghm.singermegha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 05:14:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869190": [
        {
            "ioc_value": "claire-tyler.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 05:11:29",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869031": [
        {
            "ioc_value": "447ead614a3eadc8c5c769ca18947a03865dedfc8e9eb633548ffa3d7e877c7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-06 05:10:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260804-zzr9tszgnh",
            "tags": "etherhiding,msi,nodejs,RevStealer,SamopisV2",
            "anonymous": 0,
            "reporter": "joce64"
        }
    ],
    "1869062": [
        {
            "ioc_value": "metrix-getrix.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869072": [
        {
            "ioc_value": "http://qaqgkowgjgfao.yougriddonaldsfile.com/s/psc4/pr?cl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869073": [
        {
            "ioc_value": "https://qaqgkowgjgfao.yougriddonaldsfile.com/d/cani",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869074": [
        {
            "ioc_value": "https://qaqgkowgjgfao.yougriddonaldsfile.com/s/psc4?cl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869075": [
        {
            "ioc_value": "https://pub-1f5a501a59d74a6a97e77126cf1fc526.r2.dev/ohijfalqvzldlhaqw.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869076": [
        {
            "ioc_value": "yougriddonaldsfile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869078": [
        {
            "ioc_value": "3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869077": [
        {
            "ioc_value": "0f13b40dc73d7a0f46448999cb90db3dae68826c9616bf14c92268d210845b02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3193e4322946e299107786cb6810a3c179879d4b7362250e488c69fd834d4eda",
            "tags": "clickfix,dns-c2,etherhiding,inno-setup,python,rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1869082": [
        {
            "ioc_value": "38.207.178.195:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:22",
            "last_seen_utc": "2026-08-13 08:51:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869083": [
        {
            "ioc_value": "crit-pimetri.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 05:10:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869113": [
        {
            "ioc_value": "78.17.93.55:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 05:10:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "2110,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1869114": [
        {
            "ioc_value": "146.56.195.201:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-06 05:10:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45090,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1869122": [
        {
            "ioc_value": "167.172.188.177:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:20",
            "last_seen_utc": "2026-08-13 12:49:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869123": [
        {
            "ioc_value": "159.65.136.5:7647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-06 05:10:19",
            "last_seen_utc": "2026-09-01 03:42:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869124": [
        {
            "ioc_value": "159.203.172.232:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:18",
            "last_seen_utc": "2026-08-13 13:21:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869125": [
        {
            "ioc_value": "188.166.222.192:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:18",
            "last_seen_utc": "2026-08-13 13:23:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869126": [
        {
            "ioc_value": "161.35.48.40:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:16",
            "last_seen_utc": "2026-08-13 13:24:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869127": [
        {
            "ioc_value": "165.245.178.39:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:15",
            "last_seen_utc": "2026-08-13 13:20:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869128": [
        {
            "ioc_value": "139.59.144.8:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:15",
            "last_seen_utc": "2026-08-13 13:23:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869133": [
        {
            "ioc_value": "38.207.178.195:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-06 05:10:14",
            "last_seen_utc": "2026-08-12 22:57:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1869166": [
        {
            "ioc_value": "health.harborcoast.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-06 04:57:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869149": [
        {
            "ioc_value": "shalom-espace-bien-etre.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 04:51:14",
            "last_seen_utc": "2026-08-27 07:10:00",
            "confidence_level": 90,
            "is_compromised": true,
            "reference": null,
            "tags": "compromised,EtherHide",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869148": [
        {
            "ioc_value": "wzylmwb.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 04:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869147": [
        {
            "ioc_value": "ultraspeed.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-06 04:47:24",
            "last_seen_utc": "2026-08-20 18:13:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869142": [
        {
            "ioc_value": "mkpge1n5.realmanpath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 04:45:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869141": [
        {
            "ioc_value": "kxxutu.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 04:29:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869140": [
        {
            "ioc_value": "gamqhhz.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 04:05:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869136": [
        {
            "ioc_value": "vvcbgf.spareing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 03:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869135": [
        {
            "ioc_value": "1vqj02ep.myboutiqswitch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 03:36:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869134": [
        {
            "ioc_value": "mboshll.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 03:16:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869132": [
        {
            "ioc_value": "ubcvxb.southwestautoupholstery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 02:57:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869131": [
        {
            "ioc_value": "9vn1ctfe.partyboxlovely.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 02:46:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869130": [
        {
            "ioc_value": "c8bl0t87.nailhousechicago.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 02:44:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869129": [
        {
            "ioc_value": "lqfzdiu.sifootandankle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 02:31:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869121": [
        {
            "ioc_value": "jboqfo.sonnysdetailshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 02:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869117": [
        {
            "ioc_value": "yyephml.osbratstvojedinstvo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 01:44:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869116": [
        {
            "ioc_value": "epwjdx.sim-trucking.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 01:27:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869112": [
        {
            "ioc_value": "wftmzym.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 01:01:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869111": [
        {
            "ioc_value": "bnbwupr9.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 00:44:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869110": [
        {
            "ioc_value": "cxfpzh.sandblastingaustin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 00:40:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869109": [
        {
            "ioc_value": "hkhzyje.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-06 00:13:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869106": [
        {
            "ioc_value": "xuucwi.rya-yorkshire.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 23:56:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869105": [
        {
            "ioc_value": "217.154.212.25:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 23:47:16",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869104": [
        {
            "ioc_value": "100.82.195.65:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 23:46:54",
            "last_seen_utc": "2026-09-01 02:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869103": [
        {
            "ioc_value": "hp.tailc223d4.ts.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 23:46:49",
            "last_seen_utc": "2026-09-01 02:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869102": [
        {
            "ioc_value": "hmfxjrh.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 23:32:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869101": [
        {
            "ioc_value": "qnssac.sleepwellmattressandfurniture.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 23:10:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869100": [
        {
            "ioc_value": "sleepwellmattressandfurniture.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 23:08:43",
            "last_seen_utc": "2026-08-07 15:13:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869092": [
        {
            "ioc_value": "i9weuy04.peacefulacrestx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 22:45:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869091": [
        {
            "ioc_value": "genrols.gamestwists.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 22:45:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869090": [
        {
            "ioc_value": "grm86x94.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 22:34:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869089": [
        {
            "ioc_value": "0zhx0obs.mustlovedogsmobilegrooming.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 22:33:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869088": [
        {
            "ioc_value": "fxdrze.sivasumutemlak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 22:24:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869081": [
        {
            "ioc_value": "dbndtif.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 21:48:46",
            "last_seen_utc": "2026-08-21 06:57:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869080": [
        {
            "ioc_value": "kwswwx.singermegha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 21:42:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869079": [
        {
            "ioc_value": "singermegha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 21:37:36",
            "last_seen_utc": "2026-08-06 22:49:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869068": [
        {
            "ioc_value": "bnxrnoc.revivebyviv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 21:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869067": [
        {
            "ioc_value": "pjzmil.sim-trucking.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:57:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869066": [
        {
            "ioc_value": "sim-trucking.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:52:09",
            "last_seen_utc": "2026-08-07 15:13:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869065": [
        {
            "ioc_value": "2r7klyjg.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:46:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869064": [
        {
            "ioc_value": "vwpkjni.spareing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:10:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869063": [
        {
            "ioc_value": "spareing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:08:16",
            "last_seen_utc": "2026-08-07 15:13:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869061": [
        {
            "ioc_value": "dscdkc.silvereagleproof.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:07:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869060": [
        {
            "ioc_value": "silvereagleproof.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 20:06:34",
            "last_seen_utc": "2026-08-05 20:07:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869057": [
        {
            "ioc_value": "94.250.176.76:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-05 19:47:11",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869055": [
        {
            "ioc_value": "85.209.87.84:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 19:46:59",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869056": [
        {
            "ioc_value": "86.48.16.94:30200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 19:46:59",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869054": [
        {
            "ioc_value": "72.14.136.55:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 19:46:50",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869052": [
        {
            "ioc_value": "64.95.13.164:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 19:46:47",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869053": [
        {
            "ioc_value": "64.95.13.164:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 19:46:47",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869051": [
        {
            "ioc_value": "45.59.120.82:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-05 19:46:26",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869050": [
        {
            "ioc_value": "206.123.129.171:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 19:44:59",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869047": [
        {
            "ioc_value": "196.251.107.131:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 19:44:48",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869048": [
        {
            "ioc_value": "196.64.146.72:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 19:44:48",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869049": [
        {
            "ioc_value": "196.64.146.72:5001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 19:44:48",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869046": [
        {
            "ioc_value": "185.212.129.31:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 19:44:31",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869044": [
        {
            "ioc_value": "185.212.129.170:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869045": [
        {
            "ioc_value": "185.212.129.25:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869043": [
        {
            "ioc_value": "185.212.128.181:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 19:44:29",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869042": [
        {
            "ioc_value": "185.212.128.124:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869041": [
        {
            "ioc_value": "185.174.103.243:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869040": [
        {
            "ioc_value": "178.16.53.222:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 19:44:19",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869039": [
        {
            "ioc_value": "172.81.132.75:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 19:44:13",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869038": [
        {
            "ioc_value": "159.203.69.210:23501",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 19:44:00",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869037": [
        {
            "ioc_value": "154.247.251.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 19:43:48",
            "last_seen_utc": "2026-09-01 02:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869036": [
        {
            "ioc_value": "130.12.181.96:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-05 19:43:28",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1869035": [
        {
            "ioc_value": "kfatmif.southwestautoupholstery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 19:27:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869034": [
        {
            "ioc_value": "southwestautoupholstery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 19:22:42",
            "last_seen_utc": "2026-08-07 15:08:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869033": [
        {
            "ioc_value": "guzgri.sifootandankle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 19:21:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869032": [
        {
            "ioc_value": "sifootandankle.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 19:21:05",
            "last_seen_utc": "2026-08-07 15:13:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869030": [
        {
            "ioc_value": "158.220.100.51:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 19:05:06",
            "last_seen_utc": "2026-09-01 02:43:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869029": [
        {
            "ioc_value": "134.209.146.147:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 19:05:05",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869020": [
        {
            "ioc_value": "http://66.212.186.197:33407/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 18:55:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/66.212.186.197",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869021": [
        {
            "ioc_value": "http://103.148.128.153:33343/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 18:55:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.148.128.153",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1869028": [
        {
            "ioc_value": "cod2d8fn.osbratstvojedinstvo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 18:46:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869027": [
        {
            "ioc_value": "cqzfob.shopnearlynew.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 18:40:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869026": [
        {
            "ioc_value": "https://spc.y8slot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 18:40:05",
            "last_seen_utc": "2026-08-19 16:19:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1869024": [
        {
            "ioc_value": "kmnqlnx.sonnysdetailshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 18:38:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869023": [
        {
            "ioc_value": "sonnysdetailshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 18:37:14",
            "last_seen_utc": "2026-08-07 15:08:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869022": [
        {
            "ioc_value": "shopnearlynew.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 18:35:32",
            "last_seen_utc": "2026-08-07 15:08:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869016": [
        {
            "ioc_value": "udfbiyb.solanatuzla.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:53:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869015": [
        {
            "ioc_value": "solanatuzla.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:51:46",
            "last_seen_utc": "2026-08-05 17:52:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869014": [
        {
            "ioc_value": "rntyfl.shopmamadora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:50:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869013": [
        {
            "ioc_value": "socomufflerandradiator.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:50:27",
            "last_seen_utc": "2026-08-07 15:13:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869012": [
        {
            "ioc_value": "shopmamadora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:50:06",
            "last_seen_utc": "2026-08-05 17:50:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1869011": [
        {
            "ioc_value": "http://opeaadn.click:2993",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 17:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869010": [
        {
            "ioc_value": "jirhjn1r.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869009": [
        {
            "ioc_value": "relay0.aquadisplay.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-05 17:31:03",
            "last_seen_utc": "2026-08-05 19:07:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1869008": [
        {
            "ioc_value": "tfqmi9dx.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:23:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869007": [
        {
            "ioc_value": "sltrtc.shopmakeit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:07:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869006": [
        {
            "ioc_value": "mbgoqhu.soba-udon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:06:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1869000": [
        {
            "ioc_value": "8.156.69.157:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 17:05:05",
            "last_seen_utc": "2026-09-01 02:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868999": [
        {
            "ioc_value": "soba-udon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:04:56",
            "last_seen_utc": "2026-08-05 17:06:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868998": [
        {
            "ioc_value": "shopmakeit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 17:04:31",
            "last_seen_utc": "2026-08-07 15:08:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868985": [
        {
            "ioc_value": "thdd.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868986": [
        {
            "ioc_value": "thryvx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868987": [
        {
            "ioc_value": "tigercredit.io.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868988": [
        {
            "ioc_value": "timvay.io.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868989": [
        {
            "ioc_value": "tradesolutions.co.za",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868990": [
        {
            "ioc_value": "vinhanh.io.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868991": [
        {
            "ioc_value": "visionverte.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868992": [
        {
            "ioc_value": "vivaylien.io.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:42",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868975": [
        {
            "ioc_value": "radioafriquefrance.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:41",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868976": [
        {
            "ioc_value": "roofingcompanyfortlauderdale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:41",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868977": [
        {
            "ioc_value": "roxenemedicale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:41",
            "last_seen_utc": "2026-08-26 21:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868978": [
        {
            "ioc_value": "royalcollectioncigars.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:41",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868981": [
        {
            "ioc_value": "southcalnewhomes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:41",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868982": [
        {
            "ioc_value": "spendorstash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:41",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868962": [
        {
            "ioc_value": "mnainnovations.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868963": [
        {
            "ioc_value": "moneyja.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868964": [
        {
            "ioc_value": "mrcleanandshine.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868965": [
        {
            "ioc_value": "muratilawoffice.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868966": [
        {
            "ioc_value": "nationalbiblebeeng.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868967": [
        {
            "ioc_value": "neworleansdentrepairs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868968": [
        {
            "ioc_value": "noelwellness.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868969": [
        {
            "ioc_value": "noticias29.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868971": [
        {
            "ioc_value": "peritdm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:40",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868951": [
        {
            "ioc_value": "gpsbyte.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:39",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868952": [
        {
            "ioc_value": "gt-tours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:39",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868955": [
        {
            "ioc_value": "hotrez.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:39",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868958": [
        {
            "ioc_value": "jennamarsh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:39",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868959": [
        {
            "ioc_value": "klinikrizkangar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:39",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868948": [
        {
            "ioc_value": "fsrzcnc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:38",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868937": [
        {
            "ioc_value": "assessoriamusicalsalvador.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:37",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868938": [
        {
            "ioc_value": "bananinewthaiispa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:37",
            "last_seen_utc": "2026-08-26 21:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868940": [
        {
            "ioc_value": "chillandgo.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:37",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868942": [
        {
            "ioc_value": "cotienxai.io.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:37",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868943": [
        {
            "ioc_value": "cryptoainews.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-05 16:55:37",
            "last_seen_utc": "2026-08-26 21:48:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1868936": [
        {
            "ioc_value": "x0ih2pfd.scottpwilliamslaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:43:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868935": [
        {
            "ioc_value": "scottpwilliamslaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:42:18",
            "last_seen_utc": "2026-08-07 15:08:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868934": [
        {
            "ioc_value": "xrvyums.soapexcosmetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:35:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868933": [
        {
            "ioc_value": "sci-search.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:34:53",
            "last_seen_utc": "2026-08-07 15:08:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868932": [
        {
            "ioc_value": "soapexcosmetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:31:41",
            "last_seen_utc": "2026-08-07 15:08:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868931": [
        {
            "ioc_value": "snehaindiancuisine.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:30:32",
            "last_seen_utc": "2026-08-05 16:31:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868930": [
        {
            "ioc_value": "cjafok.shieldshardwareandsupply.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 16:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868916": [
        {
            "ioc_value": "metrix-getrix.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 16:20:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868917": [
        {
            "ioc_value": "46.226.167.158:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 16:20:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868928": [
        {
            "ioc_value": "corrykro.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 16:20:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868923": [
        {
            "ioc_value": "ofxeunc.snappersclinton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 15:47:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868922": [
        {
            "ioc_value": "snappersclinton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 15:45:01",
            "last_seen_utc": "2026-08-07 15:08:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868921": [
        {
            "ioc_value": "hkfnxx.serinide.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 15:38:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868920": [
        {
            "ioc_value": "jjbtigm.smellhomesweethomeservices.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 15:36:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868919": [
        {
            "ioc_value": "smellhomesweethomeservices.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 15:34:38",
            "last_seen_utc": "2026-08-05 15:35:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868918": [
        {
            "ioc_value": "serinide.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 15:33:31",
            "last_seen_utc": "2026-08-07 15:08:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868915": [
        {
            "ioc_value": "http://resghjs.click:7647",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1868904": [
        {
            "ioc_value": "156.225.94.168:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-05 15:26:45",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@james_inthe_box/117043079612634956",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1868914": [
        {
            "ioc_value": "http://dafkov.shop:6843",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 15:14:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1868908": [
        {
            "ioc_value": "http://citife.top:2930",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 15:03:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1868905": [
        {
            "ioc_value": "jabejsp.smallenginesolutionsllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:51:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868903": [
        {
            "ioc_value": "smallenginesolutionsllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:49:11",
            "last_seen_utc": "2026-08-07 15:08:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868902": [
        {
            "ioc_value": "pdmdrg.riptidefastpitch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:48:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868900": [
        {
            "ioc_value": "vj5hjueh.santaanademolitionservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:36:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868899": [
        {
            "ioc_value": "santaanademolitionservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:34:27",
            "last_seen_utc": "2026-08-05 14:35:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868898": [
        {
            "ioc_value": "wss.vectorplatform.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-08-05 14:31:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ACRStealer,ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868897": [
        {
            "ioc_value": "161.248.14.209:5223",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-05 14:25:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c33bf27dc5e7c57f95cc10e6480e54faea225df318ae994117d60a231149347b/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868896": [
        {
            "ioc_value": "161.248.14.209:5222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-05 14:20:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868895": [
        {
            "ioc_value": "qzhuqva.samuelbarbershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:05:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868891": [
        {
            "ioc_value": "gciluz.richardcorfield.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868890": [
        {
            "ioc_value": "samuelbarbershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:03:37",
            "last_seen_utc": "2026-08-07 15:08:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868889": [
        {
            "ioc_value": "richardcorfield.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 14:03:14",
            "last_seen_utc": "2026-08-05 14:03:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868888": [
        {
            "ioc_value": "154.86.119.228:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 14:02:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3764f4b259a72b12422956f553eba62edc7a0b21cf628e839d24150e701e0a69/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868887": [
        {
            "ioc_value": "katalizatorotzhigi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 14:01:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868886": [
        {
            "ioc_value": "vivaldinotabot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 14:01:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868884": [
        {
            "ioc_value": "cqylt.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 13:59:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3764f4b259a72b12422956f553eba62edc7a0b21cf628e839d24150e701e0a69/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868885": [
        {
            "ioc_value": "zuodx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 13:59:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3764f4b259a72b12422956f553eba62edc7a0b21cf628e839d24150e701e0a69/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868882": [
        {
            "ioc_value": "195.222.53.130:2930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 13:40:56",
            "last_seen_utc": "2026-08-08 22:52:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6ed07eee8b090ad8c77052912c8a29a6,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868878": [
        {
            "ioc_value": "bloodhorn8123.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 13:40:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868879": [
        {
            "ioc_value": "farrhaio4123.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 13:40:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868880": [
        {
            "ioc_value": "176.124.220.69:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 13:40:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868881": [
        {
            "ioc_value": "77.110.125.194:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 13:40:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868877": [
        {
            "ioc_value": "196.251.107.112:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlay_rat",
            "malware_alias": null,
            "malware_printable": "Overlay RAT",
            "first_seen_utc": "2026-08-05 13:32:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/920f6d5e4fea636959543da0e7f629c045dd4c922d39db887bcf3fdb141cbc53/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868871": [
        {
            "ioc_value": "167.172.71.69:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 13:27:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868874": [
        {
            "ioc_value": "142.132.211.95:4938",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 13:27:18",
            "last_seen_utc": "2026-08-09 03:40:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "18464deb5c573a0c110ed3fc702af680,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868876": [
        {
            "ioc_value": "updbwip.samoamotors.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 13:23:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868875": [
        {
            "ioc_value": "samoamotors.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 13:18:25",
            "last_seen_utc": "2026-08-07 15:08:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868873": [
        {
            "ioc_value": "slccac.rhillsmotorsport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 13:18:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868872": [
        {
            "ioc_value": "rhillsmotorsport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 13:17:01",
            "last_seen_utc": "2026-08-07 15:08:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868870": [
        {
            "ioc_value": "104.168.115.67:8999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-05 13:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b1dabbfe2c04844a66af86cee2360fbe2468a1fa1e57f18cff30f3daeaab3005/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868869": [
        {
            "ioc_value": "91.92.42.221:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-05 13:06:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2f123fe5d768abe06cbf9a74e865787c65eacb2f63a541fde3edc6807952c4f1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868863": [
        {
            "ioc_value": "78.40.209.113:7081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hype_agent",
            "malware_alias": null,
            "malware_printable": "HypeAgent",
            "first_seen_utc": "2026-08-05 12:48:05",
            "last_seen_utc": "2026-08-18 10:56:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8250a70c59f1cffd6332014b3567d6fb0c98727819b93fca3a4b4a6abc53f8f8/",
            "tags": "HypeAgent",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868862": [
        {
            "ioc_value": "gxnroradpdvvwchhyi.oasisoutdoorliving.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:45:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868860": [
        {
            "ioc_value": "soft-update.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 12:41:14",
            "last_seen_utc": "2026-08-27 05:17:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868859": [
        {
            "ioc_value": "attr-sdk.tech",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 12:41:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868858": [
        {
            "ioc_value": "204.44.69.223:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-05 12:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868857": [
        {
            "ioc_value": "abmrct.rhettskateboarding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:36:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868856": [
        {
            "ioc_value": "fzsehld.salemcountyarrests.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868854": [
        {
            "ioc_value": "g6e17ret.sanderscollision.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:35:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868855": [
        {
            "ioc_value": "152.232.80.154:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 12:35:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0479d02c1da620602459275de6ffc89e56fbb4db2a84969d56a2544f83f9322b/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868853": [
        {
            "ioc_value": "relay.stingold.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 12:35:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0479d02c1da620602459275de6ffc89e56fbb4db2a84969d56a2544f83f9322b/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868852": [
        {
            "ioc_value": "sanderscollision.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:34:01",
            "last_seen_utc": "2026-08-07 15:08:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868849": [
        {
            "ioc_value": "salemcountyarrests.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:32:44",
            "last_seen_utc": "2026-08-07 15:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868847": [
        {
            "ioc_value": "h8egsuh2.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:26:07",
            "last_seen_utc": "2026-08-20 11:29:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868846": [
        {
            "ioc_value": "g9l6s9w5.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:21:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868845": [
        {
            "ioc_value": "hfbuvga.rya-yorkshire.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:19:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868844": [
        {
            "ioc_value": "82.21.185.95:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 12:17:33",
            "last_seen_utc": "2026-08-20 13:18:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d20a4a83a75724b81c7e187f1e391125ac89b95488a2d101f5a808ffed1a89b2/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868843": [
        {
            "ioc_value": "rya-yorkshire.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 12:13:50",
            "last_seen_utc": "2026-08-05 23:55:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868842": [
        {
            "ioc_value": "vicblessings.noip.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 12:10:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1905aec89ddae7777882af792d908088013bad8a16e993567cd20573527895d9/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868841": [
        {
            "ioc_value": "64.89.160.29:4500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 12:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1905aec89ddae7777882af792d908088013bad8a16e993567cd20573527895d9/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868840": [
        {
            "ioc_value": "amazom.my",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 12:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99158b6292e3e4d785e0351b8c5f75a742d1439570a4058ad74e6179d8d8c8d3/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868835": [
        {
            "ioc_value": "54.91.223.28:6675",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.grandoreiro",
            "malware_alias": null,
            "malware_printable": "Grandoreiro",
            "first_seen_utc": "2026-08-05 12:03:11",
            "last_seen_utc": "2026-08-11 12:59:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4a6fef3f7173891b062a37a7b956cca2d2295590840e7582141da7612e3fc7f1/",
            "tags": "geo,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868834": [
        {
            "ioc_value": "devilmaycry.servehumour.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 12:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4a6fef3f7173891b062a37a7b956cca2d2295590840e7582141da7612e3fc7f1/",
            "tags": "geo,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868833": [
        {
            "ioc_value": "ff554ac66a13a1862b632d879e2c199a571a5b0fdc00e77fcad78c0d04d2c344",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:58:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868832": [
        {
            "ioc_value": "91.236.230.87:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:58:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868831": [
        {
            "ioc_value": "admetricslab.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:57:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868830": [
        {
            "ioc_value": "egqzih.revivebyviv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:53:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868829": [
        {
            "ioc_value": "revivebyviv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:52:20",
            "last_seen_utc": "2026-08-07 15:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868828": [
        {
            "ioc_value": "47.83.3.103:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 11:47:40",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868827": [
        {
            "ioc_value": "45.8.159.205:8596",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 11:47:36",
            "last_seen_utc": "2026-09-01 02:47:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868826": [
        {
            "ioc_value": "209.200.246.194:16556",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 11:47:30",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868825": [
        {
            "ioc_value": "169.58.82.229:7788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 11:47:25",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868824": [
        {
            "ioc_value": "ipoweres.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:47:13",
            "last_seen_utc": "2026-08-05 13:42:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868823": [
        {
            "ioc_value": "acac.hopto.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 11:46:59",
            "last_seen_utc": "2026-09-01 02:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868784": [
        {
            "ioc_value": "143.198.206.191:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 11:43:46",
            "last_seen_utc": "2026-08-12 21:57:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868786": [
        {
            "ioc_value": "trokolly4125.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868787": [
        {
            "ioc_value": "109.107.190.26:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868789": [
        {
            "ioc_value": "161.35.153.254:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:45",
            "last_seen_utc": "2026-08-10 09:27:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868790": [
        {
            "ioc_value": "104.248.195.124:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:44",
            "last_seen_utc": "2026-08-10 09:24:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868791": [
        {
            "ioc_value": "104.248.196.94:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:44",
            "last_seen_utc": "2026-08-10 09:30:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868792": [
        {
            "ioc_value": "159.223.214.253:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:42",
            "last_seen_utc": "2026-08-10 09:23:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868793": [
        {
            "ioc_value": "64.227.73.206:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:42",
            "last_seen_utc": "2026-08-10 09:27:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868794": [
        {
            "ioc_value": "64.227.67.30:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:41",
            "last_seen_utc": "2026-08-10 09:24:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868795": [
        {
            "ioc_value": "152.42.134.198:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:41",
            "last_seen_utc": "2026-08-10 09:27:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868796": [
        {
            "ioc_value": "161.35.159.53:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:41",
            "last_seen_utc": "2026-08-10 09:28:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868797": [
        {
            "ioc_value": "159.223.220.225:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 11:43:40",
            "last_seen_utc": "2026-08-10 09:28:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868798": [
        {
            "ioc_value": "hornbeamcairn.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-05 11:43:40",
            "last_seen_utc": "2026-08-12 13:10:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "SmartApeSG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868799": [
        {
            "ioc_value": "https://hornbeamcairn.top/endpoint/handler-stylesheet.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-05 11:43:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "SmartApeSG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868809": [
        {
            "ioc_value": "213.111.146.111:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:43:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "unknown-panel",
            "anonymous": 0,
            "reporter": "f1nd3r"
        }
    ],
    "1868818": [
        {
            "ioc_value": "85.192.31.238:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:43:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868817": [
        {
            "ioc_value": "torrykouu4512.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 11:43:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868816": [
        {
            "ioc_value": "wglfvcf.ryanposocco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868815": [
        {
            "ioc_value": "ryanposocco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:28:10",
            "last_seen_utc": "2026-08-06 14:48:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868814": [
        {
            "ioc_value": "9048c4f05b904a6431f762dc0e49e6fd1a1a8ffa948f6ceed24e4387974d3d9c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 11:20:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868810": [
        {
            "ioc_value": "mol.mesoptik.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 11:20:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868811": [
        {
            "ioc_value": "smc.tb88cuka.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 11:20:23",
            "last_seen_utc": "2026-08-11 04:48:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868812": [
        {
            "ioc_value": "ctlc.tb88cuka.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 11:20:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868813": [
        {
            "ioc_value": "351abe0ae9039c65edba285e72e899376bbbb4e15df92206d1228ca987508032",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 11:20:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Vidar",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868807": [
        {
            "ioc_value": "tyjwtd.remenacevintage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:08:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868806": [
        {
            "ioc_value": "remenacevintage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 11:06:51",
            "last_seen_utc": "2026-08-07 15:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868800": [
        {
            "ioc_value": "yayana.myftp.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 11:00:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/abb9339b50965790e597dd7989e008bcc887c12b5f73d9c7cecae8e35a571d58/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868788": [
        {
            "ioc_value": "yykopfc.rumanishoes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 10:45:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868783": [
        {
            "ioc_value": "nb8myksg.sandblastingaustin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 10:34:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868782": [
        {
            "ioc_value": "sandblastingaustin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 10:33:33",
            "last_seen_utc": "2026-08-07 15:08:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868781": [
        {
            "ioc_value": "ciborin.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-08-05 10:25:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fafe100de22df66721a1bd67c1062c5e17991132d4384fcf5b231e4a2292eb34/",
            "tags": "PhantomStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868780": [
        {
            "ioc_value": "64.89.160.29:4525",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 10:24:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/170a5e08fbd3aa9f22df08c932ab0198c8ba21a9f73fc8fe30747c545bb0e02d/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868779": [
        {
            "ioc_value": "opwiik.reesetransports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 10:22:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868778": [
        {
            "ioc_value": "reesetransports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 10:21:28",
            "last_seen_utc": "2026-08-07 15:08:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868776": [
        {
            "ioc_value": "104.248.199.73:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-08-05 10:19:02",
            "last_seen_utc": "2026-08-10 09:26:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868777": [
        {
            "ioc_value": "89.106.83.205:4242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-05 10:17:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9d3e9cfc3ae89f9c3370248abf19c906660d47d24d6548a0915643fe0fa31bd5/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868771": [
        {
            "ioc_value": "willynop9821.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 10:13:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868772": [
        {
            "ioc_value": "89.208.97.177:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 10:13:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868774": [
        {
            "ioc_value": "98.159.110.118:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 10:12:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e059d1519cb1a781c3a22207acd6610564c4b5df5175e1908261455379e9b93a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868773": [
        {
            "ioc_value": "https://98.159.110.118:80/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 10:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e059d1519cb1a781c3a22207acd6610564c4b5df5175e1908261455379e9b93a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868764": [
        {
            "ioc_value": "94.156.232.211:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-05 10:04:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ae63b978ed0fb657301215221dfa96def5a269596ea7a7e30d237c0927a37b97/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868763": [
        {
            "ioc_value": "ypcfswc.rossandrossenterprisesinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 10:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868762": [
        {
            "ioc_value": "rossandrossenterprisesinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:57:15",
            "last_seen_utc": "2026-08-07 15:08:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868761": [
        {
            "ioc_value": "e89be61054b13216099ac57e5539b357dee125a3f89b6084b49230e1cfb923ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868759": [
        {
            "ioc_value": "basartoto.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:48:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868760": [
        {
            "ioc_value": "suk.magicalegyptwomen.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:48:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868757": [
        {
            "ioc_value": "65.1.70.222:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 09:46:52",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868756": [
        {
            "ioc_value": "64.227.159.29:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:51",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868755": [
        {
            "ioc_value": "64.20.61.215:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 09:46:50",
            "last_seen_utc": "2026-09-01 02:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868754": [
        {
            "ioc_value": "57.154.16.246:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:46",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868753": [
        {
            "ioc_value": "45.38.20.38:8491",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:46:29",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868752": [
        {
            "ioc_value": "43.135.26.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 09:46:19",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868707": [
        {
            "ioc_value": "207.189.11.170:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868708": [
        {
            "ioc_value": "207.189.11.170:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868710": [
        {
            "ioc_value": "blog.derrspecial-onlinedmin.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868711": [
        {
            "ioc_value": "Crestmarkhq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868712": [
        {
            "ioc_value": "subscription-magnetic-recommended-meat.trycloudflare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868714": [
        {
            "ioc_value": "willowgazette.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-05 09:46:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "SmartApeSG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868723": [
        {
            "ioc_value": "45.129.124.182:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868751": [
        {
            "ioc_value": "36.248.232.165:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:13",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868715": [
        {
            "ioc_value": "178.156.164.194:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-08-05 09:46:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "SmartApeSG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868722": [
        {
            "ioc_value": "borrylistu898214.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:46:12",
            "last_seen_utc": "2026-08-05 11:49:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868750": [
        {
            "ioc_value": "217.60.97.106:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:45:56",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868748": [
        {
            "ioc_value": "203.98.68.17:1008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:44:55",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868749": [
        {
            "ioc_value": "203.98.68.29:30300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:44:55",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868747": [
        {
            "ioc_value": "196.251.107.131:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:44:47",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868746": [
        {
            "ioc_value": "194.87.239.245:7682",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868745": [
        {
            "ioc_value": "193.149.185.215:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:44:40",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868744": [
        {
            "ioc_value": "186.244.227.52:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:44:34",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868740": [
        {
            "ioc_value": "186.169.88.130:5012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868741": [
        {
            "ioc_value": "186.169.88.130:9140",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868742": [
        {
            "ioc_value": "186.244.227.104:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868743": [
        {
            "ioc_value": "186.244.227.27:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868736": [
        {
            "ioc_value": "185.212.129.70:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 09:44:29",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868737": [
        {
            "ioc_value": "185.212.129.89:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 09:44:29",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868738": [
        {
            "ioc_value": "185.212.131.112:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 09:44:29",
            "last_seen_utc": "2026-09-01 02:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868739": [
        {
            "ioc_value": "185.212.131.113:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-05 09:44:29",
            "last_seen_utc": "2026-09-01 02:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868735": [
        {
            "ioc_value": "185.174.102.28:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 09:44:26",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868734": [
        {
            "ioc_value": "172.81.132.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-05 09:44:12",
            "last_seen_utc": "2026-09-01 02:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868733": [
        {
            "ioc_value": "164.132.199.212:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-05 09:44:06",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868732": [
        {
            "ioc_value": "160.20.109.52:32333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-05 09:44:00",
            "last_seen_utc": "2026-09-01 02:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868731": [
        {
            "ioc_value": "149.28.163.119:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 09:43:43",
            "last_seen_utc": "2026-09-01 02:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868730": [
        {
            "ioc_value": "128.90.59.58:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 09:43:27",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868729": [
        {
            "ioc_value": "122.51.212.92:39901",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-08-05 09:43:26",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868728": [
        {
            "ioc_value": "rxasoj.reconciliationintl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:36:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868727": [
        {
            "ioc_value": "reconciliationintl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:35:44",
            "last_seen_utc": "2026-08-06 06:45:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868725": [
        {
            "ioc_value": "pjbozbf.rootconsole.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:16:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868721": [
        {
            "ioc_value": "rootconsole.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 09:11:45",
            "last_seen_utc": "2026-08-05 09:12:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868713": [
        {
            "ioc_value": "kqwmmz.realmanpath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:55:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868709": [
        {
            "ioc_value": "kggzmtp.romeroautodetails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868706": [
        {
            "ioc_value": "romeroautodetails.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:51:54",
            "last_seen_utc": "2026-08-07 15:03:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868705": [
        {
            "ioc_value": "rodspressurewash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:50:38",
            "last_seen_utc": "2026-08-07 15:08:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868701": [
        {
            "ioc_value": "207.174.0.143:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 08:46:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868702": [
        {
            "ioc_value": "207.174.0.143:841",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 08:46:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868703": [
        {
            "ioc_value": "142.202.191.225:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 08:46:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868704": [
        {
            "ioc_value": "142.202.191.225:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 08:46:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868700": [
        {
            "ioc_value": "9w2m3u8y.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:36:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868699": [
        {
            "ioc_value": "bapak178.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:22:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868698": [
        {
            "ioc_value": "80.76.49.76:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 08:20:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9e5ffe5dbb14f780a6051eaba02ddf4e5a723f3cfc517fa3ee2934f51563162e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868697": [
        {
            "ioc_value": "155.103.69.171:1122",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 08:20:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dec54ac5eebdce2ae119e32e529372de59da0db441195fba368b0962dc7be27c/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868696": [
        {
            "ioc_value": "104.128.191.103:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 08:20:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/879dd79d801f244e28d691688434e614a9a871366fe998754cf673ba8fa8496c/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868694": [
        {
            "ioc_value": "31.56.209.61:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 08:15:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/881864db117c28b378a64ef0d287af3563325037c448269d33779e2f7ca946ba/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868693": [
        {
            "ioc_value": "130.12.182.59:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 08:15:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b3a39c622d5d5cb415ce6605717e21c4e3e3cab932e4084fbe3a06708c09b174/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868692": [
        {
            "ioc_value": "kyvqgkidufinrkdprb.oakdalerodeogrounds.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:15:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868689": [
        {
            "ioc_value": "ftp.zetrocom.my",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-05 08:10:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b0c9df448cc639e5c3c9cb460a2887c9bdaabb3c38417f70d106e22bf81db00/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868688": [
        {
            "ioc_value": "yyqfta.pureglamlb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:08:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868687": [
        {
            "ioc_value": "ihlnvrv.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:06:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868686": [
        {
            "ioc_value": "185.215.151.120:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-05 08:05:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bdfa7425eeced3ef7ca8b847f3628a1ebb6c844d1bbd5fba93f3febbf1a06ff6/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868683": [
        {
            "ioc_value": "169.58.82.229:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 08:05:05",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868682": [
        {
            "ioc_value": "196.251.121.50:3996",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-05 08:04:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/42c6458628a8e33486b6a275b7ecfecadd596874fe1e8602a4a9e7bfca72e362/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868681": [
        {
            "ioc_value": "zlxxlr.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 08:01:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868680": [
        {
            "ioc_value": "route.techquarter.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 07:48:49",
            "last_seen_utc": "2026-08-05 07:48:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f4446c3e73eb11c5b8a4813f42ea6a5ac85766e38df151c3a5bcd6b302bf45a9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868679": [
        {
            "ioc_value": "https://route.techquarter.xyz/pipe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 07:48:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f4446c3e73eb11c5b8a4813f42ea6a5ac85766e38df151c3a5bcd6b302bf45a9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868678": [
        {
            "ioc_value": "https://build.netbazaar.lol/collect",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 07:47:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a302fcab4d90b6101ac2a2ade6f424977bfd59967b142921280084c7d1179d00/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868676": [
        {
            "ioc_value": "netbazaar.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 07:47:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a302fcab4d90b6101ac2a2ade6f424977bfd59967b142921280084c7d1179d00/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868677": [
        {
            "ioc_value": "build.netbazaar.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 07:47:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a302fcab4d90b6101ac2a2ade6f424977bfd59967b142921280084c7d1179d00/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868675": [
        {
            "ioc_value": "mail.voestelpine.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-05 07:39:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868674": [
        {
            "ioc_value": "xrpskhu.primecarelearningcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 07:39:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868673": [
        {
            "ioc_value": "squirrelsecretary.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-05 07:37:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868672": [
        {
            "ioc_value": "receiptpie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-05 07:36:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868671": [
        {
            "ioc_value": "207.57.134.202:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 07:36:43",
            "last_seen_utc": "2026-08-27 07:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868670": [
        {
            "ioc_value": "102.204.223.230:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 07:36:36",
            "last_seen_utc": "2026-08-06 07:23:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868669": [
        {
            "ioc_value": "4g591jl4.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 07:27:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868660": [
        {
            "ioc_value": "uebqukbsebckuqbk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.raspberry_robin",
            "malware_alias": "RaspberryRobin,QNAP-Worm,LINK_MSIEXEC",
            "malware_printable": "Raspberry Robin",
            "first_seen_utc": "2026-08-05 07:26:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868668": [
        {
            "ioc_value": "midnight-cache.pw",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-05 07:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61a9fe0873194f2c65636392b66863ee9263325edefe1f0cae2c7ef2cd746c24/",
            "tags": "NWHStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868667": [
        {
            "ioc_value": "https://shoeshowshoes.com/nfront.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-08-05 07:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bd814af9aa0bd5e0fb63b7c4a34dc382589bd89da2bb8a462d8a22ba2ca6178c/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868666": [
        {
            "ioc_value": "7w112ac5.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 07:22:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868665": [
        {
            "ioc_value": "https://dressagelaval.com/nfront.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-08-05 07:21:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9dfbe92313bc0d309a0fb07cb6461d6c17f18b9b66842b101593373c1bf9fff7/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868664": [
        {
            "ioc_value": "stfgfw.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 07:18:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868647": [
        {
            "ioc_value": "https://bendesin.com/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 07:04:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868648": [
        {
            "ioc_value": "https://bendesin.com/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 07:04:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868649": [
        {
            "ioc_value": "https://bendesin.com/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 07:04:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868651": [
        {
            "ioc_value": "https://bendesin.com/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 07:04:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868650": [
        {
            "ioc_value": "https://bendesin.com/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 07:04:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868653": [
        {
            "ioc_value": "bendesin.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-05 07:04:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868654": [
        {
            "ioc_value": "45.123.191.90:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:55:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8c0495b2595aff4244c1c157a3f2594f12275d776509a6b49224f357b88f4270/",
            "tags": "mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868652": [
        {
            "ioc_value": "edxkbtc.partyboxlovely.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 06:53:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868646": [
        {
            "ioc_value": "207.148.77.235:4000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.loda",
            "malware_alias": "LodaRAT,Nymeria",
            "malware_printable": "Loda",
            "first_seen_utc": "2026-08-05 06:49:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/757060d1a348f54c2fceeb3337e0e8b8a984d3f3001ffc27771dd49f559254e7/",
            "tags": "Loda",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868645": [
        {
            "ioc_value": "my.thispc.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.loda",
            "malware_alias": "LodaRAT,Nymeria",
            "malware_printable": "Loda",
            "first_seen_utc": "2026-08-05 06:46:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/757060d1a348f54c2fceeb3337e0e8b8a984d3f3001ffc27771dd49f559254e7/",
            "tags": "LodaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868449": [
        {
            "ioc_value": "91.208.162.129:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 06:38:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868450": [
        {
            "ioc_value": "209.145.55.206:8839",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 06:38:04",
            "last_seen_utc": "2026-08-06 00:24:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "a6416186c7730e38c492792c820881c3,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868460": [
        {
            "ioc_value": "http://139.135.42.179:41902/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:38:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.42.179",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868461": [
        {
            "ioc_value": "http://61.174.163.220:39657/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:38:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/61.174.163.220",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868462": [
        {
            "ioc_value": "http://103.148.128.154:35695/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:38:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.148.128.154",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868463": [
        {
            "ioc_value": "http://103.186.77.64:51823/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:38:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.186.77.64",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868477": [
        {
            "ioc_value": "176.65.148.145:2",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:38:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868464": [
        {
            "ioc_value": "http://125.41.245.63:39395/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:38:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.41.245.63",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868478": [
        {
            "ioc_value": "poop.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:59",
            "last_seen_utc": "2026-08-05 06:55:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868481": [
        {
            "ioc_value": "178.83.206.213:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868482": [
        {
            "ioc_value": "155.103.69.225:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:58",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868484": [
        {
            "ioc_value": "155.103.69.225:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:58",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868483": [
        {
            "ioc_value": "155.103.69.225:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:57",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868485": [
        {
            "ioc_value": "155.103.69.225:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:56",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868506": [
        {
            "ioc_value": "137.184.70.190:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 06:37:56",
            "last_seen_utc": "2026-08-11 22:11:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868513": [
        {
            "ioc_value": "167.99.64.180:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 06:37:56",
            "last_seen_utc": "2026-08-13 08:40:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868528": [
        {
            "ioc_value": "45.38.249.148:1004",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-05 06:37:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1868545": [
        {
            "ioc_value": "137.184.70.190:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 06:37:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868551": [
        {
            "ioc_value": "vaillyharry9988.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:53",
            "last_seen_utc": "2026-08-05 06:40:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868552": [
        {
            "ioc_value": "roadsteriio981.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868560": [
        {
            "ioc_value": "dollllar881122.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,injected-loader",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868561": [
        {
            "ioc_value": "chocolate412932.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868562": [
        {
            "ioc_value": "http://46.226.162.241/411f7d3bff31a?force=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868563": [
        {
            "ioc_value": "http://46.226.162.241/d90acb823cb7c7?force=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868564": [
        {
            "ioc_value": "http://46.226.162.241/211f79a06c?force=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868565": [
        {
            "ioc_value": "46.226.162.241:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868566": [
        {
            "ioc_value": "89.208.97.111:8133",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868567": [
        {
            "ioc_value": "04b8d6f7158689a311b22200c4c0fb5186a6751a422b5510b5a5fbf1c2a9cd5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868568": [
        {
            "ioc_value": "4c48cbbd55ff2b63a1fca862b8bb8ff00eec90050b2a2608140bbb3b2ad03f54",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,macos,stealer,swiftDialog,wallet",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868577": [
        {
            "ioc_value": "http://175.107.233.106:48152/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:37:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.233.106",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868578": [
        {
            "ioc_value": "http://182.113.35.171:56533/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:37:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.113.35.171",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868579": [
        {
            "ioc_value": "http://223.123.72.129:48681/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:37:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.129",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868580": [
        {
            "ioc_value": "http://113.236.100.208:54189/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-05 06:37:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/113.236.100.208",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868584": [
        {
            "ioc_value": "https://62.238.60.47",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-05 06:37:44",
            "last_seen_utc": "2026-08-07 08:02:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "382417e43d73de0f6df1ab2bcdb95ede,c2,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868587": [
        {
            "ioc_value": "43.163.88.35:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 06:37:44",
            "last_seen_utc": "2026-09-01 02:47:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "132203,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1868605": [
        {
            "ioc_value": "http://217.60.7.218/mort.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-08-05 06:37:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868607": [
        {
            "ioc_value": "165.22.69.214:3131",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-05 06:37:41",
            "last_seen_utc": "2026-08-07 04:38:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41973e5dc419ef5d31ba3c0b984ae22d80dddd15d3bf65696e7e0c919134430f/",
            "tags": "honeypot,iot,sentinel",
            "anonymous": 0,
            "reporter": "abuserobot66609"
        }
    ],
    "1868641": [
        {
            "ioc_value": "137.184.199.120:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-05 06:37:40",
            "last_seen_utc": "2026-08-08 04:42:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868644": [
        {
            "ioc_value": "91lrgb4j.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 06:36:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868643": [
        {
            "ioc_value": "tpvyfp.razonewane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 06:29:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868642": [
        {
            "ioc_value": "yibormy.parma-delikatessen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 06:08:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868636": [
        {
            "ioc_value": "43.108.51.124:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-05 06:05:05",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868635": [
        {
            "ioc_value": "vnukdf.purefunsurfboards.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 05:43:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868634": [
        {
            "ioc_value": "sgepxhg.qualitycounselingcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 05:25:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868628": [
        {
            "ioc_value": "oumuxj.pshealthcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 05:02:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868627": [
        {
            "ioc_value": "nuevaera2026202620262026.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-05 04:55:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d8a047f6201766e5e3fbab78a017a055e5bbc9d9b5e53883eb07b27db6d06c48/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868626": [
        {
            "ioc_value": "uq3zphjn.newnanfoodbank.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 04:34:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868625": [
        {
            "ioc_value": "nlkyqob.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 04:32:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868623": [
        {
            "ioc_value": "dgjxatg.jimmieleeautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 04:25:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868622": [
        {
            "ioc_value": "balyek.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 04:15:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868615": [
        {
            "ioc_value": "jgypzot.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 03:39:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868612": [
        {
            "ioc_value": "pcwhlb.qummy-group.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 03:23:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868608": [
        {
            "ioc_value": "rybmyip.osbratstvojedinstvo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 02:55:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868606": [
        {
            "ioc_value": "t36jqqkc.nesplowell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 02:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868604": [
        {
            "ioc_value": "lehvez.peacockhomes.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 02:37:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868603": [
        {
            "ioc_value": "pj0410c1.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 02:26:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868602": [
        {
            "ioc_value": "2dflte3h.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 02:20:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868601": [
        {
            "ioc_value": "riorego.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 02:10:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868596": [
        {
            "ioc_value": "ezezvo.peacefulacrestx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 01:52:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868595": [
        {
            "ioc_value": "xdvitbv.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 01:23:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868594": [
        {
            "ioc_value": "http://hooiuse.click:4938",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-05 01:17:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1868586": [
        {
            "ioc_value": "bujtgh.patrickschrader.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 01:02:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868585": [
        {
            "ioc_value": "ybxpgx.pasukan99.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 01:00:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868582": [
        {
            "ioc_value": "q96rou1o.necedubd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 00:46:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868581": [
        {
            "ioc_value": "kjjhdkx.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 00:39:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868576": [
        {
            "ioc_value": "zoihkb.pureglamlb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 00:06:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868573": [
        {
            "ioc_value": "pureglamlb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-05 00:04:04",
            "last_seen_utc": "2026-08-07 15:03:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868572": [
        {
            "ioc_value": "xxziiqx.realmanpath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 23:54:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868571": [
        {
            "ioc_value": "realmanpath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 23:51:52",
            "last_seen_utc": "2026-08-06 04:45:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868569": [
        {
            "ioc_value": "210.56.48.227:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 23:47:37",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868570": [
        {
            "ioc_value": "222.255.215.42:30005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 23:47:37",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868559": [
        {
            "ioc_value": "ghkkya.purefunsurfboards.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 23:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868558": [
        {
            "ioc_value": "purefunsurfboards.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 23:18:40",
            "last_seen_utc": "2026-08-07 14:48:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868557": [
        {
            "ioc_value": "qiybelm.razonewane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 23:11:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868556": [
        {
            "ioc_value": "razonewane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 23:06:26",
            "last_seen_utc": "2026-08-05 06:28:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868550": [
        {
            "ioc_value": "ju8teib5.natsumitapas.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 22:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868549": [
        {
            "ioc_value": "ppdrqc.pshealthcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 22:35:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868548": [
        {
            "ioc_value": "pshealthcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 22:33:01",
            "last_seen_utc": "2026-08-05 04:58:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868547": [
        {
            "ioc_value": "egybouu.qummy-group.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 22:23:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868546": [
        {
            "ioc_value": "qummy-group.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 22:20:52",
            "last_seen_utc": "2026-08-07 14:48:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868543": [
        {
            "ioc_value": "47.86.2.244:558",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 21:50:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d0b8f081975cc9dfb542c8da5d173c3a68a23531e83f07e86ccc706e56d76f3/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868542": [
        {
            "ioc_value": "ruqlnx.primecarelearningcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:48:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868541": [
        {
            "ioc_value": "primecarelearningcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:47:36",
            "last_seen_utc": "2026-08-07 14:48:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868540": [
        {
            "ioc_value": "118.107.9.185:1112",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 21:45:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868539": [
        {
            "ioc_value": "47.86.2.244:557",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 21:45:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868538": [
        {
            "ioc_value": "118.107.43.220:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 21:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868537": [
        {
            "ioc_value": "http://ck077996.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-04 21:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868536": [
        {
            "ioc_value": "172.245.209.149:2414",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 21:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868535": [
        {
            "ioc_value": "https://psk.y8slot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 21:45:06",
            "last_seen_utc": "2026-08-19 16:20:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1868533": [
        {
            "ioc_value": "https://psk.sinism188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 21:45:05",
            "last_seen_utc": "2026-08-27 17:27:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1868532": [
        {
            "ioc_value": "psk.sinism188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 21:45:04",
            "last_seen_utc": "2026-08-27 17:27:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1868531": [
        {
            "ioc_value": "http://mainserver.com/gate.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.pony",
            "malware_alias": "Siplog,Fareit",
            "malware_printable": "Pony",
            "first_seen_utc": "2026-08-04 21:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Pony",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868530": [
        {
            "ioc_value": "ldtwsfb.quiltlegacy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868529": [
        {
            "ioc_value": "quiltlegacy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:35:22",
            "last_seen_utc": "2026-08-07 14:48:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868527": [
        {
            "ioc_value": "c4nrz428.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:24:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868526": [
        {
            "ioc_value": "g5u8gksz.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:22:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868521": [
        {
            "ioc_value": "rejcck.pasukan138.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 21:03:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868520": [
        {
            "ioc_value": "zwkfwqg.quarkpets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 20:54:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868518": [
        {
            "ioc_value": "pypi-get.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 20:53:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "npm",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868519": [
        {
            "ioc_value": "js-mirror.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 20:53:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "npm",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868517": [
        {
            "ioc_value": "quarkpets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 20:49:52",
            "last_seen_utc": "2026-08-07 14:48:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868516": [
        {
            "ioc_value": "i3pwieem.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 20:42:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868514": [
        {
            "ioc_value": "npm-cache.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 20:38:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack",
            "tags": "npm",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868515": [
        {
            "ioc_value": "awqhnjewqjkl.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 20:38:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack",
            "tags": "npm",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868512": [
        {
            "ioc_value": "nqxtbf.oopsboobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 20:18:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868511": [
        {
            "ioc_value": "mwkzudz.qualitycounselingcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 20:06:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868508": [
        {
            "ioc_value": "qualitycounselingcenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 20:04:30",
            "last_seen_utc": "2026-08-07 14:48:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868507": [
        {
            "ioc_value": "borrilkapi4422.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 19:58:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868505": [
        {
            "ioc_value": "93.82.26.41:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-08-04 19:46:40",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868504": [
        {
            "ioc_value": "80.96.109.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:46:26",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868503": [
        {
            "ioc_value": "43.134.169.103:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-04 19:45:49",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868502": [
        {
            "ioc_value": "35.202.238.13:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-04 19:45:43",
            "last_seen_utc": "2026-09-01 02:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868501": [
        {
            "ioc_value": "31.76.96.193:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-08-04 19:45:42",
            "last_seen_utc": "2026-09-01 02:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868500": [
        {
            "ioc_value": "3.122.223.106:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 19:45:38",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868499": [
        {
            "ioc_value": "207.189.25.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:44:44",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868498": [
        {
            "ioc_value": "203.98.68.17:30200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 19:44:42",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868497": [
        {
            "ioc_value": "195.177.94.71:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:44:33",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868495": [
        {
            "ioc_value": "176.97.114.8:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:44:09",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868496": [
        {
            "ioc_value": "176.97.114.8:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:44:09",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868494": [
        {
            "ioc_value": "172.182.216.158:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 19:44:03",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868492": [
        {
            "ioc_value": "161.97.154.193:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:43:55",
            "last_seen_utc": "2026-09-01 02:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868493": [
        {
            "ioc_value": "161.97.154.193:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:43:55",
            "last_seen_utc": "2026-09-01 02:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868491": [
        {
            "ioc_value": "153.75.88.67:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:43:41",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868490": [
        {
            "ioc_value": "105.108.17.137:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 19:43:15",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868489": [
        {
            "ioc_value": "100.31.3.235:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-08-04 19:43:02",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868488": [
        {
            "ioc_value": "kozjbl.partyboxlovely.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 19:33:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868487": [
        {
            "ioc_value": "partyboxlovely.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 19:31:25",
            "last_seen_utc": "2026-08-07 14:43:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868486": [
        {
            "ioc_value": "health.sigmacoast.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-04 19:24:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1868480": [
        {
            "ioc_value": "keofokd.pureplatinumdancers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 19:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868479": [
        {
            "ioc_value": "pureplatinumdancers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 19:18:49",
            "last_seen_utc": "2026-08-07 14:43:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868471": [
        {
            "ioc_value": "cdyyhe.parma-delikatessen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:46:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868470": [
        {
            "ioc_value": "parma-delikatessen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:45:27",
            "last_seen_utc": "2026-08-05 06:08:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868469": [
        {
            "ioc_value": "sqqzefc.pmco-sa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:33:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868468": [
        {
            "ioc_value": "pmco-sa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:33:16",
            "last_seen_utc": "2026-08-07 14:43:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868467": [
        {
            "ioc_value": "xn6yof5y.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:26:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868455": [
        {
            "ioc_value": "nzjnxe.paquetitoexpressny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:01:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868454": [
        {
            "ioc_value": "paquetitoexpressny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 18:00:18",
            "last_seen_utc": "2026-08-04 18:00:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868453": [
        {
            "ioc_value": "61.54.27.211:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "vbs.vbrevshell",
            "malware_alias": null,
            "malware_printable": "VBREVSHELL",
            "first_seen_utc": "2026-08-04 18:00:04",
            "last_seen_utc": "2026-09-01 03:36:02",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=61.54.27.211",
            "tags": "ViriBack,Vshell",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868452": [
        {
            "ioc_value": "wifcimg.planksbiergarten.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 17:49:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868451": [
        {
            "ioc_value": "planksbiergarten.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 17:47:27",
            "last_seen_utc": "2026-08-07 14:43:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868448": [
        {
            "ioc_value": "chzkvv.panthertowingfl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 17:17:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868447": [
        {
            "ioc_value": "panthertowingfl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 17:14:25",
            "last_seen_utc": "2026-08-07 14:43:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868446": [
        {
            "ioc_value": "ceragpv.pjnphotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 17:07:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868439": [
        {
            "ioc_value": "7900cfedd44cd639839f0c4f6d382e62fd541046",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-04 16:48:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868440": [
        {
            "ioc_value": "ba1a663e230ce317ae337b5d83046ee7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-04 16:48:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868436": [
        {
            "ioc_value": "f5701fb674b20fdc997b7eba242ace9f8a314807",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868437": [
        {
            "ioc_value": "ebbdc2815774b02394c688f9415325bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868438": [
        {
            "ioc_value": "b7b1cf77eccf7fab42d83f57facdb1105d51050295a044ecdf75cc8280679788",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-04 16:48:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868433": [
        {
            "ioc_value": "323574f16b63ebd05f097a572e8cf6e56efaa910",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868434": [
        {
            "ioc_value": "8f4d337438eaf684b61e294ea52588f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868435": [
        {
            "ioc_value": "875630fd7cae532e3700bec48bdd1c51ba7f133a595d4a62b94733f54073c62e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868431": [
        {
            "ioc_value": "cb245fa68d9f08372281be72241876a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-04 16:48:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868432": [
        {
            "ioc_value": "1ab82089b52096ef768066cc619f1774801834221e22480411afa09e253461b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868428": [
        {
            "ioc_value": "da6a114917bdb41286172fcaec6a05a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868429": [
        {
            "ioc_value": "675cf32ce5553a1f2a9fa1b65014abc30df6a93f6ace616878dc534fc238c77a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-04 16:48:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868430": [
        {
            "ioc_value": "ec0fba7419fe129f91fed01cae2d24fd3cbd480f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-04 16:48:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868427": [
        {
            "ioc_value": "0d891499b453fec47129011c7160128223bbfabd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868425": [
        {
            "ioc_value": "0df2f895abbbea29565fc048931a0169",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-04 16:48:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868426": [
        {
            "ioc_value": "7b1da0a6dc4eb9fc73d0e810677c2740cad5a1320fc5c9af00babf553ca2cebc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-04 16:48:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868422": [
        {
            "ioc_value": "88e1e1c77f64a17500d8569ee43b7a28",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pslogger",
            "malware_alias": "ECCENTRICBANDWAGON",
            "malware_printable": "PSLogger",
            "first_seen_utc": "2026-08-04 16:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868423": [
        {
            "ioc_value": "26ee4c6ab5c6e6950273cbfc795b207c156ef4ce07acc3f364f9b98364588082",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-04 16:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868424": [
        {
            "ioc_value": "f73641739706cd6507c28c8cede95210dcb9ee6d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-04 16:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868421": [
        {
            "ioc_value": "a7397cad1aabe9ce156087682cb67e79b49441fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pslogger",
            "malware_alias": "ECCENTRICBANDWAGON",
            "malware_printable": "PSLogger",
            "first_seen_utc": "2026-08-04 16:47:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868418": [
        {
            "ioc_value": "e202edf94b706e5596283aa3456760de6bcbcd54",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-04 16:47:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868419": [
        {
            "ioc_value": "6435611106d0d7b3301229b9021a9908",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-04 16:47:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868420": [
        {
            "ioc_value": "fdd20fd8b01a168bc84fca30eb3c29176a770f173318368abd6ca09d37901480",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pslogger",
            "malware_alias": "ECCENTRICBANDWAGON",
            "malware_printable": "PSLogger",
            "first_seen_utc": "2026-08-04 16:47:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868415": [
        {
            "ioc_value": "71147bd6657f1dc2837aaa54d2b4567ebb81ef31",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-04 16:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868416": [
        {
            "ioc_value": "83928513bb5518e71704d089dedfe44d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-04 16:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868417": [
        {
            "ioc_value": "0d29741bb7161b12319909ecbbfb6029b08fe80c98fc8a93658ea14fededdfd9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-04 16:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868412": [
        {
            "ioc_value": "3de90646a26faadc719b3795c42bd9576e316212",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.blustealer",
            "malware_alias": "a310logger",
            "malware_printable": "BluStealer",
            "first_seen_utc": "2026-08-04 16:47:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868413": [
        {
            "ioc_value": "97b43a41d7f2b2cdfb960693da5e97f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.blustealer",
            "malware_alias": "a310logger",
            "malware_printable": "BluStealer",
            "first_seen_utc": "2026-08-04 16:47:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868414": [
        {
            "ioc_value": "bc7d5b9ae130f1b9c5a41517d56d9213950ef7f9b1ed78d9f33a4b2797d009e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.terra_stealer",
            "malware_alias": "StealerOne,SONE,Taurus Loader Stealer Module",
            "malware_printable": "TerraStealer",
            "first_seen_utc": "2026-08-04 16:47:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868410": [
        {
            "ioc_value": "12767208e2775d74cec36dfe0a6dadf4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868411": [
        {
            "ioc_value": "694483cdead4d874dd33b0a7c11d6c5cbdd1989352c3f7376a71855ad0147dee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.blustealer",
            "malware_alias": "a310logger",
            "malware_printable": "BluStealer",
            "first_seen_utc": "2026-08-04 16:47:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868408": [
        {
            "ioc_value": "f1f304a6be3928d7c8ee7e65e23b4306da4d83c5ff0bb3791ef44afe2506e2f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868409": [
        {
            "ioc_value": "9ce079710d5d0e0d8778b6fd5eaae8267bb9dc04",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868406": [
        {
            "ioc_value": "3593882c47f2a944bfe51f03215c8bb3ff6b3fa8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 16:47:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868407": [
        {
            "ioc_value": "002f8166ec9f671ba830b7cd2263b5e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 16:47:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868403": [
        {
            "ioc_value": "90734748b072f42f9f89ba03057a6f9ab4bed72f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868404": [
        {
            "ioc_value": "f0d2934199c9f86d25014d628cd7385a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868405": [
        {
            "ioc_value": "ea86029605e9288a9320c3ca83f30e1e63d06936939a3039880f45770ea83831",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 16:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868400": [
        {
            "ioc_value": "96a2407bfed101aaaf727a67481d0179297f6822",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-04 16:47:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868401": [
        {
            "ioc_value": "a58f1ebc2fd3a5787708e3da7eba5058",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-04 16:47:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868402": [
        {
            "ioc_value": "b2b6c906f355c11945f84134f27559acce2247ae2214d544734bddf97e9ee22c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868397": [
        {
            "ioc_value": "b8afef7e77d61a2abf0b80915cc0769f2c0531ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868398": [
        {
            "ioc_value": "df84f03c4fa8d429a13e4ce8b010a66a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868399": [
        {
            "ioc_value": "10b6a8f017ecb14dfde4e8738415ce5feb3e617715f345c30549cf4f4c3d3fa1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-04 16:47:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868394": [
        {
            "ioc_value": "873421118a0984c7f3a8cccac26f3bd010e70f2f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 16:47:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868395": [
        {
            "ioc_value": "65290a0084c07a7c3916db8bc86a16ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 16:47:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868396": [
        {
            "ioc_value": "98c3283cac92544cf7d2237d4a457181ae5a2e3983bb17728df8b81d067c8e4a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-04 16:47:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868391": [
        {
            "ioc_value": "9f28937b9f7e0ea73557bb2354702862b03308ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-04 16:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868392": [
        {
            "ioc_value": "94498bcc84599ebe710f3efd951845da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-04 16:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868393": [
        {
            "ioc_value": "b7fd8d6dddf0e4321dd5303ecd50d4a9d833ab4a80e0a01face12116363a8103",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 16:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868389": [
        {
            "ioc_value": "13260e2e1ec04400403f6dfd4cb93994",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-04 16:47:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868390": [
        {
            "ioc_value": "4b3d9ff0f3eef2684879bea47fb066a259bb2cc18bb0ab0c2f0c069e732dd5e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-04 16:47:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868386": [
        {
            "ioc_value": "67e230755c1cf7cfc8d92a98c4caac13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-04 16:47:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868387": [
        {
            "ioc_value": "53356890a6e72a151d869823f410ecf681731868d241c07ff02d51d6436c3dfd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-04 16:47:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868388": [
        {
            "ioc_value": "f54e0ed941e989cfe030e0a7682d669b85612ab5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-04 16:47:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868383": [
        {
            "ioc_value": "c67f0473eae2e790676584b108e7ed73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-08-04 16:47:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868384": [
        {
            "ioc_value": "033eb7a351b65d9aa4e6a19a0be58ea87f579671fe54c3725129589f834c2d06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-04 16:47:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868385": [
        {
            "ioc_value": "57f60f9ca384d9b29794de5446c8fe6fe4e214c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-08-04 16:47:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868380": [
        {
            "ioc_value": "e0bf699a9016ef9a7740953c6ec4feb0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-04 16:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868381": [
        {
            "ioc_value": "c0654ca707fd45d9563f46dbd51fc03b75f5a05ec0ffc26816bcedcd13520b31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-08-04 16:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868382": [
        {
            "ioc_value": "b14b5b72fb8314c14c5fa5e9046802b4202f3175",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-08-04 16:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868377": [
        {
            "ioc_value": "1cebb153fcb26dcd06614a95276b22a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868378": [
        {
            "ioc_value": "438a199c60026b897fdda4da23d69e103cad34864a070d1b7659cf462628505f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-04 16:47:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868379": [
        {
            "ioc_value": "bf119129aa816d95af82b5ed9194aaba52b0d90f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-08-04 16:47:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868374": [
        {
            "ioc_value": "6292b4f53c529bdafbb1476e7de48e73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868375": [
        {
            "ioc_value": "57e5da8f7c404c1754a866c1f8d51e31f9f21525c17e586ef48eb2a62fa4ef20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868376": [
        {
            "ioc_value": "2d7b8391c51937f7c11430a91013a115c315f92f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868372": [
        {
            "ioc_value": "a5508bc966bb8d4e0a4275dd96347d84ceecbdb1679fb27ddb4f568fb083faa2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868373": [
        {
            "ioc_value": "5a2317b228f48fa8f93665dc6a74fc38888b839a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868370": [
        {
            "ioc_value": "de34950c485f3fdaa49687cdd4c71cf6c906774d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868371": [
        {
            "ioc_value": "78ea9434eb06f6069346be4dc920e706",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868367": [
        {
            "ioc_value": "96a837eee8332c0d27efcad1537000001e5aa86d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 16:47:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868368": [
        {
            "ioc_value": "2bb1b024135ef7b0af3141d389530d82",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 16:47:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868369": [
        {
            "ioc_value": "0b74552f66e1fb88f401e0c27c9dd224219bc3698a556b8827c392cce5a1bbd3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-04 16:47:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868366": [
        {
            "ioc_value": "833b709b93b80919dc06d8b0619de8919df283060dd9fdb9da6bd4d9b778ca7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 16:47:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1868365": [
        {
            "ioc_value": "vkjzbd.painting-ct.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:30:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868364": [
        {
            "ioc_value": "painting-ct.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:28:46",
            "last_seen_utc": "2026-08-07 14:43:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868345": [
        {
            "ioc_value": "https://ferncurrent14.com/curl/a7ec41c89a3dc6bf3de47264b4a3013134c7273dd1aa379859c2149b7517f0b2",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 16:28:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/raimurokko/951c27b9b5af7ca91445bcbf0490f874",
            "tags": "ClickFix,Cloudflare,FakeCaptcha,macOS",
            "anonymous": 0,
            "reporter": "novumanalytica"
        }
    ],
    "1868323": [
        {
            "ioc_value": "137.184.70.190:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-04 16:28:11",
            "last_seen_utc": "2026-08-04 22:32:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868342": [
        {
            "ioc_value": "ferncurrent14.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 16:28:10",
            "last_seen_utc": "2026-08-06 22:42:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/raimurokko/951c27b9b5af7ca91445bcbf0490f874",
            "tags": "ClickFix,Cloudflare,FakeCaptcha,macOS",
            "anonymous": 0,
            "reporter": "novumanalytica"
        }
    ],
    "1868363": [
        {
            "ioc_value": "jqali1r8.jimmieleeautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:27:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868362": [
        {
            "ioc_value": "ubvqus4r.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868361": [
        {
            "ioc_value": "b7uoqibt.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:22:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868360": [
        {
            "ioc_value": "https://sot.tbo88men.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 16:20:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b7fd8d6dddf0e4321dd5303ecd50d4a9d833ab4a80e0a01face12116363a8103/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868358": [
        {
            "ioc_value": "yljorhr.pepperstrail.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:17:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868357": [
        {
            "ioc_value": "pepperstrail.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 16:15:04",
            "last_seen_utc": "2026-08-07 14:43:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868356": [
        {
            "ioc_value": "finterd.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 16:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/571d8127e4eb754efa47092de63e8c07b8f2c43cafa541f9abf0122221b629ae/",
            "tags": "RAT,VioletRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868355": [
        {
            "ioc_value": "217.60.195.118:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 16:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/571d8127e4eb754efa47092de63e8c07b8f2c43cafa541f9abf0122221b629ae/",
            "tags": "RAT,VioletRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868350": [
        {
            "ioc_value": "rlnmfj.paginaespumaflex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 15:43:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868348": [
        {
            "ioc_value": "paginaespumaflex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 15:43:14",
            "last_seen_utc": "2026-08-07 14:43:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868344": [
        {
            "ioc_value": "wdagbwd.peacockhomes.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 15:31:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868343": [
        {
            "ioc_value": "peacockhomes.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 15:29:37",
            "last_seen_utc": "2026-08-07 14:43:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868338": [
        {
            "ioc_value": "osnmbk.overtheitgirl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 14:58:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868337": [
        {
            "ioc_value": "snrmizb.peacefulacrestx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 14:47:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868336": [
        {
            "ioc_value": "peacefulacrestx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 14:44:00",
            "last_seen_utc": "2026-08-07 14:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868335": [
        {
            "ioc_value": "https://com.y8slot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-04 14:40:06",
            "last_seen_utc": "2026-08-19 16:20:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1868333": [
        {
            "ioc_value": "bt6b37z4.leesvillelakerealtor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 14:25:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868331": [
        {
            "ioc_value": "dmmcvi.ospreyyfx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 14:14:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868330": [
        {
            "ioc_value": "ospreyyfx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 14:12:10",
            "last_seen_utc": "2026-08-07 14:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868328": [
        {
            "ioc_value": "130.12.182.39:7001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 14:05:07",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868327": [
        {
            "ioc_value": "130.12.182.39:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 14:05:06",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868325": [
        {
            "ioc_value": "zhrmhqs.patrickschrader.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 13:59:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868324": [
        {
            "ioc_value": "patrickschrader.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 13:58:29",
            "last_seen_utc": "2026-08-07 14:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868322": [
        {
            "ioc_value": "vtxywg.osbratstvojedinstvo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 13:27:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868321": [
        {
            "ioc_value": "rnhwlgl.pasukan99.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 13:15:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868320": [
        {
            "ioc_value": "pasukan99.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 13:13:01",
            "last_seen_utc": "2026-08-05 00:52:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868319": [
        {
            "ioc_value": "130.12.182.39:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 13:05:09",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868317": [
        {
            "ioc_value": "45.148.18.38:58268",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 13:03:33",
            "last_seen_utc": "2026-08-13 12:23:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868316": [
        {
            "ioc_value": "103.67.163.114:4688",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 13:01:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868311": [
        {
            "ioc_value": "borrovnou4421.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 12:58:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding,injected-loader,TDS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868315": [
        {
            "ioc_value": "217.60.195.193:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 12:55:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9df545f9a40281bf7789feb875a6f2fa3334dc6bfda329e8bc55667d5bee4b0d/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868314": [
        {
            "ioc_value": "officefagbo.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 12:55:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/22b73e8359df7ff75af4b2bd468a093f2e08f8ba71e404276c1a3e8d6049a753/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868313": [
        {
            "ioc_value": "icingwater.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 12:55:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/22b73e8359df7ff75af4b2bd468a093f2e08f8ba71e404276c1a3e8d6049a753/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868312": [
        {
            "ioc_value": "ftp.gebzekamlok.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-04 12:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81e61bd60b0742417d9b29aadad3a2c13bcaac8efb82454a5a39998be6acc99d/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868310": [
        {
            "ioc_value": "nyvftv.orderlacocinamexicanfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 12:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868309": [
        {
            "ioc_value": "hhczvrj.pasukan4d.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 12:43:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868308": [
        {
            "ioc_value": "146.103.112.159:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-04 12:42:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78feacea9ce63f93307e59bf6ef0ecb9062bf3d7cb29d874cb264c16bcd21162/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868307": [
        {
            "ioc_value": "pasukan4d.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 12:41:33",
            "last_seen_utc": "2026-08-05 00:49:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868306": [
        {
            "ioc_value": "orderlacocinamexicanfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 12:41:08",
            "last_seen_utc": "2026-08-07 14:43:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868304": [
        {
            "ioc_value": "mail.spacaex.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-08-04 12:28:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9efef37449a114244510810c8c5d6feb25d24d163fb16aab8ea2568af02171d/",
            "tags": "MassLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868303": [
        {
            "ioc_value": "jbdkw2wh.ledridingco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 12:26:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868302": [
        {
            "ioc_value": "217.64.151.119:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 12:23:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/126390fff28e625ad7e7696802e410810f3f092096dc5c3a385842a661ed7d39/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868299": [
        {
            "ioc_value": "http://119.157.76.43:44379/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-04 12:19:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.157.76.43",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868301": [
        {
            "ioc_value": "ma-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 12:18:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7e23a3d7f834866e10bc1b981bdbcdc22e12922f1fb53edf371186a98d5d4ced/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868300": [
        {
            "ioc_value": "https://ma-pdffiller.lat/h/estagio1.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 12:18:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7e23a3d7f834866e10bc1b981bdbcdc22e12922f1fb53edf371186a98d5d4ced/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868293": [
        {
            "ioc_value": "193-233-82-248.sslip.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 12:02:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868292": [
        {
            "ioc_value": "evsdbwa.pasukan138.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:59:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868256": [
        {
            "ioc_value": "45.135.194.70:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 11:57:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1868291": [
        {
            "ioc_value": "icbavm.oopsboobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:56:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868290": [
        {
            "ioc_value": "pasukan138.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:55:59",
            "last_seen_utc": "2026-08-04 21:02:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868289": [
        {
            "ioc_value": "oopsboobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:55:38",
            "last_seen_utc": "2026-08-07 14:43:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868288": [
        {
            "ioc_value": "hlijri.onesourceautollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868287": [
        {
            "ioc_value": "79.110.49.186:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 11:47:25",
            "last_seen_utc": "2026-09-01 02:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868286": [
        {
            "ioc_value": "169.58.82.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 11:47:08",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868285": [
        {
            "ioc_value": "102.204.223.230:5554",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 11:46:52",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868282": [
        {
            "ioc_value": "ptk1gnms.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:24:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868281": [
        {
            "ioc_value": "imwgptl.nygyrowillmar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:21:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868280": [
        {
            "ioc_value": "dkdszy.onesourceautollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:20:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868279": [
        {
            "ioc_value": "zuhg5fig.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:19:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868278": [
        {
            "ioc_value": "nygyrowillmar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:16:21",
            "last_seen_utc": "2026-08-08 11:51:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868277": [
        {
            "ioc_value": "onesourceautollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 11:15:58",
            "last_seen_utc": "2026-08-09 09:22:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868266": [
        {
            "ioc_value": "general-sample.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 10:37:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868265": [
        {
            "ioc_value": "nxvuavg.now-we-wait.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 10:30:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868264": [
        {
            "ioc_value": "gzdlal.naldoricketts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 10:30:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868263": [
        {
            "ioc_value": "now-we-wait.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 10:29:18",
            "last_seen_utc": "2026-08-08 03:24:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868262": [
        {
            "ioc_value": "naldoricketts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 10:28:05",
            "last_seen_utc": "2026-08-04 10:28:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868261": [
        {
            "ioc_value": "khtlqekj.lamournails.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 10:24:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868255": [
        {
            "ioc_value": "91.92.42.152:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 09:46:41",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868254": [
        {
            "ioc_value": "89.36.231.206:65432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-04 09:46:38",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868253": [
        {
            "ioc_value": "81.177.222.11:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 09:46:30",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868252": [
        {
            "ioc_value": "45.61.176.146:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-04 09:46:05",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868251": [
        {
            "ioc_value": "45.139.226.224:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-04 09:45:57",
            "last_seen_utc": "2026-09-01 02:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868250": [
        {
            "ioc_value": "27.124.36.136:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:45:40",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868249": [
        {
            "ioc_value": "iewtfyd.novemberstar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 09:44:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868247": [
        {
            "ioc_value": "178.16.53.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868248": [
        {
            "ioc_value": "178.16.53.68:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868246": [
        {
            "ioc_value": "172.111.232.133:7775",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-04 09:44:00",
            "last_seen_utc": "2026-09-01 02:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868244": [
        {
            "ioc_value": "172.111.134.94:56011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:43:59",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868245": [
        {
            "ioc_value": "172.111.134.94:56012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:43:59",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868243": [
        {
            "ioc_value": "novemberstar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 09:43:43",
            "last_seen_utc": "2026-08-04 09:44:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868242": [
        {
            "ioc_value": "belzvc.nakliyemistanbul.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 09:43:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868241": [
        {
            "ioc_value": "140.228.29.61:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:43:31",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868240": [
        {
            "ioc_value": "138.124.62.3:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-04 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868239": [
        {
            "ioc_value": "130.12.182.39:5333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 09:43:25",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868238": [
        {
            "ioc_value": "122.51.212.92:39905",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-08-04 09:43:23",
            "last_seen_utc": "2026-09-01 02:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868237": [
        {
            "ioc_value": "104.251.181.111:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:43:14",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868236": [
        {
            "ioc_value": "104.239.66.36:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-04 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868235": [
        {
            "ioc_value": "104.223.98.68:2028",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-04 09:43:11",
            "last_seen_utc": "2026-09-01 02:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868234": [
        {
            "ioc_value": "nakliyemistanbul.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 09:42:36",
            "last_seen_utc": "2026-08-04 09:43:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868233": [
        {
            "ioc_value": "catground1957.casacam.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:41:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868232": [
        {
            "ioc_value": "209.54.103.181:7788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:41:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0985cd773b33739222c66bdd26825f50c2fd0c99648623783a2c83e98e73f0de/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868229": [
        {
            "ioc_value": "https://netframework.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 09:37:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbfae526a3a6d3daf55140329780e570b3f9705f9ac0095c1e8d356f7105bf7d/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868230": [
        {
            "ioc_value": "https://netframework.top/api/config/client",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 09:37:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbfae526a3a6d3daf55140329780e570b3f9705f9ac0095c1e8d356f7105bf7d/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868231": [
        {
            "ioc_value": "https://netframework.top/api/remote/beacon",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 09:37:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbfae526a3a6d3daf55140329780e570b3f9705f9ac0095c1e8d356f7105bf7d/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868228": [
        {
            "ioc_value": "netframework.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 09:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbfae526a3a6d3daf55140329780e570b3f9705f9ac0095c1e8d356f7105bf7d/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868204": [
        {
            "ioc_value": "46.8.226.163:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 09:28:17",
            "last_seen_utc": "2026-08-13 07:58:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1868205": [
        {
            "ioc_value": "46.8.226.122:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 09:28:16",
            "last_seen_utc": "2026-08-13 07:58:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1868206": [
        {
            "ioc_value": "46.8.226.21:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 09:28:16",
            "last_seen_utc": "2026-08-13 07:58:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1868207": [
        {
            "ioc_value": "46.8.226.50:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 09:28:15",
            "last_seen_utc": "2026-08-13 07:58:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1868208": [
        {
            "ioc_value": "46.8.226.61:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 09:28:15",
            "last_seen_utc": "2026-08-13 07:58:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1868209": [
        {
            "ioc_value": "46.8.226.88:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 09:28:14",
            "last_seen_utc": "2026-08-13 07:58:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1868213": [
        {
            "ioc_value": "143.198.206.191:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-04 09:28:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868227": [
        {
            "ioc_value": "23.95.103.253:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:20:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/345f6369400e80ca228fbe01ef09bd12c392c724285bbee0ab54d53bc0e71faa/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868226": [
        {
            "ioc_value": "102.220.160.146:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 09:20:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d013bebde6c15d982fb6c7a6d2087f6dd91fdc3e71c0aff38542c836b3f5a171/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868225": [
        {
            "ioc_value": "ftp.darlenemarino.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-04 09:17:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b8ce20074e2a7a3697f6ed919ae51edf1cb336654076ac18182490a9ff5d9fb/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868224": [
        {
            "ioc_value": "www.jahstandclassprojectbackup3.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f73e99799f4ff717036cea15e6b3f2fb9b65da56906ae9d632a22b7ceb98ec3e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868220": [
        {
            "ioc_value": "www.jahstandclassproject.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f73e99799f4ff717036cea15e6b3f2fb9b65da56906ae9d632a22b7ceb98ec3e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868221": [
        {
            "ioc_value": "www.jahstandclassprojectbackup.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f73e99799f4ff717036cea15e6b3f2fb9b65da56906ae9d632a22b7ceb98ec3e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868222": [
        {
            "ioc_value": "www.jahstandclassprojectbackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f73e99799f4ff717036cea15e6b3f2fb9b65da56906ae9d632a22b7ceb98ec3e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868223": [
        {
            "ioc_value": "www.jahstandclassprojectbackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f73e99799f4ff717036cea15e6b3f2fb9b65da56906ae9d632a22b7ceb98ec3e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868216": [
        {
            "ioc_value": "www.ikukuomaproject.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71ab17ca91b594f5097b3e99b7deb47d9c40ff41536351149e5a103e22e117ae/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868217": [
        {
            "ioc_value": "www.ikukuomaprojectbackup.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71ab17ca91b594f5097b3e99b7deb47d9c40ff41536351149e5a103e22e117ae/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868218": [
        {
            "ioc_value": "www.ikukuomaprojectbackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71ab17ca91b594f5097b3e99b7deb47d9c40ff41536351149e5a103e22e117ae/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868219": [
        {
            "ioc_value": "www.ikukuomaprojectbackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-04 09:15:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71ab17ca91b594f5097b3e99b7deb47d9c40ff41536351149e5a103e22e117ae/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868215": [
        {
            "ioc_value": "ftp.melrz.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-04 09:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f891f74a43809bc1774c27a6b425a46e265cf5f824196b59c6258cb177504408/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868214": [
        {
            "ioc_value": "ftp.lodenrandmarines.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-04 09:14:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b9d647bfa6a67364f3b0314999be9e60406569be4cdd1f0f7a0b838e45acede1/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868211": [
        {
            "ioc_value": "217.60.195.87:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 09:10:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc695ef912e9d06bd58bd0691378633c76c83e310d393295f939685216e11292/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868212": [
        {
            "ioc_value": "84.38.133.132:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 09:10:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d9ae2b0f01a606a63f32c5d4100040ed6c990c99977f72b28efcd74c9a0b22b1/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868210": [
        {
            "ioc_value": "109.248.150.234:1012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-04 09:10:39",
            "last_seen_utc": "2026-08-31 10:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/256504f53f32ebb1c73e9b833a24991a117ea5aa307c2597abcd1e6e6cbf2d69/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868203": [
        {
            "ioc_value": "ftp.raxclopent.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-08-04 09:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c08270287e5ee97b1e9420e311bd0eb87d12f9ae44ffb05ed2f508aa31abac8/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868197": [
        {
            "ioc_value": "zoiitac.nobodydenied.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 09:03:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868196": [
        {
            "ioc_value": "aydlee.nairmess.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 09:00:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868195": [
        {
            "ioc_value": "nobodydenied.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 08:58:13",
            "last_seen_utc": "2026-08-04 08:59:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868194": [
        {
            "ioc_value": "nairmess.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 08:57:03",
            "last_seen_utc": "2026-08-07 14:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868193": [
        {
            "ioc_value": "178.16.55.104:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 08:50:29",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e7303de39d7b302ea161b61c4200b40ec9303dd848893096dced28351e2f4370/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868192": [
        {
            "ioc_value": "makeverizyjar.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:33:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868190": [
        {
            "ioc_value": "thu-ipad-03.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:33:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868191": [
        {
            "ioc_value": "enter-press-cdn.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:33:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868189": [
        {
            "ioc_value": "tue-orange-04.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:33:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868188": [
        {
            "ioc_value": "mon-banana-06.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:33:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868187": [
        {
            "ioc_value": "http://196.251.107.186/svbia/post.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-08-04 08:30:22",
            "last_seen_utc": "2026-08-19 18:44:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33de9369b22112432f68aa7268ca06328aa0ce7425dc9fafc3bb90429058dc2d/",
            "tags": "SVCStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868186": [
        {
            "ioc_value": "http://62.60.226.232/zpzp/get.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-08-04 08:29:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33de9369b22112432f68aa7268ca06328aa0ce7425dc9fafc3bb90429058dc2d/",
            "tags": "SVCStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868185": [
        {
            "ioc_value": "js5po212.kaarenorge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 08:24:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868184": [
        {
            "ioc_value": "https://doc.nfe-online.com/h/estagio1.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:23:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86e52c43da46e13d47c003980a804f5ca78facac76025b972fcdb44d24818f37/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868183": [
        {
            "ioc_value": "doc.nfiscais.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:22:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868182": [
        {
            "ioc_value": "217.60.195.161:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:22:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86e52c43da46e13d47c003980a804f5ca78facac76025b972fcdb44d24818f37/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868180": [
        {
            "ioc_value": "doc.nfe-online.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 08:21:27",
            "last_seen_utc": "2026-08-04 08:22:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86e52c43da46e13d47c003980a804f5ca78facac76025b972fcdb44d24818f37/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868178": [
        {
            "ioc_value": "182.92.83.146:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 08:18:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868177": [
        {
            "ioc_value": "206.238.42.153:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 08:18:19",
            "last_seen_utc": "2026-08-27 07:27:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868164": [
        {
            "ioc_value": "nailhousechicago.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 08:01:27",
            "last_seen_utc": "2026-08-07 14:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868163": [
        {
            "ioc_value": "nesplowell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 07:59:23",
            "last_seen_utc": "2026-08-07 15:03:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868162": [
        {
            "ioc_value": "64.89.160.76:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-04 07:59:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868159": [
        {
            "ioc_value": "64.89.160.76:8288",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-04 07:58:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868160": [
        {
            "ioc_value": "64.89.160.76:9508",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-04 07:58:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868161": [
        {
            "ioc_value": "64.89.160.76:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-04 07:58:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868158": [
        {
            "ioc_value": "myboutiqswitch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 07:54:42",
            "last_seen_utc": "2026-08-06 03:33:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868157": [
        {
            "ioc_value": "185.242.3.65:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-04 07:44:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5e35657875682dc8e58f803a9cc7142d3d583558d42b5eb3da9e1b87d41be5ec/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868156": [
        {
            "ioc_value": "ftp.ambikaexportsindia.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-08-04 07:43:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6cc86846ced71cc6b23d8e009fdcc0c1becfdfabd6ec4b67100bddf617f14cfc/",
            "tags": "PhantomStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868155": [
        {
            "ioc_value": "194.156.79.203:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 07:40:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13367ed6c45119783c7eccc3db9b7a9095a4d662d9f5e7bc1ae1d195958ab1e2/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868154": [
        {
            "ioc_value": "2.27.160.29:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-04 07:35:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fa86ec228144b089dc8f507f81ddbf7f8bf69fac64c11348e2febea85719f2bb/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868137": [
        {
            "ioc_value": "http://94.26.106.195:5555",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.xmrig",
            "malware_alias": null,
            "malware_printable": "xmrig",
            "first_seen_utc": "2026-08-04 07:32:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://nehemiyawicks.github.io/research",
            "tags": "cryptojacking,proxyjacking,traffmonetizer,xmrig",
            "anonymous": 0,
            "reporter": "nwicks"
        }
    ],
    "1868138": [
        {
            "ioc_value": "http://94.26.106.195:80",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.xmrig",
            "malware_alias": null,
            "malware_printable": "xmrig",
            "first_seen_utc": "2026-08-04 07:32:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://nehemiyawicks.github.io/research",
            "tags": "cryptojacking,proxyjacking,traffmonetizer,xmrig",
            "anonymous": 0,
            "reporter": "nwicks"
        }
    ],
    "1868139": [
        {
            "ioc_value": "http://57.129.119.218:13333",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.xmrig",
            "malware_alias": null,
            "malware_printable": "xmrig",
            "first_seen_utc": "2026-08-04 07:32:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://nehemiyawicks.github.io/research",
            "tags": "cryptojacking,proxyjacking,traffmonetizer,xmrig",
            "anonymous": 0,
            "reporter": "nwicks"
        }
    ],
    "1868148": [
        {
            "ioc_value": "enter-press-cdn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 07:32:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding,Polygon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868149": [
        {
            "ioc_value": "stv4ec5.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 07:32:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding,Polygon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868150": [
        {
            "ioc_value": "stati-fy.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 07:32:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding,Polygon,TDS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868151": [
        {
            "ioc_value": "statifile.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 07:32:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding,Polygon,TDS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868152": [
        {
            "ioc_value": "ravenstonekeep.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 07:32:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding,shadowburn",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868153": [
        {
            "ioc_value": "voidravenwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 07:32:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "EtherHiding,shadowburn",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868147": [
        {
            "ioc_value": "khzxbhq.necedubd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 07:14:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868146": [
        {
            "ioc_value": "necedubd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 07:13:51",
            "last_seen_utc": "2026-08-07 14:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868145": [
        {
            "ioc_value": "dtxwvm.mustlovedogsmobilegrooming.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868144": [
        {
            "ioc_value": "65.21.212.79:62020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-08-04 07:09:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fce095e4833357bbebd160357a28826a360dbcdf4c5eee2a47503e63549dc2af/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868143": [
        {
            "ioc_value": "mustlovedogsmobilegrooming.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 07:09:15",
            "last_seen_utc": "2026-08-07 14:43:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868114": [
        {
            "ioc_value": "http://42.232.238.126:40504/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-04 06:59:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/42.232.238.126",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868115": [
        {
            "ioc_value": "http://182.126.198.5:57587/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-04 06:59:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.126.198.5",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1868124": [
        {
            "ioc_value": "https://v-k.com.ua/vcapcha.ps1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 06:59:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,loader,PowerShell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868135": [
        {
            "ioc_value": "regenerate5141.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 06:59:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,EtherHiding,injected-loader,TDS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868136": [
        {
            "ioc_value": "64.89.160.127:6680",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 06:55:31",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9ce274f0da79ad88585ef5377c9e5c3fa8027dd50e16c7cb9bfa133a08f2ead8/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868127": [
        {
            "ioc_value": "195.177.94.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868128": [
        {
            "ioc_value": "94.154.32.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868129": [
        {
            "ioc_value": "195.177.94.91:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868130": [
        {
            "ioc_value": "158.94.211.183:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868131": [
        {
            "ioc_value": "104.249.10.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868132": [
        {
            "ioc_value": "104.249.10.205:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868133": [
        {
            "ioc_value": "104.239.66.228:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868134": [
        {
            "ioc_value": "104.249.10.144:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868125": [
        {
            "ioc_value": "45.83.28.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868126": [
        {
            "ioc_value": "217.217.97.53:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-04 06:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868123": [
        {
            "ioc_value": "qybtsfy.natsumitapas.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 06:31:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868121": [
        {
            "ioc_value": "748v1dlo.hectortm-plumbing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 06:27:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868120": [
        {
            "ioc_value": "xalfsi.mspa-naperville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 06:24:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868119": [
        {
            "ioc_value": "h6gthnnl.earnmoneyfx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 06:24:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868118": [
        {
            "ioc_value": "mspa-naperville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 06:23:43",
            "last_seen_utc": "2026-08-07 21:52:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868117": [
        {
            "ioc_value": "update-microsoft-data.services",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 06:22:36",
            "last_seen_utc": "2026-08-27 07:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868116": [
        {
            "ioc_value": "jzugv4j0.halcyonhempltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 06:21:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868113": [
        {
            "ioc_value": "pazona.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-04 06:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868112": [
        {
            "ioc_value": "157.20.182.81:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-04 06:08:32",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868111": [
        {
            "ioc_value": "157.20.182.81:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-08-04 06:08:30",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868107": [
        {
            "ioc_value": "136.115.85.178:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 06:05:07",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868106": [
        {
            "ioc_value": "195.177.94.210:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 06:05:06",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868105": [
        {
            "ioc_value": "31.207.7.91:53943",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 06:03:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868103": [
        {
            "ioc_value": "5748asheve.gooning.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 06:02:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868104": [
        {
            "ioc_value": "iloveboats.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 06:02:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868102": [
        {
            "ioc_value": "gooning.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-04 06:02:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868101": [
        {
            "ioc_value": "176.9.164.115:41365",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 06:01:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868100": [
        {
            "ioc_value": "45.10.40.102:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 06:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868098": [
        {
            "ioc_value": "tkushmo.naolemedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 05:47:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868097": [
        {
            "ioc_value": "naolemedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 05:42:51",
            "last_seen_utc": "2026-08-07 14:38:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868096": [
        {
            "ioc_value": "pbbyus.mountainsoccer.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 05:39:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868095": [
        {
            "ioc_value": "mountainsoccer.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 05:37:37",
            "last_seen_utc": "2026-08-07 14:38:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1868092": [
        {
            "ioc_value": "enter-pverif-code.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:25:06",
            "last_seen_utc": "2026-08-06 22:39:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867971": [
        {
            "ioc_value": "189.249.195.86:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:21:19",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://platform.censys.io/hosts/189.249.195.86?at_time=2026-08-03T16%3A58%3A19.500825484Z",
            "tags": "AS 8151,c2,censys,mythic,online",
            "anonymous": 0,
            "reporter": "f1nd3r"
        }
    ],
    "1867999": [
        {
            "ioc_value": "85.120.81.167:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-04 05:21:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867979": [
        {
            "ioc_value": "130.94.115.222:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:21:17",
            "last_seen_utc": "2026-08-04 23:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,mythic,online,self-signed",
            "anonymous": 0,
            "reporter": "f1nd3r"
        }
    ],
    "1868015": [
        {
            "ioc_value": "198.199.72.177:9900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-04 05:21:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14061,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1868033": [
        {
            "ioc_value": "glentraverse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:21:12",
            "last_seen_utc": "2026-08-04 01:26:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,SmartApeSG",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868036": [
        {
            "ioc_value": "46.16.34.50:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-04 05:21:11",
            "last_seen_utc": "2026-08-04 14:55:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868040": [
        {
            "ioc_value": "http://94.154.43.231:3001/install.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:21:09",
            "last_seen_utc": "2026-08-04 12:50:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1868044": [
        {
            "ioc_value": "109.104.155.94:5326",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-04 05:21:08",
            "last_seen_utc": "2026-08-12 08:19:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "440d77642bde0cd5bdd42e3b046983f2,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1868049": [
        {
            "ioc_value": "muhammedmuheisen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:21:07",
            "last_seen_utc": "2026-08-26 21:48:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/6195",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1868051": [
        {
            "ioc_value": "determinedresults.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:21:05",
            "last_seen_utc": "2026-08-26 21:48:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/6198",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1868060": [
        {
            "ioc_value": "2ff86a4fdfec4a5b49d5545f9a62ec4c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:58",
            "last_seen_utc": "2026-08-04 03:40:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868061": [
        {
            "ioc_value": "cc2c8ac5aea8d7c36e9161d54e4255f3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868062": [
        {
            "ioc_value": "4966992c81f7062ed3913ee023240edc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868063": [
        {
            "ioc_value": "a8e9a638aa9e1c2d73f3432b997d7a7f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868064": [
        {
            "ioc_value": "ced4c9b53c3c93a4dbefe2f243cd1c71",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868065": [
        {
            "ioc_value": "1ef19373aae940002a980a984f25555b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868066": [
        {
            "ioc_value": "ea3f9230bb76deb18dedfaea490fd687",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/",
            "tags": "CRPX0,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1868068": [
        {
            "ioc_value": "globalprotection.services",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868069": [
        {
            "ioc_value": "paloaltopnetwork.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:52",
            "last_seen_utc": "2026-08-04 04:07:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,malvertising",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868070": [
        {
            "ioc_value": "download.paloaltopnetwork.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:51",
            "last_seen_utc": "2026-08-04 04:07:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,malvertising",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868071": [
        {
            "ioc_value": "tricerat.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:50",
            "last_seen_utc": "2026-08-04 04:07:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,malvertising",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868072": [
        {
            "ioc_value": "download.tricerat.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868073": [
        {
            "ioc_value": "download.globalprotection.services",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868074": [
        {
            "ioc_value": "https://tricerat.website/download/GlobalProtect_Installer.vhd",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868075": [
        {
            "ioc_value": "https://tricerat.website/download/WorkspotClientSetup64.vhd",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868076": [
        {
            "ioc_value": "https://download.paloaltopnetwork.site/downloadclient/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868077": [
        {
            "ioc_value": "https://tricerat.website/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868078": [
        {
            "ioc_value": "https://download.globalprotection.services/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 05:20:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Atera,ClickFix,FakeInstaller,GlobalProtect,GoogleAds,LNK,malvertising,RMM,typosquat,VHD",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868088": [
        {
            "ioc_value": "eaqbbco.jimmieleeautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 05:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868087": [
        {
            "ioc_value": "resjtt.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 04:53:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868081": [
        {
            "ioc_value": "edixil2z.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 04:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868080": [
        {
            "ioc_value": "sammkop.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 04:16:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868067": [
        {
            "ioc_value": "kzcjtx.morlies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 04:03:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868059": [
        {
            "ioc_value": "euevpre.jackpot88.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 03:18:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868058": [
        {
            "ioc_value": "scdzji.modernglowllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 03:17:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868056": [
        {
            "ioc_value": "aofplt.marathoncrane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 02:35:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868053": [
        {
            "ioc_value": "nhzqisk.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 02:31:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868047": [
        {
            "ioc_value": "cyrlhuj2.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 02:22:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868042": [
        {
            "ioc_value": "157.230.83.73:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-04 02:05:06",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868038": [
        {
            "ioc_value": "hadtmqe.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:47:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868037": [
        {
            "ioc_value": "gsvkwg.lovesiloam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:45:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868032": [
        {
            "ioc_value": "pjptgapx.dusanperisicmd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868031": [
        {
            "ioc_value": "makeverizyjar.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:22:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868030": [
        {
            "ioc_value": "7xa644hx.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:20:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868014": [
        {
            "ioc_value": "phpxta.lnlmotoring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:01:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868013": [
        {
            "ioc_value": "rnxsvbb.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 01:01:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868012": [
        {
            "ioc_value": "a7r6cxyd.lacavamexicancocina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 00:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868011": [
        {
            "ioc_value": "191.96.78.221:7788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-04 00:20:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/37a9ec32272ae8633b64231ba323de25df4190e901ef2544afd99356b3fe49b0/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1868010": [
        {
            "ioc_value": "ipurqgt.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 00:15:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868008": [
        {
            "ioc_value": "opnugp.littlehousetees.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-04 00:15:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1868005": [
        {
            "ioc_value": "enter-pverif-code.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 23:57:53",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867998": [
        {
            "ioc_value": "ejnztsw.morlies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 22:26:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867997": [
        {
            "ioc_value": "hpihyg.marathoncrane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 22:24:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867996": [
        {
            "ioc_value": "morlies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 22:24:04",
            "last_seen_utc": "2026-08-07 14:38:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867995": [
        {
            "ioc_value": "7xv8nzfg.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 22:23:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867994": [
        {
            "ioc_value": "marathoncrane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 22:21:53",
            "last_seen_utc": "2026-08-07 14:33:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867992": [
        {
            "ioc_value": "47.93.42.22:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-03 22:05:08",
            "last_seen_utc": "2026-08-17 08:18:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867989": [
        {
            "ioc_value": "albhjil.modernglowllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 21:43:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867987": [
        {
            "ioc_value": "kpqvuy.lovesiloam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 21:37:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867986": [
        {
            "ioc_value": "lovesiloam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 21:36:36",
            "last_seen_utc": "2026-08-07 14:38:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867983": [
        {
            "ioc_value": "wvesyle.moderncountryrocketheaters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:55:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867982": [
        {
            "ioc_value": "moderncountryrocketheaters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:53:07",
            "last_seen_utc": "2026-08-07 14:33:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867981": [
        {
            "ioc_value": "ioaftq.loveluxeglow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:52:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867974": [
        {
            "ioc_value": "jjj25d6f.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:22:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867973": [
        {
            "ioc_value": "jil3l38n.jimmieleeautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:19:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867972": [
        {
            "ioc_value": "xi84yine.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867970": [
        {
            "ioc_value": "ljbtsuq.midcontinentoilservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:08:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867969": [
        {
            "ioc_value": "zraiky.losfelizapartments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:07:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867967": [
        {
            "ioc_value": "losfelizapartments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 20:05:23",
            "last_seen_utc": "2026-08-03 20:06:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867932": [
        {
            "ioc_value": "https://nonobody123.com/a85e9a98b9364c5d8f74.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-03 19:54:25",
            "last_seen_utc": "2026-09-01 03:22:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,NEWN1,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867935": [
        {
            "ioc_value": "http://59.103.216.239:54871/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 19:54:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.103.216.239",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867952": [
        {
            "ioc_value": "https://professional.baby/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-03 19:54:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867961": [
        {
            "ioc_value": "5.56.25.151:6680",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-03 19:45:50",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867960": [
        {
            "ioc_value": "45.61.176.146:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-03 19:45:41",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867959": [
        {
            "ioc_value": "45.59.120.79:7001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-03 19:45:40",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867958": [
        {
            "ioc_value": "23.160.168.51:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 19:45:16",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867957": [
        {
            "ioc_value": "217.60.195.197:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 19:45:13",
            "last_seen_utc": "2026-09-01 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867956": [
        {
            "ioc_value": "198.46.173.17:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-03 19:44:25",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867955": [
        {
            "ioc_value": "161.97.154.193:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 19:43:49",
            "last_seen_utc": "2026-09-01 02:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867954": [
        {
            "ioc_value": "130.12.182.39:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-03 19:43:23",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867953": [
        {
            "ioc_value": "dickfpg.mgfurnituretampa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 19:27:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867950": [
        {
            "ioc_value": "lfgjvq.lockchangeny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 19:21:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867949": [
        {
            "ioc_value": "lockchangeny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 19:20:28",
            "last_seen_utc": "2026-08-03 19:20:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867939": [
        {
            "ioc_value": "sdxore.lnlmotoring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 18:39:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867938": [
        {
            "ioc_value": "qamwmsl.metropropertygrp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 18:38:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867937": [
        {
            "ioc_value": "metropropertygrp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 18:36:34",
            "last_seen_utc": "2026-08-03 18:36:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867936": [
        {
            "ioc_value": "lnlmotoring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 18:34:15",
            "last_seen_utc": "2026-08-07 14:33:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867931": [
        {
            "ioc_value": "yljcpgd.mercedcutnshaveco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 17:56:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867929": [
        {
            "ioc_value": "akthbr.ljautorepairshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 17:51:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867922": [
        {
            "ioc_value": "akyv188.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867923": [
        {
            "ioc_value": "auk218.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867924": [
        {
            "ioc_value": "co777.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867925": [
        {
            "ioc_value": "ljdnxz.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867926": [
        {
            "ioc_value": "rkdrlc.pw",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867927": [
        {
            "ioc_value": "txpfproxy.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867918": [
        {
            "ioc_value": "https://tdfhdser-1433552157.cos.ap-hongkong.myqcloud.com/20260729213603.zip",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867919": [
        {
            "ioc_value": "https://twilight-shadow-df0c.piecestrengthen3327.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867920": [
        {
            "ioc_value": "https://withered-lake-8596.krzakanna172.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867921": [
        {
            "ioc_value": "https://yfghrey-1433552157.cos.ap-hongkong.myqcloud.com/20260729074327.zip",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867912": [
        {
            "ioc_value": "https://mt-link.qdhuzf.cc/cl/a5UYfW_dao7L4uK02Y5e3T4RKwwLAq7x5FXAtyV8o3UJAUT_K5Ia0VIbWVrxBLXMNGzEK9WhhAhSQFoBqqCupKzzInKiHGMgGOcp1Yiigbo6JUPzwHm0YBF._JurP0LhKB4wt0m5H1gYc3aG149V2da397unkY11uVn30sF8DGJJMiZtmJS_UGZtI_JqupELrUzGNWj2gvSMSOq9_0IdaVJwLmuBiwllpHaogXqN4cKH--rCZGX49Rzqev4iXM--N6CY14rgI..iNc2Atg5k9g~~",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867913": [
        {
            "ioc_value": "https://mt-link.qdhuzf.cc/cl/rlLXIXSwv8IKS9aWzYqx.GteIY.dfPLTRPY013hMjghjIqNPZYu0.3GRfdJuvkQ6tE_bREwYxiJYCce5tvEnoE3KBUTwvCDTiu2bDHWXZs0x1W9uo0iVh.1QNGRtX1FCHw7RAGf7rgebqPkGAHTMO9PNVObFPz6ZweWWMF.A8WcBWExrFhKajHLSIXt2Nztt0U74bljpjJsEHOma6bAX63E8oWmZHpihcBw2sQ~~--2IJbf9QXryunJZJU--8Oh.0r5JKH3jZkGT7hZ3yQ~~",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867914": [
        {
            "ioc_value": "https://restless-wood-acdc.kubataffeltie470.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867915": [
        {
            "ioc_value": "https://royal-breeze-dc21.piecestrengthen3327.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867916": [
        {
            "ioc_value": "https://still-block-4945.kubukushi4609-fee.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867917": [
        {
            "ioc_value": "https://sweet-thunder-52f5.yenthi893197.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867905": [
        {
            "ioc_value": "https://kaiwyrey.eu.cc/d/6f025f85e3c0",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867906": [
        {
            "ioc_value": "https://kaiwyrey.eu.cc/d/70878efbc582",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867907": [
        {
            "ioc_value": "https://kaiwyrey.eu.cc/d/ac516096c285",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867908": [
        {
            "ioc_value": "https://kaiwyrey.eu.cc/d/bdc9637e70c2",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867909": [
        {
            "ioc_value": "https://lively-fog-72fd.piecestrengthen3327.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867910": [
        {
            "ioc_value": "https://mt-link.hxnxajp.club/cl/1tI4_QY7DCeBkEln5kmk9jrSOzkvCGnqOfOF.bP_ka4kNqy51He4r8IRtwhlZ2I_O_2nU1KmVVSZh_zV7BAOwQDLryYzqpE8R_QSdcIQel3f70U7Skywz.3B98ZVFhCxcdZMSYEd7RUj5.hif56qVudA9TU0yYiHnpS9u9fRMFRUpUFU4WNZg58wPV.jZgunKFKSrVPKboquHgJkbIYtGq_rfPM.1ldbJbc~--NuCyngcfq.n1c.5q--k8naVtPRTZtZg9yGwu3P8g~~",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867911": [
        {
            "ioc_value": "https://mt-link.jiosjcjp.club/cl/XyTkjX7q1dAL2BGNTd9WS4rxd2jM6dRs81I6p9oIabEzdaoU.hKBV4joWBgjmpuG1R7lQFSw.ycTLHGORYhj2SUP3sFXpIV6xdCcBG0RXRfRL7UHgFuOXTo2My_iS7qkQfe3qQ9HI3LZ8Yxj6VNOgU8mxReAxoA9FexD3dTAKBOPLMZS2YwrHmsCeDNS3nLZL3Bu53l9rtzb6rmz2xWLsLH_YpqfyMFUI0e7Ac9xKG.C0r8~--qdLygJPqKgnky9Es--_CzsqbW_5cv2HhL6j7Dr3w~~",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867898": [
        {
            "ioc_value": "http://kaiwyrey.eu.cc/d/bdc9637e70c2",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867899": [
        {
            "ioc_value": "http://withered-lake-8596.krzakanna172.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867900": [
        {
            "ioc_value": "https://autumn-mountain-e855.erinbraumbachlianebl.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867901": [
        {
            "ioc_value": "https://divine-shape-b4fb.erinbraumbachlianebl.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867902": [
        {
            "ioc_value": "https://fragrant-shape-bd43.kucantoojd641.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867903": [
        {
            "ioc_value": "https://frosty-tooth-517b.erinbraumbachlianebl.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867904": [
        {
            "ioc_value": "https://icy-mountain-13d6.hazukashi4816.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867896": [
        {
            "ioc_value": "http://autumn-mountain-e855.erinbraumbachlianebl.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867897": [
        {
            "ioc_value": "http://icy-mountain-13d6.hazukashi4816.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 17:21:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "valleyrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1867895": [
        {
            "ioc_value": "xcmkwvw.memorylanelimerick.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 17:10:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867892": [
        {
            "ioc_value": "ohjslh.littlemissclothing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 17:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867889": [
        {
            "ioc_value": "sjpwlsr.mbperformanceonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 16:21:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867888": [
        {
            "ioc_value": "mbperformanceonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 16:20:03",
            "last_seen_utc": "2026-08-03 16:20:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867887": [
        {
            "ioc_value": "tyccsu.littlehousetees.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 16:18:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867886": [
        {
            "ioc_value": "littlehousetees.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 16:17:42",
            "last_seen_utc": "2026-08-07 14:38:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867885": [
        {
            "ioc_value": "thu-ipad-03.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 16:07:52",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867861": [
        {
            "ioc_value": "91.208.162.129:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 15:57:05",
            "last_seen_utc": "2026-08-06 01:18:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867862": [
        {
            "ioc_value": "46.16.34.50:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 15:57:05",
            "last_seen_utc": "2026-08-06 01:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867863": [
        {
            "ioc_value": "85.120.81.167:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 15:57:05",
            "last_seen_utc": "2026-08-06 01:18:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867880": [
        {
            "ioc_value": "91.208.162.129:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 15:57:04",
            "last_seen_utc": "2026-08-04 08:14:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867879": [
        {
            "ioc_value": "nrraqhs.maxwellhouse.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 15:36:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867878": [
        {
            "ioc_value": "maxwellhouse.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 15:34:39",
            "last_seen_utc": "2026-08-03 15:34:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867877": [
        {
            "ioc_value": "aqrhxu.linuxmedialabs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 15:34:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867875": [
        {
            "ioc_value": "rdpok17h.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 15:18:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867874": [
        {
            "ioc_value": "mnyz084l.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 15:15:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867869": [
        {
            "ioc_value": "prod5.data-square.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-03 14:59:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867868": [
        {
            "ioc_value": "krvryy.laurelgrovepv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867867": [
        {
            "ioc_value": "oywkxgw.massage-spa-zulyacquavitaespa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:49:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867866": [
        {
            "ioc_value": "massage-spa-zulyacquavitaespa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:49:23",
            "last_seen_utc": "2026-08-03 14:49:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867865": [
        {
            "ioc_value": "laurelgrovepv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:46:43",
            "last_seen_utc": "2026-08-03 14:47:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867864": [
        {
            "ioc_value": "http://zokrie.click:4536",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-03 14:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867847": [
        {
            "ioc_value": "119.194.153.12:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-03 14:19:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,dropper,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1867848": [
        {
            "ioc_value": "31.56.53.172:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-03 14:19:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,dropper,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1867849": [
        {
            "ioc_value": "39.108.72.32:9177",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-03 14:19:09",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,dropper,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1867859": [
        {
            "ioc_value": "85.120.81.167:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 14:19:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867860": [
        {
            "ioc_value": "91.208.162.129:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 14:19:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867858": [
        {
            "ioc_value": "jaksvaa.marcoymarco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:08:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867857": [
        {
            "ioc_value": "103.83.87.87:42900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-03 14:05:36",
            "last_seen_utc": "2026-08-19 18:41:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4fc76388750726065c5a0379b68327f38da529edbc603e36401063ca138f0b41/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867852": [
        {
            "ioc_value": "marcoymarco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:03:31",
            "last_seen_utc": "2026-08-03 14:04:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867851": [
        {
            "ioc_value": "khqcst.latinmarketmana.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 14:02:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867846": [
        {
            "ioc_value": "89.34.90.99:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 13:28:20",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@netresec/116960006310432776",
            "tags": "PureRAT",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1867845": [
        {
            "ioc_value": "svohxwo.letterboxedsolved.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 13:18:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867844": [
        {
            "ioc_value": "letterboxedsolved.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 13:17:59",
            "last_seen_utc": "2026-08-03 13:18:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867843": [
        {
            "ioc_value": "nxpdrg.lashextensionsdowney.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 13:15:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867842": [
        {
            "ioc_value": "lashextensionsdowney.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 13:15:40",
            "last_seen_utc": "2026-08-07 14:28:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867838": [
        {
            "ioc_value": "192.140.175.92:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 13:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e18134f304e4b3964ebfae04b8c465fd4f8628ba66f19486d64980e936d6dca3/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867839": [
        {
            "ioc_value": "192.140.175.92:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-03 13:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e18134f304e4b3964ebfae04b8c465fd4f8628ba66f19486d64980e936d6dca3/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867776": [
        {
            "ioc_value": "143.198.206.191:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 12:43:16",
            "last_seen_utc": "2026-08-05 14:05:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867790": [
        {
            "ioc_value": "137.184.199.120:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 12:43:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867806": [
        {
            "ioc_value": "137.184.199.120:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 12:43:13",
            "last_seen_utc": "2026-08-06 19:09:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867807": [
        {
            "ioc_value": "185.194.218.82:4930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-03 12:43:11",
            "last_seen_utc": "2026-08-11 17:55:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,e1c021a2a661457101d90095eb3b4696,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867819": [
        {
            "ioc_value": "167.172.71.69:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 12:43:11",
            "last_seen_utc": "2026-08-05 04:51:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867831": [
        {
            "ioc_value": "http://103.72.1.211:46199/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 12:43:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.72.1.211",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867832": [
        {
            "ioc_value": "http://43.230.94.187:42391/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 12:43:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/43.230.94.187",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867837": [
        {
            "ioc_value": "http://voihxd.xyz:7528",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-03 12:39:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867836": [
        {
            "ioc_value": "nhxflno.lesleysbeautysalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 12:34:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867835": [
        {
            "ioc_value": "cqdaaj.lapointerealtor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 12:32:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867833": [
        {
            "ioc_value": "lapointerealtor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 12:30:07",
            "last_seen_utc": "2026-08-07 14:28:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867830": [
        {
            "ioc_value": "g4p227nh.highdesertarchers.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 12:18:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867826": [
        {
            "ioc_value": "xxquzmb.leschatroom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 11:49:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867825": [
        {
            "ioc_value": "leschatroom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 11:46:59",
            "last_seen_utc": "2026-08-03 11:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867824": [
        {
            "ioc_value": "yxljgp.lanmassage.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 11:46:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867823": [
        {
            "ioc_value": "lanmassage.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 11:44:40",
            "last_seen_utc": "2026-08-03 11:45:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867822": [
        {
            "ioc_value": "31.57.184.10:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-03 11:35:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/21871794d9b51b04698daa0385a36d0092ba26aabd0da5e3106c5fa102adb703/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867811": [
        {
            "ioc_value": "gqfcklh.leesvillelakerealtor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 11:01:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867810": [
        {
            "ioc_value": "leesvillelakerealtor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 11:01:28",
            "last_seen_utc": "2026-08-04 14:25:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867809": [
        {
            "ioc_value": "rntmck.lamournails.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:59:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867808": [
        {
            "ioc_value": "lamournails.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:59:06",
            "last_seen_utc": "2026-08-04 10:24:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867805": [
        {
            "ioc_value": "qjnimld.ledridingco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:17:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867804": [
        {
            "ioc_value": "t3lf58rt.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:17:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867803": [
        {
            "ioc_value": "iwh49pk4.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:16:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867802": [
        {
            "ioc_value": "ybzfmripjfdrwxxsqw.gamestwists.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:16:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867801": [
        {
            "ioc_value": "jrux1a1x.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:15:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867799": [
        {
            "ioc_value": "tlwyot.laketappsboatcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:14:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867791": [
        {
            "ioc_value": "afpheqe.ledridingco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 10:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867788": [
        {
            "ioc_value": "hssewk.laketappsboatcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 09:49:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867787": [
        {
            "ioc_value": "laketappsboatcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 09:49:25",
            "last_seen_utc": "2026-08-07 14:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867786": [
        {
            "ioc_value": "91.206.178.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-08-03 09:46:43",
            "last_seen_utc": "2026-09-01 02:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867785": [
        {
            "ioc_value": "80.76.49.38:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 09:46:33",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867784": [
        {
            "ioc_value": "45.61.176.146:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-03 09:46:06",
            "last_seen_utc": "2026-09-01 02:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867783": [
        {
            "ioc_value": "207.56.28.111:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867782": [
        {
            "ioc_value": "207.56.28.111:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867781": [
        {
            "ioc_value": "193.112.169.214:30727",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-03 09:44:27",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867780": [
        {
            "ioc_value": "192.159.99.55:8989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-03 09:44:24",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867779": [
        {
            "ioc_value": "135.136.132.74:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-03 09:43:28",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867777": [
        {
            "ioc_value": "104.207.90.3:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-03 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867778": [
        {
            "ioc_value": "104.207.90.93:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-03 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867775": [
        {
            "ioc_value": "pvxvsil.lawnmowinglawrenceville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 09:20:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867774": [
        {
            "ioc_value": "lawnmowinglawrenceville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 09:18:26",
            "last_seen_utc": "2026-08-07 14:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867773": [
        {
            "ioc_value": "pzbwmi.lakerealestatetn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 09:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867772": [
        {
            "ioc_value": "62.238.55.102:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867767": [
        {
            "ioc_value": "65.108.82.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867768": [
        {
            "ioc_value": "157.180.35.166:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867769": [
        {
            "ioc_value": "2.28.15.55:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867770": [
        {
            "ioc_value": "65.108.201.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867771": [
        {
            "ioc_value": "176.9.118.53:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867761": [
        {
            "ioc_value": "37.27.197.184:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867762": [
        {
            "ioc_value": "37.27.194.103:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867763": [
        {
            "ioc_value": "167.233.215.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867764": [
        {
            "ioc_value": "159.69.103.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867765": [
        {
            "ioc_value": "65.108.71.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867766": [
        {
            "ioc_value": "5.75.238.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867756": [
        {
            "ioc_value": "65.109.173.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867757": [
        {
            "ioc_value": "2.28.12.152:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867758": [
        {
            "ioc_value": "2.28.13.53:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867759": [
        {
            "ioc_value": "37.27.193.182:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867760": [
        {
            "ioc_value": "37.27.204.215:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867750": [
        {
            "ioc_value": "2.28.9.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867751": [
        {
            "ioc_value": "65.109.165.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867752": [
        {
            "ioc_value": "178.105.99.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:14",
            "last_seen_utc": "2026-08-10 08:21:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867753": [
        {
            "ioc_value": "77.42.79.241:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867754": [
        {
            "ioc_value": "46.225.62.20:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867755": [
        {
            "ioc_value": "2.28.9.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867745": [
        {
            "ioc_value": "88.99.126.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867746": [
        {
            "ioc_value": "77.42.49.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867747": [
        {
            "ioc_value": "65.108.141.220:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867748": [
        {
            "ioc_value": "65.108.65.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867749": [
        {
            "ioc_value": "65.108.197.205:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867743": [
        {
            "ioc_value": "138.201.157.90:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867744": [
        {
            "ioc_value": "65.108.1.249:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867736": [
        {
            "ioc_value": "crm.808skor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867737": [
        {
            "ioc_value": "pos.808skor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867738": [
        {
            "ioc_value": "pnd.808skor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867739": [
        {
            "ioc_value": "vho.808skor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867740": [
        {
            "ioc_value": "xip.808skor.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867725": [
        {
            "ioc_value": "vog.peluangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": "2026-08-27 17:28:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867726": [
        {
            "ioc_value": "dbm.peluangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867727": [
        {
            "ioc_value": "m36.peluangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867728": [
        {
            "ioc_value": "out.peluangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867729": [
        {
            "ioc_value": "bpo.peluangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867730": [
        {
            "ioc_value": "bpo.pelorsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867731": [
        {
            "ioc_value": "tyb.pelorsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867732": [
        {
            "ioc_value": "sro.pelorsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867733": [
        {
            "ioc_value": "ggr.pelorsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867734": [
        {
            "ioc_value": "cto.pelorsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867735": [
        {
            "ioc_value": "bpo.akasia988.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867716": [
        {
            "ioc_value": "dnz.cau777.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": "2026-08-03 10:26:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867717": [
        {
            "ioc_value": "dnz.popi999.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": "2026-08-03 10:25:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867718": [
        {
            "ioc_value": "out.popi999.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867719": [
        {
            "ioc_value": "pey.cau777.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": "2026-08-21 13:07:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867720": [
        {
            "ioc_value": "pey.popi999.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867721": [
        {
            "ioc_value": "rrn.cau777.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": "2026-08-21 13:07:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867722": [
        {
            "ioc_value": "rrn.popi999.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867723": [
        {
            "ioc_value": "vog.cau777.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": "2026-08-21 13:07:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867724": [
        {
            "ioc_value": "vog.popi999.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 09:04:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867715": [
        {
            "ioc_value": "lakerealestatetn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 09:04:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867710": [
        {
            "ioc_value": "https://2.28.15.55/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:30",
            "last_seen_utc": "2026-08-24 10:45:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867711": [
        {
            "ioc_value": "https://65.108.201.76/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:30",
            "last_seen_utc": "2026-08-11 04:50:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867712": [
        {
            "ioc_value": "https://116.202.186.230/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:30",
            "last_seen_utc": "2026-08-31 09:51:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867713": [
        {
            "ioc_value": "https://176.9.118.53/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867714": [
        {
            "ioc_value": "https://62.238.55.102/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:30",
            "last_seen_utc": "2026-08-14 06:13:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867705": [
        {
            "ioc_value": "https://159.69.103.239/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867706": [
        {
            "ioc_value": "https://65.108.71.75/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867707": [
        {
            "ioc_value": "https://5.75.238.232/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867708": [
        {
            "ioc_value": "https://65.108.82.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867709": [
        {
            "ioc_value": "https://157.180.35.166/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867699": [
        {
            "ioc_value": "https://2.28.13.53/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867700": [
        {
            "ioc_value": "https://37.27.193.182/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:28",
            "last_seen_utc": "2026-08-14 04:14:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867701": [
        {
            "ioc_value": "https://37.27.204.215/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:28",
            "last_seen_utc": "2026-08-30 11:53:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867702": [
        {
            "ioc_value": "https://37.27.197.184/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:28",
            "last_seen_utc": "2026-08-17 17:33:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867703": [
        {
            "ioc_value": "https://37.27.194.103/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867704": [
        {
            "ioc_value": "https://167.233.215.136/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867694": [
        {
            "ioc_value": "https://77.42.79.241/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867695": [
        {
            "ioc_value": "https://46.225.62.20/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867696": [
        {
            "ioc_value": "https://2.28.9.155/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867697": [
        {
            "ioc_value": "https://65.109.173.132/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867698": [
        {
            "ioc_value": "https://2.28.12.152/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867690": [
        {
            "ioc_value": "https://65.108.197.205/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:26",
            "last_seen_utc": "2026-08-30 19:49:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867691": [
        {
            "ioc_value": "https://2.28.9.232/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:26",
            "last_seen_utc": "2026-08-11 04:50:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867692": [
        {
            "ioc_value": "https://65.109.165.156/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:26",
            "last_seen_utc": "2026-08-14 13:42:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867693": [
        {
            "ioc_value": "https://178.105.99.239/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:26",
            "last_seen_utc": "2026-08-21 06:42:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867685": [
        {
            "ioc_value": "https://65.108.1.249/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867686": [
        {
            "ioc_value": "https://88.99.126.229/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867687": [
        {
            "ioc_value": "https://77.42.49.112/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867688": [
        {
            "ioc_value": "https://65.108.141.220/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867689": [
        {
            "ioc_value": "https://65.108.65.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867682": [
        {
            "ioc_value": "https://xip.808skor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867683": [
        {
            "ioc_value": "https://91.99.123.205/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:24",
            "last_seen_utc": "2026-08-11 04:50:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867684": [
        {
            "ioc_value": "https://138.201.157.90/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:24",
            "last_seen_utc": "2026-08-11 04:48:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867678": [
        {
            "ioc_value": "https://crm.808skor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867679": [
        {
            "ioc_value": "https://pos.808skor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867680": [
        {
            "ioc_value": "https://pnd.808skor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867681": [
        {
            "ioc_value": "https://vho.808skor.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867676": [
        {
            "ioc_value": "https://ggr.pelorsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867677": [
        {
            "ioc_value": "https://cto.pelorsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867670": [
        {
            "ioc_value": "https://m36.peluangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867671": [
        {
            "ioc_value": "https://out.peluangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867672": [
        {
            "ioc_value": "https://bpo.peluangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867673": [
        {
            "ioc_value": "https://bpo.pelorsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867674": [
        {
            "ioc_value": "https://tyb.pelorsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867675": [
        {
            "ioc_value": "https://sro.pelorsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867664": [
        {
            "ioc_value": "https://rrn.cau777.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:20",
            "last_seen_utc": "2026-08-21 13:06:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867665": [
        {
            "ioc_value": "https://rrn.popi999.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867666": [
        {
            "ioc_value": "https://vog.cau777.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:20",
            "last_seen_utc": "2026-08-21 13:06:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867667": [
        {
            "ioc_value": "https://vog.popi999.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867668": [
        {
            "ioc_value": "https://vog.peluangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:20",
            "last_seen_utc": "2026-08-27 17:28:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867669": [
        {
            "ioc_value": "https://dbm.peluangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867660": [
        {
            "ioc_value": "https://dnz.popi999.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:19",
            "last_seen_utc": "2026-08-03 10:25:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867661": [
        {
            "ioc_value": "https://out.popi999.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867662": [
        {
            "ioc_value": "https://pey.cau777.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:19",
            "last_seen_utc": "2026-08-21 13:06:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867663": [
        {
            "ioc_value": "https://pey.popi999.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867656": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198664897346",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:18",
            "last_seen_utc": "2026-08-24 13:47:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867657": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198667588759",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:18",
            "last_seen_utc": "2026-08-24 13:47:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867658": [
        {
            "ioc_value": "https://t.me/x0xprs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:18",
            "last_seen_utc": "2026-08-24 10:37:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867659": [
        {
            "ioc_value": "https://dnz.cau777.org/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-03 08:50:18",
            "last_seen_utc": "2026-08-03 10:26:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1867655": [
        {
            "ioc_value": "yo24r1j5.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 08:48:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867629": [
        {
            "ioc_value": "http://223.123.71.61:57047/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 08:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.71.61",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867630": [
        {
            "ioc_value": "http://151.233.179.226:35297/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 08:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/151.233.179.226",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867634": [
        {
            "ioc_value": "137.184.199.120:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 08:40:47",
            "last_seen_utc": "2026-08-09 20:43:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867631": [
        {
            "ioc_value": "http://27.215.181.160:36250/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 08:40:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.215.181.160",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867652": [
        {
            "ioc_value": "103.214.146.46:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 08:40:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867654": [
        {
            "ioc_value": "ptfkbea.lawnequipmentfix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 08:34:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867653": [
        {
            "ioc_value": "lawnequipmentfix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 08:32:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867651": [
        {
            "ioc_value": "megecb.kzoomenofpurpose.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 08:21:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867643": [
        {
            "ioc_value": "hmlekui.lavishednailssalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 07:49:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867642": [
        {
            "ioc_value": "lavishednailssalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 07:47:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867641": [
        {
            "ioc_value": "ptmmar.kfsteels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 07:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867640": [
        {
            "ioc_value": "92.119.158.20:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-03 07:05:06",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867636": [
        {
            "ioc_value": "ygttuct.laurelwoodacademyfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 07:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867635": [
        {
            "ioc_value": "laurelwoodacademyfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 07:02:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867633": [
        {
            "ioc_value": "gzbqsp.kaarenorge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 06:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867632": [
        {
            "ioc_value": "hrzrcyvx.jdk-services.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 06:46:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867628": [
        {
            "ioc_value": "qhtxwte.fitprotracker-campaign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 06:10:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867627": [
        {
            "ioc_value": "tpnklt.k-optic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 06:07:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867543": [
        {
            "ioc_value": "168.144.138.186:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867545": [
        {
            "ioc_value": "144.124.239.18:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867546": [
        {
            "ioc_value": "198.98.53.100:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:46",
            "last_seen_utc": "2026-08-20 01:54:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867569": [
        {
            "ioc_value": "165.245.219.184:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867576": [
        {
            "ioc_value": "154.12.237.176:2535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-03 05:45:45",
            "last_seen_utc": "2026-08-06 11:40:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,f0e7dc585ba3ebf586da7b92aedbfc64,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867582": [
        {
            "ioc_value": "http://103.174.243.198:48214/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-03 05:45:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.198",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867592": [
        {
            "ioc_value": "207.154.240.223:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867601": [
        {
            "ioc_value": "http://31.56.209.153/nz.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-03 05:45:42",
            "last_seen_utc": "2026-08-03 02:40:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1867607": [
        {
            "ioc_value": "198.98.53.100:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:42",
            "last_seen_utc": "2026-08-18 08:41:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867623": [
        {
            "ioc_value": "47.107.224.89:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-03 05:45:41",
            "last_seen_utc": "2026-08-03 22:05:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867622": [
        {
            "ioc_value": "o04h18rp.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 05:28:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867621": [
        {
            "ioc_value": "jsq8jcv8.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 05:25:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867620": [
        {
            "ioc_value": "nrbjyac.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 05:22:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867619": [
        {
            "ioc_value": "tdsgug.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 05:19:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867613": [
        {
            "ioc_value": "raerazl.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 04:39:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867612": [
        {
            "ioc_value": "msnwgu.josetreeservice.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 04:31:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867609": [
        {
            "ioc_value": "yubvuzk.jackpot77.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 03:49:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867608": [
        {
            "ioc_value": "fmbuzp.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 03:47:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867604": [
        {
            "ioc_value": "qnfnsrc.jackpot4d.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 03:03:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867603": [
        {
            "ioc_value": "dmnjzo.jimmieleeautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 03:02:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867602": [
        {
            "ioc_value": "jadakh40.highdesertarchers.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 02:46:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867600": [
        {
            "ioc_value": "hseiges.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 02:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867599": [
        {
            "ioc_value": "akdczp.jackyleeschinesecuisine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 02:17:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867594": [
        {
            "ioc_value": "wczkcbe.halcyonhempltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 01:33:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867593": [
        {
            "ioc_value": "eyzdfx.jackpotslot.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 01:31:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867590": [
        {
            "ioc_value": "82.156.11.154:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-03 01:05:05",
            "last_seen_utc": "2026-09-01 02:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867588": [
        {
            "ioc_value": "qppbkj.jackpot888.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 00:48:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867587": [
        {
            "ioc_value": "avgfrfd.gorbio-echos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 00:47:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867586": [
        {
            "ioc_value": "gif4ttuk.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 00:46:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867585": [
        {
            "ioc_value": "http://uiccvbk.click:8839",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-03 00:29:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867584": [
        {
            "ioc_value": "7qvht67q.angebagnia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 00:25:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867583": [
        {
            "ioc_value": "gw7pvrql.hectortm-plumbing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 00:25:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867578": [
        {
            "ioc_value": "akdsoev.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-03 00:04:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867577": [
        {
            "ioc_value": "ewybru.jackpot88.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 23:56:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867575": [
        {
            "ioc_value": "xqfowhk.kingsranchministries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 23:19:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867574": [
        {
            "ioc_value": "kingsranchministries.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 23:14:07",
            "last_seen_utc": "2026-08-07 14:23:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867573": [
        {
            "ioc_value": "xlwkuu.lacocina-taqueria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 23:11:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867572": [
        {
            "ioc_value": "lacocina-taqueria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 23:10:16",
            "last_seen_utc": "2026-08-07 14:23:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867568": [
        {
            "ioc_value": "d0jft8en.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 22:42:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867567": [
        {
            "ioc_value": "ewglizk.kindredmanitowoc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 22:30:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867566": [
        {
            "ioc_value": "kindredmanitowoc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 22:28:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867565": [
        {
            "ioc_value": "kptawr.lacavamexicancocina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 22:26:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867564": [
        {
            "ioc_value": "lacavamexicancocina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 22:24:48",
            "last_seen_utc": "2026-08-04 00:19:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867558": [
        {
            "ioc_value": "mjmdcdg.kfsteels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 21:44:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867557": [
        {
            "ioc_value": "kfsteels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 21:43:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867556": [
        {
            "ioc_value": "hlemxe.kzoomenofpurpose.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 21:41:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867555": [
        {
            "ioc_value": "kzoomenofpurpose.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 21:39:16",
            "last_seen_utc": "2026-08-07 14:22:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867549": [
        {
            "ioc_value": "izxeqac.kendallfit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 21:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867548": [
        {
            "ioc_value": "kendallfit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:57:35",
            "last_seen_utc": "2026-08-07 14:22:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867547": [
        {
            "ioc_value": "xgfxfq.k-optic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:56:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867544": [
        {
            "ioc_value": "k-optic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:53:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867542": [
        {
            "ioc_value": "wh9d0q5b.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:37:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867541": [
        {
            "ioc_value": "dexvckz.keepitgnarly.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:13:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867540": [
        {
            "ioc_value": "keepitgnarly.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:12:07",
            "last_seen_utc": "2026-08-07 14:22:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867539": [
        {
            "ioc_value": "qjqxrz.kkslot777.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:10:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867538": [
        {
            "ioc_value": "kkslot777.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 20:08:20",
            "last_seen_utc": "2026-08-07 14:22:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867497": [
        {
            "ioc_value": "https://exovision.cc/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-02 19:53:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://imgur.com/a/5lgXRzZ",
            "tags": "android,c2-panel,rat,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867508": [
        {
            "ioc_value": "http://175.107.221.144:37393/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-02 19:53:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.221.144",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867509": [
        {
            "ioc_value": "http://153.117.15.67:54002/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-02 19:53:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.67",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867535": [
        {
            "ioc_value": "38.60.230.135:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-02 19:45:45",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867536": [
        {
            "ioc_value": "38.60.230.135:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-02 19:45:45",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867537": [
        {
            "ioc_value": "38.60.230.135:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-02 19:45:45",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867534": [
        {
            "ioc_value": "27.124.36.153:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 19:45:35",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867532": [
        {
            "ioc_value": "217.60.77.60:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 19:45:28",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867533": [
        {
            "ioc_value": "217.60.77.60:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 19:45:28",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867530": [
        {
            "ioc_value": "207.56.28.108:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 19:44:42",
            "last_seen_utc": "2026-09-01 02:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867531": [
        {
            "ioc_value": "207.56.28.111:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 19:44:42",
            "last_seen_utc": "2026-09-01 02:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867529": [
        {
            "ioc_value": "198.46.173.17:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-02 19:44:33",
            "last_seen_utc": "2026-09-01 02:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867528": [
        {
            "ioc_value": "176.97.114.8:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-02 19:44:07",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867527": [
        {
            "ioc_value": "109.248.151.114:9829",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-02 19:43:18",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867526": [
        {
            "ioc_value": "tyarvak.karnameh-shiraz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 19:28:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867525": [
        {
            "ioc_value": "zpsruk.kaptureprefab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 19:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867524": [
        {
            "ioc_value": "1zgt04hh.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 19:26:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867523": [
        {
            "ioc_value": "covenantnewmd.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 19:26:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867522": [
        {
            "ioc_value": "j4j759y5.akabespokejewellers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 19:24:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867521": [
        {
            "ioc_value": "kaptureprefab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 19:22:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867515": [
        {
            "ioc_value": "iyxadrf.jbgkito21.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 18:46:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867514": [
        {
            "ioc_value": "huscms.kanganjeweller.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 18:37:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867513": [
        {
            "ioc_value": "pool8.reefapp.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-02 18:37:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867512": [
        {
            "ioc_value": "kanganjeweller.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 18:37:16",
            "last_seen_utc": "2026-08-07 14:22:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867511": [
        {
            "ioc_value": "602kigvy.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 18:35:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867510": [
        {
            "ioc_value": "uzyjmjoqveovvvbfxo.gamestwists.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 18:25:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867502": [
        {
            "ioc_value": "mhkkzdp.jasperstays.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 17:56:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867501": [
        {
            "ioc_value": "ledxom.kaarenorge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 17:56:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867500": [
        {
            "ioc_value": "bpmthso.juanfimonitoring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 17:15:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867499": [
        {
            "ioc_value": "juanfimonitoring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 17:10:08",
            "last_seen_utc": "2026-08-07 14:22:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867498": [
        {
            "ioc_value": "maduul.jamaicaseamoss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 17:08:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867496": [
        {
            "ioc_value": "jamaicaseamoss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 17:06:19",
            "last_seen_utc": "2026-08-07 14:22:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867493": [
        {
            "ioc_value": "ppyzqhw.josiahskeats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 16:26:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867492": [
        {
            "ioc_value": "josiahskeats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 16:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867491": [
        {
            "ioc_value": "ixober.jamaicamihappyga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 16:21:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867490": [
        {
            "ioc_value": "jamaicamihappyga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 16:20:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867321": [
        {
            "ioc_value": "138.124.67.47:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-02 15:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "booter,ddos,ddos-for-hire,stresser",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867327": [
        {
            "ioc_value": "feather-24.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-02 15:45:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AMOS,ClickFix,macos,MacWhisper,pastejacking,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867330": [
        {
            "ioc_value": "haven-vibe.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-02 15:45:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AMOS,ClickFix,macos,MacWhisper,pastejacking,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867331": [
        {
            "ioc_value": "https://feather-24.com/curl/50919cfb07265cc6116b5ced7fbdb9c8f5e214445eea436e93e2c88d70da7e43",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-02 15:45:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AMOS,ClickFix,macos,MacWhisper,pastejacking,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867332": [
        {
            "ioc_value": "https://haven-vibe.com/api/metrics/run?event=pasted",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-02 15:45:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AMOS,ClickFix,macos,MacWhisper,pastejacking,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867333": [
        {
            "ioc_value": "https://feather-24.com/2kqYRM0DCrnyJgoS4gVLl_FHJRRdTUhGCbjyuYwpZ6c/code3/update",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-08-02 15:45:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AMOS,ClickFix,macos,MacWhisper,pastejacking,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867487": [
        {
            "ioc_value": "cvwueyu.josetreeservice.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 15:41:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867486": [
        {
            "ioc_value": "204.10.160.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-08-02 15:40:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc42da3571e4f907f456b2edb0b0ce4b22a66adc2f2c4d006b0c40ccdf69df77/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867485": [
        {
            "ioc_value": "wjxhax.jackyleeschinesecuisine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 15:40:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867484": [
        {
            "ioc_value": "josetreeservice.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 15:39:08",
            "last_seen_utc": "2026-08-07 14:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867483": [
        {
            "ioc_value": "jackyleeschinesecuisine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 15:35:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867482": [
        {
            "ioc_value": "e7b8a37f2bb2238b7ce955e0bc3e97c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867480": [
        {
            "ioc_value": "042c76861bfba62c1e4946697a143a185488c0e15f41431c3cd5a51dc11e52a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867481": [
        {
            "ioc_value": "07139a197cb37cd7daf6cf6d17d7c738cc487f93",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867477": [
        {
            "ioc_value": "6167be94c33b2a86f9820cbc1b901700cf5d690193213cb14f44687dd4ed4e18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867478": [
        {
            "ioc_value": "4eb4232bee4b5502a1ded712ef3d45b5e553d240",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867479": [
        {
            "ioc_value": "7fdad15d38c44af4039bd440ec83b6e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867475": [
        {
            "ioc_value": "53b2409da145971e26878378ddd1338be7ba48d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867476": [
        {
            "ioc_value": "de65b65e7d5d3fd35f062341b5d47eff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867474": [
        {
            "ioc_value": "c703f7c8a9719198f450e6e9f91df340f810a197ef44a24926212c18d70abc8a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867473": [
        {
            "ioc_value": "b084c127f03f2d2b96dae95d2495ea8e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-02 15:20:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867470": [
        {
            "ioc_value": "63b7edc9bec5b43b3f012abf34e6c8f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:20:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867471": [
        {
            "ioc_value": "40a1831b2c77c3026e01b6eb0e9846dd3c909ced0f55cb396165d23d9e5926c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-02 15:20:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867472": [
        {
            "ioc_value": "a0816745f3159d06733ed351425ef25ba8ae2eb9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-02 15:20:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867468": [
        {
            "ioc_value": "226d96500e4ca936191cbfa466e673130fcd0d9fa5c886067d837cb44856b560",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:20:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867469": [
        {
            "ioc_value": "28af9a5bcfa86426fd4f77313bdb3ce1033410bd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:20:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867466": [
        {
            "ioc_value": "c463b7913a6e7b03d9c6f9d98a070cd5b97fdd78",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:20:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867467": [
        {
            "ioc_value": "5fbf5f42ced3d876ae021839bcc00069",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:20:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867463": [
        {
            "ioc_value": "06047aeb37556139c4cd4ffa7a6cf7f801f3d161",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-02 15:20:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867464": [
        {
            "ioc_value": "71a63b374d229f30f2912c501f7cce07",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-02 15:20:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867465": [
        {
            "ioc_value": "5a49b31f84002a128f1cd0272619ae3aac4bc4b3065d567daee4300b6ac27a05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:20:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867460": [
        {
            "ioc_value": "570f06e2cfffccb933f1e4077463b5f24aece6b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867461": [
        {
            "ioc_value": "c51ea79875ad62068673cdd298766d23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867462": [
        {
            "ioc_value": "fcf3ceac44b1c95dcc7442ddac5b286f64954c00cc09a265eeedd4638dbfac2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-02 15:20:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867458": [
        {
            "ioc_value": "c3f59fc053ff6ade13667c98d808b9ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867459": [
        {
            "ioc_value": "bc9eb5dab0d00a0de7c8df3b1d342b5ff435bc8a8cb40a04aaadb869755fe081",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867456": [
        {
            "ioc_value": "7fb8b06a9ac3c0c6b475948d1b981586cea76a2fc53f57c54163352fd90f0c63",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867457": [
        {
            "ioc_value": "b86596258e715a1e6847a2e67f4346fe15eb1712",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867454": [
        {
            "ioc_value": "46c192138f740f6cce76d27b560b3b7c5ea1125e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867455": [
        {
            "ioc_value": "50a9a1fcb001dc2e806fce909475a18c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867452": [
        {
            "ioc_value": "4eedba281d6273d442925536aa61b3df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867453": [
        {
            "ioc_value": "8fe83c4ceebaf00bfa977ff415dc067c962f7159c75431a0849d4342e505573c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867451": [
        {
            "ioc_value": "5961d2b84eced872ba81a0a270b0f7a49dddab7b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867448": [
        {
            "ioc_value": "e728a6a5c5b29ea0e1355639a1ee577edf2eb443",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867449": [
        {
            "ioc_value": "c85212d823d9412cb8eeec70e5145947",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867450": [
        {
            "ioc_value": "656a5cf0c4ea3a166c813b24dc4bce8403afb4305504805d654764712caf5a96",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867445": [
        {
            "ioc_value": "ae57744a0bb883a8ea831bfebfa0689371120baf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867446": [
        {
            "ioc_value": "d3fd162828ab54e5e860af9aaaeab41b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867447": [
        {
            "ioc_value": "0ce366b7463e6b3c9d389d1c799c9b64219e71112f13568e5e16efbfbebf9da9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867442": [
        {
            "ioc_value": "ef602380f15c5bb7aee218bf8c5ad42f2d4f0937",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867443": [
        {
            "ioc_value": "810610e1e52c5b789bafea7d5d4e1ce2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867444": [
        {
            "ioc_value": "bd283bdea40a7edcccaa1abc62a4b4c187cb5ff156e357bfcf9f7fd5f07462c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867439": [
        {
            "ioc_value": "82afcf65d159230d634a20dea703807f0f51efd0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867440": [
        {
            "ioc_value": "cc709b7dbbdab599842ab059df4a379c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867441": [
        {
            "ioc_value": "93acec7eeff046efa957c819fed3c98eddcee365c276c62555a3f5ccb8a96a41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867436": [
        {
            "ioc_value": "bf8e7181755cabed4958cd9508acfd9403fa6f0d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867437": [
        {
            "ioc_value": "1434d6d230e62adfc6f2a4d6f31d465c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867438": [
        {
            "ioc_value": "7458f3a8146a5f731699d68e1ac3d4f3d87525b020852b0bf8454fb44c1c77c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867433": [
        {
            "ioc_value": "f2930bf9aa785c2f10884dd59e814e33eef096fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867434": [
        {
            "ioc_value": "301b4c0650787760609a2f4535ab9ff3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867435": [
        {
            "ioc_value": "ab79affe31326c3a59b74a3aa4863207251deb7279f02d6177cf3a84031b2162",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867431": [
        {
            "ioc_value": "ae5b3e0e621abf17d9f80f51638897cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-02 15:20:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867432": [
        {
            "ioc_value": "9be73437f744884e7ee2af167deb9ffb93551419c2ad9b4f8852d3f7c5f3bb8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:20:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867428": [
        {
            "ioc_value": "3b37fec109ca8e946266eb1bdf8ac1cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867429": [
        {
            "ioc_value": "0628a7d09dd681ab6e1d0c904f8c7f2d3fb48183a4a57a7cfeaf4350b01406aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-02 15:20:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867430": [
        {
            "ioc_value": "c67acc0f58d6f97f0fb07bf54a995cb7268d126b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-02 15:20:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867425": [
        {
            "ioc_value": "1a5e935a2545bde844f7aa04d6bce296",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-02 15:20:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867426": [
        {
            "ioc_value": "0f0fd4870160fab8ca35512ecef8425e8c0e733f7a771109598e8efa36fc42e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867427": [
        {
            "ioc_value": "0c1e615682656ef0567acd7a9dc4a1336cd67831",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-02 15:20:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867424": [
        {
            "ioc_value": "31943eb5d52b7f2af3f21db0a2d078899274033b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-02 15:20:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867422": [
        {
            "ioc_value": "be2f08950440b3bb987fc5d0999b3f1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:20:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867423": [
        {
            "ioc_value": "0ec1ed0daf72e7f3b2a9afb44d8e2de77b97b126788e54e0cb948cc176de91ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-02 15:20:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867421": [
        {
            "ioc_value": "689a96b72e20cc501fa145637d1cdc3f76d68a3c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:20:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867418": [
        {
            "ioc_value": "2f6e93b860cef097c863668b1f38a6f7088bcb77",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-02 15:20:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867419": [
        {
            "ioc_value": "b9fbf6f35099d3dd0f984ffb7e027b35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-02 15:20:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867420": [
        {
            "ioc_value": "a94e9aca1aca0c7e006a0d8684c5423b1a3bd7e48734eee4f12f0caa3b5d901a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:20:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867417": [
        {
            "ioc_value": "06185d74edbdc06f99095e96f74aa2e49a1cda2d02a294c11a9ac35a0231075e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-08-02 15:20:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867415": [
        {
            "ioc_value": "96ff9e92dc4d60b8f00d743e0d2614fbff612788",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867416": [
        {
            "ioc_value": "4b81cbcc057d46aa660722301d59efb5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867412": [
        {
            "ioc_value": "eed9618dd94b86fe10990521889cabbedc6ea329",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:20:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867413": [
        {
            "ioc_value": "91912c07e3b6893dc8113e77b0923309",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:20:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867414": [
        {
            "ioc_value": "068fa74e4843dd0a7fd1488f262281e9b6b0e19d67eb8d52b20d63fda158fd3e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867411": [
        {
            "ioc_value": "dc87cc13bad5c4cc715ace4737ac6f303994a68ec8a772067da9765d642e1b28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:20:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867408": [
        {
            "ioc_value": "350e3bddcd39098123be338cfcd12ef78a0d6cfabc48a17c6dacf31397880b3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-02 15:20:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867409": [
        {
            "ioc_value": "cb5be7c6c404339029a88a7a4ffc0465da77288a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-02 15:20:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867410": [
        {
            "ioc_value": "5c8e68a414254a67111c6167f44ec777",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-02 15:20:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867406": [
        {
            "ioc_value": "d5153d09a297bbacb98b50368b353f012adcbb7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:20:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867407": [
        {
            "ioc_value": "a1af1a6133606bf3f13177df0680ba46",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:20:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867403": [
        {
            "ioc_value": "c6c0210e1e5828aef772a030ce9a4e93f31c1848",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.electro_rat",
            "malware_alias": null,
            "malware_printable": "ElectroRAT",
            "first_seen_utc": "2026-08-02 15:20:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867404": [
        {
            "ioc_value": "24dc5145757e9f438e801518bc74c0c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.electro_rat",
            "malware_alias": null,
            "malware_printable": "ElectroRAT",
            "first_seen_utc": "2026-08-02 15:20:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867405": [
        {
            "ioc_value": "aef01ab9e284b663cdd5caf288eff4120406ae452f5fb73e4b135c542aa59919",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:20:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867402": [
        {
            "ioc_value": "0ffec6082c9540ac473d603f278168458f574ac9018ba5ed9b7b1e7ec1539133",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.electro_rat",
            "malware_alias": null,
            "malware_printable": "ElectroRAT",
            "first_seen_utc": "2026-08-02 15:20:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867401": [
        {
            "ioc_value": "ac14f6dacdf01b8257412a33709a2891",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-02 15:20:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867400": [
        {
            "ioc_value": "acbead7f0fbc8b7b392f2edb91c1a7ed6f9d96e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-02 15:20:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867399": [
        {
            "ioc_value": "ebe31ad40a9ce206268d9f355e42ca4979847bfd861b3d157c06ed1bd842219c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-02 15:20:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867396": [
        {
            "ioc_value": "077480d961420c8b53b68059ce2493a1318756c7f9b93e2242020740f98afe20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867397": [
        {
            "ioc_value": "52ccf3e4ef9c5bf212ad9a083d0df892d1fcd91a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867398": [
        {
            "ioc_value": "368f60b8e34fb19caa134fcd7d2079d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:20:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867394": [
        {
            "ioc_value": "714575e8ddca56881959ea77028eb85e2543d736",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867395": [
        {
            "ioc_value": "8b74529e0f62f2ec1d5d37758fc5d4db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:20:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867392": [
        {
            "ioc_value": "699a48056ea661dd446df61d4b107fa8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867393": [
        {
            "ioc_value": "74b3cf6d93a3afdd46589c02250d99d4165b5a025acd60b62e4bc3fc4970a2a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867390": [
        {
            "ioc_value": "7261c4276f44e0ac3b2ef43ba4de223ce1278db20286750608777f41df0d68fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867391": [
        {
            "ioc_value": "61a93e1deb3b225f54f8cb915a88c38ce5578d44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867388": [
        {
            "ioc_value": "5d073f25656f0f942bff1178c1a52404d63b2b17",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867389": [
        {
            "ioc_value": "39888bfe023e44fdd4fa5b3ab616ebf8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867386": [
        {
            "ioc_value": "0603a9c2cc3efa9e1e6ca5f12d332d9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867387": [
        {
            "ioc_value": "a11463bf176a39f72b5ab9c0e0401dbe0eb4be8d379b2d5fd5da21da0d2286e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867383": [
        {
            "ioc_value": "f605e830329bcb2d6f7b9dbdea4f75b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-08-02 15:19:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867384": [
        {
            "ioc_value": "58786663acbf0f9d7572aa61bb95cac9ca918c7732e9833e4b384c9ddc30c986",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867385": [
        {
            "ioc_value": "0c1e182a7179a63bc79b649c42e0d78b11532201",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-02 15:19:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867380": [
        {
            "ioc_value": "f75568d900a96c55b60e19d0e7670dcf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.neshta",
            "malware_alias": null,
            "malware_printable": "neshta",
            "first_seen_utc": "2026-08-02 15:19:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867381": [
        {
            "ioc_value": "46268916a2daa6d1af68366ec1baf9bb2514a4486395288c9118019f1f49fc32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-08-02 15:19:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867382": [
        {
            "ioc_value": "ea16b84b1479edaa6b359525a8299ed3b6f2c958",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-08-02 15:19:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867377": [
        {
            "ioc_value": "91269eb3c084956392ddaf6a60139fd5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:19:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867378": [
        {
            "ioc_value": "b0171c900fcc422ebb4bae4807728717a9f7fd9dce2f6c3735a83196905a2105",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.neshta",
            "malware_alias": null,
            "malware_printable": "neshta",
            "first_seen_utc": "2026-08-02 15:19:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867379": [
        {
            "ioc_value": "ccc88d2b303448a4d0cac621ab30eb84835de808",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.neshta",
            "malware_alias": null,
            "malware_printable": "neshta",
            "first_seen_utc": "2026-08-02 15:19:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867376": [
        {
            "ioc_value": "6e96fe30490bed142959566daf8be3f66bd3645c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:19:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867374": [
        {
            "ioc_value": "bf50325f1dbd215e1c734c00b251789d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-02 15:19:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867375": [
        {
            "ioc_value": "9d769ee6c8365659c7a703f221caab25f1a972bf1324dc3623d08e2eaa5b4856",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:19:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867372": [
        {
            "ioc_value": "bc9165c426258d33799107d41a1e692504d7e69e02762475ab3b8cbcd19d5d40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-02 15:19:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867373": [
        {
            "ioc_value": "4b988defc8a7a8d8b86ef2d79ff1cdd6b31b7d34",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-08-02 15:19:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867370": [
        {
            "ioc_value": "9d8da374ef6eb7d66464420db904f6b66f1dbc83",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867371": [
        {
            "ioc_value": "f3ca8dae4ea1332aff145624a1a1b452",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867367": [
        {
            "ioc_value": "4f6448cff4133a8611f82ae64c063e1789cd50cf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:19:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867368": [
        {
            "ioc_value": "28987a8afff75ef1a5831ab3911b76ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:19:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867369": [
        {
            "ioc_value": "71f17c5e06548f128eb4f0cfafd247cc79894331f996c383fa5c2bcddfe9c5b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867364": [
        {
            "ioc_value": "71458e1d2eefcb903db2ca9f88ab6ada7a60ff8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867365": [
        {
            "ioc_value": "7fa874af3b68611e899bd3dc8ecc45e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867366": [
        {
            "ioc_value": "4b67a337ba1a61a00d4145cad082fadc3a6daee3949f3dbe081680d3a6febe20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-02 15:19:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867361": [
        {
            "ioc_value": "f106b6895b70eb29c1437362e6816866b2a865d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-08-02 15:19:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867362": [
        {
            "ioc_value": "c7be2421d4b0ecd2a630e4e4b3d3b1ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-08-02 15:19:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867363": [
        {
            "ioc_value": "41dbfcca18129caecd4a958132d0346b6ca0c30bc8b06abf4e776bd2715e7244",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867359": [
        {
            "ioc_value": "56f6078765d8c5a08c68a83d0dcf5828",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:19:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867360": [
        {
            "ioc_value": "40130f46a64522de4fd9a339f1b6b6656dce39b709a807cbeac4c9562ce3d9de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-08-02 15:19:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867356": [
        {
            "ioc_value": "559d2b4afa2fedc5beed36806c198cfb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-02 15:19:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867357": [
        {
            "ioc_value": "bb556307656b96aaaa46a3a52ec042b3f2d0711975fc808ec1b39309e87dd587",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:19:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867358": [
        {
            "ioc_value": "be2e09f95df00061172df6925b350a11a9d47a69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:19:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867353": [
        {
            "ioc_value": "1e3980e87f5c0baa0514e6e6338cbc15",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-02 15:19:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867354": [
        {
            "ioc_value": "c3bd9003c2a8b57c18442587a4d35f1bf0780b3d069bf5f7042e1351957403f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-02 15:19:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867355": [
        {
            "ioc_value": "c48bb88bdcc7559e99aaf0db05bcdbfbbffd3f37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-08-02 15:19:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867351": [
        {
            "ioc_value": "4f3c97948a9cd189f0c75c7f604dbc675b3d59b1daf197424464a24c3b8e4617",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-02 15:19:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867352": [
        {
            "ioc_value": "aa4071641df7b352326f837d785a4d73926ccd7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-08-02 15:19:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867348": [
        {
            "ioc_value": "1d5d0dfa7d49213f59f48704305762a936492c57026336a0ff56eafdf5710a48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-08-02 15:19:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867349": [
        {
            "ioc_value": "2dd37623bf004afd71de115107557c58c250fb43",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-08-02 15:19:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867350": [
        {
            "ioc_value": "18b77efc3df7f3bb6a679bc1992f8e22",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-08-02 15:19:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867345": [
        {
            "ioc_value": "6569e21744a4f1d363c1a393ad75471072c8a17740b08c202b66af0a92cf961a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867346": [
        {
            "ioc_value": "dd7b5e35a5cb5aeb89d1e91ae7e6b2bfa1d3b01c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867347": [
        {
            "ioc_value": "3f7e9b7820cac7f9ac66585305963e37",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-02 15:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867342": [
        {
            "ioc_value": "47854afb3cfeb64a85dda148e00e5ca83168f431a28e5c5fb28733e37f484b13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-02 15:19:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867343": [
        {
            "ioc_value": "23039d7c9ae5ce061abef48d04444983d3da15d1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-02 15:19:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867344": [
        {
            "ioc_value": "4f8d31ea9c92ca7d2da3c6438f1c8ea1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-02 15:19:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867340": [
        {
            "ioc_value": "66bb29d6e15afb643a88e54e63dbfe5b7c7f85b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-02 15:19:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867341": [
        {
            "ioc_value": "535b2a9b271023948496f9577593c06f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-02 15:19:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867338": [
        {
            "ioc_value": "6ff7859c937bfb53afecb91ab4ec2a76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867339": [
        {
            "ioc_value": "4b7d75f5c35d8d326af5723fb77c44d769478c90ca2f88e2edfb3e08817fb29c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-08-02 15:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867335": [
        {
            "ioc_value": "2aeec37ed59e17b59bcd67547bf0a453",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867336": [
        {
            "ioc_value": "c75bee3494a32d7f23675c150f1c4365262cd5444967b92733bacaec7380bb88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867337": [
        {
            "ioc_value": "6828f0493aec69f6ef4286c42059c64c1499a8cd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-02 15:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867329": [
        {
            "ioc_value": "a08521395145577e6227ece283b7fb0f0ee05c02ef587a7b4ea84284bc374722",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867334": [
        {
            "ioc_value": "a94b66b681d5adb6976dd11a6bbc6d65bb96a690",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-02 15:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867326": [
        {
            "ioc_value": "5c1ffa4074937594b8fddd76720d7943f4f5ad55",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867328": [
        {
            "ioc_value": "130176db1b368a8290ebda3ce17db7c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867324": [
        {
            "ioc_value": "9562334dd9a47ec1239a8667ddc1f01c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:19:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867325": [
        {
            "ioc_value": "13f8cfe4648b807a0cbddd653c75254b60d1951e11e715f4e5a1a2c9ab29360b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:19:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867322": [
        {
            "ioc_value": "b80d07610b81bddb3d7f30a207a2e134b559e06b8440598a926f3a9c1d439218",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867323": [
        {
            "ioc_value": "b46c4e4694783311e2c612ed7f0ca67a88e1e352",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-08-02 15:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1867317": [
        {
            "ioc_value": "mfoguyg.josephmichaelnh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:54:06",
            "last_seen_utc": "2026-08-21 16:36:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867316": [
        {
            "ioc_value": "hlcczv.jackpotslot.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:51:12",
            "last_seen_utc": "2026-08-04 04:02:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867312": [
        {
            "ioc_value": "quickfetchy.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-02 14:43:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,fake-installer,macos,MacWhisper,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867313": [
        {
            "ioc_value": "https://macwhisper.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-02 14:43:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,fake-installer,macos,MacWhisper,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867314": [
        {
            "ioc_value": "https://quickfetchy.site/?s=download&user=1066",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-02 14:43:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,fake-installer,macos,MacWhisper,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867315": [
        {
            "ioc_value": "macwhisper.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-02 14:43:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,fake-installer,macos,MacWhisper,seo-poisoning",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867280": [
        {
            "ioc_value": "http://68.111.91.204:50243/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-02 14:37:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/68.111.91.204",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867281": [
        {
            "ioc_value": "198.98.53.100:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 14:37:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867287": [
        {
            "ioc_value": "https://tue-orange-04.cfd",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-02 14:37:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTrrafic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1867298": [
        {
            "ioc_value": "comunitel.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-02 14:37:17",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1867297": [
        {
            "ioc_value": "agrandelephant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-02 14:37:16",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1867299": [
        {
            "ioc_value": "dann-sommer.dk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-02 14:37:15",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1867301": [
        {
            "ioc_value": "darethebook.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-02 14:37:15",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1867310": [
        {
            "ioc_value": "85.31.60.169:5627",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-02 14:37:15",
            "last_seen_utc": "2026-08-14 17:44:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,ca8ec1b5a0a17aa5d1b792ebceadba97,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867311": [
        {
            "ioc_value": "547kkg8e.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:35:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867309": [
        {
            "ioc_value": "csigl1ey.fitprotracker-campaign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:26:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867308": [
        {
            "ioc_value": "bm8ue2oq.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:25:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867307": [
        {
            "ioc_value": "sdjozvi.jimmieleeautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:06:53",
            "last_seen_utc": "2026-08-07 14:22:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867302": [
        {
            "ioc_value": "eaiylp.jackpot88.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 14:04:48",
            "last_seen_utc": "2026-08-05 22:22:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867300": [
        {
            "ioc_value": "dggcsaj.jeuxdedragonballz.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 13:25:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867296": [
        {
            "ioc_value": "hgmydz.jackpot888.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 13:21:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867295": [
        {
            "ioc_value": "jeuxdedragonballz.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 13:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867294": [
        {
            "ioc_value": "jackpot888.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 13:19:22",
            "last_seen_utc": "2026-08-03 16:19:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867293": [
        {
            "ioc_value": "http://topxgax.click:4930",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-02 13:16:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867292": [
        {
            "ioc_value": "blazerpro.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 13:10:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867286": [
        {
            "ioc_value": "enbhkx.jackpot77.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 12:35:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867285": [
        {
            "ioc_value": "rhfnvfj.jellyrollboston.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 12:35:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867284": [
        {
            "ioc_value": "jellyrollboston.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 12:35:15",
            "last_seen_utc": "2026-08-07 14:22:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867283": [
        {
            "ioc_value": "d8bo879o.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 12:34:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867282": [
        {
            "ioc_value": "jackpot77.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 12:33:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867278": [
        {
            "ioc_value": "hqcufmm.jeffreynovacklaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:51:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867277": [
        {
            "ioc_value": "jeffreynovacklaw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:49:25",
            "last_seen_utc": "2026-08-07 14:22:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867276": [
        {
            "ioc_value": "ulqlge.jackpot4d.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:48:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867275": [
        {
            "ioc_value": "jackpot4d.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:47:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867274": [
        {
            "ioc_value": "106.75.249.202:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-02 11:46:58",
            "last_seen_utc": "2026-09-01 02:46:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867273": [
        {
            "ioc_value": "tue-orange-04.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:20:23",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867272": [
        {
            "ioc_value": "yixihmd.jdk-services.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867266": [
        {
            "ioc_value": "txqyrx.jackpot138.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:04:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867265": [
        {
            "ioc_value": "jdk-services.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867264": [
        {
            "ioc_value": "jackpot138.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 11:02:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867263": [
        {
            "ioc_value": "l1zcdjtn.gorbio-echos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 10:34:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867262": [
        {
            "ioc_value": "gaymtyd.jbgkito21.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 10:19:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867261": [
        {
            "ioc_value": "jbgkito21.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 10:18:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867260": [
        {
            "ioc_value": "zelyaj.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 10:17:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867257": [
        {
            "ioc_value": "43.131.251.190:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-02 10:05:06",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867254": [
        {
            "ioc_value": "91.124.98.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:46:59",
            "last_seen_utc": "2026-09-01 02:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867253": [
        {
            "ioc_value": "45.61.114.217:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-02 09:46:21",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867251": [
        {
            "ioc_value": "38.247.147.37:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:46:08",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867252": [
        {
            "ioc_value": "38.247.147.37:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:46:08",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867250": [
        {
            "ioc_value": "38.247.147.37:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:46:07",
            "last_seen_utc": "2026-09-01 02:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867248": [
        {
            "ioc_value": "31.57.147.182:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:45:57",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867249": [
        {
            "ioc_value": "31.57.147.182:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:45:57",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867247": [
        {
            "ioc_value": "198.46.187.30:65528",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-02 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867246": [
        {
            "ioc_value": "194.59.30.183:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-02 09:44:39",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867245": [
        {
            "ioc_value": "178.16.55.237:6443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-02 09:44:17",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867244": [
        {
            "ioc_value": "162.35.187.214:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-02 09:44:03",
            "last_seen_utc": "2026-09-01 02:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867243": [
        {
            "ioc_value": "15.235.204.51:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-02 09:43:44",
            "last_seen_utc": "2026-09-01 02:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867242": [
        {
            "ioc_value": "cklygez.jasperstays.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 09:33:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867241": [
        {
            "ioc_value": "jasperstays.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 09:32:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867240": [
        {
            "ioc_value": "gnwbdn.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 09:32:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867236": [
        {
            "ioc_value": "104.168.123.242:3276",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-02 09:29:59",
            "last_seen_utc": "2026-08-13 14:08:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867238": [
        {
            "ioc_value": "84.247.129.0:2930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-02 09:29:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6ed07eee8b090ad8c77052912c8a29a6,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867239": [
        {
            "ioc_value": "x9598z25.halcyonhempltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 09:25:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867237": [
        {
            "ioc_value": "hzu31rpb.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 09:22:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867232": [
        {
            "ioc_value": "ombpfuc.eastcoastrefrig.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 08:48:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867231": [
        {
            "ioc_value": "bbczea.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 08:47:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867230": [
        {
            "ioc_value": "eastcoastrefrig.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 08:47:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867229": [
        {
            "ioc_value": "18fz9t32.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 08:33:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867228": [
        {
            "ioc_value": "ozswcwq.earnmoneyfx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 08:05:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867223": [
        {
            "ioc_value": "kryfgu.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 08:02:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867221": [
        {
            "ioc_value": "116.212.123.164:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-02 07:50:42",
            "last_seen_utc": "2026-08-04 21:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867222": [
        {
            "ioc_value": "116.212.123.164:2095",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-02 07:50:42",
            "last_seen_utc": "2026-08-04 20:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867220": [
        {
            "ioc_value": "yyjiyeo.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 07:16:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867219": [
        {
            "ioc_value": "wuvghp.highdesertarchers.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 07:15:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866904": [
        {
            "ioc_value": "95.155.151.113:9506",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-02 06:55:18",
            "last_seen_utc": "2026-08-11 17:20:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "Rama"
        }
    ],
    "1866906": [
        {
            "ioc_value": "453e775ba32c43699a47bbfb2f0c9675f523d2a90c903a0e069086658d76485c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866907": [
        {
            "ioc_value": "4be24ba6132ddc47ae55ee91183e7982394827b6d334e559fd24d5d056ae12a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:17",
            "last_seen_utc": "2026-08-01 16:50:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866908": [
        {
            "ioc_value": "c4fa2144908f8beb04d4c9c74070be2e08cdbdfcebcb368074fce577fe98a907",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:17",
            "last_seen_utc": "2026-08-01 16:50:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866909": [
        {
            "ioc_value": "256c87c965bc1ba9276df733da86a3a713d9f981eed04ffe15e160311bc070f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866910": [
        {
            "ioc_value": "903395145ce286d28296682ef245ac7d564db21d0757834961cdc903239d45e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866911": [
        {
            "ioc_value": "9f8e25e8b2b3fd1185e663d1060d0d43f620897f7ef5353738dec2078672171a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866912": [
        {
            "ioc_value": "4f722dfacbe424bcde50dfc36e8629748f2721474c34978e28eb7c4e45ce4318",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866913": [
        {
            "ioc_value": "30528573c924a4b79d00403f9cd6fee37502e3c4434b1df16a302ff084192941",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866914": [
        {
            "ioc_value": "741cc13f514227ce73d22363e5488730dc56028cde4970a8eb734c447a46faab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866915": [
        {
            "ioc_value": "9e44cbc8d47e63cb16abc6f1dfa678a1f1ec1197a2d0be161ab06cf02f638cae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866916": [
        {
            "ioc_value": "b366c5797d0a60aaa4d40b121586ed881a7f92eb9050c88922fcae575c4c0ea8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866917": [
        {
            "ioc_value": "d417e9dc79b008129b979c09cde0c9510f30f432361ab7fd66a133722e753e79",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866918": [
        {
            "ioc_value": "295614f9bf8a66878ed5429b3f2bb33981bae48c993964e79702a49d57e536d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866919": [
        {
            "ioc_value": "57ee67384c9545917776b27512c45cbdf8908a72e150489bfc3ffbf8c1309722",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866920": [
        {
            "ioc_value": "140eb57e93274c31571ed13bafc3d36267e970620d7b588b7735cec7b41cfbb9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866921": [
        {
            "ioc_value": "d1d4d72e4759b1bb95cc16f8e2e3dbded8409f68bc0d761c51c27071778946be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866922": [
        {
            "ioc_value": "f3a01fddd8e86301d795ebf2feb416049ce8bc237a97637c796f8ab84e3ab878",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866923": [
        {
            "ioc_value": "4f4dfad2cd9ff21d88353f568982655c240bee96a4034b05e6c1efacb515622e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866924": [
        {
            "ioc_value": "54706d8d39e619a4e7e5a882d304dc34a86d9756da1f0be9df420ac60b8847ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-08-02 06:55:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BlindEagle,HTMLSmuggling,RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1866929": [
        {
            "ioc_value": "206.189.81.41:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:55:06",
            "last_seen_utc": "2026-08-08 15:52:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866933": [
        {
            "ioc_value": "94.154.43.249:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-08-02 06:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1866937": [
        {
            "ioc_value": "labipt.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-08-02 06:55:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1866938": [
        {
            "ioc_value": "2.26.126.7:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-02 06:55:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1866975": [
        {
            "ioc_value": "167.172.71.69:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:55:03",
            "last_seen_utc": "2026-08-06 05:23:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866978": [
        {
            "ioc_value": "kieronellisonhikslumberparty.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:55:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "airashi,aisuru,botnet,ddos,gen2-lite,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866979": [
        {
            "ioc_value": "89.19.223.68:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:55:02",
            "last_seen_utc": "2026-08-23 00:18:05",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "airashi,aisuru,botnet,ddos,gen2-lite,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1867008": [
        {
            "ioc_value": "https://professional.baby/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-02 06:55:01",
            "last_seen_utc": "2026-08-04 12:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866984": [
        {
            "ioc_value": "143.198.206.191:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:55:00",
            "last_seen_utc": "2026-08-12 00:45:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867009": [
        {
            "ioc_value": "https://professional.baby/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-02 06:54:59",
            "last_seen_utc": "2026-08-04 12:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867010": [
        {
            "ioc_value": "https://professional.baby/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-02 06:54:58",
            "last_seen_utc": "2026-08-04 12:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867011": [
        {
            "ioc_value": "https://professional.baby/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-02 06:54:58",
            "last_seen_utc": "2026-08-04 12:28:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867014": [
        {
            "ioc_value": "137.184.199.120:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:54:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867015": [
        {
            "ioc_value": "207.154.240.223:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:54:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867029": [
        {
            "ioc_value": "professional.baby",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-02 06:54:54",
            "last_seen_utc": "2026-08-03 17:38:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867031": [
        {
            "ioc_value": "103.214.146.46:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:54:54",
            "last_seen_utc": "2026-08-14 21:42:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867040": [
        {
            "ioc_value": "103.214.146.46:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-02 06:54:53",
            "last_seen_utc": "2026-08-16 04:57:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867139": [
        {
            "ioc_value": "http://139.135.45.2:60511/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-02 06:54:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.45.2",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867142": [
        {
            "ioc_value": "bd216916031c63a5f3174bc27d64babf31294363f1b8274e4ab7d8802c46d91c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-02 06:54:52",
            "last_seen_utc": "2026-08-25 00:20:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/95.155.151.113",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867140": [
        {
            "ioc_value": "http://139.135.59.231:54094/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-02 06:54:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.59.231",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867141": [
        {
            "ioc_value": "http://95.155.151.113/d/xd.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-02 06:54:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/95.155.151.113",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867147": [
        {
            "ioc_value": "programmersecurity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 06:54:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/KirkDerpca/status/2083712890167550023",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1867149": [
        {
            "ioc_value": "117.72.125.206:11111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-02 06:54:48",
            "last_seen_utc": "2026-08-18 11:56:56",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "141679,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1867151": [
        {
            "ioc_value": "103.177.46.85:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-08-02 06:54:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1867155": [
        {
            "ioc_value": "wqok85qtq.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-08-02 06:54:47",
            "last_seen_utc": "2026-08-11 12:16:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "paradiseisnear"
        }
    ],
    "1867178": [
        {
            "ioc_value": "200.9.154.45:8539",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-02 06:54:46",
            "last_seen_utc": "2026-08-08 10:42:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "197b1ec4b9644da7b43669fd4f0ed73f,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1867213": [
        {
            "ioc_value": "http://113.221.58.195:45339/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-02 06:54:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/113.221.58.195",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1867216": [
        {
            "ioc_value": "2b9ljdva.tashabeautystore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 06:33:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867215": [
        {
            "ioc_value": "ytedgc.hemiuavip.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 06:31:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867214": [
        {
            "ioc_value": "mgzfyvk.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 06:30:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867191": [
        {
            "ioc_value": "pcebmt.hectortm-plumbing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 05:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867185": [
        {
            "ioc_value": "tvogirr.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 05:46:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867181": [
        {
            "ioc_value": "yfwlzm.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 05:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867180": [
        {
            "ioc_value": "jjvfpmq.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 04:59:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867179": [
        {
            "ioc_value": "cxsxdqzx.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 04:32:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867177": [
        {
            "ioc_value": "hjynlx3f.highmileauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 04:24:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867176": [
        {
            "ioc_value": "sg03wupc.brexcavatingllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 04:22:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867175": [
        {
            "ioc_value": "rhbowb.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 04:15:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867174": [
        {
            "ioc_value": "pyglzcs.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 04:14:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867170": [
        {
            "ioc_value": "http://sxarth.click:3276",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-02 03:57:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867169": [
        {
            "ioc_value": "fiysou.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 03:29:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867168": [
        {
            "ioc_value": "ftmffls.gorbio-echos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 03:28:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867165": [
        {
            "ioc_value": "hcycty.halo777.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 02:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867164": [
        {
            "ioc_value": "slpiwqo.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 02:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867163": [
        {
            "ioc_value": "mnhhhrkf.friendsofdormontlibrary.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 02:26:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867158": [
        {
            "ioc_value": "adilyiw.fitprotracker-campaign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 01:57:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867157": [
        {
            "ioc_value": "frwoaf.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 01:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867156": [
        {
            "ioc_value": "meta2.go-tools.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-02 01:39:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867154": [
        {
            "ioc_value": "qcpbzpl.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 01:11:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867153": [
        {
            "ioc_value": "zyrivu.halcyonhempltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 01:09:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867146": [
        {
            "ioc_value": "oitavwl.dusanperisicmd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 00:26:48",
            "last_seen_utc": "2026-08-11 21:28:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867145": [
        {
            "ioc_value": "4lrc9c9o.freemanframeca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 00:26:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867144": [
        {
            "ioc_value": "xjdles.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 00:25:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867143": [
        {
            "ioc_value": "dusanperisi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-02 00:25:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867044": [
        {
            "ioc_value": "54.178.100.27:8022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 23:47:05",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867043": [
        {
            "ioc_value": "185.92.190.177:8696",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 23:46:49",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867042": [
        {
            "ioc_value": "156.224.18.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 23:46:46",
            "last_seen_utc": "2026-09-01 02:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867041": [
        {
            "ioc_value": "cs.rainbowrain.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 23:46:25",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1867039": [
        {
            "ioc_value": "bwvlejk.iranicc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 23:42:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867038": [
        {
            "ioc_value": "iranicc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 23:40:01",
            "last_seen_utc": "2026-08-07 14:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867037": [
        {
            "ioc_value": "mbqhhu.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 23:39:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867036": [
        {
            "ioc_value": "5jnq4l13.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 23:24:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867035": [
        {
            "ioc_value": "r45ny1cp.selladorasgovi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 23:22:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867034": [
        {
            "ioc_value": "http://anglecv.surf:7688",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 23:21:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1867022": [
        {
            "ioc_value": "157.20.182.22:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-08-01 23:05:05",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867020": [
        {
            "ioc_value": "wdohlma.international-airports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:59:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867017": [
        {
            "ioc_value": "international-airports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:54:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867016": [
        {
            "ioc_value": "wpsfpo.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:54:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867013": [
        {
            "ioc_value": "yaim8oaz.franklintowing.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867007": [
        {
            "ioc_value": "bntxjno.indiancreektreefarmpa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:10:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867006": [
        {
            "ioc_value": "indiancreektreefarmpa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:09:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867005": [
        {
            "ioc_value": "awzhaf.hypnosisinstitute.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:08:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1867004": [
        {
            "ioc_value": "hypnosisinstitute.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 22:06:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1867001": [
        {
            "ioc_value": "webrick.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-01 21:33:38",
            "last_seen_utc": "2026-08-27 05:03:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1867000": [
        {
            "ioc_value": "https://football-attraction.pro/x9i32md/w1/la02",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-01 21:30:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate,la02",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866999": [
        {
            "ioc_value": "rnlpkfl.idyllicbeachhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 21:28:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866998": [
        {
            "ioc_value": "fpuuve.howtomovies.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 21:25:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866997": [
        {
            "ioc_value": "idyllicbeachhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 21:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866996": [
        {
            "ioc_value": "howtomovies.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 21:20:53",
            "last_seen_utc": "2026-08-07 14:17:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866995": [
        {
            "ioc_value": "basepiip9911.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-08-01 21:06:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866994": [
        {
            "ioc_value": "cryptobasetop.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-08-01 21:05:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866990": [
        {
            "ioc_value": "http://puresthomes.com:5282",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 20:49:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866991": [
        {
            "ioc_value": "http://riserma.biz:8768",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 20:49:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866989": [
        {
            "ioc_value": "vdeqkgk.idn777.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 20:40:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866988": [
        {
            "ioc_value": "idn777.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 20:38:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866987": [
        {
            "ioc_value": "ejxygs.hopesgarden.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 20:37:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866986": [
        {
            "ioc_value": "hopesgarden.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 20:35:51",
            "last_seen_utc": "2026-08-07 14:17:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866985": [
        {
            "ioc_value": "http://toeday.click:5326",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 20:33:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866983": [
        {
            "ioc_value": "x4yqlty5.fotrclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 20:24:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866977": [
        {
            "ioc_value": "rehsjti.icaretransportation.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866976": [
        {
            "ioc_value": "kjorrh.highrollerrecovery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:54:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866974": [
        {
            "ioc_value": "icaretransportation.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:52:26",
            "last_seen_utc": "2026-08-07 14:17:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866973": [
        {
            "ioc_value": "highrollerrecovery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:49:47",
            "last_seen_utc": "2026-08-07 14:17:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866972": [
        {
            "ioc_value": "64.20.61.215:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-01 19:46:16",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866971": [
        {
            "ioc_value": "46.246.82.10:6490",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-08-01 19:46:07",
            "last_seen_utc": "2026-09-01 02:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866970": [
        {
            "ioc_value": "45.192.211.77:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 19:45:56",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866969": [
        {
            "ioc_value": "217.60.77.60:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 19:45:32",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866968": [
        {
            "ioc_value": "195.177.94.61:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 19:44:38",
            "last_seen_utc": "2026-09-01 02:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866967": [
        {
            "ioc_value": "155.2.192.251:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 19:43:46",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866966": [
        {
            "ioc_value": "139.199.160.80:32408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-01 19:43:31",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866963": [
        {
            "ioc_value": "104.251.181.111:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 19:43:16",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866964": [
        {
            "ioc_value": "106.53.107.131:30943",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-01 19:43:16",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866965": [
        {
            "ioc_value": "107.152.42.223:34321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-01 19:43:16",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866962": [
        {
            "ioc_value": "103.148.58.18:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 19:43:07",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866960": [
        {
            "ioc_value": "101.36.123.12:34321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-01 19:43:03",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866961": [
        {
            "ioc_value": "102.117.164.193:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 19:43:03",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866959": [
        {
            "ioc_value": "umzdsgn.hemiuavip.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:07:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866958": [
        {
            "ioc_value": "hemiuavip.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:07:00",
            "last_seen_utc": "2026-08-07 14:17:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866955": [
        {
            "ioc_value": "klmizo.highmileauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:05:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866954": [
        {
            "ioc_value": "highmileauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 19:04:20",
            "last_seen_utc": "2026-08-07 14:17:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866952": [
        {
            "ioc_value": "dbyhtyvx.forbiddenpantsshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:25:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866951": [
        {
            "ioc_value": "roljpcp.hectortm-plumbing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:23:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866950": [
        {
            "ioc_value": "ecvdpkonprgyrwzlif.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:22:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866949": [
        {
            "ioc_value": "e3grmgyn.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:22:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866948": [
        {
            "ioc_value": "ppm1w3th.sarahelizabethphotoandfilm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:21:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866947": [
        {
            "ioc_value": "kakzkc.highdesertarchers.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:19:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866946": [
        {
            "ioc_value": "43ww5frz.forbiddenpantsshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:14:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866945": [
        {
            "ioc_value": "ooxurunnmqhwdaggxs.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:14:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866944": [
        {
            "ioc_value": "qmfcyxca.sarahelizabethphotoandfilm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:14:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866943": [
        {
            "ioc_value": "nqdnoel.hectortm-plumbing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866942": [
        {
            "ioc_value": "3jlqu63c.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:11:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866941": [
        {
            "ioc_value": "etsklr.highdesertarchers.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 18:10:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866936": [
        {
            "ioc_value": "rrpfcl.highdesertarchers.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 17:35:10",
            "last_seen_utc": "2026-08-07 14:17:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866935": [
        {
            "ioc_value": "opqmbct.hectortm-plumbing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 17:25:59",
            "last_seen_utc": "2026-08-07 14:17:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866934": [
        {
            "ioc_value": "s1txlndg.forbiddenpantsshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 17:24:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866905": [
        {
            "ioc_value": "oxrdcm.gtacauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 16:49:50",
            "last_seen_utc": "2026-08-20 09:29:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866903": [
        {
            "ioc_value": "upnbvji.healthfoodzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 16:41:36",
            "last_seen_utc": "2026-08-12 01:21:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866902": [
        {
            "ioc_value": "9pulblfs.drubenginecologo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 16:24:47",
            "last_seen_utc": "2026-08-20 15:30:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866901": [
        {
            "ioc_value": "lb66wl6p.sarahelizabethphotoandfilm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 16:06:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866900": [
        {
            "ioc_value": "ygjmeq.gregoryschreiercabinetmaker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 16:06:32",
            "last_seen_utc": "2026-08-09 04:03:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866897": [
        {
            "ioc_value": "qdmwlwx.havenchurchraleigh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 15:55:50",
            "last_seen_utc": "2026-08-12 23:27:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866896": [
        {
            "ioc_value": "dwdqhepzawjuizzspp.fungame777.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 15:44:36",
            "last_seen_utc": "2026-08-15 23:47:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866751": [
        {
            "ioc_value": "maletoks.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 15:35:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1866894": [
        {
            "ioc_value": "5kbm8nkr.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 15:26:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866892": [
        {
            "ioc_value": "3f16cbcabc497bfaa636dfaa15838b40a365f7b0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866893": [
        {
            "ioc_value": "54f01dad36b831af726d6d9596453269",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866889": [
        {
            "ioc_value": "910cd3d2ff7c6f295a3d419185f323a38e3f7ee7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866890": [
        {
            "ioc_value": "7fccc3d18c8769d5e3753c7752e627dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866891": [
        {
            "ioc_value": "a337142611fcc576de5e9f66c3ea6c6560ad4546b65fc26128da391704cf398d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866886": [
        {
            "ioc_value": "8a01a324c7a55196838a928ffd5d7bd9f92d554a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866887": [
        {
            "ioc_value": "1ca8aa7ac6bc5055075fb2cdd8a26a85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866888": [
        {
            "ioc_value": "9af4be59ed11580fb6bd030154f3754bca7ed4cac423f2757d4bcbb00ac731ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866883": [
        {
            "ioc_value": "60f74fc2fdb38bc880c3e6a401f63ee113d81191",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866884": [
        {
            "ioc_value": "5f891920ceaf109bfe6ada7a2cbb1ade",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866885": [
        {
            "ioc_value": "1385e8516443797d38586cb48d813895944a42fac9fd11354fc68d7704008823",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866881": [
        {
            "ioc_value": "bda2bb5184d1b60afa45573792061aad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866882": [
        {
            "ioc_value": "4d812e300f9ce078bfc2a339214d924adb3b8cacb926df370bd3d4bfe758a16a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866879": [
        {
            "ioc_value": "cb6e6f1ac01fea84d0eb0a3d62c25cab4f1ef74713a4960aaa7eef2d30c4d95b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866880": [
        {
            "ioc_value": "69c44874dbec16119132289df0b39f2e78700cbb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866876": [
        {
            "ioc_value": "f36ac03885daffa0f5a794f26d781d4538f1f7bfee4cc65c53b6f47717e1ec70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866877": [
        {
            "ioc_value": "3e970e1e6c6d1beb0e9d0354d43dc1f08252c083",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866878": [
        {
            "ioc_value": "b72568cbac516ee69d07c0549eb2ea70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866873": [
        {
            "ioc_value": "495609c54d92864f5acaacf9a7b3afb93651eda94011924124e3d9f5fee87f0e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866874": [
        {
            "ioc_value": "bf7ad130ab61adb1972a7ec2282673f8a1d71bda",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866875": [
        {
            "ioc_value": "4490c254ec2b2703db8a16bf6d606372",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866870": [
        {
            "ioc_value": "34a1064b1713dde3b975e118f3504345fb427e69ebbd8687310535cc13238c18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866871": [
        {
            "ioc_value": "1e964c3e084b6441e98c9159c476dac15b9b673a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866872": [
        {
            "ioc_value": "980e772a9a94439b7a520aa212ccde1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866867": [
        {
            "ioc_value": "1d5ae223f76a832f843906c0bb65f57912738f4bd3d75c4e7dc08780009928eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866868": [
        {
            "ioc_value": "d3b1396064288d4de0a75e3610686eec5bec1c7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866869": [
        {
            "ioc_value": "6149707e85bb4acf2e0e5c86690dd17b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866866": [
        {
            "ioc_value": "24ff4db86fde0788e9741b50b84fa5a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866863": [
        {
            "ioc_value": "ad3988ef3e08a174e1be32d96ebc5ad5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866864": [
        {
            "ioc_value": "78522cef155cb91d0d141e669e1d86496b2f99bd12ca1aa8cb5e71feb2f6a85e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866865": [
        {
            "ioc_value": "5b31d940e53cdf93939409d5ffe22ce166d20380",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866861": [
        {
            "ioc_value": "499c922bab4e4a90f7aeea989003cacbfbf8e0a5adf3445fcd9218a233a28308",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866862": [
        {
            "ioc_value": "515af72fdf631f461dcb54643f59d59ad6358178",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866858": [
        {
            "ioc_value": "379fa7dc5e9d0c24ccc447b94e6411073a3b632167f2f829e11cd9de9be6143c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866859": [
        {
            "ioc_value": "870832c60eed7d0a30698bf3b5348935bfabf8fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866860": [
        {
            "ioc_value": "2a7048073bccaf0147ad5e319d8b46de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866856": [
        {
            "ioc_value": "17601dca3e65a91e23ca9e18f810b36a49af7105",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866857": [
        {
            "ioc_value": "78c3a904fc779747e60f9bc7a2731b51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866853": [
        {
            "ioc_value": "e9e3cc4ce44a3612fee3af73c875c6fc8b070113",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866854": [
        {
            "ioc_value": "f797302610ad737448e4af1f83e83275",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866855": [
        {
            "ioc_value": "8671ab1812189739dcb89810b3c31485229490d7ee7da8a13947739f272d82b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866850": [
        {
            "ioc_value": "21e58ac1f6519f884aa4518ebd8fefaacbbe1f2c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866851": [
        {
            "ioc_value": "6409a0cb4467e308b67d5d55e8b0883e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866852": [
        {
            "ioc_value": "f4ee40d8468758eac0fabdafd5c26d2bdfb38fe13ea6d023a98cf74b1e8ff06d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866847": [
        {
            "ioc_value": "cb2a2557af090e6bcd0a423b443122dd4b45adf2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866848": [
        {
            "ioc_value": "9df61f1a2019a33e3b47ce2e258913f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866849": [
        {
            "ioc_value": "7290ffa77eabbde606bfc3590af9f8dc78809ec19c9ea436304f3134b6e4fc4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866845": [
        {
            "ioc_value": "523017a8c3835990c16fba5d4521d526",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866846": [
        {
            "ioc_value": "1ac0570ceb2f538a1f124e2d80b9bb279a13a71a134ff4759355762a4abe5e26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866843": [
        {
            "ioc_value": "59761bd256f7f015ebb6563899da74a132ab7286a5b5e5a8f61cafcece9fab8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866844": [
        {
            "ioc_value": "06aaee9e45ed87cc8b9334fbc4928762837bec9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866840": [
        {
            "ioc_value": "9535448183b8e4345eaead5c94c4a2895f2e58c4bcc238842cb03434d48b2265",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866841": [
        {
            "ioc_value": "dda45410028973a07c994c717834368b0235ac29",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866842": [
        {
            "ioc_value": "e48728c95602b1ecbe8aeb6838e89050",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866839": [
        {
            "ioc_value": "e344d73645c8cf67245fc17b0ea1861c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:26:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866836": [
        {
            "ioc_value": "a190649b3d107d31b0088412e7b68e3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866837": [
        {
            "ioc_value": "3036c7debc5134b4bae9040e25f9810505fbed3ae53417a84deba285218b8c2d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866838": [
        {
            "ioc_value": "9701868b66a5062e1c9ff209320fc94627852f0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866833": [
        {
            "ioc_value": "e240d5c4ce1ddc5c93e3d3c29dc940c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866834": [
        {
            "ioc_value": "c4e44771666dab31641044c84271275c9e92ad2d1707b63898117b8f65317ead",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866835": [
        {
            "ioc_value": "a6f950decfdb2b86bc238f6a000cb35e3ef9f319",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866830": [
        {
            "ioc_value": "07b006c03031130ceb41aa9d8544d3ae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866831": [
        {
            "ioc_value": "f5f3e6fa3aa7bdb824ec544a89e03e048e7da160124d144f09f6b014a14b3336",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866832": [
        {
            "ioc_value": "d06d3f3834a6a698bd36fe1fe0a6d61035c2cf45",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866827": [
        {
            "ioc_value": "a24597ed654908305ba72df51884f902",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866828": [
        {
            "ioc_value": "34bae47de99294e4188c0f548effce53216c32f51ff76d28fd52292b70f4f28f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866829": [
        {
            "ioc_value": "5c3dec97dcb8dd8bd2a338bd558ec1c86d65e877",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866824": [
        {
            "ioc_value": "6444fbfb003ebffdc87c56080700def4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866825": [
        {
            "ioc_value": "8292d674d39d6793dce024c90aec1b47ec65007c569501a652878687e682d032",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866826": [
        {
            "ioc_value": "68b2e31f7e671b591e76c1ad5896da1f04d3197f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866823": [
        {
            "ioc_value": "f7d3a91f109297a2110752cb3065998a279dc829",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866820": [
        {
            "ioc_value": "f9e3b95d21deb14adfa087e40890bd7776125c7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866821": [
        {
            "ioc_value": "fe5a980247f47d903a316c750cfb10fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866822": [
        {
            "ioc_value": "ecc42df31157857f6bb17e6fd458b8bf10047a80edff10f76a3ad7126fdc6926",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866817": [
        {
            "ioc_value": "bd80118b2d3b194746e0544a0a0dd40b6927497b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866818": [
        {
            "ioc_value": "fcccf56311c8847ce1f6d903ae8b06b7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866819": [
        {
            "ioc_value": "b72956e511dc7d916410a281111465d7d9a3220d89fe8611603e4e0004d9afb9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkmegi",
            "malware_alias": null,
            "malware_printable": "DarkMegi",
            "first_seen_utc": "2026-08-01 15:25:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866815": [
        {
            "ioc_value": "d5c5305780b5a5991cf48e95c0471752",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866816": [
        {
            "ioc_value": "af816bd1922f161670d19a9d70271722383c817590dfe047bbedca288e451e81",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866812": [
        {
            "ioc_value": "250c4d2f05964b839cb779a2f13826f2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866813": [
        {
            "ioc_value": "6a9ee6928a8e0fbd46bcd8fd9ad63e57eab47a53e36bbf6f29e24c842cd5b4a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866814": [
        {
            "ioc_value": "a7e03b28cbcce69347d7ccc512dc8dcbf783047b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866810": [
        {
            "ioc_value": "f67a176503343855c88d9aac1217277ee4e2badc5e56fe403e56ca30e144b266",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866811": [
        {
            "ioc_value": "8a6a3373a6c7a9b3c202c119ab76b3126464f636",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866807": [
        {
            "ioc_value": "9f68c786b0d24c5dbc927ee347a3c6de9c4351a78de73f0c1128e8f7ee969431",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866808": [
        {
            "ioc_value": "3a995d308ae14ec68bd10bc39d980f5666852749",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866809": [
        {
            "ioc_value": "0e26b038fdb402105a64e739d9c15ce1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866804": [
        {
            "ioc_value": "77d7a748ab647241403ab5741a7184501602877cc803ef33b6044feb5a708387",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-01 15:25:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866805": [
        {
            "ioc_value": "7fe65928be331e3acab2fb9c59eb13e86a900c6c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-01 15:25:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866806": [
        {
            "ioc_value": "bbd9cd5ee29a18fbf5d953abab877368",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-08-01 15:25:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866801": [
        {
            "ioc_value": "fed541de0e768a6132da368ec8e0c66125ed7c144ca7d039bbcfe7b75192ecaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866802": [
        {
            "ioc_value": "859a5f150f6028fe660051755fb4e7b35d392359",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866803": [
        {
            "ioc_value": "e27af1a650e95047f7b995cc6929f94e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866797": [
        {
            "ioc_value": "f4ab00de1cb614c8a3bd107e3510d644",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866798": [
        {
            "ioc_value": "7341fa7b28bdc411c4f73c171c036cf5cdd57b7fcd2b006231ac92c324a829fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866799": [
        {
            "ioc_value": "d476f801a5990b26053a220597b883eae8a3bfa5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866800": [
        {
            "ioc_value": "16933fd1b134aa8c14a565df666ae354",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866794": [
        {
            "ioc_value": "b520698c73c6875ceed62b437b049790",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-01 15:25:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866795": [
        {
            "ioc_value": "44831dd69bd290d69459f93ac7b4378bd09ec9fb1ccac4e9f7d34dec7b068402",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866796": [
        {
            "ioc_value": "e40a908755fe24ddc119ddaa1fca5f3987b086e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866792": [
        {
            "ioc_value": "7fd5f3ad0b3a152671dabe440ed5a5a05c640da4fe07a9caacb2f3a88d994596",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-01 15:25:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866793": [
        {
            "ioc_value": "ab60377925e8bc95bb066ff30237b834b8fb2b3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-01 15:25:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866789": [
        {
            "ioc_value": "264a6ef8a8853d0e7dac18b0d4e043ab7579b4cc885093128012b34339cee194",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866790": [
        {
            "ioc_value": "86cc0da2edcd30f78bde7aad92c3976715128d35",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866791": [
        {
            "ioc_value": "af1ac5d2435d139a98962876534adfcb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866786": [
        {
            "ioc_value": "e0e69bb3ffd353720874b03724fa6e8cf51021ba5ff2676582dbff4d44ee234e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866787": [
        {
            "ioc_value": "8f4c7b0cf9fc707f958f39511db9c08aaa138397",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866788": [
        {
            "ioc_value": "aa69639fd234c6539cca524691fd4224",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866783": [
        {
            "ioc_value": "23a96937277baa16540097119666822d408d8c8afbe3480eefff3074a3ccedfd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-01 15:25:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866784": [
        {
            "ioc_value": "0f3ffec20c80543fd35c6dadbe96d9d2e1065ee0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-01 15:25:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866785": [
        {
            "ioc_value": "77d0cf12235bfc6c0d8058a3e4d33f79",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-08-01 15:25:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866780": [
        {
            "ioc_value": "3b3c5e377794422830e760be0522cebb92c8272a491fb93aa74b3be21a48b6ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866781": [
        {
            "ioc_value": "0997a25ad1d0b1103448f98d437aaef1acec9dcd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866782": [
        {
            "ioc_value": "a4478bd1afe068a0bb192860d86afad8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866777": [
        {
            "ioc_value": "c28a7bf288adab51e1371dddf98d10cd81c6099cd346e6093f50b367c2cd0b46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866778": [
        {
            "ioc_value": "cf4605dfe70e8b4bded243ccea537b2a56fbcab7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866779": [
        {
            "ioc_value": "0b8921f4f4ce4e08916dc4a718038aee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866774": [
        {
            "ioc_value": "9250e9fd0d73df09d608a544d27f048089071562ceb40de3600e9b5d85fa5f50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866775": [
        {
            "ioc_value": "bb9ecb1908ad5c0e44cd1bd12cea936e60edd666",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866776": [
        {
            "ioc_value": "95a4d77ef1bafbbec9f1b862a9604f29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866772": [
        {
            "ioc_value": "f8dfca35bc6ad0e15a391eec70a3fa88b0849084",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866773": [
        {
            "ioc_value": "d8b41dc9b3b2162b6bdd1eb91c5619a9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866769": [
        {
            "ioc_value": "f40d13309750622a184b167fc5205fb4f622b45e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-01 15:25:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866770": [
        {
            "ioc_value": "2de0535c878a7b9a8971f74bb77abb91",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-01 15:25:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866771": [
        {
            "ioc_value": "126d2fea7b1ea126a7dfa9d41a532a71ba1d41bb3473f5ba81694b2412059edc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866766": [
        {
            "ioc_value": "e4efda5affefdf6630d305992576acc66ec780f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-01 15:25:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866767": [
        {
            "ioc_value": "bbde72af760c3522d5acba1a22c135a9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-01 15:25:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866768": [
        {
            "ioc_value": "1ccfd6555390617b416bed0bd48ef3edba47bf042e102f504a2113bc356eeb0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-08-01 15:25:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866763": [
        {
            "ioc_value": "35f5d1fac303bdb3b2b4726644174545a6333199",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866764": [
        {
            "ioc_value": "10cfffe0424db151ba3a152d52500a30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866765": [
        {
            "ioc_value": "e8c96feda6791f0acdee4c084e0d438f7792a1d33aa31de036fdb6408ca7db97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-08-01 15:25:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866760": [
        {
            "ioc_value": "2b15f3ffdd8175271e261af3279798af767ce247",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866761": [
        {
            "ioc_value": "acf824eb101c56f21b2e2aff72f8f414",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866762": [
        {
            "ioc_value": "f07605b995cf701ea40c0d4a535c5c8cc256b004d67d80ee2876ebf0dc0eb680",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866758": [
        {
            "ioc_value": "36db027cb081301eced5fe08f94ee9ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866759": [
        {
            "ioc_value": "73cf812efdeafd903ef09c847457477950fa2b048c7b592e040c467a2082d091",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866755": [
        {
            "ioc_value": "9c1bee9ed7cc87bf6a874b71fea8e178",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-01 15:25:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866756": [
        {
            "ioc_value": "8d423e57b2cf148ce393b09c1c67540f591af26b242ec428b4b7986a17fadf30",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866757": [
        {
            "ioc_value": "1ae40493dea3f1e16aea0db764ce3a8356150050",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866752": [
        {
            "ioc_value": "da217013547b09f4b6d27d40a2643f65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866753": [
        {
            "ioc_value": "11621978916ef99d1c24cc4c7355d5a05d862dc9769b23f6685a21910d334726",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-01 15:25:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866754": [
        {
            "ioc_value": "5260b728d1027219cd355b9ded2110897923d00c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-08-01 15:25:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866749": [
        {
            "ioc_value": "08e678b14630558ba49781753227f1adc0534ea1d27ecf2b1c26a9eea89e23bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866750": [
        {
            "ioc_value": "f765764e06b3357f6e87f82df42a5bfe4848f44a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866746": [
        {
            "ioc_value": "c23cb82c4e48e91f71b389cb16d419510a15bd1ebd9b3e53a7fd8f38960745a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866747": [
        {
            "ioc_value": "85957d0307ac37f5957a98bd4b8e8e6e7e471363",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866748": [
        {
            "ioc_value": "e33cd1b6164332e4b88287ec5a3a402b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866743": [
        {
            "ioc_value": "628e33326d90400f5921db3d3d07d0b10779961a5ca5660a5689e65c0c6ef6c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866744": [
        {
            "ioc_value": "5d47b8ecb38fbbb6b5efb828fa2f8f5279972c03",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866745": [
        {
            "ioc_value": "9cc5822efd55adba42794e38c9926368",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866740": [
        {
            "ioc_value": "92b146eff8d54fff90445bd258e0e5a42f1277e213b9fa0137c7ab5074c01a46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866741": [
        {
            "ioc_value": "774a6157c2f566d6507b1fce08fa1fd486725d91",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866742": [
        {
            "ioc_value": "05b59210318a43454ae46648ad6deadb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866737": [
        {
            "ioc_value": "4c17b8c2d287de19641026b61af6567c2f08f65888fd7a620a919e83a2c08895",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866738": [
        {
            "ioc_value": "b85a2a863e9234de3aa1a3d8b12a6023b5561b16",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866739": [
        {
            "ioc_value": "11babc5c7dd1f8853b4c0b222bc91ae9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866735": [
        {
            "ioc_value": "6c37d6d05ab8ba5efa827a4edeb15e03a9b6dcc5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-01 15:25:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866736": [
        {
            "ioc_value": "e5d203aa2c95d96736d44cb35fff96fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-01 15:25:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866731": [
        {
            "ioc_value": "514b8816af6639c6185f03cb2969e7855f1883b6d8a651c7e218269435795b9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866732": [
        {
            "ioc_value": "df2ca5aac70682ca84c50ca5eb02d55565a7ae16",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866733": [
        {
            "ioc_value": "f431bab8484871c918874b91d60665ca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866734": [
        {
            "ioc_value": "cafcc76c5d1e97e3b86529e6564f7d95ca189b70f2fa092dbd1f50a8d16d9c10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-01 15:25:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866729": [
        {
            "ioc_value": "dc223e5e27e3bcc1cc636aa2b9567540868cc6ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-08-01 15:25:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866730": [
        {
            "ioc_value": "658cb87887c1aa843e39aea3aab26073",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-08-01 15:25:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866727": [
        {
            "ioc_value": "33061ef427fc9e0221edf9c088665946",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866728": [
        {
            "ioc_value": "5f76fc369f3f759a64fe0770294a303c918c1dca5af021ba9ea0bbc7ab2559f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-08-01 15:25:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866724": [
        {
            "ioc_value": "6518d397d3d18380d927cb8cbf458c22",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-01 15:25:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866725": [
        {
            "ioc_value": "587fec092b6fb6fbbf3cead3a22061956d39ba949f65653f46ed60be8ffc704c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866726": [
        {
            "ioc_value": "508455f62cbb4040c574c467ad038714eaae40db",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866721": [
        {
            "ioc_value": "dfd327c9ab4ef1909e47999ea09689d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866722": [
        {
            "ioc_value": "f11bc43f99f2d7518365b726f3ce69ccff1d4e2ad6d2e7b3888c004efcacc80a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-01 15:25:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866723": [
        {
            "ioc_value": "6cd50d34b2f5dabe1ab6e9c022bd472cff9e7fbd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-01 15:25:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866718": [
        {
            "ioc_value": "7904c7fcdd05bd24c0195cb78cdf9177",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-01 15:25:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866719": [
        {
            "ioc_value": "751bd836037a38f9edf5e4dc20174c2b53ec843082c732d63742287633b5c615",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866720": [
        {
            "ioc_value": "8acc146c31800072fb3afcd436bb1479cf6aeed7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866715": [
        {
            "ioc_value": "82617293c095f7170bea3d3384f8da2b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-01 15:25:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866716": [
        {
            "ioc_value": "cad2fac072f40774247e90a9c3acc96fc85a57abf833e6d214975884060ff864",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-01 15:25:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866717": [
        {
            "ioc_value": "62714e1de1a8211d7302d8638b202e3e04277b45",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-08-01 15:25:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866711": [
        {
            "ioc_value": "e1c1a8a9d67b3dc8cdce7f357dedf81cfe360ec1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-01 15:25:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866712": [
        {
            "ioc_value": "7b0e7c8cc9ca514381a6bfecf879b650",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-01 15:25:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866713": [
        {
            "ioc_value": "3fed685e1b41d37f28a2fbd69ee3755ab4797b5d9b60ca6d904b2c9529af12f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-01 15:25:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866714": [
        {
            "ioc_value": "dc665280d55c2a5393282a7c207a9adfa65d0472",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-01 15:25:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866709": [
        {
            "ioc_value": "8a7b910b72f28cde58f4d40a50ce7e9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866710": [
        {
            "ioc_value": "aa3ec6bd662f64b5471ba79945d9e620adb66cae5e2887e44eea03d8abc99c73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-08-01 15:25:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866706": [
        {
            "ioc_value": "14b1eb938f22e162ec0c25c6d867fc1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866707": [
        {
            "ioc_value": "e3620b7fe4c3cbdf89ac002190d6b04eaa810094fb657fd5351b0faeb1df7326",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866708": [
        {
            "ioc_value": "ec3d50e4181a65b6a757381d805404b8526ccc45",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866703": [
        {
            "ioc_value": "615812884ec3c3c62e50f8fad5af3a71",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866704": [
        {
            "ioc_value": "266ee21a6c9f3408e472b4f146db4d1c6e5b0775bd04bae92862023d6c1e95f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866705": [
        {
            "ioc_value": "f21f5abbf5874367e49b97177b4d0256f6d5ec20",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866702": [
        {
            "ioc_value": "0cedba728452fdca1fa85736121969f68142eea3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866699": [
        {
            "ioc_value": "88b73b8c6ed66bfb6e8421836bfdda30197023a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866700": [
        {
            "ioc_value": "532681b62d584f899e8eed3e8b1411f2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866701": [
        {
            "ioc_value": "d9438d408b84c4163116e57198768a83300895f442e0129e202cc2184b18cffb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-08-01 15:25:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866695": [
        {
            "ioc_value": "9a227c008092640c375b8eee5e43557f2cdb9dfe6a8cf55050cb3c4353df2e87",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866696": [
        {
            "ioc_value": "0f1beb21d2de86b025f657d3b8eeba0b47d6e184",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866697": [
        {
            "ioc_value": "5db5b95c27bde6c4437cca24245f30aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866698": [
        {
            "ioc_value": "aaa5b19624b18bbe051b05d868b665b5e8988c338d079209cd84c2ebc31e16c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-08-01 15:25:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866692": [
        {
            "ioc_value": "e6d68f489e840cfd04b764b40adf3d41820d0c9d979d7af21edddc8295aaf1e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:08",
            "last_seen_utc": "2026-08-02 15:20:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866693": [
        {
            "ioc_value": "892c612587511025b4821bf5405070d5c6ed3e23",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:08",
            "last_seen_utc": "2026-08-02 15:20:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866694": [
        {
            "ioc_value": "523b0e6fe7b5d6bf1fa5784b4a79a321",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-08-01 15:25:08",
            "last_seen_utc": "2026-08-02 15:20:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866689": [
        {
            "ioc_value": "a536b532e5ebaa0617688a42b5543b0a7144817e0dc12020826d74cc9b22c5a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-01 15:25:07",
            "last_seen_utc": "2026-08-02 15:20:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866690": [
        {
            "ioc_value": "f5b846ec64cc86321af26e3a16606ed3438cff9e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-01 15:25:07",
            "last_seen_utc": "2026-08-02 15:20:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866691": [
        {
            "ioc_value": "63d711bd0e3f33911c28fa2fd0d9fb76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-08-01 15:25:07",
            "last_seen_utc": "2026-08-02 15:20:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866686": [
        {
            "ioc_value": "656a0518875d72b0cce6b288cb71d13cc0b6afc3e45cf9b578b9092a3f7da2bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:06",
            "last_seen_utc": "2026-08-02 15:20:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866687": [
        {
            "ioc_value": "8babc0a84bbb86bcdb697474595773bfb630869c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:06",
            "last_seen_utc": "2026-08-02 15:20:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866688": [
        {
            "ioc_value": "35a6cc6e2b588f30f7fb9cf4638ee632",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:06",
            "last_seen_utc": "2026-08-02 15:20:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866683": [
        {
            "ioc_value": "c14164aa5550fec91514f073f35bbd23c28bc7eb740bc930c1e29daf9a9ed9ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:05",
            "last_seen_utc": "2026-08-02 15:20:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866684": [
        {
            "ioc_value": "366942ec7db8230627f3639842737414b36595cf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:05",
            "last_seen_utc": "2026-08-02 15:20:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866685": [
        {
            "ioc_value": "98cf0b60a8b4015d47165b49a68ad676",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-08-01 15:25:05",
            "last_seen_utc": "2026-08-02 15:20:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866681": [
        {
            "ioc_value": "e9725da4441bb736b4a2834edc652dc7e3318ae8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "vbs.lampion",
            "malware_alias": null,
            "malware_printable": "lampion",
            "first_seen_utc": "2026-08-01 15:25:04",
            "last_seen_utc": "2026-08-02 15:20:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866682": [
        {
            "ioc_value": "9b80c3879f77b11b7207f8336101b486",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "vbs.lampion",
            "malware_alias": null,
            "malware_printable": "lampion",
            "first_seen_utc": "2026-08-01 15:25:04",
            "last_seen_utc": "2026-08-02 15:20:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866680": [
        {
            "ioc_value": "eefacb5cf039f7512c110564a489c7464032eea8ddb1781d3cac69db2f106d0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "vbs.lampion",
            "malware_alias": null,
            "malware_printable": "lampion",
            "first_seen_utc": "2026-08-01 15:25:03",
            "last_seen_utc": "2026-08-02 15:20:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866679": [
        {
            "ioc_value": "nfbjoi.greenestreetchurch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 15:18:57",
            "last_seen_utc": "2026-08-18 21:45:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866656": [
        {
            "ioc_value": "http://153.117.33.91:58750/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-01 15:15:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.33.91",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866657": [
        {
            "ioc_value": "http://103.192.67.110:43880/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-01 15:15:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.192.67.110",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866666": [
        {
            "ioc_value": "72.60.92.150:2535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 15:15:34",
            "last_seen_utc": "2026-08-02 09:16:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "197b1ec4b9644da7b43669fd4f0ed73f,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866668": [
        {
            "ioc_value": "137.184.156.157:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 15:15:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866671": [
        {
            "ioc_value": "165.245.219.184:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 15:15:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866677": [
        {
            "ioc_value": "kqihjow.hanovereyephotography.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 15:13:47",
            "last_seen_utc": "2026-08-09 01:20:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866674": [
        {
            "ioc_value": "http://primzes.biz:8528",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 14:43:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866673": [
        {
            "ioc_value": "ybfrvo.greaternewzionbc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 14:37:38",
            "last_seen_utc": "2026-08-18 16:45:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866672": [
        {
            "ioc_value": "vfogjfv.halo777.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 14:24:02",
            "last_seen_utc": "2026-08-01 15:42:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866670": [
        {
            "ioc_value": "padpoh.graphicstabletreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 13:51:45",
            "last_seen_utc": "2026-08-12 23:31:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866669": [
        {
            "ioc_value": "spobnte.hallmarkcarpets.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 13:39:51",
            "last_seen_utc": "2026-08-09 05:03:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866667": [
        {
            "ioc_value": "5a3s97ps.fitprotracker-campaign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 13:25:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866665": [
        {
            "ioc_value": "gqtailorirving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 13:13:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866664": [
        {
            "ioc_value": "mbbzfh.grannygshemporium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 13:06:48",
            "last_seen_utc": "2026-08-11 07:57:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866659": [
        {
            "ioc_value": "khrugme.halcyonhempltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 12:53:31",
            "last_seen_utc": "2026-08-07 14:22:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866655": [
        {
            "ioc_value": "ufphxl.gorbio-echos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 12:17:12",
            "last_seen_utc": "2026-08-04 06:17:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866654": [
        {
            "ioc_value": "swspyli.habbofutbol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 12:08:51",
            "last_seen_utc": "2026-08-12 21:27:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866635": [
        {
            "ioc_value": "https://irahook.best/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-01 11:55:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866636": [
        {
            "ioc_value": "https://irahook.best/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-01 11:55:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866637": [
        {
            "ioc_value": "https://irahook.best/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-01 11:55:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866638": [
        {
            "ioc_value": "https://irahook.best/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-01 11:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866639": [
        {
            "ioc_value": "irahook.best",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-08-01 11:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook,RAT,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866651": [
        {
            "ioc_value": "zskbum.googleseouzmani.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 11:30:19",
            "last_seen_utc": "2026-08-07 14:17:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866650": [
        {
            "ioc_value": "dihdsze.gutjahrauctionservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 11:23:22",
            "last_seen_utc": "2026-08-07 14:17:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866649": [
        {
            "ioc_value": "3ms2xxyq.fitfirst.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 11:23:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866648": [
        {
            "ioc_value": "9az0srsl.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 11:23:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866644": [
        {
            "ioc_value": "lxzwf4qm.samanthadefalco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 11:07:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866641": [
        {
            "ioc_value": "http://maxhealthinsadvantage.com:9403",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 10:53:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866640": [
        {
            "ioc_value": "ubxcwu.goindigostudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 10:45:27",
            "last_seen_utc": "2026-08-01 12:48:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866634": [
        {
            "ioc_value": "fqibjme.globallatedeals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 10:38:27",
            "last_seen_utc": "2026-08-01 12:46:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866633": [
        {
            "ioc_value": "route.ambergroup.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-01 10:37:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866632": [
        {
            "ioc_value": "jnsp5pfi.fishersace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 10:06:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866629": [
        {
            "ioc_value": "3ezvsan5.ferkrueda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 10:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866628": [
        {
            "ioc_value": "ewlrqd.gnarcoticexoticz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 09:58:59",
            "last_seen_utc": "2026-08-07 00:40:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866627": [
        {
            "ioc_value": "registry.evercircle.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-01 09:56:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866626": [
        {
            "ioc_value": "brzygpu.glennscarcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 09:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866625": [
        {
            "ioc_value": "glennscarcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 09:50:03",
            "last_seen_utc": "2026-08-07 00:40:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866624": [
        {
            "ioc_value": "87.199.203.248:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-01 09:46:41",
            "last_seen_utc": "2026-08-31 18:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866622": [
        {
            "ioc_value": "85.11.167.134:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:46:39",
            "last_seen_utc": "2026-08-31 18:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866623": [
        {
            "ioc_value": "85.11.167.134:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:46:39",
            "last_seen_utc": "2026-08-31 18:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866621": [
        {
            "ioc_value": "77.246.111.132:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-08-01 09:46:33",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866620": [
        {
            "ioc_value": "47.87.84.177:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 09:46:18",
            "last_seen_utc": "2026-09-01 02:46:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866618": [
        {
            "ioc_value": "43.213.166.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 09:45:59",
            "last_seen_utc": "2026-09-01 02:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866619": [
        {
            "ioc_value": "43.213.254.221:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 09:45:59",
            "last_seen_utc": "2026-08-31 18:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866617": [
        {
            "ioc_value": "31.57.38.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:45:50",
            "last_seen_utc": "2026-09-01 02:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866616": [
        {
            "ioc_value": "3.115.55.199:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-08-01 09:45:47",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866615": [
        {
            "ioc_value": "217.60.195.197:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:45:39",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866614": [
        {
            "ioc_value": "217.60.195.197:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:45:38",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866613": [
        {
            "ioc_value": "202.182.108.40:21157",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 09:44:46",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866612": [
        {
            "ioc_value": "20.125.96.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 09:44:44",
            "last_seen_utc": "2026-09-01 02:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866611": [
        {
            "ioc_value": "198.46.187.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-08-01 09:44:41",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866609": [
        {
            "ioc_value": "192.159.99.70:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:44:31",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866610": [
        {
            "ioc_value": "192.162.199.180:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-01 09:44:31",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866608": [
        {
            "ioc_value": "192.159.99.70:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:44:30",
            "last_seen_utc": "2026-09-01 02:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866607": [
        {
            "ioc_value": "168.144.89.89:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-08-01 09:44:05",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866606": [
        {
            "ioc_value": "16.76.80.179:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-08-01 09:43:58",
            "last_seen_utc": "2026-09-01 02:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866603": [
        {
            "ioc_value": "104.251.181.111:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:16",
            "last_seen_utc": "2026-08-31 18:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866604": [
        {
            "ioc_value": "104.251.181.111:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:16",
            "last_seen_utc": "2026-08-31 18:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866605": [
        {
            "ioc_value": "104.253.79.117:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-08-01 09:43:16",
            "last_seen_utc": "2026-09-01 02:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866602": [
        {
            "ioc_value": "103.148.58.8:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:09",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866597": [
        {
            "ioc_value": "103.148.58.10:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866598": [
        {
            "ioc_value": "103.148.58.10:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866599": [
        {
            "ioc_value": "103.148.58.18:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866600": [
        {
            "ioc_value": "103.148.58.18:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866601": [
        {
            "ioc_value": "103.148.58.8:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-08-01 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866596": [
        {
            "ioc_value": "mon-banana-06.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 09:35:18",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866595": [
        {
            "ioc_value": "config.cove-post.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-08-01 09:19:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866594": [
        {
            "ioc_value": "lwyxxg.g-fitathletics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 09:15:26",
            "last_seen_utc": "2026-08-07 00:40:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866590": [
        {
            "ioc_value": "nnudyll.gilfordvillagenurseryschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 09:05:07",
            "last_seen_utc": "2026-08-07 00:40:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866565": [
        {
            "ioc_value": "45.43.143.17:5776",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 08:50:33",
            "last_seen_utc": "2026-08-09 05:30:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,f0e7dc585ba3ebf586da7b92aedbfc64,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866569": [
        {
            "ioc_value": "167.172.71.69:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 08:50:32",
            "last_seen_utc": "2026-08-12 03:57:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866588": [
        {
            "ioc_value": "xwmuyy.getpumpedli.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 08:28:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866587": [
        {
            "ioc_value": "getpumpedli.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 08:27:16",
            "last_seen_utc": "2026-08-07 00:40:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866586": [
        {
            "ioc_value": "uxqlomf.ghpprofessionalpaintingllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 08:20:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866585": [
        {
            "ioc_value": "ghpprofessionalpaintingllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 08:18:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866584": [
        {
            "ioc_value": "ee0xfh5z.certifiedairbalanceinlosangelesca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 08:06:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866579": [
        {
            "ioc_value": "108.165.147.244:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:50",
            "last_seen_utc": "2026-09-01 02:46:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866577": [
        {
            "ioc_value": "47.108.77.36:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:48",
            "last_seen_utc": "2026-08-03 13:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866578": [
        {
            "ioc_value": "151.244.243.42:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:48",
            "last_seen_utc": "2026-08-04 08:18:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866574": [
        {
            "ioc_value": "193.112.95.180:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866575": [
        {
            "ioc_value": "39.106.183.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:38",
            "last_seen_utc": "2026-08-03 13:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866576": [
        {
            "ioc_value": "83.229.123.185:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866573": [
        {
            "ioc_value": "83.229.123.185:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866572": [
        {
            "ioc_value": "47.108.77.36:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 07:59:36",
            "last_seen_utc": "2026-08-03 14:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866570": [
        {
            "ioc_value": "http://kinderplow.com:5782",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 07:50:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866571": [
        {
            "ioc_value": "http://staxta.click:5627",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 07:50:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866568": [
        {
            "ioc_value": "ojbsqt.german-uboats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:43:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866567": [
        {
            "ioc_value": "xxhxsl.german-uboats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:34:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866566": [
        {
            "ioc_value": "iftuxuh.fencescapeinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:33:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866562": [
        {
            "ioc_value": "mppxtrz.fencescapeinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:04:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866561": [
        {
            "ioc_value": "ykiwcg.german-uboats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:02:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866560": [
        {
            "ioc_value": "german-uboats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:01:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866559": [
        {
            "ioc_value": "genevievesasseville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 07:01:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866558": [
        {
            "ioc_value": "nvftww.tashabeautystore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 06:37:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866367": [
        {
            "ioc_value": "137.184.70.190:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:28:01",
            "last_seen_utc": "2026-08-13 08:16:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866374": [
        {
            "ioc_value": "103.214.146.46:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:28:01",
            "last_seen_utc": "2026-08-31 09:55:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866376": [
        {
            "ioc_value": "206.189.81.41:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:28:01",
            "last_seen_utc": "2026-08-07 00:15:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866401": [
        {
            "ioc_value": "206.189.81.41:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:28:00",
            "last_seen_utc": "2026-08-12 11:38:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866418": [
        {
            "ioc_value": "167.99.64.180:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:28:00",
            "last_seen_utc": "2026-08-13 06:41:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866419": [
        {
            "ioc_value": "47.107.224.89:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:59",
            "last_seen_utc": "2026-08-04 05:02:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866424": [
        {
            "ioc_value": "45.135.180.166:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 06:27:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "43641,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1866427": [
        {
            "ioc_value": "154.36.167.17:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 06:27:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "174,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1866467": [
        {
            "ioc_value": "167.99.64.180:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:58",
            "last_seen_utc": "2026-08-12 01:50:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866470": [
        {
            "ioc_value": "167.172.71.69:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:58",
            "last_seen_utc": "2026-08-12 13:08:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866514": [
        {
            "ioc_value": "143.198.206.191:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:58",
            "last_seen_utc": "2026-08-12 05:46:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866520": [
        {
            "ioc_value": "45.148.146.52:2535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 06:27:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,f0e7dc585ba3ebf586da7b92aedbfc64,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866530": [
        {
            "ioc_value": "206.189.81.41:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:53",
            "last_seen_utc": "2026-08-12 05:12:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866540": [
        {
            "ioc_value": "137.184.199.120:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:52",
            "last_seen_utc": "2026-08-04 04:41:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866543": [
        {
            "ioc_value": "178.128.22.21:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:52",
            "last_seen_utc": "2026-08-03 01:29:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866550": [
        {
            "ioc_value": "167.99.64.180:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-08-01 06:27:51",
            "last_seen_utc": "2026-08-07 18:48:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866556": [
        {
            "ioc_value": "http://72.255.59.114:49386/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-08-01 06:27:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.59.114",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866557": [
        {
            "ioc_value": "dqktojj.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 06:22:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866555": [
        {
            "ioc_value": "gmsjsk15.salpizzasewell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 06:06:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866554": [
        {
            "ioc_value": "ks52m3wi.apmlandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 06:06:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866549": [
        {
            "ioc_value": "zxumfw.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 05:56:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866548": [
        {
            "ioc_value": "vszptzu.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 05:37:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866547": [
        {
            "ioc_value": "coronapd.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 05:35:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866544": [
        {
            "ioc_value": "mmuq9r9o.liberty--token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 05:02:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866542": [
        {
            "ioc_value": "rvgitkx.eventmanagementindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 04:51:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866541": [
        {
            "ioc_value": "ydlyns.libartytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 04:47:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866536": [
        {
            "ioc_value": "lvvbnf3q.angelnailsphenix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 04:04:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866535": [
        {
            "ioc_value": "http://sahalexchange.com:9504",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 04:03:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866534": [
        {
            "ioc_value": "plxxxru.elpatronrestaurantbar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 04:02:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866533": [
        {
            "ioc_value": "cnatia.lebertytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 04:01:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866532": [
        {
            "ioc_value": "dgmnroa.elpatronrestaurantbar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 03:51:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866531": [
        {
            "ioc_value": "ekjnnh.lebertytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 03:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866526": [
        {
            "ioc_value": "eloakoa.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 03:04:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866525": [
        {
            "ioc_value": "pjeobx.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 03:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866524": [
        {
            "ioc_value": "oofnjcu.floatservicesnw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 02:19:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866523": [
        {
            "ioc_value": "floatservicesnw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 02:18:23",
            "last_seen_utc": "2026-08-07 00:40:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866522": [
        {
            "ioc_value": "mgluob.friendsofdormontlibrary.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 02:17:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866521": [
        {
            "ioc_value": "friendsofdormontlibrary.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 02:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866518": [
        {
            "ioc_value": "124.222.145.172:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-08-01 02:05:06",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866515": [
        {
            "ioc_value": "l1twkhat.valleychimneyrepair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 02:04:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866472": [
        {
            "ioc_value": "http://onesdto.shop:2535",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 01:42:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866473": [
        {
            "ioc_value": "http://azurhay.shop:8539",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 01:42:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866474": [
        {
            "ioc_value": "http://slyfogx.shop:5776",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-08-01 01:42:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866471": [
        {
            "ioc_value": "jldrbcv.fitprotracker-campaign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 01:38:22",
            "last_seen_utc": "2026-08-10 04:26:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866469": [
        {
            "ioc_value": "zgzyob.freemanframeca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 01:27:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866468": [
        {
            "ioc_value": "freemanframeca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 01:26:58",
            "last_seen_utc": "2026-08-07 00:40:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866441": [
        {
            "ioc_value": "entbd.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-08-01 01:17:13",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866429": [
        {
            "ioc_value": "9mqzhu71.sainidigirocket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 01:08:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866423": [
        {
            "ioc_value": "xfpjksx.fitfirst.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:52:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866422": [
        {
            "ioc_value": "fitfirst.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:47:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866421": [
        {
            "ioc_value": "zpvedf.franklintowing.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:42:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866420": [
        {
            "ioc_value": "franklintowing.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:41:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866413": [
        {
            "ioc_value": "72mv6y0m.twinglassca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:04:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866412": [
        {
            "ioc_value": "ycazjth.fishersace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866411": [
        {
            "ioc_value": "fishersace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:01:47",
            "last_seen_utc": "2026-08-07 00:40:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866410": [
        {
            "ioc_value": "cpnisnik.bearriverchiropractic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-08-01 00:00:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866409": [
        {
            "ioc_value": "mfnipe.fotrclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 23:56:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866408": [
        {
            "ioc_value": "fotrclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 23:55:48",
            "last_seen_utc": "2026-08-07 00:40:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866407": [
        {
            "ioc_value": "enter-press-cdn.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 23:49:35",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866405": [
        {
            "ioc_value": "185.92.190.175:8696",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 23:46:44",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866406": [
        {
            "ioc_value": "185.92.190.176:8696",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 23:46:44",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866402": [
        {
            "ioc_value": "185.182.65.34:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 23:46:43",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866403": [
        {
            "ioc_value": "185.92.190.173:8696",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 23:46:43",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866404": [
        {
            "ioc_value": "185.92.190.174:8696",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 23:46:43",
            "last_seen_utc": "2026-09-01 02:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866400": [
        {
            "ioc_value": "gpfbmfo.finkfamilyautomotive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 23:17:18",
            "last_seen_utc": "2026-08-11 07:57:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866399": [
        {
            "ioc_value": "asbhxx.forbiddenpantsshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 23:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866398": [
        {
            "ioc_value": "forbiddenpantsshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 23:10:18",
            "last_seen_utc": "2026-08-07 00:35:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866395": [
        {
            "ioc_value": "ccxcdrm.ferkrueda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 22:31:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866394": [
        {
            "ioc_value": "ferkrueda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 22:30:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866393": [
        {
            "ioc_value": "ldistf.foodpapajobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 22:29:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866389": [
        {
            "ioc_value": "lnme6i80.tumarketexpress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 22:05:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866385": [
        {
            "ioc_value": "ahoyiis.fencescapeinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 21:47:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866384": [
        {
            "ioc_value": "fencescapeinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 21:45:51",
            "last_seen_utc": "2026-08-07 00:40:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866383": [
        {
            "ioc_value": "anisxx.flyingtogether-ual.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 21:41:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866382": [
        {
            "ioc_value": "flyingtogether-ual.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 21:39:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866378": [
        {
            "ioc_value": "fkgynbq.federationofpbos.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 21:00:30",
            "last_seen_utc": "2026-08-20 17:32:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866377": [
        {
            "ioc_value": "lmdztf.erdekhaber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 20:56:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866375": [
        {
            "ioc_value": "qghchil.edinacomfortcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 20:16:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866372": [
        {
            "ioc_value": "ifbjtm.entrepot-demarque.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 20:10:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866371": [
        {
            "ioc_value": "62am4zti.rugsofus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 20:06:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866368": [
        {
            "ioc_value": "pbzqq2v4.tashabeautystore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 20:02:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866342": [
        {
            "ioc_value": "abcsgftr.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:42",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866343": [
        {
            "ioc_value": "alkociferblat.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:41",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866344": [
        {
            "ioc_value": "blakcinwhitexn.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:41",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866345": [
        {
            "ioc_value": "gotynotbag.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:41",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866346": [
        {
            "ioc_value": "gugonaftikzin.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:40",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866347": [
        {
            "ioc_value": "hihankidaha.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:40",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866348": [
        {
            "ioc_value": "hilacbatoriaaa.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:39",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866349": [
        {
            "ioc_value": "huishuvish.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:39",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866350": [
        {
            "ioc_value": "infociganka.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:37",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866351": [
        {
            "ioc_value": "pluhabovra.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:37",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866352": [
        {
            "ioc_value": "tue-partner-03.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-31 19:49:37",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,ErrTraffic",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1866354": [
        {
            "ioc_value": "167.99.64.180:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 19:49:36",
            "last_seen_utc": "2026-08-13 08:20:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866366": [
        {
            "ioc_value": "93.152.223.242:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-31 19:46:12",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866365": [
        {
            "ioc_value": "93.115.27.97:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-31 19:46:11",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866364": [
        {
            "ioc_value": "38.240.37.142:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 19:45:26",
            "last_seen_utc": "2026-08-31 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866363": [
        {
            "ioc_value": "31.57.38.232:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 19:45:21",
            "last_seen_utc": "2026-08-31 08:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866362": [
        {
            "ioc_value": "23.227.196.18:43655",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-31 19:45:14",
            "last_seen_utc": "2026-09-01 02:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866361": [
        {
            "ioc_value": "194.62.248.129:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 19:44:21",
            "last_seen_utc": "2026-09-01 02:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866360": [
        {
            "ioc_value": "193.138.195.29:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 19:44:18",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866359": [
        {
            "ioc_value": "185.174.102.5:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 19:44:09",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866358": [
        {
            "ioc_value": "167.172.142.69:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-31 19:43:52",
            "last_seen_utc": "2026-08-31 08:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866357": [
        {
            "ioc_value": "118.107.46.207:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-31 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866355": [
        {
            "ioc_value": "118.107.46.204:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-31 19:43:19",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866356": [
        {
            "ioc_value": "118.107.46.207:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-31 19:43:19",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866353": [
        {
            "ioc_value": "nvsybmf.ecryptobits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 19:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866327": [
        {
            "ioc_value": "http://124.29.214.162:51383/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 19:28:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.214.162",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866328": [
        {
            "ioc_value": "http://179.49.213.85:54579/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 19:28:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/179.49.213.85",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866329": [
        {
            "ioc_value": "http://72.255.32.51:57334/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 19:28:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.51",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866333": [
        {
            "ioc_value": "85.31.60.169:4437",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-31 19:28:12",
            "last_seen_utc": "2026-08-08 10:02:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "29033904bdc36ecf8e04cf3549a2e264,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866335": [
        {
            "ioc_value": "206.189.81.41:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 19:28:12",
            "last_seen_utc": "2026-08-13 08:43:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866337": [
        {
            "ioc_value": "79.124.58.146:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 19:28:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866336": [
        {
            "ioc_value": "143.198.206.191:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 19:28:10",
            "last_seen_utc": "2026-08-13 08:47:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866338": [
        {
            "ioc_value": "137.184.70.190:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 19:28:09",
            "last_seen_utc": "2026-08-12 16:13:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866339": [
        {
            "ioc_value": "137.184.199.120:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 19:28:09",
            "last_seen_utc": "2026-08-13 08:23:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866340": [
        {
            "ioc_value": "167.172.71.69:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 19:28:09",
            "last_seen_utc": "2026-08-13 08:27:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866341": [
        {
            "ioc_value": "qwnvfv.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 19:27:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866332": [
        {
            "ioc_value": "arxjmuy.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 18:45:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866331": [
        {
            "ioc_value": "ekvozx.elpatronrestaurantbar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 18:38:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866324": [
        {
            "ioc_value": "obparso.eventmanagementindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 17:59:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866322": [
        {
            "ioc_value": "eyieoz.ellynailsspaarden.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 17:54:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866320": [
        {
            "ioc_value": "0ijrzsc4.liberty--token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 17:46:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866288": [
        {
            "ioc_value": "47.107.224.89:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 17:35:18",
            "last_seen_utc": "2026-08-07 03:14:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866299": [
        {
            "ioc_value": "5.61.209.44:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:17",
            "last_seen_utc": "2026-08-01 17:38:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866300": [
        {
            "ioc_value": "104.248.189.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866301": [
        {
            "ioc_value": "143.198.194.207:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866302": [
        {
            "ioc_value": "201.79.11.32:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866303": [
        {
            "ioc_value": "206.189.39.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866304": [
        {
            "ioc_value": "157.245.48.118:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866305": [
        {
            "ioc_value": "172.232.240.110:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866306": [
        {
            "ioc_value": "192.53.122.216:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866307": [
        {
            "ioc_value": "172.233.98.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866308": [
        {
            "ioc_value": "172.233.14.93:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-31 17:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,ens,jackskid,rctea,tls",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1866319": [
        {
            "ioc_value": "stczzen.evellboutique.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 17:17:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866317": [
        {
            "ioc_value": "komkbc.ellenscleaningservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 17:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866313": [
        {
            "ioc_value": "wojgufx.erdekhaber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 16:29:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866311": [
        {
            "ioc_value": "vog.akasia988.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 16:25:36",
            "last_seen_utc": "2026-08-07 14:25:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866310": [
        {
            "ioc_value": "https://vog.akasia988.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 16:25:35",
            "last_seen_utc": "2026-08-19 16:21:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866309": [
        {
            "ioc_value": "oxkvzq.elcornerderaulmorote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 16:24:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866295": [
        {
            "ioc_value": "scheduler2.travel-scope.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-31 16:00:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866294": [
        {
            "ioc_value": "f4bdzv4n.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:45:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866293": [
        {
            "ioc_value": "uwtcmjgsyfwsurgulz.rentechglobalsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:43:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866292": [
        {
            "ioc_value": "gqslnzd.epgdevelopment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:43:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866291": [
        {
            "ioc_value": "epgdevelopment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:41:08",
            "last_seen_utc": "2026-08-07 00:34:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866290": [
        {
            "ioc_value": "xiseus.egracefashionandbraiding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:36:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866289": [
        {
            "ioc_value": "egracefashionandbraiding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:35:18",
            "last_seen_utc": "2026-08-07 00:34:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866287": [
        {
            "ioc_value": "rechapman.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:15:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866286": [
        {
            "ioc_value": "0wlzavu1.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 15:07:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866284": [
        {
            "ioc_value": "riaifhk.entrepot-demarque.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 14:56:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866282": [
        {
            "ioc_value": "mznbhd.edinacomfortcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 14:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866280": [
        {
            "ioc_value": "palfxxt.encompassrealestateschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 14:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866278": [
        {
            "ioc_value": "akhkdv.ecopro-edu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 14:05:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866275": [
        {
            "ioc_value": "jov1rwpq.advanceddrivelines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 14:00:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866274": [
        {
            "ioc_value": "uomcxv2i.ecryptobits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866273": [
        {
            "ioc_value": "registry.lighttexture18.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-31 13:42:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1866272": [
        {
            "ioc_value": "uyvjohl.empoweredwellnessteam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:29:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866270": [
        {
            "ioc_value": "https://dbm.akasia988.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 13:25:32",
            "last_seen_utc": "2026-08-03 08:50:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866271": [
        {
            "ioc_value": "dbm.akasia988.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 13:25:32",
            "last_seen_utc": "2026-08-03 09:04:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866268": [
        {
            "ioc_value": "vbsjxw.eclipsechasers.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:20:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866267": [
        {
            "ioc_value": "eclipsechasers.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:18:46",
            "last_seen_utc": "2026-07-31 13:19:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866266": [
        {
            "ioc_value": "xoiowm.eauviveinasia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866265": [
        {
            "ioc_value": "qtifqme.emotion-kayak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:09:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866264": [
        {
            "ioc_value": "eauviveinasia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:09:37",
            "last_seen_utc": "2026-07-31 13:17:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866262": [
        {
            "ioc_value": "abrychz.emeraldyachtship.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 13:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866257": [
        {
            "ioc_value": "rdwebpentesting.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 12:55:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866246": [
        {
            "ioc_value": "http://39.81.179.181:41855/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 12:52:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.81.179.181",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866247": [
        {
            "ioc_value": "http://123.14.253.47:58492/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 12:52:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.14.253.47",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866248": [
        {
            "ioc_value": "http://144.48.135.109:49866/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 12:52:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.135.109",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866249": [
        {
            "ioc_value": "http://103.26.82.237:43196/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 12:52:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.82.237",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866250": [
        {
            "ioc_value": "http://163.223.136.58:54559/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 12:52:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/163.223.136.58",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1866256": [
        {
            "ioc_value": "lghduo.bartinyatirim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 12:45:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866255": [
        {
            "ioc_value": "smtulna.emeraldyachtship.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 12:42:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866254": [
        {
            "ioc_value": "emeraldyachtship.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 12:42:07",
            "last_seen_utc": "2026-07-31 13:07:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866253": [
        {
            "ioc_value": "bartinyatirim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 12:41:46",
            "last_seen_utc": "2026-07-31 12:42:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866252": [
        {
            "ioc_value": "qyfbzxh.emeenakshi.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 12:41:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866251": [
        {
            "ioc_value": "emeenakshi.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 12:20:30",
            "last_seen_utc": "2026-08-07 00:34:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866244": [
        {
            "ioc_value": "db967abae63200065e22c95bbc1fe380",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-31 12:12:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866242": [
        {
            "ioc_value": "439a03653b8f93d80b15335d49f0937d0f395b803bbf60d6ed31b968816dad39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-31 12:12:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866243": [
        {
            "ioc_value": "7df1fe0e985b0e7ccf3dd4dfa459a3ed20751143",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-31 12:12:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866239": [
        {
            "ioc_value": "e3144c24d2eefa8b88c9723c91217f57fb29114a9dbc1ff5f2b0fb4a0183a520",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-31 12:12:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866240": [
        {
            "ioc_value": "56426eddd14af3352f475a65af7b7dfb9de2af00",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-31 12:12:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866241": [
        {
            "ioc_value": "d87b97d9015ba00ef095398f7fbfe4a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-31 12:12:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866237": [
        {
            "ioc_value": "128d921b2200fa96cae6076c7e44b6359e8bff22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-31 12:12:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866238": [
        {
            "ioc_value": "511f859cacc58d37186eb3262362ce4b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-31 12:12:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866236": [
        {
            "ioc_value": "a6f0cbcb7f2c1d46f27fa4d84c18718e77a7151d25933e62073231a08383a012",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-31 12:12:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866234": [
        {
            "ioc_value": "a9a0ff21db03e1cb900b0f69c078932a98ddcaf7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866235": [
        {
            "ioc_value": "de225ab0dac2c90346c919c55e5e5bf5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866233": [
        {
            "ioc_value": "10aa22f1c88b690399fa6cfe6f6f7bc1ed49d153313585fc5520621f160b64ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866230": [
        {
            "ioc_value": "fa4b30b7cc5b13ed11c7658dd3ce4f2f2e7d3488c95f0a728d11a3186d6a4671",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-31 12:12:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866231": [
        {
            "ioc_value": "406993c2ec445d078e354d73c62498e66cf84a22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-31 12:12:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866232": [
        {
            "ioc_value": "910f7ad5d25665e50980e7c2b8fe7c7c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-31 12:12:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866227": [
        {
            "ioc_value": "245f0ee939fa4068c7ac66b51a51f845e1cc8070ee76e21aedf57be7b087ef9c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866228": [
        {
            "ioc_value": "14eb15d49e8ebd6c6dad52e1ec80b44ae49c0e0a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866229": [
        {
            "ioc_value": "b60a0a174d96173628384a06b96654de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866225": [
        {
            "ioc_value": "3a05ce5e3eea58d50deb3d12d9f004486cd41efb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-31 12:12:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866226": [
        {
            "ioc_value": "f2e641d14aaff8fa4872a157d9d1be82",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-31 12:12:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866222": [
        {
            "ioc_value": "d56030b16c703001cf6525387afe3afe8d4067c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866223": [
        {
            "ioc_value": "29e642bacb450b90b4d54e26ec5fb5d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866224": [
        {
            "ioc_value": "69e8a73e215114989a0d9c5c9c666587057e2bcf1c29b1fb7d45e1cb38a715de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-31 12:12:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866219": [
        {
            "ioc_value": "958e8f42467049f05c81b368bb71ff465642164a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 12:12:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866220": [
        {
            "ioc_value": "962f8ccbacdfda078a35a1eb6dbcc11b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 12:12:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866221": [
        {
            "ioc_value": "4c3084e6f337e867f335f4b04937350f150e82888f391ca63427f8eafa76c978",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866216": [
        {
            "ioc_value": "f3d48d753ee43f069763fcf06a8c9e3536dfed8b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 12:12:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866217": [
        {
            "ioc_value": "d5a1c25a0d94a939935412058154c8ef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 12:12:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866218": [
        {
            "ioc_value": "dea0649857c76ceabba2ac3ecb1aa5960e92f1a5ef80b385a75903aa7edd2c3d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 12:12:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866214": [
        {
            "ioc_value": "dd79f535f6108df5bea9c3b2be064a09",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866215": [
        {
            "ioc_value": "46038f8f6f10cbee2ea6654ab97a7664365087b7b86bb3ee783ae0428a411eb4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 12:12:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866213": [
        {
            "ioc_value": "ad55499168f6028869bb7ebdd83406b948ede9f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866212": [
        {
            "ioc_value": "5f1146ec4c1130cd64af934de2687d6dc78330b3bc6c8486deb39b9305b10d72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:12:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866208": [
        {
            "ioc_value": "aa1b178ea8f756e209b05880cfac8bbe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-31 12:12:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866209": [
        {
            "ioc_value": "74eb42416b47c082fc867764b577ceac6f1bd68e192695d79a9e48a7bd3fdd69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:12:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866210": [
        {
            "ioc_value": "aa68f095eebfae5a1122dd82c9c4e9373af1b0ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:12:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866211": [
        {
            "ioc_value": "2d5137f186bd8f99e610367e7bab3631",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:12:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866207": [
        {
            "ioc_value": "6afcf80b5ff082e4bd4ce860d7846a06b99463d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-31 12:12:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866203": [
        {
            "ioc_value": "b8e46b0ece6c02f2b6069a9cbe9686ce595d7ca59494214cc6d6ebaa9b5d072a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866204": [
        {
            "ioc_value": "7d4bbf2b3d993c1d50730c65e2e05ccf697aff7c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866205": [
        {
            "ioc_value": "4be121d6585848c9bd316f1aad94e383",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866206": [
        {
            "ioc_value": "2da611af6f3cad9f6829a476cfd47b8c4fd54e814024517da3aab2e4a81643b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-31 12:11:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866200": [
        {
            "ioc_value": "ec0078d806fcb7b0ef538a51ae03217888ce1bd3e96a73beceecc2c12675d77d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866201": [
        {
            "ioc_value": "018356c22bf7997520cc341b97eb7e6e4b4ccb67",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866202": [
        {
            "ioc_value": "bf8ec2994ca75d5e09c66a0fc740459e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866196": [
        {
            "ioc_value": "baff942fdabd6c068b3e941dd29fddad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866197": [
        {
            "ioc_value": "9885939da17f13c0dbb0973bb0f8393f6170a8273da18bc7c31d9f88645985ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866198": [
        {
            "ioc_value": "78106530eef55bc0ac87e52d3a151c337663ca7a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866199": [
        {
            "ioc_value": "77eb919ac3707bc58f178057a2c27a05",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866193": [
        {
            "ioc_value": "d19f7abd0cc5a63ac3683b495413d03b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866194": [
        {
            "ioc_value": "3c8c1d7684efd4edf61207179a7893ecea46dc49a26eed378f5197a5340182c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866195": [
        {
            "ioc_value": "4081a567b593f51ca6c8d98902311e872513ccd6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866189": [
        {
            "ioc_value": "8c8eb76647713e6a68ca951bc7ddee184d8d1f8e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866190": [
        {
            "ioc_value": "09375c774e2c0785466db442c4cbe5ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866191": [
        {
            "ioc_value": "20dcf6d45f17d62279183276675ea33876e6846d3fdc09285e78e9819882b97e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866192": [
        {
            "ioc_value": "41699060578c24fb043f03003358ce84f1895406",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866186": [
        {
            "ioc_value": "8f76a343ee7e4e05a31b9acc19f1104762a21f01",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866187": [
        {
            "ioc_value": "673cc6c6cdde3fdfaaf3c7065806e8d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866188": [
        {
            "ioc_value": "fd9dec7ac8b45ddebec3fa88dfa1758afedcbe530d1a824c3857fc77fe3ffd69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866182": [
        {
            "ioc_value": "25ec53399232a6fd978e3d85ce0d5a9e987c933fadace4ab638f290acd00fd04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866183": [
        {
            "ioc_value": "ee2ec5cd97f2947dc9152050d1949d4c97e9c162",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866184": [
        {
            "ioc_value": "a7592e13d17ebc6d2a8ceeeb3d0ce542",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866185": [
        {
            "ioc_value": "537dea2679e48b347b6bc905d2eb17b4dde6855cf82bcea4ec5486f2c221346f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866179": [
        {
            "ioc_value": "5e58a0e0b4ab711349370567728293cf6e732870aa9ea9def6ae5b59ca7322c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866180": [
        {
            "ioc_value": "d7b49a07497daeae229427bee23371abd801d3fd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866181": [
        {
            "ioc_value": "1f6b88a1a6859c4bc2969541334d12cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-31 12:11:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866175": [
        {
            "ioc_value": "4702c86ebed92f094e46ea41587d8690",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-31 12:11:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866176": [
        {
            "ioc_value": "0db05388d762bff931351ac2d599ca1d2bb216198754cda6d275b07709c50766",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866177": [
        {
            "ioc_value": "c8dbaed4b894e24f5f214de1a9c837baf664cf7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866178": [
        {
            "ioc_value": "0f887952dc5252c713f141b8ff1f8070",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866172": [
        {
            "ioc_value": "b279d0bc4e1d35c563090460c238b62e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866173": [
        {
            "ioc_value": "49b46e61efe06551f1d58edf4b33d275f32aab64978a826d4620f5340ac6fc2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-31 12:11:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866174": [
        {
            "ioc_value": "fa4fb5fbc525564c13b323844ba8a8f247f2d3d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-31 12:11:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866169": [
        {
            "ioc_value": "60c79d4f5eb60869d75d32c576428b01",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866170": [
        {
            "ioc_value": "8a46d5ea2d20041fc3f1f2f9ab60e46247f96acac0677e66255cd563eda1c4b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866171": [
        {
            "ioc_value": "1defebed2bc41dbff134f5b73b57969d01c69547",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866166": [
        {
            "ioc_value": "7cadab0830e2c88048173e15bfc93495",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866167": [
        {
            "ioc_value": "9d0690fac5168a38b4dfc77289e53ffbb1b87219b27390a5d4a11e303c307823",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866168": [
        {
            "ioc_value": "8192b2198ef75b2ce870538d085edf408300cff1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866163": [
        {
            "ioc_value": "aaea22c0545af555ecf5357c0bfcc18c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866164": [
        {
            "ioc_value": "dda624c840fa96b71a6624d281fc84bc6bc70a7a550d96072bada7419a9a86ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866165": [
        {
            "ioc_value": "676a5a3d53701f9367f64891ce9dc8e75e0e70a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866160": [
        {
            "ioc_value": "9333bb34844a2579ea99b40edd82e3fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:11:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866161": [
        {
            "ioc_value": "84e0669351cdf4ce4006082749c8810219134c1d332f2b226697c5ed00f3c04c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866162": [
        {
            "ioc_value": "1993cc64e69f1f07d4b5dc051bbd6be1a04ee656",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-31 12:11:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866158": [
        {
            "ioc_value": "3e1b1fe0edaa2aa1cd743646f41354eaaf7eaf54d47a416f141ba9f9320024fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:11:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866159": [
        {
            "ioc_value": "b5511448afcb11e950db902a78b55c20993dc890",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:11:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866155": [
        {
            "ioc_value": "c25329116a57d51912ec241ca8b581a5c7cc01b729e40492abe5fc48720586a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-31 12:11:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866156": [
        {
            "ioc_value": "886086cf34b2ff62cf3f200a4ec3413cb4320b6a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-31 12:11:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866157": [
        {
            "ioc_value": "59d51adf0215f34c0c2ff9b99024b15a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-31 12:11:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866152": [
        {
            "ioc_value": "c05581c54fb2e63ab1b6d0c8957d24fbcbc0e094339bc02838b50b3f72dddeff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.rn_stealer",
            "malware_alias": null,
            "malware_printable": "RN Stealer",
            "first_seen_utc": "2026-07-31 12:11:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866153": [
        {
            "ioc_value": "c4923d8832f29f2d60a768e62e60fef0f0005e8c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.rn_stealer",
            "malware_alias": null,
            "malware_printable": "RN Stealer",
            "first_seen_utc": "2026-07-31 12:11:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866154": [
        {
            "ioc_value": "9188e2a2bc5f9e23dfb62cff8589ae64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.rn_stealer",
            "malware_alias": null,
            "malware_printable": "RN Stealer",
            "first_seen_utc": "2026-07-31 12:11:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866149": [
        {
            "ioc_value": "b76b2e67f36e85e2c7a2e6904ed92550991fd14743c3a004d8cf2a797d9c72f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866150": [
        {
            "ioc_value": "286a582cc3d786f42ee94c112f906959886e2c34",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866151": [
        {
            "ioc_value": "13f89f5fb5faf8264685bf74930608c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866146": [
        {
            "ioc_value": "ad21776ed177bd75e1771cf39efbf97f0d1c4d809f7bf5c93e2d14f6317b0999",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866147": [
        {
            "ioc_value": "7f306eb9a0fe2f8523a4048194bb97dc0553d465",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866148": [
        {
            "ioc_value": "74e56d0afa0ab0b7cc138edfaee2c792",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866143": [
        {
            "ioc_value": "eaebbaf4e6affb72d0979fb50e61538cfb2f24f61b9c8157862f124f761465d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-31 12:11:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866144": [
        {
            "ioc_value": "a7fe3adbedd77c50af192b7bf5e37ca9556349bf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-31 12:11:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866145": [
        {
            "ioc_value": "6d5e0258501cbce5abc822c762a4906a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-31 12:11:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866140": [
        {
            "ioc_value": "a477f89d63408f5ada9698388e4348c65611c81efe19681772e7354d64c2d3ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-31 12:11:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866141": [
        {
            "ioc_value": "8e2e193083339d842f176642387a0b3b2b858540",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-31 12:11:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866142": [
        {
            "ioc_value": "1c1f469d72d082fb956ca88133d8d8db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-31 12:11:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866137": [
        {
            "ioc_value": "38027ca6afc21bd734d86e96b8d3c6016e5afff6d8139b777cb55825a92f8f15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-31 12:11:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866138": [
        {
            "ioc_value": "7e70a6772d83ea168b5c4b15e6067ae51a7d0e05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-31 12:11:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866139": [
        {
            "ioc_value": "1314f9049217e0871f8979cf33b1ac63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-31 12:11:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866134": [
        {
            "ioc_value": "76b2713b63e443c83a23794087f2cad4b7588e78b0afa9a0fc276dd5de65a226",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866135": [
        {
            "ioc_value": "dae4a62d13b6f7f6d91151e5d6ec2a3803dcad42",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866136": [
        {
            "ioc_value": "c3752c08eb40761569cc7c4a90485320",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866131": [
        {
            "ioc_value": "2aab00defb69f62ea24fcf2d2afc85750e1e24bc67a6e2fed6166438dfc1172d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866132": [
        {
            "ioc_value": "c207405903d482df122e6ceec35c61b0e61ce6cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866133": [
        {
            "ioc_value": "e3e025e96594d5b774b54e8859f9dc04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866129": [
        {
            "ioc_value": "1fe32ef5a3ca6ad3f31a71b280421efec3cd255f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866130": [
        {
            "ioc_value": "edc0d904974de3d03e654e98d24bfe9e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866127": [
        {
            "ioc_value": "d24420d2f8ffbb8cec06376b9548ca1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866128": [
        {
            "ioc_value": "79cab94e4ca816acbb4068254adaac761f16f8a6e4796408c77840235e5890ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866124": [
        {
            "ioc_value": "8f93aa8aa04ca6c13477542655cdb74b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-31 12:11:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866125": [
        {
            "ioc_value": "ca116b3d7caea85d448cc674087381d06902d80f2d2842e8dc22cd4b266379b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866126": [
        {
            "ioc_value": "05b21b6fcf2b60f7e617ab76e62150b3dd7047b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-31 12:11:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866120": [
        {
            "ioc_value": "d2e7c31d09fd9fc6908b1c005756bbf10eafcda7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866121": [
        {
            "ioc_value": "8f8fc068a9464e9b3d7f052ef53ea5ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866122": [
        {
            "ioc_value": "58b16700b8a3b8f0db2fb2e14b8c3e835270111518e67239b373a81ffd265b9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-31 12:11:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866123": [
        {
            "ioc_value": "8a68d580a0bb9f62923bf112a467cb723e9f1b5d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-31 12:11:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866118": [
        {
            "ioc_value": "2743ee280188d4250ab5aa6528a20448",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866119": [
        {
            "ioc_value": "c2ae41bff71b9d5dd6d5845f1cda894729f406db9501c3afca402420b91515c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866114": [
        {
            "ioc_value": "0187cf883e634bb9c8069c1ccbe1323a055c4e65",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866115": [
        {
            "ioc_value": "326177e27aef5d34b2ae4d5c9935be62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866116": [
        {
            "ioc_value": "8489605870dd2735a8298cbb05db98cc6dc1d49e30caf3aa7d3260cc8fecdead",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866117": [
        {
            "ioc_value": "749de482e4b125876ba05f88958e4f4c279abfc1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866111": [
        {
            "ioc_value": "dd36453cdc9becd6b6366bcc0f9eeb706925b3c4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866112": [
        {
            "ioc_value": "25ce92092fefdcff7acde8689c4cfd8c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866113": [
        {
            "ioc_value": "8cd988e1f749a5e008128df6f2b7da55c2760fbcdf414f26260331db723e6a15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866110": [
        {
            "ioc_value": "c50a08b67bbe92e4afae7bb28b33af820001aa384ee82ad1a88e16d623c14e6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866108": [
        {
            "ioc_value": "8714303539a5d6401b37d729c801dfa8020bd6cf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866109": [
        {
            "ioc_value": "33949eaabd8ab52d2bc39a1b21ea3dc2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866105": [
        {
            "ioc_value": "2a4326bbaa5ab0544d78bce237722c65ff35ccd9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866106": [
        {
            "ioc_value": "fdd4f264cbeaf1e092a6f6b4932d56da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866107": [
        {
            "ioc_value": "c076437d6a30f394ea3f97331987884228703b350026da16337e7c1b4d740b66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866102": [
        {
            "ioc_value": "ffa21433f4d9994417951617ce8b089fe632ecc5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-31 12:11:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866103": [
        {
            "ioc_value": "da3635d346d58158cb0e09addd12f5b2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-31 12:11:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866104": [
        {
            "ioc_value": "b2388fb3fedb1d62f7a6cd1719613b5f298c56e677de981f339550a6b7a3daf3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866099": [
        {
            "ioc_value": "b3344fd24a3b750d6c90baac3316af342a41b298",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866100": [
        {
            "ioc_value": "e3ebd1db429e9ec95e75b8daaf43e2b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866101": [
        {
            "ioc_value": "589e46d07f1239dd6b8b07a00d5739279648863d9cc78ced1a05fb034fc16122",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-31 12:11:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866097": [
        {
            "ioc_value": "2cfaefe80e05fe0f093cf5c382d7c77f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-07-31 12:11:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866098": [
        {
            "ioc_value": "93f1112efb938edee0b52aa69c28303d99b489ec0d785af553250478546ec647",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866096": [
        {
            "ioc_value": "c2ad2a5b5cd45e6f574d86b6e5b1079ed3063933",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-07-31 12:11:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866093": [
        {
            "ioc_value": "48edf7fee4bb273650d3624f9829c9ee075eee49",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866094": [
        {
            "ioc_value": "d310c9820dcc8e5badcba6b05c5b16f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866095": [
        {
            "ioc_value": "ed1d3f69fbbd5576c2ed8dba45ba22c4f6884eb311d4f6e389203846d512ec11",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-07-31 12:11:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866091": [
        {
            "ioc_value": "7955f6409c9e6669fcd5e3a0a293bc21",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866092": [
        {
            "ioc_value": "4bb4b92b54c8ecd1db145f986e9725e9d327713cd9262dbe010318afd6af8137",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866088": [
        {
            "ioc_value": "e35810ed86789ee1d511550578dc81ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866089": [
        {
            "ioc_value": "05be5a8131993a5034bc4a57963f0c8860aeb3188dd906ed78d95439d15d813e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866090": [
        {
            "ioc_value": "d2e9e164a0ea103a6efedf290665e0e40dcc66fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-31 12:11:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866084": [
        {
            "ioc_value": "6114ee757fe2e97974fbdb08bd852d6645eaa096",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866085": [
        {
            "ioc_value": "41ac69b68fdbd435885f881abfe1587c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866086": [
        {
            "ioc_value": "2670c97b169e77527f6db4726e58db1c95926c35b56e292c0a3a975dd6656cb8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866087": [
        {
            "ioc_value": "751e2692d1b8c18efba5b12c2e4076d57620e4eb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866082": [
        {
            "ioc_value": "15e99852c1be5de518692e7fed8b5966",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866083": [
        {
            "ioc_value": "dcc4899e3c3a30ba66cb03b92ff74755338f422f4ba47f1060a9503dde31fdfd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866080": [
        {
            "ioc_value": "a4b32f5f53a64195ee0cea0ea67a51799d90b25e761f0fec8d38b81e75b8a3c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866081": [
        {
            "ioc_value": "3a1c29c57c88ccfa5ad88b68511ae6e80cacb9c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866077": [
        {
            "ioc_value": "267929de47e2793196c699ad50a7f789795100bc063c0d1f1ae22e83f4c65a93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866078": [
        {
            "ioc_value": "e068db723eeb2640056c2ea1714c843f8aa077d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866079": [
        {
            "ioc_value": "25dfdfba8052af91b84a0cd8fcb4794f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-31 12:11:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866075": [
        {
            "ioc_value": "93ec7b0c70308100d4acf7fa420c8e06835f4d10",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866076": [
        {
            "ioc_value": "46728635055a3584456bc1179cabbcac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866072": [
        {
            "ioc_value": "a3b5f2e93023c6b46eb33cb5fbb86572aaf86805",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:11:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866073": [
        {
            "ioc_value": "4200ea00cb9c8382dbce6943f64e7127",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:11:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866074": [
        {
            "ioc_value": "c7b43ba65c93416885aac3f8dd532d867781119f56552316ba1a24ece5f1c66e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-31 12:11:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866070": [
        {
            "ioc_value": "7537d649c3ec62d6de4f4397639abe9d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-31 12:11:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866071": [
        {
            "ioc_value": "868f688f5c9300df03eeda85f23885c504d35717ce5a3fde77d69f34e72b6b50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-31 12:11:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866069": [
        {
            "ioc_value": "9cbe5798ca562db8bd9bb63edd11ddb1d1e637f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-31 12:11:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866068": [
        {
            "ioc_value": "0cc87edf5dd17fe02cb5fa8925087374dde0f3a2de206f726f2c98d2f193f6c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-31 12:11:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1866051": [
        {
            "ioc_value": "45.153.34.212:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-31 12:06:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1866056": [
        {
            "ioc_value": "137.184.156.157:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 12:06:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866063": [
        {
            "ioc_value": "144.124.239.18:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 12:06:17",
            "last_seen_utc": "2026-08-03 14:11:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866062": [
        {
            "ioc_value": "156.239.47.223:6005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 11:47:13",
            "last_seen_utc": "2026-09-01 02:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866061": [
        {
            "ioc_value": "156.224.18.21:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 11:47:12",
            "last_seen_utc": "2026-08-31 12:48:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866060": [
        {
            "ioc_value": "71ovhjko.cocoricobeachbar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 11:45:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866059": [
        {
            "ioc_value": "cocoricobeachbar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 11:43:26",
            "last_seen_utc": "2026-07-31 11:44:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866058": [
        {
            "ioc_value": "huiqbzp.clawandpurr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 11:39:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866057": [
        {
            "ioc_value": "clawandpurr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 11:34:56",
            "last_seen_utc": "2026-08-07 00:34:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866055": [
        {
            "ioc_value": "iqimux.authentickuts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 11:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866054": [
        {
            "ioc_value": "authentickuts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 11:29:24",
            "last_seen_utc": "2026-08-07 00:34:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866050": [
        {
            "ioc_value": "elsfpng.classicpontiac.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866048": [
        {
            "ioc_value": "bxzpts.aurinebeverly.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:48:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866024": [
        {
            "ioc_value": "https://qyvbm.fun/api/command",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 10:45:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866025": [
        {
            "ioc_value": "qyvbm.fun",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 10:45:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866028": [
        {
            "ioc_value": "217.60.11.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 10:45:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866030": [
        {
            "ioc_value": "pawsockenjoyer.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-31 10:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ABE,HorrorNight,Minecraft,modpack,Nativery,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866040": [
        {
            "ioc_value": "https://pawsockenjoyer.site/api/hwid",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-31 10:45:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ABE,HorrorNight,Minecraft,Nativery,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866043": [
        {
            "ioc_value": "https://pawsockenjoyer.site/v1/stats",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-31 10:45:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ABE,HorrorNight,Minecraft,Nativery,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866041": [
        {
            "ioc_value": "https://pawsockenjoyer.site/v1/webhook",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-31 10:45:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ABE,HorrorNight,Minecraft,Nativery,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866042": [
        {
            "ioc_value": "https://pawsockenjoyer.site/v1/poll",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-31 10:45:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ABE,HorrorNight,Minecraft,Nativery,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866044": [
        {
            "ioc_value": "165.245.219.184:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 10:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1866045": [
        {
            "ioc_value": "chestnutstanza.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:45:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1866047": [
        {
            "ioc_value": "aurinebeverly.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:43:53",
            "last_seen_utc": "2026-07-31 10:44:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866035": [
        {
            "ioc_value": "0lt9m77b.roundtheclockcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:06:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866034": [
        {
            "ioc_value": "188.166.238.207:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 10:05:08",
            "last_seen_utc": "2026-08-31 18:44:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866031": [
        {
            "ioc_value": "frenlvq.citycompanies-dev.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866027": [
        {
            "ioc_value": "oboizw.atriplejranch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 10:00:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866022": [
        {
            "ioc_value": "77.110.127.186:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 09:50:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866021": [
        {
            "ioc_value": "hairpi9911.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 09:49:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866020": [
        {
            "ioc_value": "95.133.166.43:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 09:46:54",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866019": [
        {
            "ioc_value": "89.213.118.63:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:46:47",
            "last_seen_utc": "2026-08-30 18:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866018": [
        {
            "ioc_value": "82.22.204.150:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:46:40",
            "last_seen_utc": "2026-08-30 18:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866017": [
        {
            "ioc_value": "27.124.36.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:45:48",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866016": [
        {
            "ioc_value": "6oybqhpt.coachandkitchen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:45:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866015": [
        {
            "ioc_value": "209.99.190.97:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-31 09:44:55",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866014": [
        {
            "ioc_value": "207.174.0.103:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:44:51",
            "last_seen_utc": "2026-08-30 18:44:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866013": [
        {
            "ioc_value": "195.177.94.169:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 09:44:40",
            "last_seen_utc": "2026-08-31 18:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866011": [
        {
            "ioc_value": "194.59.30.109:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 09:44:38",
            "last_seen_utc": "2026-08-30 18:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866012": [
        {
            "ioc_value": "194.59.30.183:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:44:38",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866010": [
        {
            "ioc_value": "181.215.242.84:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:44:19",
            "last_seen_utc": "2026-08-30 18:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866009": [
        {
            "ioc_value": "157.254.194.126:1447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 09:43:56",
            "last_seen_utc": "2026-08-30 18:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866008": [
        {
            "ioc_value": "13.205.246.212:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-31 09:43:27",
            "last_seen_utc": "2026-09-01 02:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866007": [
        {
            "ioc_value": "104.243.248.63:3608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-31 09:43:15",
            "last_seen_utc": "2026-09-01 02:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866006": [
        {
            "ioc_value": "coachandkitchen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:43:02",
            "last_seen_utc": "2026-08-07 00:34:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866005": [
        {
            "ioc_value": "www.contratoscliente.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 09:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1866004": [
        {
            "ioc_value": "nqgikft.chevyrepairhuntingtonbeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:19:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866003": [
        {
            "ioc_value": "chevyrepairhuntingtonbeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:18:04",
            "last_seen_utc": "2026-07-31 09:18:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1866002": [
        {
            "ioc_value": "dhatfu.apmlandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:15:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1866001": [
        {
            "ioc_value": "apmlandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:13:23",
            "last_seen_utc": "2026-08-07 00:40:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865993": [
        {
            "ioc_value": "iwffn03j.eastonfootandanklecenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 09:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865991": [
        {
            "ioc_value": "lbsmduw.certifiedairbalanceinlosangelesca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 08:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865990": [
        {
            "ioc_value": "certifiedairbalanceinlosangelesca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 08:32:29",
            "last_seen_utc": "2026-07-31 08:32:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865989": [
        {
            "ioc_value": "zsupeg.angelnailsphenix.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 08:28:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865972": [
        {
            "ioc_value": "217.60.195.127:7249",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-31 08:22:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1865984": [
        {
            "ioc_value": "fosterandfunnel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 08:22:58",
            "last_seen_utc": "2026-08-20 18:23:20",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/4967",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1865986": [
        {
            "ioc_value": "92.38.167.76:34245",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-31 08:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc524db8d2727d261725930fcf991850d45b927ae16688a6057cdb7cf2cb4f9d/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865987": [
        {
            "ioc_value": "185.237.205.252:4837",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-31 08:22:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc524db8d2727d261725930fcf991850d45b927ae16688a6057cdb7cf2cb4f9d/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865979": [
        {
            "ioc_value": "mrdughl.cannesresidencia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 07:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865978": [
        {
            "ioc_value": "cannesresidencia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 07:46:59",
            "last_seen_utc": "2026-08-07 00:29:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865977": [
        {
            "ioc_value": "kvetkoms.smallshopsandwhatknot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 07:46:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865976": [
        {
            "ioc_value": "dfojjm.angebagnia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 07:42:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865975": [
        {
            "ioc_value": "angebagnia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 07:42:09",
            "last_seen_utc": "2026-07-31 07:42:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865974": [
        {
            "ioc_value": "103.41.19.111:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 07:32:12",
            "last_seen_utc": "2026-08-07 07:15:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-426352781",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865973": [
        {
            "ioc_value": "setup.waveboard.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-31 07:22:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1865957": [
        {
            "ioc_value": "luciebalit.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-31 07:17:55",
            "last_seen_utc": "2026-08-31 18:55:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1865898": [
        {
            "ioc_value": "pivotpoint.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-31 07:16:57",
            "last_seen_utc": "2026-08-26 17:48:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1865131": [
        {
            "ioc_value": "sepolia.gateway.tenderly.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 07:13:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/browse.php?search=donovanna.com",
            "tags": "c2,clickfix,krypto-drainer,nuitka,sepolia,tenderly",
            "anonymous": 0,
            "reporter": "mantus"
        }
    ],
    "1865132": [
        {
            "ioc_value": "donovanna.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 07:13:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/browse.php?search=donovanna.com",
            "tags": "clickfix,fake-captcha,payload-delivery,stager",
            "anonymous": 0,
            "reporter": "mantus"
        }
    ],
    "1865133": [
        {
            "ioc_value": "1b3defa83a236edc7a4d1dc7547e2ae519c5d1de8c848f24da2aa903972da291",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 07:13:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/browse.php?search=donovanna.com",
            "tags": "clickfix,nuitka,pyt-exe,pythonupdate,sepolia",
            "anonymous": 0,
            "reporter": "mantus"
        }
    ],
    "1865146": [
        {
            "ioc_value": "cfqgojh.bulan77login.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 07:06:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865139": [
        {
            "ioc_value": "hdoasjxnal.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-31 07:01:15",
            "last_seen_utc": "2026-08-13 04:38:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865137": [
        {
            "ioc_value": "bmoplt.allurenailbarmonroe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865136": [
        {
            "ioc_value": "qpcytsl.browhutsalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:56:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865134": [
        {
            "ioc_value": "ovlicc.akurat78.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865130": [
        {
            "ioc_value": "upchiwx.browhutsalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:51:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865128": [
        {
            "ioc_value": "https://mectcalcutta.com/report.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 06:46:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3894463/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865127": [
        {
            "ioc_value": "https://v-k.com.ua/reportv.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 06:46:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3894463/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865126": [
        {
            "ioc_value": "https://viewphotodocument.com/api/init/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 06:44:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/373054ba03e365cac32008504a5a1cb5e3551ae585018eabbeefef0c3e8c748f/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865125": [
        {
            "ioc_value": "viewphotodocument.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 06:41:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cab7f141fd6f2c58055b3731ef6a64b8a2d4d88a974770b047da19c0904322f0/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865124": [
        {
            "ioc_value": "deviceauth-code.us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 06:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865123": [
        {
            "ioc_value": "cdphig.akurat78.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:20:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865122": [
        {
            "ioc_value": "akurat78.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:20:30",
            "last_seen_utc": "2026-07-31 19:00:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865121": [
        {
            "ioc_value": "xmtpodd.brexcavatingllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:05:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865116": [
        {
            "ioc_value": "brexcavatingllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 06:04:06",
            "last_seen_utc": "2026-08-07 00:29:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865061": [
        {
            "ioc_value": "http://117.217.230.14:43596/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-31 05:45:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/117.217.230.14",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1865062": [
        {
            "ioc_value": "178.128.22.21:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-31 05:45:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1865065": [
        {
            "ioc_value": "65.49.237.140:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "25820,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865066": [
        {
            "ioc_value": "35.90.23.90:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "16509,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865067": [
        {
            "ioc_value": "27.71.16.98:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:43",
            "last_seen_utc": "2026-09-01 02:47:01",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "7552,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865071": [
        {
            "ioc_value": "162.252.198.93:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "54455,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865073": [
        {
            "ioc_value": "158.94.208.177:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865072": [
        {
            "ioc_value": "124.220.34.180:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:41",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45090,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865074": [
        {
            "ioc_value": "111.170.148.141:113",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-31 05:45:40",
            "last_seen_utc": "2026-09-01 02:46:46",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "151185,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865075": [
        {
            "ioc_value": "103.177.46.49:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-31 05:45:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1865078": [
        {
            "ioc_value": "plasticsurgeryprofessionals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 05:45:38",
            "last_seen_utc": "2026-08-18 23:57:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/4885",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1865115": [
        {
            "ioc_value": "a7vu3k7t.skillitacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 05:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865114": [
        {
            "ioc_value": "erhuda.advanceddrivelines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 05:35:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865113": [
        {
            "ioc_value": "advanceddrivelines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 05:34:58",
            "last_seen_utc": "2026-08-07 00:29:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865112": [
        {
            "ioc_value": "yjdyqbk.bearriverchiropractic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 05:23:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865105": [
        {
            "ioc_value": "mrei4ss6.roundtablepizzadalycity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 05:04:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865104": [
        {
            "ioc_value": "nhoror.valleychimneyrepair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 04:52:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865103": [
        {
            "ioc_value": "valleychimneyrepair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 04:49:26",
            "last_seen_utc": "2026-08-07 00:29:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865102": [
        {
            "ioc_value": "eodhxgv.twinglassca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 04:35:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865097": [
        {
            "ioc_value": "kvmvni.upec2019.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 04:04:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865095": [
        {
            "ioc_value": "g1tmfx1d.vaperfumeuae.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:59:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865093": [
        {
            "ioc_value": "qcefzlf.turkeycovebc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:49:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865092": [
        {
            "ioc_value": "turkeycovebc.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:47:18",
            "last_seen_utc": "2026-08-07 00:29:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865091": [
        {
            "ioc_value": "84mucdco.sketchetch.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:42:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865090": [
        {
            "ioc_value": "ctxlnc.twomamasgourmetpizzeria.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865089": [
        {
            "ioc_value": "twomamasgourmetpizzeria.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:18:29",
            "last_seen_utc": "2026-07-31 03:18:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865088": [
        {
            "ioc_value": "asfvvhh.tumarketexpress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 03:07:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865084": [
        {
            "ioc_value": "pbvqlk.trypaidup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 02:34:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865083": [
        {
            "ioc_value": "vlbtbcv.lebertytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 02:15:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865079": [
        {
            "ioc_value": "qdxwvp.tashabeautystore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 01:49:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865077": [
        {
            "ioc_value": "2fcm3z03.simplyturfandgreenwall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 01:42:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865076": [
        {
            "ioc_value": "ycutbmi.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 01:31:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865068": [
        {
            "ioc_value": "114.132.155.197:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-31 01:05:06",
            "last_seen_utc": "2026-09-01 02:43:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865064": [
        {
            "ioc_value": "prpzlb.shedsofmarion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 01:04:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865063": [
        {
            "ioc_value": "qsbkuna.ecryptobits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 00:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865056": [
        {
            "ioc_value": "acbt8fx6.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 00:04:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865055": [
        {
            "ioc_value": "rbrkej.liberty--token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-31 00:03:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865054": [
        {
            "ioc_value": "ehqdpma.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 23:59:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865053": [
        {
            "ioc_value": "libertytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 23:58:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865052": [
        {
            "ioc_value": "151.244.243.42:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-30 23:46:22",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865051": [
        {
            "ioc_value": "osl2rfoi.shopprincesshair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 23:41:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865047": [
        {
            "ioc_value": "qfksmh.trapdoortattoos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 23:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865046": [
        {
            "ioc_value": "cu3lrjg7.rossbridgemedicalcenterlp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 22:59:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865045": [
        {
            "ioc_value": "156.247.40.131:4453",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-30 22:50:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/58b16700b8a3b8f0db2fb2e14b8c3e835270111518e67239b373a81ffd265b9a/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865044": [
        {
            "ioc_value": "156.247.40.131:4452",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-30 22:40:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865043": [
        {
            "ioc_value": "dvmgsg.theothersidepb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 22:17:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865042": [
        {
            "ioc_value": "cdttzmj.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 22:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865035": [
        {
            "ioc_value": "qxpxhqde.shedsofmarion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 21:40:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865034": [
        {
            "ioc_value": "ajabhm.tashabeautystore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 21:34:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865033": [
        {
            "ioc_value": "qvfdqtv.tshirtquiltcomp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 21:27:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865026": [
        {
            "ioc_value": "bdqdigh.trypaidup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 20:40:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865025": [
        {
            "ioc_value": "trypaidup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 20:39:26",
            "last_seen_utc": "2026-08-07 00:29:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865024": [
        {
            "ioc_value": "http://wagosinga.ydns.eu:7076/is-ready",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.houdini",
            "malware_alias": "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi",
            "malware_printable": "Houdini",
            "first_seen_utc": "2026-07-30 20:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865023": [
        {
            "ioc_value": "cozffr.plumberservices.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 20:34:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865021": [
        {
            "ioc_value": "pradeepprabhu7055.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 20:25:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c65f05b9f92b5d1cc2d19cf9f8d12fad263403d54952be88f93cd65a54239a5b/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865022": [
        {
            "ioc_value": "prakashjadhav7473.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 20:25:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b7330cf42457ba3a1cb515d260f2fb3f4dd90e4de9cf26fd6b070cf53109df6d/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865019": [
        {
            "ioc_value": "https://m36.akasia988.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 20:25:34",
            "last_seen_utc": "2026-08-03 08:50:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865020": [
        {
            "ioc_value": "m36.akasia988.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 20:25:34",
            "last_seen_utc": "2026-08-03 09:04:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865018": [
        {
            "ioc_value": "sacumpeba.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-30 20:20:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a477f89d63408f5ada9698388e4348c65611c81efe19681772e7354d64c2d3ed/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865017": [
        {
            "ioc_value": "62.60.226.68:24046",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-30 20:15:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865016": [
        {
            "ioc_value": "77.110.115.101:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-30 20:15:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865015": [
        {
            "ioc_value": "46.246.14.4:49703",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-07-30 20:15:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865008": [
        {
            "ioc_value": "2.26.252.48:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 19:54:52",
            "last_seen_utc": "2026-08-04 06:04:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64d7a96e4307457cf9c2efdd4990bcf4b5a215cb60fb8c36ebb46d1ac01f12d6/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865007": [
        {
            "ioc_value": "pcwiygd.trueessencehairextensions.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:54:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865006": [
        {
            "ioc_value": "trueessencehairextensions.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:54:02",
            "last_seen_utc": "2026-08-07 00:29:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1865004": [
        {
            "ioc_value": "secupd.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 19:53:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d4954ecd1d3ae26f5ebf9d373c798efcd94584aaf7644f88eea004af0d097b4c/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865005": [
        {
            "ioc_value": "inuvrupi.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 19:53:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d4954ecd1d3ae26f5ebf9d373c798efcd94584aaf7644f88eea004af0d097b4c/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865002": [
        {
            "ioc_value": "https://out.akasia988.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 19:53:05",
            "last_seen_utc": "2026-08-03 08:50:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865003": [
        {
            "ioc_value": "out.akasia988.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 19:53:05",
            "last_seen_utc": "2026-08-03 09:04:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1865001": [
        {
            "ioc_value": "zvrezs.thesleepingontour.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1865000": [
        {
            "ioc_value": "thesleepingontour.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:47:52",
            "last_seen_utc": "2026-08-07 00:29:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864997": [
        {
            "ioc_value": "51.79.209.228:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:46:08",
            "last_seen_utc": "2026-08-30 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864998": [
        {
            "ioc_value": "51.79.209.228:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:46:08",
            "last_seen_utc": "2026-08-30 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864999": [
        {
            "ioc_value": "51.79.209.228:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:46:08",
            "last_seen_utc": "2026-08-30 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864996": [
        {
            "ioc_value": "46.246.14.5:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-30 19:46:00",
            "last_seen_utc": "2026-08-30 08:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864995": [
        {
            "ioc_value": "46.149.71.165:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:45:58",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864994": [
        {
            "ioc_value": "35.72.170.195:21672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:45:39",
            "last_seen_utc": "2026-09-01 02:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864993": [
        {
            "ioc_value": "27.124.36.136:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:45:33",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864992": [
        {
            "ioc_value": "20.236.181.110:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:44:37",
            "last_seen_utc": "2026-09-01 02:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864988": [
        {
            "ioc_value": "195.177.94.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:44:30",
            "last_seen_utc": "2026-08-30 08:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864989": [
        {
            "ioc_value": "195.177.94.69:27220",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:30",
            "last_seen_utc": "2026-08-30 08:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864990": [
        {
            "ioc_value": "195.177.94.69:27221",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:30",
            "last_seen_utc": "2026-08-30 08:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864991": [
        {
            "ioc_value": "195.242.118.106:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864986": [
        {
            "ioc_value": "194.59.31.142:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:29",
            "last_seen_utc": "2026-08-30 08:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864987": [
        {
            "ioc_value": "194.59.31.142:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:29",
            "last_seen_utc": "2026-08-30 08:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864985": [
        {
            "ioc_value": "185.139.228.93:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:44:15",
            "last_seen_utc": "2026-09-01 02:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864984": [
        {
            "ioc_value": "185.103.167.150:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:12",
            "last_seen_utc": "2026-08-30 08:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864983": [
        {
            "ioc_value": "18.178.127.205:21672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:11",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864982": [
        {
            "ioc_value": "18.139.36.190:24610",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:44:10",
            "last_seen_utc": "2026-08-30 08:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864981": [
        {
            "ioc_value": "172.96.137.123:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:44:04",
            "last_seen_utc": "2026-08-30 08:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864980": [
        {
            "ioc_value": "154.215.14.139:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 19:43:41",
            "last_seen_utc": "2026-08-30 08:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864979": [
        {
            "ioc_value": "132.226.72.148:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864976": [
        {
            "ioc_value": "118.107.46.177:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-30 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864977": [
        {
            "ioc_value": "118.107.46.177:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-30 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864978": [
        {
            "ioc_value": "118.107.46.204:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-30 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864975": [
        {
            "ioc_value": "107.175.32.45:8761",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:43:16",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864974": [
        {
            "ioc_value": "104.207.90.244:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-30 19:43:12",
            "last_seen_utc": "2026-08-30 08:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864973": [
        {
            "ioc_value": "103.53.80.201:3312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 19:43:09",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864972": [
        {
            "ioc_value": "byjm6x7s.liberty--token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:41:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864971": [
        {
            "ioc_value": "http://160.119.69.4/hima_data/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 19:41:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5dcf2e377ceb21ebd8abc1597f9ba926ab9428ef77db7dd6c9dc5382d685e1ec/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864969": [
        {
            "ioc_value": "https://aware-cr1.com/api/gate",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 19:38:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ec0078d806fcb7b0ef538a51ae03217888ce1bd3e96a73beceecc2c12675d77d/",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864970": [
        {
            "ioc_value": "https://bpo.akasia988.net",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 19:38:30",
            "last_seen_utc": "2026-08-03 08:50:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ec0078d806fcb7b0ef538a51ae03217888ce1bd3e96a73beceecc2c12675d77d/",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864968": [
        {
            "ioc_value": "https://t.me/gk6p2s",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 19:37:16",
            "last_seen_utc": "2026-08-24 12:21:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ec0078d806fcb7b0ef538a51ae03217888ce1bd3e96a73beceecc2c12675d77d/",
            "tags": "e99set,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864967": [
        {
            "ioc_value": "http://45.95.147.178/hima_data/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 19:33:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ec961162dd43e87b68abf63977c983d5c4a8dcd77caa399faa72914734d022b/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864966": [
        {
            "ioc_value": "193.221.200.216:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:32:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/728a2f85c9ff8bbb463e93253ec05e8f3933271887457c5a0f5d4933ec8712c7/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864965": [
        {
            "ioc_value": "zope.putinduehost399.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 19:30:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/728a2f85c9ff8bbb463e93253ec05e8f3933271887457c5a0f5d4933ec8712c7/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864964": [
        {
            "ioc_value": "83.168.69.141:9481",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-30 19:23:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/033d230ab2196494a387319c7ca69943b7df39b83b552ee9328d0cff3c9eec3f/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864925": [
        {
            "ioc_value": "voucher-01-static.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-30 19:16:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/relay-01-static.com",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864926": [
        {
            "ioc_value": "relay-01-static.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-30 19:16:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/relay-01-static.com",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864927": [
        {
            "ioc_value": "relay-02-static.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-30 19:16:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/relay-01-static.com",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864928": [
        {
            "ioc_value": "strang-02-static.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-30 19:16:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/relay-01-static.com",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864929": [
        {
            "ioc_value": "adobeartsia.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-30 19:16:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/relay-01-static.com",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864930": [
        {
            "ioc_value": "boltiviersoul.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-30 19:16:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/relay-01-static.com",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864936": [
        {
            "ioc_value": "84.32.102.230:7744",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 19:16:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://doublepulsar.com/adform-compromised-to-serve-crypto-stealer-via-supply-chain-attack-2f1ec024f33e",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864949": [
        {
            "ioc_value": "relaxation-seed.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-30 19:16:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate,la02-loader",
            "anonymous": 0,
            "reporter": "darses"
        }
    ],
    "1864962": [
        {
            "ioc_value": "culifrk.trucktrailersparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:10:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864961": [
        {
            "ioc_value": "trucktrailersparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:08:23",
            "last_seen_utc": "2026-08-07 00:29:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864960": [
        {
            "ioc_value": "ty53sr9w.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:06:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864959": [
        {
            "ioc_value": "joodwh.theroyalpizza.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:02:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864958": [
        {
            "ioc_value": "theroyalpizza.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 19:01:55",
            "last_seen_utc": "2026-08-07 00:29:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864957": [
        {
            "ioc_value": "vmidxev.troythebrickmason.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 18:28:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864955": [
        {
            "ioc_value": "troythebrickmason.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 18:23:13",
            "last_seen_utc": "2026-07-30 18:23:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864954": [
        {
            "ioc_value": "llufxf.thepunsify.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 18:16:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864950": [
        {
            "ioc_value": "xkq88jyy.rochandmadeholiday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 17:58:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864948": [
        {
            "ioc_value": "mfjxrzj.trapdoortattoos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 17:39:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864947": [
        {
            "ioc_value": "xk0ffmw0.ecryptobits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 17:39:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864945": [
        {
            "ioc_value": "iuibcp.theothersidepb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 17:33:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864944": [
        {
            "ioc_value": "theothersidepb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 17:31:18",
            "last_seen_utc": "2026-08-07 00:29:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864943": [
        {
            "ioc_value": "upload.frame-quest.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-30 17:23:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1864941": [
        {
            "ioc_value": "156.229.165.166:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-30 17:20:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "coinminer,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864942": [
        {
            "ioc_value": "107.175.114.96:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-30 17:20:40",
            "last_seen_utc": "2026-08-11 15:08:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "coinminer,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864940": [
        {
            "ioc_value": "download.stopbanningmydomains.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-30 17:13:39",
            "last_seen_utc": "2026-07-30 17:13:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260307-r19w9scz3k/behavioral1",
            "tags": "coinminer,xmrig",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864935": [
        {
            "ioc_value": "plbajth.tracytowingcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 16:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864933": [
        {
            "ioc_value": "nlahtc.theluxehomeoffice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 16:46:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864924": [
        {
            "ioc_value": "172.245.12.92:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-30 16:31:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/91dd7cec4367461b5c459d4c6823836ff65772051f4c5e14e6761b60a53efd8f/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864923": [
        {
            "ioc_value": "198.37.105.19:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-30 16:29:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65f22339ca6da33a0c38475b1aaeb4b59140aebe7e30d84d05fe95ebcfb55cd8/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864920": [
        {
            "ioc_value": "zbhlswy.totalgreenenergysolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 16:06:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864915": [
        {
            "ioc_value": "aqhvzk.thehqtraining.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 16:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864914": [
        {
            "ioc_value": "thehqtraining.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:59:55",
            "last_seen_utc": "2026-07-30 16:00:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864901": [
        {
            "ioc_value": "amberalcove.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-30 15:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1864902": [
        {
            "ioc_value": "https://amberalcove.top/realm/oauth-pipeline.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-30 15:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1864903": [
        {
            "ioc_value": "https://amberalcove.top/realm/health-service",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-30 15:43:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1864913": [
        {
            "ioc_value": "jckvqvusyjbdusmitj.zcode-system.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:42:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864912": [
        {
            "ioc_value": "pquhw0ft.raajanarts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:41:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864910": [
        {
            "ioc_value": "dchqcqs.topwateradventure.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:23:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864909": [
        {
            "ioc_value": "topwateradventure.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:20:50",
            "last_seen_utc": "2026-08-07 00:24:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864908": [
        {
            "ioc_value": "xddkci.thedailycreative.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:14:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864907": [
        {
            "ioc_value": "thedailycreative.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 15:14:23",
            "last_seen_utc": "2026-08-07 00:24:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864896": [
        {
            "ioc_value": "192.236.223.240:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-30 15:05:05",
            "last_seen_utc": "2026-08-22 00:03:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864895": [
        {
            "ioc_value": "ylujyst.thunderbirda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:35:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864894": [
        {
            "ioc_value": "thunderbirda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:35:22",
            "last_seen_utc": "2026-08-07 00:24:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864893": [
        {
            "ioc_value": "pdjhra.thechocobite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:30:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864892": [
        {
            "ioc_value": "thechocobite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:28:49",
            "last_seen_utc": "2026-08-07 00:24:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864891": [
        {
            "ioc_value": "nyitbg.thebutlerspantrykitchenandhome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:13:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864884": [
        {
            "ioc_value": "qypefu.thebutlerspantrykitchenandhome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:03:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864883": [
        {
            "ioc_value": "5aovmzuq.phomaivietnameserestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 14:02:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864882": [
        {
            "ioc_value": "thebutlerspantrykitchenandhome.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:58:28",
            "last_seen_utc": "2026-08-07 00:24:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864881": [
        {
            "ioc_value": "pkdehbp.the-xbitcoinclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:52:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864880": [
        {
            "ioc_value": "the-xbitcoinclub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:49:49",
            "last_seen_utc": "2026-08-07 00:24:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864879": [
        {
            "ioc_value": "cmqpt5wv.ptologisticsandfreight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:38:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864878": [
        {
            "ioc_value": "bjxpwh.texasseafoodrestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864877": [
        {
            "ioc_value": "texasseafoodrestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:13:12",
            "last_seen_utc": "2026-08-07 00:24:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864876": [
        {
            "ioc_value": "uvzfxyz.thewildbrow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:07:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864873": [
        {
            "ioc_value": "thewildbrow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 13:04:19",
            "last_seen_utc": "2026-07-30 13:04:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864872": [
        {
            "ioc_value": "ug0o21g1.phoenixfactory.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 12:58:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864871": [
        {
            "ioc_value": "nkejzz.sultan88.link",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 12:28:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864745": [
        {
            "ioc_value": "laurelcloister.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-30 12:28:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1864866": [
        {
            "ioc_value": "http://125.45.57.193:59157/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 12:28:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.45.57.193",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1864867": [
        {
            "ioc_value": "http://72.255.33.15:59765/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 12:28:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.33.15",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1864855": [
        {
            "ioc_value": "https://laurelcloister.top/role/logout-header.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-30 12:28:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1864870": [
        {
            "ioc_value": "sultan88.link",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 12:27:27",
            "last_seen_utc": "2026-08-07 00:24:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864869": [
        {
            "ioc_value": "wczgexs.termeroseo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 12:23:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864868": [
        {
            "ioc_value": "termeroseo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 12:18:49",
            "last_seen_utc": "2026-08-06 05:11:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864865": [
        {
            "ioc_value": "resolve.mint-screen.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-30 12:17:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1864860": [
        {
            "ioc_value": "eueypy.sueltalapicotero.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 11:43:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864858": [
        {
            "ioc_value": "bmy7ns1j.premiumrent-car.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 11:38:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864857": [
        {
            "ioc_value": "rtotqmw.teamchaosky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 11:36:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864856": [
        {
            "ioc_value": "teamchaosky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 11:33:15",
            "last_seen_utc": "2026-08-07 00:24:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864853": [
        {
            "ioc_value": "0664d2922ea22920f609f17e3f5b512623d940b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864854": [
        {
            "ioc_value": "af38775c7c7dc7046f77a7748b89933d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864849": [
        {
            "ioc_value": "27550b8c15c5a7cf5568dd1d2e1243b510eb983a7eb8ff5ddc9974415e5a0093",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864850": [
        {
            "ioc_value": "58ab34482258c4b7f1c8e1f7e5b71d93060117a0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864851": [
        {
            "ioc_value": "63951c4114bb7b172c40a8d72f1571eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864852": [
        {
            "ioc_value": "e0968fdd46a966fd96963e0c082c826f0f4f68c6ae7c47db740e375b838a5166",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864848": [
        {
            "ioc_value": "fb52e944c7d2c7ef88c1fa2bc49bca8d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864846": [
        {
            "ioc_value": "a698fd443f31acb8747f8f8a33460eb04952bf3437ff0e07236207acace850e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864847": [
        {
            "ioc_value": "2cbd1b25814007055d72bb2373ae5d3a15f6f891",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864844": [
        {
            "ioc_value": "69959abe409438a3f0a7b5a48c6ee0eba89e52f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864845": [
        {
            "ioc_value": "7e156047d9217122c15da13f2c8765a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864843": [
        {
            "ioc_value": "d0c0dc10447e81afa7b17ececeb7ad616a8a7b58fa9dbe70f03165fcea0a9f71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:25:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864840": [
        {
            "ioc_value": "d7676d0f24364b278a6dd2b1c5fd34f688881cf3ff9e53e1e40f1b4048b7ce28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864841": [
        {
            "ioc_value": "a70da5f794a7c7775e0ee155ad07685da8114a09",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864842": [
        {
            "ioc_value": "5b4e700f64175b020cf150e7e9586517",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864839": [
        {
            "ioc_value": "07f8e0b9aed8eb0806104303d40aaca2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864836": [
        {
            "ioc_value": "aa7a740a167d36f5ed71bb52478638d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864837": [
        {
            "ioc_value": "86dac88668ac7f20317d657ee7e95aea8a9df3530ff2713f8d62557e381bbec9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864838": [
        {
            "ioc_value": "36d174663ab2394e4533c6cea997e24380db8921",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864832": [
        {
            "ioc_value": "04225100608ee8c6edbc417ab3d5321a88f4ef9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-30 11:24:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864833": [
        {
            "ioc_value": "70167040a63143a7130cb17e6d3c50ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-30 11:24:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864834": [
        {
            "ioc_value": "4b2bfcdbd2235a917786405381129da36922bbbb3f0342fbe44eaad3760afaa5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864835": [
        {
            "ioc_value": "6b58b9c15452ffe1a3178c79d77f0a93e8d0d0ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864829": [
        {
            "ioc_value": "03000941571e8c6142feab0aa699476be4711157",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864830": [
        {
            "ioc_value": "1d9fe4ce4cbb66bba8eeec6046d1e2b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864831": [
        {
            "ioc_value": "26cba7929124eb13801a4e32c7071a2b3ab10896048bb25ca900e04edfa34795",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-30 11:24:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864826": [
        {
            "ioc_value": "170657e1767a12f53a86078b2e116cd343b5b38e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864827": [
        {
            "ioc_value": "6eeea1e0686edd419ffacf2097ee1cf5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864828": [
        {
            "ioc_value": "bcf7bd7b46d57c055e8cde4588dae1aee094cc225074e0b5430640e90a8468ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864822": [
        {
            "ioc_value": "4bc1bc072949437c41adf9203ba98595ebaeb1ee47d231fc9e59a16e697e336c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864823": [
        {
            "ioc_value": "cc455511e8fc282f3bf819d0f87616c77f99164a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864824": [
        {
            "ioc_value": "03009c13a8a4188a14bc879b6ba40416",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864825": [
        {
            "ioc_value": "6d67be88230d11f5751ab86094ccf4f704013e40c3172efee3bd08e772258f83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864821": [
        {
            "ioc_value": "c88e46c406f6e91ac0175fc9f8efd240",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864818": [
        {
            "ioc_value": "9eab119e1a445bdb9276dc76d572e20b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-30 11:24:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864819": [
        {
            "ioc_value": "31e86a063a1bdb8f77d70a05c0b67ea7f962ccdd527a40311fe0debefb724375",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864820": [
        {
            "ioc_value": "09b17c8374bfca50b7a634355a636f79af19e6a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864815": [
        {
            "ioc_value": "b9681310afb36678644198d7e5b41623",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864816": [
        {
            "ioc_value": "a6eb7f69df025bf0229d9d3a9754cf687e8165978fd2fcf3accd30c6afa67562",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-30 11:24:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864817": [
        {
            "ioc_value": "74ee9a25dc26ec7d1d14cc5d6e10f15800b6c60e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-30 11:24:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864812": [
        {
            "ioc_value": "84300c61f1d9ce436101208f7cfa814b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864813": [
        {
            "ioc_value": "d688bd08f76ebea82a1944ccd0213a8cacfc91377fcde9dcf17df8b9b6311129",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864814": [
        {
            "ioc_value": "e11edcba1b9367e3c73d4273c3e0267abcdddb5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864811": [
        {
            "ioc_value": "c0beb77e08965c8a41f4595d56b93be0b050dffb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864807": [
        {
            "ioc_value": "d6a11018040b6242e82c4fe326f3deb2ece71c0e105bee57b53471677799dd42",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-30 11:24:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864808": [
        {
            "ioc_value": "2519449a9846f0aca8aace917553f17eeca760f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-30 11:24:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864809": [
        {
            "ioc_value": "ea6aea5d93917f80d803728b0030ac90",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-30 11:24:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864810": [
        {
            "ioc_value": "45d47c8069f6a26f25ff02c972117d0abf6edd8ebe38a34514e388d0bbc44bba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864805": [
        {
            "ioc_value": "d6e8f325c740e78313fc6233418c976997176c0c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864806": [
        {
            "ioc_value": "04c365b6c2c1e4231b820b155c37f1f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864802": [
        {
            "ioc_value": "cf710384b4a2f830b863c54a9dcc4978317e4c83",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.zuo_rat",
            "malware_alias": null,
            "malware_printable": "ZuoRAT",
            "first_seen_utc": "2026-07-30 11:24:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864803": [
        {
            "ioc_value": "e091b9971da3995607e3dd2307d37985",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.zuo_rat",
            "malware_alias": null,
            "malware_printable": "ZuoRAT",
            "first_seen_utc": "2026-07-30 11:24:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864804": [
        {
            "ioc_value": "5eb83ec1cb48a810bd667ea8fb51f878122b62698d10a5ba506675608b691646",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864799": [
        {
            "ioc_value": "9752755518c4f303c2d419563be71b5d9b7a3552",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.pitfuel",
            "malware_alias": null,
            "malware_printable": "PITFUEL",
            "first_seen_utc": "2026-07-30 11:24:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864800": [
        {
            "ioc_value": "d5d17b986fb728e4340968e603256974",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.pitfuel",
            "malware_alias": null,
            "malware_printable": "PITFUEL",
            "first_seen_utc": "2026-07-30 11:24:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864801": [
        {
            "ioc_value": "9aa17be0bbb8cd4d7c7bb945b01a83d3d12e4b0007fc33383b595abef7adf582",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.zuo_rat",
            "malware_alias": null,
            "malware_printable": "ZuoRAT",
            "first_seen_utc": "2026-07-30 11:24:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864796": [
        {
            "ioc_value": "f80959ced15f4d32863044b9adfcec162ba20a21",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.voltstealer",
            "malware_alias": null,
            "malware_printable": "VoltStealer",
            "first_seen_utc": "2026-07-30 11:24:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864797": [
        {
            "ioc_value": "a28a36d807a8f3c888d8ca0f07f66875",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.voltstealer",
            "malware_alias": null,
            "malware_printable": "VoltStealer",
            "first_seen_utc": "2026-07-30 11:24:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864798": [
        {
            "ioc_value": "62ba9639ef75606548755a259103e83f0ec1464b0f05c6f02fe5e35990de02c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.pitfuel",
            "malware_alias": null,
            "malware_printable": "PITFUEL",
            "first_seen_utc": "2026-07-30 11:24:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864792": [
        {
            "ioc_value": "61858e50c96a6f37957e1d6e3249ddb49ebd5c592ddce8dacf039404897afe45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prb_backdoor",
            "malware_alias": null,
            "malware_printable": "prb_backdoor",
            "first_seen_utc": "2026-07-30 11:24:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864793": [
        {
            "ioc_value": "995793cde6debc9daad92f2ba42bd255a39a2870",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prb_backdoor",
            "malware_alias": null,
            "malware_printable": "prb_backdoor",
            "first_seen_utc": "2026-07-30 11:24:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864794": [
        {
            "ioc_value": "2980c33b9f0de038fc408602fbf34187",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prb_backdoor",
            "malware_alias": null,
            "malware_printable": "prb_backdoor",
            "first_seen_utc": "2026-07-30 11:24:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864795": [
        {
            "ioc_value": "ed14cfe70eedac6e7a3097baa94b84f21e358bdb2361f7da5b5e8a42cdb8ba7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.voltstealer",
            "malware_alias": null,
            "malware_printable": "VoltStealer",
            "first_seen_utc": "2026-07-30 11:24:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864789": [
        {
            "ioc_value": "7be016472fd1c64cd6d6ec831f3fb0452afb38d45f4d3f1b9925963f6e4d38ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-07-30 11:24:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864790": [
        {
            "ioc_value": "4e5a156a643c6770d113297b42dc9f983f923a6d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-07-30 11:24:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864791": [
        {
            "ioc_value": "b13c5a28695f4997c780c43357638f54",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-07-30 11:24:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864786": [
        {
            "ioc_value": "b3b1b40a09c8b7f32ce5e43675500091e300962130d0a881dca34273ce7ac281",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-07-30 11:24:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864787": [
        {
            "ioc_value": "fb7c537686c19c0fa80ae7e390469afdd46c1b26",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-07-30 11:24:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864788": [
        {
            "ioc_value": "3eac0ca11847844f7b223a1892bc62b6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.eddiestealer",
            "malware_alias": null,
            "malware_printable": "EDDIESTEALER",
            "first_seen_utc": "2026-07-30 11:24:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864783": [
        {
            "ioc_value": "62c0947a8d1b8559d980307a432b26d713f221aed3eb3688c61128f98f1c5e4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864784": [
        {
            "ioc_value": "3cb36a39c71e55ab0bbe815009fa6e25e501be46",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864785": [
        {
            "ioc_value": "74121997a9fb051d9de20c3b938504aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-30 11:24:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864779": [
        {
            "ioc_value": "55d059ddee230743be718bd56698228e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 11:24:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864780": [
        {
            "ioc_value": "9f819e6c0d0e0944be5cd0e9a4138106c53f92ff0c01e74c4607552783933120",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-30 11:24:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864781": [
        {
            "ioc_value": "4e5a0bb0b470d9d7cff1acabe0f100e4f2e0c827",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-30 11:24:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864782": [
        {
            "ioc_value": "1e2898fd934fc2bbdda4033218ca71f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-30 11:24:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864776": [
        {
            "ioc_value": "55086caf39129a111ae656fed7976469",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-30 11:24:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864777": [
        {
            "ioc_value": "97d632037760b0b33cf3342ed948d24ea6ae4461214bd3b7c9c385885588b399",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 11:24:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864778": [
        {
            "ioc_value": "0853cb76e5cea4b7ed9ddc5ea2a3ec18356466b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 11:24:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864774": [
        {
            "ioc_value": "9b4fc704f7a53929ab614c2fc68bb63b85f901043375914a4e92cd0a8d32d643",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-30 11:24:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864775": [
        {
            "ioc_value": "b88ab0fbf814ed90523ae152caff3046f5863e66",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-30 11:24:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864770": [
        {
            "ioc_value": "42a98acfbdb7b5ee641c1e16b4d619ca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-30 11:24:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864771": [
        {
            "ioc_value": "a6b08f633ad63cbe5f98abb2269cdecdd85c7c93255ee784f14e871af33d7d35",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-30 11:24:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864772": [
        {
            "ioc_value": "7885b0bfff6a373b82c229a5e8d9e2b20ae44e7f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-30 11:24:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864773": [
        {
            "ioc_value": "7f4ce93930e8a11edbc5f4c541bacd1a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-30 11:24:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864767": [
        {
            "ioc_value": "d2a6531b53d38fa469a87bc5957963f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864768": [
        {
            "ioc_value": "818611f2320836348f3131b2cd32c89e57dab006be54b0d29b90d58a0f3b693d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-30 11:24:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864769": [
        {
            "ioc_value": "b293e902beaad59b3b522031215fd49a2fcc6a92",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-30 11:24:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864764": [
        {
            "ioc_value": "5c60fe4c8d118fc648c45fc26c59f09b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864765": [
        {
            "ioc_value": "404ea0022b777c6f39863df08b3de450efabf36abd9cc92c5bf300e72651861a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864766": [
        {
            "ioc_value": "abb3aed5f8a1f565f91f00d08f9f7319f41f2306",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864762": [
        {
            "ioc_value": "9916a3a0da9b0953b1ba80a1f094ed4aa9e177804566fd3b4fd59b6166684c80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864763": [
        {
            "ioc_value": "2b4a742aad8be293b9deba548b91bc4ee404594d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864759": [
        {
            "ioc_value": "18545d002ca40ad6dfb7982a390035cf291a047a09dda45744f35887d66a2a4d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864760": [
        {
            "ioc_value": "4b67790ffe936572ec2ffb40b94717986672f17c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864761": [
        {
            "ioc_value": "b9dab429bacd0737e206af07f486f9df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864755": [
        {
            "ioc_value": "248945bc1d3020eb64a34a9264c3a16d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:28",
            "last_seen_utc": "2026-07-31 12:12:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864756": [
        {
            "ioc_value": "d43e16731b6390dd5a246f16961942a347c4234596a66716aa1f343df9209687",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:28",
            "last_seen_utc": "2026-07-31 12:12:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864757": [
        {
            "ioc_value": "f8dc48c66da1117fee9b3ad8a0d7e14885b3fc44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:28",
            "last_seen_utc": "2026-07-31 12:12:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864758": [
        {
            "ioc_value": "0d681c6898e330e8d1153cda1e2be789",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:28",
            "last_seen_utc": "2026-07-31 12:12:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864752": [
        {
            "ioc_value": "4078152ad8a3f94c06fd1d307dd04dea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-07-30 11:24:27",
            "last_seen_utc": "2026-07-31 12:12:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864753": [
        {
            "ioc_value": "5bffb0a31973b0ff6b4a86ce9f14dd4c72f180378e9750dc7419e0587502ad49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:27",
            "last_seen_utc": "2026-07-31 12:12:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864754": [
        {
            "ioc_value": "8e1babbe5d7a805acb9df328bf3e0ec5eea667b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-30 11:24:27",
            "last_seen_utc": "2026-07-31 12:12:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864750": [
        {
            "ioc_value": "be524fa4b66d65832df54df1b9bfcba535b2ec0ed8c416b30446b83cf1ffcd2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-07-30 11:24:26",
            "last_seen_utc": "2026-07-31 12:12:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864751": [
        {
            "ioc_value": "454f97473f16ecae40afbf6e122fc0e5fab2e88c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-07-30 11:24:26",
            "last_seen_utc": "2026-07-31 12:12:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864747": [
        {
            "ioc_value": "ff6cf37c6e15581194528898ba09f8e59ecaf40f8eb9ded217092961c6521d4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-30 11:24:25",
            "last_seen_utc": "2026-07-31 12:12:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864748": [
        {
            "ioc_value": "cbe50ec08109520218f2a6ef4b3f19912987ec8c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-30 11:24:25",
            "last_seen_utc": "2026-07-31 12:12:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864749": [
        {
            "ioc_value": "8ec604690d3a8417ad32918c0c8a7270",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-30 11:24:25",
            "last_seen_utc": "2026-07-31 12:12:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864744": [
        {
            "ioc_value": "df5df54aaa250168f71ffdf00c99d345b58bb581",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-30 11:24:24",
            "last_seen_utc": "2026-07-31 12:12:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864746": [
        {
            "ioc_value": "c68ce967bc43a30fd83b0a70ba36eb93",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-30 11:24:24",
            "last_seen_utc": "2026-07-31 12:12:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864741": [
        {
            "ioc_value": "e7c0c06606fd8bfb1c14f9ebd7a28349e659b418",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-30 11:24:23",
            "last_seen_utc": "2026-07-31 12:12:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864742": [
        {
            "ioc_value": "41a65a494ba9b729e6fbf744644004a6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-30 11:24:23",
            "last_seen_utc": "2026-07-31 12:12:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864743": [
        {
            "ioc_value": "0654bae7cd7c16a4ebebc4aeeef6dec0dfe5f6247416593ec33c507db14c2348",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-30 11:24:23",
            "last_seen_utc": "2026-07-31 12:12:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864740": [
        {
            "ioc_value": "273c96eb5d64f3a07e8e741ac70c64dfb375f73e478bdf751508f033a9a36f3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-30 11:24:22",
            "last_seen_utc": "2026-07-31 12:12:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1864736": [
        {
            "ioc_value": "kwjvdq.street-flex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:58:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864735": [
        {
            "ioc_value": "street-flex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:56:30",
            "last_seen_utc": "2026-07-30 10:57:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864734": [
        {
            "ioc_value": "iypuztg.tashabeautystore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:48:14",
            "last_seen_utc": "2026-08-07 00:29:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864712": [
        {
            "ioc_value": "zewaplus.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-30 10:47:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherHiding,IClickFix",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864707": [
        {
            "ioc_value": "2c36a2a36a747ee8e1393724c2558b14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 10:47:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2082765277687923010",
            "tags": "ransomware,securotrop",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1864708": [
        {
            "ioc_value": "securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 10:47:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2082765277687923010",
            "tags": "ransomware,securotrop",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1864709": [
        {
            "ioc_value": "3jpdqv73qlweoytmfinj6ce5hwfblx55poomhfjkqmybdnlktljitbad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 10:47:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2082765277687923010",
            "tags": "ransomware,securotrop",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1864710": [
        {
            "ioc_value": "telemetryworks.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-30 10:47:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherHiding,IClickFix",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864711": [
        {
            "ioc_value": "burunduktracker.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-30 10:47:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherHiding,IClickFix",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864721": [
        {
            "ioc_value": "137.184.156.157:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-30 10:47:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864724": [
        {
            "ioc_value": "188.166.8.118:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:14",
            "last_seen_utc": "2026-08-05 10:02:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864725": [
        {
            "ioc_value": "159.223.4.28:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:13",
            "last_seen_utc": "2026-08-05 10:02:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864726": [
        {
            "ioc_value": "167.99.40.241:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:13",
            "last_seen_utc": "2026-08-05 10:03:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864727": [
        {
            "ioc_value": "174.138.11.120:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:13",
            "last_seen_utc": "2026-08-05 10:02:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864728": [
        {
            "ioc_value": "167.71.10.167:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:12",
            "last_seen_utc": "2026-08-05 10:02:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864729": [
        {
            "ioc_value": "134.122.48.153:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:12",
            "last_seen_utc": "2026-08-05 10:01:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864730": [
        {
            "ioc_value": "167.99.42.71:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:12",
            "last_seen_utc": "2026-08-05 10:02:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864731": [
        {
            "ioc_value": "188.166.64.30:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:11",
            "last_seen_utc": "2026-08-05 10:03:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864732": [
        {
            "ioc_value": "188.166.55.237:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:11",
            "last_seen_utc": "2026-08-05 10:02:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864733": [
        {
            "ioc_value": "146.190.17.104:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-30 10:47:10",
            "last_seen_utc": "2026-08-05 10:03:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864723": [
        {
            "ioc_value": "shlwsw.stmariapharmacy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:11:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864722": [
        {
            "ioc_value": "stmariapharmacy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:11:10",
            "last_seen_utc": "2026-08-07 00:24:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864715": [
        {
            "ioc_value": "nbcfchw.tamajailroster.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:02:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864714": [
        {
            "ioc_value": "tamajailroster.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 10:02:15",
            "last_seen_utc": "2026-08-07 00:24:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864713": [
        {
            "ioc_value": "switchspineprint.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 09:54:56",
            "last_seen_utc": "2026-08-07 00:24:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864706": [
        {
            "ioc_value": "93.152.223.221:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-30 09:46:46",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864705": [
        {
            "ioc_value": "51.79.185.253:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:46:19",
            "last_seen_utc": "2026-08-29 18:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864704": [
        {
            "ioc_value": "50.114.184.63:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:46:18",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864703": [
        {
            "ioc_value": "50.114.184.63:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:46:17",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864702": [
        {
            "ioc_value": "46.151.182.16:2202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 09:46:11",
            "last_seen_utc": "2026-09-01 02:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864701": [
        {
            "ioc_value": "27.124.36.151:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:45:43",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864700": [
        {
            "ioc_value": "217.60.241.73:7011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 09:45:35",
            "last_seen_utc": "2026-08-29 18:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864699": [
        {
            "ioc_value": "209.99.190.23:45001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:44:46",
            "last_seen_utc": "2026-08-29 18:45:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864698": [
        {
            "ioc_value": "2.27.248.116:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-30 09:44:36",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864697": [
        {
            "ioc_value": "176.65.148.198:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:44:08",
            "last_seen_utc": "2026-08-29 08:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864696": [
        {
            "ioc_value": "173.199.70.174:14321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 09:44:06",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864694": [
        {
            "ioc_value": "144.172.93.33:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-30 09:43:35",
            "last_seen_utc": "2026-08-29 18:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864692": [
        {
            "ioc_value": "mulberrylodestar.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-30 09:43:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1864693": [
        {
            "ioc_value": "103.148.58.8:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:43:08",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864691": [
        {
            "ioc_value": "0cppgosu.prairiefurnitureshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 09:37:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864675": [
        {
            "ioc_value": "222.167.208.153:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864676": [
        {
            "ioc_value": "209.99.184.15:55006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864677": [
        {
            "ioc_value": "31.77.57.7:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864678": [
        {
            "ioc_value": "31.77.57.7:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864679": [
        {
            "ioc_value": "31.77.57.7:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864680": [
        {
            "ioc_value": "172.81.133.197:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864681": [
        {
            "ioc_value": "172.93.212.254:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864682": [
        {
            "ioc_value": "144.172.106.142:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864683": [
        {
            "ioc_value": "157.254.194.144:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864684": [
        {
            "ioc_value": "157.254.194.144:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864685": [
        {
            "ioc_value": "217.217.97.187:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864686": [
        {
            "ioc_value": "185.100.157.93:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864687": [
        {
            "ioc_value": "185.100.157.93:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864688": [
        {
            "ioc_value": "206.245.165.24:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864689": [
        {
            "ioc_value": "206.245.165.24:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864690": [
        {
            "ioc_value": "206.245.165.24:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864661": [
        {
            "ioc_value": "138.255.160.203:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864662": [
        {
            "ioc_value": "172.93.212.218:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864663": [
        {
            "ioc_value": "108.174.56.175:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864664": [
        {
            "ioc_value": "108.174.56.175:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864665": [
        {
            "ioc_value": "195.177.94.109:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": "2026-08-29 18:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864666": [
        {
            "ioc_value": "195.177.94.109:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": "2026-08-29 18:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864667": [
        {
            "ioc_value": "172.94.9.25:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864668": [
        {
            "ioc_value": "23.111.14.80:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864669": [
        {
            "ioc_value": "23.111.14.80:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864670": [
        {
            "ioc_value": "23.111.14.80:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864671": [
        {
            "ioc_value": "198.135.55.89:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864672": [
        {
            "ioc_value": "82.38.44.188:7222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864673": [
        {
            "ioc_value": "103.148.58.10:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864674": [
        {
            "ioc_value": "222.167.208.153:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864645": [
        {
            "ioc_value": "188.209.158.220:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864646": [
        {
            "ioc_value": "151.247.22.50:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864647": [
        {
            "ioc_value": "151.247.22.50:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864648": [
        {
            "ioc_value": "151.247.22.50:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864649": [
        {
            "ioc_value": "184.174.20.138:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": "2026-09-01 02:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864650": [
        {
            "ioc_value": "147.124.203.21:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864651": [
        {
            "ioc_value": "147.124.203.21:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864652": [
        {
            "ioc_value": "85.11.167.61:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864653": [
        {
            "ioc_value": "192.3.42.138:56831",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864654": [
        {
            "ioc_value": "173.208.180.138:7222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864655": [
        {
            "ioc_value": "82.22.7.20:3607",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864656": [
        {
            "ioc_value": "82.22.7.20:3609",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864657": [
        {
            "ioc_value": "82.22.7.20:3608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864658": [
        {
            "ioc_value": "168.222.97.151:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864659": [
        {
            "ioc_value": "168.222.97.151:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864660": [
        {
            "ioc_value": "138.255.160.203:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864643": [
        {
            "ioc_value": "188.209.158.220:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:31",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864644": [
        {
            "ioc_value": "188.209.158.220:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-30 09:34:31",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864642": [
        {
            "ioc_value": "push.brewtrail.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-30 09:28:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1864641": [
        {
            "ioc_value": "ajhgra.stephanie-bates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 09:27:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864640": [
        {
            "ioc_value": "stephanie-bates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 09:25:25",
            "last_seen_utc": "2026-08-07 00:24:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864624": [
        {
            "ioc_value": "65.49.220.29:8128",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-30 09:23:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AdaptixC2",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864625": [
        {
            "ioc_value": "178.156.243.177:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 09:23:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864626": [
        {
            "ioc_value": "176.96.139.22:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 09:23:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864627": [
        {
            "ioc_value": "209.127.35.224:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-30 09:23:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Nancrat,NanoCore,Nanocore RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864628": [
        {
            "ioc_value": "45.92.1.46:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864629": [
        {
            "ioc_value": "176.96.139.116:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864630": [
        {
            "ioc_value": "194.26.192.210:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864631": [
        {
            "ioc_value": "135.181.128.187:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:12",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864632": [
        {
            "ioc_value": "64.89.163.84:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864633": [
        {
            "ioc_value": "104.249.10.76:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864634": [
        {
            "ioc_value": "85.11.167.56:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864635": [
        {
            "ioc_value": "77.110.110.117:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864636": [
        {
            "ioc_value": "193.233.126.136:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864637": [
        {
            "ioc_value": "104.249.10.18:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864638": [
        {
            "ioc_value": "89.19.223.95:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-30 09:23:08",
            "last_seen_utc": "2026-07-30 09:18:44",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Overlord RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864492": [
        {
            "ioc_value": "smarwth.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-30 09:11:09",
            "last_seen_utc": "2026-08-15 08:47:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/92f561bba06e4312bc4ab1e981bc0e63a492bc31119320a59f2e751341ee0ac2/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1864622": [
        {
            "ioc_value": "164.152.167.222:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 09:11:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864623": [
        {
            "ioc_value": "167.253.157.140:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 09:11:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864621": [
        {
            "ioc_value": "dlwkpdf.swirlscinnamonrolls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 09:10:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864620": [
        {
            "ioc_value": "swirlscinnamonrolls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 09:09:26",
            "last_seen_utc": "2026-08-07 00:24:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864614": [
        {
            "ioc_value": "176.129.203.146:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-07-30 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864615": [
        {
            "ioc_value": "86.109.75.132:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-07-30 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864616": [
        {
            "ioc_value": "86.109.75.132:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-07-30 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864617": [
        {
            "ioc_value": "189.150.133.139:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-07-30 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864618": [
        {
            "ioc_value": "151.247.193.128:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-07-30 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864619": [
        {
            "ioc_value": "105.100.163.183:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-07-30 09:09:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864603": [
        {
            "ioc_value": "87.199.194.37:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864604": [
        {
            "ioc_value": "195.63.138.10:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864605": [
        {
            "ioc_value": "89.110.68.28:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864606": [
        {
            "ioc_value": "94.26.83.204:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864607": [
        {
            "ioc_value": "193.233.126.38:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864608": [
        {
            "ioc_value": "145.63.134.238:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864609": [
        {
            "ioc_value": "212.43.156.153:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864610": [
        {
            "ioc_value": "45.227.254.42:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864611": [
        {
            "ioc_value": "77.105.136.187:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864612": [
        {
            "ioc_value": "89.124.93.136:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864613": [
        {
            "ioc_value": "151.59.106.134:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864594": [
        {
            "ioc_value": "151.59.116.121:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864595": [
        {
            "ioc_value": "89.124.88.186:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864596": [
        {
            "ioc_value": "45.158.196.127:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864597": [
        {
            "ioc_value": "212.43.159.144:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864598": [
        {
            "ioc_value": "38.83.53.106:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864599": [
        {
            "ioc_value": "145.63.128.52:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864600": [
        {
            "ioc_value": "45.227.254.32:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864601": [
        {
            "ioc_value": "38.146.25.27:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864602": [
        {
            "ioc_value": "212.43.156.21:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-30 09:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864586": [
        {
            "ioc_value": "193.111.62.133:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864587": [
        {
            "ioc_value": "150.40.117.127:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864588": [
        {
            "ioc_value": "116.198.204.146:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864589": [
        {
            "ioc_value": "5.187.6.96:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864590": [
        {
            "ioc_value": "148.113.37.70:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864591": [
        {
            "ioc_value": "45.142.142.204:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864572": [
        {
            "ioc_value": "132.243.168.75:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864573": [
        {
            "ioc_value": "178.105.206.245:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864574": [
        {
            "ioc_value": "43.160.235.200:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864575": [
        {
            "ioc_value": "13.63.50.133:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864576": [
        {
            "ioc_value": "85.122.114.42:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864577": [
        {
            "ioc_value": "85.121.176.71:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864578": [
        {
            "ioc_value": "47.80.18.76:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864579": [
        {
            "ioc_value": "15.204.173.19:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864580": [
        {
            "ioc_value": "178.105.31.148:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864581": [
        {
            "ioc_value": "162.35.160.163:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864582": [
        {
            "ioc_value": "138.226.236.13:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864583": [
        {
            "ioc_value": "195.58.137.115:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864584": [
        {
            "ioc_value": "67.217.228.212:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864585": [
        {
            "ioc_value": "185.165.171.156:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864556": [
        {
            "ioc_value": "107.175.202.19:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864557": [
        {
            "ioc_value": "159.65.113.187:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864558": [
        {
            "ioc_value": "212.2.34.64:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864559": [
        {
            "ioc_value": "211.154.20.87:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864560": [
        {
            "ioc_value": "80.97.124.202:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864561": [
        {
            "ioc_value": "85.239.245.90:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864562": [
        {
            "ioc_value": "64.23.192.235:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864563": [
        {
            "ioc_value": "144.91.76.113:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864564": [
        {
            "ioc_value": "147.182.208.147:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864565": [
        {
            "ioc_value": "66.179.31.126:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864566": [
        {
            "ioc_value": "38.54.59.178:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864567": [
        {
            "ioc_value": "91.92.40.62:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864568": [
        {
            "ioc_value": "103.97.203.21:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864569": [
        {
            "ioc_value": "5.45.185.93:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864570": [
        {
            "ioc_value": "46.225.180.111:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864571": [
        {
            "ioc_value": "45.79.219.204:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864538": [
        {
            "ioc_value": "45.39.33.166:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864539": [
        {
            "ioc_value": "57.131.129.237:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864540": [
        {
            "ioc_value": "51.222.139.22:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864541": [
        {
            "ioc_value": "207.180.234.231:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864542": [
        {
            "ioc_value": "78.17.212.59:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864543": [
        {
            "ioc_value": "153.75.81.30:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864544": [
        {
            "ioc_value": "50.6.37.154:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864545": [
        {
            "ioc_value": "38.55.232.215:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864546": [
        {
            "ioc_value": "217.182.129.250:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864547": [
        {
            "ioc_value": "8.219.149.222:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864548": [
        {
            "ioc_value": "159.203.57.140:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864549": [
        {
            "ioc_value": "109.123.239.6:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864550": [
        {
            "ioc_value": "23.94.252.94:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864551": [
        {
            "ioc_value": "146.103.96.179:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864552": [
        {
            "ioc_value": "144.172.114.134:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864553": [
        {
            "ioc_value": "107.170.13.44:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864554": [
        {
            "ioc_value": "51.158.144.212:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864555": [
        {
            "ioc_value": "213.255.246.182:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864521": [
        {
            "ioc_value": "162.243.174.112:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864522": [
        {
            "ioc_value": "172.237.155.114:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864523": [
        {
            "ioc_value": "172.86.94.189:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864524": [
        {
            "ioc_value": "134.122.123.227:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864525": [
        {
            "ioc_value": "104.207.76.244:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864526": [
        {
            "ioc_value": "62.171.141.240:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864527": [
        {
            "ioc_value": "38.95.75.2:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864528": [
        {
            "ioc_value": "202.160.76.235:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864529": [
        {
            "ioc_value": "192.241.154.36:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864530": [
        {
            "ioc_value": "103.75.183.232:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864531": [
        {
            "ioc_value": "80.96.109.197:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864532": [
        {
            "ioc_value": "159.65.209.64:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864533": [
        {
            "ioc_value": "134.209.177.130:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864534": [
        {
            "ioc_value": "185.199.196.8:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864535": [
        {
            "ioc_value": "216.146.26.48:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864536": [
        {
            "ioc_value": "45.38.20.86:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864537": [
        {
            "ioc_value": "202.155.157.107:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864512": [
        {
            "ioc_value": "51.161.83.133:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864513": [
        {
            "ioc_value": "111.90.149.28:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864514": [
        {
            "ioc_value": "159.65.18.142:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864515": [
        {
            "ioc_value": "206.189.21.72:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864516": [
        {
            "ioc_value": "45.74.36.113:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864517": [
        {
            "ioc_value": "104.239.66.155:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864518": [
        {
            "ioc_value": "162.254.35.170:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864519": [
        {
            "ioc_value": "69.30.210.156:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864520": [
        {
            "ioc_value": "116.118.95.184:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-30 09:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864508": [
        {
            "ioc_value": "185.242.246.175:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 09:00:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864509": [
        {
            "ioc_value": "46.151.182.27:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 09:00:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864510": [
        {
            "ioc_value": "92.119.165.90:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 09:00:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864511": [
        {
            "ioc_value": "46.151.182.86:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-30 09:00:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864507": [
        {
            "ioc_value": "154.220.121.61:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:59:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "supershell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864504": [
        {
            "ioc_value": "43.133.253.4:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:59:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "supershell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864505": [
        {
            "ioc_value": "206.238.68.123:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:59:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "supershell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864506": [
        {
            "ioc_value": "43.173.114.89:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:59:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "supershell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864502": [
        {
            "ioc_value": "40.80.95.17:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:58:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Unam,Web Panel",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864503": [
        {
            "ioc_value": "37.183.212.80:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:58:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Unam,Web Panel",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864497": [
        {
            "ioc_value": "155.248.161.0:10001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-07-30 08:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864498": [
        {
            "ioc_value": "94.96.192.133:8827",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-07-30 08:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864499": [
        {
            "ioc_value": "94.96.192.133:45555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-07-30 08:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864500": [
        {
            "ioc_value": "31.141.237.50:19",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-07-30 08:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864501": [
        {
            "ioc_value": "50.61.166.147:13",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-07-30 08:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864495": [
        {
            "ioc_value": "82.102.219.33:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-30 08:55:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Bladabindi,Lime-Worm,NjRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864496": [
        {
            "ioc_value": "188.212.158.102:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-30 08:55:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Bladabindi,Lime-Worm,NjRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864493": [
        {
            "ioc_value": "188.48.226.49:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-30 08:55:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Bladabindi,Lime-Worm,NjRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864494": [
        {
            "ioc_value": "103.233.194.35:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-30 08:55:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Bladabindi,Lime-Worm,NjRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1864491": [
        {
            "ioc_value": "4zmg28xb.napolipizzaweymouth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 08:54:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864479": [
        {
            "ioc_value": "147.93.62.224:7527",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-30 08:53:38",
            "last_seen_utc": "2026-08-14 03:54:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "91b8bca4002c9ac9274dd008d8155424,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1864480": [
        {
            "ioc_value": "azuremods.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:53:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1864481": [
        {
            "ioc_value": "http://185.233.164.187:1337/send",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:53:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260730-jwz79sxvf1/behavioral3",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1864482": [
        {
            "ioc_value": "http://185.233.164.187:1337/debug_send",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:53:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260730-jwz79sxvf1/behavioral3",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1864490": [
        {
            "ioc_value": "tscykg.splitpours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 08:45:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864489": [
        {
            "ioc_value": "splitpours.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 08:39:53",
            "last_seen_utc": "2026-08-07 00:24:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864488": [
        {
            "ioc_value": "ozcyajb.sweetserendipitybakeshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 08:25:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864487": [
        {
            "ioc_value": "sweetserendipitybakeshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 08:24:00",
            "last_seen_utc": "2026-08-06 05:11:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864486": [
        {
            "ioc_value": "101.42.176.50:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-30 08:23:31",
            "last_seen_utc": "2026-08-03 07:26:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864485": [
        {
            "ioc_value": "159.75.159.217:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-30 08:23:29",
            "last_seen_utc": "2026-08-05 07:36:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864484": [
        {
            "ioc_value": "149.104.25.77:800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-30 08:23:18",
            "last_seen_utc": "2026-08-08 07:59:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864483": [
        {
            "ioc_value": "roddyki9911.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 08:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864475": [
        {
            "ioc_value": "1cxzkjf3.krautodetailing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:57:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864474": [
        {
            "ioc_value": "ydmkrr.southwestkustoms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:56:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864472": [
        {
            "ioc_value": "spkxslb.surestayplussanantoniotx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:39:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864471": [
        {
            "ioc_value": "4z4tzb9w.portman-photos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:38:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864470": [
        {
            "ioc_value": "da.dojiner.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-30 07:34:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61858e50c96a6f37957e1d6e3249ddb49ebd5c592ddce8dacf039404897afe45/",
            "tags": "DojinerBackdoor",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864469": [
        {
            "ioc_value": "ph.dojiner.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-30 07:34:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61858e50c96a6f37957e1d6e3249ddb49ebd5c592ddce8dacf039404897afe45/",
            "tags": "DojinerBackdoor",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864467": [
        {
            "ioc_value": "196.251.121.186:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-30 07:34:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61858e50c96a6f37957e1d6e3249ddb49ebd5c592ddce8dacf039404897afe45/",
            "tags": "DojinerBackdoor",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864468": [
        {
            "ioc_value": "64.89.160.67:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-30 07:34:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61858e50c96a6f37957e1d6e3249ddb49ebd5c592ddce8dacf039404897afe45/",
            "tags": "DojinerBackdoor",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1864466": [
        {
            "ioc_value": "nwrxmu.soulgenai.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:11:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864465": [
        {
            "ioc_value": "txlouno.surestayplussanantoniotx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:11:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1864464": [
        {
            "ioc_value": "soulgenai.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:08:53",
            "last_seen_utc": "2026-08-07 00:24:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864463": [
        {
            "ioc_value": "surestayplussanantoniotx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 07:05:42",
            "last_seen_utc": "2026-08-07 00:24:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1864337": [
        {
            "ioc_value": "huydesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-30 07:02:20",
            "last_seen_utc": "2026-08-26 17:47:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "Base,c2,ClickFix,etherhiding",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863911": [
        {
            "ioc_value": "yeja56.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 06:40:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44bed371f56abd518f34edcf6e12d198964b53d169ba12ee637821335158aa95/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863910": [
        {
            "ioc_value": "hsab20.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-30 06:40:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44bed371f56abd518f34edcf6e12d198964b53d169ba12ee637821335158aa95/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863898": [
        {
            "ioc_value": "http://153.117.41.230:42178/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 06:35:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.41.230",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863899": [
        {
            "ioc_value": "http://110.136.44.90:51644/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 06:35:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.136.44.90",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863900": [
        {
            "ioc_value": "http://223.123.35.126:44063/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 06:35:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.35.126",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863901": [
        {
            "ioc_value": "http://103.174.243.192:60994/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 06:35:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.192",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863902": [
        {
            "ioc_value": "http://223.123.124.126:33879/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 06:35:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.124.126",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863903": [
        {
            "ioc_value": "http://103.26.86.38:57605/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 06:35:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.86.38",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863909": [
        {
            "ioc_value": "rpm.sm188xxzx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-30 06:29:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863908": [
        {
            "ioc_value": "vmi3474446.contaboserver.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 06:27:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "geo,MEX",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863907": [
        {
            "ioc_value": "yxrbya.soochiparawaterfalls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 06:25:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863906": [
        {
            "ioc_value": "soochiparawaterfalls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 06:23:28",
            "last_seen_utc": "2026-07-30 06:24:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863905": [
        {
            "ioc_value": "effyyws.sunservicedryice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 06:20:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863904": [
        {
            "ioc_value": "sunservicedryice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 06:20:11",
            "last_seen_utc": "2026-08-07 00:24:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863896": [
        {
            "ioc_value": "http://104.234.200.205:8181/api/reenvio/webhook/status/cliente",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:58:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81c1d54c2c531da88a39f037c10f343f6e2578891d300fc647fe6c027344805b/",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863895": [
        {
            "ioc_value": "http://104.234.200.205:8181/api/reenvio/rate-limit?email=config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:58:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81c1d54c2c531da88a39f037c10f343f6e2578891d300fc647fe6c027344805b/",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863894": [
        {
            "ioc_value": "104.234.200.205:8181",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:58:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81c1d54c2c531da88a39f037c10f343f6e2578891d300fc647fe6c027344805b/",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863892": [
        {
            "ioc_value": "trueconnectives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:54:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863893": [
        {
            "ioc_value": "88.212.109.208.host.secureserver.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:54:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863891": [
        {
            "ioc_value": "https://88.212.109.208.host.secureserver.net/?/reel/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863889": [
        {
            "ioc_value": "https://goo.su/xls7375d",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:54:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863890": [
        {
            "ioc_value": "https://trueconnectives.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:54:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BRA,geo",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863615": [
        {
            "ioc_value": "168.144.138.186:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-30 05:42:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1863624": [
        {
            "ioc_value": "http://31.56.209.153/bins.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 05:42:42",
            "last_seen_utc": "2026-07-29 22:40:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1863831": [
        {
            "ioc_value": "http://103.196.163.73:52527/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-30 05:42:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.196.163.73",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863858": [
        {
            "ioc_value": "168.144.138.186:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-30 05:42:41",
            "last_seen_utc": "2026-08-03 10:03:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1863863": [
        {
            "ioc_value": "noob.baby",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-30 05:42:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "irahook,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863865": [
        {
            "ioc_value": "178.128.22.21:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-30 05:42:41",
            "last_seen_utc": "2026-08-02 16:20:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1863887": [
        {
            "ioc_value": "luahrq.snowssurfshack.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 05:38:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863886": [
        {
            "ioc_value": "snowssurfshack.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 05:37:52",
            "last_seen_utc": "2026-08-07 00:24:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863885": [
        {
            "ioc_value": "zmgwbau.smoothoutlawcoffee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 05:36:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863884": [
        {
            "ioc_value": "n5u3jyf6.plumberservices.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 05:36:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863883": [
        {
            "ioc_value": "smoothoutlawcoffee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 05:34:41",
            "last_seen_utc": "2026-08-07 00:24:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863879": [
        {
            "ioc_value": "gysymf.sarahelizabethphotoandfilm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:57:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863878": [
        {
            "ioc_value": "sarahelizabethphotoandfilm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:52:21",
            "last_seen_utc": "2026-08-07 00:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863877": [
        {
            "ioc_value": "wohinmn.smallshopsandwhatknot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863876": [
        {
            "ioc_value": "smallshopsandwhatknot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:49:25",
            "last_seen_utc": "2026-08-07 00:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863875": [
        {
            "ioc_value": "zapas-xoga-cig.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-30 04:11:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863874": [
        {
            "ioc_value": "rhyawn.sandsautorepairmentor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:09:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863868": [
        {
            "ioc_value": "ouvavde.skillitacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:04:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863867": [
        {
            "ioc_value": "skillitacademy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 04:03:40",
            "last_seen_utc": "2026-08-07 00:24:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863866": [
        {
            "ioc_value": "i48ybkyy.nakedlesbianskiss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 03:53:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863864": [
        {
            "ioc_value": "23ida6x1.pizzadays.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 03:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863862": [
        {
            "ioc_value": "lprxjf.samanthadefalco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 03:23:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863861": [
        {
            "ioc_value": "samanthadefalco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 03:21:22",
            "last_seen_utc": "2026-08-07 00:24:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863860": [
        {
            "ioc_value": "aahtioq.sketchetch.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 03:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863859": [
        {
            "ioc_value": "sketchetch.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 03:18:15",
            "last_seen_utc": "2026-08-07 00:19:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863855": [
        {
            "ioc_value": "qbywphal.liberty-token.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 02:59:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863854": [
        {
            "ioc_value": "udofiy.salpizzasewell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 02:36:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863853": [
        {
            "ioc_value": "salpizzasewell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 02:35:50",
            "last_seen_utc": "2026-08-07 00:40:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863852": [
        {
            "ioc_value": "frrnaly.sixstar-iptv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 02:33:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863851": [
        {
            "ioc_value": "sixstar-iptv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 02:32:43",
            "last_seen_utc": "2026-07-31 03:40:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863846": [
        {
            "ioc_value": "ahohcm.sainidigirocket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:51:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863845": [
        {
            "ioc_value": "sainidigirocket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:50:37",
            "last_seen_utc": "2026-08-07 00:19:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863844": [
        {
            "ioc_value": "caagwrk.simplyturfandgreenwall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:49:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863843": [
        {
            "ioc_value": "simplyturfandgreenwall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:47:29",
            "last_seen_utc": "2026-08-07 00:19:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863842": [
        {
            "ioc_value": "2l7nxx4r.pinellascountyroofers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:37:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863841": [
        {
            "ioc_value": "xhidxu.runmarine-services.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:06:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863837": [
        {
            "ioc_value": "runmarine-services.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:04:48",
            "last_seen_utc": "2026-08-07 00:19:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863836": [
        {
            "ioc_value": "bypmobu.shopprincesshair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:03:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863835": [
        {
            "ioc_value": "shopprincesshair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 01:01:37",
            "last_seen_utc": "2026-08-07 00:19:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863834": [
        {
            "ioc_value": "dfapbv.rugsofus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 00:22:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863833": [
        {
            "ioc_value": "hywjlgp.shopmagnoliaonmain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 00:20:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863832": [
        {
            "ioc_value": "rugsofus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 00:19:48",
            "last_seen_utc": "2026-08-07 00:35:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863830": [
        {
            "ioc_value": "shopmagnoliaonmain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-30 00:16:00",
            "last_seen_utc": "2026-07-30 00:17:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863827": [
        {
            "ioc_value": "156.224.18.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 23:46:20",
            "last_seen_utc": "2026-08-30 08:47:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863826": [
        {
            "ioc_value": "5e22r97u.shop-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 23:37:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863825": [
        {
            "ioc_value": "qrcjab.rsfoodproducts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 23:34:06",
            "last_seen_utc": "2026-08-13 12:05:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863824": [
        {
            "ioc_value": "papbeko.shopfasst.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 23:32:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863823": [
        {
            "ioc_value": "shopfasst.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 23:30:55",
            "last_seen_utc": "2026-08-07 00:19:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863821": [
        {
            "ioc_value": "90b30f19d6dc61e4c84539324b839f4fec0b4814",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863822": [
        {
            "ioc_value": "fe2d63e6c7d907019e44bb4a2138b236",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863818": [
        {
            "ioc_value": "ebd767d125e3d336657c2c6d1d06ed3089e19d02",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863819": [
        {
            "ioc_value": "24aee3a61aecc5ec58375d838322010b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863820": [
        {
            "ioc_value": "fce8ba975afa37727c61a9940c81c8e20da1de724f8a10b44b89d7ed44d7f526",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863816": [
        {
            "ioc_value": "1e780a793ee1c9cb30f9dca02c91390b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-29 23:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863817": [
        {
            "ioc_value": "2cc5df961162f8f9cea6273cb82756ea591f1d5ee62ee5cd0f19bc12cda7b7d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863812": [
        {
            "ioc_value": "4a2bb63c5007379ea2dffb8669743af4cc773844",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863813": [
        {
            "ioc_value": "fc5062774b187283d0e3edfe421a001a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863814": [
        {
            "ioc_value": "324126d263910469357915525f2637ec1b0a2a6b875399b96c979687fed86e40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-29 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863815": [
        {
            "ioc_value": "1acc53992476aeaf034a4ab1c7852f69863a2fba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-29 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863810": [
        {
            "ioc_value": "e76d61ff0b8f528fa958b514f9a521dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863811": [
        {
            "ioc_value": "504d3db673cea7561272630dcdbcb132c470cdb6b4735af762f541f3adf19942",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863806": [
        {
            "ioc_value": "add10d5a77f0de905a2f3aa9a9b53282ff3c6d0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863807": [
        {
            "ioc_value": "740898b58e04118c41b698eea2c74e52",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863808": [
        {
            "ioc_value": "1bfb41a19de49c9c0dc63f434ff46f51ccba78e25629031bfda16e56b0f09df9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863809": [
        {
            "ioc_value": "6b610c48d11f8876b97c8bbdb6e9bf112ce63362",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863803": [
        {
            "ioc_value": "050d1fa390f009dbe1263b20467e3714d0340506",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863804": [
        {
            "ioc_value": "6c31dfcd522d65460e749941d675c714",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863805": [
        {
            "ioc_value": "0c16963f43604246e81f006d1f7df0a7258b36b929252c1502d92fea573d86aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863800": [
        {
            "ioc_value": "34b5e8d7449ce558ec9aafc624e996844614a614",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863801": [
        {
            "ioc_value": "f651e9225960daeb8dfb96c3da275294",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863802": [
        {
            "ioc_value": "c200f2497e8169897a1f0569e720331faf5f2fbc50530614641d612b4488797c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863796": [
        {
            "ioc_value": "375f8a4ff4eafe485b210a9ffb6a84bdbdb9c52ae602293ddae53717935e8daa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863797": [
        {
            "ioc_value": "cab8109654bfee89744d7ef0e855b55c316e8cfa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863798": [
        {
            "ioc_value": "88fa7d9c846fd17986f8d0143cb3ca3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863799": [
        {
            "ioc_value": "cb8d68041200958ef7c8b1c5d5cb82c2545f2d89b67dd49c564242f2f009362c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863792": [
        {
            "ioc_value": "b1d3605941588587ac6927b78bded977",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863793": [
        {
            "ioc_value": "61ab1d22949eac0582e989ae065ec4caee9ac99998276317edda96735cd311fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863794": [
        {
            "ioc_value": "49802c5598b2e9d94229ae987d0ac47bbf8977ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863795": [
        {
            "ioc_value": "a8480ece517b8367ca8418d7888f410d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863789": [
        {
            "ioc_value": "d1b8f36f0654d83e8f85fc828ccd8beb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863790": [
        {
            "ioc_value": "99cd8530772b5bb986883ebfd09410bfd5328581a3e993472826eda78d6e3405",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863791": [
        {
            "ioc_value": "a85d69f27981bdfee81b8e232056265b94abd4e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863785": [
        {
            "ioc_value": "0ec48459dc967e7e8c8e83fd193c09521ffdb01d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863786": [
        {
            "ioc_value": "21aa4b32defa0fa0aea3e28559ee8fd8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863787": [
        {
            "ioc_value": "39e07fb60fbf206b06d1b5b2b74848d9d393c6bd66fd11e003436cd7ee6b5788",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863788": [
        {
            "ioc_value": "06452584003c6bfc2962d97ce28c24ddeeaeadf2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863781": [
        {
            "ioc_value": "7072509bfed6050e7f498f78adbb2fa8dd6b3ffb5ac71c2a3dff942bd484b413",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863782": [
        {
            "ioc_value": "5a444dc300e998eb0a4534935155f6a78e3517ca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863783": [
        {
            "ioc_value": "40d291a45b171ed64df46347ff3aecd1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863784": [
        {
            "ioc_value": "cea15fe7edd6b1b26f4326901781c16034ebe195cdb89ede2338e91c1d7ce6ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863777": [
        {
            "ioc_value": "13b4f73885f424f73207481d097109fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863778": [
        {
            "ioc_value": "16efe20ecbe454a3390e05e1641c91bbbf436a2ab1c830b76dc6c8a8b4843f14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863779": [
        {
            "ioc_value": "2517ee6b0331e10067fc6f4e79b0e237a9db3504",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863780": [
        {
            "ioc_value": "52f00e919a910e2445bcd4d35e896693",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863774": [
        {
            "ioc_value": "d1b360a94b3b6acd26d04e9b2cde1df1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863775": [
        {
            "ioc_value": "72ba37f28406579b8556ca03137e7c2c4bed79e5fc875e560c017f161840fa65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863776": [
        {
            "ioc_value": "83f6fc356e93ca5c6a731387a38b88a761177b0d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863772": [
        {
            "ioc_value": "798b6a521d6763f1b684f6d2a6c91e3eab92425dbd9265372a132aba1e213c5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863773": [
        {
            "ioc_value": "626b4ea13c888976c077fd44b3d0d187a7cca20e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863769": [
        {
            "ioc_value": "f901e1a138129e819f4759f30102e94a9987409f0978c9505c2d679d1a0880e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863770": [
        {
            "ioc_value": "6459d9f6ed1b29258e53b9d621ce36fc504f7b18",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863771": [
        {
            "ioc_value": "25774b9f2918cb30364298716f64b014",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863766": [
        {
            "ioc_value": "ee2169a39bff9da6e3152e80a13b0bd9dc1e55c3ab191ca387bf8ede1ebdcd8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863767": [
        {
            "ioc_value": "44d75ba16175c70d0cd60883ce28f59c9554f1b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863768": [
        {
            "ioc_value": "9aefb5da315cf02ef084b88028f5cef1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863764": [
        {
            "ioc_value": "db1fd0534b1ce0369a871c3f2b912c7cd433ab31",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863765": [
        {
            "ioc_value": "91b902474fed81407fd811fb273df070",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863761": [
        {
            "ioc_value": "450ae818af5b4cddd0f832322013371c2e22eaf1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863762": [
        {
            "ioc_value": "77857be5f099f715e7706217aae7dd42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863763": [
        {
            "ioc_value": "ff1c3a2866f389f8ec2e4d57600446da4d131bad8ded341aa6619c0a0d35f752",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863758": [
        {
            "ioc_value": "745ec020a3fae9e24921579370010fd28f9bd25f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-29 23:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863759": [
        {
            "ioc_value": "b8d28b59c891a75a318dee8dc16dbcdd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-29 23:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863760": [
        {
            "ioc_value": "b6bc55d2b6e281b5bbf84f589a2847544233ad4b7abd05f942f27cba26703b8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863755": [
        {
            "ioc_value": "7a376e7ca7fb7efe2cfa9b3efaebbbf1495db0c7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863756": [
        {
            "ioc_value": "0121b38de05462d8e1ab8081f3d76f04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863757": [
        {
            "ioc_value": "5ee86cbcd296e0998ca20ee65a7506fb3baecfb7ce98eede29bff1a6a6e0fc95",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-29 23:19:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863752": [
        {
            "ioc_value": "b2c29d38103a0ebbaeed3d575efeb8da989d17a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863753": [
        {
            "ioc_value": "127f833a0f80b73664cfa547065265da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863754": [
        {
            "ioc_value": "8802527c317068b4b824d7bc1843dee0e52e047c7fae4997d577c11349c1ef01",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863749": [
        {
            "ioc_value": "967f259e3d1df3af9cc90a645da8fec177eb0196",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:19:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863750": [
        {
            "ioc_value": "ec6a85b5e33265ceedccbf7ae41894b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:19:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863751": [
        {
            "ioc_value": "d35d30ccc119aacab7cbf48fdddb54a9149507f79e99d102e37b43958e80e835",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:19:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863745": [
        {
            "ioc_value": "1a020229e3b01d58230ab2512fdb373b22d91676b441a792240a01f72b27affb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ramnit",
            "malware_alias": "Nimnul",
            "malware_printable": "Ramnit",
            "first_seen_utc": "2026-07-29 23:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863746": [
        {
            "ioc_value": "073bc2cf28961b31d1d8d8906e7256eef4444766",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ramnit",
            "malware_alias": "Nimnul",
            "malware_printable": "Ramnit",
            "first_seen_utc": "2026-07-29 23:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863747": [
        {
            "ioc_value": "aaccc00c1a56e171d41aaca42d78b989",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ramnit",
            "malware_alias": "Nimnul",
            "malware_printable": "Ramnit",
            "first_seen_utc": "2026-07-29 23:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863748": [
        {
            "ioc_value": "1f49316f60cee5fd365ecda4b1c43fcfe10ec5a52fd0721b4eeb811afeab77ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-29 23:19:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863742": [
        {
            "ioc_value": "475e69baae47f29ca6e4689e5953926b5a1357d69ed8e0022b85804cff62d51e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863743": [
        {
            "ioc_value": "66b099d5fec7b87ed4e4d82b54f8f96d1ce07774",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863744": [
        {
            "ioc_value": "2ecf35ea5f805a9ae32af7b6d6cc0507",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863738": [
        {
            "ioc_value": "48b105ad27033c679bb3db5703531ccf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863739": [
        {
            "ioc_value": "98d3876e0850a8a70afc220e945c24723b5ea973f187eacf23958acfa9df2e68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-29 23:19:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863740": [
        {
            "ioc_value": "ab5033af0f9010f316fa0740a34ee528731f788a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-29 23:19:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863741": [
        {
            "ioc_value": "803b5aee2d97654630910acc48c49964",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-29 23:19:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863735": [
        {
            "ioc_value": "2e957df212add29eeac4d567c6ddbcb9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863736": [
        {
            "ioc_value": "691b0e2f9555f229e921b0679f72452fe66c0d2432156efa4ff18c3f3724066a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863737": [
        {
            "ioc_value": "7d755d05b63e1ba7401ba969a8463e897fe8fd49",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863732": [
        {
            "ioc_value": "f7fb31cc8b2a0be022168204bcfd91a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-29 23:19:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863733": [
        {
            "ioc_value": "8a8857de50c2170ca7af40786168a6526e8190e297ec55e3d6a71fbfd21c3b17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863734": [
        {
            "ioc_value": "3c3fda68b6d423f2d6cf42c2253e576e4e793bd6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863729": [
        {
            "ioc_value": "0a7f48c4c09e3f9d552fc60dc4727fef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863730": [
        {
            "ioc_value": "f68b0ab0aa45a9119c1a097c4d64dd3250733f771b34cec0699e3f9a7c88d79e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-29 23:19:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863731": [
        {
            "ioc_value": "bbe3b65bfddcacf116b310acd312395ef2d6b54e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-29 23:19:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863726": [
        {
            "ioc_value": "b01bcc20137e6cc6683881d70eef7815",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863727": [
        {
            "ioc_value": "b4f3acd50d0947aded733854216516d46990d57ce5e2cdcfdec432f0e498472a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863728": [
        {
            "ioc_value": "115ce860ef3071481af5395668c3014e9349876d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863722": [
        {
            "ioc_value": "1f0d6e50c8966ba6ea8d11309e7d4ec7d066b6e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863723": [
        {
            "ioc_value": "0a383df79d9a6bbc48efb5868fb14d96",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863724": [
        {
            "ioc_value": "88a809fd0fbcfe06987d6c3ec704c78f0c5a1d83aee1ce8b54954d6a6a9d6f87",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863725": [
        {
            "ioc_value": "0a75d1cfd95172aa20d75a4fbc67952b8aca1ac2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863719": [
        {
            "ioc_value": "cead7717045a8f0869e81faafacc4da9901cadfa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863720": [
        {
            "ioc_value": "9480a93d4617c0260a02aba0d7a973a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863721": [
        {
            "ioc_value": "03c5743f47a1fda44c176239e5db1fce92956512abeff90104c89fff4762acbd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863716": [
        {
            "ioc_value": "0517b2830a1bb921b4e3d222298c3a7d7836ebd9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863717": [
        {
            "ioc_value": "06ba9a25b7493b4c4340e7f4a9a74230",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863718": [
        {
            "ioc_value": "eba88b2d0eaa3aee3ed5065d902ae7445adf6f5874e3b47691637112168dca30",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863713": [
        {
            "ioc_value": "b82702d2cf92c7bd40d2e0136ad988e60663eb73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863714": [
        {
            "ioc_value": "7e24bcfac39c612504d8f96883837345",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863715": [
        {
            "ioc_value": "4f55629fddb7c272fe500b6a132fb15341d2f58ca29fb597be19ebdb77e1994d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863710": [
        {
            "ioc_value": "86447ec71d44aa50477c04dc0f3bbdcd9ec8a2ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863711": [
        {
            "ioc_value": "682a8c5dc87cb706bb33221e61975d09",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863712": [
        {
            "ioc_value": "f40c9170ce158fb797deb5bd41f4110b51439d9fd9217944a01c325a6ca5c1c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863706": [
        {
            "ioc_value": "2135da1fbfb04479247c4268d2002059ca335b5384929093644e4896c44a37bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863707": [
        {
            "ioc_value": "62d290cced859110aa3d507aa52e7ffb48ea29bf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863708": [
        {
            "ioc_value": "fa1d0a6bce748dd794a27ee6179bf948",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863709": [
        {
            "ioc_value": "1650509e245d62930fcd56d8f8aafe5e8ed9a57c746f027d7565fc732b77d7dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863703": [
        {
            "ioc_value": "d8a5b845155fb8b7c1e6f584c1632049071ea72a8b64748e54d9e7a9802af31f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:19",
            "last_seen_utc": "2026-07-30 11:25:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863704": [
        {
            "ioc_value": "bc39c0be002305e29119785480bdfb529ad376a4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:19",
            "last_seen_utc": "2026-07-30 11:25:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863705": [
        {
            "ioc_value": "98d8b9bb62d412dcb2914f919e4750c3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:19",
            "last_seen_utc": "2026-07-30 11:25:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863700": [
        {
            "ioc_value": "b9b09102f0be935f39d742fe72bb0b98815d2a21b3f9b96c403ed1fb143a816c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:18",
            "last_seen_utc": "2026-07-30 11:25:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863701": [
        {
            "ioc_value": "84c997f12ab88b93800471b5b575049caad7b3ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:18",
            "last_seen_utc": "2026-07-30 11:25:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863702": [
        {
            "ioc_value": "c2972373fdc63127610f62f83b69767f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-29 23:19:18",
            "last_seen_utc": "2026-07-30 11:25:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863697": [
        {
            "ioc_value": "03d2e8ef968a70c032ffb01c98b29ab612ae48043b44e63d15c2504f7f85de13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-29 23:19:17",
            "last_seen_utc": "2026-07-30 11:25:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863698": [
        {
            "ioc_value": "d0b31bfd1d8e40efc3b3b30c1cf9b655c9365935",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-29 23:19:17",
            "last_seen_utc": "2026-07-30 11:25:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863699": [
        {
            "ioc_value": "0f74892809973a93321c7ba05bdf61ca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-29 23:19:17",
            "last_seen_utc": "2026-07-30 11:25:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863694": [
        {
            "ioc_value": "96508589d281460eab4eb1819c80e89bdffdb5fe86b8fe1400bb9268deb09e74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:16",
            "last_seen_utc": "2026-07-30 11:25:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863695": [
        {
            "ioc_value": "a640e807b4ee821cd1ba76649139721447b3e3b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:16",
            "last_seen_utc": "2026-07-30 11:25:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863696": [
        {
            "ioc_value": "1ab31f82e6c8455c61f3a14b753a7ace",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:16",
            "last_seen_utc": "2026-07-30 11:25:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863691": [
        {
            "ioc_value": "91426a0ecbec54c757f946939bcfa983a365c12c4b4350d0565ecb46039ee353",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:15",
            "last_seen_utc": "2026-07-30 11:25:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863692": [
        {
            "ioc_value": "38b34b90da9e7770bedd699adb9cfa0feb386110",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:15",
            "last_seen_utc": "2026-07-30 11:25:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863693": [
        {
            "ioc_value": "bb13d29331412404a07db7e9375aa9cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:15",
            "last_seen_utc": "2026-07-30 11:25:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863688": [
        {
            "ioc_value": "de5b161afabe16c6de6a329454fb6bc2503a016431881e1a152b1ab755afc447",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:14",
            "last_seen_utc": "2026-07-30 11:25:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863689": [
        {
            "ioc_value": "286571a57452fa00ee04300ab4f07fa82a62834e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:14",
            "last_seen_utc": "2026-07-30 11:25:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863690": [
        {
            "ioc_value": "729f1552e401d7881dcf8b895a48565a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:19:14",
            "last_seen_utc": "2026-07-30 11:25:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863684": [
        {
            "ioc_value": "c9d073ae0783c17d1c211a9fa1658ed8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-29 23:19:13",
            "last_seen_utc": "2026-07-30 11:25:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863685": [
        {
            "ioc_value": "b91d0d56c1d7ed94962d0f6501761db3573b1090fac15d9424e8b3c8b1914c9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:13",
            "last_seen_utc": "2026-07-30 11:25:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863686": [
        {
            "ioc_value": "f3b5f5661a7d7bd1661e6e6668b6790a659dad4a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:13",
            "last_seen_utc": "2026-07-30 11:25:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863687": [
        {
            "ioc_value": "e5a7e8a76088d1cb0db01c805588bbf2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:13",
            "last_seen_utc": "2026-07-30 11:25:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863681": [
        {
            "ioc_value": "529a4e8314130d9693118be4e2ed9c2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-29 23:19:12",
            "last_seen_utc": "2026-07-30 11:25:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863682": [
        {
            "ioc_value": "e9d45ec597fd2f9ac69d259f8f03c4646cf34b59ab07fe2aaf942174d727a8fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-29 23:19:12",
            "last_seen_utc": "2026-07-30 11:25:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863683": [
        {
            "ioc_value": "b6e624c197a3eef97ca0105b3eb9e7c3b8138702",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-29 23:19:12",
            "last_seen_utc": "2026-07-30 11:25:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863678": [
        {
            "ioc_value": "d6d9e71ef20eb564c30cf0f92d038ce7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:11",
            "last_seen_utc": "2026-07-30 11:25:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863679": [
        {
            "ioc_value": "43e782d8c5b308ecc64aa65004d0165ff2ef3a0be3c659a2a02e1a4b5777094a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-29 23:19:11",
            "last_seen_utc": "2026-07-30 11:25:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863680": [
        {
            "ioc_value": "1666811709b9905e72f7065703bb176b149525e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-29 23:19:11",
            "last_seen_utc": "2026-07-30 11:25:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863675": [
        {
            "ioc_value": "23c6244df18b30fa08cb97ff92e83414",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:10",
            "last_seen_utc": "2026-07-30 11:25:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863676": [
        {
            "ioc_value": "aa1e87294fdee8bb644eefa9d72dfc8751aec4aeb47104edaf83447f397f3802",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:10",
            "last_seen_utc": "2026-07-30 11:25:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863677": [
        {
            "ioc_value": "0666d21f95ec1a12279e3efc99f9a47d698af46b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:10",
            "last_seen_utc": "2026-07-30 11:25:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863671": [
        {
            "ioc_value": "9d1b68e159ab961fbc2a698065d090afac7450dd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:09",
            "last_seen_utc": "2026-07-30 11:25:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863672": [
        {
            "ioc_value": "824a0ef05857141f251523a56b979b1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:09",
            "last_seen_utc": "2026-07-30 11:25:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863673": [
        {
            "ioc_value": "40717c6dd9e3d28afd7937b8651efa2096c77478633ca1039f23c624ea322045",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:09",
            "last_seen_utc": "2026-07-30 11:25:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863674": [
        {
            "ioc_value": "04ad4fd8dc5d6665be4fc61cd277965f2502a17f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-29 23:19:09",
            "last_seen_utc": "2026-07-30 11:25:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863668": [
        {
            "ioc_value": "9997e4c7b6cdcee95143e7b410992746f17162e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:08",
            "last_seen_utc": "2026-07-30 11:25:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863669": [
        {
            "ioc_value": "db1cdbdc30d7056eecab4157714e8e43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:08",
            "last_seen_utc": "2026-07-30 11:25:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863670": [
        {
            "ioc_value": "dcac68a58f09eec59bce587a86d91ea1570919edc8100715ed83bcb1a0fea364",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:08",
            "last_seen_utc": "2026-07-30 11:25:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863665": [
        {
            "ioc_value": "5b5b3ce5844dc27572d3d9055c74cb247eaeb10e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:07",
            "last_seen_utc": "2026-07-30 11:25:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863666": [
        {
            "ioc_value": "796ffe1a6e49e48a819e3d7a11456dac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:07",
            "last_seen_utc": "2026-07-30 11:25:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863667": [
        {
            "ioc_value": "bb24b382d5de5194bbb4cdf6d8127a3e82a205ccad251bcbc19100f876cd64d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:07",
            "last_seen_utc": "2026-07-30 11:25:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863662": [
        {
            "ioc_value": "9d8b2e6096bfec557b5dcab9f5af4b803505fc82",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:06",
            "last_seen_utc": "2026-07-30 11:25:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863663": [
        {
            "ioc_value": "484f574d72b7e472020cca3ee5392e9e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:06",
            "last_seen_utc": "2026-07-30 11:25:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863664": [
        {
            "ioc_value": "75ec6ba7daa02f22c6a1cb3e9d3a642a2ebeaef99128519919f747211e4e84f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:06",
            "last_seen_utc": "2026-07-30 11:25:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863658": [
        {
            "ioc_value": "af9b05c7311f0f4049467a64bb1484b2264955faf61b19e8974757802f197177",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:05",
            "last_seen_utc": "2026-07-30 11:25:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863659": [
        {
            "ioc_value": "33b9451a2c9c771ab3f453e11b230fdd35f04019",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:05",
            "last_seen_utc": "2026-07-30 11:25:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863660": [
        {
            "ioc_value": "970a40aeb1cc1f4269aaf5edf091dcfb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:05",
            "last_seen_utc": "2026-07-30 11:25:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863661": [
        {
            "ioc_value": "b1c8c2390f909d83d50dfd9380eb7ae96b3a1cf456ecef96b459c5b053087a51",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:05",
            "last_seen_utc": "2026-07-30 11:25:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863655": [
        {
            "ioc_value": "75c8b4652b33fab81e814a0bec7ae7ec8c13a24665c14481e66e72a7e9112341",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:04",
            "last_seen_utc": "2026-07-30 11:25:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863656": [
        {
            "ioc_value": "6d31caff1708a494da26b083939830224c6b2d75",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:04",
            "last_seen_utc": "2026-07-30 11:25:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863657": [
        {
            "ioc_value": "8353ae27e81a6a737021a536c2dbbf47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-29 23:19:04",
            "last_seen_utc": "2026-07-30 11:25:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863652": [
        {
            "ioc_value": "5459c708a6b6a6bfbbc7e28b668fcbb1a18138abb758244fa15d74d3216dfa3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:03",
            "last_seen_utc": "2026-07-30 11:25:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863653": [
        {
            "ioc_value": "0ff48c1748ff0a6656cfe14342e985d77bc0f457",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:03",
            "last_seen_utc": "2026-07-30 11:25:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863654": [
        {
            "ioc_value": "69705cd49851f98f1db3d2598c62bad4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:19:03",
            "last_seen_utc": "2026-07-30 11:25:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863650": [
        {
            "ioc_value": "3efb191bcefc501c90369dfc7e67fe67683622c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:02",
            "last_seen_utc": "2026-07-30 11:25:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863651": [
        {
            "ioc_value": "0ed62134ba816c2c604a319692d97201",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:02",
            "last_seen_utc": "2026-07-30 11:25:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863646": [
        {
            "ioc_value": "ebd140217102e211a74b341198292a392a0e25ecf5ec1a53fb411c14c3b7b6f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:00",
            "last_seen_utc": "2026-07-30 11:25:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863647": [
        {
            "ioc_value": "eecbc3e7c7477bf7be9540285f1858fd8f237e3c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:00",
            "last_seen_utc": "2026-07-30 11:25:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863648": [
        {
            "ioc_value": "6edb9c07dccb6bbf836fb28a6560e921",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:00",
            "last_seen_utc": "2026-07-30 11:25:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863649": [
        {
            "ioc_value": "d664021eff6b92368479a4b9401272f9f869bddb0a22da5434747bb0433fff45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-29 23:19:00",
            "last_seen_utc": "2026-07-30 11:25:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863643": [
        {
            "ioc_value": "6a4d371a7e82215799f79944204cf1ae4586a5a1cb6bdd5f6fb55e811e2154f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-29 23:18:59",
            "last_seen_utc": "2026-07-30 11:25:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863644": [
        {
            "ioc_value": "a12df571520fe64a8847428e81d040176b8c6594",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-29 23:18:59",
            "last_seen_utc": "2026-07-30 11:25:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863645": [
        {
            "ioc_value": "609a433ec177c59a2667d9e29a15e17e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-29 23:18:59",
            "last_seen_utc": "2026-07-30 11:25:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863640": [
        {
            "ioc_value": "88536cf7df49585be4aa97e938b5ef5b5ccc46abbd2919010646a9a17281e3b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-29 23:18:58",
            "last_seen_utc": "2026-07-30 11:24:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863641": [
        {
            "ioc_value": "b6a9ba6fdc95dcb5e78a5fa50a76f32f982b3125",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-29 23:18:58",
            "last_seen_utc": "2026-07-30 11:25:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863642": [
        {
            "ioc_value": "2c5a9aa5ca5b6d98a5551da0ec0be9af",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-29 23:18:58",
            "last_seen_utc": "2026-07-30 11:25:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863636": [
        {
            "ioc_value": "db05580a540923fc9018705a62224a36",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:18:57",
            "last_seen_utc": "2026-07-30 11:24:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863637": [
        {
            "ioc_value": "2ec31f7f0ed881a6f33f44be53ddc89fff6f5f80390504093ddb4edccb46a830",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:18:57",
            "last_seen_utc": "2026-07-30 11:24:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863638": [
        {
            "ioc_value": "a46ce78b4c02141abd95cb3ea30453328fc01dba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:18:57",
            "last_seen_utc": "2026-07-30 11:24:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863639": [
        {
            "ioc_value": "5f9f58a97a8fa8fdede17725cfd8d08d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-29 23:18:57",
            "last_seen_utc": "2026-07-30 11:24:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863633": [
        {
            "ioc_value": "9ac564e1f6b5b1fb1fa22cf419566ef0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-29 23:18:56",
            "last_seen_utc": "2026-07-30 11:24:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863634": [
        {
            "ioc_value": "a58cdd282196a800054eabccafbecbbf5a4eeb6a5a7a925353d7901dae0db9da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:18:56",
            "last_seen_utc": "2026-07-30 11:24:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863635": [
        {
            "ioc_value": "26cd2070839628f53add0f11f9352cd95bb134ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 23:18:56",
            "last_seen_utc": "2026-07-30 11:24:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863631": [
        {
            "ioc_value": "6f65ac067cd914ac0d3a04d801e0363cf615f867c0fe683340656387e48f9337",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-29 23:18:55",
            "last_seen_utc": "2026-07-30 11:24:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863632": [
        {
            "ioc_value": "286e08273c64ff646c4de582bccbbf8861ea28a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-29 23:18:55",
            "last_seen_utc": "2026-07-30 11:24:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1863630": [
        {
            "ioc_value": "https://roperotivo.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 23:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/roperotivo.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863629": [
        {
            "ioc_value": "9c10grb3.monopolisgame.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:52:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863628": [
        {
            "ioc_value": "uswqec.roundtheclockcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:51:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863627": [
        {
            "ioc_value": "roundtheclockcare.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:48:15",
            "last_seen_utc": "2026-08-07 00:19:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863626": [
        {
            "ioc_value": "xjfmdua.shining-girls-hdrezka.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:46:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863625": [
        {
            "ioc_value": "shining-girls-hdrezka.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:45:05",
            "last_seen_utc": "2026-08-07 00:19:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863623": [
        {
            "ioc_value": "dzqasq.roundtablepizzadalycity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:06:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863620": [
        {
            "ioc_value": "nltydic.shedsofmarion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:04:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863619": [
        {
            "ioc_value": "roundtablepizzadalycity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 22:02:44",
            "last_seen_utc": "2026-07-31 05:03:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863618": [
        {
            "ioc_value": "shedsofmarion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 21:59:43",
            "last_seen_utc": "2026-07-31 01:02:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863617": [
        {
            "ioc_value": "62mwjc02.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 21:56:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863616": [
        {
            "ioc_value": "1tdaz761.shop-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 21:35:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863614": [
        {
            "ioc_value": "ufpykr.rossbridgemedicalcenterlp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 21:18:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863612": [
        {
            "ioc_value": "ookzqmk.selladorasgovi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 21:16:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863611": [
        {
            "ioc_value": "selladorasgovi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 21:14:06",
            "last_seen_utc": "2026-07-29 21:14:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863606": [
        {
            "ioc_value": "jereqk.rochandmadeholiday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 20:36:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863605": [
        {
            "ioc_value": "rochandmadeholiday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 20:31:42",
            "last_seen_utc": "2026-08-06 05:06:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863603": [
        {
            "ioc_value": "eveyclq.scrummyafterscandyshoppe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 20:31:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863604": [
        {
            "ioc_value": "ridingpeak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 20:31:06",
            "last_seen_utc": "2026-07-29 20:31:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863602": [
        {
            "ioc_value": "scrummyafterscandyshoppe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 20:28:42",
            "last_seen_utc": "2026-08-07 00:19:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863600": [
        {
            "ioc_value": "roperotivo.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 20:09:36",
            "last_seen_utc": "2026-08-06 05:06:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863595": [
        {
            "ioc_value": "mitkzq.reynoldsbrothersconstruction.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 19:47:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863594": [
        {
            "ioc_value": "92.118.39.95:3043",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-29 19:46:26",
            "last_seen_utc": "2026-08-28 18:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863593": [
        {
            "ioc_value": "91.199.133.133:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 19:46:24",
            "last_seen_utc": "2026-08-30 08:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863592": [
        {
            "ioc_value": "78.153.149.82:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 19:46:13",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863590": [
        {
            "ioc_value": "67.210.97.40:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 19:46:10",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863591": [
        {
            "ioc_value": "67.210.97.40:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 19:46:10",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863589": [
        {
            "ioc_value": "57.129.92.151:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-29 19:46:04",
            "last_seen_utc": "2026-09-01 02:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863587": [
        {
            "ioc_value": "51.79.185.253:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:46:01",
            "last_seen_utc": "2026-08-31 08:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863588": [
        {
            "ioc_value": "51.79.185.253:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:46:01",
            "last_seen_utc": "2026-08-31 08:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863586": [
        {
            "ioc_value": "45.195.8.67:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-29 19:45:46",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863585": [
        {
            "ioc_value": "43.213.254.221:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 19:45:41",
            "last_seen_utc": "2026-08-31 08:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863583": [
        {
            "ioc_value": "27.124.36.151:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:45:30",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863584": [
        {
            "ioc_value": "27.124.36.151:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:45:30",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863582": [
        {
            "ioc_value": "reynoldsbrothersconstruction.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 19:45:03",
            "last_seen_utc": "2026-07-29 19:45:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863478": [
        {
            "ioc_value": "45.90.163.37:35342",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 19:44:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1863547": [
        {
            "ioc_value": "95.85.238.53:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:44:36",
            "last_seen_utc": "2026-08-20 06:06:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "malware",
            "anonymous": 0,
            "reporter": "ravingpetr"
        }
    ],
    "1863552": [
        {
            "ioc_value": "http://123.172.77.129:59541/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 19:44:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.172.77.129",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863581": [
        {
            "ioc_value": "phfifdv.rentechglobalsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 19:44:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863579": [
        {
            "ioc_value": "194.59.31.51:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 19:44:28",
            "last_seen_utc": "2026-08-29 08:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863580": [
        {
            "ioc_value": "195.20.17.146:56776",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 19:44:28",
            "last_seen_utc": "2026-08-29 08:44:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863578": [
        {
            "ioc_value": "194.59.31.51:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 19:44:27",
            "last_seen_utc": "2026-08-29 08:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863577": [
        {
            "ioc_value": "192.71.244.238:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 19:44:25",
            "last_seen_utc": "2026-08-29 08:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863576": [
        {
            "ioc_value": "192.253.245.178:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-29 19:44:24",
            "last_seen_utc": "2026-08-29 08:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863575": [
        {
            "ioc_value": "185.212.128.207:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-29 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863574": [
        {
            "ioc_value": "185.174.102.28:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:44:15",
            "last_seen_utc": "2026-09-01 02:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863573": [
        {
            "ioc_value": "178.16.53.65:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:44:08",
            "last_seen_utc": "2026-08-31 08:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863572": [
        {
            "ioc_value": "172.86.89.227:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:44:02",
            "last_seen_utc": "2026-08-29 08:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863571": [
        {
            "ioc_value": "162.216.231.230:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 19:43:54",
            "last_seen_utc": "2026-08-29 08:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863570": [
        {
            "ioc_value": "155.2.192.251:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:45",
            "last_seen_utc": "2026-09-01 02:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863569": [
        {
            "ioc_value": "154.194.50.252:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:42",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863568": [
        {
            "ioc_value": "149.56.30.94:3122",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-07-29 19:43:39",
            "last_seen_utc": "2026-08-29 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863567": [
        {
            "ioc_value": "142.93.52.11:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 19:43:33",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863566": [
        {
            "ioc_value": "130.12.182.209:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863563": [
        {
            "ioc_value": "104.239.66.154:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:14",
            "last_seen_utc": "2026-08-30 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863564": [
        {
            "ioc_value": "104.239.66.154:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:14",
            "last_seen_utc": "2026-08-30 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863565": [
        {
            "ioc_value": "104.239.66.154:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:14",
            "last_seen_utc": "2026-08-30 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863562": [
        {
            "ioc_value": "103.97.131.179:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863561": [
        {
            "ioc_value": "rentechglobalsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 19:43:04",
            "last_seen_utc": "2026-08-07 00:34:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863560": [
        {
            "ioc_value": "kbtmm8vw.redcanoerealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 19:33:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863557": [
        {
            "ioc_value": "gfodqo.pradanailsspakaty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 19:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863556": [
        {
            "ioc_value": "pradanailsspakaty.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:59:36",
            "last_seen_utc": "2026-08-07 00:19:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863555": [
        {
            "ioc_value": "exvgbus.reliablelogisticsltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:58:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863554": [
        {
            "ioc_value": "reliablelogisticsltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:57:33",
            "last_seen_utc": "2026-08-07 00:19:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863553": [
        {
            "ioc_value": "job.coast-space.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-29 18:29:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1863551": [
        {
            "ioc_value": "owlywh.powwowsmokeshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:15:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863550": [
        {
            "ioc_value": "powwowsmokeshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:14:35",
            "last_seen_utc": "2026-07-29 18:14:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863549": [
        {
            "ioc_value": "dnjavav.rajajudi33.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:14:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863548": [
        {
            "ioc_value": "rajajudi33.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 18:12:07",
            "last_seen_utc": "2026-07-29 18:13:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863469": [
        {
            "ioc_value": "tvuvgzk.premiumrent-car.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-29 17:41:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/94b56345-8ad7-4f94-845e-0120afbf1435",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1863470": [
        {
            "ioc_value": "dist.vertexengine.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-29 17:41:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/94b56345-8ad7-4f94-845e-0120afbf1435",
            "tags": "clickfix,etherhiding,stealer",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1863471": [
        {
            "ioc_value": "134.209.42.122:9895",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 17:41:00",
            "last_seen_utc": "2026-08-14 14:56:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6ed07eee8b090ad8c77052912c8a29a6,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1863476": [
        {
            "ioc_value": "s7n9i1si.opticamarcopolo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 17:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863475": [
        {
            "ioc_value": "ukqkvcn.raajanarts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 17:29:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863474": [
        {
            "ioc_value": "qixdhq.portman-photos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 17:29:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863472": [
        {
            "ioc_value": "raajanarts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 17:26:31",
            "last_seen_utc": "2026-08-07 00:19:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863462": [
        {
            "ioc_value": "https://telemetryworks.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 17:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/telemetryworks.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863463": [
        {
            "ioc_value": "https://rne8b0wt5znenjp.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 17:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rne8b0wt5znenjp.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863461": [
        {
            "ioc_value": "8g3y2cjr.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 16:55:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863460": [
        {
            "ioc_value": "kdwaemkx.stefsoregano.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 16:53:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863458": [
        {
            "ioc_value": "mwdgig.plumberservices.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 16:44:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863457": [
        {
            "ioc_value": "kmgfuvu.queensparkhotel.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 16:43:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863455": [
        {
            "ioc_value": "queensparkhotel.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 16:41:06",
            "last_seen_utc": "2026-08-07 00:19:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863453": [
        {
            "ioc_value": "aaaa1.guiowow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6b23cd237e6eff4720e9bb1835113b04735092d556dbe89f93a4099229ef77e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863454": [
        {
            "ioc_value": "aa.sxghzj.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f6b23cd237e6eff4720e9bb1835113b04735092d556dbe89f93a4099229ef77e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863443": [
        {
            "ioc_value": "vqjlbv.pizzadays.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:58:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863442": [
        {
            "ioc_value": "pizzadays.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:57:38",
            "last_seen_utc": "2026-08-07 00:19:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863441": [
        {
            "ioc_value": "nlbuiak.ptologisticsandfreight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:57:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863440": [
        {
            "ioc_value": "185.53.179.146:7527",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 15:55:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa1e87294fdee8bb644eefa9d72dfc8751aec4aeb47104edaf83447f397f3802/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863439": [
        {
            "ioc_value": "http://vifroup.biz:7527",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 15:55:41",
            "last_seen_utc": "2026-07-31 17:02:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa1e87294fdee8bb644eefa9d72dfc8751aec4aeb47104edaf83447f397f3802/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863438": [
        {
            "ioc_value": "ptologisticsandfreight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:55:29",
            "last_seen_utc": "2026-07-30 13:37:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863437": [
        {
            "ioc_value": "evyahvhbwbsxufviky.energyrefundhelpline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:42:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863435": [
        {
            "ioc_value": "zapas-xoga-cig.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:13:50",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863434": [
        {
            "ioc_value": "npoxns.pinellascountyroofers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863433": [
        {
            "ioc_value": "pinellascountyroofers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:11:52",
            "last_seen_utc": "2026-08-07 00:19:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863432": [
        {
            "ioc_value": "puffvny.premiumrent-car.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:11:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863431": [
        {
            "ioc_value": "pineapplevacationrentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 15:10:48",
            "last_seen_utc": "2026-07-29 15:11:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863429": [
        {
            "ioc_value": "http://strmer.top:5292",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 15:09:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1863424": [
        {
            "ioc_value": "https://sietefarma.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 15:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sietefarma.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863423": [
        {
            "ioc_value": "2hzfeoep.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:32:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863422": [
        {
            "ioc_value": "porky94124.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 14:28:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863421": [
        {
            "ioc_value": "wwjgeu.phomaivietnameserestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:27:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863420": [
        {
            "ioc_value": "phomaivietnameserestaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:24:58",
            "last_seen_utc": "2026-08-07 00:19:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863419": [
        {
            "ioc_value": "wupvgbt.prairiefurnitureshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:24:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863417": [
        {
            "ioc_value": "cbrldu.phoenixfactory.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:20:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863416": [
        {
            "ioc_value": "lgteexx.witchwatchchapters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863415": [
        {
            "ioc_value": "phoenixfactory.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 14:14:40",
            "last_seen_utc": "2026-07-30 12:57:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863411": [
        {
            "ioc_value": "http://greenns.biz:2930",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 13:55:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1863410": [
        {
            "ioc_value": "vrzslhe.wisconsinriveroutfitters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:53:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863409": [
        {
            "ioc_value": "blebxzj.wing88.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:40:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863408": [
        {
            "ioc_value": "telemetryworks.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:38:49",
            "last_seen_utc": "2026-08-06 05:06:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863407": [
        {
            "ioc_value": "waihzc.phoenixdistnc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:38:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863406": [
        {
            "ioc_value": "phoenixdistnc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:35:41",
            "last_seen_utc": "2026-08-07 00:19:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863403": [
        {
            "ioc_value": "bs-deliver-e817.61d8f0e6ac62c139abd08ba5.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 13:27:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/89ad58a61c6a774c0b66e5fba4a0e7fb83018ed3c27d7d82b910c19f55b41975/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863404": [
        {
            "ioc_value": "mexproudhipping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 13:27:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/89ad58a61c6a774c0b66e5fba4a0e7fb83018ed3c27d7d82b910c19f55b41975/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863405": [
        {
            "ioc_value": "yellow-smoke-3d0d.yellow-smoke.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 13:27:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/89ad58a61c6a774c0b66e5fba4a0e7fb83018ed3c27d7d82b910c19f55b41975/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863402": [
        {
            "ioc_value": "vjdvle.wasteoilparts.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863401": [
        {
            "ioc_value": "qjadqgu.wildwingpreservepoa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:07:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863400": [
        {
            "ioc_value": "uocoxj.viveheadspa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 13:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863395": [
        {
            "ioc_value": "https://ziegler-partner.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 13:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ziegler-partner.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863394": [
        {
            "ioc_value": "stdirhh.westpacifichomefashions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 12:28:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863390": [
        {
            "ioc_value": "http://103.181.160.201:37308/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 12:23:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.181.160.201",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863391": [
        {
            "ioc_value": "http://115.51.43.20:46643/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 12:23:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.51.43.20",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1863393": [
        {
            "ioc_value": "jomcc8wd.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 12:22:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863392": [
        {
            "ioc_value": "vfmvcd.vivaan-sharma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 12:20:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863382": [
        {
            "ioc_value": "y4ihhq2f.lollipupspetgrooming.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 11:54:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863381": [
        {
            "ioc_value": "t4mrfbgj.liberty--token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 11:53:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863379": [
        {
            "ioc_value": "8qiew2ns.en-bizopp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 11:51:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863378": [
        {
            "ioc_value": "14.225.212.124:30005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 11:47:01",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863377": [
        {
            "ioc_value": "sqslyax.weisfeedbacksurvey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 11:39:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863376": [
        {
            "ioc_value": "smgvty.villas-restaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 11:36:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863374": [
        {
            "ioc_value": "https://www.customspliance.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 11:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.customspliance.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863375": [
        {
            "ioc_value": "https://www.docteur-garcia.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 11:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.docteur-garcia.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863358": [
        {
            "ioc_value": "sietefarma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 11:14:22",
            "last_seen_utc": "2026-08-18 07:27:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/4078",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1863370": [
        {
            "ioc_value": "http://94.103.1.175/hidbqweiuybdf2836hifwoHADES/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 11:14:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "th972"
        }
    ],
    "1863371": [
        {
            "ioc_value": "http://94.103.1.175/hidbqweiuybdf2836hifwoHADES/ifgoI9f9KFBKjvbmskasdkb.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 11:14:20",
            "last_seen_utc": "2026-07-29 11:10:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "th972"
        }
    ],
    "1863372": [
        {
            "ioc_value": "http://94.103.1.175/hidbqweiuybdf2836hifwoHADES/ijfcdbhjnidefarpgjbiuearhjgui9wehj38725yhfeehj.ps1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 11:14:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "th972"
        }
    ],
    "1863373": [
        {
            "ioc_value": "http://94.103.1.175/hidbqweiuybdf2836hifwoHADES/siweiw4iekxaiw21cbdsaw.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 11:14:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "th972"
        }
    ],
    "1863369": [
        {
            "ioc_value": "oldmon56121.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 11:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863365": [
        {
            "ioc_value": "ixejqlu.wavelu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 10:53:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863363": [
        {
            "ioc_value": "zhdten.paparomanospizzaclintontownship.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 10:45:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863362": [
        {
            "ioc_value": "http://43.228.157.66",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 10:35:47",
            "last_seen_utc": "2026-08-27 07:29:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99cd8530772b5bb986883ebfd09410bfd5328581a3e993472826eda78d6e3405/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863361": [
        {
            "ioc_value": "http://2.27.5.214",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-29 10:35:45",
            "last_seen_utc": "2026-08-27 07:29:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/798b6a521d6763f1b684f6d2a6c91e3eab92425dbd9265372a132aba1e213c5f/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863357": [
        {
            "ioc_value": "crcmb1nm.goodangpao.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 10:14:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863356": [
        {
            "ioc_value": "acisvwr.zodiacsmoke.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 10:08:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863355": [
        {
            "ioc_value": "zodiacsmoke.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 10:06:52",
            "last_seen_utc": "2026-08-07 00:14:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863349": [
        {
            "ioc_value": "hkbtnx.pamsribbonsandroses.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 10:01:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863348": [
        {
            "ioc_value": "iswypre.zalabia.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 09:47:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863346": [
        {
            "ioc_value": "93.152.223.222:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-29 09:46:12",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863347": [
        {
            "ioc_value": "93.152.223.224:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-29 09:46:12",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863345": [
        {
            "ioc_value": "86.106.119.24:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 09:46:05",
            "last_seen_utc": "2026-08-28 18:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863344": [
        {
            "ioc_value": "84.201.20.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 09:46:02",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863342": [
        {
            "ioc_value": "156.247.40.164:889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-29 09:45:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/324126d263910469357915525f2637ec1b0a2a6b875399b96c979687fed86e40/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863341": [
        {
            "ioc_value": "67.210.97.40:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 09:45:54",
            "last_seen_utc": "2026-09-01 02:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863340": [
        {
            "ioc_value": "43.206.219.14:10002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 09:45:29",
            "last_seen_utc": "2026-08-28 18:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863339": [
        {
            "ioc_value": "23.94.252.80:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-29 09:45:17",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863338": [
        {
            "ioc_value": "wrm.sm188xxzx.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-29 09:44:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863337": [
        {
            "ioc_value": "195.177.94.11:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 09:44:21",
            "last_seen_utc": "2026-08-28 18:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863336": [
        {
            "ioc_value": "193.233.198.62:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 09:44:19",
            "last_seen_utc": "2026-08-29 18:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863335": [
        {
            "ioc_value": "178.16.53.65:1907",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-29 09:44:01",
            "last_seen_utc": "2026-09-01 02:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863333": [
        {
            "ioc_value": "168.222.97.120:1447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 09:43:54",
            "last_seen_utc": "2026-08-29 18:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863334": [
        {
            "ioc_value": "169.58.50.199:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 09:43:54",
            "last_seen_utc": "2026-08-29 18:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863332": [
        {
            "ioc_value": "167.148.41.137:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 09:43:52",
            "last_seen_utc": "2026-08-28 18:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863329": [
        {
            "ioc_value": "15.235.151.49:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 09:43:36",
            "last_seen_utc": "2026-08-28 18:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863330": [
        {
            "ioc_value": "15.235.151.49:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 09:43:36",
            "last_seen_utc": "2026-08-28 18:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863331": [
        {
            "ioc_value": "15.235.151.49:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 09:43:36",
            "last_seen_utc": "2026-08-28 18:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863326": [
        {
            "ioc_value": "https://cheloks.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 09:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cheloks.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863327": [
        {
            "ioc_value": "https://maletoks.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 09:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/maletoks.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863328": [
        {
            "ioc_value": "https://lokripi.icu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 09:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lokripi.icu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1863325": [
        {
            "ioc_value": "dcgnyc.nathanaelappliances.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 09:22:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863324": [
        {
            "ioc_value": "hngbkm.wifewithabudget.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 09:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863323": [
        {
            "ioc_value": "wifewithabudget.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 09:16:15",
            "last_seen_utc": "2026-07-29 09:16:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863317": [
        {
            "ioc_value": "ydmtrvn.zagspizzamenu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 09:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1863316": [
        {
            "ioc_value": "zagspizzamenu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 09:00:26",
            "last_seen_utc": "2026-08-07 00:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1863315": [
        {
            "ioc_value": "94.26.3.166:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:54",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863313": [
        {
            "ioc_value": "93.152.221.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:52",
            "last_seen_utc": "2026-08-28 18:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863314": [
        {
            "ioc_value": "94.154.32.252:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:52",
            "last_seen_utc": "2026-08-27 12:47:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863312": [
        {
            "ioc_value": "91.92.40.56:9267",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:50",
            "last_seen_utc": "2026-08-29 18:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863311": [
        {
            "ioc_value": "89.213.118.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:48",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863310": [
        {
            "ioc_value": "64.224.17.110:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:34",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863309": [
        {
            "ioc_value": "51.79.185.253:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:29",
            "last_seen_utc": "2026-09-01 02:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863308": [
        {
            "ioc_value": "5.253.86.251:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:27",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863305": [
        {
            "ioc_value": "45.89.48.12:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:22",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863306": [
        {
            "ioc_value": "45.89.48.12:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:22",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863307": [
        {
            "ioc_value": "45.89.48.12:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:22",
            "last_seen_utc": "2026-09-01 02:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863304": [
        {
            "ioc_value": "45.192.211.63:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:16",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863301": [
        {
            "ioc_value": "45.157.233.124:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:15",
            "last_seen_utc": "2026-08-28 18:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863302": [
        {
            "ioc_value": "45.157.233.124:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:15",
            "last_seen_utc": "2026-08-28 18:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863303": [
        {
            "ioc_value": "45.157.233.124:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:15",
            "last_seen_utc": "2026-08-27 18:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863300": [
        {
            "ioc_value": "45.153.34.203:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:14",
            "last_seen_utc": "2026-08-28 18:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863299": [
        {
            "ioc_value": "27.124.36.151:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:59:00",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863298": [
        {
            "ioc_value": "27.124.36.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:59",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863295": [
        {
            "ioc_value": "217.156.122.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:52",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863296": [
        {
            "ioc_value": "217.60.195.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:52",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863297": [
        {
            "ioc_value": "217.60.195.167:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:52",
            "last_seen_utc": "2026-09-01 02:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863294": [
        {
            "ioc_value": "209.99.190.23:55012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:17",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863292": [
        {
            "ioc_value": "194.9.6.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:05",
            "last_seen_utc": "2026-09-01 02:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863274": [
        {
            "ioc_value": "www.video-evenementielle.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863275": [
        {
            "ioc_value": "www.villaadimari.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863278": [
        {
            "ioc_value": "www.zelvito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863280": [
        {
            "ioc_value": "wyndham.thanhlongbay.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863281": [
        {
            "ioc_value": "xn--80ae3ajjh.xn--p1ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863282": [
        {
            "ioc_value": "xn--96-6kchpsw1brcl.xn--p1ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863285": [
        {
            "ioc_value": "xvertuz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863286": [
        {
            "ioc_value": "yogatherapy.co.il",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863289": [
        {
            "ioc_value": "zaloharcpohoda.webproukazku.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:04",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863258": [
        {
            "ioc_value": "www.residences-anna.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863260": [
        {
            "ioc_value": "www.silentcroc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863261": [
        {
            "ioc_value": "www.sobatbangilan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863263": [
        {
            "ioc_value": "www.soolah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863264": [
        {
            "ioc_value": "www.strategicgamedesigner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863265": [
        {
            "ioc_value": "www.sudeventishow.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863266": [
        {
            "ioc_value": "www.tekamousa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863267": [
        {
            "ioc_value": "www.tiptoes.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863268": [
        {
            "ioc_value": "www.town-labs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863271": [
        {
            "ioc_value": "www.ultimax-perform.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863272": [
        {
            "ioc_value": "www.usgeneralservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:03",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863255": [
        {
            "ioc_value": "193.164.5.4:9991",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:02",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863239": [
        {
            "ioc_value": "www.lmsprinting.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863240": [
        {
            "ioc_value": "www.lovetospa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863241": [
        {
            "ioc_value": "192.229.115.162:56004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863242": [
        {
            "ioc_value": "www.massatelier-dresden.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863243": [
        {
            "ioc_value": "www.mediation.brussels",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863244": [
        {
            "ioc_value": "www.metalhefesto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863245": [
        {
            "ioc_value": "www.mvihtrucks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863247": [
        {
            "ioc_value": "www.newlifeliveaboard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863248": [
        {
            "ioc_value": "www.ntpardavimai.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863250": [
        {
            "ioc_value": "www.onironautica.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863251": [
        {
            "ioc_value": "www.optimaingenieria.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863253": [
        {
            "ioc_value": "www.paginaypantalla.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863219": [
        {
            "ioc_value": "www.imep.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863221": [
        {
            "ioc_value": "www.inspiresdining.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863222": [
        {
            "ioc_value": "www.irandavari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863224": [
        {
            "ioc_value": "www.ja82.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863225": [
        {
            "ioc_value": "www.jbtrans.cz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863226": [
        {
            "ioc_value": "www.juleshidrot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863227": [
        {
            "ioc_value": "www.jwero.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863230": [
        {
            "ioc_value": "192.229.115.154:56004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863234": [
        {
            "ioc_value": "192.229.115.156:56004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863235": [
        {
            "ioc_value": "www.lagostarwire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863236": [
        {
            "ioc_value": "www.landudal.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863237": [
        {
            "ioc_value": "192.229.115.162:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-09-01 02:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863238": [
        {
            "ioc_value": "www.latelierdupedalboard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:58:00",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863205": [
        {
            "ioc_value": "www.educacioninicial.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863206": [
        {
            "ioc_value": "www.el-jarad.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863209": [
        {
            "ioc_value": "www.fabrica.cat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863211": [
        {
            "ioc_value": "www.geama.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863212": [
        {
            "ioc_value": "www.gklazer.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863214": [
        {
            "ioc_value": "www.heartsready.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863216": [
        {
            "ioc_value": "www.iadanzaimmobiliare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:45:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863218": [
        {
            "ioc_value": "www.imag-innove.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:59",
            "last_seen_utc": "2026-08-28 11:45:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863191": [
        {
            "ioc_value": "www.bellona-ts.ch",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863194": [
        {
            "ioc_value": "www.boervindt.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863195": [
        {
            "ioc_value": "www.cacoach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863198": [
        {
            "ioc_value": "www.delmonteschool.edu.gt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863199": [
        {
            "ioc_value": "www.detaydenizcilik.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863201": [
        {
            "ioc_value": "www.dibellaorologi.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863203": [
        {
            "ioc_value": "www.dpic-computers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:58",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863176": [
        {
            "ioc_value": "www.6cifernybiznis.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863177": [
        {
            "ioc_value": "www.9adhity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863178": [
        {
            "ioc_value": "www.adamconsultings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863179": [
        {
            "ioc_value": "www.afurniture.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863180": [
        {
            "ioc_value": "www.agriplaya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863182": [
        {
            "ioc_value": "www.andreinformatique17.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863183": [
        {
            "ioc_value": "www.antivirusprogram.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863185": [
        {
            "ioc_value": "www.apsflooringandcarpet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863186": [
        {
            "ioc_value": "www.artesanosdonbosco-bo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863188": [
        {
            "ioc_value": "www.asturianadetratamientos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863189": [
        {
            "ioc_value": "www.aviajarmayoreo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:57",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863158": [
        {
            "ioc_value": "varalearning.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863160": [
        {
            "ioc_value": "veloraspa.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863161": [
        {
            "ioc_value": "viajantemuquirana.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863163": [
        {
            "ioc_value": "victororsolin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863164": [
        {
            "ioc_value": "185.247.208.91:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863167": [
        {
            "ioc_value": "virtusbo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863169": [
        {
            "ioc_value": "185.254.99.153:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863170": [
        {
            "ioc_value": "website-wizard.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863171": [
        {
            "ioc_value": "weddingspartiesentertainment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863172": [
        {
            "ioc_value": "wildwoodwoolery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863173": [
        {
            "ioc_value": "wismakaka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863174": [
        {
            "ioc_value": "writingunderconstruction.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:56",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863140": [
        {
            "ioc_value": "triedandtrueroofing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863141": [
        {
            "ioc_value": "trimstudio.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863142": [
        {
            "ioc_value": "trithucso.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863143": [
        {
            "ioc_value": "truelandscaping.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863145": [
        {
            "ioc_value": "tudodoporco.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863147": [
        {
            "ioc_value": "tvmtimes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863149": [
        {
            "ioc_value": "ubaristimaroc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863151": [
        {
            "ioc_value": "ugandancommunitypta.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863152": [
        {
            "ioc_value": "ukacademichelp.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863153": [
        {
            "ioc_value": "ultimapharma.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863155": [
        {
            "ioc_value": "vageeshsabharwal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863156": [
        {
            "ioc_value": "valvaaortae.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:55",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863126": [
        {
            "ioc_value": "thelifeafterdeath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863127": [
        {
            "ioc_value": "theluxurywatchreviews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863128": [
        {
            "ioc_value": "themarriageadventure.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863129": [
        {
            "ioc_value": "therealitalianfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863130": [
        {
            "ioc_value": "thetahealingforpets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863132": [
        {
            "ioc_value": "tiorienta.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863135": [
        {
            "ioc_value": "totalanders.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863137": [
        {
            "ioc_value": "tradewindslog.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863138": [
        {
            "ioc_value": "transition.inc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:54",
            "last_seen_utc": "2026-08-28 11:44:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863107": [
        {
            "ioc_value": "t2gcarpetclean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863108": [
        {
            "ioc_value": "takarahoabinh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863109": [
        {
            "ioc_value": "take30habits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863113": [
        {
            "ioc_value": "tapchinuocmy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863114": [
        {
            "ioc_value": "taphoacohoa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863116": [
        {
            "ioc_value": "tech-sport.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863117": [
        {
            "ioc_value": "techniqueprefa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863118": [
        {
            "ioc_value": "tecnocapgroup.academy",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863119": [
        {
            "ioc_value": "tem.baotanghdh.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863120": [
        {
            "ioc_value": "terrybryanfitness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863121": [
        {
            "ioc_value": "tesladiagnosticclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863122": [
        {
            "ioc_value": "test.tafra.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863123": [
        {
            "ioc_value": "theagencystudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:53",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863088": [
        {
            "ioc_value": "socarcolombia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-26 21:54:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863089": [
        {
            "ioc_value": "185.174.101.235:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-09-01 02:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863090": [
        {
            "ioc_value": "sodart.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863091": [
        {
            "ioc_value": "softgroup.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863093": [
        {
            "ioc_value": "southernpublicadjusters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863095": [
        {
            "ioc_value": "sriaadhyafashions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863096": [
        {
            "ioc_value": "starnetsas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863098": [
        {
            "ioc_value": "stradaproperties.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863100": [
        {
            "ioc_value": "studioathos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863104": [
        {
            "ioc_value": "supaglass.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863105": [
        {
            "ioc_value": "supportnrcc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863106": [
        {
            "ioc_value": "svenraben.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:52",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863069": [
        {
            "ioc_value": "scott-weiss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863070": [
        {
            "ioc_value": "sdc.contact",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863071": [
        {
            "ioc_value": "serenapiercerealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863072": [
        {
            "ioc_value": "shaanpainting.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863074": [
        {
            "ioc_value": "shahrevarzesh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863075": [
        {
            "ioc_value": "sherqnav.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863077": [
        {
            "ioc_value": "shorty.ae",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863079": [
        {
            "ioc_value": "simelicuir.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863081": [
        {
            "ioc_value": "skillsfirstconsultancy.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863082": [
        {
            "ioc_value": "skinbeauty.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863084": [
        {
            "ioc_value": "smhtc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863085": [
        {
            "ioc_value": "smilemanchester.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:51",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863055": [
        {
            "ioc_value": "rv2.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863058": [
        {
            "ioc_value": "salientspmgt.co.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863060": [
        {
            "ioc_value": "samsarahtlv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863062": [
        {
            "ioc_value": "santamonicaconsultoria.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863064": [
        {
            "ioc_value": "sarikarangani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863065": [
        {
            "ioc_value": "saslo.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863068": [
        {
            "ioc_value": "schwanzer-taborsky.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:50",
            "last_seen_utc": "2026-08-28 11:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863051": [
        {
            "ioc_value": "181.215.242.78:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:48",
            "last_seen_utc": "2026-08-27 18:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863052": [
        {
            "ioc_value": "181.215.242.84:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:48",
            "last_seen_utc": "2026-08-27 18:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863050": [
        {
            "ioc_value": "178.211.155.64:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:46",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863049": [
        {
            "ioc_value": "178.16.53.65:2828",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:45",
            "last_seen_utc": "2026-08-31 18:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863048": [
        {
            "ioc_value": "176.96.136.230:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:44",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863047": [
        {
            "ioc_value": "176.96.136.230:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:43",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863045": [
        {
            "ioc_value": "163.5.210.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:36",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863046": [
        {
            "ioc_value": "167.148.41.137:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:36",
            "last_seen_utc": "2026-08-29 18:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863044": [
        {
            "ioc_value": "160.119.69.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:33",
            "last_seen_utc": "2026-09-01 02:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863043": [
        {
            "ioc_value": "158.94.210.70:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:32",
            "last_seen_utc": "2026-09-01 02:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863041": [
        {
            "ioc_value": "151.242.63.129:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:21",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863042": [
        {
            "ioc_value": "151.242.97.15:56831",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:21",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863040": [
        {
            "ioc_value": "140.228.29.61:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:57:12",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1863025": [
        {
            "ioc_value": "redesignedbasics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863028": [
        {
            "ioc_value": "regtc.ru",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863030": [
        {
            "ioc_value": "resolvevisionary.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863031": [
        {
            "ioc_value": "responsealert.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863033": [
        {
            "ioc_value": "rhino-watch-lodge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863036": [
        {
            "ioc_value": "ronewspress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863037": [
        {
            "ioc_value": "roofguard.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:09",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863008": [
        {
            "ioc_value": "pokiesonline.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863009": [
        {
            "ioc_value": "polygonplay.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863011": [
        {
            "ioc_value": "pontosdecontato.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863012": [
        {
            "ioc_value": "popcorntalknetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863014": [
        {
            "ioc_value": "premioperiodismofps.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863015": [
        {
            "ioc_value": "presovskamapka.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863016": [
        {
            "ioc_value": "prestrec.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863021": [
        {
            "ioc_value": "psyventures.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:08",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862991": [
        {
            "ioc_value": "optykwyszkow.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862992": [
        {
            "ioc_value": "organichennatattoo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862993": [
        {
            "ioc_value": "orionplus.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862994": [
        {
            "ioc_value": "ormarabeach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862995": [
        {
            "ioc_value": "otrportugal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863001": [
        {
            "ioc_value": "pghrealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863002": [
        {
            "ioc_value": "phoenixperimental.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863004": [
        {
            "ioc_value": "plannews.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1863007": [
        {
            "ioc_value": "playunleash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:07",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862976": [
        {
            "ioc_value": "nailpro.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862978": [
        {
            "ioc_value": "nordgeek.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862981": [
        {
            "ioc_value": "nrccvictory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862982": [
        {
            "ioc_value": "nucrisann.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862983": [
        {
            "ioc_value": "odontomais.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862985": [
        {
            "ioc_value": "ogradi.mk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862987": [
        {
            "ioc_value": "onewprodutos.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862988": [
        {
            "ioc_value": "ongwafy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862989": [
        {
            "ioc_value": "onlinesolutionsbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:06",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862964": [
        {
            "ioc_value": "modulovve.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:05",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862966": [
        {
            "ioc_value": "monaco-daquisto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:05",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862971": [
        {
            "ioc_value": "mousseconfort.tg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:05",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862973": [
        {
            "ioc_value": "muynuevo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:05",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862974": [
        {
            "ioc_value": "myfjamaica.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:05",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862975": [
        {
            "ioc_value": "mypulsepointclinic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:05",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862945": [
        {
            "ioc_value": "medecbeauty.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862946": [
        {
            "ioc_value": "mediatechdirect.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862948": [
        {
            "ioc_value": "melissaheeter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862949": [
        {
            "ioc_value": "merahputihpanjipustaka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862952": [
        {
            "ioc_value": "mettypellicer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862953": [
        {
            "ioc_value": "micei.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862954": [
        {
            "ioc_value": "micromobile.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862955": [
        {
            "ioc_value": "midwestguy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862956": [
        {
            "ioc_value": "minhphusteel.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862957": [
        {
            "ioc_value": "miorganicsolutions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862958": [
        {
            "ioc_value": "missionviejocarpetcleaning.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862959": [
        {
            "ioc_value": "mitrakelana.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862960": [
        {
            "ioc_value": "miyelo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:04",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862929": [
        {
            "ioc_value": "londonoil.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862930": [
        {
            "ioc_value": "lucrandocominfluenciadores.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862933": [
        {
            "ioc_value": "mahketapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862934": [
        {
            "ioc_value": "majorconstructionmpv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862935": [
        {
            "ioc_value": "man2manggarai.sch.id",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862938": [
        {
            "ioc_value": "marcmunoz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862939": [
        {
            "ioc_value": "martincreditservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862941": [
        {
            "ioc_value": "massage-kinesiologie-tassin.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862942": [
        {
            "ioc_value": "masterbaez.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862943": [
        {
            "ioc_value": "mattfriedmanbooks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862944": [
        {
            "ioc_value": "mcq.assamschool.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:03",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862917": [
        {
            "ioc_value": "landcapinvest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862918": [
        {
            "ioc_value": "lavadodemuebles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862919": [
        {
            "ioc_value": "lavalledeimulini.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862920": [
        {
            "ioc_value": "leaseoffers.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862921": [
        {
            "ioc_value": "lettresenvoyage.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862922": [
        {
            "ioc_value": "levezacompany.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862923": [
        {
            "ioc_value": "light-shadow-av.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862927": [
        {
            "ioc_value": "logistics-ca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862928": [
        {
            "ioc_value": "lojaamucc.org.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:02",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862914": [
        {
            "ioc_value": "lafittefishing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:01",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862915": [
        {
            "ioc_value": "lagospark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:01",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862916": [
        {
            "ioc_value": "lamiacameraconvista.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:01",
            "last_seen_utc": "2026-08-28 11:45:34",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862899": [
        {
            "ioc_value": "kashmirishawlbazar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862902": [
        {
            "ioc_value": "kerapodo.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862904": [
        {
            "ioc_value": "kevinprendergast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862906": [
        {
            "ioc_value": "kidslearningessentials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862907": [
        {
            "ioc_value": "kingabor.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862908": [
        {
            "ioc_value": "kirkmanbespokewoodworking.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862911": [
        {
            "ioc_value": "kopsinvestment.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:57:00",
            "last_seen_utc": "2026-08-28 11:42:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862881": [
        {
            "ioc_value": "ingridsouzapediatra.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862882": [
        {
            "ioc_value": "internalrevenue-taxation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862883": [
        {
            "ioc_value": "iopings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862886": [
        {
            "ioc_value": "italiaintasca.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862888": [
        {
            "ioc_value": "ivycapitalgroup.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862889": [
        {
            "ioc_value": "jackscompletetreeservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862893": [
        {
            "ioc_value": "jennifer-campbell.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862896": [
        {
            "ioc_value": "jobdne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862897": [
        {
            "ioc_value": "kalerbiborton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:59",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862864": [
        {
            "ioc_value": "hoteleliseo.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:45:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862865": [
        {
            "ioc_value": "hotelshuktara.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862866": [
        {
            "ioc_value": "hubcity626home.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862867": [
        {
            "ioc_value": "humanologie.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862869": [
        {
            "ioc_value": "ibmicrofisioterapia.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862871": [
        {
            "ioc_value": "idonialuxe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862877": [
        {
            "ioc_value": "immodev.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862878": [
        {
            "ioc_value": "implexions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 03:36:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862879": [
        {
            "ioc_value": "infinityviptourism.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:58",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862859": [
        {
            "ioc_value": "hebertwellnessgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:57",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862861": [
        {
            "ioc_value": "hivemindpress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:56:57",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862853": [
        {
            "ioc_value": "103.114.218.145:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 08:56:51",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862852": [
        {
            "ioc_value": "gushaironfadli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:56",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862835": [
        {
            "ioc_value": "gasdei.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862836": [
        {
            "ioc_value": "gazixpress.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862837": [
        {
            "ioc_value": "gen-ev-racing.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862839": [
        {
            "ioc_value": "gitesdusenegal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862840": [
        {
            "ioc_value": "gjb-art.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862841": [
        {
            "ioc_value": "gmhouse.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862843": [
        {
            "ioc_value": "go88qc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862844": [
        {
            "ioc_value": "gogeekhaus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862849": [
        {
            "ioc_value": "greenpack.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:55",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862817": [
        {
            "ioc_value": "fcri.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862818": [
        {
            "ioc_value": "ferzaadvocacia.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862819": [
        {
            "ioc_value": "fff24.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862821": [
        {
            "ioc_value": "firstpandr.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862822": [
        {
            "ioc_value": "fitnowcoach.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862824": [
        {
            "ioc_value": "floridataxlawgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862825": [
        {
            "ioc_value": "fluminvestments.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862826": [
        {
            "ioc_value": "fmdistribucionesdeltolima.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862827": [
        {
            "ioc_value": "formationesoterique.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862828": [
        {
            "ioc_value": "fredandannette.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862829": [
        {
            "ioc_value": "freelancair.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862830": [
        {
            "ioc_value": "fruitique.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862833": [
        {
            "ioc_value": "funnel.kreatifabrik.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:54",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862800": [
        {
            "ioc_value": "elevatedcreationstudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862801": [
        {
            "ioc_value": "elitebusinessagents.com.au",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862802": [
        {
            "ioc_value": "elitetcgboosterboxsupply.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862803": [
        {
            "ioc_value": "emwmgroupuk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862804": [
        {
            "ioc_value": "energizermedia.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862805": [
        {
            "ioc_value": "engageandretainllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862806": [
        {
            "ioc_value": "enjoymxxn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862807": [
        {
            "ioc_value": "enseigne-magasin.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862810": [
        {
            "ioc_value": "espert-tp.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:42:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862811": [
        {
            "ioc_value": "estudionero.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:42:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862813": [
        {
            "ioc_value": "excellencecollisioncenter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862815": [
        {
            "ioc_value": "eyonservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862816": [
        {
            "ioc_value": "fareitalia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:53",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862784": [
        {
            "ioc_value": "dimas-garage.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862785": [
        {
            "ioc_value": "discover3dx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862786": [
        {
            "ioc_value": "diviziaalbastra.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862788": [
        {
            "ioc_value": "dmeibelectric.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862789": [
        {
            "ioc_value": "dragoncurvegames.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862791": [
        {
            "ioc_value": "drcanergelbal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862792": [
        {
            "ioc_value": "drclaretrimbur.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862793": [
        {
            "ioc_value": "dressagejudge.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862795": [
        {
            "ioc_value": "eccentricliving.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862799": [
        {
            "ioc_value": "elektrikclothing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:52",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862767": [
        {
            "ioc_value": "cruisevacationhq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862773": [
        {
            "ioc_value": "darshnand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862775": [
        {
            "ioc_value": "demo.restaurant-centre-annecy.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862776": [
        {
            "ioc_value": "deonlineleasevergelijker.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862777": [
        {
            "ioc_value": "desarmac.cl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862778": [
        {
            "ioc_value": "detalance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862780": [
        {
            "ioc_value": "dialogueetperformance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862781": [
        {
            "ioc_value": "dianaturecare.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862782": [
        {
            "ioc_value": "dietistafaffini.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862783": [
        {
            "ioc_value": "digirisk.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:51",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862750": [
        {
            "ioc_value": "cestmuhendislik.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862751": [
        {
            "ioc_value": "changethefrequency.today",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862752": [
        {
            "ioc_value": "chogonfacilities.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862753": [
        {
            "ioc_value": "christmasinlou.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862755": [
        {
            "ioc_value": "ciccioroomsandbreakfast.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862758": [
        {
            "ioc_value": "cltassessoria.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862759": [
        {
            "ioc_value": "clubespanol.org.ar",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862760": [
        {
            "ioc_value": "cobourgparadise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862762": [
        {
            "ioc_value": "conseil-ab.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862763": [
        {
            "ioc_value": "coolflowers.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862764": [
        {
            "ioc_value": "coolplace.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862765": [
        {
            "ioc_value": "corporate-solutions.com.pk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:50",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862732": [
        {
            "ioc_value": "browardbusinessnetworkinggroup.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862735": [
        {
            "ioc_value": "buceo-professional.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862736": [
        {
            "ioc_value": "butaart.gallery",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862737": [
        {
            "ioc_value": "cakecafealghero.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862738": [
        {
            "ioc_value": "callfreecertified.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862740": [
        {
            "ioc_value": "cardiocentrope.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862741": [
        {
            "ioc_value": "carecleaningks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862742": [
        {
            "ioc_value": "cashformichiganhouses.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862743": [
        {
            "ioc_value": "castlemeats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862745": [
        {
            "ioc_value": "cavegreen.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862746": [
        {
            "ioc_value": "cbdxtremsports.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862748": [
        {
            "ioc_value": "centrosan.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:49",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862715": [
        {
            "ioc_value": "behtarinfa.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862717": [
        {
            "ioc_value": "bethelchildrenministryug.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862718": [
        {
            "ioc_value": "binnovo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862719": [
        {
            "ioc_value": "birdlifeforums.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862722": [
        {
            "ioc_value": "blaydz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862723": [
        {
            "ioc_value": "blog.publiregal.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862725": [
        {
            "ioc_value": "bluesdrummer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862726": [
        {
            "ioc_value": "bnbgest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862727": [
        {
            "ioc_value": "bnsdaily.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862728": [
        {
            "ioc_value": "boettcher-gug.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862731": [
        {
            "ioc_value": "brentesoncompanies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:48",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862698": [
        {
            "ioc_value": "armeh.com.tr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862706": [
        {
            "ioc_value": "atakumpsikoteknik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862707": [
        {
            "ioc_value": "atelieveartes.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862708": [
        {
            "ioc_value": "atemarabuluculuk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862711": [
        {
            "ioc_value": "azoo.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:47",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862712": [
        {
            "ioc_value": "badercondominium.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:47",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862684": [
        {
            "ioc_value": "amaassociates.co.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862685": [
        {
            "ioc_value": "amirclean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862686": [
        {
            "ioc_value": "amour-divin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862687": [
        {
            "ioc_value": "ampeplast.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862688": [
        {
            "ioc_value": "amphortech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862690": [
        {
            "ioc_value": "anilmangalscam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862691": [
        {
            "ioc_value": "anpeiex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862695": [
        {
            "ioc_value": "archconceptbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862696": [
        {
            "ioc_value": "archiviolavorosergioparenzan.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:46",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862669": [
        {
            "ioc_value": "92qatari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862673": [
        {
            "ioc_value": "addexpress.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862674": [
        {
            "ioc_value": "addigitalhn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862676": [
        {
            "ioc_value": "administraciones-sg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862679": [
        {
            "ioc_value": "air2cad.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862680": [
        {
            "ioc_value": "ajbt.com.tw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862681": [
        {
            "ioc_value": "alpha89.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862682": [
        {
            "ioc_value": "altanomea.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:55:45",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Mac,wordpress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862667": [
        {
            "ioc_value": "mathandchessss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:53:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862666": [
        {
            "ioc_value": "casinodas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:53:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862665": [
        {
            "ioc_value": "sex-reputation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:53:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862664": [
        {
            "ioc_value": "enter-code-cdn.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:52:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862654": [
        {
            "ioc_value": "metricvault.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862655": [
        {
            "ioc_value": "pagestatix.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862656": [
        {
            "ioc_value": "pixelinsights.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862657": [
        {
            "ioc_value": "porky94124.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862658": [
        {
            "ioc_value": "rokkykopi.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862659": [
        {
            "ioc_value": "siteinsights.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862660": [
        {
            "ioc_value": "cloudeccentric.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862661": [
        {
            "ioc_value": "trackmetrica.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862662": [
        {
            "ioc_value": "webpulsedata.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862663": [
        {
            "ioc_value": "webtracelab.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:58",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862647": [
        {
            "ioc_value": "beacontrace.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-28 11:40:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862648": [
        {
            "ioc_value": "diseltank12.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862649": [
        {
            "ioc_value": "googlanalitlcs.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862650": [
        {
            "ioc_value": "gpixx.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862651": [
        {
            "ioc_value": "insightpixel.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862652": [
        {
            "ioc_value": "krainerpi89124.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862653": [
        {
            "ioc_value": "metrictrace.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 08:52:57",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862646": [
        {
            "ioc_value": "go-vin-hi.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:52:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862645": [
        {
            "ioc_value": "cheloks.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:50:21",
            "last_seen_utc": "2026-08-06 04:51:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862644": [
        {
            "ioc_value": "kal.zeuss4d.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862643": [
        {
            "ioc_value": "maletoks.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 08:50:19",
            "last_seen_utc": "2026-07-29 20:15:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862642": [
        {
            "ioc_value": "acqapxu.yumasiancommercecity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:45:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862641": [
        {
            "ioc_value": "yumasiancommercecity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:45:02",
            "last_seen_utc": "2026-08-07 00:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862640": [
        {
            "ioc_value": "mlydvb.whimsyweddingsco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:41:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862639": [
        {
            "ioc_value": "whimsyweddingsco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:38:23",
            "last_seen_utc": "2026-08-07 00:14:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862638": [
        {
            "ioc_value": "155.103.69.213:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 08:34:23",
            "last_seen_utc": "2026-08-03 01:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1862637": [
        {
            "ioc_value": "xsdxey.westpacifichomefashions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:15:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862636": [
        {
            "ioc_value": "shpu1xz9.gdcpemasaranbekasi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:13:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862635": [
        {
            "ioc_value": "westpacifichomefashions.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:12:04",
            "last_seen_utc": "2026-07-29 12:23:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862634": [
        {
            "ioc_value": "westicbyfatima.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:10:34",
            "last_seen_utc": "2026-08-07 00:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862629": [
        {
            "ioc_value": "rzbcftp.yorubapriestess.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 08:01:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862628": [
        {
            "ioc_value": "yorubapriestess.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:59:50",
            "last_seen_utc": "2026-08-07 00:14:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1862627": [
        {
            "ioc_value": "bmguom.weisfeedbacksurvey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:55:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862626": [
        {
            "ioc_value": "143.92.61.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-29 07:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862624": [
        {
            "ioc_value": "ubqnkx.wavelu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861871": [
        {
            "ioc_value": "oldmon56121.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:04",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861872": [
        {
            "ioc_value": "analyze-me3.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:04",
            "last_seen_utc": "2026-08-23 17:24:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862126": [
        {
            "ioc_value": "trokorypi451.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:04",
            "last_seen_utc": "2026-08-23 17:24:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862128": [
        {
            "ioc_value": "cirkoborpi.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862129": [
        {
            "ioc_value": "toureurpi51924.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862130": [
        {
            "ioc_value": "bottlerapi.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862132": [
        {
            "ioc_value": "beffitepi.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:02",
            "last_seen_utc": "2026-08-23 17:24:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862133": [
        {
            "ioc_value": "borrnopi.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862134": [
        {
            "ioc_value": "lokripi.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862135": [
        {
            "ioc_value": "bognervopi.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862136": [
        {
            "ioc_value": "voyag413.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:43:00",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862137": [
        {
            "ioc_value": "passpi6611.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862138": [
        {
            "ioc_value": "brosbropi5124.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862139": [
        {
            "ioc_value": "easy-pixx321.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:55",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862140": [
        {
            "ioc_value": "tablebable2231.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862141": [
        {
            "ioc_value": "red-flag2141.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862142": [
        {
            "ioc_value": "laquepipix.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862143": [
        {
            "ioc_value": "bubblepix2.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862144": [
        {
            "ioc_value": "doogle-pixel.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:50",
            "last_seen_utc": "2026-07-29 01:29:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862145": [
        {
            "ioc_value": "pixxarting24141.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862146": [
        {
            "ioc_value": "hainzpixx241.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862147": [
        {
            "ioc_value": "nickylody124.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862148": [
        {
            "ioc_value": "tobascopixxx24.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862149": [
        {
            "ioc_value": "projitkar.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862150": [
        {
            "ioc_value": "breackhave11.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862151": [
        {
            "ioc_value": "darkcelebrate21.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862152": [
        {
            "ioc_value": "yearbeauty214.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862153": [
        {
            "ioc_value": "beautyfev.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862154": [
        {
            "ioc_value": "ohlly-mohly.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862155": [
        {
            "ioc_value": "priem-pixart.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862156": [
        {
            "ioc_value": "analyze-me6.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:37",
            "last_seen_utc": "2026-08-28 11:40:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862157": [
        {
            "ioc_value": "send-preobi.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862158": [
        {
            "ioc_value": "usual-pixx12.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:36",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862159": [
        {
            "ioc_value": "crazy-gas.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862160": [
        {
            "ioc_value": "univers22.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862161": [
        {
            "ioc_value": "olvo42131.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862162": [
        {
            "ioc_value": "sodapixerr.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862163": [
        {
            "ioc_value": "growpix31.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862164": [
        {
            "ioc_value": "pixeldocs123.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862165": [
        {
            "ioc_value": "ilinspix.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862166": [
        {
            "ioc_value": "pixel-dixel.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862167": [
        {
            "ioc_value": "drampix2421.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862168": [
        {
            "ioc_value": "goodpix21341.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862169": [
        {
            "ioc_value": "pixelart341.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862170": [
        {
            "ioc_value": "visitorflow.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:31",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862171": [
        {
            "ioc_value": "pixellanalit213.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1862172": [
        {
            "ioc_value": "fire-grass12.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:30",
            "last_seen_utc": "2026-08-23 17:24:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861835": [
        {
            "ioc_value": "fairpi521.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:27",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861839": [
        {
            "ioc_value": "pixelmetrics.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:27",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861840": [
        {
            "ioc_value": "kineticnode.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:26",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861841": [
        {
            "ioc_value": "analyticshore.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:26",
            "last_seen_utc": "2026-08-28 11:40:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861842": [
        {
            "ioc_value": "rukkolpi55.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:26",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861843": [
        {
            "ioc_value": "googlanalitlcs.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:25",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861844": [
        {
            "ioc_value": "googlanalitlcs.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:25",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861845": [
        {
            "ioc_value": "datapixel.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:25",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861846": [
        {
            "ioc_value": "rokkyho32.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:24",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861848": [
        {
            "ioc_value": "norkapi41.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:22",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861847": [
        {
            "ioc_value": "metricspixel.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:21",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861849": [
        {
            "ioc_value": "wailciry9911.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:20",
            "last_seen_utc": "2026-08-23 17:24:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861850": [
        {
            "ioc_value": "logicvault.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:20",
            "last_seen_utc": "2026-08-28 11:40:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861851": [
        {
            "ioc_value": "clickstream.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:20",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861852": [
        {
            "ioc_value": "torrybok11.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:42:19",
            "last_seen_utc": "2026-08-23 17:24:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861860": [
        {
            "ioc_value": "mathandchessss.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 07:42:19",
            "last_seen_utc": "2026-08-15 20:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861861": [
        {
            "ioc_value": "casinodas.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 07:42:18",
            "last_seen_utc": "2026-08-15 20:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861862": [
        {
            "ioc_value": "sex-reputation.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-29 07:42:16",
            "last_seen_utc": "2026-08-15 20:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861767": [
        {
            "ioc_value": "road.swedencentral.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-29 07:42:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861768": [
        {
            "ioc_value": "downloadupdate.centralus.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-29 07:42:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861769": [
        {
            "ioc_value": "softwarecube.eastus.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-29 07:42:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861770": [
        {
            "ioc_value": "pool.swedencentral.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-29 07:42:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861775": [
        {
            "ioc_value": "176.96.136.230:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 07:42:09",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861776": [
        {
            "ioc_value": "31.57.184.154:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 07:42:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861777": [
        {
            "ioc_value": "45.192.211.7:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 07:42:09",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861778": [
        {
            "ioc_value": "103.68.109.13:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 07:42:08",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861779": [
        {
            "ioc_value": "151.242.63.149:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 07:42:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861780": [
        {
            "ioc_value": "176.96.136.230:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-29 07:42:08",
            "last_seen_utc": "2026-09-01 02:44:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861784": [
        {
            "ioc_value": "130.94.7.119:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:07",
            "last_seen_utc": "2026-08-28 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861785": [
        {
            "ioc_value": "62.85.47.141:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:07",
            "last_seen_utc": "2026-08-01 05:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861786": [
        {
            "ioc_value": "157.20.182.22:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:06",
            "last_seen_utc": "2026-07-30 08:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861787": [
        {
            "ioc_value": "157.20.182.22:1338",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:05",
            "last_seen_utc": "2026-07-29 23:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861788": [
        {
            "ioc_value": "157.20.182.21:9992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:04",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861789": [
        {
            "ioc_value": "76.74.220.138:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:03",
            "last_seen_utc": "2026-08-01 06:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861790": [
        {
            "ioc_value": "195.177.94.11:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:03",
            "last_seen_utc": "2026-07-31 21:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861791": [
        {
            "ioc_value": "195.177.94.11:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:42:02",
            "last_seen_utc": "2026-08-01 15:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861800": [
        {
            "ioc_value": "jkqhdbbbqwiujkaz.hopto.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 07:42:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1861782": [
        {
            "ioc_value": "googlanalitlcs.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:55",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861783": [
        {
            "ioc_value": "217.76.50.71:5292",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 07:41:55",
            "last_seen_utc": "2026-08-07 12:18:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861792": [
        {
            "ioc_value": "http://103.174.243.204:39667/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 07:41:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.204",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1861793": [
        {
            "ioc_value": "104.200.67.224:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:41:53",
            "last_seen_utc": "2026-08-28 08:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861794": [
        {
            "ioc_value": "34.48.100.231:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-29 07:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsynRat,Server",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1861858": [
        {
            "ioc_value": "137.184.156.157:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-29 07:41:50",
            "last_seen_utc": "2026-08-01 05:25:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861889": [
        {
            "ioc_value": "snake.zooparkko.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 07:41:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/nma-io/adblock_lists/commit/d5cdf35bc67c832f34a4aa7095f4b4ee96c90ac4",
            "tags": "Base,ClearFake-lineage,ClickFix,ECDH,etherhiding,exfil,nochain,telemetry",
            "anonymous": 0,
            "reporter": "gorkemmulayim"
        }
    ],
    "1862111": [
        {
            "ioc_value": "http://124.29.247.76:57576/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 07:41:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.247.76",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1862131": [
        {
            "ioc_value": "162.243.163.143:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-29 07:41:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1862184": [
        {
            "ioc_value": "161.35.125.247:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-29 07:41:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1862180": [
        {
            "ioc_value": "167.172.80.107:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-29 07:41:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1862201": [
        {
            "ioc_value": "217.60.195.187:1302",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 07:41:38",
            "last_seen_utc": "2026-08-01 14:40:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1862574": [
        {
            "ioc_value": "http://202.63.209.175:41894/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 07:41:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.63.209.175",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1862575": [
        {
            "ioc_value": "http://101.53.228.209:59139/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 07:41:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.228.209",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1862576": [
        {
            "ioc_value": "http://103.174.243.201:44562/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-29 07:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.201",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1862581": [
        {
            "ioc_value": "r1l.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862578": [
        {
            "ioc_value": "xsdyxio.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862579": [
        {
            "ioc_value": "vjscloudjsns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862580": [
        {
            "ioc_value": "senterprise2026.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862582": [
        {
            "ioc_value": "ntdnewtds.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862584": [
        {
            "ioc_value": "primeamzabo008.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862583": [
        {
            "ioc_value": "sdntds.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:31",
            "last_seen_utc": "2026-07-30 15:00:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862585": [
        {
            "ioc_value": "package.customer.private.fheo.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862588": [
        {
            "ioc_value": "flickystream.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862586": [
        {
            "ioc_value": "kinarshikix.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862587": [
        {
            "ioc_value": "imagss.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862589": [
        {
            "ioc_value": "bestellernews.blog",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862590": [
        {
            "ioc_value": "api.appliedsecondperformer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862591": [
        {
            "ioc_value": "ameli-monespace.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862592": [
        {
            "ioc_value": "freelancer-ch.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862593": [
        {
            "ioc_value": "dnsnewtds.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "iocmonster"
        }
    ],
    "1862606": [
        {
            "ioc_value": "91.199.133.133:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 07:41:16",
            "last_seen_utc": "2026-07-29 13:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1862616": [
        {
            "ioc_value": "102.208.217.10:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 07:41:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/376f66963489712e9cf479b7bd7540f24bc3019a712ac1b341466515e81a9b88/",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1861870": [
        {
            "ioc_value": "a8ab5c112f0e6f7f2762b0f96fd16da312af98820d46a79f58689abdb679d561",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 07:41:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a8ab5c112f0e6f7f2762b0f96fd16da312af98820d46a79f58689abdb679d561",
            "tags": "Base,ClearFake-lineage,ClickFix,etherhiding,HTA,mp3-polyglot,mshta,nochain,pcalua,vbsdropper",
            "anonymous": 0,
            "reporter": "gorkemmulayim"
        }
    ],
    "1861758": [
        {
            "ioc_value": "45.74.3.37:9111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-29 07:41:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1861760": [
        {
            "ioc_value": "bornilob43.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:05",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861763": [
        {
            "ioc_value": "webgleam.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:04",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861764": [
        {
            "ioc_value": "borny51221.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-29 07:41:03",
            "last_seen_utc": "2026-08-23 17:24:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861765": [
        {
            "ioc_value": "175.119.7.220:81",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-29 07:41:03",
            "last_seen_utc": "2026-08-18 15:43:48",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,miner,postgresql,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1861766": [
        {
            "ioc_value": "168.144.138.186:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-29 07:41:02",
            "last_seen_utc": "2026-08-03 09:33:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1862623": [
        {
            "ioc_value": "uewtda.wavelu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862621": [
        {
            "ioc_value": "154.12.94.16:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 07:32:16",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862620": [
        {
            "ioc_value": "117.72.199.102:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 07:32:11",
            "last_seen_utc": "2026-08-31 12:48:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862619": [
        {
            "ioc_value": "120.48.87.172:82",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 07:32:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862618": [
        {
            "ioc_value": "154.12.94.16:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 07:31:57",
            "last_seen_utc": "2026-08-27 07:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862617": [
        {
            "ioc_value": "enter-code-cdn.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:31:17",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862615": [
        {
            "ioc_value": "iksjjq.wasteoilparts.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:26:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862614": [
        {
            "ioc_value": "cloudeccentric.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:26:17",
            "last_seen_utc": "2026-08-14 02:20:42",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862612": [
        {
            "ioc_value": "go-vin-hi.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:21:16",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862611": [
        {
            "ioc_value": "eevsoni.witchwatchchapters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 07:16:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862605": [
        {
            "ioc_value": "c00l53nm.libertytokan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862604": [
        {
            "ioc_value": "slxzdcef.lebertytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862601": [
        {
            "ioc_value": "epnoyy.viveheadspa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:40:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862599": [
        {
            "ioc_value": "iivwka.vivaan-sharma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:35:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862598": [
        {
            "ioc_value": "ljqwjle.wisconsinriveroutfitters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:33:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862595": [
        {
            "ioc_value": "wwlhzmx.wing88.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:24:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862594": [
        {
            "ioc_value": "djdfav.villas-restaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:24:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862573": [
        {
            "ioc_value": "71549eced18fa532dc060d19cae80549",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862563": [
        {
            "ioc_value": "e1304008377fc7543623fa074332f9ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862564": [
        {
            "ioc_value": "9d5512a57dfdc484cb7ee15668ab6e22",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862565": [
        {
            "ioc_value": "7e1d6a44d1cf118a3752e17972a4d69c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862566": [
        {
            "ioc_value": "6e48cac4d3c77d28baa0af812fcfa14d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862567": [
        {
            "ioc_value": "2a2e7fcb543a1bc5450a064443b859f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862568": [
        {
            "ioc_value": "8b9b33a5183fde571a18583844432eb3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862569": [
        {
            "ioc_value": "57b96ee6816786701cf48f14c4879246",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862570": [
        {
            "ioc_value": "132ecf2b880c66b69420a9bcee3e1837",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862571": [
        {
            "ioc_value": "bae6af6c2c189ad4bf7d0262e4cec9c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862572": [
        {
            "ioc_value": "98a84ac4fb48cd5fbad9ead7bfae3bf3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862554": [
        {
            "ioc_value": "f22089ecc61519c668e9f7ae4f0fe372",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862555": [
        {
            "ioc_value": "47bf6bfc52defe05b87d0e04e3d92c45",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862556": [
        {
            "ioc_value": "0a4479f7ab080e8504c4f00b29a67068",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862557": [
        {
            "ioc_value": "26ba1146f36c3703f94ce7e5602cd3da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862558": [
        {
            "ioc_value": "10a08ec8fd17e9b73e62568d5ab8a9b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862559": [
        {
            "ioc_value": "634b1183d01be4d8ffb806a4827ed879",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862560": [
        {
            "ioc_value": "8741c48f70c18d6337558bbd676f5a0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862561": [
        {
            "ioc_value": "59eec747286f1e89ce96fef39f9de3e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862562": [
        {
            "ioc_value": "6c90215b8a560ecb2f5f2430b1f2e016",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862548": [
        {
            "ioc_value": "454dc3fc0921ce440ec8780b8e5992fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862549": [
        {
            "ioc_value": "2cb2a55af83803b57caa53a21dec20b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862550": [
        {
            "ioc_value": "f18129ea81b3b5690cfd1300397db51e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862551": [
        {
            "ioc_value": "b95b574d4233b2cbc00ad5bc0e1721e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862552": [
        {
            "ioc_value": "5ea12c54a54b31b61629188545e432cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862553": [
        {
            "ioc_value": "7abe5257dbe779a37c1715a3d8e2bdfd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862540": [
        {
            "ioc_value": "79871e44f79f36393c2c9beb8e366125",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862541": [
        {
            "ioc_value": "bfc156c3a0cbd4c38eb1cfd1d22231ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862542": [
        {
            "ioc_value": "e9cb900e57154d6469dae21c82a1753b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862543": [
        {
            "ioc_value": "cc492729431765a9bc9cbf54625a6dac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862544": [
        {
            "ioc_value": "fe1cfddb7b44cec0b5c37769934a2ee9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862545": [
        {
            "ioc_value": "804bf188fd3fd4d9afdbc1ff0d020cda",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862546": [
        {
            "ioc_value": "0b7af822f9c85668d446d0d6d26903cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862547": [
        {
            "ioc_value": "8dbdef6108e6b202ecc0570c9e96d76b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862537": [
        {
            "ioc_value": "e320bb753ba6fb13ea7ef15e7efc315e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862538": [
        {
            "ioc_value": "49800f6e90bf6019da4a13639032642f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862539": [
        {
            "ioc_value": "5b2f54fbca30e9a282f3d8b461e03a17",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:11:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.welivesecurity.com/2023/05/25/shedding-light-acecryptor-operation/",
            "tags": "acecryptor,crypter",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862536": [
        {
            "ioc_value": "gepskmb.wildwingpreservepoa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:11:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862535": [
        {
            "ioc_value": "i1s4s2bo.disnakerkopjambikota.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:08:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862534": [
        {
            "ioc_value": "47.96.254.114:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 06:05:06",
            "last_seen_utc": "2026-08-20 05:38:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862531": [
        {
            "ioc_value": "xfktqi.villas-restaurant.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 06:04:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862529": [
        {
            "ioc_value": "https://www.guvenceliotoelektrik.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 06:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.guvenceliotoelektrik.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1862528": [
        {
            "ioc_value": "inzngil.wildwingpreservepoa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:51:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862526": [
        {
            "ioc_value": "aotkjl.petgroomercoralsprings.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:51:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862523": [
        {
            "ioc_value": "102.204.223.106:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-29 05:46:21",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1862522": [
        {
            "ioc_value": "nqvtmc.parkwayheightsptsa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:46:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862521": [
        {
            "ioc_value": "http://brigne.top:7673",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-29 05:45:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1862517": [
        {
            "ioc_value": "qfbmigz.palmdriverv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:36:50",
            "last_seen_utc": "2026-07-29 05:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862516": [
        {
            "ioc_value": "gyzszdt.paintjg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:22:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862510": [
        {
            "ioc_value": "xhpbhqm.paintjg.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:04:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862508": [
        {
            "ioc_value": "opclds.nathanaelappliances.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 05:00:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862507": [
        {
            "ioc_value": "npoaouq.oviedoflhandyman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 04:59:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862503": [
        {
            "ioc_value": "wpwcdep.ordertacosdoncuco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 04:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862502": [
        {
            "ioc_value": "nfokarr.ordertacosdoncuco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 04:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862478": [
        {
            "ioc_value": "39a0d65704ec87db105f0ace0b42d1ad566bbdc06ed431e24d82a79aae0df404",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862479": [
        {
            "ioc_value": "0f53f8eb1183cd246b541b4c2ccdf7bd1197aea25b0c3ebddaa6c086494acdc6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862480": [
        {
            "ioc_value": "de0f1964ef89a84ea7d3d91f79d4d3e050e09af63f030c115334826deb82220f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862481": [
        {
            "ioc_value": "1d9ba23a657f2c5eaea64c7a5aa96b628f0c23f371bfa6e74ac9bc9abc0efc93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862482": [
        {
            "ioc_value": "11a65ab2a65dac3e4adf3b0688dc0d4f345f6e3c519377c911346913c19489eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862483": [
        {
            "ioc_value": "34f9b16d363f1bd44d912a62ee0745985ac696b6c4aaf4799a9b2b37d11720e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862484": [
        {
            "ioc_value": "326536a0bcb9198049da10f4873446393c0f7ceb91098aecdd39a94f6d691112",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862485": [
        {
            "ioc_value": "8796e69f738fceb99fd177a5536dbccf5112ffa202a8b05be10ab45e600e289b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862486": [
        {
            "ioc_value": "53e315669d72051a4add2e28938733dc116bb46fdc05dcda1958e7ea466812ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862487": [
        {
            "ioc_value": "c9417d4683324c34c7b976395c01f79150a626966e27144244214423aa64ccde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862488": [
        {
            "ioc_value": "1985db0655bca27343a13d8607904c53a292459083daa8c92ae2f71a5408b40a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862489": [
        {
            "ioc_value": "92fc7f45d4968df95bc082220680c9ebd6a381a9467f77493878af031454d633",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862490": [
        {
            "ioc_value": "0cd5240c696194cf2eb701cd4d4ca81e7f17612a4042ebb56959008d66537b4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862491": [
        {
            "ioc_value": "93da3f615d041dc37a4b3db4a3d0c60bfd3c3fb1fc3ff4d5b764c646b629da7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862492": [
        {
            "ioc_value": "06fe6a157bd3f67ae9f7cdf3478a0db670c2772b584cae5900d2473b6b109bb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862493": [
        {
            "ioc_value": "a397bea4c70bf3264348c88fca652fcbb2d421832672fa58a790af67bf419469",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862494": [
        {
            "ioc_value": "f016df16d0f34aaae36bf10e0ca6bccdce2a4d552fcc6444e6f48318ef0b2c4a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862495": [
        {
            "ioc_value": "bc93fb67cf4dba8c35e91b551ca3190db25ffa4a36f821bc5a6b900927470fb9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862496": [
        {
            "ioc_value": "d715b248f71cd6ba4fcc78b89e9184ff5f0a04b9d02790bcbc30e13c040d3973",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862497": [
        {
            "ioc_value": "cf3befb087ca768d1dcd4eee9dc75c9adb1ca26bce74865c9005da1c2c794274",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862498": [
        {
            "ioc_value": "1e399538c41be1c39566a00c95b78b39186510254e24562ec53a414ad74c23a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862499": [
        {
            "ioc_value": "2e3876a4a2e1d7456dbc95a254b419de25a9b26d2bab3d98d8c9ff0faa43b48c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862500": [
        {
            "ioc_value": "80d36c0476b5de983271b65665bb6997eb58316bc3c151f04b045f45ef80784c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862442": [
        {
            "ioc_value": "0fe055fa1863bc057a95d034d33c76271bd786f7fd75a01bb16da1613a6d7ae5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862443": [
        {
            "ioc_value": "7dc80fb645025fbd06b59a6dcc246c0b2602031002170efe2cfd7e1080d7b74b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862444": [
        {
            "ioc_value": "aadf4fe439f5cb46133fcc36f254060f992b1f8d829798c7de0b62644205bc3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862445": [
        {
            "ioc_value": "5fb3541886c9e19bd7f30ba3c9076d3b99a7ca8ea3cf706aeca3f1d4ee992e1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862446": [
        {
            "ioc_value": "89c71a6283de527c1e5d2d663cce5c785d881860b4987e68782cf3c15c2ae201",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862447": [
        {
            "ioc_value": "0ed13355413a1ba44cd35dd556f1bf1dedd140d075407d696230b5989dfe6bc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862448": [
        {
            "ioc_value": "58413ad9398ebc7e19855228453470116d0d0a3fd7a97b6bdf2e5a080f753759",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862449": [
        {
            "ioc_value": "e0bb724a681e3d70c643b9cf68cade684a383bcba935b090080feae66144609c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862450": [
        {
            "ioc_value": "e271bffa0c221e49f3842066d67dad22381811ab46cfc765c5423b59ec5cc6ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862451": [
        {
            "ioc_value": "fe007df0a7a38e1903289e5ed9457ea87d2723c9d84f2a0c994987ee0f9e5a6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862452": [
        {
            "ioc_value": "f7a875663f7f24ad1d35d69021683734ae9235a84270b3b0558b04a97cd333af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862453": [
        {
            "ioc_value": "fa361c712381c82552952e348c36dca949329db6ea6088c7228c3884ebb0bfe7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862454": [
        {
            "ioc_value": "0b525c358266f139dc9b8311f71dc0c93fe36939a8ed8aedcc3dbe510e82269d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862455": [
        {
            "ioc_value": "e791ff4d28779b72bf7720b13bdb91a9be678c4b9f5a34e04d63d7a4b6f3777a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862456": [
        {
            "ioc_value": "c527ebf0bb60a09e78bc1b4605573d93fccc7df0d3776120dffff79e4ffccf45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862457": [
        {
            "ioc_value": "43fbd94e73040bc4db717018ba42a6139a72e000e19314bcc51beed9699385f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862458": [
        {
            "ioc_value": "58e8419426fba3b971dd6eb448d6932a5b10247f3e1725e9e36469428abb138c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862459": [
        {
            "ioc_value": "8c047ba01ef0db2b2057190d6c35a7c0e6965f465b0015d17b8c59c3767b2cf1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862460": [
        {
            "ioc_value": "1e3c621f7be6e0a8c220bdd01f7e242cd66fc666e0f91c43454d50bd06ae0359",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862461": [
        {
            "ioc_value": "7ac9fb3016067239ef2215fa65d2b82346a061fdb6f385e513f07c35936a4476",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862462": [
        {
            "ioc_value": "7494ad77dfaef8c1d03c3025d442477b4a645f263bcf997114e66eb53422efa2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862463": [
        {
            "ioc_value": "7fc9ae64edb1864290156397d1baad0b56ce110623b73cd4d8c2b15ead3cdb07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862464": [
        {
            "ioc_value": "2d78ccb074929ea9134063306229d29fbd5416b8d2e720e4e91b92822ed49bbd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862465": [
        {
            "ioc_value": "58e4c1a9530ea6236fffb02ad3fb9dff7c4462e71942a64f564373e7930cb8b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862466": [
        {
            "ioc_value": "370415c872a4ca6e1974cafb2950c3d31259ebdbba4952a81253272cd6b4f93b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862467": [
        {
            "ioc_value": "29aa83fd9f601c6163c0c1b0cd6335c30e726e00337ac1312a7f42d2daffbefb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862468": [
        {
            "ioc_value": "ceed9b497256fd017f5073edd0bdcb9b1923b633ae5f9fdd95b46c634ebd747e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862469": [
        {
            "ioc_value": "9e2d6e16e5572e6459bc257f4e6dc47b0b5f11663568bba2e9ad1e8a71165cd9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862470": [
        {
            "ioc_value": "4044ad92b73412a3ca0984bd1f2c4895641c82c437418271893bef418398714e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862471": [
        {
            "ioc_value": "f8850a32d2b21be78972966fa0cc0d809b997fa80eb27a2e0be95e83ffd21463",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862472": [
        {
            "ioc_value": "bde1040f09977c860333464af390159fffeb3a2156f0cc0607369c3115c2f2da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862473": [
        {
            "ioc_value": "b9e2dc057d51409703134f10245a7d47526e2ab5f9bc79b7511a9f8a30ce0381",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862474": [
        {
            "ioc_value": "012682ad8d6d0d65285f0b20af712be7714fb85da79bff03b11d35c6f6bb44b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862475": [
        {
            "ioc_value": "ec34fe8a0f0ad839f9e855291dbda5a1edf20579eff3b614164b1591616d5665",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862476": [
        {
            "ioc_value": "b5d2373db40a3a5486f8ae65bde5fdd0b023cb662604af919271ae71b4e8b488",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862477": [
        {
            "ioc_value": "ca1746a3f69bb20d4fb903e7789dbebc9e34e8310abb4065e0f47aadff289e7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862406": [
        {
            "ioc_value": "232a4e7068e14536bbc1479e0e22273c97919468da12537da504ea0d66abf779",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862407": [
        {
            "ioc_value": "160c2bf0d714c9a9d9c56e6760a3c922506bf0fb57a0473f9a0067892614b94e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862408": [
        {
            "ioc_value": "0e2e48d1f16f831880fcf0fc3b16a0d8fddadfa4bd490191f45e2dedd7ba219b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862409": [
        {
            "ioc_value": "f42e3dfef87ae24a421ce6616072e2bbca74970b3bbbec4125ad058e2801ccfe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862410": [
        {
            "ioc_value": "51855f7e9a105ac360d40a697b8cbe82b62253b200fdfa2b253cd37348437baa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862411": [
        {
            "ioc_value": "f6d6f0eda5bc913ed3aa5f7454deef33890c16d84feacedbbf23b4d654e354f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862412": [
        {
            "ioc_value": "7a4d8f331f77be61afdd684d6230c7a0f6c4b425f3da6a654fc33a3e34aa0424",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862413": [
        {
            "ioc_value": "379f08216187692afd15d3413faf3940dfad3487bd71fcea9d47e72f6319e7ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862414": [
        {
            "ioc_value": "52f3b8e6ec48eccb9bccc6446610ec032ab84f5d4915067faf909ac8631f9bd4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862415": [
        {
            "ioc_value": "67a43dc49860da9840b408ac398cc5ceb71a2e7a3e578f9a1882d9fa39eeee43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862416": [
        {
            "ioc_value": "8146512ee6692938d5819383f65078b01bbd24e70b80610812eabc72fc7a0dfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862417": [
        {
            "ioc_value": "422378c8d88a3c6f7a5ed6a1457d9f39f80dfe50a471ffab25b2c14742be1ac0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862418": [
        {
            "ioc_value": "5ffbc49baeb6dc62bcfe880a399ee7b2c3c867eaf7b0477c18ece1407476f3ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862419": [
        {
            "ioc_value": "ae7dec6a429386fc290f90ef9dbcb03c9d53cb7a3ae58ebefcc91c72ea88f862",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862420": [
        {
            "ioc_value": "ca910440c233d95b2d31ae962e2062727e6b245f604277f47e68cc15762aa856",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862421": [
        {
            "ioc_value": "0673151dcbe72413b3a0fc83610d3e20eb0fd6873b1b257458162d2f58b76b16",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862422": [
        {
            "ioc_value": "791c541c42231f48d3f8bd29533c3f7ac1c6f3f80685a2307c991373466e6b81",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862423": [
        {
            "ioc_value": "038e1590eecb1ee686dbdbe509d4732da626bf5fdf50e36b1362c900369ae303",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862424": [
        {
            "ioc_value": "a4c8a5bb1a0cdc8a3c1ca8d2aee48a04650955e18c40c3470baeee73bf1494f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862425": [
        {
            "ioc_value": "70eeb75f4497b7b05202b5d9973b5007bace05a1b9e7ee6af8a6fd570628c9e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862426": [
        {
            "ioc_value": "baa6c9dc99602d8d41a28f8ac66b8f5be52d8b9a80d722ade0e211ce42256034",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862427": [
        {
            "ioc_value": "1ba2b89f9601d1923c88bcb1643ab6b4c10a83dbae02975dbfafe76ebaac0431",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862428": [
        {
            "ioc_value": "6e2a7c11afdfc9efbbd457d773604779ec9a6c4a8e12f5f0c49a36218762bde3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862429": [
        {
            "ioc_value": "9f2d4616a5da3242ab4df76dbef0f249c5c2aa571839f41490e74c1255c779c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862430": [
        {
            "ioc_value": "3a062d89ebabec4f39c8fa5ea566edef4b878e97696decdcc93211da06d0146e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862431": [
        {
            "ioc_value": "6cac16c1d293d52d1a67469b76c8fb2cd85c904c065fbe8872688934a74e54a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862432": [
        {
            "ioc_value": "c41f1203e9636aa0fdb3d0a5b7ac3f089de8cee9cc1b60e03b62f42a21df360a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862433": [
        {
            "ioc_value": "28e3020c6d10a12c336b15c769456408f6dad117a0b1c517e7f51309828e6d46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862434": [
        {
            "ioc_value": "5d730ca497038224edc1dbc95abf5c449577d784e6e32394a42ffd4e19c4a13f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862435": [
        {
            "ioc_value": "f35d3bc78e311ea56b45c460d4f619c55175155d0eacd3853257377f2176d94c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862436": [
        {
            "ioc_value": "e675e210be59dde7f43a806cced67584388290440479f177d09a9fae02a5e74d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862437": [
        {
            "ioc_value": "1927c430e28e870dd515432b0f46566bb5e0fb8600d0af7adb2a636370043a58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862438": [
        {
            "ioc_value": "a06069fbce9c0832ed4e7e215daf44e00a2abd4475d0ebbb4f0d36ba7a3a5432",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862439": [
        {
            "ioc_value": "081882bd5f9d4fb87a645cdfef6df693a0c55dbb371502298ef9a9efe8113a83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862440": [
        {
            "ioc_value": "5592ac367236bac58ed39595aa2d347e85c24c4f20b1a4d0aa2ac271037a31a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862441": [
        {
            "ioc_value": "16d7e0549349f764eaaea3267044f521250c3e8144405c5f6435abe5c2c6b16d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862372": [
        {
            "ioc_value": "625f4561cd7ba2d98cbfdabe6788d0b2adfee79f80771351f90a1f4a45a6088d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862373": [
        {
            "ioc_value": "174cc34b798bc6dc908a81d60514eca8b7c952dec95fb95ff93853ef67bec120",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862374": [
        {
            "ioc_value": "0b94f8874c50048b002944ced54302a495ada18f4d8981f116464e48f823e72e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862375": [
        {
            "ioc_value": "5ca4e353e967561a746b8f1802ae1b1c740474f79a37cf4afa07fc81f83e854e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862376": [
        {
            "ioc_value": "54de3b50d3f0ea44ba98d8ab23e831ceac80e16d3372d03ffa044f5cae6538a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862377": [
        {
            "ioc_value": "5ad434ef409fc5f8b27e00116d264e566641e756f2bea74c1149bc2bf0cca8a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862378": [
        {
            "ioc_value": "82e94721d5d8aa302a965f21c71ed3287e12a164c35f4518f655526ec5a474f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862379": [
        {
            "ioc_value": "e79d3d1d61beb561bc83f435fde9ab3ee1e3285d57ace188b5d8fc839cb747f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862380": [
        {
            "ioc_value": "be991fccd6e197e6ec1e85190b0cbe275f16a425824f84c731aac47f86dc1dfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862381": [
        {
            "ioc_value": "29f9b5c29c472fb7982f1b22ae67daf1ffc9af48085275eadd812602d5e66de9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862382": [
        {
            "ioc_value": "1280bbdf4b9628cabf7965938da2e5457ff1ef11acf070c4fbaa8a96dbfcbf5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862383": [
        {
            "ioc_value": "e191f19dcae1cc820f908f5027fd8bc84da51b91e553c643eb910c0ac00e56cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862384": [
        {
            "ioc_value": "60e8e9b55ce9f2e14ef20ff909aded91a425e0cf6e8353309c5001c7c021b065",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862385": [
        {
            "ioc_value": "19ebc837de62715a8764ef775efa19159fef6d4055c19bf92434362326332d9b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862386": [
        {
            "ioc_value": "b41fbb400db71dc7ad047205caed21b396992d5d922f2f5243daa1281c431dd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862387": [
        {
            "ioc_value": "32acdcfffa711404692b499404a69cf42f420f650f636383441e86fbcd80e092",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862388": [
        {
            "ioc_value": "d6432cec40a4d968608bb2e4b87f415540b43ec462eed9c6fa66a5b3f439f566",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862389": [
        {
            "ioc_value": "a170471edf8bf07cf05309405d49eb8e65f9791e66523c875a59b117de95ed0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862390": [
        {
            "ioc_value": "937e3a0c8a0a1556d11ebaf9bce0ec1eafdf36e252e1a0d68b93ba662393197b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862391": [
        {
            "ioc_value": "f33fdb4d26e6bb0eab335528d8aa31a96fcd71b83694e65f1bd3716766e61af6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862392": [
        {
            "ioc_value": "09f7cd18b667aff1bc56f66082b8ffa6643eaf9aa84c18497e30f70010bd42e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862393": [
        {
            "ioc_value": "3ad617121d3eee56eb70ed2e7c7a0f5a2b784428e617f0ce14f0b000d45c79e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862394": [
        {
            "ioc_value": "bc90a45b02c0c3624cc97cde2473e924ca44ffdae3434cbb5008774de17eed18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862395": [
        {
            "ioc_value": "89a307ad2952efd5a84d76b894cbeac26e4eac8d45fa17ef7643d6ee61a7c2fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862396": [
        {
            "ioc_value": "ff6dc9997448c1064488ff06c5c8122813a5f8bdce3ecd26349ca7f21503d4e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862397": [
        {
            "ioc_value": "ca733d28bb82b09f6949764cc85890350fdbcdc5a43788fe5136eff8ff8657d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862398": [
        {
            "ioc_value": "8584b550b832cd1aa5e63d196b472c7d8d8c16b478cc9bbbc8b40a4f6523766f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862399": [
        {
            "ioc_value": "2b4805156bd8989160dcb6081bd8db4680391576f905d5173641b61477b6b35b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862400": [
        {
            "ioc_value": "bbc2078ca1572480c2bc962a00544f1800ea296954c10bab1b209456bab5ce02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862401": [
        {
            "ioc_value": "b3ece0b6b3270e196a8ab03f2d07485f3acc85b0857b4b4f0cfa87d61e10325e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862402": [
        {
            "ioc_value": "10e4275b3fb29bbae64dc321b2161363a63d7eb273cc59946df5b0439486fd7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862403": [
        {
            "ioc_value": "024a2da775ebefe9132f4ea924b887c47a6d017dc7191d3926f9e2e995af4541",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862404": [
        {
            "ioc_value": "5771a664985a61ca9651eb430671ab650387cf2b014168f3ce119bdd135b5bf2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862405": [
        {
            "ioc_value": "33746442e4a46a72341c289b1270ba3d30674845fa80049eeae3409a0b1dd5ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862336": [
        {
            "ioc_value": "7371964e50f86a7c75c3e8ece6718c7ef907fcf47e36df6f6d77eedfde4c3c18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862337": [
        {
            "ioc_value": "9bfcc89383b5f78223ab78a97f4a9225e8d51b0c4c5d986a6c198f3641a4f618",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862338": [
        {
            "ioc_value": "07fcbe250b26afe7aca6f7f77ecfc9ba62e90e77b5855741994cd987fdfbc111",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862339": [
        {
            "ioc_value": "3ed6aad8d611c6ae640f4a35603cf67ec7cb37e92f54b3767f154e3cad32ea4a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862340": [
        {
            "ioc_value": "7041c3d7c2267878d39c96d5f7fec38feb9096e70e4a12bda324ddeca104a813",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862341": [
        {
            "ioc_value": "42e031bc3fd744890f6985c50d28877f6fe24f43a01793fb6f72f630199b88bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862342": [
        {
            "ioc_value": "b5e425d07415f97a4603f8e2a3a26f588400ad54084b25f8e316721d27b7c0eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862343": [
        {
            "ioc_value": "4d7dbe6d5c49a153b887a2d719d925d5bdc969f305732f6321b4265b135fec76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862344": [
        {
            "ioc_value": "a7739b54e1affab228f47b83efd9e5a89d7cb35b0da49b8336006e130e2bb8c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862345": [
        {
            "ioc_value": "5c596af8c18ade54190a0aeca654305b43962e588d26b0f18ac8a57f9f0df9a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862346": [
        {
            "ioc_value": "45144fbe509b41892953753a8802ceb062b2ead89bf739e2dd2904527e94e987",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862347": [
        {
            "ioc_value": "f53d2beeef362438f1a41e6125fe18704484cd17783d2af8bd62476cf906b2c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862348": [
        {
            "ioc_value": "fe427e1e1ddb1f0df2af7ef9413d09db65026e257f5f1bcc94ad015df387dde8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862349": [
        {
            "ioc_value": "35e601c915b41c9ed94871f6df8405f3a342eca0dd7e6e6382c9b0db8ca85cee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862350": [
        {
            "ioc_value": "a09041f1524762f5a508a01bca6758c1caf1b7fd62b0d58a8e7bdc602e622731",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862351": [
        {
            "ioc_value": "64be2684d09948b84e8f1d950e5a287322574edc125d4472e6667a2d70a8001b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862352": [
        {
            "ioc_value": "4455018377448c002ec1a6dc6b33796dae6660edafc8bd23439a5f621c936dbe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862353": [
        {
            "ioc_value": "1b0fb53b43923fda796789eb391f2f0d39780e4043c154c43472bdcdd3edb10e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862354": [
        {
            "ioc_value": "aa73b5f32172ef14b41cf59f5558f74e4ac7272669d1b9df6a4a841a663259a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862355": [
        {
            "ioc_value": "eda58188efba65b6802231e32a97d06cf3332704009c6daa2a682b08f580a97d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862356": [
        {
            "ioc_value": "8549a5c7e77a83e8b9df25ad24096456fd735ed33e56881baf43d95e0ea5cb5e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862357": [
        {
            "ioc_value": "55c45a3897b9c47b6691e93bb9f022d24186061b9dea4e0b52bf1fc1a081308b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862358": [
        {
            "ioc_value": "d9e374b337803816e1199f1bad76785e4ca4aee512fde4acfa6507ea1c4feea3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862359": [
        {
            "ioc_value": "aa4c5a43311de95c9e1aa9b1771524b6d871af4439854053b1f091bdfa48b77f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862360": [
        {
            "ioc_value": "e26f458697db596ea8fe221a1be4380cc7d85b61c43b7fcb8e9252ca3ccd9194",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862361": [
        {
            "ioc_value": "eabfd16a780484f6ab9355ccc2648ebe77345c5cfc2ef3dc92e9657ca6323bf0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862362": [
        {
            "ioc_value": "909c755b58efd022ad661e2f64a0c500c7c30215d9f0b8e89641bd9aad72f574",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862363": [
        {
            "ioc_value": "2417a4fe2336e7f4c08989dda791f86ba44184f9f0d02ab6c69f7f7ff3b4331a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862364": [
        {
            "ioc_value": "3cca47917737e185941f82d8a048a1ee7c639c33dcc7c5b5a92e52ec157f3642",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862365": [
        {
            "ioc_value": "3ce76ff7990180fdf3871518ebf44f8316c9d49acc3241a6ddda6b508aa1800b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862366": [
        {
            "ioc_value": "e1dfb81784a4d69b59f16d330145032c3e54ead9ec87d2dc183ea40f87425aa2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862367": [
        {
            "ioc_value": "61c4feb4a792fb441aee5d88a1b37ceaefd583eada4b1f43c01a9db9576e4167",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862368": [
        {
            "ioc_value": "9ed0c12c1695a3bee1318f600ba33ad985dbe71e790d3780ab4293046b26ce7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862369": [
        {
            "ioc_value": "e01d4e4e5661eb7d236875fa28d70194d6f1f641e6e5afa23e88aa6b36dd5be8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862370": [
        {
            "ioc_value": "54b0321daa7f2f7b86e906d11053de06c6d8c4b209d07d3c3b5aa11a5dd3bbc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862371": [
        {
            "ioc_value": "e6e60a2bcdbf3466e393144bf44f5d1a370327f46cb8d524d045ee09272b929b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862301": [
        {
            "ioc_value": "4554ae89532f92c3367940424e37a0b4fdc91ea687a9d7b5273cc23e046ddc7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862302": [
        {
            "ioc_value": "512deed3d4c14b81d7ad17886b57325dc482a51a29700a28735093cd9762e1ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862303": [
        {
            "ioc_value": "11fe5d20dfef0dd7a1eff1773ae38434fd80f5050b156658698a941d04589764",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862304": [
        {
            "ioc_value": "72867f9c513fedf39f7f49677e0061922e2e86dfa706a0391366054641ce06c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862305": [
        {
            "ioc_value": "85db5fb12d1ff03cc159a73e3eb17a6e2c1b19fc6b2863de6c5da3b881e3f1e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862306": [
        {
            "ioc_value": "3c10570050e51b9e86aec891074b4ef8915bf1379ae5714f11509a700c45ab38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862307": [
        {
            "ioc_value": "971d843a6b4214521afc199cc471896e439a9bca431aa6ab3dd69711ad46cb89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862308": [
        {
            "ioc_value": "56d3c396e448ceaf13363209ee6ad84c724e332b4ae2fc1be997b6aeb5ae7aef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862309": [
        {
            "ioc_value": "4492ca03a554729a4b1d9f80fa9399d6e6bf2d697437bbc8bc436e997b45c87e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862310": [
        {
            "ioc_value": "c58a3abfc2a0ece42e4e5bf95aca1bdc7a233967eb1c7b9c3f01be2d4cde2398",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862311": [
        {
            "ioc_value": "b726e51f3924516f7f9c8348bd1e50fb6f31206e73b2a1fc38c311cf2a42388a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862312": [
        {
            "ioc_value": "23a4a605537befd60242892da0d63c51bbc559d9745af9a1ffcbfec3a13b4344",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862313": [
        {
            "ioc_value": "91881535193c934d07a331d25719c42ff2cc1ef28ef050a8d8887c63dbb8d908",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862314": [
        {
            "ioc_value": "47644c853c0c0f6f7055eaf9b341b781d3269d0b7f901d686a337c56498ccf64",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862315": [
        {
            "ioc_value": "8dd732712f2a05e36c6434f21a0bc1bd566f4337eb221f5ddcd370a9f3d38f5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862316": [
        {
            "ioc_value": "58695b86099b99aea0b4983c4ae9f8a19fcd9189f6cf673e983c630374c3e216",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862317": [
        {
            "ioc_value": "61268a31046c752bcf2a5d483c30b591d80ffc006370ae4c2e14102d5f9d2672",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862318": [
        {
            "ioc_value": "1df0b0bc3df64e6b60c2f68b2d0a79110a16e4b2077da4dfb0b9150fedcfa8d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862319": [
        {
            "ioc_value": "89b5cddba6d5f2591bcad63220f17b46e33c90b24ba61102207f86d900ab3ee0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862320": [
        {
            "ioc_value": "4cce4dd0d8076112d35adcde2792a2f529af992762c8fefc38c7da07e70d198f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862321": [
        {
            "ioc_value": "cb49a09e724b4a7a29aa41b5073e5891010aa6e35b3bc377fe31ac017dfc4de6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862322": [
        {
            "ioc_value": "f4bd2ae4955fc276b7f97a8245673175954bba527fe5f16e6ef42e2d37ca6259",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862323": [
        {
            "ioc_value": "8a6da18c3d7c764439b4ee84bfa6e81a6d5d67b85018130792527f209cf35537",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862324": [
        {
            "ioc_value": "3febbf9600874e0ba9289dc43ec547235be5e841c8f81bf313915dee62298243",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862325": [
        {
            "ioc_value": "79572061570e104abde98b2da178e6fb5330b5999ac72599e6732691feb80436",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862326": [
        {
            "ioc_value": "e49b3759facb697c9f6710ac34df3196ecfbea4d66902bb10f0fa7a485dc1e1c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862327": [
        {
            "ioc_value": "25024688ab876366152367d4162c461085d53d56d06f1fe949c58a3552677960",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862328": [
        {
            "ioc_value": "de914bb04df0eba814eae2251442371d6527d54e7b2ec071c97ff6f031eaac6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862329": [
        {
            "ioc_value": "ca48db078112f8aa977bc0a2235f8655f3b366d4c379a9e4cd9d95f8199cbc58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862330": [
        {
            "ioc_value": "af0f673bf28e46d4c949d9a1667c602f9f18f15ad67d44f599fcf0190ada355c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862331": [
        {
            "ioc_value": "63e501d69961fddfceccba3dd90b85e1d759259e549dfe99755d57984137b15f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862332": [
        {
            "ioc_value": "ec7354a2efb02d7591c9cb20825c2879eba991bb8eccd9d5e8eb37be186a4dd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862333": [
        {
            "ioc_value": "152da65cff400e71b32e7059b987be542809641d7435d59e2d6161d7824677e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862334": [
        {
            "ioc_value": "d9cc6c321d6a0c5855370dd518438367b1bef54df010292ea1dac067f1e3bac5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862335": [
        {
            "ioc_value": "5e3b6cc1b356d4426e1894b8f44d71c0b643d0b0e12fd80cdfe58557d342f4a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862267": [
        {
            "ioc_value": "2ad8b95dd0f8591986db4dded6e4dca28bab034b911b9314cdbf181a4d2aac9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862268": [
        {
            "ioc_value": "c0d7f9508b15e255b220130e4027f5589a13e10d1777614ae3434857628cdd27",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862269": [
        {
            "ioc_value": "ea2f2aaba27ffe7168ae2229a071bc01c53537b81b7c8c89e5dbc0a70567595b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862270": [
        {
            "ioc_value": "b84f56a25d71d0d5f38d071c2f46808ebdd793d72bee0bb28764fb26402ddcd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862271": [
        {
            "ioc_value": "f036745549ff9168a02938a5e5f8405e132cf9df9b27d464c7b7d220c1c72550",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862272": [
        {
            "ioc_value": "023752a3e813c7a2ee0a00c9d99cbb62cff2f13b7942f43c810e60ad2eb1d4bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862273": [
        {
            "ioc_value": "7580cf6049b8cac28512e3471b30389b92879035699868e93800e865c0c747f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862274": [
        {
            "ioc_value": "2976a5aaf1c258594740ce24b97b135f00084091f9964fffa49ab5a473202105",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862275": [
        {
            "ioc_value": "54f1ad47b341730aec924a400f5ed51e83eb4c1c734a451c251e808e3e7c6c3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862276": [
        {
            "ioc_value": "ffd664672112ebf57737a614d78d31b3aec52e39ec29199a4b94ef928e243398",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862277": [
        {
            "ioc_value": "37dcbdee165693d831653f66992621895d0bc8111003a5182073575f9bc9473d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862278": [
        {
            "ioc_value": "087303eebef7a184fb91463dde340cbd0690b31cb4f4b7326b2757ac5bcadfbc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862279": [
        {
            "ioc_value": "cf0af5f8c3fcc3a7947244612e1a02e8554e4399e77d43a7bc1f96c0a811a51c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862280": [
        {
            "ioc_value": "7f0493cf7ab1a2199ca080e3508f168ac2c312ef3628b95314abd76136d5fb5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862281": [
        {
            "ioc_value": "803efa77a5a4d74257d63b7910cca3add20b8bffbaea5107314cf95251ac284b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862282": [
        {
            "ioc_value": "c0a4a2f219b8047edc16106dcd3113d8f960571717e89f1ce967f170c1374cc5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862283": [
        {
            "ioc_value": "9e38b258c418cba719966f82cb4fd7c5ec606ac12e8b6f200578c882f0bfb1bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862284": [
        {
            "ioc_value": "c668c30acd456ad6250f829df800397fb6d3a9f557861b85ec60cc0d25e77766",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862285": [
        {
            "ioc_value": "cca43b176b1910a5106ff865fdb05c73c5f1e8332c1310ccd2db86c103a7f06f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862286": [
        {
            "ioc_value": "f5b0b9399024ae25043a6c965b942dca107a015f0aa618fbb1b5fe3aad65c335",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862287": [
        {
            "ioc_value": "8297711f66f29589de0356c1472357a240aca5e1c859f22fe0234d2e46ebe0ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862288": [
        {
            "ioc_value": "25ff7d5a45add5593b21bc9261e535dc29be999d781bfdd7ff4310d69dfb5b19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862289": [
        {
            "ioc_value": "dabf79b4a7d96da7fb7979928c8bb2fa974b6e57c53e1178168715b3c0df6571",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862290": [
        {
            "ioc_value": "2faa18264d458f665cd754a648646671a63cc25d8ebcedd15d7ba1535ed3b347",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862291": [
        {
            "ioc_value": "ef1f96a10eaafc490e1671e0c83cbd9d5894c91f89c4212700d1d840c4a303d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862292": [
        {
            "ioc_value": "cc7ee262abdb8d34a76a7039d4f9cb2a271164a432fefc5c766cbed9907eb933",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862293": [
        {
            "ioc_value": "70215e670586c66f80d67a115205856339e50bebf3eef5a75baff327737ad13a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862294": [
        {
            "ioc_value": "42126ec545c53f79bdda87696e1f34b8d2ab4696679c28a03bee922f9020b759",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862295": [
        {
            "ioc_value": "1b2814f8380ec9b34b533a1afc05e21465f0c80e43c7bebc5fcf54326b8d16ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862296": [
        {
            "ioc_value": "a6b9f4071c17f96f0722874e4ec09c84937c9124f7bf10ea145c8dd07a4db792",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862297": [
        {
            "ioc_value": "d11df382a13e870ed48261bac5bb852b887a522e2d587f92f7b20ec07e9d5355",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862298": [
        {
            "ioc_value": "839adafe33168e5141e0b2e5328aabb96e1aef5abb6d75177a0bd99af4c42b26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862299": [
        {
            "ioc_value": "aad0a2f647aa5b3df371e6cf0f0a94774381109316a8d2284ba5398ede15575d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862300": [
        {
            "ioc_value": "afd088095e1194170443f9a4e78c16cad8445dcd618c9648669758edebf3be54",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862233": [
        {
            "ioc_value": "8d4ae1fc9b1488448055ee29c8830e886a63df5e85a7340ba0cb44e1e639e6a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862234": [
        {
            "ioc_value": "f583b5353968760827ca76857e6399d72269bc191b77966c0f02b1cd2d14e6e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862235": [
        {
            "ioc_value": "4b7b9c998d4c77f479e5e2844eabb45fd84572c94909d27aa279b09e2b5b2168",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862236": [
        {
            "ioc_value": "f147c693986c2286698ddd9600a5c926dfdb6ef11541b1003ff82719a330bfe2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862237": [
        {
            "ioc_value": "de251e74637353b4f935ad118b502753aae402c8696ca914234559ad59c8aea1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862238": [
        {
            "ioc_value": "a5b780b786658ef427658664a91fb48b6bf16981d429fb852d8e5244936b98a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862239": [
        {
            "ioc_value": "e2bfd52a97af6ef8e3e6d855b11e8527bbc9df89f246a9a9d18c18cd2d0e6a01",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862240": [
        {
            "ioc_value": "1859d471af1299da6225e6cacbd6f6040e64294a82ca6e340a37fdf4462da264",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862241": [
        {
            "ioc_value": "4ae9af55b7f0a9da441e3124c9e8736a2c862a919549ae774222be6ed2cb442f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862242": [
        {
            "ioc_value": "df8bc17b5e8bcdb6f28c2eb4e80e3b48cbaed2aaef1c6cf68bcfa848aaefad98",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862243": [
        {
            "ioc_value": "f8067580029abeed4ab4dcebb9639eb420acdc3441f439e47fa86218f0274458",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862244": [
        {
            "ioc_value": "8181e27c2b6aa976bd94f959ffec81918cab66ebcbd83e7fc22dea48ad7ad60b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862245": [
        {
            "ioc_value": "5136a70e70cdb481c4d237cd310dc285df083dc593dd9ea421d0ed9ab339c59e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862246": [
        {
            "ioc_value": "18f3461316332bae04af2944392a2ec84e7ab340fffc30e667a75a7f01148a4c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862247": [
        {
            "ioc_value": "06c1ecfc70d5c0614f951a6992516f4ad92ae1f1a76f2a790e66d39ad036c7b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862248": [
        {
            "ioc_value": "871e44784503465b9cf774c80f683571d84616d2776743d0b54ae577e64e807f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862249": [
        {
            "ioc_value": "81ec2fcd83d63282b8f7b719fbf2561924f336dbf337d3f0eee1417f1caf8392",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862250": [
        {
            "ioc_value": "8394344e57c9bed636fdef5bbff0bf72657d19be4af5183367a30da58cb86c7d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862251": [
        {
            "ioc_value": "bc52579337e65ab1789efb7c485814b251867822eaead906b4cb57d6ba9cf28d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862252": [
        {
            "ioc_value": "5abaabd3dced143400cdc8d412394506e91a0febb136f269154c5afd8927c225",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862253": [
        {
            "ioc_value": "fb48f86c75ac6e09d01a6d833346576854ac66a211245f577141a95f46f60453",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862254": [
        {
            "ioc_value": "dc73cad50bf3a6f45215d267b9ed74c87725ad6cf67887963fd7aada1b9887db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862255": [
        {
            "ioc_value": "3539e5ff2f4fb59603108de3ca60ca9e383fa5102b1e7bb31e4deaa469863e5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862256": [
        {
            "ioc_value": "1561eaf19d6e2dbc97c56ec0d4bfcbf9abf2fd6bb04456e44fc0df5328f921dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862257": [
        {
            "ioc_value": "ef492743ac8cdde379af5345fce2087fef4d2918b5991ecdae908b3666f2ce28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862258": [
        {
            "ioc_value": "025af1b87146a023f6ef279a5d2bff4b1e77e3709d167b96c8f0a249c8a1b75c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862259": [
        {
            "ioc_value": "b768b689c82b582ad1280e3d8e1ad91223e2968ad0499f35ba6a05ab01765955",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862260": [
        {
            "ioc_value": "69fdd76c639755df16958af599dbbe44aebe60ef196e63b312e35be62ce93dfb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862261": [
        {
            "ioc_value": "75ff7ef574212ff36cad2ab7c1ff46a234f9da79e4f30436d25f875bb3bdfe49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862262": [
        {
            "ioc_value": "bce50a90f3f2f2a988f6829c37b786d071605d38361550f1f9b3efd2e0297c93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862263": [
        {
            "ioc_value": "8819d6be30d557f3f2ffc841c02c36063e1d9d235444f6f32b87bfe616478513",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862264": [
        {
            "ioc_value": "f5b8cce4660b7a330c817792f64a97e9af3914c15c7e6b8bf066df3490557283",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862265": [
        {
            "ioc_value": "884c9224e08083823563420988699592f6bb0b8227a2be76ce7e805d8066c46f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862266": [
        {
            "ioc_value": "035809db09ace8c0e73942d99860690032bd971d0bd57aeb0cbfdc89ed7f1d5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862202": [
        {
            "ioc_value": "db1c34c476992207687f8b5f5399c93bdb0e2d3ef4bc9a1ece0323807781fee1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862203": [
        {
            "ioc_value": "378baecbc1329fce4adade7eebd667b05755bf2daf871df562056d23b214c968",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862204": [
        {
            "ioc_value": "d8e6eacb8f8cbf06fb5089b2a7cb13b7dab2f613468e9070df46801833d44053",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862205": [
        {
            "ioc_value": "926a8639da6c1441c63e93ffe81af13d4c574fb6980f2264334e5c9bff4cc765",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862206": [
        {
            "ioc_value": "b86e4d509e3b5a9a7027b164ca9f372cd560dc8c3f4318ef12612a5fa22a31dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862207": [
        {
            "ioc_value": "3263e0dcb0c6019ea9064aadf598af9fbe7d587c619c71a54d08a50f471328f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862208": [
        {
            "ioc_value": "c23cd0e6d4d223ea09df4b6edc60720a84ed1d7510323b21c8e0c7cce39bf6d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862209": [
        {
            "ioc_value": "f92a7df2fa01f423c6cea1c29fbaf71c14c02b5ad208be7e26437ed0555f26d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862210": [
        {
            "ioc_value": "5dbf10fe9e1f70aeb801ca4fa4b6c8e8e3f0b470618d703917a95339a9fe70cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862211": [
        {
            "ioc_value": "24cf3ff3ebeef2a08b4d95f72cb08dc9bd903c32d9a47f7eef4029d02f80ed27",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862212": [
        {
            "ioc_value": "5c60a1e283f04988b3bd045dc5699c51bedb34dbf8cacf600fdb384fa4f60e2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862213": [
        {
            "ioc_value": "5e7518c0ab0f8bca68afc8cab8f76140864c69692d777cf4c9e7f553eadca81f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862214": [
        {
            "ioc_value": "d36b8abc3a61c526720baa3982f503661523c8977a7cdde345d76570666dd1a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862215": [
        {
            "ioc_value": "31dd7ea7525f06afd7a909d8737d7f2d08e6da42dcb755d483875d61c983e334",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862216": [
        {
            "ioc_value": "555922a748d05f16a555b68cf14a3c28d8d95b9b5b2098e0cb9ea55854946c2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862217": [
        {
            "ioc_value": "383f6d5f030fec0c534fb1ac4fd4eaf68ab1268ea332f7eb20eacadb1705e4ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862218": [
        {
            "ioc_value": "b32b21ff73b05ce2969883e9244bcd08e15b113c083079ff81a3af3e5cb6c148",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862219": [
        {
            "ioc_value": "c44ed34ba5f37691e3ca1095d5aee5e9edb0f2245acfc63b0c81f39dacf17345",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862220": [
        {
            "ioc_value": "b815a1e2083e8e78bd7fccd0e1e8ea1c9607e70a460c7d9f10604e8c8553be5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862221": [
        {
            "ioc_value": "9735e44c2a4404fd3520d91776a3386bf318aa23dc396833babc02d1d15b4446",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862222": [
        {
            "ioc_value": "0cb7ee67769c4c4ea695aa3029c9ed11f45a2e09190ab4d4495c742ccd6b58b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862223": [
        {
            "ioc_value": "ba062656391c52aa32e205a631708c2eff3a180ce5d8288d021f1d98f3be7530",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862224": [
        {
            "ioc_value": "092709d193cd6e98c89c67c4a8679e39600322729241bbc281de562aeba2f93d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862225": [
        {
            "ioc_value": "7bcb5f0d23aacc09d3114843d0c618a11d9477c534b15b7c6e1bbd1529c6d260",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862226": [
        {
            "ioc_value": "995d5cf8ee86fa88d7ba315237b24609c50a5d9d54bfe3b768669ae14ac17441",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862227": [
        {
            "ioc_value": "6410608984b7be9499d0b62a1aa8730c3cf372f7ecba095fcf06d5d6d811e257",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862228": [
        {
            "ioc_value": "4d209b74db0e7d52aba33deabb86ed8d42ddbfe3bbfee5b639e85d775f8c3a2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862229": [
        {
            "ioc_value": "add937587a33e8de93df8b599355b359528818c8075f02b2239442ad6703faee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862230": [
        {
            "ioc_value": "94d6d4987eee2565533e664868025c312dde828d411947324ed5f3d065384746",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862231": [
        {
            "ioc_value": "d862dd2dcc9a6902ed6f2c552048b918a8356d3f7a19b0413c03aefc007afdf9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862232": [
        {
            "ioc_value": "ec629793d24df390035c535e12b968dd4c7573fa6202c8a08b021d9194fc0164",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 04:32:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "lockbit,unknown",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1862200": [
        {
            "ioc_value": "keizaf.napolipizzaweymouth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 04:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862198": [
        {
            "ioc_value": "60ou7kjk.dinosrestaurant.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 04:09:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862192": [
        {
            "ioc_value": "fmhdjrx.ordereltarascomexicanfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 04:00:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862190": [
        {
            "ioc_value": "fwroxo.nakedlesbianskiss.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 03:29:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862188": [
        {
            "ioc_value": "xsvowum.opticamarcopolo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 03:13:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862183": [
        {
            "ioc_value": "oqmqvd.smkn7bandung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 02:43:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862182": [
        {
            "ioc_value": "xwzbfoc.monopolisgame.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 02:27:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862179": [
        {
            "ioc_value": "ayxo4gdl.ushealthlaboratories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 02:07:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862178": [
        {
            "ioc_value": "soslhh.shop-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 01:54:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862177": [
        {
            "ioc_value": "6tq8h24v.kkslot777.help",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 01:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862176": [
        {
            "ioc_value": "x46oo826.memap.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 01:51:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862174": [
        {
            "ioc_value": "csmjeya.mobilefg.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 01:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862127": [
        {
            "ioc_value": "znrorj.shop-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 01:09:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862120": [
        {
            "ioc_value": "ulxpmudle.mobilefg.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:56:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862118": [
        {
            "ioc_value": "jfgevxgdj.omahacaulkingandsealing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:51:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862117": [
        {
            "ioc_value": "tvayvbzwt.hospitaldemascotas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:46:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862116": [
        {
            "ioc_value": "fbltqznhi.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862115": [
        {
            "ioc_value": "fsakcopsf.cheznevine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:41:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862114": [
        {
            "ioc_value": "gesmfesgs.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:39:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862113": [
        {
            "ioc_value": "ajlhkv.redcanoerealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:37:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862112": [
        {
            "ioc_value": "dzwcruzmh.abcdbro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:31:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862110": [
        {
            "ioc_value": "r8rq1x9t.tenancydeposit-claim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-29 00:08:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862107": [
        {
            "ioc_value": "183.60.226.2:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-29 00:05:06",
            "last_seen_utc": "2026-08-19 07:09:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862104": [
        {
            "ioc_value": "yoyipo.ontariorestaurantowners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 23:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862103": [
        {
            "ioc_value": "qenacromv.6oclocktrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 23:49:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1862102": [
        {
            "ioc_value": "7dfab6d94576579e466f5bc7ace0019b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862099": [
        {
            "ioc_value": "5b033d3a4db05e99ae970ffe77f0a55b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862100": [
        {
            "ioc_value": "bf1dde0ee67946f8ec76c64b6eb4252040ad4ffb097cdc9528c844de923a1dad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862101": [
        {
            "ioc_value": "d978cb046c6ca900c621f6d4adc9f9d32c8a2307",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862096": [
        {
            "ioc_value": "510950ff5cb5d12c8a9d4a71d2a88d2e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-28 23:27:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862097": [
        {
            "ioc_value": "4ddf530a9ced8cb042c88e3fdd75933a08cd1419a1f3bbd7a3e6b8f3e6b6260d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862098": [
        {
            "ioc_value": "b06b43205f0102eb735da12a3198a10dbdd0af5d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862094": [
        {
            "ioc_value": "ef876baf02db22ca0d03a888226bea7728b508e39e75f84dc894ec900b296fae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-28 23:27:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862095": [
        {
            "ioc_value": "54d65545279a44223699a0c9731fd21b1d82b7e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-28 23:27:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862090": [
        {
            "ioc_value": "ce3376b9a6834ccfd743785dfec778a1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862091": [
        {
            "ioc_value": "3fe19e12a6c3054ca089010c5da14867a4e7ccbd72560dcbe8cdc99f44e36f48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862092": [
        {
            "ioc_value": "0f00fe36e2a6cbc7dc9fb11ea8e13e1a9e853534",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862093": [
        {
            "ioc_value": "f5236d7bb0342a14ab7eb986c6689d2b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862087": [
        {
            "ioc_value": "4fef8581b198c27c37f06137df872d52",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-28 23:27:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862088": [
        {
            "ioc_value": "17c4da4a81155d233e6eaf6ef7cd2590d6fda76a46bacede4881ab3cd1bf88d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862089": [
        {
            "ioc_value": "292fc63a1d767753790e78d08aec4bc97d19a5cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862083": [
        {
            "ioc_value": "a0a2321a3f0917db7fa42e03a1296f95e40e7c30",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862084": [
        {
            "ioc_value": "a9ff5612013f81d8ccb00c564e007290",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862085": [
        {
            "ioc_value": "712ca31e2937bf843579e0e782ac8bc33ae84b4d580a3c69aabd531ff416b5b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-28 23:27:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862086": [
        {
            "ioc_value": "a4d3c3c8cfe0cf04e3de11277d27d211c8ad1b52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-28 23:27:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862080": [
        {
            "ioc_value": "1d367e33e8cf273a56b8ddc493925c64ad7d648f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862081": [
        {
            "ioc_value": "baa453124334a345c4a906dd4bced099",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862082": [
        {
            "ioc_value": "21fa2933a5f8ecc157747f190d86762317d8b64f800f67287fbecf0169764b46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862077": [
        {
            "ioc_value": "22edef81c1fe81db499b3084b3c128b96a70c5a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862078": [
        {
            "ioc_value": "ba1a44c6bfd17c461d2ebf0f033bae12",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862079": [
        {
            "ioc_value": "a3c889a83799583a0dcbfaa90ad905cafbb0cd3221b54b49cb5fe3ceecec3d34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862074": [
        {
            "ioc_value": "3b10ed57ea261a2587473b558826c4e4587cdc57",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862075": [
        {
            "ioc_value": "5734b587edb55648f7d0b461a3f3c466",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862076": [
        {
            "ioc_value": "04ef9757c950005f926458dee36517a6c879d39e5798a378bdd6aa7a45d0d23a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862070": [
        {
            "ioc_value": "e947f8a540eb337c4090c14d880948f07106dbe19d64625b7577cf9416935fae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862071": [
        {
            "ioc_value": "819f0be1dbc81eb85163de4cea0f629c10325ec3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862072": [
        {
            "ioc_value": "4a93a809cf87667cb73e0405f5e5b102",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862073": [
        {
            "ioc_value": "b06316fc674d62db99afd11be3ec60eb212fd0e64a23c20685017fe7d7221f5d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862067": [
        {
            "ioc_value": "d31040a2b95b66340fe07d1bed67ef96fbe1d60e6635acc2736de3d648f90131",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862068": [
        {
            "ioc_value": "fc9e19460bd3fd1c997f76bf7d31c85b31b0dca4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862069": [
        {
            "ioc_value": "60b6c61db4b78d713fa014568db9263b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862064": [
        {
            "ioc_value": "764d5bcb4be851ed27008a40010ed48669160dee3c83fecfc3a0c0654dcece3f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862065": [
        {
            "ioc_value": "5782b6c0bf1eb4022d8e5c9d80968add1a761e08",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862066": [
        {
            "ioc_value": "da3c4fd3f4f3738f9f626c96de56a535",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862061": [
        {
            "ioc_value": "4a319c860dacdd7ff95772e04b7072bba01e43d9f9d03a3cc3ece1e7064e071b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862062": [
        {
            "ioc_value": "57d1464da3f19688610c9526b6dcac48760aeb78",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862063": [
        {
            "ioc_value": "eb80b24437ca144ae6cf0b19a03ca599",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862058": [
        {
            "ioc_value": "83801179bc16c5d1649aff7f6f7bbe46a2e6ef39ec4a3d3d558e758ba89eb7f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862059": [
        {
            "ioc_value": "78b10ae2f8b49387b8d68cd1c02f830f3243dd7c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862060": [
        {
            "ioc_value": "9dde2022d383851518ce67221f6c3f51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862054": [
        {
            "ioc_value": "c7e6b3208a4bf04ef28fd3b37008b7d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862055": [
        {
            "ioc_value": "52f011851639a0c3a5ac55a68314d0b11d6893805f93f0934a4b72f5c3c6d15d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862056": [
        {
            "ioc_value": "7f2d5191f591515ba76b90bd34e4a74ebad68785",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862057": [
        {
            "ioc_value": "1bb73ccfdacfd31c472d9f6b477eb55d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:27:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862051": [
        {
            "ioc_value": "b2070d140b362a0ad381ae4c6dcf48a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862052": [
        {
            "ioc_value": "a522e892f5a5d41e6b71dfa435491682dd20fe2f562075af071f929c3fa38620",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862053": [
        {
            "ioc_value": "701fc165b905a9cb704c689ee8fcc46dae33a660",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:27:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862048": [
        {
            "ioc_value": "346807f0534467f59b6baea973ed71ef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862049": [
        {
            "ioc_value": "07e01575db8e5a3b8a97aa7977a631e541f412548d16f15f8744969f1540d609",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862050": [
        {
            "ioc_value": "34dc012e9f8a987b38fe2f775d37782d2c9d04e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862045": [
        {
            "ioc_value": "51ef4b8441aa94c9c2b1280e869e5a2d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862046": [
        {
            "ioc_value": "24ec774133cf8b8fd595751cffec810d6e179561644bc55e22301335aa6c028e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862047": [
        {
            "ioc_value": "d07d8f5f0471465b0d9e78196a80b0be227d30a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862042": [
        {
            "ioc_value": "fcacc7ea0897dce4fd6aa38979978db7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-28 23:27:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862043": [
        {
            "ioc_value": "d4e159aa3c7efe664c91952efa73624a1cf50975d64402aaaba290924cdf8ee5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862044": [
        {
            "ioc_value": "2066eaf346d11cbf2b73eba7027655f960de395c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862039": [
        {
            "ioc_value": "691f35bf0e51a5c1445a284029c28e29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-28 23:27:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862040": [
        {
            "ioc_value": "aa5f4e85e97d1507df8a70018a9f1429360039b337b096b56fd695a532b926ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-28 23:27:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862041": [
        {
            "ioc_value": "fb7a6169191984f3fe6b35756404b720f9168a42",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-28 23:27:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862035": [
        {
            "ioc_value": "cef1bf8fa5ace7daab830344d9fc638828e3dbbb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862036": [
        {
            "ioc_value": "78e063c23731705994a1b23d5375f3d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862037": [
        {
            "ioc_value": "072fb279608d062dd75764fedc60c55f672a9eb381fa243b53164c9be0a841c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862038": [
        {
            "ioc_value": "ddb04687c03c542b8f21f68be0fe0161c004a243",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-28 23:27:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862032": [
        {
            "ioc_value": "e36fc689c034f55361f9e5e61eca67434411cdc4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-28 23:27:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862033": [
        {
            "ioc_value": "4200fbf91504f5a9e545fbd6aa9b1ec4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-28 23:27:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862034": [
        {
            "ioc_value": "6a11fdf8efa8d65257b58f265c43aa937efdba13953abc99203ab3b30c96a8f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862029": [
        {
            "ioc_value": "61892efc7de79c7871b88076dc0a7441a2cc058f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862030": [
        {
            "ioc_value": "c7ffd01310d80e2983ec4027232b5b63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862031": [
        {
            "ioc_value": "5043c52418d1e8c7e0ef50572965de2900e4bb092c88d15f6cbebe45f830bdc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-28 23:27:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862026": [
        {
            "ioc_value": "00f6a68fef995c15c116c48b18d9611db036c1e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-28 23:27:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862027": [
        {
            "ioc_value": "2ac1f830806ce3bdd35cdcb957f139ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-28 23:27:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862028": [
        {
            "ioc_value": "aa4948508c0c98758400c5b167319a5fc45fa2bdec45c352db96719e3b075362",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:27:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862023": [
        {
            "ioc_value": "f34e8b0e9a2d225ff6533aebaa91109a05f549d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862024": [
        {
            "ioc_value": "07a303ec82a2e27132dbbefaabd33471",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862025": [
        {
            "ioc_value": "9270d36aa57eec3d44dc2d66929551198cb8a31d0ef383a726c38b75ad8144ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-28 23:27:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862020": [
        {
            "ioc_value": "8698bc1b055be56dce1e2d1cb5634e399a31b1cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-28 23:27:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862021": [
        {
            "ioc_value": "30eff0fbbd41f9172813bd4907d68730",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-28 23:27:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862022": [
        {
            "ioc_value": "93acfa3e1128452e59dbd9d479265747718cd7a37734ecfefee4c10e43b06dde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862016": [
        {
            "ioc_value": "c189e889e530d891501d459eea14af09e51af8f489cfb827cca985af057f2276",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:27:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862017": [
        {
            "ioc_value": "9bdbcc272e653262327d4f865782b99c1e35c5d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:27:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862018": [
        {
            "ioc_value": "a560021ea970572d26d453d3d02ccb25",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:27:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862019": [
        {
            "ioc_value": "6599585dcd0455e6c47701e369283af406735c102a6bacaadace6947acc56d18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-28 23:27:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862013": [
        {
            "ioc_value": "cd154bf27d4f62cc67f1a6ae44bbb9cb85a8d7c15233886242299b63dfc50e3f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862014": [
        {
            "ioc_value": "8a1e53f79685287b4484f4e616d4b83302221ffd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862015": [
        {
            "ioc_value": "fc99d7a06531cd8ab0d6bd228a473322",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862010": [
        {
            "ioc_value": "61b5291e4636aae8ea85b6d5d963f781c2160fb3bc6cf99c720a3c4aeede33e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862011": [
        {
            "ioc_value": "2de1b5aaa3eab9ebcf5fc786276e1ceeb3265805",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862012": [
        {
            "ioc_value": "9db20e972d03665775e8e87836562619",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862007": [
        {
            "ioc_value": "329519abb208137bb0ed2129efd51bd1cd85b1a21610c33aef2d15d7379cfca5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862008": [
        {
            "ioc_value": "65e2c71e1d9330e57086efeda08729f5906acbb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862009": [
        {
            "ioc_value": "1ca303227696443d914fb59cd63aa52e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862004": [
        {
            "ioc_value": "2a8e577f4a3e9d7930a9cecc839e1dbdc36570dd876ae54bd67d749535234f60",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862005": [
        {
            "ioc_value": "f36a1a731debdbaec43b83fe4ec55485355cca0a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862006": [
        {
            "ioc_value": "e48199bb764bd840f0f9a6ae7f495a38",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862000": [
        {
            "ioc_value": "929f05e274f24763222f9649eb3b14f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-28 23:27:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862001": [
        {
            "ioc_value": "9ed59215e24621404e058f8c0e9101e9351e147f5b367679b8d62ec73f44d169",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:27:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862002": [
        {
            "ioc_value": "4f7d335ec58a31f3345b3d9458945872be2eb378",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:27:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1862003": [
        {
            "ioc_value": "a11bc7fddad2602881739faab6875ad6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:27:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861998": [
        {
            "ioc_value": "4ed3931ab5bddd24ce23fd0d5546ae45b52a0cd0124afe7cb3692a56510ac1ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-28 23:27:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861999": [
        {
            "ioc_value": "0ac94a08e0cd2886f69296193548b348dad0ff26",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-28 23:27:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861996": [
        {
            "ioc_value": "c00fbc1f9ffa18934b889c1a06e917d6dd914107",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861997": [
        {
            "ioc_value": "1f6b1d72c0ce7791411926925d4f6f1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:27:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861993": [
        {
            "ioc_value": "2e0f4caa6ad5bb8322209054e51f6c1892c18af0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-28 23:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861994": [
        {
            "ioc_value": "16c8dfdb6a5528d9d937a7ac643816f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-28 23:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861995": [
        {
            "ioc_value": "90a7dc10998cbc29704868b8dfe1e69a6f01a08032784f9506988d9558f63ca0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861989": [
        {
            "ioc_value": "00f41782b7ffda43f48a632433f8d70d2363600af03b02182009d72d825ec650",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-28 23:26:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861990": [
        {
            "ioc_value": "10c82fb76c490fc5970d71b603f99c4be7975d6f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-28 23:26:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861991": [
        {
            "ioc_value": "41d9eba31f341c2c2a4cfd6af4a94023",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-28 23:26:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861992": [
        {
            "ioc_value": "baf71232724f96eeac468eb71dba5e5af62cebdac9a3aa181ce234d8bdb2a748",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-28 23:26:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861986": [
        {
            "ioc_value": "624f9d23167fef7006ceed2413a6e491b69abfe918e07918335a90e97ffc4852",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861987": [
        {
            "ioc_value": "5946a4df3bffa28095c867e6685e254362d8bda7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861988": [
        {
            "ioc_value": "f6996d9e9f587d804b8d87d93226dfb0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861983": [
        {
            "ioc_value": "624ac3ad002bf57ad104a1153a4196e24d954086091348bcf7a0b57b38998dbc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 23:26:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861984": [
        {
            "ioc_value": "5d24f327f58e9deacc983bf49b3c7681ba676fc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 23:26:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861985": [
        {
            "ioc_value": "0a84486e20e0fdca44aa5ce8c3c121a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 23:26:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861980": [
        {
            "ioc_value": "d8b6088156477df342a5387bc81aef1e242f12d2f722e5e2030cbc51c203d547",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 23:26:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861981": [
        {
            "ioc_value": "7505eeb4ad0468148a1a2b74ef007ae77ebf9cc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 23:26:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861982": [
        {
            "ioc_value": "a60ff47f224bebdaeac73aeab370854d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 23:26:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861977": [
        {
            "ioc_value": "f7fc3b0773b7c63939174cb2db2a6f7fa645e8c3251b131a5ab071f2d293d87d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861978": [
        {
            "ioc_value": "f08963c742b50266246c096f76929390aca226e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861979": [
        {
            "ioc_value": "2c6cbec4eb4b6fe7442effcc933e71d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861975": [
        {
            "ioc_value": "702ce7777c83b63a0d20ffbf80b439394b712e64",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 23:26:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861976": [
        {
            "ioc_value": "1f7c4122131ba1c798fe09827fe1ee9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 23:26:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861973": [
        {
            "ioc_value": "6c0ff1c6abb8601339f818e03e4b3a14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861974": [
        {
            "ioc_value": "0a50174b6ef5b50a5d26fd07855446697d6d8145d5162a8df3de50c6e54aaad9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 23:26:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861970": [
        {
            "ioc_value": "398bae29ba107b311eac608a7679da9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861971": [
        {
            "ioc_value": "9f6d1bb57a8e1d6a35b192a38f21ba2f2c26ee299a7640c2b1d6f724d1c23862",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861972": [
        {
            "ioc_value": "c2d5d787f48ba8c6a672b716a4914910999ed354",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861967": [
        {
            "ioc_value": "f8e97b3d0e4335fe86255cf198663149",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861968": [
        {
            "ioc_value": "88cb4873b9bfbdf78da245f0e0a622161fb00b26c15a32bbdcba1dfad53cc4e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861969": [
        {
            "ioc_value": "ccb33809c6614c204f8cafd465834b99fc3e4066",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861964": [
        {
            "ioc_value": "c9d0dafd346d0654623b72b7039ab63a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861965": [
        {
            "ioc_value": "dc907a7b5d67117a35298a23c57df45549b96937f90bf067ac792b32c97edf76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861966": [
        {
            "ioc_value": "073a09889bbaf599cb36843e1204b059f5e43b06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861961": [
        {
            "ioc_value": "4555ce1f128a9c70a0cabb1cb14afdd4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861962": [
        {
            "ioc_value": "c1996d4fe6c679462269511c38184b50b89ff7f05a3c3055b1cf8f686d2b03c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861963": [
        {
            "ioc_value": "cb8c40bf3e2a3ce26726d6baa0f28c03775f8ba3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861959": [
        {
            "ioc_value": "d33bc3e0969ef5e0960659f9befe232bdb4f8ab9b6b1e2556f2dcf4f8fc35659",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861960": [
        {
            "ioc_value": "2f4f8cd9ea48aa1f5976aeef92a0b9fe895a5565",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861956": [
        {
            "ioc_value": "5e10c356f7a41764011d102094f4823f2dce439c5cd50c68c23e3328de9255dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861957": [
        {
            "ioc_value": "fc2d83d15c58843337d2b123bb489be398227f8d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861958": [
        {
            "ioc_value": "accc992b82f7332df297b48a2c778301",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861953": [
        {
            "ioc_value": "51147a93ee2f3b3ac60c446435c96e72bdd54a1c0fb27cda033537f88c3690a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861954": [
        {
            "ioc_value": "5a94069f639103c7fb2601df2899db37f2b780a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861955": [
        {
            "ioc_value": "ce7d00292e5012a93207c63daef53c67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861951": [
        {
            "ioc_value": "a4394d5131459af0cc20c19fde8565d8eecccb77",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861952": [
        {
            "ioc_value": "65ee6b42c5babfa8327fa896df54c007",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861949": [
        {
            "ioc_value": "234d3cc64ff2bff76866cd1e991ebbf5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861950": [
        {
            "ioc_value": "4eac222c9b28ad1fcb44fe3a15a228632cce94333d6ca132f8e156d09adb8677",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861947": [
        {
            "ioc_value": "3f95a86fb5a628574736c53ce3d4b54a9e039caae220c64b55f03d9490fffb9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861948": [
        {
            "ioc_value": "234a031dd61d249612e1a415b4957790a1ca1614",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861945": [
        {
            "ioc_value": "c1528657f1d50e0627cda0c31026c09ec536c16f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861946": [
        {
            "ioc_value": "e23c0c97b7dcc8f83261c18e88dd2511",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861942": [
        {
            "ioc_value": "571fdf91999bf147dba18c99b3ec09af120a7828",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861943": [
        {
            "ioc_value": "602f19d79ed622fbefe826da2fa006c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861944": [
        {
            "ioc_value": "247ccd7c34e6600d90b6e6d5dc82858fcf369da21d9a323db52a37ade981c62c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861939": [
        {
            "ioc_value": "d2adac82d0821c8590dd95599abd5bd1e43ff1d8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861940": [
        {
            "ioc_value": "21fb6930c2679a056a8cfd79f93f53cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861941": [
        {
            "ioc_value": "0cf715d47bf25c5ca920110d091807c3fddb2bc14b45701fd2b36648e5463826",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861938": [
        {
            "ioc_value": "070181f442b486e6bc3192434f99c19bff30441fdc069a2274987d742178c2ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-28 23:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861935": [
        {
            "ioc_value": "f1364dc74d53b9ea08064172a21cabdb9fca69e78884c01799abafd1bd864ef1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861936": [
        {
            "ioc_value": "2b09ed72a1d286345ca0bcd6156170f05698058b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861937": [
        {
            "ioc_value": "700f8ae06cd33b7ae8d5e7d10b168f0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861932": [
        {
            "ioc_value": "1d9bbba8601db0ad5ef2a66b75a1a0f1c8f4c4cb01378bce031d360c9c543f32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861933": [
        {
            "ioc_value": "ece7513d91b9fb3d97f1d651cbb6d4ad596f8387",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861934": [
        {
            "ioc_value": "ac4f0f8c136e3cf7302b5fd1d6cd6e1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861928": [
        {
            "ioc_value": "5839887f0a72b6e522074c4346850603",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861929": [
        {
            "ioc_value": "6936c872fc55301340ca5e2575216688f66c0c94888072d57cdf53e11167eb39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861930": [
        {
            "ioc_value": "c17a480500ab2bf301c3c52f2a7fb824140f7a73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861931": [
        {
            "ioc_value": "ab96159be2090be87021bf5ec7cd96ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861925": [
        {
            "ioc_value": "d20a462ee82fc009d69338c62a759272",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861926": [
        {
            "ioc_value": "3fcc93723abb9c679e5e310a0c1a7089e858fb9fa9cd34f9da998f1cfb30c5eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861927": [
        {
            "ioc_value": "f844807a5ccc2a3f1516c3a61dcd42c694e6a4b9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861924": [
        {
            "ioc_value": "23a2658314925b0415ca5d0d1ace75dcd46afed9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861922": [
        {
            "ioc_value": "706e4e3277a565232ca3c363299b032f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861923": [
        {
            "ioc_value": "02479b50896ebe3d90514056603edb2ba16394bfe2249e1eca795667f8ca1508",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861918": [
        {
            "ioc_value": "72edcf1d674c9c4cbd441465f670495bc38a172e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861919": [
        {
            "ioc_value": "33dbe6464c260480fe018c5e09a32df1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861920": [
        {
            "ioc_value": "83723bbe3d6116bdc45de533d7c890ab627bc18531d2c19d0d199e5151627fd2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861921": [
        {
            "ioc_value": "bd63550dd0a27ee22f3abd12e1d1a5bd782eecb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861915": [
        {
            "ioc_value": "746f9ddeab749a03a9098de8166fd9d582ade513",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861916": [
        {
            "ioc_value": "5a0d8566ca1081047d435f1839a9577a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861917": [
        {
            "ioc_value": "6bb93285730e63fcb09bc3db2bbaffedfd21227f648c3c7cfa2ee347f75360f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861913": [
        {
            "ioc_value": "9dbe63ff5c9393de11670dbb2d40a957",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861914": [
        {
            "ioc_value": "679a9028729d7ce6177c78ed0a4607194343c1877abcac6a8552c8085066dc41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861910": [
        {
            "ioc_value": "9049c0570c16e47553be0dee7b4e02ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861911": [
        {
            "ioc_value": "a10a9ed6f6c5d33349fe711cb5dcbb0556973505d5430fb08a81ac1a5ab135ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861912": [
        {
            "ioc_value": "a9dedd9ae560aba94a3fdf038f1f953f01724c42",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-28 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861907": [
        {
            "ioc_value": "8d1bcf322230e8935758228cebec1bb6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861908": [
        {
            "ioc_value": "0d7b6965d455ee7e00ba279a77a299caeaf7c872d863738d07aa52139c1ac1b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861909": [
        {
            "ioc_value": "711cc4b74cc31ab3a585f34837c2dc4cfb3a9f05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-28 23:26:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861905": [
        {
            "ioc_value": "a3ab968ecfe40961e381aff0e5bba919eb4e8cfcbbf445cf44441197aefbb399",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861906": [
        {
            "ioc_value": "692da806793608d10cbcbdf06e440f66094a291b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-28 23:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861902": [
        {
            "ioc_value": "376968a612e976c22025dc552cf79c6eda5af8a82136fe2dbff48fd72afaacaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-28 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861903": [
        {
            "ioc_value": "7ce58221e01efa4d0f3cb605530e295e62f1e662",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-28 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861904": [
        {
            "ioc_value": "d017feba12f5960520155ba240beb093",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-28 23:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861899": [
        {
            "ioc_value": "47f9779b48eeda53a846a2460456c738ad752ad0e02483231d927930f3f37dce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-28 23:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861900": [
        {
            "ioc_value": "19cdc7a8624c614cb8c06dc4f439fe86f9e6a515",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-28 23:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861901": [
        {
            "ioc_value": "700fb7e2c6a2ff13cd27e08a18703423",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-28 23:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861896": [
        {
            "ioc_value": "0605015c8428fb4efc98e0abd8af027c7a01f2e87471dbc7e4389a3c6e5844c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-28 23:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861897": [
        {
            "ioc_value": "a7793c7102527152dc5972d13adb21969fe49e7a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-28 23:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861898": [
        {
            "ioc_value": "dc23b8b8afcffbf1798d09ebf443af85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-28 23:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861892": [
        {
            "ioc_value": "6f620f266c74d2bd871f50ea4b7fa2ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861893": [
        {
            "ioc_value": "e95766d2d9dcc598cada3c33133935fda7d54d245d8a46fc05be47986e036fff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-28 23:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861894": [
        {
            "ioc_value": "b65b3aba7086a8db3b452f171782af7eab4cbeb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-28 23:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861895": [
        {
            "ioc_value": "cee0e495adc06bbac4be33544bd393ca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-28 23:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861890": [
        {
            "ioc_value": "460210f3fd4047499e12f4e4fcbbf556f2a1957f1ef276238aaa152554a02b37",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861891": [
        {
            "ioc_value": "e8d952715fc718968bc810f43a683f3d56c7c3fd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-28 23:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861888": [
        {
            "ioc_value": "somorz.omwcafespot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 23:09:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861884": [
        {
            "ioc_value": "etpdxjcjw.ootdpath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 23:03:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861882": [
        {
            "ioc_value": "http://fervxy.xyz:8893",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-28 22:55:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1861881": [
        {
            "ioc_value": "https://www.risefoundationngo.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 22:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.risefoundationngo.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1861880": [
        {
            "ioc_value": "qxisjdiag.oneidajailroster.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 22:15:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861878": [
        {
            "ioc_value": "5cc3bt7i.simply-bpo.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 22:06:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861868": [
        {
            "ioc_value": "subkhpknl.omwcafespot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 21:29:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861866": [
        {
            "ioc_value": "pdsrds.smkn7bandung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 21:25:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861864": [
        {
            "ioc_value": "http://smarwth.biz:5292",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-28 21:21:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1861863": [
        {
            "ioc_value": "serve0.omega-fabric41.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-28 21:21:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1861857": [
        {
            "ioc_value": "46.246.84.8:7044",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-28 21:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861853": [
        {
            "ioc_value": "45.154.207.60:5763",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-28 21:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861838": [
        {
            "ioc_value": "azcd8d81.libartytoken.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 20:52:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861837": [
        {
            "ioc_value": "6vtl1yo2.enus-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 20:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861834": [
        {
            "ioc_value": "ofjunlnfr.omahacaulkingandsealing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 20:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861832": [
        {
            "ioc_value": "scqhkd.seobulan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 20:38:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861830": [
        {
            "ioc_value": "rt9ugrfy.shop-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 20:06:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861826": [
        {
            "ioc_value": "ravrupsop.numberonechinesekitchen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 20:01:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861824": [
        {
            "ioc_value": "odlpec.revolutionarywararchives.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 19:53:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861820": [
        {
            "ioc_value": "89.213.118.199:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-28 19:46:24",
            "last_seen_utc": "2026-08-28 08:47:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861821": [
        {
            "ioc_value": "89.213.118.199:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-28 19:46:24",
            "last_seen_utc": "2026-08-28 08:47:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861822": [
        {
            "ioc_value": "89.213.118.199:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-28 19:46:24",
            "last_seen_utc": "2026-08-28 08:47:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861819": [
        {
            "ioc_value": "45.62.170.226:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:45:50",
            "last_seen_utc": "2026-08-28 08:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861818": [
        {
            "ioc_value": "31.58.179.22:10140",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 19:45:36",
            "last_seen_utc": "2026-08-30 08:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861817": [
        {
            "ioc_value": "31.57.184.154:2504",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:45:34",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861816": [
        {
            "ioc_value": "23.94.148.17:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:45:30",
            "last_seen_utc": "2026-09-01 02:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861815": [
        {
            "ioc_value": "217.60.241.88:7008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:45:25",
            "last_seen_utc": "2026-08-28 08:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861814": [
        {
            "ioc_value": "204.44.69.230:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:44:36",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861813": [
        {
            "ioc_value": "194.59.30.53:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:44:26",
            "last_seen_utc": "2026-08-28 08:45:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861812": [
        {
            "ioc_value": "172.111.232.195:7775",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-28 19:44:00",
            "last_seen_utc": "2026-08-28 08:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861811": [
        {
            "ioc_value": "130.94.7.119:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:43:27",
            "last_seen_utc": "2026-08-28 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861810": [
        {
            "ioc_value": "104.248.185.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-28 19:43:15",
            "last_seen_utc": "2026-08-28 08:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861809": [
        {
            "ioc_value": "104.200.67.224:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 19:43:14",
            "last_seen_utc": "2026-08-28 08:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861808": [
        {
            "ioc_value": "nleikppzo.ninas-pizza.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 19:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861805": [
        {
            "ioc_value": "xaztwb.redcanoerealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 19:08:00",
            "last_seen_utc": "2026-08-06 05:06:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861799": [
        {
            "ioc_value": "bnaesbhrt.nextdoorcontractors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 18:27:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861798": [
        {
            "ioc_value": "cuajsf.racines.restaurant",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 18:27:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861781": [
        {
            "ioc_value": "rjh4yjp2.shop-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 18:07:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861762": [
        {
            "ioc_value": "lnxrtusxx.yourheavensbest.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 17:41:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861759": [
        {
            "ioc_value": "unubrc.ontariorestaurantowners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 17:35:32",
            "last_seen_utc": "2026-08-07 00:29:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861747": [
        {
            "ioc_value": "185.104.63.90:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 17:18:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/reports/2026-07-24-jackskid-residential-proxy-upnp.md",
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1861755": [
        {
            "ioc_value": "144.31.148.204:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 17:07:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3893085/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861756": [
        {
            "ioc_value": "144.31.148.204:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 17:07:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3893085/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861748": [
        {
            "ioc_value": "draxwas.thruhere.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 17:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861749": [
        {
            "ioc_value": "ge.ghostnod.h4ck.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 17:03:37",
            "last_seen_utc": "2026-07-28 17:03:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861750": [
        {
            "ioc_value": "richiescreen.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 17:03:37",
            "last_seen_utc": "2026-07-28 17:03:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861744": [
        {
            "ioc_value": "45.192.211.7:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:29",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861745": [
        {
            "ioc_value": "45.192.211.7:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:29",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861746": [
        {
            "ioc_value": "80.76.49.3:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:29",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861733": [
        {
            "ioc_value": "45.119.98.138:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-07-28 18:05:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861734": [
        {
            "ioc_value": "45.119.98.138:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-07-28 18:06:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861735": [
        {
            "ioc_value": "45.119.98.138:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861736": [
        {
            "ioc_value": "45.119.98.140:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-08-28 08:46:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861737": [
        {
            "ioc_value": "45.119.98.140:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-08-27 18:46:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861738": [
        {
            "ioc_value": "45.119.98.140:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-08-27 18:46:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861739": [
        {
            "ioc_value": "45.192.211.19:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861740": [
        {
            "ioc_value": "45.192.211.19:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861741": [
        {
            "ioc_value": "45.192.211.19:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861742": [
        {
            "ioc_value": "45.192.211.63:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861743": [
        {
            "ioc_value": "45.192.211.77:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:28",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861721": [
        {
            "ioc_value": "151.242.63.153:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-07-28 18:06:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861722": [
        {
            "ioc_value": "193.233.198.62:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-08-29 18:44:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861723": [
        {
            "ioc_value": "193.26.115.104:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-07-28 18:05:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861724": [
        {
            "ioc_value": "193.26.115.104:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-07-28 18:06:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861725": [
        {
            "ioc_value": "193.26.115.104:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861726": [
        {
            "ioc_value": "193.26.115.80:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-07-28 18:05:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861727": [
        {
            "ioc_value": "193.26.115.80:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-07-28 18:06:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861728": [
        {
            "ioc_value": "193.26.115.80:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861729": [
        {
            "ioc_value": "216.107.139.88:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-07-28 18:06:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861730": [
        {
            "ioc_value": "45.119.98.111:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861731": [
        {
            "ioc_value": "45.119.98.111:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861732": [
        {
            "ioc_value": "45.119.98.111:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:27",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861710": [
        {
            "ioc_value": "108.187.4.116:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861711": [
        {
            "ioc_value": "108.187.4.145:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861712": [
        {
            "ioc_value": "108.187.4.145:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861713": [
        {
            "ioc_value": "108.187.4.145:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861714": [
        {
            "ioc_value": "112.121.176.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861715": [
        {
            "ioc_value": "112.121.176.3:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861716": [
        {
            "ioc_value": "112.121.176.4:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861717": [
        {
            "ioc_value": "112.121.176.5:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861718": [
        {
            "ioc_value": "112.121.176.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861719": [
        {
            "ioc_value": "151.242.63.149:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-07-28 18:05:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861720": [
        {
            "ioc_value": "151.242.63.153:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:26",
            "last_seen_utc": "2026-07-28 18:05:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861705": [
        {
            "ioc_value": "103.68.109.13:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:25",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861706": [
        {
            "ioc_value": "103.68.109.13:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:25",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861707": [
        {
            "ioc_value": "104.164.46.39:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:25",
            "last_seen_utc": "2026-08-30 18:43:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861708": [
        {
            "ioc_value": "108.187.4.116:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:25",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861709": [
        {
            "ioc_value": "108.187.4.116:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-28 16:59:25",
            "last_seen_utc": "2026-09-01 02:43:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "censys,PureRAT",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861704": [
        {
            "ioc_value": "http://95.164.123.77:5506/ton.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861698": [
        {
            "ioc_value": "http://85.209.129.37:5504/ld.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861699": [
        {
            "ioc_value": "http://87.120.126.100/0o1.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861700": [
        {
            "ioc_value": "http://87.120.126.100/kamet1.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861701": [
        {
            "ioc_value": "http://87.120.126.100/mames33.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861702": [
        {
            "ioc_value": "http://87.120.126.100/names22.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861703": [
        {
            "ioc_value": "http://91.247.36.3/immunewait.msi",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861692": [
        {
            "ioc_value": "http://80.253.249.186:5504/cl.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861693": [
        {
            "ioc_value": "http://80.253.249.186:5504/cv.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861694": [
        {
            "ioc_value": "http://80.253.249.186:5504/l.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861695": [
        {
            "ioc_value": "http://80.253.249.186:5504/vm.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861696": [
        {
            "ioc_value": "http://83.217.209.227/2UP.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861697": [
        {
            "ioc_value": "http://83.217.209.227/oay.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861688": [
        {
            "ioc_value": "http://216.245.184.93/bdA.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861689": [
        {
            "ioc_value": "http://45.144.53.136/Vvm.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861690": [
        {
            "ioc_value": "http://45.144.53.136/g0N.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861691": [
        {
            "ioc_value": "http://45.43.11.138:8000/image.png",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861685": [
        {
            "ioc_value": "http://185.100.157.193/Fwp.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861686": [
        {
            "ioc_value": "http://185.163.204.237/2eue.json",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861687": [
        {
            "ioc_value": "http://185.163.204.237/2euesell.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861681": [
        {
            "ioc_value": "http://95.164.53.214:5554/d.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:01",
            "last_seen_utc": "2026-07-28 16:59:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861682": [
        {
            "ioc_value": "https://85.209.132.130/eeroigcukqcpeyat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:01",
            "last_seen_utc": "2026-07-28 16:59:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861683": [
        {
            "ioc_value": "http://103.27.156.206/most.pdf",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861684": [
        {
            "ioc_value": "http://144.31.3.187/23logo.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861673": [
        {
            "ioc_value": "http://80.253.249.186:5504/ct.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": "2026-07-28 16:59:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861674": [
        {
            "ioc_value": "http://85.192.48.8/v9L.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": "2026-07-28 16:59:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861675": [
        {
            "ioc_value": "http://85.209.129.37:5504/fs.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": "2026-07-28 16:59:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861676": [
        {
            "ioc_value": "http://87.120.126.100/007.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": "2026-07-28 16:59:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861677": [
        {
            "ioc_value": "http://93.113.25.102/msi/e69378480adab23d",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": "2026-07-28 16:59:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861678": [
        {
            "ioc_value": "http://93.152.223.30:5000/uploads/admin/stage2.ps1",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": "2026-07-28 16:59:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861679": [
        {
            "ioc_value": "http://94.156.170.255/webdav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861680": [
        {
            "ioc_value": "http://95.164.53.115:5506/do.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:59:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861667": [
        {
            "ioc_value": "http://198.13.158.127:5506/ny.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:59",
            "last_seen_utc": "2026-07-28 16:59:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861668": [
        {
            "ioc_value": "http://23.160.168.165:7998/dieoxke893ikdkdie/stub.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:59",
            "last_seen_utc": "2026-07-28 16:59:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861669": [
        {
            "ioc_value": "http://23.160.168.165:7998/hst/test.bat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:59",
            "last_seen_utc": "2026-07-28 16:59:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861670": [
        {
            "ioc_value": "http://45.144.53.205/776.lim",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:59",
            "last_seen_utc": "2026-07-28 16:59:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861671": [
        {
            "ioc_value": "http://64.188.91.240/otks5.wav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:59",
            "last_seen_utc": "2026-07-28 16:59:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861672": [
        {
            "ioc_value": "http://78.40.209.164:5506/wk.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:59",
            "last_seen_utc": "2026-07-28 16:59:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861660": [
        {
            "ioc_value": "http://159.65.201.180/verify/request.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": "2026-07-28 16:59:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861661": [
        {
            "ioc_value": "http://178.17.59.195:5506/ll.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861662": [
        {
            "ioc_value": "http://178.17.59.26/w.txt",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": "2026-07-28 16:59:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861663": [
        {
            "ioc_value": "http://178.17.59.40:5506/qk.vbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": "2026-07-28 16:59:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861664": [
        {
            "ioc_value": "http://185.163.204.237/google.json",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": "2026-07-28 16:59:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861665": [
        {
            "ioc_value": "http://188.137.254.185/google.../nobots.../verif.../login31246",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861666": [
        {
            "ioc_value": "http://194.58.47.185/otionably.ps1",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:58",
            "last_seen_utc": "2026-07-28 16:59:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861656": [
        {
            "ioc_value": "http://103.150.186.125/1",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861657": [
        {
            "ioc_value": "http://144.31.47.76/webdav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:57",
            "last_seen_utc": "2026-07-28 16:59:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861658": [
        {
            "ioc_value": "http://157.245.34.109:8080/update.cmd",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861659": [
        {
            "ioc_value": "http://158.94.211.92/?sid=1785224650216-9tykhwly",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:58:57",
            "last_seen_utc": "2026-07-28 16:59:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861655": [
        {
            "ioc_value": "prtbakgue.wildernesscabinvacationrental.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 16:56:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861653": [
        {
            "ioc_value": "216.9.226.82:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-28 16:55:29",
            "last_seen_utc": "2026-07-30 17:20:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260728-vb8jpaac89/behavioral1",
            "tags": "xmrig",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1861654": [
        {
            "ioc_value": "194.116.236.129:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-28 16:55:29",
            "last_seen_utc": "2026-08-11 15:08:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260728-vb8jpaac89/behavioral1",
            "tags": "xmrig",
            "anonymous": 0,
            "reporter": "NDA0E"
        }
    ],
    "1861628": [
        {
            "ioc_value": "googlanalitlcs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:54:52",
            "last_seen_utc": "2026-08-28 12:36:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861629": [
        {
            "ioc_value": "trokuni412.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 16:54:51",
            "last_seen_utc": "2026-08-28 11:40:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861640": [
        {
            "ioc_value": "phiplips.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-28 16:54:50",
            "last_seen_utc": "2026-08-11 12:08:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "https://infosec.exchange/@monitorsg/116998473477272648",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1861649": [
        {
            "ioc_value": "http://91.199.133.133:8080/deploy.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 16:54:44",
            "last_seen_utc": "2026-07-30 17:50:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1861648": [
        {
            "ioc_value": "84.247.129.0:8528",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-28 16:54:43",
            "last_seen_utc": "2026-08-02 08:18:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "47f91d5254147904ebfcbeb1b4eb62a4,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861651": [
        {
            "ioc_value": "pemcad.obrolannews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 16:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861639": [
        {
            "ioc_value": "txirniuhx.untangle.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 16:09:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861637": [
        {
            "ioc_value": "ymepnq.nicholasandsharonbottart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 16:06:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861636": [
        {
            "ioc_value": "09pqwdqh.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 16:05:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861632": [
        {
            "ioc_value": "45.76.99.126:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-28 16:05:05",
            "last_seen_utc": "2026-08-22 00:03:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861627": [
        {
            "ioc_value": "57ikdje6.en-us-us-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 15:51:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861626": [
        {
            "ioc_value": "mb86k2nu.metaboddrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 15:51:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861624": [
        {
            "ioc_value": "ecsiibfaudfltusobv.debtrainbow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 15:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861607": [
        {
            "ioc_value": "lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861608": [
        {
            "ioc_value": "lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861609": [
        {
            "ioc_value": "lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861610": [
        {
            "ioc_value": "lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861611": [
        {
            "ioc_value": "lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861612": [
        {
            "ioc_value": "lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861613": [
        {
            "ioc_value": "lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861614": [
        {
            "ioc_value": "lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861615": [
        {
            "ioc_value": "lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861616": [
        {
            "ioc_value": "lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861617": [
        {
            "ioc_value": "lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861618": [
        {
            "ioc_value": "lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861619": [
        {
            "ioc_value": "lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861620": [
        {
            "ioc_value": "lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861621": [
        {
            "ioc_value": "lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lynx",
            "malware_alias": null,
            "malware_printable": "Lynx",
            "first_seen_utc": "2026-07-28 15:29:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Lynx%20Ransomware",
            "tags": "lynx,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1861622": [
        {
            "ioc_value": "hbeipbcdt.talltalesfishing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 15:26:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861605": [
        {
            "ioc_value": "ulmfab.infoscatter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 15:19:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861603": [
        {
            "ioc_value": "204.44.69.226:4231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-28 15:05:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d296afca2cf56b95c65cac551b9e6699df51d58fa568b668322797f635cef342/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861601": [
        {
            "ioc_value": "49.232.166.123:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-28 15:05:06",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861590": [
        {
            "ioc_value": "168.144.138.186:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-28 14:59:04",
            "last_seen_utc": "2026-08-03 08:25:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861593": [
        {
            "ioc_value": "nickopi141.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-28 14:59:03",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861598": [
        {
            "ioc_value": "rurheeejl.sushilandanglet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 14:39:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861596": [
        {
            "ioc_value": "zvmyzw.hotspringsvillagepeople.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 14:32:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861589": [
        {
            "ioc_value": "d2dvwf88.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 14:05:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861583": [
        {
            "ioc_value": "uqmhozbmv.hospitaldemascotas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 13:53:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861582": [
        {
            "ioc_value": "fixzba.cosaques.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 13:46:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861580": [
        {
            "ioc_value": "38.9.96.46:21003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-28 13:44:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861573": [
        {
            "ioc_value": "griffihhs.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-28 13:19:49",
            "last_seen_utc": "2026-08-11 16:10:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "monitorsg"
        }
    ],
    "1861579": [
        {
            "ioc_value": "zuvofzppp.hoehnacura.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 13:11:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861566": [
        {
            "ioc_value": "snssqb.cheznevine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 13:01:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861565": [
        {
            "ioc_value": "mon-banana-03.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 12:59:57",
            "last_seen_utc": "2026-08-14 02:18:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861564": [
        {
            "ioc_value": "yhngdjcha.greencarnationlondon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 12:33:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861561": [
        {
            "ioc_value": "ndclvm.charliestaplesbbq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 12:19:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861552": [
        {
            "ioc_value": "nd7k2mor.mumsdebtservice.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 12:04:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861551": [
        {
            "ioc_value": "dvlorrnke.goodangpao.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 11:46:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861549": [
        {
            "ioc_value": "wgdwmi.carouselauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 11:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861548": [
        {
            "ioc_value": "https://www.metropolisconsorzio.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 11:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.metropolisconsorzio.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1861546": [
        {
            "ioc_value": "158.94.208.92:61120",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 11:20:33",
            "last_seen_utc": "2026-08-16 07:39:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3891471/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861541": [
        {
            "ioc_value": "qlczenyon.gdcpemasaranbekasi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 11:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861539": [
        {
            "ioc_value": "9qmp3bl9.6oclocktrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861538": [
        {
            "ioc_value": "j6fy86hz.lockedinwestmont.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861537": [
        {
            "ioc_value": "nlwfxesxz.embassyhouston.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861535": [
        {
            "ioc_value": "hkvfut.carinocafe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:46:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861533": [
        {
            "ioc_value": "103.219.153.251:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-28 10:36:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1f01e3b931247bcd13f8b1733b472ccb3eed66b0892c230c45eea2c28a2c5cf1/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861532": [
        {
            "ioc_value": "http://cekorpafnkc.com/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-07-28 10:33:27",
            "last_seen_utc": "2026-08-04 11:12:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,SmokeLoader",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861531": [
        {
            "ioc_value": "jvfmoapeo.disnakerkopjambikota.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861530": [
        {
            "ioc_value": "2iuso53h.usa-lipogummy.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:05:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861528": [
        {
            "ioc_value": "168.144.45.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-28 10:05:05",
            "last_seen_utc": "2026-08-19 07:07:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861524": [
        {
            "ioc_value": "cvdhcp.amesburyforeignauto.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 10:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861522": [
        {
            "ioc_value": "96.126.176.92:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 09:46:46",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861521": [
        {
            "ioc_value": "93.152.223.158:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-28 09:46:44",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861520": [
        {
            "ioc_value": "49.235.50.231:14486",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-07-28 09:46:12",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861519": [
        {
            "ioc_value": "46.246.6.7:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-28 09:46:11",
            "last_seen_utc": "2026-08-30 18:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861518": [
        {
            "ioc_value": "46.151.182.76:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 09:46:09",
            "last_seen_utc": "2026-09-01 02:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861516": [
        {
            "ioc_value": "23.94.252.87:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-28 09:45:42",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861517": [
        {
            "ioc_value": "24.244.73.237:40056",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-28 09:45:42",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861515": [
        {
            "ioc_value": "23.94.252.55:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-28 09:45:41",
            "last_seen_utc": "2026-09-01 02:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861514": [
        {
            "ioc_value": "217.165.57.247:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 09:45:35",
            "last_seen_utc": "2026-08-27 18:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861513": [
        {
            "ioc_value": "207.246.75.30:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 09:44:46",
            "last_seen_utc": "2026-08-29 18:45:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861512": [
        {
            "ioc_value": "206.189.167.120:65000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 09:44:45",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861511": [
        {
            "ioc_value": "2.27.63.244:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 09:44:40",
            "last_seen_utc": "2026-09-01 02:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861510": [
        {
            "ioc_value": "178.16.53.68:3009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 09:44:13",
            "last_seen_utc": "2026-08-27 18:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861509": [
        {
            "ioc_value": "158.94.210.161:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-28 09:43:56",
            "last_seen_utc": "2026-08-30 18:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861508": [
        {
            "ioc_value": "157.245.228.139:65000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 09:43:54",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861507": [
        {
            "ioc_value": "130.12.182.249:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-28 09:43:26",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861506": [
        {
            "ioc_value": "vyujwwlgw.dinosrestaurant.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 09:18:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861505": [
        {
            "ioc_value": "dinosrestaurant.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 09:16:50",
            "last_seen_utc": "2026-07-29 04:07:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861504": [
        {
            "ioc_value": "pjlycr.adminkks777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 09:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861503": [
        {
            "ioc_value": "adminkks777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 09:11:48",
            "last_seen_utc": "2026-07-29 22:12:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861496": [
        {
            "ioc_value": "95.181.173.204:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861495": [
        {
            "ioc_value": "185.173.144.255:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861465": [
        {
            "ioc_value": "165.245.219.184:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-28 08:37:29",
            "last_seen_utc": "2026-08-03 10:06:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861466": [
        {
            "ioc_value": "207.154.240.223:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-28 08:37:29",
            "last_seen_utc": "2026-08-03 10:03:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861467": [
        {
            "ioc_value": "137.184.156.157:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-28 08:37:28",
            "last_seen_utc": "2026-08-03 10:05:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861468": [
        {
            "ioc_value": "178.128.22.21:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-28 08:37:28",
            "last_seen_utc": "2026-08-03 10:06:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861469": [
        {
            "ioc_value": "168.144.138.186:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-28 08:37:27",
            "last_seen_utc": "2026-08-03 08:57:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861477": [
        {
            "ioc_value": "https://193.111.117.131",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-28 08:37:26",
            "last_seen_utc": "2026-08-20 19:34:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,f3f52941b868d54e7936351d349364fb,loader,stealer,Vidar",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1861494": [
        {
            "ioc_value": "borny51221.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:32:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861493": [
        {
            "ioc_value": "vzsccjmct.publiccatering.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:32:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861492": [
        {
            "ioc_value": "publiccatering.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:31:02",
            "last_seen_utc": "2026-07-28 08:31:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861489": [
        {
            "ioc_value": "https://ucjuriquilla.mx/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ucjuriquilla.mx",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1861490": [
        {
            "ioc_value": "https://thecolorofcharacter.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thecolorofcharacter.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1861488": [
        {
            "ioc_value": "fgxtdo.adminfg777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:29:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861487": [
        {
            "ioc_value": "proploop.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:27:21",
            "last_seen_utc": "2026-07-28 08:28:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861486": [
        {
            "ioc_value": "adminfg777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:25:26",
            "last_seen_utc": "2026-07-29 21:53:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861485": [
        {
            "ioc_value": "uvtpqo.unitedpropertiesltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:23:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861484": [
        {
            "ioc_value": "62.60.155.6:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:18:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861483": [
        {
            "ioc_value": "wailciry9911.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:18:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861476": [
        {
            "ioc_value": "tp1mpkvn.usa-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 08:02:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861475": [
        {
            "ioc_value": "https://www.aureliaboutique.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 08:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.aureliaboutique.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1861474": [
        {
            "ioc_value": "sxdmuxtki.pcppro.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 07:44:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861473": [
        {
            "ioc_value": "acxhyz.unitedpropertiesltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 07:43:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861472": [
        {
            "ioc_value": "pcppro.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 07:41:52",
            "last_seen_utc": "2026-07-28 07:42:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861471": [
        {
            "ioc_value": "unitedpropertiesltd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 07:41:26",
            "last_seen_utc": "2026-07-28 08:22:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861470": [
        {
            "ioc_value": "thehelplinegroup.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 07:38:39",
            "last_seen_utc": "2026-07-28 07:39:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861423": [
        {
            "ioc_value": "http://27.202.57.233:59905/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-28 07:30:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.202.57.233",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1861424": [
        {
            "ioc_value": "http://14.1.106.91:54093/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-28 07:30:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.106.91",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1861464": [
        {
            "ioc_value": "106.14.243.66:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-28 07:23:35",
            "last_seen_utc": "2026-08-20 09:02:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861463": [
        {
            "ioc_value": "123.57.243.182:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-28 07:23:20",
            "last_seen_utc": "2026-07-31 04:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861462": [
        {
            "ioc_value": "fsdmkfskdojyttt.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 07:21:59",
            "last_seen_utc": "2026-08-07 05:12:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861461": [
        {
            "ioc_value": "verlfusercapa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 07:21:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861460": [
        {
            "ioc_value": "workwardrobes.lk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 07:21:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861459": [
        {
            "ioc_value": "magrumi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 07:21:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861454": [
        {
            "ioc_value": "https://www.aostaimmobiliare.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 07:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.aostaimmobiliare.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1861453": [
        {
            "ioc_value": "rcleba.tenancydeposit-claim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:58:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861452": [
        {
            "ioc_value": "dgewbwbzy.natashaparrott.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861451": [
        {
            "ioc_value": "natashaparrott.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:56:00",
            "last_seen_utc": "2026-07-28 06:56:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861450": [
        {
            "ioc_value": "91.199.133.59:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-28 06:55:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9270d36aa57eec3d44dc2d66929551198cb8a31d0ef383a726c38b75ad8144ba/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861449": [
        {
            "ioc_value": "tenancydeposit-claim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:53:13",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861448": [
        {
            "ioc_value": "duskreaverhold.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-28 06:37:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861438": [
        {
            "ioc_value": "burrberry.eth",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861439": [
        {
            "ioc_value": "ukranianhorseriding.eth",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861440": [
        {
            "ioc_value": "24carnforth2merseyside.sol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861441": [
        {
            "ioc_value": "login.trees4sale.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": "2026-07-28 06:23:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861442": [
        {
            "ioc_value": "kieron.androiddebugbridge.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": "2026-07-28 06:23:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861443": [
        {
            "ioc_value": "dysphoria.androiddebugbridge.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861444": [
        {
            "ioc_value": "telaviv.androiddebugbridge.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861445": [
        {
            "ioc_value": "jerusalem.androiddebugbridge.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861446": [
        {
            "ioc_value": "node.androiddebugbridge.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861447": [
        {
            "ioc_value": "wow.androiddebugbridge.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861437": [
        {
            "ioc_value": "m3rnbvs5d.eth",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-28 06:23:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861434": [
        {
            "ioc_value": "b0782a9d6eef2ce02f734a6e5e1d8e0f9a2b65be",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861435": [
        {
            "ioc_value": "e7e1694162639ed587625432a79cfaa49f560d11",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861436": [
        {
            "ioc_value": "b7faa44ab0772047a8581bbfdd9c561e28fc66de",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861426": [
        {
            "ioc_value": "a3b9575897c16cbf6afe3af1aa8b55171ea6edf9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861427": [
        {
            "ioc_value": "8db6c78533c176f13b61405cdc3f8fad703325f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861428": [
        {
            "ioc_value": "9c1716d770ea69e8e1418d96d52222396ecb4362",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861429": [
        {
            "ioc_value": "73651c02b29f1c07e3177e86c967fc45e9f30f0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861430": [
        {
            "ioc_value": "955ff909972958098f0d4a06bcc4d6b9eea90449",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861431": [
        {
            "ioc_value": "25081bdec05f64eb4f313420c82d8de957e30026",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861432": [
        {
            "ioc_value": "dcea71b9ab9de8efca301de9e2f7bf11c7132364",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861433": [
        {
            "ioc_value": "df510f6f69a5c149c216c7b3accc4f460d8cf363",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861425": [
        {
            "ioc_value": "c1bedea261f325441fb9a75c50b11d0c8fb01ac6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 06:22:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.xlab.qianxin.com/dysphoria/",
            "tags": "Dysphoria,JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861422": [
        {
            "ioc_value": "clwpuvknw.mumsdebtservice.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861421": [
        {
            "ioc_value": "mumsdebtservice.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:10:27",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861420": [
        {
            "ioc_value": "yoyelx.simply-bpo.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:08:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861419": [
        {
            "ioc_value": "simply-bpo.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:07:41",
            "last_seen_utc": "2026-07-28 22:06:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861414": [
        {
            "ioc_value": "gl8hkgoz.usa--lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 06:01:55",
            "last_seen_utc": "2026-07-28 08:00:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861176": [
        {
            "ioc_value": "patrins.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.5t_downloader",
            "malware_alias": null,
            "malware_printable": "5.t Downloader",
            "first_seen_utc": "2026-07-28 05:57:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861333": [
        {
            "ioc_value": "bechisalbinoantenne.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 05:57:33",
            "last_seen_utc": "2026-08-15 09:59:04",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2126",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1861339": [
        {
            "ioc_value": "cooldogshistory.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-28 05:57:33",
            "last_seen_utc": "2026-08-15 20:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861341": [
        {
            "ioc_value": "ilikegoodpersontoo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-28 05:57:33",
            "last_seen_utc": "2026-08-15 20:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861342": [
        {
            "ioc_value": "laplateforme93-rh.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 05:57:33",
            "last_seen_utc": "2026-08-18 09:22:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/1984",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1861335": [
        {
            "ioc_value": "stac.com.vn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 05:57:32",
            "last_seen_utc": "2026-08-18 07:27:34",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2009",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1861340": [
        {
            "ioc_value": "godhelp-us.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-28 05:57:32",
            "last_seen_utc": "2026-08-15 20:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ErrTraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1861363": [
        {
            "ioc_value": "http://182.112.30.222:60319/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-28 05:57:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.112.30.222",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1861364": [
        {
            "ioc_value": "http://139.135.44.17:33905/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-28 05:57:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.44.17",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1861365": [
        {
            "ioc_value": "http://14.1.106.10:37095/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-28 05:57:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.106.10",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1861413": [
        {
            "ioc_value": "d3qx7quq68rdce.cloudfront.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.astarion_rat",
            "malware_alias": "MIMICRAT",
            "malware_printable": "AstarionRAT",
            "first_seen_utc": "2026-07-28 05:53:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861412": [
        {
            "ioc_value": "1zlu7sit.lltreeremoval.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 05:51:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861411": [
        {
            "ioc_value": "uk309jxn.sparta--max.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 05:50:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861409": [
        {
            "ioc_value": "azumcfpka.housinghelper.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 05:27:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861408": [
        {
            "ioc_value": "trdisd.simply-bpo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 05:27:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861407": [
        {
            "ioc_value": "fairpi521.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-28 05:23:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861406": [
        {
            "ioc_value": "simply-bpo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 05:22:05",
            "last_seen_utc": "2026-07-28 05:22:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861405": [
        {
            "ioc_value": "203.159.90.151:4242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-28 05:13:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4c5fc1896f633b28f6a102c6cf0e83cce39be8ede9e4b0f91f5ef9c42e6ab7c5/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861400": [
        {
            "ioc_value": "pwhife.shop-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 04:41:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861399": [
        {
            "ioc_value": "vutvfrxtn.housingadvice.org.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 04:41:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861394": [
        {
            "ioc_value": "38.60.242.230:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-28 04:05:05",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861393": [
        {
            "ioc_value": "pvhvhv7n.thelibertytoken.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 04:00:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861392": [
        {
            "ioc_value": "uktdrm.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 03:56:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861391": [
        {
            "ioc_value": "ohqdboshn.hear-easy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 03:54:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861389": [
        {
            "ioc_value": "wdkvpsoyy.glycovits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 03:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861388": [
        {
            "ioc_value": "hpdhfc.merit-uk.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 03:07:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861382": [
        {
            "ioc_value": "bxcyxs.lowermyoverheads.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 02:25:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861381": [
        {
            "ioc_value": "nqwmecstw.fraudhelper.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 02:23:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861380": [
        {
            "ioc_value": "duehywnml.fraudhelper.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 02:21:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861375": [
        {
            "ioc_value": "78wuc7cl.sppartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 02:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861374": [
        {
            "ioc_value": "yoaqwu.lipogammy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 01:36:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861373": [
        {
            "ioc_value": "hcfaifcbu.franbellamail.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 01:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861370": [
        {
            "ioc_value": "zbaxyauyx.eng-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861369": [
        {
            "ioc_value": "rxdfjo.liberty-token.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861368": [
        {
            "ioc_value": "83dwnguj.shop-tupitea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:49:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861367": [
        {
            "ioc_value": "ieat5hjq.littlecreationsacademy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:49:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861358": [
        {
            "ioc_value": "bkgfshsbe.en-us-us-metabodrop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:04:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861357": [
        {
            "ioc_value": "pdasvg.kkslot777.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:03:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861356": [
        {
            "ioc_value": "c9wivbtb.www-tupitea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-28 00:01:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861354": [
        {
            "ioc_value": "158.94.211.163:24443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 23:45:57",
            "last_seen_utc": "2026-08-26 22:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861355": [
        {
            "ioc_value": "159.94.211.163:24443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 23:45:57",
            "last_seen_utc": "2026-08-26 22:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861353": [
        {
            "ioc_value": "eztdugurr.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 23:19:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861352": [
        {
            "ioc_value": "itnhye.jawahirjewels.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 23:18:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861338": [
        {
            "ioc_value": "snnfsk.ushealthlaboratories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 22:32:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861337": [
        {
            "ioc_value": "tlmevyemf.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 22:32:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861336": [
        {
            "ioc_value": "ampfrr.shop-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 22:31:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861326": [
        {
            "ioc_value": "189.249.193.61:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 22:05:05",
            "last_seen_utc": "2026-08-29 08:44:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861325": [
        {
            "ioc_value": "v0a4ke9x.www-metabodrops.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 21:59:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861323": [
        {
            "ioc_value": "dbodpo.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 21:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861322": [
        {
            "ioc_value": "ikwdzlazd.eng-lotterymaximizer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 21:45:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861321": [
        {
            "ioc_value": "6afcaa8ef95e2867087f41d30b3e3e1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861318": [
        {
            "ioc_value": "fe1f23de8bd1e84ad1a33939638144ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861319": [
        {
            "ioc_value": "55328cd52aed6e375338b394b1bb8c4a1438e52d3ddf079c316f05e764b6f72d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861320": [
        {
            "ioc_value": "29a21b6970cf47fe514bdff500d8b1d326420024",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861315": [
        {
            "ioc_value": "068fe402eb8cdbb0fe21f972ac4a23fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.orbit",
            "malware_alias": null,
            "malware_printable": "OrBit",
            "first_seen_utc": "2026-07-27 21:08:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861316": [
        {
            "ioc_value": "6342bad7408a482326ff663f94f092e5c8e7757f83a6b4a3c39b80e113338c0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861317": [
        {
            "ioc_value": "ed62786497220ef110a774aebe24e400f0ed8517",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861314": [
        {
            "ioc_value": "c71045ed086daee981779b0bd7f63ca426040b80",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.orbit",
            "malware_alias": null,
            "malware_printable": "OrBit",
            "first_seen_utc": "2026-07-27 21:08:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861312": [
        {
            "ioc_value": "8a5bc9290195e29bfc9214ffa8e13126",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861313": [
        {
            "ioc_value": "3da1a4045d67c272137310c4df4ef6dfd0fbae684ac8c0fc76b4f2e31eb8138a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.orbit",
            "malware_alias": null,
            "malware_printable": "OrBit",
            "first_seen_utc": "2026-07-27 21:08:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861310": [
        {
            "ioc_value": "68891e60955a121e092f5b987100b85f2f3c75af0a7636161dbab9ca2ec04848",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861311": [
        {
            "ioc_value": "aca464ae81f26c415a65fadd91cceea55716d617",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:08:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861307": [
        {
            "ioc_value": "0c6481df65a681fda1687390258e80f944f39302f43cb8f3b44e105ade208d35",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861308": [
        {
            "ioc_value": "4ada6dc4d65fb0140e14c6c77c1493649b598180",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861309": [
        {
            "ioc_value": "cc00c3d0b5b43385fca3378c5b86d62f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861305": [
        {
            "ioc_value": "8883ff5ff4ba025a42255ce0fa45ce7bf5c2c146",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-27 21:07:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861306": [
        {
            "ioc_value": "148d43b07def3619cf07a1d440892e6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-27 21:07:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861302": [
        {
            "ioc_value": "1cfab76ae6d607178bd827ec019639d4111a98a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861303": [
        {
            "ioc_value": "f090a25b25faae55a0a11648a890b12e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861304": [
        {
            "ioc_value": "169fd9264d4e5b84e514cd34a0e69c2c56667393546434282f8957bc045a091e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-27 21:07:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861299": [
        {
            "ioc_value": "7f07e04bac9bacca611cbf17faeb4c51023b74c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861300": [
        {
            "ioc_value": "6a68ab6943313c4d3a38803d5a8220f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861301": [
        {
            "ioc_value": "0be457a4975587e112cc1027dd69302c5b549c30f706fdbd8a6b38aefe65c40f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861296": [
        {
            "ioc_value": "de7058158b7d66c52628a644de65948e95319409",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861297": [
        {
            "ioc_value": "ee9b4e39dc11f3d69fcaa4cadb4d5877",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861298": [
        {
            "ioc_value": "3a25c7bb48b995f62f57268c8ddfc38379d194cafb794832a00a0504649dc1d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861293": [
        {
            "ioc_value": "d46536ea19b177f95ea4e0568f901ca24cfdb42b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861294": [
        {
            "ioc_value": "00dbca757e6417308d3fc080010a6ff3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861295": [
        {
            "ioc_value": "47619d7345812a0d9238054398fb88bc1679562a7421c1b59927fa67768df03a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861290": [
        {
            "ioc_value": "c9803b820b9f78adb1650f4423f41741aaa29cf3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861291": [
        {
            "ioc_value": "97e69b9ef7bdb56475e676ab9b81b0e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861292": [
        {
            "ioc_value": "3abd369c9c2e1473522baf55605a5e81cf3943d8131c6d85fa66b5a247b44fbf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861286": [
        {
            "ioc_value": "ede9c431d764668322e68d0ed9277e3d2aacc4904fca4f3a09f11d8662d3365a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861287": [
        {
            "ioc_value": "96107ce1969b19a786fdfe0ba810bbb49c03aa1c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861288": [
        {
            "ioc_value": "1625da7558b52226c5fbd151f8b96c3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861289": [
        {
            "ioc_value": "1a0e24c66991f2ef18b8b6b697b0fe3dbaefe3d3bae4698e732fb220c7c22f93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 21:07:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861283": [
        {
            "ioc_value": "9a7fdfd933725c6cc3345da81b6ee2d6903e225f961aa18efa5b5a9447f4b015",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 21:07:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861284": [
        {
            "ioc_value": "30bc73c6672e6c46d21086a04762ce4170fd4e99",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 21:07:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861285": [
        {
            "ioc_value": "a3db22547419f693905d3dd045ee9f84",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 21:07:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861280": [
        {
            "ioc_value": "5395ef7901731de4f83aaacf2757416a1830aa608ee38d70d4da8caf466fbff6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861281": [
        {
            "ioc_value": "f9ec500cc050101e0e2f45f94e6906edd9fb8d2b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861282": [
        {
            "ioc_value": "3549f1fba922f40330aaa081ce71fed2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861277": [
        {
            "ioc_value": "6f23c7805963d98f57ba6497f17168967545e203774f383b23807f0dcb86e0d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861278": [
        {
            "ioc_value": "8057152364fdbcbd18811eb09baabae1a32b2db5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861279": [
        {
            "ioc_value": "7696f9286237810feb2fcdce7eb6b953",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861275": [
        {
            "ioc_value": "64ba56ced1e0e90c8d4452705796474c8ebb1704",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861276": [
        {
            "ioc_value": "5f31264fd0ff12d16e2bdc00ca1aa9bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861272": [
        {
            "ioc_value": "7fe8414fe3bc35854a30b5ad87e3f8b5c1fa199f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 21:07:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861273": [
        {
            "ioc_value": "c037ac52a26a18e7b2e911415e85a080",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 21:07:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861274": [
        {
            "ioc_value": "5b5dea9b505a23af56dae67e2d847bbe97ca17bd4560f41d6b604c71f4870d75",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861269": [
        {
            "ioc_value": "a5412dccd1a204bcd76e09b99a16140da3b9bf09",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861270": [
        {
            "ioc_value": "1e613dec8beebebd6baaea91998a628e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861271": [
        {
            "ioc_value": "8cf7bbe8eb52f88bf5c7129b4923acff510275d5c47a38bf82667c102e6e8c9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 21:07:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861266": [
        {
            "ioc_value": "53fa5d6d3cf75f2444a38907d1170cd820cf2196",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861267": [
        {
            "ioc_value": "d2577b85f5a29ef579bfdfdb64cfa874",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861268": [
        {
            "ioc_value": "998ea71c9c2d89374f17d5dc2d0d83abd5845849af7d87cff96542614e3364a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861263": [
        {
            "ioc_value": "ba088de3a2d3e05a7af056af4a47912f64f96201",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861264": [
        {
            "ioc_value": "bd11a6b7c86bfe4e0fd407b0be2554e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861265": [
        {
            "ioc_value": "c17da88435a502ed14c705832371807419a7494a26be1c32329d4dc017477f09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861260": [
        {
            "ioc_value": "84252044f7af6478ec0d2db1f5f6330ae8341b11",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861261": [
        {
            "ioc_value": "81c226154c7663bb3f1b0df208dcf664",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861262": [
        {
            "ioc_value": "d2e9f95d58c56a2c000577b00a0d04bb96d8f9479e115c8dbd20e00195604971",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861257": [
        {
            "ioc_value": "136eef90751334d3718816c1f16b37668db305ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861258": [
        {
            "ioc_value": "258b98ded097462bc668ee1ca8e56c60",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861259": [
        {
            "ioc_value": "7fecb00580517395eab594588d4b4efd2154d6160f20ee8da298d613d9223e64",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-27 21:07:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861254": [
        {
            "ioc_value": "f04b1e5629e167d21f16eac25416c316472af070",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861255": [
        {
            "ioc_value": "0cade3a07d296e0e228a45df3657311a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861256": [
        {
            "ioc_value": "324a60acad30f9940a829594943d9e7a33ad1c32989b35ff6545e5a2df759be6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861251": [
        {
            "ioc_value": "e0d61ce862f8bcfde7643cd1230bb14441516fb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-27 21:07:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861252": [
        {
            "ioc_value": "72990e94e0316066e2fc625b64fa0626",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-27 21:07:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861253": [
        {
            "ioc_value": "6f941dfcffe99df17e9f8a5052127d0b42ae5ed6e4636a7e4ffe0b89161acbb8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861248": [
        {
            "ioc_value": "7f41c5645853c5085c49ccdd4d035ce137a09762",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 21:07:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861249": [
        {
            "ioc_value": "deac2af8f25970ebdf88d617037f6b56",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 21:07:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861250": [
        {
            "ioc_value": "ef56d1386af7c97a5cd0b70c261de7e87f6c00894e3f30856adfc750a7b73b3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-27 21:07:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861245": [
        {
            "ioc_value": "4116f49a0f39ecb828c34215ea0b3701a380991a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861246": [
        {
            "ioc_value": "bd37be6c711b63c2ef91a37259d4563f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861247": [
        {
            "ioc_value": "17d5023a4778003af6f2d2a02d9e8b3719b9a3c78e314a25b5652e965e95906c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 21:07:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861242": [
        {
            "ioc_value": "357aec6973f9593ed518771d638f589d860565b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-27 21:07:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861243": [
        {
            "ioc_value": "c04a9778333a061ce8b2f3fee16d8cbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-27 21:07:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861244": [
        {
            "ioc_value": "2945c9a7bdcd541372a883eed3a1e045ff39078c5bfec708aee3e5e1b5b80311",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861239": [
        {
            "ioc_value": "91b31807f78c59ac463c15e2a4a94d3e4ec85958",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 21:07:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861240": [
        {
            "ioc_value": "653498f67781d06904988a7c36d7097e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 21:07:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861241": [
        {
            "ioc_value": "45f16a66c72637fc6b473f23896e73b7a8a3e88d564ab1541a7ee39a5b41e441",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-27 21:07:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861236": [
        {
            "ioc_value": "725267275ae18ea5f45798957c100eb3136edda6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861237": [
        {
            "ioc_value": "d71b2f14528e27c87ecf8b786c252d57",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861238": [
        {
            "ioc_value": "600cf8533d43cc3b073ab18ed728cb4c9c037870c53ab8f0eb66bf225a3ac7e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 21:07:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861233": [
        {
            "ioc_value": "7d64a644d8a36da7188ed6ffd41e1db0cb9c35f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861234": [
        {
            "ioc_value": "2643d603d7ab8745978cd1ee44f18a39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861235": [
        {
            "ioc_value": "a006492687681003d32393ccdd5b050340342672a29698d3cc399e4e2471bcf5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861230": [
        {
            "ioc_value": "16b27e574fd32f23eb061fe1c8f699df9d338b54",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-27 21:07:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861231": [
        {
            "ioc_value": "49272795f5841c4b742e247cfa9d2bc0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-27 21:07:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861232": [
        {
            "ioc_value": "1c067af5665a62e9251484c94bd2e2cbc734f97cf1c7243f62199abfabf43d19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 21:07:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861228": [
        {
            "ioc_value": "73c4a1248e4fb6bb8430872a61ea76ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-27 21:07:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861229": [
        {
            "ioc_value": "2521192853e4857386d89f555851adfdebde3a939199f939f93068058718e72e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-27 21:07:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861225": [
        {
            "ioc_value": "b909d08eaab5ebd97e5ee9af79d9952a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861226": [
        {
            "ioc_value": "9787788d19b47b0b3a18a71ae37b23a372635d652028601c1d2f99f005070da5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-27 21:07:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861227": [
        {
            "ioc_value": "517c8575d14540ecd15df6714cbb226b2f6c0e21",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-27 21:07:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861221": [
        {
            "ioc_value": "9d0c78e7d08e01fe65858d1e2c690af0c79cc209",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 21:07:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861222": [
        {
            "ioc_value": "5fae196b68afca48ce650acc79e25126",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 21:07:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861223": [
        {
            "ioc_value": "e15b78ffb8b880b99ea1dbc2f51d1426fa0d72da39c10e5a0e364d62ccfaa1ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861224": [
        {
            "ioc_value": "e03a3925deefb4888331a3c9573a5199248ac9f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861217": [
        {
            "ioc_value": "7d98375b03ed4def16841cc9b749a9297701edf20cba2f6f64bf96fcc995c79d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 21:07:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861218": [
        {
            "ioc_value": "6dbce49761da2db96277b1c7cd65176ca9b7fa58",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 21:07:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861219": [
        {
            "ioc_value": "39763d60e7122f64bd38797e83ef7977",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 21:07:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861220": [
        {
            "ioc_value": "56cc93be915c0d59943d0bf3c91dc1956b0af95939b812679197d3607829713f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 21:07:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861214": [
        {
            "ioc_value": "5326cd216b594557d92a20e67d1074e532c4817ebc078ca41e9d92d315c160e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 21:07:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861215": [
        {
            "ioc_value": "b36cdaa68a18962e07f3d9c862b4f0bf17c16345",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 21:07:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861216": [
        {
            "ioc_value": "a0995e073911c897ff2b5652a8bad3a8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 21:07:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861212": [
        {
            "ioc_value": "58a7e2f5ca176afbdeffc8634bdb5bc105b91dde",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-27 21:07:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861213": [
        {
            "ioc_value": "17005c9a5f2a9a57fe71ced46712c688",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-27 21:07:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861209": [
        {
            "ioc_value": "21a14766846449b8f7b65b2b680b936e87320385",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861210": [
        {
            "ioc_value": "cffac6c24519fd656a99ddfe63611a27",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861211": [
        {
            "ioc_value": "62e631c68ba9392dc91e19cdc4f5e00bc0e303764c9f5c27ce2be6bf40bcc933",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-27 21:07:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861206": [
        {
            "ioc_value": "34c6e16bc42a5af390991d61f78a98bc6ed87c2f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861207": [
        {
            "ioc_value": "8347c0d21537e847ab3572dd45ba17d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861208": [
        {
            "ioc_value": "ab4394c429efc69b6927a5eb6ecfe7e2cc3df99dd2d279f96729d72a8283e85f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861203": [
        {
            "ioc_value": "980f07f67302d588946e920dfdabdca3d3a8a05d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861204": [
        {
            "ioc_value": "4f7a468bdcf482f08bd014ae52db5299",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861205": [
        {
            "ioc_value": "72da1a3abc1230fdbb9a1a7ac21b490b6482e14cbcfa9b8f5913af03d99fabde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861200": [
        {
            "ioc_value": "f5f2634f60b18f0eddb9edd155f89329d85315a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861201": [
        {
            "ioc_value": "80bd4cf388f4109cbf2ec1433a1813aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861202": [
        {
            "ioc_value": "a3b454082dcbf17d64ec6539870404fb7dd99ba49a69f7f4d98b1b31c436c199",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861196": [
        {
            "ioc_value": "a7c07b87c4968d7ac8120e2c6fb40ccd615d1bd25d4445fbe129d7c66235740a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861197": [
        {
            "ioc_value": "26539d95c0c1a9b872469dab1e0d09ca54df9207",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861198": [
        {
            "ioc_value": "f27c7e9e44efa74a367eff0200584d01",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861199": [
        {
            "ioc_value": "50421a15ad2458ac9518a4c8fe3b5c8341ac87d7838327d2eb55fa94fe334a39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 21:07:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861193": [
        {
            "ioc_value": "89d0178c292a0230d69c1de53f5e55994d195329cbbbacbaa7fb2e6101917b63",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861194": [
        {
            "ioc_value": "9ada72bf5ea6e4464cd63605a1ec4fdb69b28dbe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861195": [
        {
            "ioc_value": "b9974299de794e9b5e30ec95f7849e97",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-27 21:07:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861190": [
        {
            "ioc_value": "9cae45ef7526eb2c7db2a7ed5f5b2af93cb55d5cbecf907f9a07afef887b54b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-27 21:07:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861191": [
        {
            "ioc_value": "ee1972dd5b96bd33dee22c6bee867e95f0e75c5c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-27 21:07:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861192": [
        {
            "ioc_value": "6159d556244d9b3bdf4db6c7ea971cd5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-27 21:07:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861187": [
        {
            "ioc_value": "405904c8a9ec04b73ac95b7e43a4c9c567b526d178257b56e4a8d812f478ddc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861188": [
        {
            "ioc_value": "449e042db9b793c224bb1fbdf024e3ba8adde226",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861189": [
        {
            "ioc_value": "00dee4b7bc493f6c89e9e5dc9467f892",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-27 21:07:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861185": [
        {
            "ioc_value": "b77d5d846a70f979b1b4d5761bb4967f037ea841",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.supper",
            "malware_alias": "SocksShell,ZAPCAT",
            "malware_printable": "Supper",
            "first_seen_utc": "2026-07-27 21:07:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861186": [
        {
            "ioc_value": "4124a167cef576ccae119247431709f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.supper",
            "malware_alias": "SocksShell,ZAPCAT",
            "malware_printable": "Supper",
            "first_seen_utc": "2026-07-27 21:07:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861184": [
        {
            "ioc_value": "6a12f1b9d531003b507b251a6fbbd9fc8c3673bb386852749c161730fbc312d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.supper",
            "malware_alias": "SocksShell,ZAPCAT",
            "malware_printable": "Supper",
            "first_seen_utc": "2026-07-27 21:07:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1861181": [
        {
            "ioc_value": "36.139.36.124:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-27 21:05:07",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "adaptix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861178": [
        {
            "ioc_value": "xpcnbrpll.eng-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 21:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861177": [
        {
            "ioc_value": "ckhycd.lipogammy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 21:01:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861175": [
        {
            "ioc_value": "79.141.165.140:2549",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-27 20:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NetSupport",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1861174": [
        {
            "ioc_value": "hatshdnxi.merit-uk.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 20:15:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861173": [
        {
            "ioc_value": "suvjqi.liberty-token.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 20:14:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1861172": [
        {
            "ioc_value": "merit-uk.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 20:14:25",
            "last_seen_utc": "2026-07-28 03:06:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1861166": [
        {
            "ioc_value": "epltd3ga.kkslot777.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 20:00:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860853": [
        {
            "ioc_value": "egybeautyafrica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:57:07",
            "last_seen_utc": "2026-08-25 16:30:18",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860747": [
        {
            "ioc_value": "nqnlh9i9.shop-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860746": [
        {
            "ioc_value": "dwfbenn9.qlaneturnstiles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:49:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860744": [
        {
            "ioc_value": "46.151.182.76:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 19:45:24",
            "last_seen_utc": "2026-09-01 02:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860743": [
        {
            "ioc_value": "204.44.69.230:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 19:44:20",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860742": [
        {
            "ioc_value": "155.138.203.207:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 19:43:38",
            "last_seen_utc": "2026-08-27 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860740": [
        {
            "ioc_value": "137.220.155.44:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-27 19:43:24",
            "last_seen_utc": "2026-08-27 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860741": [
        {
            "ioc_value": "137.220.155.44:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-27 19:43:24",
            "last_seen_utc": "2026-08-27 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860739": [
        {
            "ioc_value": "130.12.182.249:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860738": [
        {
            "ioc_value": "130.12.182.249:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860737": [
        {
            "ioc_value": "109.122.18.38:5552",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 19:43:16",
            "last_seen_utc": "2026-08-27 08:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860736": [
        {
            "ioc_value": "sgspmozgq.lowermyoverheads.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:34:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860735": [
        {
            "ioc_value": "eqidyf.hear-easy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:33:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860734": [
        {
            "ioc_value": "https://edenads.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 19:30:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/edenads.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860733": [
        {
            "ioc_value": "breakneckridgefarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 19:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860732": [
        {
            "ioc_value": "lowermyoverheads.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:28:50",
            "last_seen_utc": "2026-07-28 02:20:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860731": [
        {
            "ioc_value": "hear-easy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 19:28:27",
            "last_seen_utc": "2026-08-06 04:46:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860730": [
        {
            "ioc_value": "https://t.me/+viEc3YLkulJhNTc0",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 19:27:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,dead-drop",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860729": [
        {
            "ioc_value": "fine-work-team.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 19:26:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860728": [
        {
            "ioc_value": "woxtvuojcsdld.mamglaqwek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 19:11:02",
            "last_seen_utc": "2026-08-05 14:01:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.clickfixed.uk/intel/2916",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860724": [
        {
            "ioc_value": "https://hypeairdrop.us/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 19:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hypeairdrop.us",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860580": [
        {
            "ioc_value": "159.65.143.171:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-27 19:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1860696": [
        {
            "ioc_value": "196.251.107.6:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 19:00:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=267e877",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1860706": [
        {
            "ioc_value": "93.114.194.75:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-27 19:00:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1860716": [
        {
            "ioc_value": "dist.eventgateway.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 19:00:35",
            "last_seen_utc": "2026-07-27 18:13:52",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/browse/tag/ACRStealer/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1860717": [
        {
            "ioc_value": "http://42.234.144.27:35871/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 19:00:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/42.234.144.27",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1860718": [
        {
            "ioc_value": "http://103.244.172.140:39200/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 19:00:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.140",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1860723": [
        {
            "ioc_value": "lhsighlrp.jawahirjewels.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 18:48:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860722": [
        {
            "ioc_value": "jofqbg.fraudhelper.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 18:44:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860721": [
        {
            "ioc_value": "jawahirjewels.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 18:43:47",
            "last_seen_utc": "2026-07-27 23:17:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860713": [
        {
            "ioc_value": "173.249.212.231:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 18:05:07",
            "last_seen_utc": "2026-08-27 18:44:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860712": [
        {
            "ioc_value": "khpnej.franbellamail.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:58:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860711": [
        {
            "ioc_value": "xnsvmbfqc.housinghelper.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:58:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860710": [
        {
            "ioc_value": "zypi5dbf.en-us-us-metabodrop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:57:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860709": [
        {
            "ioc_value": "housinghelper.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:57:49",
            "last_seen_utc": "2026-08-06 04:46:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860708": [
        {
            "ioc_value": "franbellamail.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:57:25",
            "last_seen_utc": "2026-07-28 01:34:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860707": [
        {
            "ioc_value": "en-us-us-metabodrop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:56:16",
            "last_seen_utc": "2026-07-28 00:02:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860705": [
        {
            "ioc_value": "ustfdbexp.housingadvice.org.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:14:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860704": [
        {
            "ioc_value": "eqzfvc.glycovits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:14:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860703": [
        {
            "ioc_value": "housingadvice.org.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:12:22",
            "last_seen_utc": "2026-07-28 04:39:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860702": [
        {
            "ioc_value": "glycovits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 17:11:55",
            "last_seen_utc": "2026-07-28 03:08:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860701": [
        {
            "ioc_value": "carrenzaalwarex.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-27 17:10:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1c067af5665a62e9251484c94bd2e2cbc734f97cf1c7243f62199abfabf43d19/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860697": [
        {
            "ioc_value": "rtlyeadry.thelibertytoken.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 16:26:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860695": [
        {
            "ioc_value": "dnpejc.eng-lotterymaximizer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 16:25:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860694": [
        {
            "ioc_value": "eng-lotterymaximizer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 16:24:06",
            "last_seen_utc": "2026-08-07 00:14:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860683": [
        {
            "ioc_value": "ovq3ncff.eachway-multiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 15:55:43",
            "last_seen_utc": "2026-08-15 05:42:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860679": [
        {
            "ioc_value": "tzpx.courses",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:45",
            "last_seen_utc": "2026-08-15 08:47:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860680": [
        {
            "ioc_value": "wertexnew.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860681": [
        {
            "ioc_value": "with-hypergolic.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860682": [
        {
            "ioc_value": "zernvia.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860665": [
        {
            "ioc_value": "horizonl.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860666": [
        {
            "ioc_value": "iuta.today",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860667": [
        {
            "ioc_value": "kotoyk.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860668": [
        {
            "ioc_value": "marxgo.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860669": [
        {
            "ioc_value": "netbst.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860670": [
        {
            "ioc_value": "nexzen.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860671": [
        {
            "ioc_value": "prochr.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860672": [
        {
            "ioc_value": "ruhrvr.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860673": [
        {
            "ioc_value": "smaeak.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860674": [
        {
            "ioc_value": "syntaxj.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860675": [
        {
            "ioc_value": "tallyr.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860676": [
        {
            "ioc_value": "teaspor.cloud",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860677": [
        {
            "ioc_value": "treify.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860678": [
        {
            "ioc_value": "tyxa.today",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860649": [
        {
            "ioc_value": "angect.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860650": [
        {
            "ioc_value": "citife.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860651": [
        {
            "ioc_value": "columna.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860652": [
        {
            "ioc_value": "digiace.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860653": [
        {
            "ioc_value": "dikdiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860654": [
        {
            "ioc_value": "dreaub.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860655": [
        {
            "ioc_value": "easeal.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860656": [
        {
            "ioc_value": "elbowa.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860657": [
        {
            "ioc_value": "envelzm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860658": [
        {
            "ioc_value": "exuviai.cloud",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860659": [
        {
            "ioc_value": "fasea.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860660": [
        {
            "ioc_value": "fervxy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860661": [
        {
            "ioc_value": "fimmora.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": "2026-08-15 08:47:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860662": [
        {
            "ioc_value": "freshis.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860663": [
        {
            "ioc_value": "geminyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860664": [
        {
            "ioc_value": "hairkeratin.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 15:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860648": [
        {
            "ioc_value": "ultrasshell1.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 15:40:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ede9c431d764668322e68d0ed9277e3d2aacc4904fca4f3a09f11d8662d3365a/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860647": [
        {
            "ioc_value": "npmrjgdquafdhwjngw.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 15:40:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860646": [
        {
            "ioc_value": "ivbrwc.eng-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 15:38:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860645": [
        {
            "ioc_value": "128.90.103.111:11005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 15:35:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860644": [
        {
            "ioc_value": "https://omarakitchencabinets.genxe.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/omarakitchencabinets.genxe.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860642": [
        {
            "ioc_value": "https://clocktowerhighered.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/clocktowerhighered.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860643": [
        {
            "ioc_value": "https://bss.edu.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bss.edu.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860630": [
        {
            "ioc_value": "stage6.stillpath8.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860631": [
        {
            "ioc_value": "status7.skypress.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860632": [
        {
            "ioc_value": "store.framecove.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860633": [
        {
            "ioc_value": "sync.northform.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860634": [
        {
            "ioc_value": "task.valley-north.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860635": [
        {
            "ioc_value": "test.kilnteam35.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860636": [
        {
            "ioc_value": "trace.lunartempo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": "2026-08-06 09:03:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860637": [
        {
            "ioc_value": "trace.novagarden.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860638": [
        {
            "ioc_value": "vault8.brighttempo.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860639": [
        {
            "ioc_value": "watch.common-store.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860640": [
        {
            "ioc_value": "watch.harvestbazaar.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860641": [
        {
            "ioc_value": "watch7.deepclimate.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860621": [
        {
            "ioc_value": "push.pixelplaza.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860622": [
        {
            "ioc_value": "push.shorecourt.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860623": [
        {
            "ioc_value": "queue.cdnbazaar.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860624": [
        {
            "ioc_value": "registry.amberscreen.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860625": [
        {
            "ioc_value": "report.clearlens.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860626": [
        {
            "ioc_value": "route4.modellab84.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860627": [
        {
            "ioc_value": "scan.civicblaze.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860628": [
        {
            "ioc_value": "setup.explore-store.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860629": [
        {
            "ioc_value": "stage.mycourt33.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860608": [
        {
            "ioc_value": "meta1.net-weather.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860609": [
        {
            "ioc_value": "metric.mentorcreek25.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860610": [
        {
            "ioc_value": "monitor5.roast-core85.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": "2026-08-24 19:51:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860611": [
        {
            "ioc_value": "node.gentleroom.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860612": [
        {
            "ioc_value": "node3.meadowrhythm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": "2026-08-09 09:22:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860613": [
        {
            "ioc_value": "ops.canvascampus.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860614": [
        {
            "ioc_value": "ping.node-stock.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860615": [
        {
            "ioc_value": "ping0.aqua-grid77.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860616": [
        {
            "ioc_value": "portal.framerun.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860617": [
        {
            "ioc_value": "prod.commonsource14.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": "2026-08-08 09:31:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860618": [
        {
            "ioc_value": "proxy.everatlas.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860619": [
        {
            "ioc_value": "pull.alpha-zone.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860620": [
        {
            "ioc_value": "pull7.motiondepot.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860597": [
        {
            "ioc_value": "event.wanderwest.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860598": [
        {
            "ioc_value": "files4.jade-hub.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860599": [
        {
            "ioc_value": "gate.steadygroup.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860600": [
        {
            "ioc_value": "gate.voyagezone.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860601": [
        {
            "ioc_value": "guard.warm-climate.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860602": [
        {
            "ioc_value": "health0.pinetile86.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860603": [
        {
            "ioc_value": "lab.loomweather.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860604": [
        {
            "ioc_value": "log.neonhq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860605": [
        {
            "ioc_value": "lookup.hazelshelf.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860606": [
        {
            "ioc_value": "main.commontexture76.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860607": [
        {
            "ioc_value": "meta.bench-grid.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860587": [
        {
            "ioc_value": "archive.mintfair.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860588": [
        {
            "ioc_value": "assets5.frameai35.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860589": [
        {
            "ioc_value": "board8.creekpath.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860590": [
        {
            "ioc_value": "bridge.garden-pixel.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860591": [
        {
            "ioc_value": "cache.coastpilot.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860592": [
        {
            "ioc_value": "content.lakepeak.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860593": [
        {
            "ioc_value": "dev2.kitchensignal.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860594": [
        {
            "ioc_value": "edge.ivorytexture.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860595": [
        {
            "ioc_value": "edge.kitchencraft.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": "2026-08-18 10:32:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860596": [
        {
            "ioc_value": "edge1.gentleline.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860584": [
        {
            "ioc_value": "admin.topsite.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860585": [
        {
            "ioc_value": "admin9.planden35.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860586": [
        {
            "ioc_value": "api.atlasbyte.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-27 15:30:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1860583": [
        {
            "ioc_value": "yvesrxkzcdxycnarab.crownconnectpk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 15:21:52",
            "last_seen_utc": "2026-08-14 23:40:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860582": [
        {
            "ioc_value": "khekev.eng-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 15:20:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860581": [
        {
            "ioc_value": "eng-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 15:11:23",
            "last_seen_utc": "2026-08-07 00:14:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860574": [
        {
            "ioc_value": "pro-d63a.protexweer.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:03:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860575": [
        {
            "ioc_value": "still-snow-667e.protexweer.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:03:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860573": [
        {
            "ioc_value": "pro-2734.protexweer.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860572": [
        {
            "ioc_value": "protexweer.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 15:03:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860571": [
        {
            "ioc_value": "46.225.151.177:46361",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 14:51:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a9bc8ccffb59006e917092ef0a8d72e6b2c6e29c7d2839dfea219f9a510405b6/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860570": [
        {
            "ioc_value": "84.247.129.0:5291",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 14:50:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c5a3d94cb6b4be539b68401e2fbd8008740d230109ee13a5b3b863f8e2d935c1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860569": [
        {
            "ioc_value": "http://easeal.top:5291",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c5a3d94cb6b4be539b68401e2fbd8008740d230109ee13a5b3b863f8e2d935c1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860563": [
        {
            "ioc_value": "112.121.176.3:47001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 14:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860564": [
        {
            "ioc_value": "112.121.176.6:47001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 14:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860565": [
        {
            "ioc_value": "112.121.176.5:47001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 14:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860568": [
        {
            "ioc_value": "7gnetonl.futuremillionaire.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 14:49:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860567": [
        {
            "ioc_value": "lpf0cwi4.shop-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 14:49:01",
            "last_seen_utc": "2026-07-29 23:34:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860566": [
        {
            "ioc_value": "jfjhdq.en-us-en-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 14:43:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860562": [
        {
            "ioc_value": "https://492102.us22.myftpupload.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 14:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/492102.us22.myftpupload.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860546": [
        {
            "ioc_value": "vucfhf.en-us-eachwaymultiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 14:01:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860544": [
        {
            "ioc_value": "https://appliedcontrols.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 14:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/appliedcontrols.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860545": [
        {
            "ioc_value": "https://silversapnm.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 14:01:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/silversapnm.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860543": [
        {
            "ioc_value": "https://weddenvoetbaltips.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 14:01:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/weddenvoetbaltips.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860542": [
        {
            "ioc_value": "157.20.182.20:58002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nworm",
            "malware_alias": "nw0rm,NWorm",
            "malware_printable": "N-W0rm",
            "first_seen_utc": "2026-07-27 14:00:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "N-W0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860541": [
        {
            "ioc_value": "vizsfjtvzafvkdgsdt.mamaspizzansubsmenu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:59:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860540": [
        {
            "ioc_value": "iwsbcy.en-us-eachwaymultiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:54:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860539": [
        {
            "ioc_value": "kbnvuvtsfjksbqvdhj.mamaspizzansubsmenu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:54:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860538": [
        {
            "ioc_value": "iiwado.en-us-eachwaymultiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860537": [
        {
            "ioc_value": "en-us-eachwaymultiplier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:47:43",
            "last_seen_utc": "2026-08-07 00:14:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860536": [
        {
            "ioc_value": "160.119.71.120:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-27 13:42:57",
            "last_seen_utc": "2026-08-24 10:07:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860534": [
        {
            "ioc_value": "https://freshnewtracks.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 13:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/freshnewtracks.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860535": [
        {
            "ioc_value": "https://jeewanjee.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 13:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jeewanjee.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860266": [
        {
            "ioc_value": "152.232.80.198:2000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 13:25:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860241": [
        {
            "ioc_value": "rollingpi4512.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-27 13:25:22",
            "last_seen_utc": "2026-08-23 17:24:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Mac",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1860244": [
        {
            "ioc_value": "http://117.252.241.93:50178/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 13:25:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/117.252.241.93",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1860247": [
        {
            "ioc_value": "193.233.198.62:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 13:25:21",
            "last_seen_utc": "2026-08-29 18:44:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860532": [
        {
            "ioc_value": "vividanchorlab.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-27 13:25:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1860533": [
        {
            "ioc_value": "https://vividanchorlab.top/auth/rate-script.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-27 13:25:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1860527": [
        {
            "ioc_value": "69d0de9e78ec99497182dcb635a1c610",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-27 13:03:29",
            "last_seen_utc": "2026-07-27 21:08:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860525": [
        {
            "ioc_value": "91009d9f4544faf57503ca3d5b83038d9e861f086c3c00fd703b3190ab7e1787",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-27 13:03:28",
            "last_seen_utc": "2026-07-27 21:08:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860526": [
        {
            "ioc_value": "da567ab609c3fb5f2cbf9e85e09d7668c7d0384c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-27 13:03:28",
            "last_seen_utc": "2026-07-27 21:08:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860522": [
        {
            "ioc_value": "e922b9d3d9b7c8c01c18cf19b22c9596af7ce5545f6a77bfd6fa779e60aae7ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 13:03:26",
            "last_seen_utc": "2026-07-27 21:08:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860523": [
        {
            "ioc_value": "f11aefc5568f0a86fee35809420da22d6fb331d8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 13:03:26",
            "last_seen_utc": "2026-07-27 21:08:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860524": [
        {
            "ioc_value": "44202a668f470eea6af3bec1bf9400c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 13:03:26",
            "last_seen_utc": "2026-07-27 21:08:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860521": [
        {
            "ioc_value": "cgypjk.en-us-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:03:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860520": [
        {
            "ioc_value": "en-us-bettinggods.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 13:02:58",
            "last_seen_utc": "2026-08-07 00:14:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860519": [
        {
            "ioc_value": "xrqbgl.consumersupporthelpline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:58:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860518": [
        {
            "ioc_value": "consumersupporthelpline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:53:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860517": [
        {
            "ioc_value": "bgjgku.consumerclaimshelpline.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860516": [
        {
            "ioc_value": "93dfe7280fc32b16336d6c981421049a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-27 12:46:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860513": [
        {
            "ioc_value": "64579d8e3eef742369f43b5b99988adb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:40",
            "last_seen_utc": "2026-07-27 13:05:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860514": [
        {
            "ioc_value": "aeee9e8262aea170816e1af225dbab94ff607cd32e78ab76d41b8ec2c5a6e6d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-27 12:46:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860515": [
        {
            "ioc_value": "d70250eaf001392087652da5419220049921ca8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-27 12:46:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860510": [
        {
            "ioc_value": "d6d3bf3ffcb43ecf26ac0a5319aa75b7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:39",
            "last_seen_utc": "2026-07-27 13:05:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860511": [
        {
            "ioc_value": "e3348b965f32e6573b569e05d03a6614c6320d40a31bf5545ac4dbac0f0732b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:39",
            "last_seen_utc": "2026-07-27 13:05:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860512": [
        {
            "ioc_value": "27533b6aac87634109ef854a5845e06e0457c638",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:39",
            "last_seen_utc": "2026-07-27 13:05:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860507": [
        {
            "ioc_value": "bfe122e52e61f9f83c32cd079e60e3a4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:38",
            "last_seen_utc": "2026-07-27 13:05:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860508": [
        {
            "ioc_value": "23fee915a2ede0fa0ca36b1590ef0319703f58fbeaca1d5cfdef77ebf470582d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:38",
            "last_seen_utc": "2026-07-27 13:05:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860509": [
        {
            "ioc_value": "162779abe15588612cdde42f43ff1aa0d2a9ec76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:38",
            "last_seen_utc": "2026-07-27 13:05:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860504": [
        {
            "ioc_value": "dbe604a519a46c1d97c48853b7666886",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:37",
            "last_seen_utc": "2026-07-27 13:05:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860505": [
        {
            "ioc_value": "6d9bd1e24e5f6bbdb0ae30a6a8de25043b658865f2ad2a84da382966689cdbee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:37",
            "last_seen_utc": "2026-07-27 13:05:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860506": [
        {
            "ioc_value": "b2ed0f05bd388e35f48601b37a4586b7bf1d6cd2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:37",
            "last_seen_utc": "2026-07-27 13:05:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860502": [
        {
            "ioc_value": "f02758770d616fc8ff7ddbe5caf069d4bbd2bae5422a32a95cfa8c7f6a0a9b8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:36",
            "last_seen_utc": "2026-07-27 13:05:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860503": [
        {
            "ioc_value": "288671a4f0294228030d12bc8d7b2add26d24a37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:36",
            "last_seen_utc": "2026-07-27 13:05:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860499": [
        {
            "ioc_value": "83554baeeb700815f9b6492584a1b1a40c64f752d1ff1a67cde079ad524b008f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:35",
            "last_seen_utc": "2026-07-27 13:05:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860500": [
        {
            "ioc_value": "8ddc91dd3c92113e654815c91c9accde8170dde1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:35",
            "last_seen_utc": "2026-07-27 13:05:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860501": [
        {
            "ioc_value": "4ae6397d898c18b1356dedcbe225e639",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:35",
            "last_seen_utc": "2026-07-27 13:05:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860495": [
        {
            "ioc_value": "9cca1ed778b5b2450d7010cb1a024535",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:34",
            "last_seen_utc": "2026-07-27 13:04:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860496": [
        {
            "ioc_value": "6e795be8d4f34f798012d46530c62843dbb74c7cc64fd3a2db37ff68c85f52b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:46:34",
            "last_seen_utc": "2026-07-27 13:04:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860497": [
        {
            "ioc_value": "ff77c50195d619514562aee94de25a4a9323d0c7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:46:34",
            "last_seen_utc": "2026-07-27 13:05:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860498": [
        {
            "ioc_value": "6399e481bee00f73cf825b0dce1fc30b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:46:34",
            "last_seen_utc": "2026-07-27 13:05:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860492": [
        {
            "ioc_value": "f3b3d37c7861b4d63bc2b1b966efdedb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:33",
            "last_seen_utc": "2026-07-27 13:04:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860493": [
        {
            "ioc_value": "732b8cf362f486b7569eaa85d9e39f71fe1438ba68214300a9b33c204c447264",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:33",
            "last_seen_utc": "2026-07-27 13:04:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860494": [
        {
            "ioc_value": "00b0292f6e85a6e31efb3c223626dbff9d42612b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:33",
            "last_seen_utc": "2026-07-27 13:04:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860489": [
        {
            "ioc_value": "3f577fe3546869bd9ea1f185c6646544",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:32",
            "last_seen_utc": "2026-07-27 13:04:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860490": [
        {
            "ioc_value": "5a6f57b0f7404d70c29e5c39b3bdd95064df4c4885f0fbbdcee41e438ff8444c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:32",
            "last_seen_utc": "2026-07-27 13:04:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860491": [
        {
            "ioc_value": "b6d1264bc8df859f931f78369c3552bcb6dbc256",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:32",
            "last_seen_utc": "2026-07-27 13:04:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860486": [
        {
            "ioc_value": "205d7d91b72d06246a647c3290403280",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:31",
            "last_seen_utc": "2026-07-27 13:04:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860487": [
        {
            "ioc_value": "555e5544368694f5726c77cf1a12e3f2d6d57479a00c462476ec552312a753a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:31",
            "last_seen_utc": "2026-07-27 13:04:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860488": [
        {
            "ioc_value": "95f00f95c96284adab1d7852e67fdcbb6445bba3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:31",
            "last_seen_utc": "2026-07-27 13:04:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860483": [
        {
            "ioc_value": "24909335a110650fbd9b5633b3855534",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:30",
            "last_seen_utc": "2026-07-27 13:04:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860484": [
        {
            "ioc_value": "2d9346aa5de94f207e93db952eeed52861b4b31a2c98899147c5fa59b2deee55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:30",
            "last_seen_utc": "2026-07-27 13:04:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860485": [
        {
            "ioc_value": "83979e73d7e00548bdf4fba960fdcce5bacbf146",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:30",
            "last_seen_utc": "2026-07-27 13:04:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860479": [
        {
            "ioc_value": "c4748eac0048e91b1a95f94b5f4fd835a5200f90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 12:46:29",
            "last_seen_utc": "2026-07-27 13:04:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860480": [
        {
            "ioc_value": "1b7b5a050a3c834448c925de7e33633b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 12:46:29",
            "last_seen_utc": "2026-07-27 13:04:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860481": [
        {
            "ioc_value": "53ba5fd24bbf81d3a2fc53af19884b8ebb6344281891bdb78adb924a1f65b40b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:29",
            "last_seen_utc": "2026-07-27 13:04:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860482": [
        {
            "ioc_value": "75b2c0de956c99ba5df53567faab45d878a5ee3b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:29",
            "last_seen_utc": "2026-07-27 13:04:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860476": [
        {
            "ioc_value": "32c8fad6904ff4fc95e64b1a82e56f8f13aad770",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:28",
            "last_seen_utc": "2026-07-27 13:04:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860477": [
        {
            "ioc_value": "ba47ab37b1b099e3df4d38ecf868e55f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:28",
            "last_seen_utc": "2026-07-27 13:04:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860478": [
        {
            "ioc_value": "e964b3d18222d68e19230c089fc7599f1d9fd6dc205fca13705c535feebe0627",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-27 12:46:28",
            "last_seen_utc": "2026-07-27 13:04:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860473": [
        {
            "ioc_value": "d95e0e95aaa5bd035ad7cd1b24b5de03cb9d735d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:27",
            "last_seen_utc": "2026-07-27 13:04:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860474": [
        {
            "ioc_value": "ce67f463c3459693c3934737bdcce0f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:27",
            "last_seen_utc": "2026-07-27 13:04:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860475": [
        {
            "ioc_value": "e6016e68b528ea80caa37afb5a283e88a78659ffea48d8fc297fad7676072324",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:27",
            "last_seen_utc": "2026-07-27 13:04:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860470": [
        {
            "ioc_value": "b899a4973c99eac9189e5cd7e209ea789183ba24",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:26",
            "last_seen_utc": "2026-07-27 13:04:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860471": [
        {
            "ioc_value": "b990a1f4505ebf24ca3161556ee81f8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:26",
            "last_seen_utc": "2026-07-27 13:04:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860472": [
        {
            "ioc_value": "0a0b01867e41bbd7e9863cbf839efb3a2f0963c2ccedd06c22c22beda6aafa19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.elevator",
            "malware_alias": null,
            "malware_printable": "Elevator",
            "first_seen_utc": "2026-07-27 12:46:26",
            "last_seen_utc": "2026-07-27 13:04:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860467": [
        {
            "ioc_value": "2f5245c3857f5eb9477571c971e2d8ec365cf4ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:25",
            "last_seen_utc": "2026-07-27 13:04:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860468": [
        {
            "ioc_value": "ddb831195cd126a623071a57cb419a7f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:25",
            "last_seen_utc": "2026-07-27 13:04:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860469": [
        {
            "ioc_value": "aa8e03cadb21e3939196e2658707563e7d6f1259b9d69f973b22ba494d1e49b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:46:25",
            "last_seen_utc": "2026-07-27 13:04:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860463": [
        {
            "ioc_value": "7f9e2dc8918ea3f90d35ff18dd92963b81e331651d234d6373e269e036606762",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 12:46:24",
            "last_seen_utc": "2026-07-27 13:04:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860464": [
        {
            "ioc_value": "3a3d3f293e52d151062c51b62fd39e543c9e6a85",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 12:46:24",
            "last_seen_utc": "2026-07-27 13:04:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860465": [
        {
            "ioc_value": "3bfcbc6d80962f4d6313d9102e4ff3d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 12:46:24",
            "last_seen_utc": "2026-07-27 13:04:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860466": [
        {
            "ioc_value": "43095747bec46e0b016fe04caa8b447216e47eb788ad40e57f83fd2cd3b1d63a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:24",
            "last_seen_utc": "2026-07-27 13:04:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860460": [
        {
            "ioc_value": "f3761ae2ffb508e1df76e974692226ac38b368b213349e2969d72fc49f51ea7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:23",
            "last_seen_utc": "2026-07-27 13:04:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860461": [
        {
            "ioc_value": "c41da0cd9d017f4ff38bdfbd19e8f7ac6d9e2a0b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:23",
            "last_seen_utc": "2026-07-27 13:04:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860462": [
        {
            "ioc_value": "d5254b68ad505660d433d8eed93c371f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:23",
            "last_seen_utc": "2026-07-27 13:04:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860457": [
        {
            "ioc_value": "f30ce99a34cfc61168a99aff2ad0463cf0dac2902f86b1e73d060a28499bcf7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:22",
            "last_seen_utc": "2026-07-27 13:04:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860458": [
        {
            "ioc_value": "22e8454bee44e98d9be147e9f397bc1a554342f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:22",
            "last_seen_utc": "2026-07-27 13:04:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860459": [
        {
            "ioc_value": "4a8a5fdf5feb574213c53bca1cb9688a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:22",
            "last_seen_utc": "2026-07-27 13:04:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860454": [
        {
            "ioc_value": "a3e15e1e942f76b3d30cddd9f6cef8c91206b1a179871ce751613bf6efa2be5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:21",
            "last_seen_utc": "2026-07-27 13:04:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860455": [
        {
            "ioc_value": "6c3b7823087376206785d4d0a00465831b6d2894",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:21",
            "last_seen_utc": "2026-07-27 13:04:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860456": [
        {
            "ioc_value": "42264ef4d8637bc58d406e5e96622c8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:21",
            "last_seen_utc": "2026-07-27 13:04:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860451": [
        {
            "ioc_value": "1a1bdfcbeec8791e79f8745a700a42a75dae7afd665a038da2b0d7812a0c0370",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:20",
            "last_seen_utc": "2026-07-27 13:04:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860452": [
        {
            "ioc_value": "191958630ec8522c0f29a824e81f2d939611ff0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:20",
            "last_seen_utc": "2026-07-27 13:04:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860453": [
        {
            "ioc_value": "0c4ad644cc7c5715a31e1b5aff752672",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:20",
            "last_seen_utc": "2026-07-27 13:04:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860449": [
        {
            "ioc_value": "0cd8542cd41d178747559b3b0b056e456f1d1fdb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:19",
            "last_seen_utc": "2026-07-27 13:04:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860450": [
        {
            "ioc_value": "2626817c354412174fc4937efd1ad539",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:19",
            "last_seen_utc": "2026-07-27 13:04:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860446": [
        {
            "ioc_value": "7ac1f357f35b350994d83ff83008d75c4b6f16af",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:18",
            "last_seen_utc": "2026-07-27 13:04:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860447": [
        {
            "ioc_value": "2b60ddaa02a5fec2ec3151f6f84dc5c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:18",
            "last_seen_utc": "2026-07-27 13:04:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860448": [
        {
            "ioc_value": "3541431ce10c1833122df54cb4478ebc1631c89ca373a5747c322350a60d6385",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:18",
            "last_seen_utc": "2026-07-27 13:04:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860444": [
        {
            "ioc_value": "a21b839850fda4b533d973af7b230c14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:17",
            "last_seen_utc": "2026-07-27 13:04:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860445": [
        {
            "ioc_value": "85287c739d9703b2909c65478ee803897192d43144d27a3ef3eb7c2dd7b3e393",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:17",
            "last_seen_utc": "2026-07-27 13:04:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860441": [
        {
            "ioc_value": "b49afca85545ff5db04d08360274b5ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:16",
            "last_seen_utc": "2026-07-27 13:04:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860442": [
        {
            "ioc_value": "6cd26345cc89c28c8ea226eb8ffa96be4f48af5fa369a403cdfb6fc46ff3ebef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:16",
            "last_seen_utc": "2026-07-27 13:04:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860443": [
        {
            "ioc_value": "25741d77150d950bde43a0424ebd59f659aaf9fa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:16",
            "last_seen_utc": "2026-07-27 13:04:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860438": [
        {
            "ioc_value": "6a0a275f424bd2dd34701768c384e900",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:15",
            "last_seen_utc": "2026-07-27 13:04:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860439": [
        {
            "ioc_value": "24cabe973a480c2a5a489500c2615c2cbe0399cd0087b04ba56d0e725043a6ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:15",
            "last_seen_utc": "2026-07-27 13:04:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860440": [
        {
            "ioc_value": "925bd1946991f834571b089c463b2ace0306c9d8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:15",
            "last_seen_utc": "2026-07-27 13:04:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860435": [
        {
            "ioc_value": "eff12246e40f22f87be90b4d27b2daa5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:14",
            "last_seen_utc": "2026-07-27 13:04:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860436": [
        {
            "ioc_value": "0eaf541c66a2384ff77265a9e3e2bf11300d0c47642b1d953b52843e6365d659",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:14",
            "last_seen_utc": "2026-07-27 13:04:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860437": [
        {
            "ioc_value": "8ccfe59dfee26f101164bb91a139acfdbd54ff47",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:14",
            "last_seen_utc": "2026-07-27 13:04:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860431": [
        {
            "ioc_value": "fec23a611159c06ff8ad5df619497ab71a756cf6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:13",
            "last_seen_utc": "2026-07-27 13:04:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860432": [
        {
            "ioc_value": "cb3416ca351652997b09bc64c62e5531",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:13",
            "last_seen_utc": "2026-07-27 13:04:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860433": [
        {
            "ioc_value": "55fa2ac196000639174619c5ff366119c874393cc4d3575533639cd409af1758",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:13",
            "last_seen_utc": "2026-07-27 13:04:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860434": [
        {
            "ioc_value": "43563fe1d748cac51e21738045f579747eb22d93",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:13",
            "last_seen_utc": "2026-07-27 13:04:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860428": [
        {
            "ioc_value": "575188273fc0030ebb146b7ac8e1c9d40e4656c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:12",
            "last_seen_utc": "2026-07-27 13:04:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860429": [
        {
            "ioc_value": "2ef7a8539ffd93b31ac86add92a3df0e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:12",
            "last_seen_utc": "2026-07-27 13:04:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860430": [
        {
            "ioc_value": "bfe2c25627eec3369b94ec60c1592e9cb38868f83f812a4ec506947d59ac8891",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:12",
            "last_seen_utc": "2026-07-27 13:04:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860425": [
        {
            "ioc_value": "94932c0d201345ceb252ca61d81df0dec1187ae7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:11",
            "last_seen_utc": "2026-07-27 13:04:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860426": [
        {
            "ioc_value": "19e84ca8fa5f649584b7baebd8d01f1d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:11",
            "last_seen_utc": "2026-07-27 13:04:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860427": [
        {
            "ioc_value": "d84d9eb1e140f0f320976cc8219a6fc31136a2a1d5b89a55f8fe6217b170ae74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:11",
            "last_seen_utc": "2026-07-27 13:04:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860422": [
        {
            "ioc_value": "fd21771360238bd0e8850400c232eab1f3c35475",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:10",
            "last_seen_utc": "2026-07-27 13:04:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860423": [
        {
            "ioc_value": "af584b28ceda51c7d4ea86910078646a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:10",
            "last_seen_utc": "2026-07-27 13:04:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860424": [
        {
            "ioc_value": "7c8d18cc4785264f3a7d3423ebaeae8bf95d1ed9916dc4e6aab4f1f523747bdc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:10",
            "last_seen_utc": "2026-07-27 13:04:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860419": [
        {
            "ioc_value": "4339591ef72328dbbbaacb8119ece8d18a708cb0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:09",
            "last_seen_utc": "2026-07-27 13:04:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860420": [
        {
            "ioc_value": "a6054e9828a4aa09e7469c589afc6fce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:09",
            "last_seen_utc": "2026-07-27 13:04:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860421": [
        {
            "ioc_value": "239fa9a692f16c74b8faa90e48099978b0aadeb90fb5b8aae1c4b3161d516190",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:09",
            "last_seen_utc": "2026-07-27 13:04:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860416": [
        {
            "ioc_value": "f5a24b79ce6654e125a712eb6084c5245e6dd8e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:08",
            "last_seen_utc": "2026-07-27 13:04:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860417": [
        {
            "ioc_value": "14fce87cf261a710c1cebcc8a4f4e9da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:08",
            "last_seen_utc": "2026-07-27 13:04:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860418": [
        {
            "ioc_value": "5cab5c362ded4c7795a68b94af56ff9922e15b4d343c7796bdc1c8338ac34887",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:08",
            "last_seen_utc": "2026-07-27 13:04:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860413": [
        {
            "ioc_value": "d560a3f7c5cc9ae8073e9e326fa8f85fbb60555e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:07",
            "last_seen_utc": "2026-07-27 13:04:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860414": [
        {
            "ioc_value": "3464135169dd3733163a502f959014ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:07",
            "last_seen_utc": "2026-07-27 13:04:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860415": [
        {
            "ioc_value": "5820e30bc1d4bf9db0b6eca0249754c99b514cfa52b78990487cbf98f7b55569",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:07",
            "last_seen_utc": "2026-07-27 13:04:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860409": [
        {
            "ioc_value": "e15d8d51a52da2c39d11d0409764821d2bc94794eea7ae3c8846b8ac078f4a0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:46:06",
            "last_seen_utc": "2026-07-27 13:04:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860410": [
        {
            "ioc_value": "e52de16302130b89ea1e51892b9107b875c59169",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:46:06",
            "last_seen_utc": "2026-07-27 13:04:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860411": [
        {
            "ioc_value": "636a4a206e84c88baeba66425e33ee16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:46:06",
            "last_seen_utc": "2026-07-27 13:04:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860412": [
        {
            "ioc_value": "a1101793f851eb22dcffb2533be05bfd016e73b35e1ad2e35fc0d71d5099b52b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-27 12:46:06",
            "last_seen_utc": "2026-07-27 13:04:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860406": [
        {
            "ioc_value": "33bd75f49eee1a5f86bf7f673573a28c14c45b8f8d1b91694b214a1ec3d6c333",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:05",
            "last_seen_utc": "2026-07-27 13:04:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860407": [
        {
            "ioc_value": "95d047527125fc03a0a6147415671d6689b884aa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:05",
            "last_seen_utc": "2026-07-27 13:04:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860408": [
        {
            "ioc_value": "58ef78c52ac325ae64968eadc5496250",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:05",
            "last_seen_utc": "2026-07-27 13:04:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860404": [
        {
            "ioc_value": "486098d78773574d0b60566991304aab175d3aaa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:04",
            "last_seen_utc": "2026-07-27 13:04:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860405": [
        {
            "ioc_value": "5e269369facd09a383f21d3e599091b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:04",
            "last_seen_utc": "2026-07-27 13:04:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860401": [
        {
            "ioc_value": "e99c5339ab851962a09acd833bbc5138a04d75f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:03",
            "last_seen_utc": "2026-07-27 13:04:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860402": [
        {
            "ioc_value": "31cf950bc1322291ecb5a3a13c3b96b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:03",
            "last_seen_utc": "2026-07-27 13:04:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860403": [
        {
            "ioc_value": "43e89a578fcb9e1cea02e64c24829936b9b47ef6f2acb4e033436f8d5d446168",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:03",
            "last_seen_utc": "2026-07-27 13:04:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860399": [
        {
            "ioc_value": "23a9a402c5192b3c687cc59c40049929",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:02",
            "last_seen_utc": "2026-07-27 13:04:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860400": [
        {
            "ioc_value": "da7935affcec91c317acf98b52eca551f2501b29ad502749e4c084492142c6eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:02",
            "last_seen_utc": "2026-07-27 13:04:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860397": [
        {
            "ioc_value": "b29391ba505af508f2110f54f73b203e2710b8b6c8a8717005e5c7a4050630e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:01",
            "last_seen_utc": "2026-07-27 13:04:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860398": [
        {
            "ioc_value": "fe81c9d838854fa3ec23f010b4c1c74c808fd199",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:01",
            "last_seen_utc": "2026-07-27 13:04:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860394": [
        {
            "ioc_value": "f52809d57d816cf9ea7e95de64df46fcc1cf62d3da972c167497935b5eca74d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:00",
            "last_seen_utc": "2026-07-27 13:04:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860395": [
        {
            "ioc_value": "2bf70a77e73578f09f44d7a0c5701ef048170408",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:00",
            "last_seen_utc": "2026-07-27 13:04:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860396": [
        {
            "ioc_value": "f9979541d2af1afa4339b737f42f5b8a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:46:00",
            "last_seen_utc": "2026-07-27 13:04:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860391": [
        {
            "ioc_value": "7805b06ffc78058b2dd8f41155c9fc353c1267629aeaf3ee8f8e587fd11f013e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:59",
            "last_seen_utc": "2026-07-27 13:04:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860392": [
        {
            "ioc_value": "0555b030cc6625fa3a3840dde59150f337af4d82",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:59",
            "last_seen_utc": "2026-07-27 13:04:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860393": [
        {
            "ioc_value": "e70e3254dbab0a39f52dd81cb82123d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:59",
            "last_seen_utc": "2026-07-27 13:04:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860388": [
        {
            "ioc_value": "51bfb2f390653647b087d789ef1559c3fdf220c565a909f1eee4d593893420dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:58",
            "last_seen_utc": "2026-07-27 13:04:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860389": [
        {
            "ioc_value": "3102f42f7ea5346f0dd9e05ba35dcb4260b1c524",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:58",
            "last_seen_utc": "2026-07-27 13:04:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860390": [
        {
            "ioc_value": "e684ae1e3bf3994c4f68e84faa73f806",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:58",
            "last_seen_utc": "2026-07-27 13:04:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860385": [
        {
            "ioc_value": "f43b33aacb1d9f73ec3d687285c0e22ab6bafd6e5797106b711778aef073a9ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:57",
            "last_seen_utc": "2026-07-27 13:04:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860386": [
        {
            "ioc_value": "453f7fe1bee981cf41006f07e8b5ad6e736ad22a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:57",
            "last_seen_utc": "2026-07-27 13:04:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860387": [
        {
            "ioc_value": "f4d4e4242b6344f5e54b36fa8e882f36",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:57",
            "last_seen_utc": "2026-07-27 13:04:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860382": [
        {
            "ioc_value": "e440f3fbbd33d569432ddbc45ee7de8a19b1648de898c01329d5f3a404bde96d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:56",
            "last_seen_utc": "2026-07-27 13:04:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860383": [
        {
            "ioc_value": "c0633997b9f28fbfee5a5d7aa0ebbbe6620d9b0d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:56",
            "last_seen_utc": "2026-07-27 13:04:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860384": [
        {
            "ioc_value": "faa1ec6c4f2ee779a599ab56481a1a47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:56",
            "last_seen_utc": "2026-07-27 13:04:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860379": [
        {
            "ioc_value": "c51cdb75acfe918b90165cbeb4b1acc466b3514b9adaac055556987c61939821",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:55",
            "last_seen_utc": "2026-07-27 13:04:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860380": [
        {
            "ioc_value": "d25c56f391d1a390ea7b3b33d569676252c59852",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:55",
            "last_seen_utc": "2026-07-27 13:04:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860381": [
        {
            "ioc_value": "a26e56e773729e2927dab324996948cf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:55",
            "last_seen_utc": "2026-07-27 13:04:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860375": [
        {
            "ioc_value": "1cc9617281fc4505af569a4915e42a08",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:45:54",
            "last_seen_utc": "2026-07-27 13:04:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860376": [
        {
            "ioc_value": "8fb184c2d0b42adc0695d6dab31d7905490028c77d9a472d18c06975e19bf24a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:54",
            "last_seen_utc": "2026-07-27 13:04:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860377": [
        {
            "ioc_value": "cb8e1f5df3bc9f7a3211698ccfd69b38956f0eb2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:54",
            "last_seen_utc": "2026-07-27 13:04:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860378": [
        {
            "ioc_value": "eafb10f6fb3732229b64d5cddfc7540f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:54",
            "last_seen_utc": "2026-07-27 13:04:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860372": [
        {
            "ioc_value": "87873d4cb6d2c05ffdacb2da3400a033",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:53",
            "last_seen_utc": "2026-07-27 13:04:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860373": [
        {
            "ioc_value": "f50688b538fecc5ef7c893e148ddbb3cc1919fcb7c6462033fb72cb469242461",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:45:53",
            "last_seen_utc": "2026-07-27 13:04:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860374": [
        {
            "ioc_value": "c3e2dbb3515bf9e9c2202c9b489df627b512abd1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:45:53",
            "last_seen_utc": "2026-07-27 13:04:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860369": [
        {
            "ioc_value": "0d618238e35254bcad69d184ef94a8e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:52",
            "last_seen_utc": "2026-07-27 13:04:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860370": [
        {
            "ioc_value": "0e13be378b2ddf71bb66fbe2f90e4eeb241fe9fa92ef8e382320c86685f21d6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:52",
            "last_seen_utc": "2026-07-27 13:04:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860371": [
        {
            "ioc_value": "166e44b9008405f89ac2031f62ee5e65e8b3d611",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:52",
            "last_seen_utc": "2026-07-27 13:04:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860365": [
        {
            "ioc_value": "c57e06f49f785ae408d42e4b2fb139c0e7c0b4f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:51",
            "last_seen_utc": "2026-07-27 13:04:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860366": [
        {
            "ioc_value": "3ac8576f45bb73244f12a00976fefbae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:51",
            "last_seen_utc": "2026-07-27 13:04:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860367": [
        {
            "ioc_value": "b0fb0119b9cce5b7aeef7f3499f5a71c5642c89f130daabc60822413cc2f5cd5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:51",
            "last_seen_utc": "2026-07-27 13:04:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860368": [
        {
            "ioc_value": "ee749699843b1de9b2e711540cf16ebb9104ba26",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:51",
            "last_seen_utc": "2026-07-27 13:04:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860362": [
        {
            "ioc_value": "3b773ede23c77347e7ea0c24dce8adb966082a89",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:50",
            "last_seen_utc": "2026-07-27 13:04:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860363": [
        {
            "ioc_value": "d7ae17502be4db7ddac2dedaf98404d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:50",
            "last_seen_utc": "2026-07-27 13:04:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860364": [
        {
            "ioc_value": "ece6e9395edb8935c993a2945ac196a614149d65f10212e912e4654981646e37",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:50",
            "last_seen_utc": "2026-07-27 13:04:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860359": [
        {
            "ioc_value": "c9ac15d711deeb63b01f8c49738bbdd7d70f4011",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:49",
            "last_seen_utc": "2026-07-27 13:04:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860360": [
        {
            "ioc_value": "b1b109827296c243ffc9e4583b9fd738",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:49",
            "last_seen_utc": "2026-07-27 13:04:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860361": [
        {
            "ioc_value": "9e7fc86ad3c5efb2e6746ab61dc43187eeb685c1fd9719bcb9553c173530f899",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:49",
            "last_seen_utc": "2026-07-27 13:04:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860356": [
        {
            "ioc_value": "4c2da29463731ead232871e15e781ffd5f710a9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:45:48",
            "last_seen_utc": "2026-07-27 13:04:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860357": [
        {
            "ioc_value": "81729e5e6c1936b27f016a20897d30f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:45:48",
            "last_seen_utc": "2026-07-27 13:04:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860358": [
        {
            "ioc_value": "205fc66381b8e254508d40c693a1314c9fc2b94b8023b29483803c8b0e449c4d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:48",
            "last_seen_utc": "2026-07-27 13:04:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860352": [
        {
            "ioc_value": "4e40ac262149dde5d453c18cf700c384c846aa51dfcc5dcb9d57eac720b06d3f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.blustealer",
            "malware_alias": "a310logger",
            "malware_printable": "BluStealer",
            "first_seen_utc": "2026-07-27 12:45:47",
            "last_seen_utc": "2026-07-27 13:04:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860353": [
        {
            "ioc_value": "6db44b1c145e570f446118d63afd66055190a3a8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.blustealer",
            "malware_alias": "a310logger",
            "malware_printable": "BluStealer",
            "first_seen_utc": "2026-07-27 12:45:47",
            "last_seen_utc": "2026-07-27 13:04:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860354": [
        {
            "ioc_value": "357b903fbfc7c4bc6590a92f3e07aaf4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.blustealer",
            "malware_alias": "a310logger",
            "malware_printable": "BluStealer",
            "first_seen_utc": "2026-07-27 12:45:47",
            "last_seen_utc": "2026-07-27 13:04:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860355": [
        {
            "ioc_value": "d3e984f5e189ae6cd49bafa6298418583acab68292390bb63f21deec50740310",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-27 12:45:47",
            "last_seen_utc": "2026-07-27 13:04:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860350": [
        {
            "ioc_value": "0ce231dba3b1911ca64b31ca8bce79fd1dc4c1b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:46",
            "last_seen_utc": "2026-07-27 13:04:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860351": [
        {
            "ioc_value": "7cf591c9fd2aed0286ffb519f12da683",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:46",
            "last_seen_utc": "2026-07-27 13:04:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860347": [
        {
            "ioc_value": "b61cf8e65e87dc9b3aeb4087d26696a107230f8e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:45",
            "last_seen_utc": "2026-07-27 13:03:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860348": [
        {
            "ioc_value": "ea2b5a00e49d3a09f38eadfda23df277",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:45",
            "last_seen_utc": "2026-07-27 13:04:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860349": [
        {
            "ioc_value": "c431caed57d9d7699aa519790582595c96224c0f00bee914f8c4ee2252495e23",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:45",
            "last_seen_utc": "2026-07-27 13:04:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860344": [
        {
            "ioc_value": "40d9de85f33decc66b4b9df6cbfea867c82887fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:44",
            "last_seen_utc": "2026-07-27 13:03:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860345": [
        {
            "ioc_value": "fa928a93d7521a60e5ced8454d0120fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:44",
            "last_seen_utc": "2026-07-27 13:03:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860346": [
        {
            "ioc_value": "35392a9849d7e9dfb4ee700a16700a94883fde859d57fdd891631bdbc6a75db0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:44",
            "last_seen_utc": "2026-07-27 13:03:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860341": [
        {
            "ioc_value": "914b3d26eda8d3de8c302f2479973ad87e7f6760",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:43",
            "last_seen_utc": "2026-07-27 13:03:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860342": [
        {
            "ioc_value": "7b229cd58d97751c907b89d5d5612b18",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:43",
            "last_seen_utc": "2026-07-27 13:03:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860343": [
        {
            "ioc_value": "7b092a35e70113f5165a653135cb3a7ca29312ceb0b4a874c160473d30830a60",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:43",
            "last_seen_utc": "2026-07-27 13:03:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860337": [
        {
            "ioc_value": "e34584001e81b6d185beac42b2b48726d8790207",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:42",
            "last_seen_utc": "2026-07-27 13:03:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860338": [
        {
            "ioc_value": "consumerclaimshelpline.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:45:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860339": [
        {
            "ioc_value": "e63172525926f847841634253c9534ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:42",
            "last_seen_utc": "2026-07-27 13:03:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860340": [
        {
            "ioc_value": "c29fb2bdcaefee9681b1b7ab1f85e610c9218918a11591bb63f553ccd6f5077a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:42",
            "last_seen_utc": "2026-07-27 13:03:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860334": [
        {
            "ioc_value": "27f9857ee08246eacb56c194989071ec5213c704",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:41",
            "last_seen_utc": "2026-07-27 13:03:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860335": [
        {
            "ioc_value": "b25fd6814be7f03c56bfb669d8587844",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:41",
            "last_seen_utc": "2026-07-27 13:03:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860336": [
        {
            "ioc_value": "e594838ef765312d60475677ec54bf23a4fad659aad928f4564d49890ee9c23b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:41",
            "last_seen_utc": "2026-07-27 13:03:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860330": [
        {
            "ioc_value": "85a229fa75bcf5ef41066bb0618ade943cba3b72c377fee22bc2ff94dfaf4160",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 12:45:40",
            "last_seen_utc": "2026-07-27 13:03:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860331": [
        {
            "ioc_value": "ac38d4936c5bdf74c2ecdd3d6da8adc35db12b6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 12:45:40",
            "last_seen_utc": "2026-07-27 13:03:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860332": [
        {
            "ioc_value": "b9b9e94e807a98caa367cf2b4b995eeb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 12:45:40",
            "last_seen_utc": "2026-07-27 13:03:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860333": [
        {
            "ioc_value": "00ec97c78c9c4fc27f8beda4ffe27d4f4cb98b0208e13b7a1652d6c1e120cd76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:40",
            "last_seen_utc": "2026-07-27 13:03:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860327": [
        {
            "ioc_value": "8230ecb782d68b44a91d1dab3b65f98324e653efc0c8529c4e81cb762cc8e179",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:39",
            "last_seen_utc": "2026-07-27 13:03:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860328": [
        {
            "ioc_value": "99bb423901e51d8e4a36a45d6a798a232eab7838",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:39",
            "last_seen_utc": "2026-07-27 13:03:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860329": [
        {
            "ioc_value": "b40c04705635d82de166087f3ff19874",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:39",
            "last_seen_utc": "2026-07-27 13:03:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860324": [
        {
            "ioc_value": "57f1b48c51f1e97c3cc0c484d3ef005922128505cfbc297321d7a8f7f6ce1380",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:38",
            "last_seen_utc": "2026-07-27 13:03:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860325": [
        {
            "ioc_value": "97dd94b8b74804d710d76d62f3e8837be24280e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:38",
            "last_seen_utc": "2026-07-27 13:03:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860326": [
        {
            "ioc_value": "7d3b80cea19400db61de4bc0d888678a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:38",
            "last_seen_utc": "2026-07-27 13:03:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860321": [
        {
            "ioc_value": "ba4fd1b65144475c6685633c5be135a14fa5df4977b1c3bc13ba70d082ca085b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:37",
            "last_seen_utc": "2026-07-27 13:03:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860322": [
        {
            "ioc_value": "b0bcaafa2144d3c16edb4bfdda00002f24c9e6b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:37",
            "last_seen_utc": "2026-07-27 13:03:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860323": [
        {
            "ioc_value": "474856aa1c293807bf2d2362b82d7291",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:37",
            "last_seen_utc": "2026-07-27 13:03:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860317": [
        {
            "ioc_value": "d62739dd92c54d194150ef0638c01895",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:36",
            "last_seen_utc": "2026-07-27 13:03:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860318": [
        {
            "ioc_value": "ddb1fae4a772b5eb9db713b5974e5ffcbc5f712a0be8b1081323e91227d64e79",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-27 12:45:36",
            "last_seen_utc": "2026-07-27 13:03:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860319": [
        {
            "ioc_value": "6b97bf764e3c924ac217209a49a41b8297ccb79d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-27 12:45:36",
            "last_seen_utc": "2026-07-27 13:03:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860320": [
        {
            "ioc_value": "0ef492da421b72a19541d1ae856efdff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-27 12:45:36",
            "last_seen_utc": "2026-07-27 13:03:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860314": [
        {
            "ioc_value": "404f0d36fcbe5c4643e821403a4827eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-27 12:45:35",
            "last_seen_utc": "2026-07-27 13:03:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860315": [
        {
            "ioc_value": "3efec8bc14ce292b63dada6c63b890a4c9d1598e4534dcee069ad3136ff82375",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:35",
            "last_seen_utc": "2026-07-27 13:03:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860316": [
        {
            "ioc_value": "7d20a39ccf699d20e2db54aaf6d712ae05af6020",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:35",
            "last_seen_utc": "2026-07-27 13:03:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860311": [
        {
            "ioc_value": "2519e7b005a0bd8e444eafa32d41141c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-27 12:45:34",
            "last_seen_utc": "2026-07-27 13:03:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860312": [
        {
            "ioc_value": "0cb54132e0a6c763044968293effe0794ae787435ca616a626245d23e2291b11",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-27 12:45:34",
            "last_seen_utc": "2026-07-27 13:03:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860313": [
        {
            "ioc_value": "b2312267c752e3b583cc2f763b0785a4bce7f1e1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-27 12:45:34",
            "last_seen_utc": "2026-07-27 13:03:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860307": [
        {
            "ioc_value": "5818fa3ad64cafd8fad05bf3e93d9f21ab60a3cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:33",
            "last_seen_utc": "2026-07-27 13:03:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860308": [
        {
            "ioc_value": "825820fc81056e0cb65b2ef0dbffac08",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:33",
            "last_seen_utc": "2026-07-27 13:03:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860309": [
        {
            "ioc_value": "af8e39184404f87ea53f29454ca0211d51991129cda12387ee5ccb1a2dd83d7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-27 12:45:33",
            "last_seen_utc": "2026-07-27 13:03:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860310": [
        {
            "ioc_value": "8aab7cf8930de6e7796cab2447bcd0211e9f9ef5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-27 12:45:33",
            "last_seen_utc": "2026-07-27 13:03:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860304": [
        {
            "ioc_value": "13aad4d139fa8641544060a0848ceca2f83c3b0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:32",
            "last_seen_utc": "2026-07-27 13:03:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860305": [
        {
            "ioc_value": "e704650185db924cde0393601a50146c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:32",
            "last_seen_utc": "2026-07-27 13:03:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860306": [
        {
            "ioc_value": "09a511feeb109ce18780160d2664e3c31cc33a39025f9ec25a677d21e793bdb1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:32",
            "last_seen_utc": "2026-07-27 13:03:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860302": [
        {
            "ioc_value": "4583b63955175bba51746443acbf0e74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:31",
            "last_seen_utc": "2026-07-27 21:08:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860303": [
        {
            "ioc_value": "d276a797d263894eafc88f2229c6227dd8ac88ae241180a2560b6c21c5da4cbc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:31",
            "last_seen_utc": "2026-07-27 13:03:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860299": [
        {
            "ioc_value": "c086246a14362e356f3413615b778079",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:30",
            "last_seen_utc": "2026-07-27 21:08:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860300": [
        {
            "ioc_value": "e2ad654bb4f079d2160f4d08753e80abba1a38feca3f54b8debe78c7ccd7f028",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:30",
            "last_seen_utc": "2026-07-27 21:08:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860301": [
        {
            "ioc_value": "39ea75bcb491e0fdbab18a9a6f487a49babc72d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:30",
            "last_seen_utc": "2026-07-27 21:08:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860296": [
        {
            "ioc_value": "7e542902d164df31090dfdb93c7f7486",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:29",
            "last_seen_utc": "2026-07-27 21:08:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860297": [
        {
            "ioc_value": "a511d02211003769575ee9e8a44888c5e11263400a8188033f9892da1b6b6a0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:29",
            "last_seen_utc": "2026-07-27 21:08:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860298": [
        {
            "ioc_value": "7d77f2a106b3229587143cc962eaa2f36b288f43",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:29",
            "last_seen_utc": "2026-07-27 21:08:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860293": [
        {
            "ioc_value": "d71e0b1a9aa1135597d6e70f02e8b738",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:45:28",
            "last_seen_utc": "2026-07-27 21:08:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860294": [
        {
            "ioc_value": "66f2a666a7985abd1dfe98e4053ab5d8876a3db7d1c18b3b999b6c9491b3cd73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:28",
            "last_seen_utc": "2026-07-27 21:08:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860295": [
        {
            "ioc_value": "377bea168a63f8d7b2e13e249755cf895d683b6f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:28",
            "last_seen_utc": "2026-07-27 21:08:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860289": [
        {
            "ioc_value": "4793486c9fee140382dee47c02dc2ca2816da340",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 12:45:27",
            "last_seen_utc": "2026-07-27 21:08:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860290": [
        {
            "ioc_value": "4bf11589985675d20577e3a8e1b84819",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 12:45:27",
            "last_seen_utc": "2026-07-27 21:08:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860291": [
        {
            "ioc_value": "0c5ee6a717e999c56f6cad36d47a963dac06769c9740c060829e935eb639625a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:45:27",
            "last_seen_utc": "2026-07-27 21:08:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860292": [
        {
            "ioc_value": "0fe005334900f76ce9ec62a710daeb2e018aaad8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:45:27",
            "last_seen_utc": "2026-07-27 21:08:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860286": [
        {
            "ioc_value": "1d0e8377773671bf43e53ceb18651c9588beccc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:45:26",
            "last_seen_utc": "2026-07-27 21:08:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860287": [
        {
            "ioc_value": "9d609843241b0cfaa6f79ef17f862862",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:45:26",
            "last_seen_utc": "2026-07-27 21:08:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860288": [
        {
            "ioc_value": "6d8d3f1ed3dbcfc7470bfdb7814b049f2dcd5248773c9ebf2c554892bb3011c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 12:45:26",
            "last_seen_utc": "2026-07-27 21:08:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860283": [
        {
            "ioc_value": "bb91ced3b18c61b560d62b92a6619fed99717d33",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:25",
            "last_seen_utc": "2026-07-27 21:08:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860284": [
        {
            "ioc_value": "9d2434089e612f0f39432c61a23af837",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:25",
            "last_seen_utc": "2026-07-27 21:08:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860285": [
        {
            "ioc_value": "893d4293a34a9e1344248282064b4c6e2e322843b4bb5b59330e571618f0acdf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 12:45:25",
            "last_seen_utc": "2026-07-27 21:08:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860280": [
        {
            "ioc_value": "c49fce513db94952c674a89bbf4f72822587ada8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:24",
            "last_seen_utc": "2026-07-27 21:08:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860281": [
        {
            "ioc_value": "c1739f5534af72d63d41e0867713ee5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:24",
            "last_seen_utc": "2026-07-27 21:08:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860282": [
        {
            "ioc_value": "95d726a38b576746afdd06fa579d682e6028976db6b14a9c90f4ae60dc4bdc86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-27 12:45:24",
            "last_seen_utc": "2026-07-27 21:08:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860277": [
        {
            "ioc_value": "a98d2dba312d2a841aca142f86c12fd34eef698e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:23",
            "last_seen_utc": "2026-07-27 21:08:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860278": [
        {
            "ioc_value": "c966e728f948667972f3e54eb839b50a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:23",
            "last_seen_utc": "2026-07-27 21:08:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860279": [
        {
            "ioc_value": "6e2bb817075c9b03a609e015d7c9da645195f946e08074ea64290cad09875a2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:23",
            "last_seen_utc": "2026-07-27 21:08:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860273": [
        {
            "ioc_value": "80eb9807bd260554eb6a122055b5292a32be9194df58bcdc5b2ce047a27b46e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:22",
            "last_seen_utc": "2026-07-27 21:08:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860274": [
        {
            "ioc_value": "0d59eac16604a2593079f229763b4a69e902e046",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:22",
            "last_seen_utc": "2026-07-27 21:08:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860275": [
        {
            "ioc_value": "bcd7e1a3a1341a04aa7ec824d94ea351",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-27 12:45:22",
            "last_seen_utc": "2026-07-27 21:08:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860276": [
        {
            "ioc_value": "d712b6f9fa3ea6fa9c9dd1b6e7b7c9d479720470efd3ac8e7c3f419ee4f592da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:22",
            "last_seen_utc": "2026-07-27 21:08:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860271": [
        {
            "ioc_value": "459842f88ff6ad6f34f6538475dfeab3fe385b56",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:21",
            "last_seen_utc": "2026-07-27 21:08:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860272": [
        {
            "ioc_value": "adf16430b4c278fcf6c9c71fec17c75d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:21",
            "last_seen_utc": "2026-07-27 21:08:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860270": [
        {
            "ioc_value": "ed1f71433e9f55140d1c854ef5425e27357c46616710662407ddcc02ef4a9854",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-27 12:45:20",
            "last_seen_utc": "2026-07-27 21:08:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1860269": [
        {
            "ioc_value": "gktgeg.companyhelpline.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:43:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860268": [
        {
            "ioc_value": "aphuarxedlktfmdgkl.mamaspizzansubsmenu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:43:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860267": [
        {
            "ioc_value": "bucakosb.org.tr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-27 12:35:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e922b9d3d9b7c8c01c18cf19b22c9596af7ce5545f6a77bfd6fa779e60aae7ec/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860265": [
        {
            "ioc_value": "companyhelpline.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:31:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860259": [
        {
            "ioc_value": "https://menoracarpet.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/menoracarpet.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860260": [
        {
            "ioc_value": "https://newyorkimmigration.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/newyorkimmigration.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860261": [
        {
            "ioc_value": "https://barrettbrokers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/barrettbrokers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860262": [
        {
            "ioc_value": "https://manjilas.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/manjilas.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860263": [
        {
            "ioc_value": "https://cmdgl.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cmdgl.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860264": [
        {
            "ioc_value": "https://fadyghali.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fadyghali.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860248": [
        {
            "ioc_value": "https://imed.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/imed.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860249": [
        {
            "ioc_value": "https://www.liveshowsmerchandising.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.liveshowsmerchandising.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860250": [
        {
            "ioc_value": "https://nexunews.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nexunews.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860251": [
        {
            "ioc_value": "https://fastfixcars.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fastfixcars.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860252": [
        {
            "ioc_value": "https://alambiodiversitasindonesia.or.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alambiodiversitasindonesia.or.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860253": [
        {
            "ioc_value": "https://jmsoluciones.com.ar/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jmsoluciones.com.ar",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860254": [
        {
            "ioc_value": "https://cledor-experts.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cledor-experts.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860255": [
        {
            "ioc_value": "https://growingleaders.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/growingleaders.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860256": [
        {
            "ioc_value": "https://cledor-conseils.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cledor-conseils.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860257": [
        {
            "ioc_value": "https://banahealth.care/?lang=fr",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/banahealth.care",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860258": [
        {
            "ioc_value": "https://dongyangmotors.co.kr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dongyangmotors.co.kr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860246": [
        {
            "ioc_value": "carfinancenow.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:23:33",
            "last_seen_utc": "2026-07-31 05:09:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860245": [
        {
            "ioc_value": "qolpwy.akabespokejewellers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:21:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860242": [
        {
            "ioc_value": "dsluen.akabespokejewellers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:13:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860240": [
        {
            "ioc_value": "akabespokejewellers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 12:09:07",
            "last_seen_utc": "2026-08-06 04:46:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860227": [
        {
            "ioc_value": "https://bluewayslogistics.genxe.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bluewayslogistics.genxe.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860228": [
        {
            "ioc_value": "https://904jaxlatino.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/904jaxlatino.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860229": [
        {
            "ioc_value": "https://bestcryptosignals.io/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bestcryptosignals.io",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860230": [
        {
            "ioc_value": "https://arttv.gr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/arttv.gr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860231": [
        {
            "ioc_value": "https://foulath.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 12:01:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/foulath.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860223": [
        {
            "ioc_value": "137.184.135.42:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-27 11:52:09",
            "last_seen_utc": "2026-07-29 04:58:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1860226": [
        {
            "ioc_value": "lwezvs.zcode-system.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 11:50:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860225": [
        {
            "ioc_value": "zcode-system.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 11:50:10",
            "last_seen_utc": "2026-08-07 00:14:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860224": [
        {
            "ioc_value": "47.103.214.7:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 11:46:45",
            "last_seen_utc": "2026-08-28 14:48:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860222": [
        {
            "ioc_value": "lpdapm.zcode--system.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 11:14:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860214": [
        {
            "ioc_value": "http://texchub.biz:6520",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 10:56:03",
            "last_seen_utc": "2026-08-07 08:41:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/95d726a38b576746afdd06fa579d682e6028976db6b14a9c90f4ae60dc4bdc86/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860199": [
        {
            "ioc_value": "banahealth.care",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:51:39",
            "last_seen_utc": "2026-08-25 16:43:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860184": [
        {
            "ioc_value": "soleo-info.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:51:38",
            "last_seen_utc": "2026-08-25 18:39:41",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860164": [
        {
            "ioc_value": "arttv.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:51:37",
            "last_seen_utc": "2026-08-31 21:20:51",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860170": [
        {
            "ioc_value": "freshnewtracks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:51:37",
            "last_seen_utc": "2026-08-25 16:43:48",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860096": [
        {
            "ioc_value": "ngrbvc.sppartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:47:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,clickfix,Windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860102": [
        {
            "ioc_value": "rbxtools.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:47:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1860121": [
        {
            "ioc_value": "texchub.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-27 10:47:21",
            "last_seen_utc": "2026-07-27 15:54:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3c87f0ccaceabc4b920d064eba1fda7c87c7cb434798c02f86665b225eaf95a5/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1860132": [
        {
            "ioc_value": "sherpurnews24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:44:33",
            "last_seen_utc": "2026-08-25 16:44:44",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860138": [
        {
            "ioc_value": "rob-trans.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:44:33",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860127": [
        {
            "ioc_value": "mcrhotels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:31:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860126": [
        {
            "ioc_value": "https://blog.w5engineering.com/eapowered/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:31:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/blog.w5engineering.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860125": [
        {
            "ioc_value": "https://herbal-care-products.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/herbal-care-products.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860124": [
        {
            "ioc_value": "redrockscoach.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:30:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860123": [
        {
            "ioc_value": "adxvwa.us-en-us-bizopp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:28:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860122": [
        {
            "ioc_value": "us-en-us-bizopp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:26:29",
            "last_seen_utc": "2026-08-07 00:14:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860104": [
        {
            "ioc_value": "178.16.52.104:5429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860105": [
        {
            "ioc_value": "178.16.52.104:5837",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860106": [
        {
            "ioc_value": "178.16.52.104:10321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860107": [
        {
            "ioc_value": "178.16.52.104:19823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860108": [
        {
            "ioc_value": "178.16.52.104:23016",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860109": [
        {
            "ioc_value": "178.16.52.104:31428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860110": [
        {
            "ioc_value": "178.16.52.104:33224",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860111": [
        {
            "ioc_value": "178.16.52.104:45123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860112": [
        {
            "ioc_value": "178.16.52.104:49657",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860113": [
        {
            "ioc_value": "178.16.52.104:62849",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860114": [
        {
            "ioc_value": "178.16.52.104:64715",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:06:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/abuse_ch/status/2081682211430871419",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860103": [
        {
            "ioc_value": "anruolvbjabgewdqym.infinityjoespizzaclearwater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 10:06:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860097": [
        {
            "ioc_value": "24.144.93.255:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 10:05:05",
            "last_seen_utc": "2026-08-18 11:57:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860095": [
        {
            "ioc_value": "55iphlgh.lipogammy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 09:49:57",
            "last_seen_utc": "2026-07-28 12:00:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860094": [
        {
            "ioc_value": "j2a96wpl.shop-lipogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 09:46:36",
            "last_seen_utc": "2026-07-29 21:33:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860093": [
        {
            "ioc_value": "94.154.32.56:27221",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 09:46:11",
            "last_seen_utc": "2026-08-26 18:46:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860092": [
        {
            "ioc_value": "94.154.32.56:27220",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 09:46:10",
            "last_seen_utc": "2026-08-26 18:46:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860091": [
        {
            "ioc_value": "91.92.40.96:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-27 09:46:09",
            "last_seen_utc": "2026-08-26 18:46:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860090": [
        {
            "ioc_value": "84.200.154.216:4000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-27 09:46:01",
            "last_seen_utc": "2026-08-28 18:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860089": [
        {
            "ioc_value": "46.151.182.76:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 09:45:41",
            "last_seen_utc": "2026-09-01 02:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860088": [
        {
            "ioc_value": "45.59.160.198:52203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 09:45:36",
            "last_seen_utc": "2026-08-26 18:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860087": [
        {
            "ioc_value": "204.44.69.230:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-27 09:44:29",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860086": [
        {
            "ioc_value": "2.26.26.153:43216",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-27 09:44:23",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860085": [
        {
            "ioc_value": "194.233.80.96:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-27 09:44:20",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860084": [
        {
            "ioc_value": "172.245.232.49:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 09:43:55",
            "last_seen_utc": "2026-08-27 18:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860083": [
        {
            "ioc_value": "130.12.182.184:1339",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-27 09:43:24",
            "last_seen_utc": "2026-08-28 18:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860082": [
        {
            "ioc_value": "xiajme.spingamehub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 09:43:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860081": [
        {
            "ioc_value": "spingamehub.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 09:40:47",
            "last_seen_utc": "2026-08-07 00:14:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860080": [
        {
            "ioc_value": "haochisadnka.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-27 09:38:23",
            "last_seen_utc": "2026-08-03 17:22:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://x.com/bomccss/status/2081672962567201256",
            "tags": "ValleyRat",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1860077": [
        {
            "ioc_value": "24.144.93.255:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 09:05:09",
            "last_seen_utc": "2026-08-18 12:04:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860074": [
        {
            "ioc_value": "mondayhaircarevolume.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-27 09:01:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a6e9e0350c8c4b7103fe3cae27ee9214cf06681b52ada319c10fddc9efefba6a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860073": [
        {
            "ioc_value": "alayaf.play-1winofficial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 08:55:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860072": [
        {
            "ioc_value": "play-1winofficial.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 08:55:17",
            "last_seen_utc": "2026-08-07 00:14:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860005": [
        {
            "ioc_value": "185.122.187.217:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dosia",
            "malware_alias": "DDOSIA",
            "malware_printable": "Dosia",
            "first_seen_utc": "2026-07-27 08:29:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,ddosia,dosia,noname057",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1860043": [
        {
            "ioc_value": "spearsandco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:29:30",
            "last_seen_utc": "2026-08-18 16:34:10",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2916",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1860049": [
        {
            "ioc_value": "sky-arts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:29:28",
            "last_seen_utc": "2026-08-19 21:11:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2726",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1860055": [
        {
            "ioc_value": "khaasbaatindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:29:24",
            "last_seen_utc": "2026-08-19 21:11:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2391",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1860060": [
        {
            "ioc_value": "ycqfyj.usen-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 08:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860028": [
        {
            "ioc_value": "https://mail.sundruglabayu.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.sundruglabayu.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860029": [
        {
            "ioc_value": "https://mail.icg.gzr.mybluehost.me/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.icg.gzr.mybluehost.me",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860030": [
        {
            "ioc_value": "https://mail.markshiffrin.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.markshiffrin.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860031": [
        {
            "ioc_value": "https://www.sp.av.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sp.av.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860032": [
        {
            "ioc_value": "https://ec2-35-94-227-91.us-west-2.compute.amazonaws.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ec2-35-94-227-91.us-west-2.compute.amazonaws.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860033": [
        {
            "ioc_value": "https://xn--7dblgf0ckcs.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/xn--7dblgf0ckcs.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860034": [
        {
            "ioc_value": "https://xn--q3cck4dgs.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 08:01:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/xn--q3cck4dgs.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860027": [
        {
            "ioc_value": "us-en-us-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 07:41:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860026": [
        {
            "ioc_value": "cepliss.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-27 07:37:40",
            "last_seen_utc": "2026-07-27 08:42:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1860025": [
        {
            "ioc_value": "us-en-us-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 07:34:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1860024": [
        {
            "ioc_value": "https://machinetest.hoztox.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/machinetest.hoztox.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860012": [
        {
            "ioc_value": "https://entertainment.zincgroup.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/entertainment.zincgroup.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860013": [
        {
            "ioc_value": "https://altapedia.altagem.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/altapedia.altagem.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860014": [
        {
            "ioc_value": "https://zahratalmaghrib.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zahratalmaghrib.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860015": [
        {
            "ioc_value": "https://zihec.co.zw/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zihec.co.zw",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860016": [
        {
            "ioc_value": "https://youvahngo.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/youvahngo.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860017": [
        {
            "ioc_value": "https://backend.details.net.sa/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/backend.details.net.sa",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860018": [
        {
            "ioc_value": "https://testing.ligs.lk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/testing.ligs.lk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860019": [
        {
            "ioc_value": "https://shop.mek.com.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/shop.mek.com.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860020": [
        {
            "ioc_value": "https://rafahshop.com.urbanherbsbd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rafahshop.com.urbanherbsbd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860021": [
        {
            "ioc_value": "https://mail.mystudiod.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.mystudiod.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860022": [
        {
            "ioc_value": "https://mail.siebennutri.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.siebennutri.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860023": [
        {
            "ioc_value": "https://swtrade.wpklient.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/swtrade.wpklient.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860006": [
        {
            "ioc_value": "https://vietnammentor.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vietnammentor.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860007": [
        {
            "ioc_value": "https://broxily.lavotivesolutions.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/broxily.lavotivesolutions.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860008": [
        {
            "ioc_value": "https://cms.anuncios.live/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cms.anuncios.live",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860009": [
        {
            "ioc_value": "https://libretto.awebi-lab.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/libretto.awebi-lab.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860010": [
        {
            "ioc_value": "https://freefitdiet.com.atsrenovations.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/freefitdiet.com.atsrenovations.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860011": [
        {
            "ioc_value": "https://www.centerport.awkwardmedia.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 07:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.centerport.awkwardmedia.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1860004": [
        {
            "ioc_value": "43.129.250.96:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-27 07:16:58",
            "last_seen_utc": "2026-07-30 16:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1860000": [
        {
            "ioc_value": "pmmcin.thelibertytoken.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 06:50:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859999": [
        {
            "ioc_value": "thelibertytoken.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 06:48:36",
            "last_seen_utc": "2026-07-27 16:26:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859998": [
        {
            "ioc_value": "imsbap.thelibertytoken.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 06:47:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859996": [
        {
            "ioc_value": "45.140.14.113:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-27 06:43:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/54117f39ec10e191bd8d2513998c926cbd70e65f1aea9063f54801db1f046e11/",
            "tags": "Arechclient2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859997": [
        {
            "ioc_value": "46.225.113.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-07-27 06:43:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/54117f39ec10e191bd8d2513998c926cbd70e65f1aea9063f54801db1f046e11/",
            "tags": "Arechclient2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859995": [
        {
            "ioc_value": "vmjkew.thelibertytoken.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 06:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859994": [
        {
            "ioc_value": "thelibertytoken.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 06:35:29",
            "last_seen_utc": "2026-07-28 03:58:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859985": [
        {
            "ioc_value": "http://223.123.125.34:48831/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 06:32:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.125.34",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1859986": [
        {
            "ioc_value": "http://182.117.107.220:49098/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 06:32:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.117.107.220",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1859987": [
        {
            "ioc_value": "http://139.135.41.11:47507/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 06:32:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.41.11",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1859988": [
        {
            "ioc_value": "http://103.174.243.204:46707/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 06:32:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.174.243.204",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1859993": [
        {
            "ioc_value": "v0hkpadr04mbz5lkearqa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 06:26:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/954f528dcb907ea1637accc6dbc5fc5f26313bf7c05bf107883e79635c5dac4b/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859990": [
        {
            "ioc_value": "85.239.149.178:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 06:25:43",
            "last_seen_utc": "2026-08-05 07:13:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/954f528dcb907ea1637accc6dbc5fc5f26313bf7c05bf107883e79635c5dac4b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859991": [
        {
            "ioc_value": "85.239.149.178:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 06:25:43",
            "last_seen_utc": "2026-08-05 07:13:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/954f528dcb907ea1637accc6dbc5fc5f26313bf7c05bf107883e79635c5dac4b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859992": [
        {
            "ioc_value": "85.239.149.178:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-27 06:25:43",
            "last_seen_utc": "2026-08-05 07:13:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/954f528dcb907ea1637accc6dbc5fc5f26313bf7c05bf107883e79635c5dac4b/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859989": [
        {
            "ioc_value": "204.44.93.88:8449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-27 06:22:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859984": [
        {
            "ioc_value": "sot.tbo88men.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-27 06:09:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858966": [
        {
            "ioc_value": "http://47.239.127.71/lib/xxx",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-27 05:59:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "miner,Mirai,xmrig",
            "anonymous": 0,
            "reporter": "Chamindu_X"
        }
    ],
    "1859707": [
        {
            "ioc_value": "http://103.170.85.16:43635/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-27 05:59:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.170.85.16",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1859727": [
        {
            "ioc_value": "168.144.135.136:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-27 05:59:23",
            "last_seen_utc": "2026-07-27 22:43:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1859734": [
        {
            "ioc_value": "https://moon.attorneycover.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 05:59:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/d970e7f9-b96d-4cf1-bdc7-dcfcf8458a8d",
            "tags": "DonutLoader,StealC",
            "anonymous": 0,
            "reporter": "winneratwin"
        }
    ],
    "1859735": [
        {
            "ioc_value": "https://t.me/r2s7ko",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-27 05:59:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/d970e7f9-b96d-4cf1-bdc7-dcfcf8458a8d",
            "tags": "DonutLoader,StealC",
            "anonymous": 0,
            "reporter": "winneratwin"
        }
    ],
    "1859975": [
        {
            "ioc_value": "030085f202d1ccb73a0dc0b7eb6e1787",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 05:51:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Krybit%20Ransomware",
            "tags": "krybit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859976": [
        {
            "ioc_value": "cf77f86c0724629f2bbc86c489fe42de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 05:51:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Krybit%20Ransomware",
            "tags": "krybit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859977": [
        {
            "ioc_value": "860fae3fc7db1c1ceb12eb42ce59aee4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 05:51:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Krybit%20Ransomware",
            "tags": "krybit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859978": [
        {
            "ioc_value": "93f8cb3b8b2e4e4ec8d06263f68c953e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-27 05:51:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Krybit%20Ransomware",
            "tags": "krybit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859974": [
        {
            "ioc_value": "eucyxv.sppartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 05:47:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859973": [
        {
            "ioc_value": "sppartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 05:45:00",
            "last_seen_utc": "2026-07-28 01:58:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859972": [
        {
            "ioc_value": "185.149.24.6:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-27 05:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859962": [
        {
            "ioc_value": "30b49ae2f685d4403d3013410f80c2e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859963": [
        {
            "ioc_value": "0b33a1a23b044beb5c9a63aafd35595c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859964": [
        {
            "ioc_value": "a2a13b8da7370f5f4753d81c7958dfcb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859965": [
        {
            "ioc_value": "1e0f4cd09aa4464179933769b5009251",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859966": [
        {
            "ioc_value": "1cc9ae55b1856e4e9796c73f94c2e683",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859967": [
        {
            "ioc_value": "0a454a07e071971832985701bc6e9164",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859968": [
        {
            "ioc_value": "de1a114a2c5552387a1bbb61501bf129",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": "2026-08-06 13:37:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859969": [
        {
            "ioc_value": "7f11809925adc6657e84165fdf780816",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": "2026-08-06 13:37:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859970": [
        {
            "ioc_value": "ed18c524e930cd1c34614f7cc3051dfc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": "2026-08-06 13:37:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859971": [
        {
            "ioc_value": "5f5bf7fc7a9ac89ce0bbb07bd1160078",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:32",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859953": [
        {
            "ioc_value": "736a6b312fe80efea9bc2e482629be06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859954": [
        {
            "ioc_value": "1b6d9c7cb4ad65da282fc48a9a30f97e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859955": [
        {
            "ioc_value": "b8683f466e936e45a5ca715c2845563c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859956": [
        {
            "ioc_value": "05e9d6d239ea29f0427b02a9bc903be7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859957": [
        {
            "ioc_value": "7b885b446bbd9b450146c88f84c64f30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859958": [
        {
            "ioc_value": "7a89b347beb55f63dbcbcfc0beedbe43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859959": [
        {
            "ioc_value": "7a262d4cbbc4808932b6af42c4041f06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859960": [
        {
            "ioc_value": "ffb6011e7c82355046988166dd896930",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859961": [
        {
            "ioc_value": "4609cbac6772a6c61fcf2745cd3b4362",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859944": [
        {
            "ioc_value": "f55f5be6acfe822a2dab793450dc60d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859945": [
        {
            "ioc_value": "6440dff8fd8156ef54f6814207983d65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859946": [
        {
            "ioc_value": "5d2ff243bafd84603263ab20f3f2d1e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859947": [
        {
            "ioc_value": "3dc129c6e1e15e1a47ab9fb71e30e939",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859948": [
        {
            "ioc_value": "6a54c09873d13b0cd915abe682338669",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859949": [
        {
            "ioc_value": "926d26fae93d090519ac0f0e1155150e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859950": [
        {
            "ioc_value": "2e8db0587aa8994a1f5bc796dafe33ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859951": [
        {
            "ioc_value": "698ce57e5f0ecda7b41d2c6c1e7ca177",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859952": [
        {
            "ioc_value": "6f1ece39f46345ff8f0327a93af2312b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-27 05:32:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859943": [
        {
            "ioc_value": "urzsxn.usa--burnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 05:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859942": [
        {
            "ioc_value": "usaburnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 05:27:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859938": [
        {
            "ioc_value": "874c7ebcdc1be4d40b6a337d1299566b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859939": [
        {
            "ioc_value": "31edb01d243e8d989eb7e5aeeeef54dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859940": [
        {
            "ioc_value": "ecbb2a348b158d59d6eb1f81955d5e7b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859941": [
        {
            "ioc_value": "1a5ee819449d01730b45f4f714e990c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859927": [
        {
            "ioc_value": "3d88af97167c373b5b35d9a8133df5a8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859928": [
        {
            "ioc_value": "e5e3819b4c354a3416a0d1c9f483aa79",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859929": [
        {
            "ioc_value": "a7d998d2b248f05c17f986e6d3bb1c69",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859930": [
        {
            "ioc_value": "4cbb702140ab23d186b028e8b1881ca5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859931": [
        {
            "ioc_value": "0989a1bba6c1694aaba9fabf1502be01",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859932": [
        {
            "ioc_value": "b52d7bec07b3f11030e6960dcec13c61",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859933": [
        {
            "ioc_value": "bf864e75a7c1f1a259c528cf616228d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859934": [
        {
            "ioc_value": "f6cf6f7882e162506eade5c67535ddca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859935": [
        {
            "ioc_value": "eb6fff4ee0f03ae5191f11570ff221c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859936": [
        {
            "ioc_value": "da6dada9aa8fb55bfafb1e9c84835710",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859937": [
        {
            "ioc_value": "908a7f5bcdd8b0bc8e1f6bd86f217222",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859919": [
        {
            "ioc_value": "6443698bcb15cc19ebfeea74bd80c26c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859920": [
        {
            "ioc_value": "d6f6c84364e483f1857b3b53c715afce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859921": [
        {
            "ioc_value": "8872f3bcad8c765127f75aa5838afd61",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859922": [
        {
            "ioc_value": "1340bdf97aaefa2fd6dc586f84cf4f15",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859923": [
        {
            "ioc_value": "e901de5f5639e2da79099beb3302d3aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859924": [
        {
            "ioc_value": "6c9f0df2194fd7154de8f3c29e444fec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859925": [
        {
            "ioc_value": "daecad02a61e55b9964b4f091d585819",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859926": [
        {
            "ioc_value": "0d8adf6b72dacaf256865e8a8e954837",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859909": [
        {
            "ioc_value": "c2f7aef9adf4a6b1aa56e3b3f7210b62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859910": [
        {
            "ioc_value": "ea0b00e05e0cb8f7075242b7930f781c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859911": [
        {
            "ioc_value": "999cd2cd1e3757f45dffedcc76042cfa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859912": [
        {
            "ioc_value": "5c6ed6a7422cb7ade75f0d7325722b8d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859913": [
        {
            "ioc_value": "b788063bf3be1c07295283279ac41911",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859914": [
        {
            "ioc_value": "9bfefd00508f4793e6f8bfed2a1ab49c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859915": [
        {
            "ioc_value": "377e8aeacab8971137e130b8734261e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859916": [
        {
            "ioc_value": "dd51094e4f4ac5bbb533a22156ae5050",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859917": [
        {
            "ioc_value": "247cf7e76f0b4af43e28b051a5de7cf1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859918": [
        {
            "ioc_value": "9185eaa9b3e19cda183ab18f8b914262",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859899": [
        {
            "ioc_value": "a861b1f119aaacee66cb650d35450e25",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859900": [
        {
            "ioc_value": "5862546663d0855c3d8609de60c0d585",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859901": [
        {
            "ioc_value": "4394b367d3a4b3e2bfa19566cc395ba5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859902": [
        {
            "ioc_value": "ccf64e37512e69bca4868894a1bf233b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859903": [
        {
            "ioc_value": "b2675bbbf831aa3c9a57d5078c1911eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859904": [
        {
            "ioc_value": "8c801133cbc3bb52052bcf79a5216450",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859905": [
        {
            "ioc_value": "4e7bcdb0b848be93c67e62daf1fd4dff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859906": [
        {
            "ioc_value": "551105de80b2dfce19da4ceab42251ae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859907": [
        {
            "ioc_value": "240d9635b9c6b1a1265646ce5afb83e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859908": [
        {
            "ioc_value": "6431c8512b3221ec180478cb260da419",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859889": [
        {
            "ioc_value": "c61d19c4b0884db44a5fe8cab6040b38",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859890": [
        {
            "ioc_value": "3f4763115058d210f73c2afbef468a83",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859891": [
        {
            "ioc_value": "a35aef682a5734efa974ca000104ca91",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859892": [
        {
            "ioc_value": "9274a2f9b3a4fb303eee9a725493a118",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859893": [
        {
            "ioc_value": "9155bab3529858191b6ebbdd00bce6cf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859894": [
        {
            "ioc_value": "6f575ebfdcd4f637bee393a18b547f59",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859895": [
        {
            "ioc_value": "bdc9611f2b5b48680eacdf9c2c0e0546",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859896": [
        {
            "ioc_value": "de6cf7235bed85b5665ed7c8b047834c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859897": [
        {
            "ioc_value": "6327733b1a1d51d5e3e8b668d23c9002",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859898": [
        {
            "ioc_value": "6601931d5981366cbc4f04570a0815cf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859879": [
        {
            "ioc_value": "b3931310f20496f2b4a21fbb3f86ee16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859880": [
        {
            "ioc_value": "c47d3c5861d34482ea87a4af4aa8539c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859881": [
        {
            "ioc_value": "330550a451962773a3fe6b1fd780c4cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859882": [
        {
            "ioc_value": "d43e8f238e9071c06d19070a625d0056",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859883": [
        {
            "ioc_value": "2387cb1c8b1fee6526300e3d35ce5c74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859884": [
        {
            "ioc_value": "3617edb04993fd06226c228c1d70c414",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859885": [
        {
            "ioc_value": "84dcae246991d1aa893f10a803393bff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859886": [
        {
            "ioc_value": "adb426d745a4bbbb62d8a45333e757ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859887": [
        {
            "ioc_value": "46e93e58515ff20bd9c68d26e549266b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859888": [
        {
            "ioc_value": "f28cc6d42c81624b02e76b34910b2d3c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859869": [
        {
            "ioc_value": "593d1d29af7b71fca272aa65b143b8e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859870": [
        {
            "ioc_value": "85b46fd53fbfcfaabf5a52f0dc25134f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859871": [
        {
            "ioc_value": "f77562b49448581c9b09a68ac78ff37b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859872": [
        {
            "ioc_value": "f87c6fa237e630491b09c12dfacbb94f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859873": [
        {
            "ioc_value": "4d1743444ba9172ae0e787bf2463de1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859874": [
        {
            "ioc_value": "2cfc6db85985e270ea3ddedc3a0ef345",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859875": [
        {
            "ioc_value": "3376740886ed49c4e15ce9adf931b2b7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859876": [
        {
            "ioc_value": "aa79d3a340aada7c95053fd745dd4850",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859877": [
        {
            "ioc_value": "f5374f1aa0d2f2eac551b62c8c6ad4c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859878": [
        {
            "ioc_value": "197cb07a15bec71b744855028208620a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859861": [
        {
            "ioc_value": "5fb9a8635e408aa72425538358018c43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859862": [
        {
            "ioc_value": "03cb33627da52aaa5577091bc1823f8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859863": [
        {
            "ioc_value": "21e217f737d688a38f15118e8f696bae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859864": [
        {
            "ioc_value": "426303abd7f99447be9ba8ff3e5abb56",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859865": [
        {
            "ioc_value": "1c3d9391438862b1574fa7f8ecfd0de1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859866": [
        {
            "ioc_value": "d9ff8fddd37c75d9d30fbacb1af24d6d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859867": [
        {
            "ioc_value": "899935e293368b4aafd6ff8db7375844",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859868": [
        {
            "ioc_value": "39436e9b3fb8427b1a7789d4f0223a3e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859851": [
        {
            "ioc_value": "8c36eceb4a02ff1fba10bb95cc037dc6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859852": [
        {
            "ioc_value": "57f647f35ac1de5481defddb2a3a1122",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859853": [
        {
            "ioc_value": "c772dfd71dde99b3d06f9047f593493e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859854": [
        {
            "ioc_value": "5b2ec6f7a5099595374cd248bfac2b53",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859855": [
        {
            "ioc_value": "996fef81d310d635efd4df1769e208f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859856": [
        {
            "ioc_value": "a6fa8faabd9ef050c7381c7bf9a7d05b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859857": [
        {
            "ioc_value": "e2097b1fac5375439ff245b490399f3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859858": [
        {
            "ioc_value": "5c6a11c3061601d3be3462dd652e35ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859859": [
        {
            "ioc_value": "008e16d7c85afe9ce07e60e784b51409",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859860": [
        {
            "ioc_value": "8fb64d051848b0d8c38dcb683475d5f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859843": [
        {
            "ioc_value": "369bf85edbdbfc193d37ce50c886fdb9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859844": [
        {
            "ioc_value": "c979a8fd94dd3ff97ece6074e9639960",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859845": [
        {
            "ioc_value": "1dcb7b7c00bd3a647d7d40f4f2f5b537",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859846": [
        {
            "ioc_value": "5ef97f4da2f8ebb6640eb0417319281c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859847": [
        {
            "ioc_value": "fe99efbb5d6cc5e40adbc0be64767a08",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859848": [
        {
            "ioc_value": "2bdadadc42777cad497ec54c14758a46",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859849": [
        {
            "ioc_value": "6bed23d500d79d0414f358da7bfa5c34",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859850": [
        {
            "ioc_value": "1bb275319619856af055c3e292c4070a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859832": [
        {
            "ioc_value": "4d5f56957db4b4eec9d87b64f8f5026b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859833": [
        {
            "ioc_value": "dbb8dd4954d8d0ea0c03492e02c57a5f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859834": [
        {
            "ioc_value": "6e46e72e959371567c807773b0817a03",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859835": [
        {
            "ioc_value": "5628dfb66d7c6f388657b6ca3961507f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859836": [
        {
            "ioc_value": "25be2a0c90fbb190fcf485a10b0b4c35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859837": [
        {
            "ioc_value": "a545e4ac2b59b5f5fb3aa14203f82d8e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859838": [
        {
            "ioc_value": "7e3c8e6b6e28de7dd4e75ff8329c5da9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859839": [
        {
            "ioc_value": "7e23f2323298ebd280e3fd2dea5fdab5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859840": [
        {
            "ioc_value": "bf262e47207abca33fdb2d15d060f3f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859841": [
        {
            "ioc_value": "73956053fde7be9fe1c63b45630692a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859842": [
        {
            "ioc_value": "769d03cf11445b268306bf569d15ae29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859822": [
        {
            "ioc_value": "5db84e4f84411c882bdc1a05601c85f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859823": [
        {
            "ioc_value": "34ca41e2af54953fd9c219bcb001f891",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859824": [
        {
            "ioc_value": "40cbef44d0ac78fae7c23803b0873cbe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859825": [
        {
            "ioc_value": "f1d2ea4574b06f39efcd2affba001567",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859826": [
        {
            "ioc_value": "ef2e75f7e2d6ace02ab61cb6e8c79bcd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859827": [
        {
            "ioc_value": "dcaac89539ff0f6313d8a48ce72a1e07",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859828": [
        {
            "ioc_value": "f9b3f122b831b7d2bd4464b98c8b21b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859829": [
        {
            "ioc_value": "dfb3f9e4a0565e6f4328e3876a04f019",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859830": [
        {
            "ioc_value": "d7a4fac9c5fe0171f319a5f1a546d031",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859831": [
        {
            "ioc_value": "d4924474fc65b01338656b91ca02291f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859813": [
        {
            "ioc_value": "a0b1e68fd092dab3358444d5afff911c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859814": [
        {
            "ioc_value": "3c02d8fafecba1452ef04b571a84c9b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859815": [
        {
            "ioc_value": "38df25c00eaa64e15523f54ecb8b70c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859816": [
        {
            "ioc_value": "9f85c8fceddfcebe29f4097697bc56b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859817": [
        {
            "ioc_value": "611d407375352bb91da1e3558db8c0a1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859818": [
        {
            "ioc_value": "8dcacca487b7a59431cf774dff3077b4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859819": [
        {
            "ioc_value": "f8e82ec9f5fec8779e43e955f67b28ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859820": [
        {
            "ioc_value": "9e97a5673945badf4154608c6f460673",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859821": [
        {
            "ioc_value": "8d641acb5d43017a27c9006d5b7ea739",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859802": [
        {
            "ioc_value": "fa29ba375745ef6c0d1423cf38a83d71",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859803": [
        {
            "ioc_value": "05792dae1b220b46ea144d9e6700c5c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859804": [
        {
            "ioc_value": "0070ac173a50201adae1dd3fc74d778d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859805": [
        {
            "ioc_value": "a48afa85b0b03c4765f32f4df0bf2ee7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": "2026-07-27 05:12:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859806": [
        {
            "ioc_value": "7a71a5475cbfb7d5a5557dddb18159bf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859807": [
        {
            "ioc_value": "591385ba84ebccb6b904410d5fb74871",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859808": [
        {
            "ioc_value": "45366c289b05f2838d20a7f38dbd23a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859809": [
        {
            "ioc_value": "a26818e34f35f4ee648f013982f368d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859810": [
        {
            "ioc_value": "9047bb218a5a60ca81e76acd719979d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859811": [
        {
            "ioc_value": "de13453b63073710dfd952b1e3305ed4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859812": [
        {
            "ioc_value": "6a051dcfaa8308563535490b74f43345",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859791": [
        {
            "ioc_value": "d4e044151a7c099f397c6c48af0a5ee3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859792": [
        {
            "ioc_value": "95b2fcc982f7e28ea3e6fda09ebda0b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859793": [
        {
            "ioc_value": "68accaad382aebd9a6c9f755511dc123",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859794": [
        {
            "ioc_value": "6c21fc02f62b16b4a8d8b40b8b3459fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859795": [
        {
            "ioc_value": "a15b1c2d6bb62de217644f47cba8ccbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859796": [
        {
            "ioc_value": "6238e3fb2619f467c76f5d14e674c702",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859797": [
        {
            "ioc_value": "794eff0e5409fe96d267eb6fc597fd2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859798": [
        {
            "ioc_value": "5c0d9b54c6275941cd2d04b21dbd8e42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859799": [
        {
            "ioc_value": "25ae620019c38a0607a09cc82b03373d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859800": [
        {
            "ioc_value": "58d529bfaf7209b27c9b920e412fc140",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859801": [
        {
            "ioc_value": "2eab996cb50b6d48697256518088fb0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:08",
            "last_seen_utc": "2026-07-27 05:12:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859780": [
        {
            "ioc_value": "8a33c9c6ffdc7a24457639723c167353",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859781": [
        {
            "ioc_value": "565d028fe1b9f12181da991741bb5578",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859782": [
        {
            "ioc_value": "e53da097f370175511c2a8c7734cfd37",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859783": [
        {
            "ioc_value": "11631ccafb1aa5224c86af421170028e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859784": [
        {
            "ioc_value": "d0692bd690c992740cd43ed7b48e6a92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859785": [
        {
            "ioc_value": "f1e78b13e21371ecfec02e6ca8fd5344",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859786": [
        {
            "ioc_value": "bc8e8210e20a8dfeb04e8ad9ccc6fe9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": "2026-07-27 05:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859787": [
        {
            "ioc_value": "9fa75d1ae8ba3a2c8c150cf4005c76b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859788": [
        {
            "ioc_value": "eb913e273a6c623dec5d21405f2c559f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": "2026-07-27 05:12:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859789": [
        {
            "ioc_value": "ae5b3856ce4c1cfe8d84f0449e19af98",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": "2026-07-27 05:12:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859790": [
        {
            "ioc_value": "dfe1d52de0ab556d89bb292c8040f49a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859769": [
        {
            "ioc_value": "c8d43c18b4b451e1722ebb0adbd924b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859770": [
        {
            "ioc_value": "7ba4c93c6142fd6b1b0c34f92deda07a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859771": [
        {
            "ioc_value": "a74c5f1022edb72d1cb39381664809b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859772": [
        {
            "ioc_value": "e4814c8dc3d6d83ecb0ed32bf1d6f593",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859773": [
        {
            "ioc_value": "daec53d5a033d22b522d9fa3973ece16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859774": [
        {
            "ioc_value": "b109053a8ad8c696f75f66f07a8de618",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859775": [
        {
            "ioc_value": "c7e0541aece15b22683869fe25f2893f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": "2026-07-27 05:12:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859776": [
        {
            "ioc_value": "ac8b9ad5dbb09bde6d9df0a3b724f6f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859777": [
        {
            "ioc_value": "fafd5cc8363ceb4f0d8ffae09ffecd36",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859778": [
        {
            "ioc_value": "fd298cc6e4828b95473ed6f5d2af3113",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859779": [
        {
            "ioc_value": "6f7bb2814d31f9d91b3fa08b154fab84",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859760": [
        {
            "ioc_value": "d96b417144fc484cdb1e6430e6884b08",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859761": [
        {
            "ioc_value": "0b58f36ecbdaf37a7669a9a52d363849",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859762": [
        {
            "ioc_value": "1b41cdb5d2a98222bf33e36255b5169f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859763": [
        {
            "ioc_value": "119856ec134acc86ef76044cbf291f54",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859764": [
        {
            "ioc_value": "f8459cec16c4c15d2ea9aee99c398f73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859765": [
        {
            "ioc_value": "9ebd4482171000ba6d4a2da22200c40d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859766": [
        {
            "ioc_value": "e8cd96c3d7f5a99f2ed2c39e23f8355b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859767": [
        {
            "ioc_value": "0d70b3825647082d779987f2772bd219",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859768": [
        {
            "ioc_value": "9394e505be0e7a274cd7431abd53aef1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859748": [
        {
            "ioc_value": "f1dbe4e70de07fd3368915a29b376d1d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859749": [
        {
            "ioc_value": "1c0cb55d3a8d544ab0bd7d81d2985089",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859750": [
        {
            "ioc_value": "deba77ce237a412331cda6c87cf62cdc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859751": [
        {
            "ioc_value": "9e4bb27199b9f8ef1c9efebe78703e06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859752": [
        {
            "ioc_value": "b9cb30b2bfc0618c676e998ea9430102",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859753": [
        {
            "ioc_value": "227f14f4c3aa35b9fb279f52c73b2e1e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859754": [
        {
            "ioc_value": "22f86cec9a2f32d43673ffb8156eee4f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859755": [
        {
            "ioc_value": "c1b97db9b6cced29fcc4d75f342e9be4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859756": [
        {
            "ioc_value": "80dabe87dee2818816c1b8f79ddac79c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859757": [
        {
            "ioc_value": "586cea3284fe4763fa80fdf66a0ebfd6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859758": [
        {
            "ioc_value": "a5d8608c6bb4874880db60edcd90bbc6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859759": [
        {
            "ioc_value": "f3b531e3c02bf043db87ee26b1fdd6cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agendacrypt",
            "malware_alias": "Agenda,Qilin",
            "malware_printable": "AgendaCrypt",
            "first_seen_utc": "2026-07-27 05:12:04",
            "last_seen_utc": "2026-07-27 05:12:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859744": [
        {
            "ioc_value": "e94148c2688de4f86df961d7ee2e8b18",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.qilin",
            "malware_alias": null,
            "malware_printable": "Qilin",
            "first_seen_utc": "2026-07-27 05:10:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859745": [
        {
            "ioc_value": "2178e0b2e5c6058b6e39486249292f5f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.qilin",
            "malware_alias": null,
            "malware_printable": "Qilin",
            "first_seen_utc": "2026-07-27 05:10:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859746": [
        {
            "ioc_value": "4ca3438f72d0ee6fc2c0c572db9fa866",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.qilin",
            "malware_alias": null,
            "malware_printable": "Qilin",
            "first_seen_utc": "2026-07-27 05:10:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859747": [
        {
            "ioc_value": "687483f9b58e995b87af9ab3590333ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.qilin",
            "malware_alias": null,
            "malware_printable": "Qilin",
            "first_seen_utc": "2026-07-27 05:10:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Qilin%20Ransomware",
            "tags": "agenda,qilin,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1859741": [
        {
            "ioc_value": "hcoyfm.thelibertytoken.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 04:54:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859740": [
        {
            "ioc_value": "thelibertytoken.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 04:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859739": [
        {
            "ioc_value": "7stfczbr.liberty-token.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 04:48:38",
            "last_seen_utc": "2026-07-30 02:56:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859738": [
        {
            "ioc_value": "r7qaivk5.shop-burnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 04:46:50",
            "last_seen_utc": "2026-07-30 16:37:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859737": [
        {
            "ioc_value": "usjxkt.spartemax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 04:46:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859736": [
        {
            "ioc_value": "spartemax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 04:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859729": [
        {
            "ioc_value": "bxkbbt.usen-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 03:54:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859728": [
        {
            "ioc_value": "usen-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 03:54:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859722": [
        {
            "ioc_value": "ezobkk.usen-prostadefend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 03:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859721": [
        {
            "ioc_value": "usen-prostadefend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 03:03:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859720": [
        {
            "ioc_value": "utjsax.usen-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 02:15:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859716": [
        {
            "ioc_value": "fzolfm.usen-burnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 01:24:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859715": [
        {
            "ioc_value": "usen-burnflow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859709": [
        {
            "ioc_value": "naftyv.usa-us-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 00:33:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859708": [
        {
            "ioc_value": "usa-us-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-27 00:32:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859702": [
        {
            "ioc_value": "bidd0t2b.enus-tupitea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 23:46:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859701": [
        {
            "ioc_value": "1y9igykt.liberty--token.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 23:46:13",
            "last_seen_utc": "2026-07-31 17:45:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859700": [
        {
            "ioc_value": "141.255.162.234:37422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-26 23:45:57",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859699": [
        {
            "ioc_value": "ttvgjb.usa-tupitea.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 23:42:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859698": [
        {
            "ioc_value": "pvpffy.usa-tupitea.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 23:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859697": [
        {
            "ioc_value": "usa-tupitea.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 23:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859693": [
        {
            "ioc_value": "wfupkm.lippogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 22:28:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859690": [
        {
            "ioc_value": "mamaspizzansubsmenu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 22:15:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859681": [
        {
            "ioc_value": "https://landlordsolutions.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 22:00:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/landlordsolutions.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1859680": [
        {
            "ioc_value": "47.113.98.42:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-26 21:46:16",
            "last_seen_utc": "2026-09-01 02:47:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859678": [
        {
            "ioc_value": "dns1.dreamls.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-26 21:45:45",
            "last_seen_utc": "2026-09-01 02:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859679": [
        {
            "ioc_value": "dns2.dreamls.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-26 21:45:45",
            "last_seen_utc": "2026-09-01 02:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1859677": [
        {
            "ioc_value": "mboxao.lipoviveofficials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 21:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859676": [
        {
            "ioc_value": "mainstreetcarpetsc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 21:25:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859675": [
        {
            "ioc_value": "wheremymoney.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 21:24:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859674": [
        {
            "ioc_value": "verifyrecapcha.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 21:24:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859672": [
        {
            "ioc_value": "lowfeesrealtors.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 21:10:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859673": [
        {
            "ioc_value": "m1brakes.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 21:10:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859669": [
        {
            "ioc_value": "94.103.1.175:16482",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 21:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859668": [
        {
            "ioc_value": "mabqig.proznth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1859667": [
        {
            "ioc_value": "proznth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:40:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859651": [
        {
            "ioc_value": "comb.betyek.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 20:38:09",
            "last_seen_utc": "2026-07-27 08:04:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859650": [
        {
            "ioc_value": "babydiapersinturkey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 20:38:05",
            "last_seen_utc": "2026-07-27 19:30:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859649": [
        {
            "ioc_value": "tue-partner-03.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 20:38:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1859562": [
        {
            "ioc_value": "veteranwalls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:18:11",
            "last_seen_utc": "2026-08-28 18:04:26",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859480": [
        {
            "ioc_value": "srebrnac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:18:07",
            "last_seen_utc": "2026-08-25 16:44:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859487": [
        {
            "ioc_value": "stilpokrivi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:18:07",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859424": [
        {
            "ioc_value": "rollcallcommunityservice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:18:04",
            "last_seen_utc": "2026-08-25 17:39:30",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859387": [
        {
            "ioc_value": "pmmoldpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:18:03",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859399": [
        {
            "ioc_value": "proaslegal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:18:03",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859346": [
        {
            "ioc_value": "mrudulsatam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:59",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859309": [
        {
            "ioc_value": "lowbudgetmovers.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:58",
            "last_seen_utc": "2026-08-25 10:59:52",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859310": [
        {
            "ioc_value": "lowt.health",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:58",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859322": [
        {
            "ioc_value": "martindigitalgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:58",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859259": [
        {
            "ioc_value": "integrativemedicineconsortium.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:56",
            "last_seen_utc": "2026-08-25 16:44:37",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859238": [
        {
            "ioc_value": "hoteltrio.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:55",
            "last_seen_utc": "2026-08-25 16:44:36",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859204": [
        {
            "ioc_value": "gmvanlines.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:53",
            "last_seen_utc": "2026-08-25 16:43:49",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859208": [
        {
            "ioc_value": "gon3d.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:53",
            "last_seen_utc": "2026-08-26 21:54:31",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859157": [
        {
            "ioc_value": "eastvalleyoffer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:51",
            "last_seen_utc": "2026-08-26 21:54:41",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859168": [
        {
            "ioc_value": "enteraie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:51",
            "last_seen_utc": "2026-08-26 17:52:11",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859148": [
        {
            "ioc_value": "dreamdigitalmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:50",
            "last_seen_utc": "2026-08-26 21:54:32",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859120": [
        {
            "ioc_value": "d9nimba.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:49",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859124": [
        {
            "ioc_value": "datadg.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:49",
            "last_seen_utc": "2026-08-28 11:41:57",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859094": [
        {
            "ioc_value": "checkgps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:48",
            "last_seen_utc": "2026-08-26 18:37:03",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859105": [
        {
            "ioc_value": "cityhoteldruzba.sk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:48",
            "last_seen_utc": "2026-08-25 16:43:45",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859045": [
        {
            "ioc_value": "azconstructionanddesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:45",
            "last_seen_utc": "2026-08-25 17:09:26",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1858999": [
        {
            "ioc_value": "actionpositive.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:43",
            "last_seen_utc": "2026-08-25 16:43:41",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1859006": [
        {
            "ioc_value": "advluence.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 20:17:43",
            "last_seen_utc": "2026-08-25 16:43:42",
            "confidence_level": 50,
            "is_compromised": true,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1858984": [
        {
            "ioc_value": "103.112.99.160:1888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-26 19:50:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6e795be8d4f34f798012d46530c62843dbb74c7cc64fd3a2db37ff68c85f52b8/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858983": [
        {
            "ioc_value": "ayiofr.pegas-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 19:50:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858982": [
        {
            "ioc_value": "pegas-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 19:49:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858981": [
        {
            "ioc_value": "93.152.221.140:1010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 19:45:49",
            "last_seen_utc": "2026-08-26 08:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858980": [
        {
            "ioc_value": "2.27.248.237:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-26 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858979": [
        {
            "ioc_value": "192.162.199.143:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-26 19:44:08",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858978": [
        {
            "ioc_value": "176.65.149.209:3043",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-26 19:43:54",
            "last_seen_utc": "2026-08-26 08:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858977": [
        {
            "ioc_value": "157.20.182.22:4442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 19:43:42",
            "last_seen_utc": "2026-08-25 18:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858976": [
        {
            "ioc_value": "103.112.99.160:1666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-26 19:40:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858970": [
        {
            "ioc_value": "bgsiyk.metabodropes.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 19:00:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858969": [
        {
            "ioc_value": "metabodropes.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 18:59:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858968": [
        {
            "ioc_value": "l8ztthbb.en-us--tupitea.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 18:46:43",
            "last_seen_utc": "2026-07-27 23:58:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858967": [
        {
            "ioc_value": "3ed27xfd.libertytokan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 18:45:57",
            "last_seen_utc": "2026-07-29 06:52:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858961": [
        {
            "ioc_value": "http://153.117.6.36:48508/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 18:26:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.36",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858962": [
        {
            "ioc_value": "http://202.9.122.168:47729/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 18:26:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.9.122.168",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858963": [
        {
            "ioc_value": "http://59.96.137.70:47200/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 18:26:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.96.137.70",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858964": [
        {
            "ioc_value": "http://202.63.209.63:43046/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 18:26:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.63.209.63",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858965": [
        {
            "ioc_value": "http://103.197.112.230:57672/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 18:26:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.197.112.230",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858960": [
        {
            "ioc_value": "vxcpyh.metaboddrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 18:13:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858959": [
        {
            "ioc_value": "metaboddrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 18:08:39",
            "last_seen_utc": "2026-07-28 15:49:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858955": [
        {
            "ioc_value": "http://freshis.biz:7752",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-26 17:25:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0a4c8c4de448da39ee10e0990904efc4834f6daceb8ddeab7a8a7d77e4dd9169/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858954": [
        {
            "ioc_value": "fmxxnm.lippogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 17:23:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858953": [
        {
            "ioc_value": "lippogummy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 17:18:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858952": [
        {
            "ioc_value": "tnduzamahrlmftpbnt.en-us-en-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 17:14:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858946": [
        {
            "ioc_value": "reavercncv3.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-26 17:01:42",
            "last_seen_utc": "2026-08-01 14:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f61c4dd62f5c2e5d5d343512e37d6046ffd40a18db24dfa5c5f06c0c0393b162/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858945": [
        {
            "ioc_value": "152.232.62.49:3390",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:55:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2080418436992086051",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858944": [
        {
            "ioc_value": "85.239.144.47:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:52:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2081421638860439591",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858943": [
        {
            "ioc_value": "http://94.183.168.16:5051/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-26 16:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77be91fc4ee0154ee4b6d0a48c596de2bffca40f1aebbf888b9ee2f3e09c89e9/",
            "tags": "BlakcSeeStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858942": [
        {
            "ioc_value": "94.183.168.16:5051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:50:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77be91fc4ee0154ee4b6d0a48c596de2bffca40f1aebbf888b9ee2f3e09c89e9/",
            "tags": "BlakcSeeStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858941": [
        {
            "ioc_value": "zync-stream.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858925": [
        {
            "ioc_value": "litics-net.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858926": [
        {
            "ioc_value": "net-echo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858927": [
        {
            "ioc_value": "nice-protect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858928": [
        {
            "ioc_value": "nova-lan.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858929": [
        {
            "ioc_value": "pixellog.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858930": [
        {
            "ioc_value": "pulse-vol.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858931": [
        {
            "ioc_value": "sdkmob.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858932": [
        {
            "ioc_value": "shield-sky.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858933": [
        {
            "ioc_value": "sky-borders.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858934": [
        {
            "ioc_value": "swift-zip.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858935": [
        {
            "ioc_value": "tera-home.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858936": [
        {
            "ioc_value": "viki-play.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858937": [
        {
            "ioc_value": "worker-net.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858938": [
        {
            "ioc_value": "world2trust.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858939": [
        {
            "ioc_value": "yoursfind.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858940": [
        {
            "ioc_value": "zen-tava.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858916": [
        {
            "ioc_value": "byte-armor.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858917": [
        {
            "ioc_value": "cool-horizon.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858918": [
        {
            "ioc_value": "earth2trust.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858919": [
        {
            "ioc_value": "fast-mob.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858920": [
        {
            "ioc_value": "flexible-networks.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858921": [
        {
            "ioc_value": "ginuary.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858922": [
        {
            "ioc_value": "grid-push.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858923": [
        {
            "ioc_value": "lb.gmslb.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858924": [
        {
            "ioc_value": "link-flux.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:45:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/popa/iocs/domains.csv",
            "tags": "Popa",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858903": [
        {
            "ioc_value": "167.17.64.76:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858904": [
        {
            "ioc_value": "51.178.118.132:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858905": [
        {
            "ioc_value": "172.99.189.88:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858906": [
        {
            "ioc_value": "172.99.189.20:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858907": [
        {
            "ioc_value": "172.99.189.67:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858908": [
        {
            "ioc_value": "167.17.64.20:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858909": [
        {
            "ioc_value": "66.163.119.112:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858910": [
        {
            "ioc_value": "216.106.189.146:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858911": [
        {
            "ioc_value": "66.163.117.114:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858912": [
        {
            "ioc_value": "66.163.117.132:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858913": [
        {
            "ioc_value": "57.129.39.247:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858914": [
        {
            "ioc_value": "57.128.189.5:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858915": [
        {
            "ioc_value": "51.178.118.130:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858884": [
        {
            "ioc_value": "51.89.11.246:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858885": [
        {
            "ioc_value": "51.195.24.3:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858886": [
        {
            "ioc_value": "51.195.24.6:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858887": [
        {
            "ioc_value": "51.195.24.58:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858888": [
        {
            "ioc_value": "57.129.39.245:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858889": [
        {
            "ioc_value": "57.129.64.89:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858890": [
        {
            "ioc_value": "135.125.160.44:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858891": [
        {
            "ioc_value": "57.129.96.136:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858892": [
        {
            "ioc_value": "51.195.24.11:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858893": [
        {
            "ioc_value": "57.129.49.77:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858894": [
        {
            "ioc_value": "51.195.24.60:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858895": [
        {
            "ioc_value": "51.195.24.59:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858896": [
        {
            "ioc_value": "51.89.11.179:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858897": [
        {
            "ioc_value": "51.89.11.192:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858898": [
        {
            "ioc_value": "51.89.11.180:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858899": [
        {
            "ioc_value": "51.178.118.136:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858900": [
        {
            "ioc_value": "51.178.118.134:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858901": [
        {
            "ioc_value": "216.106.189.33:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858902": [
        {
            "ioc_value": "57.129.52.203:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858866": [
        {
            "ioc_value": "148.113.223.222:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858867": [
        {
            "ioc_value": "148.113.223.14:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858868": [
        {
            "ioc_value": "148.113.223.15:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858869": [
        {
            "ioc_value": "148.113.217.70:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858870": [
        {
            "ioc_value": "148.113.217.104:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858871": [
        {
            "ioc_value": "148.113.219.136:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858872": [
        {
            "ioc_value": "57.128.231.179:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858873": [
        {
            "ioc_value": "148.113.217.28:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858874": [
        {
            "ioc_value": "57.128.231.172:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858875": [
        {
            "ioc_value": "57.128.231.178:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858876": [
        {
            "ioc_value": "57.128.231.166:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858877": [
        {
            "ioc_value": "57.128.231.191:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858878": [
        {
            "ioc_value": "57.128.189.112:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858879": [
        {
            "ioc_value": "57.128.231.196:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858880": [
        {
            "ioc_value": "57.128.231.167:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858881": [
        {
            "ioc_value": "51.195.24.115:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858882": [
        {
            "ioc_value": "57.129.39.241:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858883": [
        {
            "ioc_value": "51.195.24.72:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858848": [
        {
            "ioc_value": "51.89.11.147:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858849": [
        {
            "ioc_value": "51.89.11.152:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858850": [
        {
            "ioc_value": "51.89.11.136:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858851": [
        {
            "ioc_value": "57.128.236.217:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858852": [
        {
            "ioc_value": "148.113.222.67:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858853": [
        {
            "ioc_value": "148.113.222.70:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858854": [
        {
            "ioc_value": "148.113.222.71:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858855": [
        {
            "ioc_value": "148.113.222.79:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858856": [
        {
            "ioc_value": "148.113.222.159:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858857": [
        {
            "ioc_value": "148.113.222.83:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858858": [
        {
            "ioc_value": "148.113.222.239:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858859": [
        {
            "ioc_value": "148.113.223.11:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858860": [
        {
            "ioc_value": "148.113.223.10:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858861": [
        {
            "ioc_value": "148.113.223.13:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858862": [
        {
            "ioc_value": "148.113.223.143:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858863": [
        {
            "ioc_value": "148.113.223.153:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858864": [
        {
            "ioc_value": "148.113.223.221:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858865": [
        {
            "ioc_value": "148.113.223.234:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858830": [
        {
            "ioc_value": "57.128.235.104:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858831": [
        {
            "ioc_value": "51.178.110.31:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858832": [
        {
            "ioc_value": "51.89.11.137:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858833": [
        {
            "ioc_value": "51.89.11.144:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858834": [
        {
            "ioc_value": "51.91.169.236:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858835": [
        {
            "ioc_value": "51.91.169.237:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858836": [
        {
            "ioc_value": "51.91.235.9:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858837": [
        {
            "ioc_value": "51.77.236.134:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858838": [
        {
            "ioc_value": "51.178.209.44:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858839": [
        {
            "ioc_value": "57.128.233.151:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858840": [
        {
            "ioc_value": "57.128.236.213:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858841": [
        {
            "ioc_value": "51.178.209.43:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858842": [
        {
            "ioc_value": "57.129.36.108:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858843": [
        {
            "ioc_value": "57.129.36.207:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858844": [
        {
            "ioc_value": "57.129.36.217:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858845": [
        {
            "ioc_value": "135.125.142.177:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858846": [
        {
            "ioc_value": "57.128.231.215:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858847": [
        {
            "ioc_value": "51.89.11.128:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858812": [
        {
            "ioc_value": "40.160.67.148:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858813": [
        {
            "ioc_value": "148.113.220.156:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858814": [
        {
            "ioc_value": "40.160.67.156:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858815": [
        {
            "ioc_value": "40.160.67.155:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858816": [
        {
            "ioc_value": "40.160.67.154:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858817": [
        {
            "ioc_value": "51.178.209.38:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858818": [
        {
            "ioc_value": "40.160.67.157:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858819": [
        {
            "ioc_value": "148.113.222.244:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858820": [
        {
            "ioc_value": "148.113.220.149:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858821": [
        {
            "ioc_value": "57.129.85.211:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858822": [
        {
            "ioc_value": "51.91.169.238:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858823": [
        {
            "ioc_value": "198.244.253.160:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858824": [
        {
            "ioc_value": "172.237.29.239:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858825": [
        {
            "ioc_value": "148.113.222.157:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858826": [
        {
            "ioc_value": "148.113.222.160:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858827": [
        {
            "ioc_value": "148.113.222.246:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858828": [
        {
            "ioc_value": "148.113.222.237:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858829": [
        {
            "ioc_value": "172.238.7.209:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858793": [
        {
            "ioc_value": "15.235.67.123:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858794": [
        {
            "ioc_value": "57.129.54.85:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858795": [
        {
            "ioc_value": "148.113.220.143:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858796": [
        {
            "ioc_value": "57.129.54.87:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858797": [
        {
            "ioc_value": "57.128.21.87:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858798": [
        {
            "ioc_value": "46.105.65.144:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858799": [
        {
            "ioc_value": "65.108.9.68:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858800": [
        {
            "ioc_value": "57.129.54.50:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858801": [
        {
            "ioc_value": "148.113.220.152:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858802": [
        {
            "ioc_value": "162.19.85.101:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858803": [
        {
            "ioc_value": "51.222.152.16:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858804": [
        {
            "ioc_value": "15.204.110.205:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858805": [
        {
            "ioc_value": "57.128.233.139:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858806": [
        {
            "ioc_value": "15.204.110.201:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858807": [
        {
            "ioc_value": "15.204.110.198:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858808": [
        {
            "ioc_value": "162.19.42.232:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858809": [
        {
            "ioc_value": "15.204.110.196:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858810": [
        {
            "ioc_value": "148.113.220.153:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858811": [
        {
            "ioc_value": "15.204.110.204:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858775": [
        {
            "ioc_value": "15.235.230.176:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858776": [
        {
            "ioc_value": "15.235.230.11:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858777": [
        {
            "ioc_value": "15.235.229.21:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858778": [
        {
            "ioc_value": "15.235.229.120:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858779": [
        {
            "ioc_value": "15.235.229.32:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858780": [
        {
            "ioc_value": "15.235.229.48:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858781": [
        {
            "ioc_value": "15.235.229.199:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858782": [
        {
            "ioc_value": "15.235.229.142:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858783": [
        {
            "ioc_value": "135.181.75.30:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858784": [
        {
            "ioc_value": "148.113.223.232:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858785": [
        {
            "ioc_value": "15.235.229.92:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858786": [
        {
            "ioc_value": "15.235.67.122:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858787": [
        {
            "ioc_value": "15.235.43.249:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858788": [
        {
            "ioc_value": "95.217.62.206:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858789": [
        {
            "ioc_value": "15.235.67.120:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858790": [
        {
            "ioc_value": "15.235.67.95:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858791": [
        {
            "ioc_value": "65.108.13.254:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858792": [
        {
            "ioc_value": "15.235.67.121:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858757": [
        {
            "ioc_value": "148.113.206.221:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858758": [
        {
            "ioc_value": "51.222.241.222:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858759": [
        {
            "ioc_value": "15.235.83.137:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858760": [
        {
            "ioc_value": "15.235.85.6:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858761": [
        {
            "ioc_value": "51.222.241.212:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858762": [
        {
            "ioc_value": "15.235.85.4:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858763": [
        {
            "ioc_value": "15.235.54.133:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858764": [
        {
            "ioc_value": "148.113.206.224:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858765": [
        {
            "ioc_value": "15.235.85.7:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858766": [
        {
            "ioc_value": "148.113.206.225:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858767": [
        {
            "ioc_value": "15.235.225.204:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858768": [
        {
            "ioc_value": "15.235.225.207:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858769": [
        {
            "ioc_value": "15.235.230.6:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858770": [
        {
            "ioc_value": "15.235.225.221:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858771": [
        {
            "ioc_value": "15.235.230.15:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858772": [
        {
            "ioc_value": "15.235.230.13:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858773": [
        {
            "ioc_value": "15.235.224.224:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858774": [
        {
            "ioc_value": "15.235.230.14:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858739": [
        {
            "ioc_value": "141.95.98.173:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858740": [
        {
            "ioc_value": "141.95.98.176:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858741": [
        {
            "ioc_value": "141.95.98.156:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858742": [
        {
            "ioc_value": "169.197.142.125:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858743": [
        {
            "ioc_value": "158.51.121.121:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858744": [
        {
            "ioc_value": "198.57.27.30:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858745": [
        {
            "ioc_value": "23.150.152.93:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858746": [
        {
            "ioc_value": "23.157.40.112:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858747": [
        {
            "ioc_value": "38.75.137.15:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858748": [
        {
            "ioc_value": "38.114.114.33:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858749": [
        {
            "ioc_value": "67.220.72.74:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858750": [
        {
            "ioc_value": "169.197.142.164:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858751": [
        {
            "ioc_value": "167.17.67.202:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858752": [
        {
            "ioc_value": "15.235.228.121:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858753": [
        {
            "ioc_value": "15.235.233.16:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858754": [
        {
            "ioc_value": "15.235.233.20:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858755": [
        {
            "ioc_value": "15.235.230.39:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858756": [
        {
            "ioc_value": "15.235.219.124:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858722": [
        {
            "ioc_value": "141.95.85.96:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858723": [
        {
            "ioc_value": "146.59.81.145:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858724": [
        {
            "ioc_value": "146.59.81.172:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858725": [
        {
            "ioc_value": "146.59.81.179:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858726": [
        {
            "ioc_value": "146.59.81.181:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858727": [
        {
            "ioc_value": "146.59.81.182:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858728": [
        {
            "ioc_value": "141.95.126.97:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858729": [
        {
            "ioc_value": "141.95.98.69:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858730": [
        {
            "ioc_value": "141.95.98.71:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858731": [
        {
            "ioc_value": "141.95.98.79:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858732": [
        {
            "ioc_value": "141.95.98.155:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858733": [
        {
            "ioc_value": "141.95.98.159:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858734": [
        {
            "ioc_value": "141.95.98.175:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858735": [
        {
            "ioc_value": "141.95.98.177:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858736": [
        {
            "ioc_value": "141.95.98.164:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858737": [
        {
            "ioc_value": "141.95.98.158:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858738": [
        {
            "ioc_value": "141.95.98.174:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858703": [
        {
            "ioc_value": "92.222.100.63:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858704": [
        {
            "ioc_value": "162.19.139.107:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858705": [
        {
            "ioc_value": "162.19.139.106:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858706": [
        {
            "ioc_value": "15.204.161.176:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858707": [
        {
            "ioc_value": "15.204.161.186:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858708": [
        {
            "ioc_value": "15.204.162.56:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858709": [
        {
            "ioc_value": "51.222.241.138:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858710": [
        {
            "ioc_value": "15.235.9.81:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858711": [
        {
            "ioc_value": "198.244.212.119:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858712": [
        {
            "ioc_value": "15.235.55.230:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858713": [
        {
            "ioc_value": "148.113.162.58:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858714": [
        {
            "ioc_value": "148.113.170.47:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858715": [
        {
            "ioc_value": "15.235.53.67:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858716": [
        {
            "ioc_value": "92.222.100.65:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858717": [
        {
            "ioc_value": "198.244.165.192:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858718": [
        {
            "ioc_value": "141.95.99.137:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858719": [
        {
            "ioc_value": "141.95.99.138:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858720": [
        {
            "ioc_value": "141.95.99.134:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858721": [
        {
            "ioc_value": "148.113.223.63:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858684": [
        {
            "ioc_value": "15.235.12.24:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858685": [
        {
            "ioc_value": "15.235.9.19:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858686": [
        {
            "ioc_value": "15.235.50.200:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858687": [
        {
            "ioc_value": "15.235.12.26:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858688": [
        {
            "ioc_value": "141.94.73.24:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858689": [
        {
            "ioc_value": "141.94.162.6:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858690": [
        {
            "ioc_value": "141.94.162.2:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858691": [
        {
            "ioc_value": "148.113.170.108:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858692": [
        {
            "ioc_value": "51.222.248.165:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858693": [
        {
            "ioc_value": "15.235.9.76:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858694": [
        {
            "ioc_value": "141.94.73.20:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858695": [
        {
            "ioc_value": "15.235.42.96:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858696": [
        {
            "ioc_value": "15.235.86.140:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858697": [
        {
            "ioc_value": "51.222.203.53:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858698": [
        {
            "ioc_value": "15.235.82.174:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858699": [
        {
            "ioc_value": "51.161.86.9:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858700": [
        {
            "ioc_value": "15.235.65.66:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858701": [
        {
            "ioc_value": "146.59.84.22:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858702": [
        {
            "ioc_value": "57.128.192.112:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858665": [
        {
            "ioc_value": "148.113.170.38:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858666": [
        {
            "ioc_value": "146.59.54.57:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858667": [
        {
            "ioc_value": "146.59.54.8:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858668": [
        {
            "ioc_value": "141.94.249.51:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858669": [
        {
            "ioc_value": "54.38.113.140:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858670": [
        {
            "ioc_value": "141.94.196.80:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858671": [
        {
            "ioc_value": "141.95.33.143:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858672": [
        {
            "ioc_value": "141.95.33.100:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858673": [
        {
            "ioc_value": "141.95.33.124:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858674": [
        {
            "ioc_value": "141.95.35.96:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858675": [
        {
            "ioc_value": "141.95.35.97:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858676": [
        {
            "ioc_value": "141.95.33.112:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858677": [
        {
            "ioc_value": "141.95.126.85:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858678": [
        {
            "ioc_value": "141.95.33.103:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858679": [
        {
            "ioc_value": "141.95.33.117:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858680": [
        {
            "ioc_value": "141.95.33.108:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858681": [
        {
            "ioc_value": "148.113.162.52:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858682": [
        {
            "ioc_value": "148.113.162.16:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858683": [
        {
            "ioc_value": "15.235.12.25:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858648": [
        {
            "ioc_value": "15.235.222.54:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858649": [
        {
            "ioc_value": "15.235.221.240:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858650": [
        {
            "ioc_value": "15.235.220.151:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858651": [
        {
            "ioc_value": "15.235.224.157:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858652": [
        {
            "ioc_value": "162.19.62.185:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858653": [
        {
            "ioc_value": "57.128.97.134:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858654": [
        {
            "ioc_value": "198.244.165.186:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858655": [
        {
            "ioc_value": "198.244.167.193:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858656": [
        {
            "ioc_value": "15.235.80.151:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858657": [
        {
            "ioc_value": "15.235.65.97:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858658": [
        {
            "ioc_value": "15.235.85.93:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858659": [
        {
            "ioc_value": "15.235.85.236:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858660": [
        {
            "ioc_value": "15.235.85.237:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858661": [
        {
            "ioc_value": "57.129.85.40:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858662": [
        {
            "ioc_value": "15.235.85.239:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858663": [
        {
            "ioc_value": "148.113.170.45:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858664": [
        {
            "ioc_value": "15.235.85.238:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858630": [
        {
            "ioc_value": "67.220.70.43:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858631": [
        {
            "ioc_value": "15.235.222.55:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858632": [
        {
            "ioc_value": "162.19.88.205:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858633": [
        {
            "ioc_value": "141.94.29.105:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858634": [
        {
            "ioc_value": "146.59.47.171:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858635": [
        {
            "ioc_value": "141.94.199.151:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858636": [
        {
            "ioc_value": "141.94.199.152:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858637": [
        {
            "ioc_value": "139.162.174.86:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858638": [
        {
            "ioc_value": "146.59.54.55:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858639": [
        {
            "ioc_value": "146.59.84.15:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858640": [
        {
            "ioc_value": "146.59.85.8:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858641": [
        {
            "ioc_value": "91.134.20.114:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858642": [
        {
            "ioc_value": "54.38.13.215:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858643": [
        {
            "ioc_value": "162.19.72.85:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858644": [
        {
            "ioc_value": "162.19.88.213:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858645": [
        {
            "ioc_value": "57.128.125.81:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858646": [
        {
            "ioc_value": "57.128.125.87:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858647": [
        {
            "ioc_value": "15.235.222.53:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858613": [
        {
            "ioc_value": "67.220.94.39:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858614": [
        {
            "ioc_value": "194.195.125.168:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858615": [
        {
            "ioc_value": "38.99.82.9:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858616": [
        {
            "ioc_value": "38.22.17.220:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858617": [
        {
            "ioc_value": "67.220.85.91:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858618": [
        {
            "ioc_value": "67.220.74.119:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858619": [
        {
            "ioc_value": "38.99.82.188:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858620": [
        {
            "ioc_value": "38.22.17.205:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858621": [
        {
            "ioc_value": "38.86.135.91:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858622": [
        {
            "ioc_value": "38.22.17.218:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858623": [
        {
            "ioc_value": "38.22.17.181:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858624": [
        {
            "ioc_value": "67.220.70.91:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858625": [
        {
            "ioc_value": "167.88.61.114:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858626": [
        {
            "ioc_value": "38.89.70.214:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858627": [
        {
            "ioc_value": "67.220.70.69:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858628": [
        {
            "ioc_value": "38.110.1.157:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858629": [
        {
            "ioc_value": "67.220.70.142:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858595": [
        {
            "ioc_value": "198.57.27.32:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858596": [
        {
            "ioc_value": "38.111.114.149:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858597": [
        {
            "ioc_value": "23.162.200.51:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858598": [
        {
            "ioc_value": "134.195.196.133:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858599": [
        {
            "ioc_value": "198.57.27.210:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858600": [
        {
            "ioc_value": "134.195.198.2:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858601": [
        {
            "ioc_value": "158.51.121.151:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858602": [
        {
            "ioc_value": "134.195.198.13:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858603": [
        {
            "ioc_value": "186.190.215.121:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858604": [
        {
            "ioc_value": "172.105.163.6:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858605": [
        {
            "ioc_value": "23.239.12.168:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858606": [
        {
            "ioc_value": "38.111.114.248:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858607": [
        {
            "ioc_value": "158.51.121.199:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858608": [
        {
            "ioc_value": "158.51.121.6:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858609": [
        {
            "ioc_value": "67.220.66.55:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858610": [
        {
            "ioc_value": "158.51.121.39:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858611": [
        {
            "ioc_value": "67.220.94.47:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858612": [
        {
            "ioc_value": "158.51.121.83:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858578": [
        {
            "ioc_value": "65.21.225.59:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858579": [
        {
            "ioc_value": "135.181.116.42:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858580": [
        {
            "ioc_value": "37.27.55.79:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858581": [
        {
            "ioc_value": "134.195.198.52:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858582": [
        {
            "ioc_value": "158.51.120.61:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858583": [
        {
            "ioc_value": "158.51.120.53:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858584": [
        {
            "ioc_value": "198.57.27.235:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858585": [
        {
            "ioc_value": "134.195.196.85:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858586": [
        {
            "ioc_value": "134.195.196.184:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858587": [
        {
            "ioc_value": "134.195.196.108:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858588": [
        {
            "ioc_value": "38.111.114.193:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858589": [
        {
            "ioc_value": "134.195.196.174:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858590": [
        {
            "ioc_value": "172.99.188.236:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858591": [
        {
            "ioc_value": "158.51.121.130:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858592": [
        {
            "ioc_value": "158.51.121.30:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858593": [
        {
            "ioc_value": "134.195.198.246:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858594": [
        {
            "ioc_value": "198.57.27.26:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858561": [
        {
            "ioc_value": "135.181.57.106:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858562": [
        {
            "ioc_value": "65.21.34.165:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858563": [
        {
            "ioc_value": "65.109.26.152:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858564": [
        {
            "ioc_value": "139.162.136.210:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858565": [
        {
            "ioc_value": "135.181.57.107:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858566": [
        {
            "ioc_value": "135.181.61.201:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858567": [
        {
            "ioc_value": "95.217.103.210:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858568": [
        {
            "ioc_value": "65.109.27.93:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858569": [
        {
            "ioc_value": "65.109.28.60:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858570": [
        {
            "ioc_value": "38.114.120.39:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858571": [
        {
            "ioc_value": "38.114.120.72:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858572": [
        {
            "ioc_value": "38.114.120.146:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858573": [
        {
            "ioc_value": "38.114.120.238:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858574": [
        {
            "ioc_value": "134.195.196.236:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858575": [
        {
            "ioc_value": "158.51.121.126:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858576": [
        {
            "ioc_value": "65.108.65.50:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858577": [
        {
            "ioc_value": "134.195.196.245:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858546": [
        {
            "ioc_value": "65.21.226.195:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858547": [
        {
            "ioc_value": "95.217.225.182:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858548": [
        {
            "ioc_value": "157.90.0.84:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858549": [
        {
            "ioc_value": "157.90.4.41:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858550": [
        {
            "ioc_value": "157.90.4.34:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858551": [
        {
            "ioc_value": "157.90.4.97:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858552": [
        {
            "ioc_value": "135.181.57.109:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858553": [
        {
            "ioc_value": "57.129.73.193:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858554": [
        {
            "ioc_value": "135.181.20.243:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858555": [
        {
            "ioc_value": "135.181.18.95:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858556": [
        {
            "ioc_value": "135.181.61.24:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858557": [
        {
            "ioc_value": "135.181.61.18:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858558": [
        {
            "ioc_value": "135.181.57.111:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858559": [
        {
            "ioc_value": "135.181.57.110:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858560": [
        {
            "ioc_value": "95.217.144.108:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/deepfield/public-research/refs/heads/main/popa/iocs/relays.csv",
            "tags": "Popa,Popa-Relays",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858541": [
        {
            "ioc_value": "45.138.16.96:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/ips.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858542": [
        {
            "ioc_value": "45.138.16.96:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/ips.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858543": [
        {
            "ioc_value": "45.154.98.115:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/ips.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858544": [
        {
            "ioc_value": "172.233.124.230:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/ips.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858545": [
        {
            "ioc_value": "139.162.28.95:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/ips.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858538": [
        {
            "ioc_value": "persistfromchicago.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:40:55",
            "last_seen_utc": "2026-07-30 19:44:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858539": [
        {
            "ioc_value": "n1.persistfromchicago.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:40:55",
            "last_seen_utc": "2026-07-30 19:44:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858540": [
        {
            "ioc_value": "tractor.persistfromchicago.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:40:55",
            "last_seen_utc": "2026-07-30 19:44:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858535": [
        {
            "ioc_value": "boblazar.inhumanencounters.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858536": [
        {
            "ioc_value": "roswell.inhumanencounters.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858537": [
        {
            "ioc_value": "cocoa.inhumanencounters.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858534": [
        {
            "ioc_value": "o.peer4you.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:39:19",
            "last_seen_utc": "2026-07-28 06:23:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858533": [
        {
            "ioc_value": "i.peer4you.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:37:40",
            "last_seen_utc": "2026-07-28 06:23:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858532": [
        {
            "ioc_value": "185.104.63.79:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:37:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858531": [
        {
            "ioc_value": "185.104.63.79:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:37:37",
            "last_seen_utc": "2026-07-26 16:41:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/peer4you-mirai/iocs/domains.csv",
            "tags": "peer4you-mirai,PeerServer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858530": [
        {
            "ioc_value": "uioczl.lipoviveofficials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 16:32:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858529": [
        {
            "ioc_value": "lipoviveofficials.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 16:27:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858524": [
        {
            "ioc_value": "45.205.1.36:44510",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:01:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/iranbot/iocs/domains.csv",
            "tags": "IranBot,Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858522": [
        {
            "ioc_value": "femboys.chloebulldog.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/iranbot/iocs/domains.csv",
            "tags": "IranBot",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858523": [
        {
            "ioc_value": "mythickass.onthewifi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 16:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/iranbot/iocs/domains.csv",
            "tags": "IranBot",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858521": [
        {
            "ioc_value": "pay.datasurge.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:49:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858520": [
        {
            "ioc_value": "eport.datasurge.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858517": [
        {
            "ioc_value": "datasurge-bot.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858518": [
        {
            "ioc_value": "datasurge-bot.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858519": [
        {
            "ioc_value": "datasurge-bot.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858516": [
        {
            "ioc_value": "130.12.180.151:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858515": [
        {
            "ioc_value": "datasurge-bot.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:45:01",
            "last_seen_utc": "2026-07-26 15:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://intel.breakglass.tech/post/datasurge-botnet-mirai-variant-iot-dropper-with-dns-based-dynamic-c2",
            "tags": "DataSurge",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858514": [
        {
            "ioc_value": "hdpwuj.lipogumme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 15:38:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858513": [
        {
            "ioc_value": "lipogumme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 15:37:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858510": [
        {
            "ioc_value": "https://comb.betyek.store/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:31:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/comb.betyek.store",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858508": [
        {
            "ioc_value": "45.225.135.27:81",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:22:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858509": [
        {
            "ioc_value": "45.225.135.27:8080",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:22:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858507": [
        {
            "ioc_value": "217.60.61.176:9091",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:20:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858505": [
        {
            "ioc_value": "31.59.138.20:4444",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:17:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858506": [
        {
            "ioc_value": "31.59.138.20:6666",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 15:17:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858501": [
        {
            "ioc_value": "lhowdz.lockedinwestmont.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 14:51:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858500": [
        {
            "ioc_value": "vpn.connectmeinside.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-26 14:50:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/967b1f49ce0642e631efce3bd1c03d535e0403c852d2e9ebc166967f50b70352/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858498": [
        {
            "ioc_value": "alphabeta.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-26 14:50:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/967b1f49ce0642e631efce3bd1c03d535e0403c852d2e9ebc166967f50b70352/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858499": [
        {
            "ioc_value": "connectmeinside.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-26 14:50:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/967b1f49ce0642e631efce3bd1c03d535e0403c852d2e9ebc166967f50b70352/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858497": [
        {
            "ioc_value": "lockedinwestmont.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 14:46:36",
            "last_seen_utc": "2026-08-07 00:09:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858496": [
        {
            "ioc_value": "65039b94fe764e2d6f2d679c16fe0b64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858493": [
        {
            "ioc_value": "b4bf72c31058da40e162ec2e1a567f14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858494": [
        {
            "ioc_value": "925278940fe96bc04d406ebdffa8e3431b64e76ff0d22b23b53b47d5cd360200",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858495": [
        {
            "ioc_value": "953cf0e5c83ba87b7a09e669b9eaacebce66ed2e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858490": [
        {
            "ioc_value": "8d1f898379640ff3b9d61d256ede418f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858491": [
        {
            "ioc_value": "fd0466080f4a0836beab8ddd824540dcf47a32e4f1cbc95274a455d18f3dfbf9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858492": [
        {
            "ioc_value": "77c75c1b005d3f5a386deec95a671d529319b2f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858486": [
        {
            "ioc_value": "de632e92a37155fce6f841d2b1a6afbeab46be3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858487": [
        {
            "ioc_value": "5486e84151a82e8cc42624e85ff9fc6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858488": [
        {
            "ioc_value": "170175f699d31ba16e1def49684a8b37034863a045a6ab9910e91dd568049b9b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858489": [
        {
            "ioc_value": "81d2e79fad91ff217b57dd13f23600e365997bbf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858483": [
        {
            "ioc_value": "c822be1598310509a54fc03602eaddd1524f5133",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-26 14:45:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858484": [
        {
            "ioc_value": "16fa9ffcb7431cbcd23d636718770ee4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-26 14:45:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858485": [
        {
            "ioc_value": "c97311cbfd923b181a76dbc92ff029e2dd33870458bc24c73be9d5074f388e66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858480": [
        {
            "ioc_value": "de31dada1dcffe49288518afb66c321ee2a96263",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.virut",
            "malware_alias": null,
            "malware_printable": "Virut",
            "first_seen_utc": "2026-07-26 14:45:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858481": [
        {
            "ioc_value": "c41d08dccbffc2447d518b80726303ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.virut",
            "malware_alias": null,
            "malware_printable": "Virut",
            "first_seen_utc": "2026-07-26 14:45:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858482": [
        {
            "ioc_value": "62ac78326c0ebec72a44b0037290c5b221c75a6cf1a7281d2795691581f67058",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-26 14:45:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858477": [
        {
            "ioc_value": "dad9595d91e785ef247b7fef94e8b6e780383431",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858478": [
        {
            "ioc_value": "b19dfd6c5c708e860712654606dfc5c2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858479": [
        {
            "ioc_value": "9be1d33e17a0048a7b145cdc604e60048dc8bc26decd065ec3b5404a58bce9ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.virut",
            "malware_alias": null,
            "malware_printable": "Virut",
            "first_seen_utc": "2026-07-26 14:45:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858474": [
        {
            "ioc_value": "cc8121380454762068053a195ef20e5798a6a859",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858475": [
        {
            "ioc_value": "d2ba2c17a668eb9c2cea61159e061e60",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858476": [
        {
            "ioc_value": "5414c823040b85495f88add29911ec42836277d9b1732468f70c29140cb198be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858471": [
        {
            "ioc_value": "eaec84b9becc94401a51ef501247022b39460e86",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858472": [
        {
            "ioc_value": "c3884d3a6319f468c296a90668f127d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858473": [
        {
            "ioc_value": "d7be04c19b1d908e4d33edfdcf3fbcb15812763edb905ce1fa46233368181086",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858468": [
        {
            "ioc_value": "f0ff9433d77ca5bce3e904dcd48e9745caa24913",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858469": [
        {
            "ioc_value": "73500ed71f4efbb76ec31499a32e83f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858470": [
        {
            "ioc_value": "09b7fa9a1bc1c3f34bcca306c1f9e3971083ebf265adf5f7684e4a320b5d562e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858465": [
        {
            "ioc_value": "ba7eef5b9ff3e388335540385f336de4dfe8f1f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858466": [
        {
            "ioc_value": "a8a3dc6184e2e05d6b0f0262640bfaa0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858467": [
        {
            "ioc_value": "6543a1888c58d583be80f8f2749c4a0631c6f3d82a9b64a42b657d874f5d2b90",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858461": [
        {
            "ioc_value": "3a0ecd128bddb650c684af39de612fb50953c76e1be4677afff1b0a3ae7e01f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858462": [
        {
            "ioc_value": "d37a15e402c7d41e6139e563ff0f9696cf288a94",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858463": [
        {
            "ioc_value": "f19a0eda7ff0268f6c6faccfdce0879e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858464": [
        {
            "ioc_value": "2cf0bc8361e716ffb2dbfa4c680028bf6b2dcbcd84a14c511dfec0af523860c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858459": [
        {
            "ioc_value": "ffbe00b65889aa4554fb6aef8cac9383652dae6e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-26 14:45:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858460": [
        {
            "ioc_value": "2e11f99e1017209acc1ecd207f1c5832",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-26 14:45:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858455": [
        {
            "ioc_value": "c7dc544ed14e75219a4eb0b02690d47e412f615f2f1329f99a00337a72b17256",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858456": [
        {
            "ioc_value": "170e68634eb1f8e2523da558f7de4c15d55568f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858457": [
        {
            "ioc_value": "7790768e8fe6d3bbe1b36e5457895b22",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:45:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858458": [
        {
            "ioc_value": "2fed5d0552cf80eaae1928150238397a632ebb9521e98129daa71eb46ea1f113",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-26 14:45:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858452": [
        {
            "ioc_value": "63c5f9fbf4bebf78e476a90b5115b46f493ef3be5a56dafcec6c825160913645",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-26 14:45:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858453": [
        {
            "ioc_value": "53de9d6e3d7816d949aa1adcb479f73367da8cc2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-26 14:45:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858454": [
        {
            "ioc_value": "450e0227f0118633049d3c4f1e79fafc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-26 14:45:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858449": [
        {
            "ioc_value": "0bc71f56b650c93a4f50e11ba41af659c46fba843cd019e2dbb152a536ed714f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858450": [
        {
            "ioc_value": "904da862281f6a19155a5710c9bfb26f81485a26",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858451": [
        {
            "ioc_value": "0ff0126ed66be4858a161aa773cd9a76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858446": [
        {
            "ioc_value": "f1a75d5acaf8fa5a809bc814958cdd466d22aef012641f756e8bb16f04eb2556",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-26 14:45:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858447": [
        {
            "ioc_value": "efeb78efd4f559b344339da15c94aed6a8535682",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-26 14:45:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858448": [
        {
            "ioc_value": "3c4f9d2346850b1daf329b5bb9daa18d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-26 14:45:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858443": [
        {
            "ioc_value": "dde2616ab4c9f2972ce9116f5d03a225520242b96211107f5a68e3f69f0ac7f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858444": [
        {
            "ioc_value": "2e8ebf9fe1c7dd0120f9e5eba45ca1ed11ead4f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858445": [
        {
            "ioc_value": "5e88f26c5e45f5febee60618e399f7f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858440": [
        {
            "ioc_value": "243aa79d0616ce126bd21133e2a06326eeb81104613e298a22d2cffaa292e2e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-26 14:45:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858441": [
        {
            "ioc_value": "99518addf72cb85cd19122cec7bd0201aebbd7d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-26 14:45:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858442": [
        {
            "ioc_value": "ff52c7106d382aa1094208bb24385f63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-26 14:45:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858437": [
        {
            "ioc_value": "159305fd32c30428e76f8f9e2a3da3969d89f0715aa315c9c21f7f7205c2764d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858438": [
        {
            "ioc_value": "d2e66dec99f6d32a1cdc4d93436570948255e5d4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858439": [
        {
            "ioc_value": "ca53df54d9c9d33fe719d666c46980e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858434": [
        {
            "ioc_value": "23679cc38b8e793d6205e5d75713a931646b4e5e698d1fd258524ec7a305c34b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858435": [
        {
            "ioc_value": "8965f590a1fff9a04936b63fb302db76078c237b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858436": [
        {
            "ioc_value": "e6dca6bbb610070f9801a6bd10245601",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858431": [
        {
            "ioc_value": "2e29b77e732a935637fe3673ebe92fb84bd30081dd2ea087f286a6b30694d31d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858432": [
        {
            "ioc_value": "5d915726d8245ef787f25abea86352996e3e3e07",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858433": [
        {
            "ioc_value": "71fbc6bdb647b08e75c35417a1216e0b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858428": [
        {
            "ioc_value": "502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858429": [
        {
            "ioc_value": "1d6d4a99c92787defe61ad9e771b72dff200a0fd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858430": [
        {
            "ioc_value": "98b8db2b82f626f52bd846cfe6c47ced",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858426": [
        {
            "ioc_value": "413947555c7767d5626de6e95dab518c5017f22e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858427": [
        {
            "ioc_value": "8ebe0cda768b18141bf5c50f1b54b0d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858423": [
        {
            "ioc_value": "1dc23c7dfead93a346271f1b66e0a70cc8a6287d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858424": [
        {
            "ioc_value": "e541636db753771f0635da1630ee2494",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858425": [
        {
            "ioc_value": "5a9014db3c28643efe8a6e0bff4a4b4d785771d2239e4d0d6798028685887473",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858420": [
        {
            "ioc_value": "59078ad5e45fc7384f7c4097becd27a9074337a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858421": [
        {
            "ioc_value": "a519b276895ca931fdc1c09e6d3a39b2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858422": [
        {
            "ioc_value": "5eb0707fd0426f46ceb7a1361d19616a3d43d3fac9381d22010801111e5c734e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858417": [
        {
            "ioc_value": "a3da6fee2030bf102aa89fd344839d6cc1a1d243",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858418": [
        {
            "ioc_value": "a22dafac6eb243a8afc1ec6e4f9e467f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858419": [
        {
            "ioc_value": "69e419b8d5afa5a7a807940ae55ff0d99a8abff865de546dd037a7b7c308963b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858414": [
        {
            "ioc_value": "afc7b16b2edd11af270ad4faa23567d4d2e867a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858415": [
        {
            "ioc_value": "a435d6c5f9780c325f01ae1e13d8e7e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858416": [
        {
            "ioc_value": "6bdae86e48fe43685de17171803099317c308488d5f2d16b8de0d8bcc888ea36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858411": [
        {
            "ioc_value": "a7e8bf3ded34d7afcce7e74bfa0d9b83f8ac2722",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-26 14:45:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858412": [
        {
            "ioc_value": "481f31096a01009414ef1a08309ab514",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-26 14:45:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858413": [
        {
            "ioc_value": "ed404b104008ed091ee3bf996d419b4a7ec3d65bdce1af8ae8196b94d4638d06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858409": [
        {
            "ioc_value": "7832d59fea96fe229dda6dc7e9fb5aa4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858410": [
        {
            "ioc_value": "59a80a105dc161e0bf9566d260965111948c3eace7ed6cc073e40a8628e9cbb8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-26 14:45:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858406": [
        {
            "ioc_value": "4369226435b74ef91427cb5bbb31e259",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858407": [
        {
            "ioc_value": "bed759e549a932e839a6fc57ae831105cc17bdd8ec86b5ba54d018f92f5d9795",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858408": [
        {
            "ioc_value": "cea91d98fb1484954501a8b38d951686ed49eda8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:45:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858403": [
        {
            "ioc_value": "9aed790a18f214b04619837cd71546d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858404": [
        {
            "ioc_value": "adbc4fa90c932a60fbfff9565c16b5554084dbf718d471fe6ebd9a0564026e88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858405": [
        {
            "ioc_value": "9c3eba3be4c18bff5e1df32eb7feb60b1926ec45",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858400": [
        {
            "ioc_value": "8ec6066000f5585d6fefbc1d5a30fa094ac9893456dbf4085fec81e6b71cef3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858401": [
        {
            "ioc_value": "0f9a253afc55a8ebbd29a70c43d0e3cd668920f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858402": [
        {
            "ioc_value": "198.46.173.10:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-26 14:45:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858399": [
        {
            "ioc_value": "f6ed2d18961a10d7f3683f68ae2f9645",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858396": [
        {
            "ioc_value": "846fd66b3869f763ec131f18bec3468d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858397": [
        {
            "ioc_value": "9b845a21eca8799253ef65d7d218e8e7a404e1491951cf64105c25c19c2d484e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858398": [
        {
            "ioc_value": "8df947bc316beaa2147abbcd25f797c16319c010",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858394": [
        {
            "ioc_value": "9ed8f01f35c2635b26d24b8055828dcecf789f225e212c95672db1919f735aec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858395": [
        {
            "ioc_value": "0008035850df2b3808d1674e0ddd280ee5fbb980",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:45:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858391": [
        {
            "ioc_value": "a8831b07fcc8a073c3bdd1b7004609b6773130162eeba167257a3d6be8da67c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858392": [
        {
            "ioc_value": "c63acad39c00a0cfcb189e2f927bf17539ceabbb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858393": [
        {
            "ioc_value": "f5ded90ef3ab418b2c9fd74e03d1751c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858388": [
        {
            "ioc_value": "cbc3fb2de79561393eeca4d7b16fd3c86f959bae9c902b5d46887649a230cf7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858389": [
        {
            "ioc_value": "5e0d7bd9e356924f4578b147142331c88fef32ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858390": [
        {
            "ioc_value": "6e643e3d40a09151088693ae173f3f06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858386": [
        {
            "ioc_value": "adaf9a0cb95be1726727732e79fba2b15d386c03",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858387": [
        {
            "ioc_value": "ff1de6f4d4f35c0a43d425822d66376a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858382": [
        {
            "ioc_value": "ef9b9ea96d71138ecd1f3bbeadf24a4dcb5ead0fb7d3cf58ac37ea41f44f7e69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858383": [
        {
            "ioc_value": "cbc1bad5b84f82b0bf3b233cc02421033256b204",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858384": [
        {
            "ioc_value": "639cd8818adf9dab85b5bdf8e96d6d9c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858385": [
        {
            "ioc_value": "cc47c62f4d5bcc822047d79b90527bf66e30c294117c2d84337a87b124ae2db9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858379": [
        {
            "ioc_value": "b319d03f4eb9120cb7a4584b6c75be04dab781e541ffc74e252945e8522d7504",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858380": [
        {
            "ioc_value": "cf36ff2b720de669f384d3c1bb03beb0d71a205d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858381": [
        {
            "ioc_value": "56538acb9f85a795cbb7a53afe5f254e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858376": [
        {
            "ioc_value": "e4ec8ea01e91627c9329c2889249f2e02ca78ba5f22eb84ad24ce63e7cf816a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858377": [
        {
            "ioc_value": "da808f876105cafd99d73a42de4e14ef45cfc203",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858378": [
        {
            "ioc_value": "40c3bb25ce680409353ba703dc11ea8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858373": [
        {
            "ioc_value": "b34d20f3d3689bcdd0258b56c9384ac9f9c66ac7d41b456591e6580b29bf59c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858374": [
        {
            "ioc_value": "e079f292ee9edb8b0f1be4a576f1a1012479bb22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858375": [
        {
            "ioc_value": "c62e2825d255db75b2a677396755736a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858370": [
        {
            "ioc_value": "99eae3c904882be5ffe456421a80ffcdfcfd743958ebdbf83c4e46a7bc3f525a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:44:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858371": [
        {
            "ioc_value": "58d0501f33a9eaaef0daafea1707df9d84177a58",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:44:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858372": [
        {
            "ioc_value": "d8336b1ff9bb24fe0e116f909e3c9fc7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:44:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858367": [
        {
            "ioc_value": "55cd158c88d5e7cd6aadafc8eaf64ab4a1a633691f52951f8b82e2fb5226bbdb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858368": [
        {
            "ioc_value": "2fd434edd4bea9ad91801c4f50550125d8eb12fa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858369": [
        {
            "ioc_value": "5602ba9f14aa3c99845b518314c4f2d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858363": [
        {
            "ioc_value": "3fdfc1f013bad7bb63fd7a254c8a8e5e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858364": [
        {
            "ioc_value": "4c5529e4e93f8504affd39e5deea46a1ea4410600e39a9c66d18d9dc2cddb204",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:44:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858365": [
        {
            "ioc_value": "5dbb0bab48b31e4e9911d1e70f727049ff81129f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:44:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858366": [
        {
            "ioc_value": "c2d1ac4a8b2cb770fc1f594c3b050a8a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-26 14:44:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858361": [
        {
            "ioc_value": "18cc4bbb79751f3fc98e834376dfa6f2eb538fed44b73b832714e6291ea272f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858362": [
        {
            "ioc_value": "5e73c34c36bf0f25c22b45b8299c1be9c87d5523",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858358": [
        {
            "ioc_value": "57cefbb075b766c47392d9a85ccc88ba95c6727b12828046a7e81b20f085fc6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858359": [
        {
            "ioc_value": "a8830bb425a309d578ac5f295d679bf002fc844e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858360": [
        {
            "ioc_value": "8541dc9787c671e3ab5b51a252dad4a4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858355": [
        {
            "ioc_value": "467d4772b1d4678dc935c8d4ce638f1d76dbd28a772fa713dad13061483914d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858356": [
        {
            "ioc_value": "73fbe1e66f0c4b29e4673920b154b8f863560713",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858357": [
        {
            "ioc_value": "7fa66cd078571662d30ac258f4f353c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-26 14:44:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858351": [
        {
            "ioc_value": "f05dc2cdcc68a1a80cea2236bef76642",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858352": [
        {
            "ioc_value": "07f53dbaccf650bf676c1352c6887edf10f3e8e790c8367b892c06a062ca1950",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-26 14:44:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858353": [
        {
            "ioc_value": "9413e180ce290b64371692c8c50c166dcb139f7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-26 14:44:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858354": [
        {
            "ioc_value": "bb32b5cfeeaaa49eca3943a2e2bd07ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-26 14:44:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858348": [
        {
            "ioc_value": "06138fb62550172df4c5ab13ba176901",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-26 14:44:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858349": [
        {
            "ioc_value": "fd52d0fa4d52fe38a1d9c64bd90815711e3e51b6e155bc9d32f4387c8e43cc0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858350": [
        {
            "ioc_value": "3503c9af8fa80df84fb7c793d7afa020ea20790f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-26 14:44:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858345": [
        {
            "ioc_value": "11b40f7a933bf15d2eaf184af96d62e3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.poolrat",
            "malware_alias": "SIMPLESEA,SIMPLETEA",
            "malware_printable": "POOLRAT",
            "first_seen_utc": "2026-07-26 14:44:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858346": [
        {
            "ioc_value": "2953cc4c71356715f99791136b31366be49a2886614cb74d637b1f3f0af7be8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-26 14:44:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858347": [
        {
            "ioc_value": "60abc4a993d7cd4e24a0afa2674f7bb4df1e32e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-26 14:44:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858342": [
        {
            "ioc_value": "f5ec392cae1e2e0c6f7ea66af09dfecc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858343": [
        {
            "ioc_value": "fae42d2a7fb879f328cdbd7157de318bfe47134156f152cf2356e9652e732852",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.poolrat",
            "malware_alias": "SIMPLESEA,SIMPLETEA",
            "malware_printable": "POOLRAT",
            "first_seen_utc": "2026-07-26 14:44:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858344": [
        {
            "ioc_value": "67cddbe5b7bf70c71e05f80b5bdc70a23dca0ab5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.poolrat",
            "malware_alias": "SIMPLESEA,SIMPLETEA",
            "malware_printable": "POOLRAT",
            "first_seen_utc": "2026-07-26 14:44:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858340": [
        {
            "ioc_value": "196cf41545220b60f88fc9fbf0211f03f97bb0b6b840795091f2973ede7ce7fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858341": [
        {
            "ioc_value": "0684752b8ebd9afb616cc267ba83616408aa561e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858337": [
        {
            "ioc_value": "3b532277593630d24b0cbe32f6be199ac62fe57ac533acdda5408230486d9a6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858338": [
        {
            "ioc_value": "64331092841a6f5ca0cd849586f1ddd2a2a791f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858339": [
        {
            "ioc_value": "4a7504ef8bf3fc33f9e0391add18aee7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858334": [
        {
            "ioc_value": "60f460751db886977f80fc65f858e48e78b6739b070a4ee57a35c3d9ac8b9e6c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858335": [
        {
            "ioc_value": "db39680858c673f1aba487255eaa6872983cddf5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858336": [
        {
            "ioc_value": "20768341ce4da1908a03372e77b01e41",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858330": [
        {
            "ioc_value": "2e847533ba6f2c90b9a84e9eaff14cb2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-26 14:44:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858331": [
        {
            "ioc_value": "2d695889cce2622eaa0b4ae3df0dfd621668dbad3828a3ef146a79cb2cd61be6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858332": [
        {
            "ioc_value": "a047f26068eca94a880607630641c8e80197bf35",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858333": [
        {
            "ioc_value": "041b9932fac174dbb4ae9a884170e590",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858327": [
        {
            "ioc_value": "229d98edecf5078345e555b81058c1a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 14:44:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858328": [
        {
            "ioc_value": "92965d16cbf235f131ca72f8d698826de2a3e4eeb2df4f3d97ecdc9b443d998f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-26 14:44:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858329": [
        {
            "ioc_value": "4d33b3a66096f81f7c6eb70e304bea226ed3f7a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-26 14:44:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858324": [
        {
            "ioc_value": "da3f293b8ea8ef925c8e68eeaf4c2245",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858325": [
        {
            "ioc_value": "21450a32efcb56844cf4b6ef588bcfb995a4f7614bbe7c4115e698998889e61e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 14:44:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858326": [
        {
            "ioc_value": "040b948b40cf289730349580206bf76bf2410c21",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 14:44:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858322": [
        {
            "ioc_value": "65209749f098f971fd047a459a43dbedc2fc423f69e8fb233c3985498c8e7322",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858323": [
        {
            "ioc_value": "4972cdc09e483de54ec4bee18d8f27e3e0983b57",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858319": [
        {
            "ioc_value": "4bd8c30ddbb6f06b528256a77baf4d37073528f22bbb2323a9d567c294226e54",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858320": [
        {
            "ioc_value": "4c775957b9f7810b99fdc5adb971c8ad18d5334c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858321": [
        {
            "ioc_value": "6d65f635af16760f4bbd91e0b712e97d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858317": [
        {
            "ioc_value": "c4144896f760d44c246babe84a6bc03a9d5422b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858318": [
        {
            "ioc_value": "bbd90a954ab2674a933d2468e18421b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858314": [
        {
            "ioc_value": "0de4ab234ef55c5ccc27d08feab35a1ee215cdb0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858315": [
        {
            "ioc_value": "abbe0260e695691d018b8114dcaffb47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858316": [
        {
            "ioc_value": "70ecab8852e70c2cb30ac61dd24ec4af9d1672a2428a7d4e5723d26b3f3d86f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858311": [
        {
            "ioc_value": "680898473b34cc17545260a87652402b1041cc6c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858312": [
        {
            "ioc_value": "cacad1f7b2592c3aee7f573e2dcd018c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858313": [
        {
            "ioc_value": "9921dd7232b1b524677996a6167fd08c41789c45d241bb8f2aaff17e4c4fbd08",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858308": [
        {
            "ioc_value": "b00e9e6545c96cd89c42e8d66f006e12460dcf81",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858309": [
        {
            "ioc_value": "5a6ac24377dcd13e577a0b94eb5eeaf1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858310": [
        {
            "ioc_value": "a2efd4271470e80e09967366d99b96d47ffd2dc127efc8f276f7230619ecda6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858305": [
        {
            "ioc_value": "46a2ef5eec740bc4d99eeeae2b25b615ebef0c54",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858306": [
        {
            "ioc_value": "ca5004c9bcfd941fea02670a382e28cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858307": [
        {
            "ioc_value": "bce0062c6202400904e69bfd969b8ce75a3e7d0c9dc868a7bed72c7e4a001c55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858302": [
        {
            "ioc_value": "acd8e82318cd974801df038fd6246ef5527b9e78",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858303": [
        {
            "ioc_value": "af7d2507954af45beb5350206202c41a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858304": [
        {
            "ioc_value": "23f3a4eaeff118a7a44ecd53cc7312750681dda1224543f169ddb6adeab96322",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858299": [
        {
            "ioc_value": "09cd1f06e7f51e0bdcdd76c37ecd5e75ae0d54bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 14:44:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858300": [
        {
            "ioc_value": "4ed680e61600ebe73415a12189275c3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 14:44:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858301": [
        {
            "ioc_value": "765666767edf258d09c2c5ed3da997daff7ebd2acf6485e267d2358ed14c9f2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858296": [
        {
            "ioc_value": "44c48d7549908a520c3d744f1da29994b6bea51e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858297": [
        {
            "ioc_value": "7414b115ca797102f21b7bd79dc9fe3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858298": [
        {
            "ioc_value": "53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 14:44:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858293": [
        {
            "ioc_value": "0e71a6a89a403c8156fde63c341546711e5b0976",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858294": [
        {
            "ioc_value": "49cdb303970dcb06f8eca22bc83a57fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858295": [
        {
            "ioc_value": "bc48d484b7700ac1a31af7c2195b605faf5a69883bd7d711f08fc081aa54682b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858292": [
        {
            "ioc_value": "b2e80db74923096f844d53ec0bbecbd7e7ef01617ade1c723e2db8e0bd4e3856",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-26 14:44:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1858288": [
        {
            "ioc_value": "lsgalu.lltreeremoval.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:57:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858287": [
        {
            "ioc_value": "lltreeremoval.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:56:07",
            "last_seen_utc": "2026-08-07 00:09:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858286": [
        {
            "ioc_value": "comb.betyek.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:55:45",
            "last_seen_utc": "2026-07-26 14:31:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858285": [
        {
            "ioc_value": "s8yeyqet.enus-metabodrops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:48:56",
            "last_seen_utc": "2026-07-28 20:49:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858284": [
        {
            "ioc_value": "ar16clz9.metrodesignconcepts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:47:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858275": [
        {
            "ioc_value": "https://kcredit.io.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kcredit.io.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858276": [
        {
            "ioc_value": "https://www.fmanmachines.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.fmanmachines.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858277": [
        {
            "ioc_value": "https://www.k9curated.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.k9curated.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858278": [
        {
            "ioc_value": "https://www.dooball.bz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.dooball.bz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858279": [
        {
            "ioc_value": "https://net-work.web.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/net-work.web.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858280": [
        {
            "ioc_value": "https://cashspace.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cashspace.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858281": [
        {
            "ioc_value": "https://www.centroesteticakarisma.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.centroesteticakarisma.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858282": [
        {
            "ioc_value": "https://bestvegasattorneys.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bestvegasattorneys.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858283": [
        {
            "ioc_value": "https://www.bestcriminallawyerdelhi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:31:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.bestcriminallawyerdelhi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858269": [
        {
            "ioc_value": "45.67.138.24:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858270": [
        {
            "ioc_value": "62.3.24.77:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858271": [
        {
            "ioc_value": "85.11.167.31:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858272": [
        {
            "ioc_value": "85.11.167.34:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858273": [
        {
            "ioc_value": "94.183.182.121:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858274": [
        {
            "ioc_value": "95.182.114.121:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858262": [
        {
            "ioc_value": "143.20.185.88:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858263": [
        {
            "ioc_value": "163.227.178.38:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858264": [
        {
            "ioc_value": "176.65.139.109:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858265": [
        {
            "ioc_value": "185.92.180.229:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858266": [
        {
            "ioc_value": "217.60.7.40:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858267": [
        {
            "ioc_value": "45.205.1.36:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858268": [
        {
            "ioc_value": "45.38.60.24:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/ips.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858261": [
        {
            "ioc_value": "ruduqo.littlecreationsacademy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858260": [
        {
            "ioc_value": "littlecreationsacademy.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 13:05:39",
            "last_seen_utc": "2026-07-28 00:48:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858237": [
        {
            "ioc_value": "0c1ca5cafd88b996617299733b0b4305bf901fe8ca097d0d309071e6fc2492c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858238": [
        {
            "ioc_value": "22126b78d2e1d3939b32faa40b7bb29b8f849a7b489d31fe0d664de7fd8e558b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858239": [
        {
            "ioc_value": "281efa299e62db0eef96225b2e17e2e986ea967ff073b793040f3736bdfd2776",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858240": [
        {
            "ioc_value": "2c68b235f03c31b3c3bda9f65082c1a470aa0c144f484370185cb7a052e85a2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858241": [
        {
            "ioc_value": "3268fb5f29930a2daaedb31db15c5c614d17963f5b241a60c36f5d5d32b08d50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858242": [
        {
            "ioc_value": "4efb2a4e12e218f447717231b9a9d8004b42cf6c2ceeee49a6d429f34d5e4670",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858243": [
        {
            "ioc_value": "58f80286ef454e9f12a9ab3e6b04512e8ff67bf02c3d162e3c28dcf3c4a06989",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858244": [
        {
            "ioc_value": "73021a747bab23a60469f89a42ac4ff2a3d3531cd9d2f3d8816f1d97b46f6551",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858245": [
        {
            "ioc_value": "79923ef39d8c35237ac2a784b5b24a21729182f8f34c8d77b252b2610a3197f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858246": [
        {
            "ioc_value": "82c2387197cee0a38d2db61d2d434702bc7803f6b09d7fc72f0f7ca5295e1a8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858247": [
        {
            "ioc_value": "928f208a4bbfb481005b55915dfdb74dc61268232a079c948936b5815da9b1de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858248": [
        {
            "ioc_value": "9d41737cb7aa161590fb9e32589f670da77e992a02778a6447cd0daf14100b8e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858249": [
        {
            "ioc_value": "af67e1b8f8b568bd86b790e98c74a40cb4492d152ee0b57ea9fa01c3efb60545",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858250": [
        {
            "ioc_value": "b485e7564750b86e7932fd3b07fd0267aa2d19e089507e837ffb591d767b174c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858251": [
        {
            "ioc_value": "d3c34baf4731aeffc5be0d1b6d2eb4ca4bddf35af1a1a79877bdc687189f857f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858252": [
        {
            "ioc_value": "dced1a98b0e426eccbb516626d957f4eadfa17815c8a125b5d294fbf6e4565ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858253": [
        {
            "ioc_value": "df16101db6081c19469f5d5de0d51c6d9bd4143be1ca7c4884cdd5196fb1214c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858254": [
        {
            "ioc_value": "f2671998df35ac2bb333747d3a6bcabeb10b285f4596d97ba66dfa2349f303d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858255": [
        {
            "ioc_value": "f3b927cad2739bc0a0f2d5a6f8f72e552ab0685149b58b8ff3e25fd8fce0a3fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858256": [
        {
            "ioc_value": "fbae207bcd09e0e505ebbc319460693130843655853dba07f47eed277afdcc66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/hashes.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858230": [
        {
            "ioc_value": "alextyler.eth",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858231": [
        {
            "ioc_value": "apk.alextyler.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858232": [
        {
            "ioc_value": "fuckyou.femboy-e.date",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858233": [
        {
            "ioc_value": "fuckyou.femboys.dating",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858234": [
        {
            "ioc_value": "meow.fuckmepls.eth",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858235": [
        {
            "ioc_value": "tristan.sexy",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858236": [
        {
            "ioc_value": "tristan.too.sexy",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 13:04:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/iocs/domains.csv",
            "tags": "Vibenet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858225": [
        {
            "ioc_value": "potassium1.vitacocoyougolocobecauseyouaresodamndeliciocobarampam.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 12:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/iocs/domains.csv",
            "tags": "Potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858226": [
        {
            "ioc_value": "potassium2.vitacocoyougolocobecauseyouaresodamndeliciocobarampam.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 12:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/iocs/domains.csv",
            "tags": "Potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858227": [
        {
            "ioc_value": "ohhbabybaybe.ikhebkankerinmijnrechterteelbal.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 12:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/iocs/domains.csv",
            "tags": "Potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858228": [
        {
            "ioc_value": "ohhbabybaybe69.ikhebkankerinmijnrechterteelbal.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 12:57:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/iocs/domains.csv",
            "tags": "Potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858223": [
        {
            "ioc_value": "potassium.vitacocoyougolocobecauseyouaresodamndeliciocobarampam.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 12:47:53",
            "last_seen_utc": "2026-07-26 12:57:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "Potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858224": [
        {
            "ioc_value": "ikhebkankerinmijnrechterteelbal.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 12:47:53",
            "last_seen_utc": "2026-07-26 12:57:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "Potassium",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858222": [
        {
            "ioc_value": "lsivqj.kkslot777.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 12:36:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858215": [
        {
            "ioc_value": "http://153.117.1.200:54854/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 12:36:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.1.200",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858216": [
        {
            "ioc_value": "http://124.29.214.246:56387/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 12:36:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.214.246",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858217": [
        {
            "ioc_value": "http://153.117.50.72:56421/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 12:36:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.50.72",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858218": [
        {
            "ioc_value": "http://110.38.254.61:44752/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 12:36:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.254.61",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858219": [
        {
            "ioc_value": "http://101.53.228.185:48530/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 12:36:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.228.185",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858220": [
        {
            "ioc_value": "http://103.225.191.6:54880/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 12:36:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.6",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858221": [
        {
            "ioc_value": "ipmoyu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 12:21:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://corporate.comcast.com/stories/reverse-engineering-jackskid-from-bare-bones-mirai-fork-to-persistent-tv-box-botnet",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858211": [
        {
            "ioc_value": "194.87.198.104:17384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 12:16:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858212": [
        {
            "ioc_value": "194.87.198.208:17384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 12:16:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858213": [
        {
            "ioc_value": "194.58.38.49:17384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 12:16:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858214": [
        {
            "ioc_value": "194.58.38.79:17384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 12:16:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858210": [
        {
            "ioc_value": "124.156.187.226:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-26 12:15:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858203": [
        {
            "ioc_value": "rjtrak.en-us-en-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 11:49:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858202": [
        {
            "ioc_value": "en-us-en-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 11:44:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858201": [
        {
            "ioc_value": "162.249.125.141:20198",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:40:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4017b001b2ed00fb4650bff8bb9e5c6cbaf3946eb6caeec2cb305be9f0439bdc/",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858200": [
        {
            "ioc_value": "45.144.172.49:53890",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:35:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3fafbee7a3b7259db3cb16b1ea7ebf7c12a61ced08e8f71c5e85258090d8b6cf/",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858199": [
        {
            "ioc_value": "68.183.90.240:57290",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:34:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3fafbee7a3b7259db3cb16b1ea7ebf7c12a61ced08e8f71c5e85258090d8b6cf/",
            "tags": "JackSkid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858197": [
        {
            "ioc_value": "https://wionews.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 11:31:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wionews.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858198": [
        {
            "ioc_value": "https://schwaderer.tvgprojekt.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 11:31:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/schwaderer.tvgprojekt.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858195": [
        {
            "ioc_value": "https://photobrane-dn.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 11:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/photobrane-dn.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858196": [
        {
            "ioc_value": "https://topfurnitures.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 11:31:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/topfurnitures.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858194": [
        {
            "ioc_value": "168.93.199.157:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-26 11:08:03",
            "last_seen_utc": "2026-07-31 02:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858193": [
        {
            "ioc_value": "203.160.54.105:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-26 11:07:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858026": [
        {
            "ioc_value": "dce9ad6317ce147f1f3f74bc93d9252a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858027": [
        {
            "ioc_value": "85befc3111bc28dc9715570a068412ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858028": [
        {
            "ioc_value": "441455c95dcb94ae91a7a160fdbe827c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858029": [
        {
            "ioc_value": "ec37a6c4866b7324fce2f11b0e89c4c2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858030": [
        {
            "ioc_value": "d683b433754eca7b1e5c25279f711c99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858031": [
        {
            "ioc_value": "066c1f3b224c94baa2a2ae41a88386b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858032": [
        {
            "ioc_value": "acfa0c2374d79ee81b52d83625bc0c51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858033": [
        {
            "ioc_value": "78d359a87ae75ece08976e8b14d877fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858034": [
        {
            "ioc_value": "fcc3cbe8bfe18f08eadda3acd4258369",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858036": [
        {
            "ioc_value": "be3d939747ad05764b2d9dd461697093",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858035": [
        {
            "ioc_value": "a9bc032353bd246ba50af1b8d4849bfd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858041": [
        {
            "ioc_value": "4e747a8d16cd1b8f57072dce5f3ee6dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858037": [
        {
            "ioc_value": "97e2a41929919df0c43a554b40999d12",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858039": [
        {
            "ioc_value": "8e7d534d816f1731fd66b4d458e18bf0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858038": [
        {
            "ioc_value": "37688f0d2f9a037a1ffd6c306bf87510",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858040": [
        {
            "ioc_value": "511f744c3a52f543134a190403c36191",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858043": [
        {
            "ioc_value": "aaef152123a87009a78e6dc82e6034c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858044": [
        {
            "ioc_value": "6ae20bef21d896ddc41fa8e8b4a45885",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858045": [
        {
            "ioc_value": "9a7a98916a2b76ca5af2dfd186088304",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858046": [
        {
            "ioc_value": "1fb412212359a970be06b9a4578c1e68",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858047": [
        {
            "ioc_value": "1922a47e467e4185eea0bb003e813dde",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858048": [
        {
            "ioc_value": "092d39b97288886203fa681bb354cca3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858049": [
        {
            "ioc_value": "c27dc6e74a7245368dbe1853d6631eb4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858050": [
        {
            "ioc_value": "79803779790dae11cbbef6500dc53391",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858051": [
        {
            "ioc_value": "11e9571b4db3772d86ede4a8af1913ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858052": [
        {
            "ioc_value": "2561b0e8df695e72d17367257d89b52e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858053": [
        {
            "ioc_value": "f934aa09fcf6be09d36a789b9a8aef4e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858054": [
        {
            "ioc_value": "9adde343f1b073cd9bbb22c33d31ec4a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858055": [
        {
            "ioc_value": "485573e162551f66f776923126e5b5ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858056": [
        {
            "ioc_value": "c6b6543ef258058049b0322ca8b59fd5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858057": [
        {
            "ioc_value": "267bec0f845b4f49610cfe695b63c5f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858058": [
        {
            "ioc_value": "e402c9df4aab1d1cff83ec8ba11a4bc7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858059": [
        {
            "ioc_value": "d18ef5a6c2bd443864132e5c7feb0c2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858060": [
        {
            "ioc_value": "2cd3dac4b0d7eadb7746246ea86575fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858061": [
        {
            "ioc_value": "6d58562129f8dbd8ca14d1e7f8d3f574",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858062": [
        {
            "ioc_value": "cdf99b5e56d59aa1b1b04758729a702a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858063": [
        {
            "ioc_value": "5ebad3f068d50dbe65d541908ab1a087",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858064": [
        {
            "ioc_value": "d1df32e403d1424daa322e21dd1e4d19",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:07:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858065": [
        {
            "ioc_value": "da293a6e68ade7fd2258cc4485a619f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858042": [
        {
            "ioc_value": "27b8b96a65a38d281dfed160711f6616",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858066": [
        {
            "ioc_value": "248617dcee576b8f42b3a80ecd172c41",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858067": [
        {
            "ioc_value": "c58fff066a855f59e77780d926cbe727",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858068": [
        {
            "ioc_value": "211ea6dcca8b67e44d4e792f7f6a85b6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858069": [
        {
            "ioc_value": "d1dcd52a3679608250fee82e27051cbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858070": [
        {
            "ioc_value": "eb215362b9c55128414c13e22eeeb806",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858072": [
        {
            "ioc_value": "79952fdfcef93c2f65c2ff0b1c91fa35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858071": [
        {
            "ioc_value": "80a8727d4f1d05e17521b11b24de326f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858073": [
        {
            "ioc_value": "ab65a026cf2c33485960d52de4884fd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858074": [
        {
            "ioc_value": "14889a7e231c4884f28aefd592e61398",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858075": [
        {
            "ioc_value": "b5baeceef8496957c374b4a6e3008b0b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858076": [
        {
            "ioc_value": "41a23093a50d8b9d897b03ba957695e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858077": [
        {
            "ioc_value": "f16573ffd637d75aa5c2a8a99ac106cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858078": [
        {
            "ioc_value": "e3e441f3a4038165628314216ec5b676",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858079": [
        {
            "ioc_value": "fb14aae2ed93a7ddfa718f433f585735",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858080": [
        {
            "ioc_value": "66c9c7e5d750fbf2de34e897687444af",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858081": [
        {
            "ioc_value": "38fe1b3ef35fc7a601619a19f89c864e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858082": [
        {
            "ioc_value": "b2718b5c6ed6f42e1e36336bca2f5839",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858083": [
        {
            "ioc_value": "38eca0067e68a296b6142cdc9f43f5a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858084": [
        {
            "ioc_value": "9af9bc3540abf90fef52062460d39020",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858085": [
        {
            "ioc_value": "45452dfed7ff029dae0c9722e4d92449",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858086": [
        {
            "ioc_value": "878cefb9da1b392f40373befc60b6806",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858087": [
        {
            "ioc_value": "aae8f3426b55889ac84671e7db73e140",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858088": [
        {
            "ioc_value": "8a275265a27f6426cc9f1ea0b0e24bcf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858089": [
        {
            "ioc_value": "1c68214c3be2091c5e3ae3e88723fa77",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858090": [
        {
            "ioc_value": "5418e8a0495a867b7950777ef33cb7fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858091": [
        {
            "ioc_value": "4023c6b64bafc1281bd8fd4c497dff96",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858092": [
        {
            "ioc_value": "980556abeb77fa003d513ef726bbfcb2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858093": [
        {
            "ioc_value": "6e74871bf502648086094e828beb3638",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858094": [
        {
            "ioc_value": "2fdef393aa1600a5d76e3a212c2f270f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858095": [
        {
            "ioc_value": "845fec7fef2a642a69a372cb3344f9d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858096": [
        {
            "ioc_value": "92267dab270ffba675bfd0d5d5b42383",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858097": [
        {
            "ioc_value": "2595305e81047b25d0e470ccb686c948",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858098": [
        {
            "ioc_value": "e79013e3c200a6e8722152338d22d67a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858099": [
        {
            "ioc_value": "4f2d491567a0d54513cee740fb55e501",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858100": [
        {
            "ioc_value": "be23d4c6686cfe16d87a086b6761b74d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858101": [
        {
            "ioc_value": "c488bff34f30c8307c4bd77e8033c6f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858102": [
        {
            "ioc_value": "b256dbec5ad85b6ecf4914e055383f6b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.inc",
            "malware_alias": null,
            "malware_printable": "INC",
            "first_seen_utc": "2026-07-26 11:06:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://theravenfile.com/2026/07/24/inc-ransomware-threat-intelligence/",
            "tags": "inc,incransom,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1858119": [
        {
            "ioc_value": "461a9036ea41cca79988c0504c72059af47b5e8ec1a9194d88da5395fe4e452f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:04",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858120": [
        {
            "ioc_value": "68a639621b556f8b3e9cdfb694867ce2895a856702fb440f01c1c67aa05ac60c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:03",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858121": [
        {
            "ioc_value": "1c5080b6fa705f69758a8add633e3314f1953308ff68750be9455340bc91536b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:03",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858122": [
        {
            "ioc_value": "4972c60f23b4bb0efeda90b69cf3b6a8ccc00ea489d7818064c6c49b816d54ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:02",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858123": [
        {
            "ioc_value": "55c77daaa1ff91b4c58b66a46815a3a768de052121403a0793127f520f879dce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:02",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858125": [
        {
            "ioc_value": "9b52194d25869ef56f711942d12c067a14e5c15b5c2da1b1b52fe1c1e3deeb68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:01",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858124": [
        {
            "ioc_value": "3d798e43f9c486183d6a3890636e4980389da8c84af528b8eef0d5e946f83633",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 11:00:00",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858126": [
        {
            "ioc_value": "8abae386ec6aaa1d1bf03e39f339922053e4b66d7ebbbeba15701d3ecc183fb8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:59",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858127": [
        {
            "ioc_value": "1cf83070eb9d7bf3365ac845c3902d12918de0877106210c177c05ac95f3c114",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:59",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858130": [
        {
            "ioc_value": "beff4f493e0e10327b949afcf0dba6c5f6ece7a9e77a550f49c6a0e3efb4523d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:59",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858128": [
        {
            "ioc_value": "5be43c1ea349a375b4cac2890c7ec19ddd00f57332e625973c680f85905848c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:58",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858129": [
        {
            "ioc_value": "d7c75c5258ea8467690ec1f710415e7f8234491d4873566515f15fb7e5e729a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:57",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858131": [
        {
            "ioc_value": "77aecba30042e9bd05a15beb18ce5fd4e6ac210526497e29e0d96ced04dee36b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:56",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858132": [
        {
            "ioc_value": "9455bb699c4374efa2d9a99b5638b62254e630a95c31763b9d043192f06f65e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:56",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858133": [
        {
            "ioc_value": "3086cb4ead9b15f5cf9c83d1e5c2ed9f391f59b4f949c9254f5d8204c364fdc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:55",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858134": [
        {
            "ioc_value": "ab876f430096ce1bc90bb309ff27697d8eb24e9c936216f0e73075cdfeb8361b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:55",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858135": [
        {
            "ioc_value": "c3457390026b6cc4690310f0af06c0a50da4941881ef3d8defab8ad15474d5ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:55",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858136": [
        {
            "ioc_value": "071ff332e77bc80d4e43660d73792af2e73e0442c66d74edfec3740b7691b299",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:54",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858137": [
        {
            "ioc_value": "70f8e1942b20728ca72e764895633e409858b007f660439c0ce6f671f7070db8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:54",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858138": [
        {
            "ioc_value": "e95a624d496acffdaf87ec8fba2d5e5fc662b5870ce69bc45505434109092bf3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:53",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858139": [
        {
            "ioc_value": "4017b001b2ed00fb4650bff8bb9e5c6cbaf3946eb6caeec2cb305be9f0439bdc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:53",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858140": [
        {
            "ioc_value": "23282313ee3edb3443ae8c0296b9b6ddf52501983093fd289f46d99e7d180402",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:53",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858141": [
        {
            "ioc_value": "828b14ea14038a29a666d292d6698a6c062a135959b887e97638d7030644c4f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:52",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858142": [
        {
            "ioc_value": "589fd8f0b10698888cbd9ea7128c1dfb7a35b02a5493ad5a00a514f6c15016d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:52",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858143": [
        {
            "ioc_value": "7247db5cefb311a3315946beb72f6f4469fef639d80541322d7b5f96b940d2ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:52",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858144": [
        {
            "ioc_value": "721d764d2d1985eefb42fee9e1e2f05d4f4f35bbec216b952cdad74b0ac90cd1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:51",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858145": [
        {
            "ioc_value": "07b8ca62d5b394842a09e05d06fa833d51504b69b1085eec49732e65594e5392",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:51",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858146": [
        {
            "ioc_value": "9697a161278f262022eb0cd80ac97e2b83349f79990fd6547d452d40cd422969",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:50",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858147": [
        {
            "ioc_value": "96f31f83928d686ac340769de5724dc5046afa568f92bd28dd9afc0f62c506a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:50",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858148": [
        {
            "ioc_value": "e0c6b4998e0c8c5e1a18f5af13c236809df2c7b281e8dba1038592c3e6e752f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:50",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858149": [
        {
            "ioc_value": "333774e3405c4e6ef3a663bb7fe5e9074f03a6c8bb080e0ff3bcc33eec848b30",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:49",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858150": [
        {
            "ioc_value": "ee56b8f51fd5722918ff2082c0027cc6183429554bcf177ea20b17af7d46a2a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:48",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858151": [
        {
            "ioc_value": "6491a2ccac96e64a37a5d18e62575b44ba7704159fbe21d06f83b712ba747c9d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:47",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858152": [
        {
            "ioc_value": "a53dd987ba4c34030e10da19431fa7f81208c7ce010ec474bc62ee82dde6fa61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:41",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858153": [
        {
            "ioc_value": "4b05cd307e64425075f3f651d3d07c381e87a8846976ca241733a6e1d7f892db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:40",
            "last_seen_utc": "2026-07-26 07:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858154": [
        {
            "ioc_value": "f105326c65e40d64430bc80c367485295b73d5255164f4b022868dc97b71955a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:40",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858155": [
        {
            "ioc_value": "1a9a54eb8b3ed707852eace623b935bc687c46d5e0cfa793751e778dacd8b62b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:40",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858156": [
        {
            "ioc_value": "06c4ddabac5e976f152f482a47581313fdb95e2cbee564d56279648bbaf5694a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:39",
            "last_seen_utc": "2026-07-26 07:36:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858157": [
        {
            "ioc_value": "51c7abd74c3de141108d7f229d2c54df93a1b4f28fb6e95987aa7676e3c88480",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:39",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858158": [
        {
            "ioc_value": "01d5fba3c3906d1fb26a6697644610f0f9f02140720de49edf907091669dbb8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:39",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858159": [
        {
            "ioc_value": "9d8e694d18e3c976b45ada0041ae3f756ef7c795089c05537396dbe89d929262",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:38",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858160": [
        {
            "ioc_value": "672f654f31e91cdb9766131ad3034d1284842fc8b56dc8b4e9a32e925b7f8e95",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:37",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858161": [
        {
            "ioc_value": "f278a86c15f3bf05a94455387178aafa99e4b2aca3e23f1990ff81d22aa0fd0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:37",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858162": [
        {
            "ioc_value": "8db1b95bdb5d8aa6a0b2c2357df49e537bcafb65e15582884b2c2588c74963df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.jackskid",
            "malware_alias": "RCtea",
            "malware_printable": "Jackskid",
            "first_seen_utc": "2026-07-26 10:59:37",
            "last_seen_utc": "2026-07-26 07:32:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,ddos,jackskid,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1858107": [
        {
            "ioc_value": "http://153.117.33.129:52507/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:56:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.33.129",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858108": [
        {
            "ioc_value": "http://72.255.18.15:45093/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:56:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.18.15",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858109": [
        {
            "ioc_value": "http://223.29.233.209:56962/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:56:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.29.233.209",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858110": [
        {
            "ioc_value": "http://111.92.157.255:39685/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:56:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.157.255",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1858111": [
        {
            "ioc_value": "84.247.129.0:6520",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-26 10:56:03",
            "last_seen_utc": "2026-08-01 04:27:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857698": [
        {
            "ioc_value": "bestvegasattorneys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-26 10:55:58",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857701": [
        {
            "ioc_value": "dooball.bz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-26 10:55:56",
            "last_seen_utc": "2026-08-26 21:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857707": [
        {
            "ioc_value": "schwaderer.tvgprojekt.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-26 10:55:54",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857732": [
        {
            "ioc_value": "https://irahook.baby/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-26 10:55:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857733": [
        {
            "ioc_value": "https://irahook.baby/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-26 10:55:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857734": [
        {
            "ioc_value": "https://irahook.baby/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-26 10:55:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857735": [
        {
            "ioc_value": "https://irahook.baby/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-26 10:55:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857981": [
        {
            "ioc_value": "198.98.53.100:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-26 10:55:50",
            "last_seen_utc": "2026-08-30 00:35:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857985": [
        {
            "ioc_value": "115.55.239.136:53259",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 10:55:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,ssh",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1857986": [
        {
            "ioc_value": "http://110.37.97.32:49108/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:55:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.97.32",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857987": [
        {
            "ioc_value": "http://153.117.14.186:37054/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:55:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.14.186",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857645": [
        {
            "ioc_value": "souls-of-wildlife.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857646": [
        {
            "ioc_value": "testspsychotechniques974.re",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857647": [
        {
            "ioc_value": "toppansecurity.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857648": [
        {
            "ioc_value": "traditionalafricanmarket.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857649": [
        {
            "ioc_value": "uhnjfoundation.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857650": [
        {
            "ioc_value": "verifyaiinitiative.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857651": [
        {
            "ioc_value": "vimjes.edu.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857652": [
        {
            "ioc_value": "visiononfire.co.za",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857653": [
        {
            "ioc_value": "wamproperties.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857654": [
        {
            "ioc_value": "warhawgs.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857655": [
        {
            "ioc_value": "www.jolivet.asso.fr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857656": [
        {
            "ioc_value": "www.lacompaniahostal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857657": [
        {
            "ioc_value": "www.lowbudgetmovers.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857658": [
        {
            "ioc_value": "www.ridderkerkfm.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857659": [
        {
            "ioc_value": "www.slidingdesk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857660": [
        {
            "ioc_value": "www.zfederal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857661": [
        {
            "ioc_value": "zainbeauty-sa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857662": [
        {
            "ioc_value": "zensostudio.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857663": [
        {
            "ioc_value": "304771.eu15.myftpupload.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857664": [
        {
            "ioc_value": "activistsediblesolutions.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857665": [
        {
            "ioc_value": "alambiodiversitasindonesia.or.id",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857666": [
        {
            "ioc_value": "amadadopai.com.br",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857667": [
        {
            "ioc_value": "andressadinizbeauty.com.br",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857668": [
        {
            "ioc_value": "androscogginpal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857669": [
        {
            "ioc_value": "axletrees.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857670": [
        {
            "ioc_value": "baztechalarm.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:55:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857644": [
        {
            "ioc_value": "shyariinhindi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1858190": [
        {
            "ioc_value": "tknlli.enus-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 10:54:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857671": [
        {
            "ioc_value": "bookdayz.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857674": [
        {
            "ioc_value": "http://nerdsonsite.pro",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 10:54:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "kirkderp"
        }
    ],
    "1857695": [
        {
            "ioc_value": "http://103.244.172.87:45274/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.87",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857696": [
        {
            "ioc_value": "http://130.12.209.147:55604/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-26 10:54:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/130.12.209.147",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857642": [
        {
            "ioc_value": "rossomazara.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857643": [
        {
            "ioc_value": "royalaigle.fr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857641": [
        {
            "ioc_value": "purikurniaayuvilla.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857639": [
        {
            "ioc_value": "praxis-uruska.de",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857640": [
        {
            "ioc_value": "primosgourmetcatering.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857638": [
        {
            "ioc_value": "pmmoldpro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857637": [
        {
            "ioc_value": "oceanemarine.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857635": [
        {
            "ioc_value": "libretto.awebi-lab.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857636": [
        {
            "ioc_value": "makhaniwelfare.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857634": [
        {
            "ioc_value": "ktco-co.ir",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857632": [
        {
            "ioc_value": "guardiansunlimited.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857633": [
        {
            "ioc_value": "haba.com.vn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857631": [
        {
            "ioc_value": "gov.flstudios.website",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857630": [
        {
            "ioc_value": "genesis-mfg.ae",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857629": [
        {
            "ioc_value": "frigor-refrigerationoils.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857628": [
        {
            "ioc_value": "findyourrootshairacademy.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857626": [
        {
            "ioc_value": "devcon.cd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857627": [
        {
            "ioc_value": "entertainment.zincgroup.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857624": [
        {
            "ioc_value": "cozinca.com.br",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857625": [
        {
            "ioc_value": "darkslateblue-gnu-453682.hostingersite.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857622": [
        {
            "ioc_value": "1stclassmovingtn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857623": [
        {
            "ioc_value": "americanjackets.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-26 10:54:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.derp.ca/clickfix/",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1857621": [
        {
            "ioc_value": "137.184.135.42:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-26 10:54:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1858189": [
        {
            "ioc_value": "enus-spartamax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 10:53:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858183": [
        {
            "ioc_value": "csznif.enus-prostadefend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 10:03:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858182": [
        {
            "ioc_value": "enus-prostadefend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 10:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858181": [
        {
            "ioc_value": "5.181.181.12:5443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 09:45:52",
            "last_seen_utc": "2026-08-25 18:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858180": [
        {
            "ioc_value": "199.246.88.101:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 09:44:26",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858179": [
        {
            "ioc_value": "103.67.163.201:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-26 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1858178": [
        {
            "ioc_value": "lb.propertyfind.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 09:40:44",
            "last_seen_utc": "2026-08-14 11:19:25",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858177": [
        {
            "ioc_value": "movxvv.enus-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 09:26:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858176": [
        {
            "ioc_value": "enus-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 09:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858170": [
        {
            "ioc_value": "m3f6b86b.memap.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 08:45:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858169": [
        {
            "ioc_value": "5x9bzxh8.6oclocktrain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 08:44:58",
            "last_seen_utc": "2026-08-07 00:09:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858168": [
        {
            "ioc_value": "bszscf.en-us-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 08:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858167": [
        {
            "ioc_value": "en-us-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 08:30:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858163": [
        {
            "ioc_value": "nvwhch.yummiquickway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 07:43:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858113": [
        {
            "ioc_value": "extranet-helpdesk15.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-26 07:04:40",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858112": [
        {
            "ioc_value": "ealzou.ushealthlaboratories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 06:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858104": [
        {
            "ioc_value": "zzjrse.usen-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 06:02:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858103": [
        {
            "ioc_value": "usen-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 05:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858025": [
        {
            "ioc_value": "fjedaz.us-en-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 05:11:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858024": [
        {
            "ioc_value": "us-en-pegasus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 05:06:35",
            "last_seen_utc": "2026-07-27 14:42:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1858018": [
        {
            "ioc_value": "qttqcz.lexsecurityco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 04:34:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858017": [
        {
            "ioc_value": "https://tecnotetto.ch/it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 04:30:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tecnotetto.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1858013": [
        {
            "ioc_value": "206.119.165.12:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-26 04:05:05",
            "last_seen_utc": "2026-08-22 00:03:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858011": [
        {
            "ioc_value": "m5sqhbpy.qlaneturnstiles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 03:47:13",
            "last_seen_utc": "2026-07-27 19:48:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858010": [
        {
            "ioc_value": "plhax4b2.lergothelabel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 03:45:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858009": [
        {
            "ioc_value": "cilygv.missionlanereview.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 03:43:05",
            "last_seen_utc": "2026-07-26 03:43:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858003": [
        {
            "ioc_value": "jksdav.mireyasflowersshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 02:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1858002": [
        {
            "ioc_value": "mireyasflowersshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 02:52:57",
            "last_seen_utc": "2026-08-07 00:09:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857998": [
        {
            "ioc_value": "ylprof.metrodesignconcepts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 01:59:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857997": [
        {
            "ioc_value": "pawyjf.metrodesignconcepts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 01:45:04",
            "last_seen_utc": "2026-08-07 00:09:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857991": [
        {
            "ioc_value": "rodwkb.memap.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 00:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857990": [
        {
            "ioc_value": "149.28.128.253:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-26 00:47:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857989": [
        {
            "ioc_value": "xfgoob.memap.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 00:29:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857988": [
        {
            "ioc_value": "memap.me",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-26 00:28:55",
            "last_seen_utc": "2026-08-07 00:09:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857982": [
        {
            "ioc_value": "https://eco-megalabs.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-26 00:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/eco-megalabs.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857979": [
        {
            "ioc_value": "54.178.100.27:8021",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-25 23:46:33",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857978": [
        {
            "ioc_value": "rbwnmu.medjourneytourism.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 23:38:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857977": [
        {
            "ioc_value": "medjourneytourism.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 23:38:07",
            "last_seen_utc": "2026-08-07 00:09:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857976": [
        {
            "ioc_value": "157.20.182.22:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 23:05:05",
            "last_seen_utc": "2026-08-26 18:43:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857975": [
        {
            "ioc_value": "qliccx.mclennancotxgenweb.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 22:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857974": [
        {
            "ioc_value": "emxq57ih.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 22:48:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857973": [
        {
            "ioc_value": "mclennancotxgenweb.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 22:47:38",
            "last_seen_utc": "2026-08-07 00:09:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857972": [
        {
            "ioc_value": "gi4q7bgx.infinityjoespizzaclearwater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 22:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857971": [
        {
            "ioc_value": "15.197.162.184:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-25 22:20:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857970": [
        {
            "ioc_value": "kyzvja.matsnews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 22:17:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857969": [
        {
            "ioc_value": "matsnews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 22:14:37",
            "last_seen_utc": "2026-08-07 00:09:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857964": [
        {
            "ioc_value": "ixscgl.marquettedetailing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 21:28:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857963": [
        {
            "ioc_value": "marquettedetailing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 21:24:06",
            "last_seen_utc": "2026-08-07 00:09:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857960": [
        {
            "ioc_value": "47.76.51.107:5677",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 20:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857958": [
        {
            "ioc_value": "812c33061b418ef74dc6be4522dc9d7f0efb284d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-25 20:42:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857959": [
        {
            "ioc_value": "731219563f05a61e639b645f4892d6cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-25 20:42:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857955": [
        {
            "ioc_value": "2b0e4a9a122db7e489d927f526f21dbd775c42e3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857956": [
        {
            "ioc_value": "41faa6070b56ee395b5f811008213b03",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857957": [
        {
            "ioc_value": "fda5556e3fa55664509ab396469d00939b0ac6260d01c8cdfbde999ee3a9d0ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-25 20:42:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857953": [
        {
            "ioc_value": "687136a7d7e1c1e201913a6168e047ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857954": [
        {
            "ioc_value": "1ba28ed44b1be838f303f53c5388cf1b007212798d50bb3e82932cfc06d7f6dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857951": [
        {
            "ioc_value": "44acb3159fd6e085d3fce3991211912252edbe24c2a1b94b04d55431edab2630",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857952": [
        {
            "ioc_value": "77bd23afbfc26ea16c6507263fc881d4eed4cb84",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857948": [
        {
            "ioc_value": "4f4f30d07cc0ed90a92e39b637da4dc99aa76f36cff2362d4d907d77a2465ee5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857949": [
        {
            "ioc_value": "546db363bcc9266c133b8363c62103b7a2f1940b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857950": [
        {
            "ioc_value": "a554260842be80f9fddffcb47f203d43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857947": [
        {
            "ioc_value": "f7a9be6e4140bb14d916bd73f0868aad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857945": [
        {
            "ioc_value": "6925fdec115ca580da0c37cf3804ec6252d1210a4af5acc205bf695aa8d0e0e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857946": [
        {
            "ioc_value": "6ed8767b85a5ddf99b4e7ac4fbc7e50c6db44027",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857943": [
        {
            "ioc_value": "c480d041069d0c65ffd75eba89ce1135c7b91ff5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857944": [
        {
            "ioc_value": "b8d3dfe5aff8f0c8955038c174e70195",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857942": [
        {
            "ioc_value": "7949631d3490ed9fb6b63aff678f7b203df719fe75e671ea16975c6b873010dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857940": [
        {
            "ioc_value": "7a4a94471e49b12f6482b9f64fdd0cc4982dc431",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857941": [
        {
            "ioc_value": "88789a1cc82d672509fc1ce33dff1fe8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857938": [
        {
            "ioc_value": "5323cf5c653ed0d88b92e934d1c7aff6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857939": [
        {
            "ioc_value": "9eacc45bc8c6a2e4954e116d9cd8add64f89e14d1c7d6c1c0027ba6d93c6086a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857936": [
        {
            "ioc_value": "bb313ea63402edd0fac30bad39a56e2405bee5b4f07013b09af72ef6c382a731",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857937": [
        {
            "ioc_value": "660a2ebad18d856bdf89830628f46a1a5a3c0fcf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857933": [
        {
            "ioc_value": "ad5b27155e1f34fad298c6889dbc845692f5861ad7ea835c42e991640470909f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857934": [
        {
            "ioc_value": "d96a9e4df85b326920258c21efe8b30205aee037",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857935": [
        {
            "ioc_value": "0c2577473d74812f1236f9b799657b49",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857930": [
        {
            "ioc_value": "e5bccb979fef3945c64622c6ad4461947eca123465f2989d9f4af879fd467890",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 20:42:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857931": [
        {
            "ioc_value": "af381a40b1babd7f65f118608a958fc1aa48f115",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 20:42:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857932": [
        {
            "ioc_value": "cc7e9ae7f054d90355af2dd379625ec3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 20:42:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857929": [
        {
            "ioc_value": "9ef42799d880c522be09618a03a7b9e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857927": [
        {
            "ioc_value": "b08f921c92a29a0a8449ee27d6860597d7a34baf8d609ca7dbcb06c32d5b2f80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857928": [
        {
            "ioc_value": "d7b54e708ddbbf0954a1cccf95d4e8b80dda3150",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857925": [
        {
            "ioc_value": "ff5db489782f10217946f75450803f6c835108c5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 20:42:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857926": [
        {
            "ioc_value": "0268fde13e99c555ed4a4c6ef193b9ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 20:42:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857922": [
        {
            "ioc_value": "cae5fce1e51361e0c1b89119d9f0ca4a3a57ce1c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857923": [
        {
            "ioc_value": "de4b52b0f65e583ab1be4564a3e863c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857924": [
        {
            "ioc_value": "155d1dce8e17b107b531b80b648f1a3fcbcbed764d76a39b0b3972d9424dd2f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 20:42:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857921": [
        {
            "ioc_value": "1fd16cdde518d79227aedb9cec2e3b69ee47727e119cd8cec611cf1320e61265",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857920": [
        {
            "ioc_value": "c29ddb54bb464846ba7e2de1d3eff471",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 20:42:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857918": [
        {
            "ioc_value": "748c32e3718319e569d7a71eab5ace7589ed012764902b55475faab82a63c89b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 20:42:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857919": [
        {
            "ioc_value": "49d293bee3fe99fbc0cf857347d9e5259dc41b94",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 20:42:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857915": [
        {
            "ioc_value": "52f447218c94376f552d1c2b5bfa01c4ef2b5d32ac9ac061236cd286a9efba67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 20:42:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857916": [
        {
            "ioc_value": "b1979a03b72b7ced1fffb9e4dd34e0e01adbfc67",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 20:42:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857917": [
        {
            "ioc_value": "5a59127af8fcd4d20671f83f4ea243a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 20:42:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857914": [
        {
            "ioc_value": "a71ebf9fd2b7e1969f15e73c9c6eda6e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857912": [
        {
            "ioc_value": "bae3dd2745c3822b1bc6b869f10bf56167195452dd65104d76f5089537ab6fc2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857913": [
        {
            "ioc_value": "b78cac8f8e3b4df820e23868f7bba7c969368307",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857911": [
        {
            "ioc_value": "6fe286907a6a28e94425df612efe40c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857908": [
        {
            "ioc_value": "8fa335df29a65265e791f22f053200b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 20:42:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857909": [
        {
            "ioc_value": "99076f5c4404f5ead7b4489b055ea199d6e145ab7194e3e3fa4a8fe2634f6bb9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857910": [
        {
            "ioc_value": "817e55643d4e3f3136f1b176be7fbe98f8360960",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857905": [
        {
            "ioc_value": "54e487a440d73b2e2ada3b012c221268",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:42:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857906": [
        {
            "ioc_value": "7b16b0dda74cc8410364fd32d1b16ec9d2961a77dfbc6167f4bf908904e92a98",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 20:42:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857907": [
        {
            "ioc_value": "a3092d70c8380f0fe0fc7cdf3acaae3df0c75fff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 20:42:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857903": [
        {
            "ioc_value": "377f0aa03ac75e555ef3c7299faa1725452cd18966c4ce53622719dd6e5f5cf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:42:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857904": [
        {
            "ioc_value": "81a339cf0c00148b6339afba449570e3a9304337",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:42:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857901": [
        {
            "ioc_value": "e2c42eb4661a0c6c9ff46d7138bf20419a128854",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857902": [
        {
            "ioc_value": "ebcf21be8b00200b2ffba93aa86ab6d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857898": [
        {
            "ioc_value": "a3a4f47b5f80bf063630354d7f03210bc2ad27ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857899": [
        {
            "ioc_value": "dcfa838bccb8d683e124b106fdb8a75b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857900": [
        {
            "ioc_value": "c48e3a289464eec1e638c36ec12996e1c3e71d4b0c098baf94f89086c2ac69d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:42:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857895": [
        {
            "ioc_value": "bb7417b595c0a11330d3fa73a1a252743171b014",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857896": [
        {
            "ioc_value": "24338d2e35bd0bf40aee61ed5f54b48a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857897": [
        {
            "ioc_value": "004ee466e951b32eaf7d0e611050efb1d9f9261c64d69ffc9d8c6a84836fc365",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857892": [
        {
            "ioc_value": "2546041339221f6fed8ef9e6645b509b1703e1f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857893": [
        {
            "ioc_value": "154776e2ade2e0ef31b5e2752f30f6b4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857894": [
        {
            "ioc_value": "005fa4606e1c5f4e382a302d5da1a00a8204316848a2fa7e58600b2faa52f12a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857890": [
        {
            "ioc_value": "04e0c05f989f7f60892b0c1670dd9ca1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857891": [
        {
            "ioc_value": "00cb8d48f2571613e9bd7e9ef93986009cb5c075a9079f10d274910128f5bd40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857887": [
        {
            "ioc_value": "b570ca54a362a61ad5237681c90e1523",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857888": [
        {
            "ioc_value": "007256dae6b6239ab6774958cbac6ceae190df52278bc66e18ed05764be811c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857889": [
        {
            "ioc_value": "643ea8c1b966e2987714187867e2c664ed54e7cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857884": [
        {
            "ioc_value": "534e81996c3cc467ac4441170608b58e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857885": [
        {
            "ioc_value": "00dc46d870422064f4f0570db6774034349e5927eb32d0d1b784475d2f77294a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857886": [
        {
            "ioc_value": "0f775839b75fa9f00a671526912b1f37224c2309",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857880": [
        {
            "ioc_value": "008d5b3a18717ab342553380be3b4e058e69fa73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857881": [
        {
            "ioc_value": "e5ca659a13cad28aae3f8494f600d74c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857882": [
        {
            "ioc_value": "00e5c871d833b8b97bb7401591044dd92a52c20207e2f693d99e9175c9ef7e28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857883": [
        {
            "ioc_value": "7efc420a311633cfd04c53d3d6b82c48a961e28f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857878": [
        {
            "ioc_value": "77307555f8d4076fe040ddc0ab1f0fea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857879": [
        {
            "ioc_value": "01b5e2711d157c6aec9a981bd3f74d9153aef5789f3463e3de472e4cf05ca990",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857874": [
        {
            "ioc_value": "a3bcd9a3d387c7be8ae15aa5a2e71e0853a13ee5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857875": [
        {
            "ioc_value": "30d0e8c5d3deac9607282a0c49bd1cf2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857876": [
        {
            "ioc_value": "53030654fbe1aef7d34abb151ac5725291f9a880d1fa2ee5b174445abfab6d58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857877": [
        {
            "ioc_value": "bcf403c073cfafcb22c364ae8e5bcc595437a4a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857872": [
        {
            "ioc_value": "abe1f41e3fd3c7e3dbcc986426f694dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857873": [
        {
            "ioc_value": "1fbeebd50284ce6fa42e48fcd3a36a8b27ee0a2f1b9ff8b4674f5bcdf4549ad7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857869": [
        {
            "ioc_value": "a96181ed94ae70267b7f64383b29246c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857870": [
        {
            "ioc_value": "00eca1a382560f46f042bcc2fd972dddca20768d3ec13448f5d43bf5d5f54002",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857871": [
        {
            "ioc_value": "cdf1bd4877feb374a146ae2015089735672ae3cd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857865": [
        {
            "ioc_value": "7707d9dcb3332125863f4432f75d3026d5439899",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-25 20:42:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857866": [
        {
            "ioc_value": "04cb543da02c2227c4ec3a17d72d41fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-25 20:42:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857867": [
        {
            "ioc_value": "b234d7021ec9c148ad3f4cd0d45368f7694fd78ed9728e66c13f00a87994dcce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857868": [
        {
            "ioc_value": "bb45b53d9bc9c52c943c7fbe2603d9f45be2a02c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:42:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857863": [
        {
            "ioc_value": "d33e96d3fab0ef6266c645266c1312d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857864": [
        {
            "ioc_value": "d33fe738471c6f21f7f9c2c56893c5e286f110bb0eb242ec1b3f9145fccdaf79",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-25 20:42:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857862": [
        {
            "ioc_value": "9122a7ce2c76efdd19d5670b6eb33ae5bf06ba01",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857859": [
        {
            "ioc_value": "e63c4d2932bba77476fc82814d696bce1caf337d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857860": [
        {
            "ioc_value": "fa80df233f896120abded61035b868ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857861": [
        {
            "ioc_value": "d9caf6b0f7220657c8ebd40ee6e8a20ce2ff71b977d99553c3db0b59bb0eaad9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857856": [
        {
            "ioc_value": "54b0598d70827bcb1204454561f139a07a5aebfd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857857": [
        {
            "ioc_value": "11b0e224ad2108cc24be3918299c2c3e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857858": [
        {
            "ioc_value": "fbf4ef28c4b49c6304d23a738afabf8981590eae8585834bf24e3c7e87163c1a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:42:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857852": [
        {
            "ioc_value": "1cfa40843d9e169e9df5d61ab7b6cc6db59a3237b8a3ca9a3fa047ef836d7453",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857853": [
        {
            "ioc_value": "aaa95d93a0a792db0411868121413e0cdc453373",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857854": [
        {
            "ioc_value": "91092ecc0a5a3866dea9fb5088e6ad74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857855": [
        {
            "ioc_value": "08161e05c4971e5a566f534a6690cbf8a42470744855524834bd510b6229c172",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857849": [
        {
            "ioc_value": "c674994e24fe2c51bc8c4c0dc76ae844f0b16e54870602302b75497a417a2557",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857850": [
        {
            "ioc_value": "c2b01d8a9346db93666bbe24e313a229afd229f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857851": [
        {
            "ioc_value": "e6a5add76044236710a699d28da24437",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857846": [
        {
            "ioc_value": "2d9adcb653a222351652077abc838e027fa814f120741c7fb4f14d71d03f9fa0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 20:41:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857847": [
        {
            "ioc_value": "09301281e99e74c52487211f8555571e2b1e9ab9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 20:41:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857848": [
        {
            "ioc_value": "f3a81cd70d0c86700e45b9de40644c87",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 20:41:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857843": [
        {
            "ioc_value": "20541efb895ad4079d4dbd7234c661c15b77d67085d67a0582a1b80fa093c16b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 20:41:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857844": [
        {
            "ioc_value": "a4e92203d12dba0319d421f67b6a07934e5495a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 20:41:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857845": [
        {
            "ioc_value": "f2bc1f451548fadcaa799ab9d46782ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 20:41:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857841": [
        {
            "ioc_value": "87a59eb6074958aaa81799312861574b2ea90527",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857842": [
        {
            "ioc_value": "9bd97475aa0d8fb22a284d070a2ee795",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857837": [
        {
            "ioc_value": "e0a5189ebecb70081ad4ddc0f94f2aafdae713f72302ceb259690b0d4c6a261f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857838": [
        {
            "ioc_value": "dc1a21832c603a6057eec1d76d0ffd3cedbfeb03",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857839": [
        {
            "ioc_value": "5819a7037df52589bf6de48a85cc0b76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857840": [
        {
            "ioc_value": "7153c7609816c1a5c2882dd7889cd2db9050813f3e5220f76e19f238709ad2d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857835": [
        {
            "ioc_value": "61c777c5071c8264412fe317f30e5c493ac7cc76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857836": [
        {
            "ioc_value": "b4a65477542b3799b10940edaca3067e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857832": [
        {
            "ioc_value": "c636be48524f1512a991121fc94f12c98c615907",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857833": [
        {
            "ioc_value": "445145d633ac80e6149cdb46374f2f45",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857834": [
        {
            "ioc_value": "a0c5ebaa47f0cf3d8cd695d66b8c5e5561afd30da1b2f4d73f3736dca35efba7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857828": [
        {
            "ioc_value": "fcbc96043c0217e9b62e9329d6b98ecf5223ee0e3976ed5ac83c263428c2d947",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-25 20:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857829": [
        {
            "ioc_value": "e205f23f4b70e461008a7a42c34ee70637469bc3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-25 20:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857830": [
        {
            "ioc_value": "79f30bbec34fbbd5fe391949dc6af0e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-25 20:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857831": [
        {
            "ioc_value": "9d213d633161dd70b082f47ff0a55cacdd37e871af84e9da17f8ab51555d764d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857825": [
        {
            "ioc_value": "cd62ae8b73fe8129e2912975108f4e9881b872a5e0219c880721c2107bfd4058",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857826": [
        {
            "ioc_value": "0efa9b13c5c572b41788ad56b12a23afec4a54d1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857827": [
        {
            "ioc_value": "9115bd384681bae8ad1fda391f0f3235",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857822": [
        {
            "ioc_value": "be14447b6480a1e999401100061a9c999992d96ec12eaaa86d796cf486d3db99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-25 20:41:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857823": [
        {
            "ioc_value": "f35652e55ae95e3052466f77f40f50d79e06c1ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-25 20:41:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857824": [
        {
            "ioc_value": "9d15fd606542c103035ec3a3b9ec8da8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-25 20:41:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857818": [
        {
            "ioc_value": "1dcab6f5621e7c3b7096bf817bf5ba5b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-25 20:41:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857819": [
        {
            "ioc_value": "fb161cc64fab576a19e3ccc99bcaf69b3960ab8929b0d636061514d7cdf1b06a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857820": [
        {
            "ioc_value": "0ccc478b227e512c6f327564991b9809326de394",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857821": [
        {
            "ioc_value": "c861ff93e1836ff9b0117fdf0960698d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857816": [
        {
            "ioc_value": "faad7b41abeef3da7099a6815d7799c647108a13d2fc397ab2ee468899c8a5c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-25 20:41:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857817": [
        {
            "ioc_value": "3038c746d4059f21c02b6ba0a3aa3a70ad1450ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-25 20:41:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857814": [
        {
            "ioc_value": "e3b01f8ad177a686c1bbb03243dbb7b67eb71039",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857815": [
        {
            "ioc_value": "f829810332b993b28f0a3f40cda8c589",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857811": [
        {
            "ioc_value": "5ecab726268a4266b456de337bf18ffbd9d5c8a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857812": [
        {
            "ioc_value": "fb1f416ee85327a14fcecae86e35eb67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857813": [
        {
            "ioc_value": "d15749f77571b9aeb35c82944783d149b45ef7a55a51fd36244be74a9d66c291",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857808": [
        {
            "ioc_value": "4a7de34a1f9f8409114172f4292d3b871e31fcfd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857809": [
        {
            "ioc_value": "0e95388031bc357808ae5c06bd70640b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857810": [
        {
            "ioc_value": "3ce59f9ba6c5ba98cace75c4d68e1e157b43d30747f4078a91d517a9f3b27e66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 20:41:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857805": [
        {
            "ioc_value": "2cbd66cd62b31653845333003ef13dcfc8bef529",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857806": [
        {
            "ioc_value": "e811e3e6d9e7ba41c7cd64e4d24999ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857807": [
        {
            "ioc_value": "d58ce6cac24a1c453f868afc0d2bc3e3cc32f430bd0c93be395f76c7de2d2fd8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 20:41:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857802": [
        {
            "ioc_value": "66a8114ae85628bf639b01fc3ce7e02a42baf356",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857803": [
        {
            "ioc_value": "a77d976fbff17ce256e18d5ad1935c48",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857804": [
        {
            "ioc_value": "e2da32f62c86eea0510dba268c1bd5a51e7bd6dd869a70089da2fa292e325e71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857798": [
        {
            "ioc_value": "f4c635ed4761ec8bf5f0b2355afee43110093952eb2b13441b64ac1a93bfbc40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857799": [
        {
            "ioc_value": "7bd71cc73d62bc6671436952e8e356e0a505fd08",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857800": [
        {
            "ioc_value": "e7b0885f84c96d3d3c5a133f6406d678",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857801": [
        {
            "ioc_value": "3de53a836a8bdfab5e23339d6fd8ac680beb6d6d7f8f7f81fcb53044a1fe2c97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857795": [
        {
            "ioc_value": "cbd39a1bfb6a591298418c026ac5499733abd16236f412e29082085c476dde49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857796": [
        {
            "ioc_value": "528a24284ae80aa10f3330c572100cd76143cfe7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857797": [
        {
            "ioc_value": "7c54db36b3f281e62fbeedcfc3df0334",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857792": [
        {
            "ioc_value": "19b21214dd78b3a065128d30499eb976921a41807219cee3e93a90923f1db155",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857793": [
        {
            "ioc_value": "f4d29f92fda5307d5a368d6099030e8575ee0b7c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857794": [
        {
            "ioc_value": "cf50721c59df8b48d1e5b7d52273de2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857789": [
        {
            "ioc_value": "3a11c263682f30013c8296fc6aaf0346033b48bd9aea2c4c9c1edbc2877622df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857790": [
        {
            "ioc_value": "1c80a2c8b2111b07edc9b403f35ea53350639cc4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857791": [
        {
            "ioc_value": "07b9dd4ef7ab29f740a0d38bac2b61b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857786": [
        {
            "ioc_value": "47377911b9784cf8379421a5da97eb06e3931d34ab87086e3384478b7893343c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857787": [
        {
            "ioc_value": "761ab02732bad4e6f5c9c8e7e5bac4845baf0099",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857788": [
        {
            "ioc_value": "a1afa2cf674e56a055b95de0a7c27d99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857784": [
        {
            "ioc_value": "689721272659366fd6530e584e885d928fdc8677",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857785": [
        {
            "ioc_value": "b67c8964f2cfa9ed322d586d8ba8089b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857781": [
        {
            "ioc_value": "8edc94d8b08d8d8e9d4c9a76303260230ab518e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857782": [
        {
            "ioc_value": "8cbef6881dc0e6869634c1c719220912",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857783": [
        {
            "ioc_value": "0696fd2ed2a522cd1ed53e2a99adae2c79db3ffc993c20155d936f355698f485",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857777": [
        {
            "ioc_value": "c45401463f0b09ee869597da52050a3beb89194c12c7f7a08b7bc7e44f425415",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857778": [
        {
            "ioc_value": "f1eafc4a285f140f19786d791c624526ae8b348e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857779": [
        {
            "ioc_value": "075ec71d3218db4742c584452a9dcdbf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857780": [
        {
            "ioc_value": "9b09f24903d7f94aeeb26b25c495f256692322a99e650fca4e886fa90c94b2dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857774": [
        {
            "ioc_value": "cfef64ebd87c672631f63f65e30f3b14815f690a8a922b38fbe34c3dffbdece1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857775": [
        {
            "ioc_value": "bedb6f847129f6ec5ec373507626c2c1e8e1382f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857776": [
        {
            "ioc_value": "3b23e3489c42b7d1dd895be45667ae06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857771": [
        {
            "ioc_value": "e62cc271c23df1c9473a6c6d486a76e5b1e429702e791aebbe7dfa5eecece0ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857772": [
        {
            "ioc_value": "39aeb3d1df69c8c8ac6d4b664471c6e7bed43498",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857773": [
        {
            "ioc_value": "7ceeb0955c8bd51f57b3ea264316e1ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857767": [
        {
            "ioc_value": "ceb87ea810e8222d416234bed15f36bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857768": [
        {
            "ioc_value": "364d3883e81da01bb449083552e5f1526ec734bdf40b27e71a4670fc3df12e76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xoriumstealer",
            "malware_alias": null,
            "malware_printable": "XoriumStealer",
            "first_seen_utc": "2026-07-25 20:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857769": [
        {
            "ioc_value": "e2a6ffb0fe3813eeda24cef74fe77f9c24714a40",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xoriumstealer",
            "malware_alias": null,
            "malware_printable": "XoriumStealer",
            "first_seen_utc": "2026-07-25 20:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857770": [
        {
            "ioc_value": "65c3aa0a48027921f2f94df9fd45c422",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xoriumstealer",
            "malware_alias": null,
            "malware_printable": "XoriumStealer",
            "first_seen_utc": "2026-07-25 20:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857766": [
        {
            "ioc_value": "fdc8f0f3428d410052019cef3c4a2f8820ade7f3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857762": [
        {
            "ioc_value": "d1385115e76ee9953b959bfb963aaee1a77a2862842b6995dc057fef332bac10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 20:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857763": [
        {
            "ioc_value": "5d2c70794598be26a77dcbdc009bd9730f4c67cf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 20:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857764": [
        {
            "ioc_value": "7503c336e6854e0fd68af9dca257b930",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 20:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857765": [
        {
            "ioc_value": "a7829a27c6c2f6d93cc7bcae6069a511a4c466ce3b99df09147a741477a4fcc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-25 20:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857759": [
        {
            "ioc_value": "31a762fdce1008e635a5e6486d7bc50b4bce671c9232006216e70cd8f2a4a7fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 20:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857760": [
        {
            "ioc_value": "bcb6ff58f5bda59e4f119d76f7ef21f7d55e9a2e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 20:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857761": [
        {
            "ioc_value": "0b905aa2442d333f5c3bccc3724a5d7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 20:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857757": [
        {
            "ioc_value": "bfdbd7aeeca0e7d995cac4a2567a18bcab1eca50",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857758": [
        {
            "ioc_value": "2c04e7af16f472c1354448f81b7a7ffe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857754": [
        {
            "ioc_value": "2a67068602cd24a96338010fb040eccd08b60aa3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857755": [
        {
            "ioc_value": "a5cd6f31554350d552c42dc0320c85cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857756": [
        {
            "ioc_value": "e76d373869783dc10414994a1f2a052f8740e257372f4d4de17615cde3c87a3f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857751": [
        {
            "ioc_value": "9b45d7455d950bf89bacd045a5b5545c2ede865e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857752": [
        {
            "ioc_value": "c7fe8f4f25bad097efcadcd798da0a46",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857753": [
        {
            "ioc_value": "2880c19f853059bae15a838d1320f728d3f681ff8bdfe22d455bc0335d317c7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857748": [
        {
            "ioc_value": "e313d6933faa4dda9cc8667d3c4926f0186249a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857749": [
        {
            "ioc_value": "7ed591cb63556c9df3ccc1077c9a434d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857750": [
        {
            "ioc_value": "2a5050ebca4c8fa135b80503d1d2bdf77ec30e8089cbd318a939888048957b55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857745": [
        {
            "ioc_value": "94a74afe4341f23d776410d413582e0f78110ec6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857746": [
        {
            "ioc_value": "0755a7cc6c033ed6f38280a4dd78c3e8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857747": [
        {
            "ioc_value": "93f44970a8af6f0f348f79843fb0e182d5057e4eb4e3a0623b1aebf27251fe5d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857743": [
        {
            "ioc_value": "b6ea03ecc9f09124603cfde6c0017483",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857744": [
        {
            "ioc_value": "cf426ee0da8f8907c42dfe264552ec560d5a97ff85ec7a7bf4518e773b19ce50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 20:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857740": [
        {
            "ioc_value": "1b27f8fc61f3c0d5798c71e88678c68a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 20:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857741": [
        {
            "ioc_value": "4f8df06e14378fef16c78183525ba7c0dbcc5176e92ae20102d6ea25dbccbf1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857742": [
        {
            "ioc_value": "44bc98bc9831d5a22e7dcddd7dbbb6387f9e17cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 20:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857738": [
        {
            "ioc_value": "bdabc7198cc94abbf0446bda43a21128c548f8fa3e039562502e308de3a890b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 20:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857739": [
        {
            "ioc_value": "783c6ce7d746798196c687e507a4be2f99b58618",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 20:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857737": [
        {
            "ioc_value": "mfusiv.marathonmktggroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 20:38:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857736": [
        {
            "ioc_value": "marathonmktggroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 20:33:38",
            "last_seen_utc": "2026-08-07 00:09:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857726": [
        {
            "ioc_value": "general-soft.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 19:56:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857725": [
        {
            "ioc_value": "82.158.88.41:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 19:46:06",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857724": [
        {
            "ioc_value": "46.246.12.2:6490",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-25 19:45:46",
            "last_seen_utc": "2026-08-25 08:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857723": [
        {
            "ioc_value": "37.244.233.190:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-07-25 19:45:29",
            "last_seen_utc": "2026-08-27 08:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857722": [
        {
            "ioc_value": "27.124.20.3:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 19:45:23",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857721": [
        {
            "ioc_value": "jqpamy.mapesandmapes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 19:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857720": [
        {
            "ioc_value": "2.27.248.209:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 19:44:25",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857719": [
        {
            "ioc_value": "185.147.83.59:48321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 19:44:10",
            "last_seen_utc": "2026-09-01 02:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857718": [
        {
            "ioc_value": "146.70.87.23:43225",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 19:43:34",
            "last_seen_utc": "2026-08-29 18:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857717": [
        {
            "ioc_value": "144.208.127.87:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 19:43:33",
            "last_seen_utc": "2026-08-30 18:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857716": [
        {
            "ioc_value": "141.255.164.33:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-25 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857715": [
        {
            "ioc_value": "103.67.163.201:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 19:43:11",
            "last_seen_utc": "2026-09-01 02:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857714": [
        {
            "ioc_value": "mapesandmapes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 19:43:05",
            "last_seen_utc": "2026-08-07 00:09:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857711": [
        {
            "ioc_value": "rujcmg.yummiquickway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 18:53:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857689": [
        {
            "ioc_value": "xiomtk.ushealthlaboratories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 18:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857688": [
        {
            "ioc_value": "reddirtpoolco.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:55:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857687": [
        {
            "ioc_value": "r0hgwsx0.kkslot777.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:47:29",
            "last_seen_utc": "2026-08-07 00:04:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857686": [
        {
            "ioc_value": "40p149hm.futuremillionaire.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857685": [
        {
            "ioc_value": "wiwrwkaotibzdwpqow.focus-logistics.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:17:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857684": [
        {
            "ioc_value": "76mh2tbp.eddieswindowtintca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:14:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857683": [
        {
            "ioc_value": "gtpglp.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:13:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857682": [
        {
            "ioc_value": "sblrss.lexsecurityco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:08:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857681": [
        {
            "ioc_value": "advfqnchgogjkqgxkf.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:08:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857675": [
        {
            "ioc_value": "yarwba4c.greatcarprofessionalwindowtint.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:05:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857673": [
        {
            "ioc_value": "cyfm90d8.ecryptobits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857672": [
        {
            "ioc_value": "lexsecurityco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 17:01:25",
            "last_seen_utc": "2026-08-07 00:09:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857620": [
        {
            "ioc_value": "shjwxe.lergothelabel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 16:35:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857616": [
        {
            "ioc_value": "zpxvxruzopmqahdvqyx.lergothelabel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 15:56:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857614": [
        {
            "ioc_value": "fjkgqdqgqetybhhwjue.lergothelabel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 15:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857613": [
        {
            "ioc_value": "lergothelabel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 15:52:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857611": [
        {
            "ioc_value": "contextio.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 15:20:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "credential-harvest,kit-backend,PayPalPhish",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857612": [
        {
            "ioc_value": "https://contextio.one/trfbvzqmny/assets/js/script.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 15:20:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "collector,PayPalPhish",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857610": [
        {
            "ioc_value": "206.119.165.20:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-25 15:05:07",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857607": [
        {
            "ioc_value": "gadumehgshipzmoknsb.lapalmaqassim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 15:03:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857606": [
        {
            "ioc_value": "lapalmaqassim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 15:02:09",
            "last_seen_utc": "2026-08-07 00:09:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857605": [
        {
            "ioc_value": "lantanaoftx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 14:52:10",
            "last_seen_utc": "2026-08-07 00:04:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857391": [
        {
            "ioc_value": "meow-rpc-mainnet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": "DrainerC2,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857392": [
        {
            "ioc_value": "aave-connect-dapp-layer-v124.vercel.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857393": [
        {
            "ioc_value": "reward-fluid.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857394": [
        {
            "ioc_value": "waitlist-theindex.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857395": [
        {
            "ioc_value": "apps-etherfi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857396": [
        {
            "ioc_value": "rewards-hyperlend.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857397": [
        {
            "ioc_value": "app-boros-pendle.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:49",
            "last_seen_utc": "2026-07-25 12:55:07",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857398": [
        {
            "ioc_value": "future-zebec.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857399": [
        {
            "ioc_value": "governances-onyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857400": [
        {
            "ioc_value": "uniswap-interface-connect-dapp-v496.vercel.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857401": [
        {
            "ioc_value": "vote.hub-ether.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857402": [
        {
            "ioc_value": "claims-zebec.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:32",
            "last_seen_utc": "2026-07-25 12:55:06",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857403": [
        {
            "ioc_value": "borosfinances-pendle.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857404": [
        {
            "ioc_value": "uniswap-interface-connect-dapp-v151.vercel.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857405": [
        {
            "ioc_value": "rewards-hyperlend.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857406": [
        {
            "ioc_value": "claim-mainstreets.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857407": [
        {
            "ioc_value": "rewards-fluid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857408": [
        {
            "ioc_value": "repegs-apyxfi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857409": [
        {
            "ioc_value": "register.snapshot-theindex.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857410": [
        {
            "ioc_value": "registration-theindex.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857411": [
        {
            "ioc_value": "aave-dapp-connect-interface-v114.vercel.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857412": [
        {
            "ioc_value": "voting-apyxfi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857413": [
        {
            "ioc_value": "rewards.fiuid.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857414": [
        {
            "ioc_value": "whitelist-ponsfamily.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857388": [
        {
            "ioc_value": "http://117.251.194.217:34712/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 14:51:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/117.251.194.217",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857415": [
        {
            "ioc_value": "supersapp-zebec.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857416": [
        {
            "ioc_value": "recompensate-apyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857417": [
        {
            "ioc_value": "votes-flaregovernance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857419": [
        {
            "ioc_value": "recompensations-apyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857418": [
        {
            "ioc_value": "flarenetworks-gov.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857420": [
        {
            "ioc_value": "borosfi-pendle.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857421": [
        {
            "ioc_value": "rewards-fluid.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857422": [
        {
            "ioc_value": "recompensations-apyx.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857423": [
        {
            "ioc_value": "governances-onyx.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857424": [
        {
            "ioc_value": "register-theindex.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857426": [
        {
            "ioc_value": "recompensation-apyx.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857425": [
        {
            "ioc_value": "claims-altura.trade",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857427": [
        {
            "ioc_value": "compensations-apyx.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857428": [
        {
            "ioc_value": "eligibility-apyx.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857430": [
        {
            "ioc_value": "eligibility-firelight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857429": [
        {
            "ioc_value": "flarenetwork.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857431": [
        {
            "ioc_value": "zebec-hq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857432": [
        {
            "ioc_value": "governace-flarenetwork.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857433": [
        {
            "ioc_value": "repegs-apyxfi.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857434": [
        {
            "ioc_value": "ledicadjc25ksdzv6e5n63ksfo2lx2rqrein4pkd7i5demnvfkfq.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857435": [
        {
            "ioc_value": "iu7fkd3u6ia5qnl3ug52bd6k4mfg74cee7in3h6mrtcybdp5mcda.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857436": [
        {
            "ioc_value": "claim-mainstreet.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857437": [
        {
            "ioc_value": "app.compensationaave.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857438": [
        {
            "ioc_value": "rewards-strata.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857439": [
        {
            "ioc_value": "season7-ethena.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857440": [
        {
            "ioc_value": "qyedp6vby4cdyvxrqj4hklcf5yjuepvq2gnovovbvpbngs323kxa.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857441": [
        {
            "ioc_value": "pools-flare.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857442": [
        {
            "ioc_value": "vote-flaregovernance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:05",
            "last_seen_utc": "2026-07-25 12:55:08",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857443": [
        {
            "ioc_value": "2k4qdiiwe3ons6j776cic2jfnclcmlorpanpzdtdsmg3g6scxela.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857444": [
        {
            "ioc_value": "live-zebec.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857445": [
        {
            "ioc_value": "superapp-zebecnetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:51:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857446": [
        {
            "ioc_value": "app-perpl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857447": [
        {
            "ioc_value": "dnsyu67tkqzvtu7efwl3itn32ffzb6gljaqcyu6wyg42dkm2ffsq.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857448": [
        {
            "ioc_value": "zpf3d3pi4skx4vl4gqei3jyxajdklkwerrenrifwnynye2vex3va.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857449": [
        {
            "ioc_value": "proposals-beefy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857450": [
        {
            "ioc_value": "repeg-apyx-fi.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:54",
            "last_seen_utc": "2026-07-25 12:55:12",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857452": [
        {
            "ioc_value": "foundation-firelight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857451": [
        {
            "ioc_value": "governance-flarenetwork.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857453": [
        {
            "ioc_value": "oip23-vote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857454": [
        {
            "ioc_value": "interests-merkl.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857455": [
        {
            "ioc_value": "flarenetwork-gover.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857456": [
        {
            "ioc_value": "taalswap.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857457": [
        {
            "ioc_value": "uniswap-dashboard-v4.ustorage3.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857458": [
        {
            "ioc_value": "morpho-v3-gate.alfluid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857459": [
        {
            "ioc_value": "usx.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857461": [
        {
            "ioc_value": "hyperliquid-v3-app.vstorag4.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857460": [
        {
            "ioc_value": "hyperliquid-dapp-v4.vstorag5.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857462": [
        {
            "ioc_value": "dapp-uniswap-org.vstorag3.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857463": [
        {
            "ioc_value": "signup-flarenetworks.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857464": [
        {
            "ioc_value": "otehaswvcc646ou4kozenrh4mfqyvntx6yrx6jdntilp5kbt7noq.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857465": [
        {
            "ioc_value": "vote-pharos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857466": [
        {
            "ioc_value": "track-secz.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857467": [
        {
            "ioc_value": "enroll-firelight.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857468": [
        {
            "ioc_value": "etherfi-vote.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857469": [
        {
            "ioc_value": "allocation-lienfi.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857470": [
        {
            "ioc_value": "distributions-edgex.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857471": [
        {
            "ioc_value": "stage-asterdex.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857472": [
        {
            "ioc_value": "votes-firelight.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857473": [
        {
            "ioc_value": "eventflareschain.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857474": [
        {
            "ioc_value": "votes-apyxfi.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857475": [
        {
            "ioc_value": "app-mon.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857476": [
        {
            "ioc_value": "reallocations-firelight.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857477": [
        {
            "ioc_value": "allocations-curve.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857478": [
        {
            "ioc_value": "enroll-ts.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857479": [
        {
            "ioc_value": "enroll-raac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857480": [
        {
            "ioc_value": "cowswap-gateway.ru2tor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857481": [
        {
            "ioc_value": "authconnection.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857482": [
        {
            "ioc_value": "uniswap-v3-connect.unsideo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857483": [
        {
            "ioc_value": "uniswap-v3-connect.foirpi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857484": [
        {
            "ioc_value": "allocations-grove.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857486": [
        {
            "ioc_value": "login-grvt.my",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857485": [
        {
            "ioc_value": "archipelago-mint.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857487": [
        {
            "ioc_value": "login-grvt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857488": [
        {
            "ioc_value": "kinetiq.today",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857489": [
        {
            "ioc_value": "5tars.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857490": [
        {
            "ioc_value": "polyceogiveaway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857491": [
        {
            "ioc_value": "vote-litebeam.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857492": [
        {
            "ioc_value": "votes-apyx.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857493": [
        {
            "ioc_value": "art-archepelago.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857494": [
        {
            "ioc_value": "infrax.network",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857495": [
        {
            "ioc_value": "2eyu3b27kwdqzna3f4mysr4orncup7i3guyygijsue3uwklajhva.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857496": [
        {
            "ioc_value": "memenopoly.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857497": [
        {
            "ioc_value": "build-flare.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857498": [
        {
            "ioc_value": "kinetiq-eligibility.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857500": [
        {
            "ioc_value": "governance-apyx.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857499": [
        {
            "ioc_value": "xamanxrpclaim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857501": [
        {
            "ioc_value": "felixuse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857502": [
        {
            "ioc_value": "virtualsvote.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857503": [
        {
            "ioc_value": "4pbnoncf5c2kzevec7g3nrhyuu4bq234gnwlso2nnebmij4di7ia.turbo-gateway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857504": [
        {
            "ioc_value": "theajack.github.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857505": [
        {
            "ioc_value": "snapshot-concrete.events",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857507": [
        {
            "ioc_value": "tas-staking.financial",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:50:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857506": [
        {
            "ioc_value": "archipelagosarts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857508": [
        {
            "ioc_value": "gcteway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857509": [
        {
            "ioc_value": "roe.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857510": [
        {
            "ioc_value": "gvtewcy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857511": [
        {
            "ioc_value": "vote-apyx-fi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857512": [
        {
            "ioc_value": "gvteway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857513": [
        {
            "ioc_value": "enter-flare.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857514": [
        {
            "ioc_value": "gateway3s.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857515": [
        {
            "ioc_value": "g4teway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857516": [
        {
            "ioc_value": "mintswap.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857517": [
        {
            "ioc_value": "gover-apyx.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857518": [
        {
            "ioc_value": "revokes-humanity.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857519": [
        {
            "ioc_value": "stabilizer-finance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857520": [
        {
            "ioc_value": "vote-quant.network",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857521": [
        {
            "ioc_value": "rewards-zebec.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857522": [
        {
            "ioc_value": "vote-tradexyz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857523": [
        {
            "ioc_value": "users-flare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857524": [
        {
            "ioc_value": "dao-etherfi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857525": [
        {
            "ioc_value": "compensations-apyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857526": [
        {
            "ioc_value": "compensation-apyx.fi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857527": [
        {
            "ioc_value": "vote-3jane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857528": [
        {
            "ioc_value": "www.alturaxtrade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:48",
            "last_seen_utc": "2026-07-25 12:55:12",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857529": [
        {
            "ioc_value": "votes-apyx.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857530": [
        {
            "ioc_value": "multiplifoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857531": [
        {
            "ioc_value": "voting-apyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857532": [
        {
            "ioc_value": "app-ondofinance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:49:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857604": [
        {
            "ioc_value": "pnmkrcwqczsldwhvvpb.lakshmiinteriordesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 14:48:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857603": [
        {
            "ioc_value": "lakshmiinteriordesigns.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 14:43:07",
            "last_seen_utc": "2026-08-07 00:04:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857602": [
        {
            "ioc_value": "lacajunseafoodorlando.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 14:40:32",
            "last_seen_utc": "2026-08-07 00:04:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857533": [
        {
            "ioc_value": "apyxfoundation.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857534": [
        {
            "ioc_value": "proposal-ondofinance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857535": [
        {
            "ioc_value": "allocation-flarefoundation.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857536": [
        {
            "ioc_value": "trugly.meme",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857537": [
        {
            "ioc_value": "perps.fun-apply.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857538": [
        {
            "ioc_value": "registers-keeta.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857539": [
        {
            "ioc_value": "dashboard-railgun.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857540": [
        {
            "ioc_value": "archepilago-art.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857541": [
        {
            "ioc_value": "e43hciingepfdx74bsmy3z537tkumjvkzk2lpp6ixvsblwdgnsda.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857542": [
        {
            "ioc_value": "interface-flare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857543": [
        {
            "ioc_value": "phoenixswap.trade",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857544": [
        {
            "ioc_value": "votes-etherfi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857545": [
        {
            "ioc_value": "proposals-unipeg.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857546": [
        {
            "ioc_value": "vote-ondofinance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857547": [
        {
            "ioc_value": "quackpad.meme",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857548": [
        {
            "ioc_value": "ltqpvf3ugbvxvlvyufeppnh5nlt7h5mqnwyapq62m73ibhptwjka.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857549": [
        {
            "ioc_value": "vote-alturatrade.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857550": [
        {
            "ioc_value": "app-apyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857551": [
        {
            "ioc_value": "vote-lido.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857552": [
        {
            "ioc_value": "votings-etherfi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857553": [
        {
            "ioc_value": "repeg-apyxfi.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857554": [
        {
            "ioc_value": "multipliers-kinetiq.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857555": [
        {
            "ioc_value": "humanity-revoke.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857556": [
        {
            "ioc_value": "proposal-lido.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857557": [
        {
            "ioc_value": "app-grassfoundation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857558": [
        {
            "ioc_value": "zvhaeih3b7jx5lshsid3l4ecrtchz6ilvg5kdwxkwluaimbhv3ta.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857559": [
        {
            "ioc_value": "rebalance.finance",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857560": [
        {
            "ioc_value": "event-unipeg.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857561": [
        {
            "ioc_value": "governance-ethenafi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857562": [
        {
            "ioc_value": "updates-onyx.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857563": [
        {
            "ioc_value": "c5375w2iro4ewj23oukm6yd63wma5zuv6nhmh4qrlkjrhdijgkca.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857564": [
        {
            "ioc_value": "reallocations-tea.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857565": [
        {
            "ioc_value": "app-flarenetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857566": [
        {
            "ioc_value": "proposal-3jane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857567": [
        {
            "ioc_value": "xcn-onyx.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857569": [
        {
            "ioc_value": "governance-asterdex.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857568": [
        {
            "ioc_value": "hq2i7vmfsx47r5csgyxhrelovd2ns3dhjqk7f5l3u66ysffsypuq.arweave.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857570": [
        {
            "ioc_value": "season-flarenetwork.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857571": [
        {
            "ioc_value": "citrea-quests.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857572": [
        {
            "ioc_value": "keeta-votes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857573": [
        {
            "ioc_value": "proposal-ethena.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857574": [
        {
            "ioc_value": "vote-markets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857575": [
        {
            "ioc_value": "flarehubfxrp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857576": [
        {
            "ioc_value": "rewards-etherfi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857577": [
        {
            "ioc_value": "proposal-saharaai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857578": [
        {
            "ioc_value": "voting-ondofinance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857579": [
        {
            "ioc_value": "fb2wzfzy6tcssbuppn34uay6b677cohvpuubsyehtb7jl7oxy2fq.turbo-gateway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857580": [
        {
            "ioc_value": "app-unipeg.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857581": [
        {
            "ioc_value": "voting-unipeg.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857582": [
        {
            "ioc_value": "fonts-css2-sans.b-cdn.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857583": [
        {
            "ioc_value": "data-image-svg--base64.b-cdn.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:39:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "DeFi-phish,meow-rpc,WalletDrainer",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1857592": [
        {
            "ioc_value": "https://silenttunnelzone.top/token/token-controller.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 14:38:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857593": [
        {
            "ioc_value": "silenttunnelzone.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 14:38:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857601": [
        {
            "ioc_value": "176.9.164.115:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:06:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857599": [
        {
            "ioc_value": "43.156.82.119:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-25 14:05:08",
            "last_seen_utc": "2026-08-22 00:03:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857596": [
        {
            "ioc_value": "felicitatgs.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 14:04:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857595": [
        {
            "ioc_value": "prowastevalet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 14:00:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857594": [
        {
            "ioc_value": "kupubedding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 13:50:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857591": [
        {
            "ioc_value": "https://appelt.me/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 13:30:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/appelt.me",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857590": [
        {
            "ioc_value": "authorization-code-cdn.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 13:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857589": [
        {
            "ioc_value": "pol.1000boger.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 13:07:55",
            "last_seen_utc": "2026-07-27 08:04:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857585": [
        {
            "ioc_value": "bahawuldzslcqfvhkgi.krushburger.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 13:02:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857584": [
        {
            "ioc_value": "krushburger.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:59:31",
            "last_seen_utc": "2026-08-07 00:04:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857390": [
        {
            "ioc_value": "3ivn3wjq.eastcoastseafoodsupply.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:46:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857389": [
        {
            "ioc_value": "149.28.158.66:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-25 12:33:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857387": [
        {
            "ioc_value": "45.74.3.37:5001",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 12:16:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,ssh",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1857357": [
        {
            "ioc_value": "https://brackenfolio.top/acl/principal-payload.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857359": [
        {
            "ioc_value": "http://67.215.232.25:1337/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.rubeus",
            "malware_alias": null,
            "malware_printable": "Rubeus",
            "first_seen_utc": "2026-07-25 12:14:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857360": [
        {
            "ioc_value": "93.95.231.114:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-25 12:14:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857372": [
        {
            "ioc_value": "velvetcrossing.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857375": [
        {
            "ioc_value": "heatherkiln.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:21",
            "last_seen_utc": "2026-07-30 09:55:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857373": [
        {
            "ioc_value": "sagearcade.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857374": [
        {
            "ioc_value": "cometparapet.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857376": [
        {
            "ioc_value": "thistleobservatory.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857377": [
        {
            "ioc_value": "brackenfolio.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857378": [
        {
            "ioc_value": "quasarcolonnade.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 12:14:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857384": [
        {
            "ioc_value": "25zuxmtq.futuremillionaire.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:11:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857383": [
        {
            "ioc_value": "mdmiyjtnknlwwxsqnjz.krodelinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:09:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857382": [
        {
            "ioc_value": "krodelinc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:09:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857371": [
        {
            "ioc_value": "dxlpwkngtibmmdwjnqf.krautodetailing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:01:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857370": [
        {
            "ioc_value": "krautodetailing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:00:59",
            "last_seen_utc": "2026-07-30 07:57:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857369": [
        {
            "ioc_value": "wvvyvhcadohpdpahcds.home-eye-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 12:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857368": [
        {
            "ioc_value": "91.92.243.161:3038",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:56:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5/",
            "tags": "dropped-by-ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857367": [
        {
            "ioc_value": "https://dntds.shop/teamrepo",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:56:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5/",
            "tags": "dropped-by-ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857365": [
        {
            "ioc_value": "digitalenterprise2026.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:56:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5/",
            "tags": "dropped-by-ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857366": [
        {
            "ioc_value": "dntds.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:56:54",
            "last_seen_utc": "2026-07-30 15:00:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6270f38bdf27aebb108331a484220a8bc0b9a1e6a2c4bba6dad89a2f3665bca5/",
            "tags": "dropped-by-ClickFix",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857364": [
        {
            "ioc_value": "home-eye-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 11:54:52",
            "last_seen_utc": "2026-08-07 00:04:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857363": [
        {
            "ioc_value": "38.54.89.235:6688",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-25 11:46:12",
            "last_seen_utc": "2026-08-27 12:48:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857362": [
        {
            "ioc_value": "117.28.246.18:8067",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-25 11:45:55",
            "last_seen_utc": "2026-08-31 12:48:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857361": [
        {
            "ioc_value": "yeduinjrluvnlpfdech.guardyapps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 11:40:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857358": [
        {
            "ioc_value": "abuzuvnfwsogjarbfqv.grupostelegrambrasil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 11:31:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857355": [
        {
            "ioc_value": "https://thistleobservatory.top/oauth/reset-dom.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 11:17:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857349": [
        {
            "ioc_value": "https://cometparapet.top/alias/metrics-render.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 11:17:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857354": [
        {
            "ioc_value": "https://heatherkiln.top/router/admin-bundle.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 11:17:53",
            "last_seen_utc": "2026-07-30 09:55:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1857356": [
        {
            "ioc_value": "wmqrmnaqwmbverkhryd.greenpulselandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 11:15:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857353": [
        {
            "ioc_value": "38.76.203.127:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-25 11:08:53",
            "last_seen_utc": "2026-07-29 05:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857352": [
        {
            "ioc_value": "107.172.199.28:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-25 11:08:51",
            "last_seen_utc": "2026-07-30 12:05:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857351": [
        {
            "ioc_value": "103.146.231.107:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-25 11:08:39",
            "last_seen_utc": "2026-07-28 11:05:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857350": [
        {
            "ioc_value": "qlvnzgygqgnfcrduhuw.holisticpaws.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 11:07:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857345": [
        {
            "ioc_value": "https://sagearcade.top/alias/router-fetch.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-07-25 11:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1856849": [
        {
            "ioc_value": "errjothcxmklspp.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-25 11:04:14",
            "last_seen_utc": "2026-08-14 02:20:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1856848": [
        {
            "ioc_value": "errakgrwenmjibedi.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-25 11:04:13",
            "last_seen_utc": "2026-08-14 02:20:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1856846": [
        {
            "ioc_value": "clouderfaster.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-25 11:04:12",
            "last_seen_utc": "2026-08-14 02:20:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1856847": [
        {
            "ioc_value": "clouderrtufjcb.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-25 11:04:12",
            "last_seen_utc": "2026-08-14 02:20:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1856860": [
        {
            "ioc_value": "http://190.115.80.35:49166/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/190.115.80.35",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856861": [
        {
            "ioc_value": "http://27.213.25.110:48423/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.213.25.110",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856862": [
        {
            "ioc_value": "http://153.117.7.16:41154/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.7.16",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856878": [
        {
            "ioc_value": "https://irahook.lol/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856879": [
        {
            "ioc_value": "https://irahook.lol/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856880": [
        {
            "ioc_value": "https://irahook.lol/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856881": [
        {
            "ioc_value": "https://irahook.lol/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856883": [
        {
            "ioc_value": "http://144.202.28.97:1337/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:51",
            "last_seen_utc": "2026-07-25 20:09:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856884": [
        {
            "ioc_value": "http://144.202.28.97:1337/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:50",
            "last_seen_utc": "2026-07-25 20:09:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856885": [
        {
            "ioc_value": "http://144.202.28.97:1337/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:50",
            "last_seen_utc": "2026-07-25 20:09:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856886": [
        {
            "ioc_value": "http://144.202.28.97:1337/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:49",
            "last_seen_utc": "2026-07-25 20:09:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856888": [
        {
            "ioc_value": "irahook.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-25 11:02:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857002": [
        {
            "ioc_value": "167.172.80.107:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-25 11:02:45",
            "last_seen_utc": "2026-07-28 15:54:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857024": [
        {
            "ioc_value": "218.59.87.198:34687",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:02:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,ssh",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857025": [
        {
            "ioc_value": "http://103.82.121.232:60560/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.82.121.232",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857026": [
        {
            "ioc_value": "http://223.123.43.4:35093/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.4",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857245": [
        {
            "ioc_value": "2.26.136.128:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:02:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,ssh",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857234": [
        {
            "ioc_value": "168.144.135.136:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-25 11:02:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857246": [
        {
            "ioc_value": "198.98.53.100:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-25 11:02:40",
            "last_seen_utc": "2026-08-28 11:49:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857261": [
        {
            "ioc_value": "175.107.12.59:56792",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:02:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,ssh",
            "anonymous": 0,
            "reporter": "TawnyBalfour"
        }
    ],
    "1857263": [
        {
            "ioc_value": "http://14.205.104.200:46877/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.205.104.200",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857264": [
        {
            "ioc_value": "http://153.117.8.55:51249/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-25 11:02:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.8.55",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1857289": [
        {
            "ioc_value": "185.207.250.180:7752",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-25 11:02:39",
            "last_seen_utc": "2026-07-31 06:19:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,d2e8dbb0cdaea9c3f19458445a2d56e3,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857301": [
        {
            "ioc_value": "194.48.251.116:8080",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-25 11:02:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1857318": [
        {
            "ioc_value": "nexus-mods.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:02:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1857320": [
        {
            "ioc_value": "xenoware.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:02:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1857326": [
        {
            "ioc_value": "figural.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 11:02:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1857327": [
        {
            "ioc_value": "159.223.11.72:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:34",
            "last_seen_utc": "2026-07-30 09:43:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857328": [
        {
            "ioc_value": "188.166.57.9:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:33",
            "last_seen_utc": "2026-07-30 09:44:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857329": [
        {
            "ioc_value": "146.190.238.139:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:32",
            "last_seen_utc": "2026-07-30 09:43:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857330": [
        {
            "ioc_value": "134.122.54.91:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:32",
            "last_seen_utc": "2026-07-30 09:44:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857331": [
        {
            "ioc_value": "167.99.34.227:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:31",
            "last_seen_utc": "2026-07-30 09:45:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857332": [
        {
            "ioc_value": "142.93.238.3:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:30",
            "last_seen_utc": "2026-07-30 09:44:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857333": [
        {
            "ioc_value": "167.172.38.19:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:30",
            "last_seen_utc": "2026-07-30 09:43:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857334": [
        {
            "ioc_value": "178.62.253.180:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:29",
            "last_seen_utc": "2026-07-30 09:44:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857335": [
        {
            "ioc_value": "134.209.81.248:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:29",
            "last_seen_utc": "2026-07-30 09:43:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857336": [
        {
            "ioc_value": "134.209.93.74:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-25 11:02:28",
            "last_seen_utc": "2026-07-30 09:44:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1857337": [
        {
            "ioc_value": "77.42.23.173:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 11:02:25",
            "last_seen_utc": "2026-08-24 13:22:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d9adcb653a222351652077abc838e027fa814f120741c7fb4f14d71d03f9fa0/",
            "tags": "c2,OverlordRAT",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1857338": [
        {
            "ioc_value": "194.59.30.31:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-25 11:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/20541efb895ad4079d4dbd7234c661c15b77d67085d67a0582a1b80fa093c16b/",
            "tags": "c2,OverlordRAT",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1857342": [
        {
            "ioc_value": "160.20.109.5:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-25 11:02:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/813f98fa393632b4a6e50d5ed613cf0716732bf159687dd5380794f7d65e7115/",
            "tags": "exfil,Stealc,StealcV2",
            "anonymous": 0,
            "reporter": "Packet"
        }
    ],
    "1857343": [
        {
            "ioc_value": "3bff059c64e6c65f02913352c7d1c28e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 11:02:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857344": [
        {
            "ioc_value": "114.132.190.121:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 11:02:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857341": [
        {
            "ioc_value": "vridvtsirtfyzwznywh.holisticpaws.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 10:49:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857340": [
        {
            "ioc_value": "holisticpaws.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 10:47:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857339": [
        {
            "ioc_value": "157.20.182.21:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 10:43:43",
            "last_seen_utc": "2026-08-24 08:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857321": [
        {
            "ioc_value": "jttzkkuxkidqijhwscb.hoganshideoutstorage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 10:02:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857319": [
        {
            "ioc_value": "hoganshideoutstorage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 09:57:08",
            "last_seen_utc": "2026-08-07 00:04:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857317": [
        {
            "ioc_value": "74.249.84.175:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:46:00",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857316": [
        {
            "ioc_value": "51.107.74.185:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:45:51",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857315": [
        {
            "ioc_value": "46.246.12.2:2003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-25 09:45:47",
            "last_seen_utc": "2026-08-27 18:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857313": [
        {
            "ioc_value": "31.76.96.194:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-25 09:45:30",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857314": [
        {
            "ioc_value": "31.76.96.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-25 09:45:30",
            "last_seen_utc": "2026-09-01 02:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857311": [
        {
            "ioc_value": "27.124.20.5:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:45:27",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857312": [
        {
            "ioc_value": "27.124.20.6:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:45:27",
            "last_seen_utc": "2026-09-01 02:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857310": [
        {
            "ioc_value": "207.57.123.129:43211",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:44:42",
            "last_seen_utc": "2026-09-01 02:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857308": [
        {
            "ioc_value": "2.27.28.207:42153",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:44:36",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857309": [
        {
            "ioc_value": "2.27.29.171:42216",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:44:36",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857307": [
        {
            "ioc_value": "196.251.107.131:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857306": [
        {
            "ioc_value": "182.161.12.169:8050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-07-25 09:44:18",
            "last_seen_utc": "2026-08-24 18:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857305": [
        {
            "ioc_value": "146.103.38.224:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 09:43:31",
            "last_seen_utc": "2026-08-24 18:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857304": [
        {
            "ioc_value": "144.172.118.84:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857303": [
        {
            "ioc_value": "119.28.212.86:44321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 09:43:20",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857302": [
        {
            "ioc_value": "103.67.163.201:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857299": [
        {
            "ioc_value": "nqixxkzxfwilzlsrtuh.hoerster-law.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 09:07:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857300": [
        {
            "ioc_value": "driveponsphoto.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-25 09:07:58",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857298": [
        {
            "ioc_value": "hoerster-law.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 09:07:09",
            "last_seen_utc": "2026-08-07 00:04:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857294": [
        {
            "ioc_value": "nkpasngyxrwqltesruj.hibridgedispensary.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 08:37:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857290": [
        {
            "ioc_value": "hakdfgklsdk833ksd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-25 08:19:58",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857291": [
        {
            "ioc_value": "photo-drivedisk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-25 08:19:58",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857292": [
        {
            "ioc_value": "jokesprite.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-25 08:19:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857293": [
        {
            "ioc_value": "haobbao.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-25 08:19:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857288": [
        {
            "ioc_value": "myzcyjdkacfxmpndgou.hibridgedispensary.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 08:11:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857287": [
        {
            "ioc_value": "hibridgedispensary.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 08:07:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857286": [
        {
            "ioc_value": "papilawdns.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-25 08:05:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/748c32e3718319e569d7a71eab5ace7589ed012764902b55475faab82a63c89b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857281": [
        {
            "ioc_value": "eu959ilm.eandrconstructionllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 07:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857280": [
        {
            "ioc_value": "https://pol.1000boger.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 07:30:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pol.1000boger.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857279": [
        {
            "ioc_value": "itpysxfajhrtpnfwacr.herbscutsandolives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 07:21:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857278": [
        {
            "ioc_value": "herbscutsandolives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 07:21:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857277": [
        {
            "ioc_value": "3rb3eyir.ewagajewskamd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 07:09:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857272": [
        {
            "ioc_value": "58.96.75.176:15151",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-25 07:00:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e5bccb979fef3945c64622c6ad4461947eca123465f2989d9f4af879fd467890/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857271": [
        {
            "ioc_value": "pol.1000boger.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:40:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857270": [
        {
            "ioc_value": "wninxnvywnwkijlyypj.heavenlybeautysupplyca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:32:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857269": [
        {
            "ioc_value": "heavenlybeautysupplyca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:30:27",
            "last_seen_utc": "2026-08-07 00:04:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857268": [
        {
            "ioc_value": "laedosavzmdtqvtxfly.hawaiistateofmind.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:26:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857267": [
        {
            "ioc_value": "hawaiistateofmind.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:25:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857266": [
        {
            "ioc_value": "onmekcsdnvzwzvkynlt.happydragonchinesebistro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:24:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857265": [
        {
            "ioc_value": "gpnsfzvzqphjpluvmsr.happydragonchinesebistro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857262": [
        {
            "ioc_value": "happydragonchinesebistro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 06:18:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857258": [
        {
            "ioc_value": "fwhfjfzgsjtulsustel.hallenterpriseshvac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 05:51:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857257": [
        {
            "ioc_value": "hallenterpriseshvac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 05:51:08",
            "last_seen_utc": "2026-08-07 00:04:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857256": [
        {
            "ioc_value": "gulfportlittletheatre.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 05:46:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857255": [
        {
            "ioc_value": "tfmdhbvfudvpvrrhcei.gulfgoldrates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 05:31:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857254": [
        {
            "ioc_value": "gulfgoldrates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 05:28:46",
            "last_seen_utc": "2026-08-07 00:04:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857249": [
        {
            "ioc_value": "drnfrptutxnwhaulrpb.guardyapps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 04:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857248": [
        {
            "ioc_value": "guardyapps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 04:37:37",
            "last_seen_utc": "2026-08-07 00:04:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857247": [
        {
            "ioc_value": "zjrprtahpzhaxu.grupostelegrambrasil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 04:34:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857244": [
        {
            "ioc_value": "gxxlwikfxmyuci.grupostelegrambrasil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 04:16:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857243": [
        {
            "ioc_value": "grupostelegrambrasil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 04:11:12",
            "last_seen_utc": "2026-08-07 00:04:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857238": [
        {
            "ioc_value": "dxuqwuwuofecqgqgb.greenpulselandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 03:36:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857237": [
        {
            "ioc_value": "greenpulselandscaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 03:31:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857236": [
        {
            "ioc_value": "appujqrcbzsmxdjcs.greatcarprofessionalwindowtint.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 03:23:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857235": [
        {
            "ioc_value": "greatcarprofessionalwindowtint.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 03:23:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857233": [
        {
            "ioc_value": "rybcodduchgohassl.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 03:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857228": [
        {
            "ioc_value": "a6ybbuqh.eaglepasstoday.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 02:45:04",
            "last_seen_utc": "2026-08-07 00:04:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857227": [
        {
            "ioc_value": "dnxmrhdnqiybpdmia.infinityjoespizzaclearwater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 02:19:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857226": [
        {
            "ioc_value": "ck480ptk.everunningshoes.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 02:07:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857220": [
        {
            "ioc_value": "mxupckbdbtfegebvo.jungle-prada-tavern.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 01:28:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857218": [
        {
            "ioc_value": "8bc62193a60f3d63e0e56d4564d08a12fae7036b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:24:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857219": [
        {
            "ioc_value": "c5d14331d0910a8d4d724b3c00329ced",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:24:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857216": [
        {
            "ioc_value": "844316e11edc801dcad57532a47d45e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857217": [
        {
            "ioc_value": "81775ecf00ef60ef088c4d79d37ad60154dcc43bc8edce4ec56bb509331feaa8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857215": [
        {
            "ioc_value": "5dec3afbd81e113a798be61868d1a4835c3ecb6c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857213": [
        {
            "ioc_value": "8498ec75a9609ce1d1a27138fccf246a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-25 01:23:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857214": [
        {
            "ioc_value": "4132a264cf4d25b6b9104fb6332f9a082e354abf96486c34a07cf5e32277dfd3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857212": [
        {
            "ioc_value": "0bc36272c7b85c9b61ea7774a9aade9c6da49d4b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-25 01:23:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857211": [
        {
            "ioc_value": "e2ade9d3303ff03e5e73c8d90da926e3c2390aa3698924d2397c692138c9a141",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-25 01:23:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857208": [
        {
            "ioc_value": "d615bb89afdae1f96c6f60522ddd87e9de781a0826a9070f822c1f344bc86cce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857209": [
        {
            "ioc_value": "4d989e8a514dc79e4622114d0bb40f9dd90d4f3c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857210": [
        {
            "ioc_value": "5dae1853a24173ae60859c7ce246ff3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857204": [
        {
            "ioc_value": "4b2911bf6128350411e6dd6b676a1148",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857205": [
        {
            "ioc_value": "a414b6ef203d4320665d72cf43e98fefbd451123a2c7f10a56728a2cc207ced7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857206": [
        {
            "ioc_value": "4075db854bef2e4a9b402515859bbad9477d53ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857207": [
        {
            "ioc_value": "e691d9c99d46ee5ef886a9e276d8def9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857201": [
        {
            "ioc_value": "fb26fdde000d289ac423f5dd74865e43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857202": [
        {
            "ioc_value": "8c2ca1c6a2ecf606ceb778ecc9928508727dc36598426e958da23b72cb6368e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857203": [
        {
            "ioc_value": "6560d48b4bc94813b44a42865d30b44689a0f7e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857198": [
        {
            "ioc_value": "9e04e38658dc4c764ec10e04a9d50931",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857199": [
        {
            "ioc_value": "51816d9ac510766a54a0cc31569c5fd97b46742e0de82f18854ea042bfdfdf7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857200": [
        {
            "ioc_value": "546a20ebd21328f86293ac94bc59b00a5c6f8426",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857195": [
        {
            "ioc_value": "d01940a0ebe8fd39c5358f39f069c1cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857196": [
        {
            "ioc_value": "0d542dca2b2948549a23cc166a3da8d599ea976fbc14506468ae9c2d32e34d70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857197": [
        {
            "ioc_value": "3bc0486e1f918766dc29d19c8775e3bf720f8148",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857191": [
        {
            "ioc_value": "8aee9c6f38a36f3858373c256b6b8b63e1420a2d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857192": [
        {
            "ioc_value": "6a7608923c0a47054ae9d9f0347b88e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857193": [
        {
            "ioc_value": "7318f13b8621a236a1fad39d95ef779c6d3900ad10bb92997344931e51514306",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857194": [
        {
            "ioc_value": "70c444e2ee2b93d2ee076dd5c4b17a1dc5cd9cf9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857189": [
        {
            "ioc_value": "a5f3d83774db7701a2dcc96cd42f09c3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857190": [
        {
            "ioc_value": "fda7ac256b2ff4c9e67a39f0fd307ea4b729386583a60767df2f148fdf8369c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857187": [
        {
            "ioc_value": "88785d2cf9afe24c80d363250875fe5e73d1c3232c8e66053ad2187eeacad97d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857188": [
        {
            "ioc_value": "0f80690852a929322e1975d6968181fba4598e14",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857184": [
        {
            "ioc_value": "0beaa5ce9a409e12323af1630a44f6d61fb309f7f5f377b849588fa53241a884",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857185": [
        {
            "ioc_value": "c7c41e39c11b5cb69227a2b94bef71b3a395abfa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857186": [
        {
            "ioc_value": "b290f01d4988ccb3b0d67b89b79a3c63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857182": [
        {
            "ioc_value": "d32bce7bdaae8b09c87e99657338ff8ac1befadd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857183": [
        {
            "ioc_value": "6fdfafd6ee99b1da17f1a01be789957d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857179": [
        {
            "ioc_value": "1b5660a17955bd0a20ab8ee084395f2c05bbfae3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 01:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857180": [
        {
            "ioc_value": "d29fb7ad2a20bea506c8c3776e90707e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 01:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857181": [
        {
            "ioc_value": "c9dd2738abd8d9e66c00c2fe7affd710869b5a3232de632c00f5e67fd541cf39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857176": [
        {
            "ioc_value": "9f95f9844c3664d5d417c89f792e4f285b479d5b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-25 01:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857177": [
        {
            "ioc_value": "b37a599f17c660f832628237aab5eeee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-25 01:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857178": [
        {
            "ioc_value": "e77b0473ee512fa6121b864bc0e7003ef3fffda2e7a612941a10a8d6c83c68a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 01:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857174": [
        {
            "ioc_value": "8c2b56e131814f9db398deb1de15e67e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857175": [
        {
            "ioc_value": "cda225a090416e0c63da5a077d04b6478a175ef5c668205d70563e0f81717608",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-25 01:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857172": [
        {
            "ioc_value": "70b84b94aa20a52bbb225f76fcb9b7a66c1733ff6665f13fedb5e93645205a9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857173": [
        {
            "ioc_value": "3e5ffafb3f176acc56c78e80252bf604a8bd9b2d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857169": [
        {
            "ioc_value": "bfea7c0e2bc57ed3bfe5802377ca3c7545c11c39f13eafaac4fac69815fb63bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857170": [
        {
            "ioc_value": "d3433ca6fab5aecf1d76701cdc1d873e787fa567",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857171": [
        {
            "ioc_value": "09fa7ed361b397cd789e18708fc43247",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857167": [
        {
            "ioc_value": "b296953446d3161e61e3982c8c66d68f1295f788",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-25 01:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857168": [
        {
            "ioc_value": "3c9852c53cb45221886b34ed6bc7d674",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-25 01:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857164": [
        {
            "ioc_value": "1842a1f367d7c8e94e10dd14fab2e07449f9bc52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-25 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857165": [
        {
            "ioc_value": "da3734f8176354f8f88f17651e56e91b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-25 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857166": [
        {
            "ioc_value": "f273dfb134166251f00456f8fcff32a827afa03781794f8071281dcadc37b444",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-25 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857161": [
        {
            "ioc_value": "382691f2d43661110ad9f015d55427f446719ec0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857162": [
        {
            "ioc_value": "2f03381aa105015dc380dbf4e4d0e627",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857163": [
        {
            "ioc_value": "1a02f5724eaaa775d4718dd266d630b1f8cdbc218516c0afd70800240a07a150",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-25 01:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857160": [
        {
            "ioc_value": "3e5d5288ddfe5d8ad18232a0eb36a4f0d52660c3978b33bc5e9563a217a282c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857159": [
        {
            "ioc_value": "39eada3add49de8e03fcf8e1ba6a6867",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 01:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857157": [
        {
            "ioc_value": "15aa295d5813222fa61a93353873700422c64da1580e91cee02681df566829cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 01:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857158": [
        {
            "ioc_value": "877b3e94b550f4a2dd0258d05f5c67d21c69ced4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 01:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857154": [
        {
            "ioc_value": "e73c81b0befddfe58f2472dd3a2468d102caacc7cd71a7793b732efa3fdd05d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857155": [
        {
            "ioc_value": "9d0462015be177d700801a1316b8d983d80a4b2c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857156": [
        {
            "ioc_value": "78e88d6e7810b936cb1091a196685dcc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857150": [
        {
            "ioc_value": "ea1d7482d38e9420924ef243be1dcb05",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857151": [
        {
            "ioc_value": "6676d5e22b863ebd48973809e2c2765b8523d0da242efb036fd22379f401b9ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857152": [
        {
            "ioc_value": "26c6acbd6fdca3ea071a8cef73179d81949dc806",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857153": [
        {
            "ioc_value": "4160841a6ca859f654a6536b66c759fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-25 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857147": [
        {
            "ioc_value": "f6efa0664124c473f15c7403a40c3e67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 01:23:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857148": [
        {
            "ioc_value": "6eb8fdc61560a8a33d3b896e304954ab4fe6ca990a86cd2e33dfb9ccdd6effc6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 01:23:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857149": [
        {
            "ioc_value": "b0ec55cc2ab874848c0eaa665302c85f8a4cf6b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 01:23:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857144": [
        {
            "ioc_value": "86d6f85e4756874b1fdf18da35a4265f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857145": [
        {
            "ioc_value": "86fe031101b19d7f9ca74392f638684715447baded94d81ef62799d0b72b4057",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 01:23:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857146": [
        {
            "ioc_value": "67cec9eea133d5365f95dd1f0fd5ba812b69b6f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 01:23:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857141": [
        {
            "ioc_value": "f158a9b0f0f5bebaa35f1961717ff609",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857142": [
        {
            "ioc_value": "ce5ddcb42bd658184f34c6f2522295eaa252dd578270ceaf9454b7e2cc82e104",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857143": [
        {
            "ioc_value": "0c8c2dbd432667270cfa60c31ba2bdbbde40003b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857139": [
        {
            "ioc_value": "17f88aa4d01fcaf694745933b8113a5fbadcdcd8c01838af14772a2b93d5db02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857140": [
        {
            "ioc_value": "13c5530933169d29b22f0e8e18b94b3162f11a82",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857136": [
        {
            "ioc_value": "fdb081750d0ce60ab67f4280a7d690a188b47643eae2a26cdff52010c5a6acf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857137": [
        {
            "ioc_value": "c7247cb9a15ce08bfb22e43c65cfe6c90c3c7493",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857138": [
        {
            "ioc_value": "e36370f93cda87df77dddbe1a00a8dcc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857134": [
        {
            "ioc_value": "e440ce3e49536f390a1a029d312e5fa1a7bb8071",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857135": [
        {
            "ioc_value": "760d566d584ec8a8e7d74468a185fd56",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857131": [
        {
            "ioc_value": "4a099af54f71818a97bf820d96c6643290db6d20",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 01:23:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857132": [
        {
            "ioc_value": "2c44374da92d90d26c774499aec98ad9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 01:23:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857133": [
        {
            "ioc_value": "f3ebf1f39739f374a3fd795a49c798af80c943c6136cb3f219da454fead540c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857129": [
        {
            "ioc_value": "4128b578cfee06b281d580844fd5872f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857130": [
        {
            "ioc_value": "1a259452b94a1ec811209f31cfbf6987b4dc4938a705fbd085087c9a7830ac8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-25 01:23:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857126": [
        {
            "ioc_value": "0526be67da8581b2acf18d065db0f899",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857127": [
        {
            "ioc_value": "7a39334c50e0ccb49d2ea85d615e2eef259a7232f36c4803c2d853b64639b6fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857128": [
        {
            "ioc_value": "e3b93e6c2a7964ab53cdb514f19a9489dc4383b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857122": [
        {
            "ioc_value": "a687f253ecf2e5f82dba73c198c1dc4f436b8588",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-25 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857123": [
        {
            "ioc_value": "0c055a6c37a3bcac283e9aa8815e1e01",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-25 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857124": [
        {
            "ioc_value": "537b51a091c4176254ab69a08eec14183d44c868cf9c43666caddcaf2843d24f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857125": [
        {
            "ioc_value": "be94e61c386578d4f3aeab05b1ead296be0497a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857120": [
        {
            "ioc_value": "230aa6979b84ef379373d3638c485fca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 01:23:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857121": [
        {
            "ioc_value": "c95048957b30f2101720abdcff23a17c52ad35241dcda2fcafab3376015ee882",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-25 01:23:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857118": [
        {
            "ioc_value": "551c8108e3691d035b2417c4f1ec3083c5213514c1c65348c5934dfcad53225b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 01:23:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857119": [
        {
            "ioc_value": "608ed0cadd68a22468248632b771c73a845fc812",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-25 01:23:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857116": [
        {
            "ioc_value": "ecab6a9f6ea86d85f2a02f97a196559582262df7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 01:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857117": [
        {
            "ioc_value": "ec7db8b5960a038eb53bd5e159474fd6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 01:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857114": [
        {
            "ioc_value": "dcdfeeea89d07b5bc81e0f61051f34c2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857115": [
        {
            "ioc_value": "58928c973bd77cabdf6bca123c77f7915c3f335f42e364893c2673d954d22d93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-25 01:23:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857113": [
        {
            "ioc_value": "41d09e93a6b3b72d990ab508d11e25af1101165b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857111": [
        {
            "ioc_value": "cd8d560569da4a6c8163f30170085da8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-25 01:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857112": [
        {
            "ioc_value": "3970af3e3ddea2312a082d7ff46fb171d2f4ad3dd5fe7038d4e8dc13265dd7dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857109": [
        {
            "ioc_value": "b6a901fba50ca3057ff57f9048da1e23b7ef95170f22902b6d1445e5c2184d8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-25 01:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857110": [
        {
            "ioc_value": "387082569ad561ad6e01abfb87d895412850dad2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-25 01:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857105": [
        {
            "ioc_value": "48146eb9012ef1ca1a5aa0ed0fc82d58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857106": [
        {
            "ioc_value": "f10a3669a6a50dbf030646ffc0e2aceab6a779d76d2a768fb7f613088549f268",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857107": [
        {
            "ioc_value": "fbf5db37ea8692dbf4725127409f47769109a449",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857108": [
        {
            "ioc_value": "6ac1ab7fb937d122fb238bc0c8f71f9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-25 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857102": [
        {
            "ioc_value": "f45a7613a2d97c914743e192ba8f0aa7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857103": [
        {
            "ioc_value": "4a9805f38a2a9853a93d15df93f3818fd6bb16c0d29b9cc3156dcc9bfa868f06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857104": [
        {
            "ioc_value": "b88d8ee6746c4a5c4ad615178dbafaae73bbc5ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857098": [
        {
            "ioc_value": "045e62643006f962bf8ed60f0a1eb480c089a0fd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857099": [
        {
            "ioc_value": "a3e7927bd85436aaae08c662ac65b91c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857100": [
        {
            "ioc_value": "0d0897aba06b3bf68848e9b02155f7900a8deb9d8236f90ad8813e4c126d9f4d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857101": [
        {
            "ioc_value": "6733ae62bc3f0990188e4ac3a2aafd18658e90f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-25 01:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857095": [
        {
            "ioc_value": "b1b7e69d02b3627a729ee7c27977d7e100ebeb15",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857096": [
        {
            "ioc_value": "d122a5aa463b5ba991e9359760746a30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857097": [
        {
            "ioc_value": "d939f7b8fd24d5d2d23ec118b3d0efa99a37e268de571ceb2b4baa33742b42cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857091": [
        {
            "ioc_value": "11c217bf00fb258a9ee43151d7f33c39b1aa8b69bd40ad86c9dcbb0211eeffdd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857092": [
        {
            "ioc_value": "27d1c34460d849f408610c0198d42b85e26ef99a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857093": [
        {
            "ioc_value": "fd3ddfa27ea3e9848c52a52972557075",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-25 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857094": [
        {
            "ioc_value": "a06673af1f07487237fe4a60e4a774f4e0f87a19150b0e16ea385caa3cabccb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-25 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857088": [
        {
            "ioc_value": "d63d267dd7543de8306b20b7a107bb14ba0ae58d1fc9ddc35160b74393f19e36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857089": [
        {
            "ioc_value": "097793e0d81836e015811b9f7b4666e6dee52704",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857090": [
        {
            "ioc_value": "c2de7ffcad8ec73b9752fe3b03866a5d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-25 01:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857084": [
        {
            "ioc_value": "b24f95b112c296b860092c4f359d74fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857085": [
        {
            "ioc_value": "b54bc4caa16d8a0832ea833429556d9db8bd3b5bcf0c9cb1d0de0781bbb620d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-25 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857086": [
        {
            "ioc_value": "ae04c23604aa238e4eb59327986d3f1ace780c90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-25 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857087": [
        {
            "ioc_value": "9d9bd074b5e349b11408a63256af6d5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-25 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857081": [
        {
            "ioc_value": "3de985cb3c3427fff40ac76d48022231",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-25 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857082": [
        {
            "ioc_value": "b1ece5874c05e86f9daaa08096d9acf0f8e07071e2700fcd99fb35d0a4d598c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857083": [
        {
            "ioc_value": "c6832e969f4d5b9a712bfac715d5c56865ceb906",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857078": [
        {
            "ioc_value": "06152fd52179cf9263e0c201d5d566d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857079": [
        {
            "ioc_value": "b8d565ca8bb20cd435732cf0d0e6a327230dd3820deccedbc75b5a44e252e929",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-25 01:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857080": [
        {
            "ioc_value": "c1305bc2f9d27f21c371f2c83d8d85c776da72d1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-25 01:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857074": [
        {
            "ioc_value": "15dd644d00e2f57ec093249b4b6d2a8f797dbf0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857075": [
        {
            "ioc_value": "0c765a327ab66486b37cb9f8a92ac503",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857076": [
        {
            "ioc_value": "478a9a9ebc5993baaa14c360bd1f3a8269b92571abe6613de1f457dd448c76fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857077": [
        {
            "ioc_value": "071bb3bae6c44ac6cced6293a99a55ddfcdf0b9b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-25 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857071": [
        {
            "ioc_value": "b5dfd6bbfd71e34a16a689de2cbd614148936e4b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-25 01:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857072": [
        {
            "ioc_value": "6f1820834018453731427d4d4f63e09c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-25 01:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857073": [
        {
            "ioc_value": "9a0ff3d3112ba7b9b241e587b0e09f9c7e27a938fe2b9cfb228de12ac78cca04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-25 01:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857068": [
        {
            "ioc_value": "b9566868785534f4b09713e107bf7a554b9da480",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857069": [
        {
            "ioc_value": "2f8873c5dfb9edd81830558bb0b38f07",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857070": [
        {
            "ioc_value": "bae4595f9cf24b9e6cbd70c524bad1c48805a6af7a453c8e7e73c2f1364a0eb6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-25 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857067": [
        {
            "ioc_value": "0646fc597b108aa6c66e6f932a62485c12b40d1cb42d9789f4941159e0c79dde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857065": [
        {
            "ioc_value": "5746ac340bb8291b02bd7acfcd8ed0c0b972b07e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857066": [
        {
            "ioc_value": "0b7d4e9a6440a35152ed90e61f4a2843",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857062": [
        {
            "ioc_value": "305beced0956c022d45ff7509565e4d15d9c4fe0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857063": [
        {
            "ioc_value": "70c85f3a75f97d78dade0e8dbd3c642d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857064": [
        {
            "ioc_value": "14d84ff3cd9431f0f9cb3fb43e1c6cac1ef3f95162d91f36c637f8218b501745",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857059": [
        {
            "ioc_value": "c5310287f913238ea94111a00539ed125cc82769",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857060": [
        {
            "ioc_value": "536732ccf6db23e1a514f7d370c1bf0b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857061": [
        {
            "ioc_value": "210b3be06f28d393eb0575309c1d1909f2b898d8a22f4f335bb74464100d87af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857057": [
        {
            "ioc_value": "8d85f3625bd3fb7b9b9595aa8faa4b53",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857058": [
        {
            "ioc_value": "654cd91cfdfa11163f99daaac4a306ea5abfddabdc8f52bd1185c6be2492fa59",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857054": [
        {
            "ioc_value": "2e397a5d7096a192651dd9304c794717",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857055": [
        {
            "ioc_value": "84030c2aa04a54c25edb7453564e3d7ec5d4ef809180e5f9a106ba424be3877c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857056": [
        {
            "ioc_value": "442fa0c3294c8035584f956d4c267e5e19fbff81",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857051": [
        {
            "ioc_value": "e5ef7d3f49ed27008fd24fe2aa7b458f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857052": [
        {
            "ioc_value": "9439bd71b166620696d1381b63eddb3c9636ef7ec443a3adc04d1781dc88dafd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857053": [
        {
            "ioc_value": "b1c11114b3eadfd69161c24a4c4ea876d658fd67",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857048": [
        {
            "ioc_value": "1c7eb62ee673a66fdb7f2db820875e34",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857049": [
        {
            "ioc_value": "96a34ba16d323746c6ce835a2efbae0df804e08753673e0ef274d8a587e1239e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857050": [
        {
            "ioc_value": "b60d90c7e3a43f6e8e6a180aa1500bc11c595469",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857045": [
        {
            "ioc_value": "46633ffe64281b69b6d6140309d0dfee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 01:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857046": [
        {
            "ioc_value": "d0df38cd4febaa3f20daa1b2d4d729c909f23d35c67e479d8230561d2eae330f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857047": [
        {
            "ioc_value": "730e6aecf7b10b96796942c736405b0e00a84933",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857042": [
        {
            "ioc_value": "7ecd3b8fbf1d5242285e253d9910d1a8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857043": [
        {
            "ioc_value": "932aa31eb7fa070617035b427aab26a148eaee8e9d4d69da22b5ae89279b3adb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 01:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857044": [
        {
            "ioc_value": "ad2c75fca548859745799bbf42dfa26f7af196b8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-25 01:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857040": [
        {
            "ioc_value": "8429bc3f819bae0b2aa65e741a533ea216b257a08c1741000185ef547f528531",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857041": [
        {
            "ioc_value": "1c7c0abca29c38db340f3912a342838c6f8d2049",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-25 01:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857038": [
        {
            "ioc_value": "c52a9e0817361e99a6176e679f81e4b85a8e5316",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 01:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857039": [
        {
            "ioc_value": "306038f5b80551285855f65f1cc13045",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 01:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857037": [
        {
            "ioc_value": "71b9449efaa11bc7e3e82a3df58a0730faae3b0e4ed1f96b36f71a4d675e872c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 01:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1857036": [
        {
            "ioc_value": "vwqkwonzugswfclnl.jungle-prada-tavern.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 01:21:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857031": [
        {
            "ioc_value": "87.76.146.91:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-25 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857030": [
        {
            "ioc_value": "authorization-code-cdn.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 00:47:52",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857029": [
        {
            "ioc_value": "https://wordswithgeeks.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 00:30:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wordswithgeeks.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857028": [
        {
            "ioc_value": "pdzsnweqtctrtqobt.grannysgummies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857027": [
        {
            "ioc_value": "grannysgummies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-25 00:28:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857017": [
        {
            "ioc_value": "https://wildcatroofingtx.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 00:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wildcatroofingtx.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857018": [
        {
            "ioc_value": "https://ventedevacaciones.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 00:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ventedevacaciones.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857016": [
        {
            "ioc_value": "https://vmmu.edu.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-25 00:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vmmu.edu.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857015": [
        {
            "ioc_value": "209.200.246.194:34586",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-24 23:46:13",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857014": [
        {
            "ioc_value": "103.193.150.74:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-24 23:45:54",
            "last_seen_utc": "2026-08-25 08:47:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1857013": [
        {
            "ioc_value": "bqigjwaujpgyiounu.grace-tung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 23:39:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1857012": [
        {
            "ioc_value": "grace-tung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 23:38:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1857008": [
        {
            "ioc_value": "https://www.tomiervi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.tomiervi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857009": [
        {
            "ioc_value": "https://toycompany.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/toycompany.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857010": [
        {
            "ioc_value": "https://turtleds.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/turtleds.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857011": [
        {
            "ioc_value": "https://stigbjerg.dk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stigbjerg.dk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857006": [
        {
            "ioc_value": "https://viajexpress.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:30:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/viajexpress.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857007": [
        {
            "ioc_value": "https://soteezy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:30:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/soteezy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856992": [
        {
            "ioc_value": "https://minipainting.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/minipainting.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856993": [
        {
            "ioc_value": "https://mskey.ma/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mskey.ma",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856994": [
        {
            "ioc_value": "https://tonstudio.ac/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tonstudio.ac",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856995": [
        {
            "ioc_value": "https://fundacionmadreelfride.edu.co/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fundacionmadreelfride.edu.co",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856996": [
        {
            "ioc_value": "https://tempshop.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tempshop.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856997": [
        {
            "ioc_value": "https://djuro.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/djuro.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856998": [
        {
            "ioc_value": "https://fcgconstrucoes.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fcgconstrucoes.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856999": [
        {
            "ioc_value": "https://www.consulentelavoropaghe.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.consulentelavoropaghe.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857000": [
        {
            "ioc_value": "https://cristianesilva.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cristianesilva.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1857001": [
        {
            "ioc_value": "https://aquatexwaterdamageplano.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aquatexwaterdamageplano.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856991": [
        {
            "ioc_value": "https://hijtec.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 23:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hijtec.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856950": [
        {
            "ioc_value": "exywujgzhhueysauy.gentletouchchiropracticclinicauroracol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 22:48:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856949": [
        {
            "ioc_value": "gentletouchchiropracticclinicauroracol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 22:47:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856941": [
        {
            "ioc_value": "https://songcity.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 22:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/songcity.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856942": [
        {
            "ioc_value": "https://www.awns.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 22:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.awns.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856943": [
        {
            "ioc_value": "https://camberwellpress.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 22:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/camberwellpress.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856940": [
        {
            "ioc_value": "xdkrrektzqqrsjsae.fidipodiatry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 21:57:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856939": [
        {
            "ioc_value": "o3rxmx6a.bestbusinessvoice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 21:44:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856938": [
        {
            "ioc_value": "zzhjiutfakhcwqbeb.geigersjobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 21:08:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856937": [
        {
            "ioc_value": "dpz2qwwa.brucedickinsontour2025.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 21:06:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856927": [
        {
            "ioc_value": "https://intricateart.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 21:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/intricateart.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856928": [
        {
            "ioc_value": "https://saundersstudios.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 21:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/saundersstudios.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856929": [
        {
            "ioc_value": "https://globalwebchile.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 21:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/globalwebchile.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856930": [
        {
            "ioc_value": "https://astrameduniversity.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 21:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/astrameduniversity.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856931": [
        {
            "ioc_value": "https://impresionescometa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 21:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/impresionescometa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856926": [
        {
            "ioc_value": "yrhunctoistirsebq.geigersjobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 20:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856925": [
        {
            "ioc_value": "geigersjobs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 20:43:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856918": [
        {
            "ioc_value": "rnebxdjkvhaglgjlj.gabriellekwilson.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 20:09:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856917": [
        {
            "ioc_value": "gabriellekwilson.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 20:08:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856913": [
        {
            "ioc_value": "https://reflexologie-79.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 20:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/reflexologie-79.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856912": [
        {
            "ioc_value": "87.251.64.204:63812",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-24 19:45:44",
            "last_seen_utc": "2026-09-01 02:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856911": [
        {
            "ioc_value": "46.246.12.2:2512",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:45:23",
            "last_seen_utc": "2026-08-27 18:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856910": [
        {
            "ioc_value": "45.11.59.152:43200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-24 19:45:13",
            "last_seen_utc": "2026-09-01 02:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856909": [
        {
            "ioc_value": "38.60.220.51:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 19:45:10",
            "last_seen_utc": "2026-08-26 18:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856908": [
        {
            "ioc_value": "23.94.252.7:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-24 19:44:59",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856907": [
        {
            "ioc_value": "2.27.248.80:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-24 19:44:16",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856906": [
        {
            "ioc_value": "193.93.194.42:57301",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-24 19:44:11",
            "last_seen_utc": "2026-08-27 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856905": [
        {
            "ioc_value": "185.212.129.117:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-24 19:44:03",
            "last_seen_utc": "2026-09-01 02:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856904": [
        {
            "ioc_value": "158.94.211.191:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:43",
            "last_seen_utc": "2026-08-24 08:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856903": [
        {
            "ioc_value": "157.20.182.21:1992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 19:43:41",
            "last_seen_utc": "2026-08-24 18:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856897": [
        {
            "ioc_value": "156.247.47.108:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856898": [
        {
            "ioc_value": "156.247.47.108:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856899": [
        {
            "ioc_value": "156.247.47.109:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856900": [
        {
            "ioc_value": "156.247.47.109:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856901": [
        {
            "ioc_value": "156.247.47.110:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856902": [
        {
            "ioc_value": "156.247.47.110:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856895": [
        {
            "ioc_value": "156.247.47.106:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:38",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856896": [
        {
            "ioc_value": "156.247.47.106:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 19:43:38",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856894": [
        {
            "ioc_value": "151.236.21.109:2096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-24 19:43:33",
            "last_seen_utc": "2026-09-01 02:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856893": [
        {
            "ioc_value": "143.110.132.139:65000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 19:43:28",
            "last_seen_utc": "2026-08-26 18:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856890": [
        {
            "ioc_value": "13.143.139.239:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 19:43:21",
            "last_seen_utc": "2026-08-24 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856891": [
        {
            "ioc_value": "13.143.139.239:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 19:43:21",
            "last_seen_utc": "2026-08-24 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856892": [
        {
            "ioc_value": "13.143.139.239:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 19:43:21",
            "last_seen_utc": "2026-08-24 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856887": [
        {
            "ioc_value": "qixqzsvwgvhrwiouw.futuremillionaire.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 19:34:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856868": [
        {
            "ioc_value": "https://only.my.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 19:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/only.my.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856867": [
        {
            "ioc_value": "ismokoimdwyfowgtz.fourseasonsmansion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 18:59:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856866": [
        {
            "ioc_value": "http://103.80.135.19:8880/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 18:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856864": [
        {
            "ioc_value": "https://mk-carstyle.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 18:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mk-carstyle.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856865": [
        {
            "ioc_value": "https://mindblastermotionpictures.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 18:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mindblastermotionpictures.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856863": [
        {
            "ioc_value": "bonfwldgaovmxvvza.footstepsdaycare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 18:27:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856858": [
        {
            "ioc_value": "ultwbuekzzjgbxyxfg.footstepsdaycare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 18:10:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856853": [
        {
            "ioc_value": "carmirrorparts.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 18:02:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856851": [
        {
            "ioc_value": "https://muliakaryaprima.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 18:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/muliakaryaprima.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856852": [
        {
            "ioc_value": "https://nitochsa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 18:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nitochsa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856850": [
        {
            "ioc_value": "buwlufiffmvphqsimp.focus-logistics.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 17:31:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856845": [
        {
            "ioc_value": "jyhgpvvuctpbssvdyr.brentwoodautoupholstery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 17:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856838": [
        {
            "ioc_value": "https://martinkreitl.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 17:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/martinkreitl.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856839": [
        {
            "ioc_value": "https://mattgambino.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 17:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mattgambino.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856840": [
        {
            "ioc_value": "https://martyhigh.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 17:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/martyhigh.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856837": [
        {
            "ioc_value": "lxxlpjojdzakqqxnha.doubledavespizzatx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 16:54:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856836": [
        {
            "ioc_value": "k5blk157.becoffeecompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 16:44:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856835": [
        {
            "ioc_value": "https://kompozers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 16:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kompozers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856834": [
        {
            "ioc_value": "mkffhshsedbptmkqjo.chammaautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 16:20:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856833": [
        {
            "ioc_value": "chammaautosales.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 16:18:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856826": [
        {
            "ioc_value": "jeig3sli.brandonstreeservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 16:08:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856821": [
        {
            "ioc_value": "nywjqcshxddikcggds.cdcila.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 15:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856820": [
        {
            "ioc_value": "cdcila.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 15:42:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856804": [
        {
            "ioc_value": "168.144.135.136:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-24 15:17:53",
            "last_seen_utc": "2026-07-27 03:49:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1856818": [
        {
            "ioc_value": "upxdate.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-24 15:15:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b54bc4caa16d8a0832ea833429556d9db8bd3b5bcf0c9cb1d0de0781bbb620d0/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856817": [
        {
            "ioc_value": "27.124.10.162:4453",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 15:11:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b1ece5874c05e86f9daaa08096d9acf0f8e07071e2700fcd99fb35d0a4d598c1/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856816": [
        {
            "ioc_value": "bwojdfuickrntqqlhd.azautotraders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 15:08:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856812": [
        {
            "ioc_value": "27.124.10.162:4452",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 15:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856811": [
        {
            "ioc_value": "162.19.139.33:5553",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-24 15:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856809": [
        {
            "ioc_value": "https://htcsafety.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 15:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/htcsafety.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856810": [
        {
            "ioc_value": "https://johnnyautomatic.online/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 15:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/johnnyautomatic.online",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856807": [
        {
            "ioc_value": "glofla.glen7vara.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 14:39:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856805": [
        {
            "ioc_value": "rouge-9k.strupt7oupe.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 14:39:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856806": [
        {
            "ioc_value": "ziaqjnr.glen7vara.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 14:39:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856803": [
        {
            "ioc_value": "juctuahuyrdsmqyhao.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856802": [
        {
            "ioc_value": "https://fenzpr.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 14:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fenzpr.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856801": [
        {
            "ioc_value": "cisbtbumiuybuxyajc.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 14:16:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856792": [
        {
            "ioc_value": "https://halac-naturstein.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 14:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/halac-naturstein.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856793": [
        {
            "ioc_value": "https://helpafricananimals.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 14:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/helpafricananimals.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856791": [
        {
            "ioc_value": "https://sup.merahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 13:50:06",
            "last_seen_utc": "2026-08-27 16:25:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1856790": [
        {
            "ioc_value": "sup.merahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 13:50:05",
            "last_seen_utc": "2026-08-27 16:25:14",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1856789": [
        {
            "ioc_value": "efqveeuagmohjnnmvv.fidipodiatry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:39:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856788": [
        {
            "ioc_value": "fidipodiatry.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:39:05",
            "last_seen_utc": "2026-08-07 00:04:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856787": [
        {
            "ioc_value": "zqknpozhmpdvsuvvhd.farmacia-bienestar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:27:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856786": [
        {
            "ioc_value": "v8dkk3.braveclo.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:26:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856785": [
        {
            "ioc_value": "farmacia-bienestar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:23:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856783": [
        {
            "ioc_value": "7ursaw.braveclo.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:06:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856784": [
        {
            "ioc_value": "grace-tung.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 13:06:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856775": [
        {
            "ioc_value": "192.252.180.45:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 13:01:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c809b9235003ab4d3d79722319a8d8c54533d8528106ef376d9fd4786def9b83/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856773": [
        {
            "ioc_value": "https://farma-kalal.cz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 13:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/farma-kalal.cz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856774": [
        {
            "ioc_value": "https://execucarearc.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 13:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/execucarearc.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856771": [
        {
            "ioc_value": "https://garykazoo.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 13:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/garykazoo.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856772": [
        {
            "ioc_value": "https://execucarearc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 13:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/execucarearc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856732": [
        {
            "ioc_value": "blfxuiixplane.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:58:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "JARMdNDangerous"
        }
    ],
    "1856759": [
        {
            "ioc_value": "http://59.180.156.235:42443/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-24 12:57:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.180.156.235",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856760": [
        {
            "ioc_value": "http://182.123.165.64:33331/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-24 12:57:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.123.165.64",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856761": [
        {
            "ioc_value": "http://153.117.8.55:53909/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-24 12:57:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.8.55",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856768": [
        {
            "ioc_value": "168.144.135.136:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-24 12:57:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1856770": [
        {
            "ioc_value": "94.158.245.53:9992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-24 12:50:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/68a58bec4b4257aca204bfb1284e63337f4917e35477911e27d1c5809e917e96/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856769": [
        {
            "ioc_value": "172.245.95.9:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-24 12:50:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c4d288be44232a582adc27547d21d39d35d503ee4cd3f5f267759528b1d9c5b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856767": [
        {
            "ioc_value": "pykistovlqlelammgy.jungle-prada-tavern.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856766": [
        {
            "ioc_value": "jungle-prada-tavern.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:47:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856763": [
        {
            "ioc_value": "https://dimitrisinfrapro.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 12:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dimitrisinfrapro.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856764": [
        {
            "ioc_value": "https://dsucto.cz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 12:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dsucto.cz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856765": [
        {
            "ioc_value": "https://dricki.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 12:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dricki.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856762": [
        {
            "ioc_value": "range2021.myftp.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-24 12:25:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/273d7bda9c55f7c91141f3ac1819f6d8cc03fdff1458d4cc44544e16c8a56fd4/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856758": [
        {
            "ioc_value": "bubekjjgrjdhrpmikx.jrautosatl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:13:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856757": [
        {
            "ioc_value": "jrautosatl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:11:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856755": [
        {
            "ioc_value": "brucedickinsontour2025.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:11:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856756": [
        {
            "ioc_value": "endlesssummer-pools.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:11:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856754": [
        {
            "ioc_value": "jeffersonparishlandfill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856748": [
        {
            "ioc_value": "307xq.braveclo.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:01:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856749": [
        {
            "ioc_value": "glensautoparts.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 12:01:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856747": [
        {
            "ioc_value": "keldraal.braveclo.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:56:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856746": [
        {
            "ioc_value": "wpxahgsykirfvqojcp.jbgpildun.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:48:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856745": [
        {
            "ioc_value": "jbgpildun.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:47:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856744": [
        {
            "ioc_value": "r86a7zd2.bahiacafehotelsalvador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:44:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856743": [
        {
            "ioc_value": "gmoq.jasper-automotives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:37:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856742": [
        {
            "ioc_value": "jasper-automotives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856738": [
        {
            "ioc_value": "els22gzs.bondbrandingco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:05:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856736": [
        {
            "ioc_value": "gdvi.janatcosmetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:04:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856735": [
        {
            "ioc_value": "lhsq.janatcosmetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:02:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856734": [
        {
            "ioc_value": "janatcosmetics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 11:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856733": [
        {
            "ioc_value": "https://codingnplay.co.kr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 11:00:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/codingnplay.co.kr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856731": [
        {
            "ioc_value": "jtgj.interventionalpainmanagement.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:41:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856730": [
        {
            "ioc_value": "getamericanglass.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:41:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856729": [
        {
            "ioc_value": "interventionalpainmanagement.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:40:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856728": [
        {
            "ioc_value": "bcmsc.deckico.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:36:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856726": [
        {
            "ioc_value": "cfuuzz.deckico.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:31:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856727": [
        {
            "ioc_value": "gentletouchchiropracticclinicauroracol.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:31:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856725": [
        {
            "ioc_value": "https://chessco.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 10:30:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chessco.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856724": [
        {
            "ioc_value": "79ccfm8.deckico.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:26:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856722": [
        {
            "ioc_value": "https://fwf.merahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 10:26:20",
            "last_seen_utc": "2026-07-24 12:26:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856723": [
        {
            "ioc_value": "fwf.merahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 10:26:20",
            "last_seen_utc": "2026-07-24 12:26:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856721": [
        {
            "ioc_value": "ifnj.intellectualgroupie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:07:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856720": [
        {
            "ioc_value": "intellectualgroupie.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 10:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856713": [
        {
            "ioc_value": "stabimodule.deckico.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:51:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856714": [
        {
            "ioc_value": "geigersjobs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:51:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856712": [
        {
            "ioc_value": "uocqxlqf.sendrat.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:51:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856711": [
        {
            "ioc_value": "79.110.49.148:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 09:46:45",
            "last_seen_utc": "2026-08-23 18:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856709": [
        {
            "ioc_value": "79.110.49.148:1009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 09:46:44",
            "last_seen_utc": "2026-08-23 18:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856710": [
        {
            "ioc_value": "79.110.49.148:60",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 09:46:44",
            "last_seen_utc": "2026-08-23 18:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856708": [
        {
            "ioc_value": "23.94.145.121:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-24 09:45:54",
            "last_seen_utc": "2026-09-01 02:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856707": [
        {
            "ioc_value": "198.211.101.176:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-07-24 09:44:39",
            "last_seen_utc": "2026-08-23 18:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856706": [
        {
            "ioc_value": "178.16.54.132:1987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-24 09:44:15",
            "last_seen_utc": "2026-08-23 18:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856705": [
        {
            "ioc_value": "157.20.182.22:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 09:43:56",
            "last_seen_utc": "2026-08-23 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856704": [
        {
            "ioc_value": "157.20.182.21:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 09:43:55",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856703": [
        {
            "ioc_value": "pijw.inspirationflorida.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:32:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856700": [
        {
            "ioc_value": "inspirationflorida.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:29:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856699": [
        {
            "ioc_value": "popelkar.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 09:21:10",
            "last_seen_utc": "2026-07-27 08:07:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856698": [
        {
            "ioc_value": "auth-clo-id.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 09:21:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856697": [
        {
            "ioc_value": "kinikar.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 09:21:03",
            "last_seen_utc": "2026-07-27 08:07:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856693": [
        {
            "ioc_value": "cinemacast.sendrat.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:11:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856694": [
        {
            "ioc_value": "dyn-lithum.th0rniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:11:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856695": [
        {
            "ioc_value": "infinity-spc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:11:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856696": [
        {
            "ioc_value": "gabriellekwilson.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 09:11:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856692": [
        {
            "ioc_value": "vitalamb.reptbot.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 08:31:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856690": [
        {
            "ioc_value": "4tom-pulse.reptbot.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 08:31:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856691": [
        {
            "ioc_value": "chammaautosales.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 08:31:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856689": [
        {
            "ioc_value": "https://bbinvinoveritas.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 08:30:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bbinvinoveritas.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856688": [
        {
            "ioc_value": "upkx.infinityjoespizzaclearwater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 08:23:43",
            "last_seen_utc": "2026-07-24 08:23:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856686": [
        {
            "ioc_value": "206.238.123.117:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-24 08:05:06",
            "last_seen_utc": "2026-08-22 00:03:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856683": [
        {
            "ioc_value": "gigaping.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:50:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "js_skimmer,Magecart,skimmer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856682": [
        {
            "ioc_value": "xcot.id-kkslot777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:49:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856681": [
        {
            "ioc_value": "45.133.174.99:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-24 07:41:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e77b0473ee512fa6121b864bc0e7003ef3fffda2e7a612941a10a8d6c83c68a1/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856680": [
        {
            "ioc_value": "gypd.id-kkslot777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:40:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856679": [
        {
            "ioc_value": "id-kkslot777.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:37:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856678": [
        {
            "ioc_value": "tkwt.doubledavespizzatx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856677": [
        {
            "ioc_value": "doubledavespizzatx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:34:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856676": [
        {
            "ioc_value": "https://alinais.ch/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 07:30:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alinais.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856675": [
        {
            "ioc_value": "42.193.22.177:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-24 07:25:20",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856673": [
        {
            "ioc_value": "farmacia-bienestar.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:11:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856674": [
        {
            "ioc_value": "cdcila.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:11:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856669": [
        {
            "ioc_value": "shzc.fourseasonsmansion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 07:01:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856668": [
        {
            "ioc_value": "https://aacjuvenile.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 07:00:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aacjuvenile.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856667": [
        {
            "ioc_value": "fourseasonsmansion.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:58:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856665": [
        {
            "ioc_value": "217aa6561129b2ca5958da9dde6223908ddbfc978b2b92946cda9e2e35998931",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:43:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856666": [
        {
            "ioc_value": "ca5daa545c6b467afe5d17602cddce924e56e2b90ecc56ccee4be17d2cc07125",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:43:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856664": [
        {
            "ioc_value": "42nmto8h.thebrandus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856663": [
        {
            "ioc_value": "https://mail.assembleiadedeus.org.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 06:30:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mail.assembleiadedeus.org.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856662": [
        {
            "ioc_value": "ardi.fourseasondumpling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:27:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856661": [
        {
            "ioc_value": "fourseasondumpling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856328": [
        {
            "ioc_value": "fsdmkfskdojyttt.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-24 06:20:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1856352": [
        {
            "ioc_value": "http://27.215.139.11:38006/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-24 06:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.215.139.11",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856660": [
        {
            "ioc_value": "http://153.117.1.177:55591/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-24 06:20:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.1.177",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856638": [
        {
            "ioc_value": "198.98.53.100:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-24 06:20:07",
            "last_seen_utc": "2026-08-31 17:22:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1856351": [
        {
            "ioc_value": "http://103.176.16.65:50528/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-24 06:20:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.176.16.65",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856656": [
        {
            "ioc_value": "ybqher3f.btcbullcoin.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 06:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856655": [
        {
            "ioc_value": "hucx.fortworthfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856654": [
        {
            "ioc_value": "fortworthfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:49:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856653": [
        {
            "ioc_value": "backupper.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:33:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856652": [
        {
            "ioc_value": "sdanc.trave1.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:28:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856651": [
        {
            "ioc_value": "eugen-x.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:24:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856650": [
        {
            "ioc_value": "cedarember.lunave5.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:24:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856649": [
        {
            "ioc_value": "yjpo.footstepsdaycare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:19:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856648": [
        {
            "ioc_value": "dynflux4or.lunave5.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:14:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856647": [
        {
            "ioc_value": "footstepsdaycare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:14:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856642": [
        {
            "ioc_value": "portcho.lunave5.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:02:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856643": [
        {
            "ioc_value": "levyvo.lunave5.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:02:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856644": [
        {
            "ioc_value": "833f110b8ec1d51b1d56795bc9049d4cda5b1447a546209856cac9355612abb4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 05:02:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856641": [
        {
            "ioc_value": "eritreancenter.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 04:59:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856640": [
        {
            "ioc_value": "glacie-palet.oppo5it.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 04:59:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856639": [
        {
            "ioc_value": "umpt.focus-logistics.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 04:39:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856637": [
        {
            "ioc_value": "dzts.focus-logistics.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 04:09:16",
            "last_seen_utc": "2026-07-24 04:38:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856634": [
        {
            "ioc_value": "eastcoastseafoodsupply.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 04:04:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856633": [
        {
            "ioc_value": "boos2-graph.oppo5it.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 03:59:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856632": [
        {
            "ioc_value": "rnad.flowerqueensgirls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 03:44:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856631": [
        {
            "ioc_value": "flowerqueensgirls.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 03:42:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856630": [
        {
            "ioc_value": "https://popelkar.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 03:30:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/popelkar.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856629": [
        {
            "ioc_value": "bojk.bossynailspa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 03:21:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856628": [
        {
            "ioc_value": "zlcv.bossynailspa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 03:13:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856624": [
        {
            "ioc_value": "38.54.14.80:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-24 03:05:05",
            "last_seen_utc": "2026-08-22 13:23:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856622": [
        {
            "ioc_value": "eandrconstructionllc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 02:44:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856621": [
        {
            "ioc_value": "bgmv.employme-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 02:41:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856620": [
        {
            "ioc_value": "crypt04-node.oppo5it.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 02:39:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856619": [
        {
            "ioc_value": "employme-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 02:39:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856615": [
        {
            "ioc_value": "xovd.ellington-costa-mare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 02:04:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856614": [
        {
            "ioc_value": "ellington-costa-mare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 02:03:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856613": [
        {
            "ioc_value": "teak.elizabethbuckleyschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:46:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856612": [
        {
            "ioc_value": "popelkar.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:44:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856611": [
        {
            "ioc_value": "elizabethbuckleyschool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:44:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856610": [
        {
            "ioc_value": "g0s5tsyj.theafribar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:41:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856608": [
        {
            "ioc_value": "supcra.trave1.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:39:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856609": [
        {
            "ioc_value": "doctorlarry.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:39:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856607": [
        {
            "ioc_value": "https://kinikar.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-24 01:30:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kinikar.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856605": [
        {
            "ioc_value": "18b3741afc2712dafb56505b1c1822372b35cc0b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856606": [
        {
            "ioc_value": "a20052c78501ce91feba8ce56a3aa665",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856602": [
        {
            "ioc_value": "ce629f8ad9428474bab4b95774102a13b096f516",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-24 01:06:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856603": [
        {
            "ioc_value": "9f95d8290bd17c8319a2f3b47db6bd75",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-24 01:06:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856604": [
        {
            "ioc_value": "366e52b6d95d9478a73ffcd659a1807bdea901a0737b7b2532fe11145be03925",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856598": [
        {
            "ioc_value": "56091719eeba4881f3db1f837feaa9d47a5a275bff6218186d97614e252e6d21",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856599": [
        {
            "ioc_value": "432375fba1147d8880a98b149fe7f8f2e4f78d1a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856600": [
        {
            "ioc_value": "9f3955f8be35326246e2551754bd6d5e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856601": [
        {
            "ioc_value": "694a3bab92e60e6760649fd40e97c04ff03faded2073e7a0c2e061229bf7820a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-24 01:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856596": [
        {
            "ioc_value": "5a43ccbb36c23176b99cb7727d338f43319f353f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856597": [
        {
            "ioc_value": "e006cb0220146177e684c11e8548ab39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856594": [
        {
            "ioc_value": "afc61229018541efa19cd9affa1aeb72",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:06:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856595": [
        {
            "ioc_value": "3bb64d86bed8337443f4b6f6c981914dd7d94b6fa7b61709015f9698e13bc67c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856591": [
        {
            "ioc_value": "5cc694a33b659fb6c6e18633daea040c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856592": [
        {
            "ioc_value": "98f5e6cc01bd74709e63639e75a6e4d68b6c5fb9654ae97490155792888bebdd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:06:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856593": [
        {
            "ioc_value": "b6cbc4017ed864b21917e3604c6e5f57d2e9ed0a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:06:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856589": [
        {
            "ioc_value": "c118f7037676c76b39d05c16c337158c0d714decee91af1c44f41c899233b265",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856590": [
        {
            "ioc_value": "c2b2ecfe88e5555a73cd3d893d369b1640b626bd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856586": [
        {
            "ioc_value": "e3fd70ee3f7e5da3d77af2bde5e7eddbc6a9df6b3e8df62aafbd28fdcd65bd27",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856587": [
        {
            "ioc_value": "7eef6fae32a9d83cd1950cd0b287e3657360bcc6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856588": [
        {
            "ioc_value": "4202ea3b73d6d50177e93c2dc10ebee0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856584": [
        {
            "ioc_value": "d92b5cc0d77fc3a739ccfdcca04a0d533b21fc25",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856585": [
        {
            "ioc_value": "0a2054469724717c2577c145907e3501",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856581": [
        {
            "ioc_value": "19a808fc17642b6f12340e5fbac9520a3c2b2f03",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:06:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856582": [
        {
            "ioc_value": "fcac06aded114ab89c60bce606c5c217",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:06:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856583": [
        {
            "ioc_value": "879daa96ac18a98fe5d8c650f71aad182776f96d00209eabcd05450833c8cfa7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856577": [
        {
            "ioc_value": "578d6beea6123baf73ce30fd1cb245fac0225fcd2199754e12597550ffafd40a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856578": [
        {
            "ioc_value": "2386b4fd541b9dc701d01fad5d50d92b426532c5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856579": [
        {
            "ioc_value": "c9c763b2affed693071ced6d9c074af3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856580": [
        {
            "ioc_value": "1f30a807c047970be0b5cfcb0c2a7bc1958d7474ea4920ade5980b5942d3ddbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:06:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856574": [
        {
            "ioc_value": "62fa24c9f3f0cb8f0ef411ecd4d0939e775bcbadc30ae8a0ac4e999dae049dbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.mydoom",
            "malware_alias": "Novarg,Mimail",
            "malware_printable": "MyDoom",
            "first_seen_utc": "2026-07-24 01:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856575": [
        {
            "ioc_value": "dc845713ee9669971e967f0f68546be718e5bc25",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.mydoom",
            "malware_alias": "Novarg,Mimail",
            "malware_printable": "MyDoom",
            "first_seen_utc": "2026-07-24 01:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856576": [
        {
            "ioc_value": "d121235211b62df289ee961414e06fa4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.mydoom",
            "malware_alias": "Novarg,Mimail",
            "malware_printable": "MyDoom",
            "first_seen_utc": "2026-07-24 01:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856572": [
        {
            "ioc_value": "8dc5ef895d1606cc53ca4f67e6936517cdd14c60",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.mydoom",
            "malware_alias": "Novarg,Mimail",
            "malware_printable": "MyDoom",
            "first_seen_utc": "2026-07-24 01:06:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856573": [
        {
            "ioc_value": "016fc23a8337a322ffdc0f850efa7a7f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.mydoom",
            "malware_alias": "Novarg,Mimail",
            "malware_printable": "MyDoom",
            "first_seen_utc": "2026-07-24 01:06:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856568": [
        {
            "ioc_value": "198906594ae1cb1951d6e75e1921a7dd1188c8356371b847556ff15226dc5e83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-24 01:06:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856569": [
        {
            "ioc_value": "21e5f10d7fef1dea915d7a39ce867b2948eee944",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-24 01:06:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856570": [
        {
            "ioc_value": "24711f1cd12f005cdf6353c261f8eaf4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-24 01:06:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856571": [
        {
            "ioc_value": "602cc7985ad5a2a05425cfa1b16aa7a6e00165455a6d6566234141bc787ff8e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.mydoom",
            "malware_alias": "Novarg,Mimail",
            "malware_printable": "MyDoom",
            "first_seen_utc": "2026-07-24 01:06:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856565": [
        {
            "ioc_value": "2b1f09c4559ffa9c0c4400d2bf96807e14243144c242b4d58d57af2fec004f18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856566": [
        {
            "ioc_value": "8ed2be4f406cd7012bbc432229c8938a97f02b5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856567": [
        {
            "ioc_value": "0ac806ee073f53b035d805fac4f532fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856562": [
        {
            "ioc_value": "e130fb44008595cc59028b23ee7c616e3c927a8ccdc03b0972a690e0378b0265",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856563": [
        {
            "ioc_value": "34b80a1b8d157606d8f95929c59eb8844f693613",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856564": [
        {
            "ioc_value": "1d4b4313f46c5e36636df5689a02eb2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856559": [
        {
            "ioc_value": "73827e53552bac53092a3f937f4c29d060969093cf20d9548836de516f2efede",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-24 01:06:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856560": [
        {
            "ioc_value": "4912001b000d5414dcaa0c3a0ef8cda8260ad920",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-24 01:06:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856561": [
        {
            "ioc_value": "9ce153849e117145877431ce9e43e110",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-24 01:06:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856555": [
        {
            "ioc_value": "74d740193b40387b0bb8d31d4e681146",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856556": [
        {
            "ioc_value": "02469c593ecd42b98fd30db086bfc49c9a486d123085a626cf2ab247d7003e65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856557": [
        {
            "ioc_value": "b4cccb07fb11d53156e975edad2767ef519efc39",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856558": [
        {
            "ioc_value": "4f1d4fda1144646990ce36efc915d43b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856552": [
        {
            "ioc_value": "ccad1d780f53e439985bc9e6035211d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-24 01:06:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856553": [
        {
            "ioc_value": "5cae1bc499bb70c7bd93592360a9d6d5a4fefa3969feecb4c87553ddb582976d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856554": [
        {
            "ioc_value": "1c179c0c5b6d40186ee0599775f179817e65f4e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-24 01:06:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856549": [
        {
            "ioc_value": "2cacc53c31ebfb5f3dcbccb953a57e19",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-24 01:06:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856550": [
        {
            "ioc_value": "3fc2edb46b7b5bb430b2e63b7da48dcbef35a63884e219edac2960131062a651",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-24 01:06:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856551": [
        {
            "ioc_value": "39fdafcbeac903723edc9e6919c4fc733a642d3d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-24 01:06:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856546": [
        {
            "ioc_value": "00cd35c4f8afda228da86503adcc2be3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856547": [
        {
            "ioc_value": "eaa828acafc7d731d4f4c64c997b9d72b728c43a94c46ef17a5acb4952152179",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-24 01:06:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856548": [
        {
            "ioc_value": "0c1af8f899ec84dee649c0aa0125baddd6e39b86",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-24 01:06:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856543": [
        {
            "ioc_value": "0ec313029dce62c5ee7aa979263f208b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856544": [
        {
            "ioc_value": "eddcc00fbbaa2823bdfc0ce09f0c4d1f13de9ced5d54deaeda103739a67d0881",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856545": [
        {
            "ioc_value": "d48772f91907385039c4ff26e89766680d273b8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856540": [
        {
            "ioc_value": "8316c11965ea33d19a0b81e1b1d3e1c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856541": [
        {
            "ioc_value": "23135f7a9ef043ebf31d296b08b93b1a636ce43f9ea490afe778433c024726a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856542": [
        {
            "ioc_value": "ad9b61dd4558239dc97d4580439ab2f4ddd03f52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856537": [
        {
            "ioc_value": "fd35f58efcd6af8b7ad198bb07052fd2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-07-24 01:06:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856538": [
        {
            "ioc_value": "2ecc8f99a7860a6806347bc55842e71f2baa81afeffd7f0dbcebe22da5228a2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856539": [
        {
            "ioc_value": "919b5673aced7f5b239450ff52c3c4d492249c1c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856535": [
        {
            "ioc_value": "e5ce90ab36024193e2d1e9268e89ae81187d108c6a29a1275ba5ed909681f107",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-07-24 01:06:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856536": [
        {
            "ioc_value": "c4c6b7ffc14d9ee7d4b1b4078be97bcf26d3a79e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-07-24 01:06:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856532": [
        {
            "ioc_value": "9c41611e704f413156caa104cc487b9f0a095768a4343898861de8d69d827abb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856533": [
        {
            "ioc_value": "b575a1b6a03362d5dc9f788c2b569040ebc4135e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856534": [
        {
            "ioc_value": "6bc44d424cdc16e6d3c5988db50b27a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856529": [
        {
            "ioc_value": "e87c28ea4cde41c36ff6016fd8f682f688db2f72b3af45525d787b38a4f65ee5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-24 01:06:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856530": [
        {
            "ioc_value": "f6662cc6c68106317bec4c4e9a868cd575d16249",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-24 01:06:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856531": [
        {
            "ioc_value": "8a3eea9f1ba7f1b64966d71d6c50fa84",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-24 01:06:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856526": [
        {
            "ioc_value": "2725c0d119ac513e2c64bbbc74a2809cfc19415488f0262a63413931638cd803",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-24 01:06:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856527": [
        {
            "ioc_value": "b872181180aebeabf066c8cc8f63c92f1bc0eb85",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-24 01:06:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856528": [
        {
            "ioc_value": "dc9ca98f5da7e48d1a334a46f7669660",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-24 01:06:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856522": [
        {
            "ioc_value": "90382f4b63fc009d530db77b9b8ebc57",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856523": [
        {
            "ioc_value": "5922d829e7b5787f08c7e031eecdf9fa2edf9fc988c09ad90ad5091612cd3109",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-24 01:06:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856524": [
        {
            "ioc_value": "5f286bf21a33c72a0e5248093f236bf54778dba2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-24 01:06:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856525": [
        {
            "ioc_value": "55371257357570a711cadd7ac48cd58b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-24 01:06:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856519": [
        {
            "ioc_value": "9684b0229634d90636f8c1cf68589484",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856520": [
        {
            "ioc_value": "d922f7fc1790cc37aa590a76b0035e26d0680c53294ac57287d05f54e53c9f04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856521": [
        {
            "ioc_value": "6950d787b14e0d9f9d31ee942e8b986c7dd0c9ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856516": [
        {
            "ioc_value": "26a562d67700a099274ce90626570e68",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-07-24 01:06:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856517": [
        {
            "ioc_value": "86471a7fea86de0cd8301ab2e5220170e154f71a14ce04b15ba67d1ab62a0b7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856518": [
        {
            "ioc_value": "6ebb1ee6895f8a5c50aa2de2765d3fe5df0e7df9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856512": [
        {
            "ioc_value": "c85faf0370f80d7874a52a95ae0aec6806083e4f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856513": [
        {
            "ioc_value": "94e24e844c98b2a6095a79397f6898c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856514": [
        {
            "ioc_value": "0c81d6dbad069b31724b40b793fe42e139f2794a542830ae13dacff897b1617f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-07-24 01:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856515": [
        {
            "ioc_value": "b2de29b5364bcc5c919379d2bd4af0d9ad30d4d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.zstealer",
            "malware_alias": "Z*Stealer",
            "malware_printable": "ZStealer",
            "first_seen_utc": "2026-07-24 01:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856509": [
        {
            "ioc_value": "f53628d9602058d3a368f46d41c2083e2a41b8c4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856510": [
        {
            "ioc_value": "f2bcdcb1db9ea4088d89f96283d54e0f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856511": [
        {
            "ioc_value": "dc6149638981cc66314286fc00c75a16e54aac19811425f5bf0ab56256115dc5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856505": [
        {
            "ioc_value": "59e159baaba5a53144003115d39539efb7b72c96c7070eeb670830df6eae633c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856506": [
        {
            "ioc_value": "2a8593d53c7bad7dac82526de8c1abdf31ee315f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856507": [
        {
            "ioc_value": "f25b3a5ddd9a115b0447804fc50a5303",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:06:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856508": [
        {
            "ioc_value": "40e0968b64ebf8904c7676dafdac691f2d98beda4f084534c2c462602abbfbdf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:06:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856501": [
        {
            "ioc_value": "ad5d551335f98af221996306603a1618f990832bf6fdda23200e886be5a28f99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856502": [
        {
            "ioc_value": "fchj6wun.wellcome-c-store.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:06:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856503": [
        {
            "ioc_value": "65fd2357119bd09ba317ea293b0414d05eb02a69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856504": [
        {
            "ioc_value": "0c09c139f79368d432460b08f99610fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856498": [
        {
            "ioc_value": "f8a09b989de6f5f57a4a1666f1b0fb4d1b1175e624d35f9e3dd7805dc06ea52f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856499": [
        {
            "ioc_value": "646934b76c30d2ac8e5a48f7e1c4f9b13aa52678",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856500": [
        {
            "ioc_value": "4c8cdacf7e5ec0657c281ec2b107af86",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856496": [
        {
            "ioc_value": "158d509a9285fec1ba5569dc40e76d69195d7e2b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-24 01:06:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856497": [
        {
            "ioc_value": "e6f0059933f463ddbac645d710bf92f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-24 01:06:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856493": [
        {
            "ioc_value": "33b0633c1db65405dad2a3b9257f621c4436747a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856494": [
        {
            "ioc_value": "b17e88ed55e2a1d3b8e69e62b3208913",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856495": [
        {
            "ioc_value": "e3bc5a94be843c4858570ebb7ce42bb80940d3d7628961448b076995f7b87ec5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-24 01:06:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856489": [
        {
            "ioc_value": "80b64331aab73ae1cb476c6a1dbe804abf304fded3d52303a700524e8370c92b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856490": [
        {
            "ioc_value": "4464cff6a27d5df56f6ec66dfcb9a3f2f520fb6d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856491": [
        {
            "ioc_value": "b3c956a1ff7f13abc16a17f2d4a7ad96",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856492": [
        {
            "ioc_value": "499f27061cc38ec593b8104599919c92bb729a55640e6057778a18b05eb7191c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856485": [
        {
            "ioc_value": "11d800c0e492f8ee8090a873f5838561",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856486": [
        {
            "ioc_value": "018cff3b8d3d9ecd0cdff35222c83d0859933652f5b368246a8641d96fa7154c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-24 01:06:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856487": [
        {
            "ioc_value": "ce60ffc172f18ba31d8384ebff0b843ae2f82fe4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-24 01:06:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856488": [
        {
            "ioc_value": "71527a93de96710a1c83c3083189e323",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-24 01:06:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856483": [
        {
            "ioc_value": "bad86d2aabc76beaa78036bec4f2ecd8f2c8649f75ee7d85aabe487cdd343853",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856484": [
        {
            "ioc_value": "d0be646573decf151d3aa1985cb67c20a7f1c8e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:06:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856480": [
        {
            "ioc_value": "27d6d9269b546067e85d88538254575cff12928e4b6da2bccd7a04a7c6ad2c24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:06:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856481": [
        {
            "ioc_value": "4eb83cb040ffb6558e9d4423af7cc3c85b0c8d89",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:06:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856482": [
        {
            "ioc_value": "799451c91e029e6e173fca3608d12c78",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:06:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856477": [
        {
            "ioc_value": "824c913c874d3300c7deefd16ea653d323cfa6a5a7680f10beb00a8cbfa398a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856478": [
        {
            "ioc_value": "8a0ad7e1cf495189fc4d52d075870a7b8077ee90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856479": [
        {
            "ioc_value": "2825198bfb35cf74f4a841f5dc4fb798",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-24 01:06:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856474": [
        {
            "ioc_value": "0628c0d2ca16727fefb2160576fbd9200f8d5d163a8ce550bbd87a650cc66fe1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856475": [
        {
            "ioc_value": "5d34e68044c630f8521b650c4f3dbe4da80edc12",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856476": [
        {
            "ioc_value": "1fe76b7c6e8be90ab3965b243aceed93",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856470": [
        {
            "ioc_value": "9973d36e850834c933f89c5e6e5a9ba0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856471": [
        {
            "ioc_value": "214491310a1e9189a111954e90388be6f6b8fec87676e957e694328e56a038a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856472": [
        {
            "ioc_value": "cc0619d6ca1afddfa3ee3db46653a50498687a84",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856473": [
        {
            "ioc_value": "08bdbef301eed124e661cf01eb6ec8fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856468": [
        {
            "ioc_value": "ac116b7e2f9a0c0ec6d2e6f679aacdf9fe7bce28c7e879c562f2d4c84ccb9897",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856469": [
        {
            "ioc_value": "6004826e44ff34fc4d656bbd14bd70b190ed057d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856465": [
        {
            "ioc_value": "f306f95f4a9b8b5f708e349465614c67ed2e60a13f2d28efefc7fc78c223e51e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-24 01:05:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856466": [
        {
            "ioc_value": "cb2da5677b650a554a89dda3b65d8107e28013a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-24 01:05:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856467": [
        {
            "ioc_value": "2cb69abed9d824a2d7e65bac470e7c42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-24 01:05:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856463": [
        {
            "ioc_value": "5ae3941fddd55e92eb7bab8c1b9bc5f4b9fa7d70",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-24 01:05:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856464": [
        {
            "ioc_value": "262373e7649042b5541bcab907599a71",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-24 01:05:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856461": [
        {
            "ioc_value": "b5eadff0a0813eb801ceaf68c2314686",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856462": [
        {
            "ioc_value": "5f160eb9a281a5f2a1a6ea1c5743d34fd3c0f1c34407ea1bd2d197e64cfa8c3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-24 01:05:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856458": [
        {
            "ioc_value": "dd71a4e1f9223545aa723c7be6f6d70d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856459": [
        {
            "ioc_value": "481a3abe0c3fb8d4f00ae6cd2199d1c289bbff2fba9ce04fd0785b7cf2d34ab6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856460": [
        {
            "ioc_value": "d170ff1a82259d8b50f9c1987092d6bf8dff2f8d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856455": [
        {
            "ioc_value": "6feeb8c1867a946303c8fccb5bc68583",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856456": [
        {
            "ioc_value": "8b32f0d7aef7046e3d48633a0d759e64f86b9d3ccc9eb7b7f12fc5733ddf27d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856457": [
        {
            "ioc_value": "dd76772714422888b52eebeeaa91669ba52ec08d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856452": [
        {
            "ioc_value": "e7114daa688a2df942983472af9489fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856453": [
        {
            "ioc_value": "64e49a171913fdcbac24270f98be5aa7fae093c88b59f72b4d84f0aa7c1160b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856454": [
        {
            "ioc_value": "e5aa1e1355226158ff0c0221a85f6532324ba4ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856449": [
        {
            "ioc_value": "c38117d47d5f0051ca68f32fb9ffcfeb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.mirai",
            "malware_alias": null,
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-24 01:05:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856450": [
        {
            "ioc_value": "3ad4b34297520e16c1326483216d801892b3230761ef68fbed6483f3d4493cd3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856451": [
        {
            "ioc_value": "24d4ce787f9413a12a0ca92b0dbf9c2142b81dd0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856448": [
        {
            "ioc_value": "2c17f0466cf3d191555de942fc72ee976442a29e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.mirai",
            "malware_alias": null,
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-24 01:05:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856444": [
        {
            "ioc_value": "40bd243e3246d22a519995ed54036e3f53279a99be514bae836ecf971f3fc856",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-24 01:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856445": [
        {
            "ioc_value": "572c439a7baa82520f38b4833c6b467d1d8e30a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-24 01:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856446": [
        {
            "ioc_value": "4860a5ee8aefbfaf28fbb930bece10ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-24 01:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856447": [
        {
            "ioc_value": "23dce97932f96517f4232f771be505d3ff885ba264dc27ddc23262fd31100e09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.mirai",
            "malware_alias": null,
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-24 01:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856441": [
        {
            "ioc_value": "df8056bd298f4fd5bc18e419e525f4ee8bda52496b45806d6505ecc2c2ab7f99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856442": [
        {
            "ioc_value": "ee96c8f79eade46adb305d545e111d1eb46d603b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856443": [
        {
            "ioc_value": "1a975ae02f8a20bd2e816a7df4564df3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856437": [
        {
            "ioc_value": "0e7819f4ad43256d03865fbd75f883a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856438": [
        {
            "ioc_value": "c33d466717f4166ef7ef39cde196cd9b0facabba20e14140b2964a1839e59862",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856439": [
        {
            "ioc_value": "9b2732ba50384d8f26a684b5a6cd7df7f7a41753",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856440": [
        {
            "ioc_value": "63722ea0b71a80ef782987d135fc633e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856434": [
        {
            "ioc_value": "1eef1e2d398259813c25501f12d846ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856435": [
        {
            "ioc_value": "b2239dd0af4d3ec78f4453294dfbf7f213b1a6f86969120277858e911eeef505",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856436": [
        {
            "ioc_value": "7805def7e78b181fccfabf166c59e1edac9fd321",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856432": [
        {
            "ioc_value": "8a6e25495bc52143928dfe6b31e52973884232e2a3d8024d0ae39dc96791b68b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856433": [
        {
            "ioc_value": "3dd564e3814078560392fce6a4b94791799ccf85",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856429": [
        {
            "ioc_value": "6c5157e20c93de46124ecd70d21b96c5ff86234adbf31e41c82769cd43119123",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856430": [
        {
            "ioc_value": "65123c8252462feac92908289faaefe4ba92cd5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856431": [
        {
            "ioc_value": "5e6736f38424f8e796a1115fbae43ed8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856425": [
        {
            "ioc_value": "28ca44eb0ad7125d36186ce8d383f066",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856426": [
        {
            "ioc_value": "4013ce45572f3c9c8606e037f34ab083867c32419865125601873e4b3aa477b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856427": [
        {
            "ioc_value": "abe31d070004a6cb68d9e1ae6fc6f0b476fb50e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856428": [
        {
            "ioc_value": "4851a35a58ee0af8f3278fc5843472ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856422": [
        {
            "ioc_value": "0ddbc520d021578afa29c88a35af673c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856423": [
        {
            "ioc_value": "b2499ca307b9903a6694e13648c6453e4c1f1d50e208b8107b89704a1e81847d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856424": [
        {
            "ioc_value": "9f11daee67a2952fd93a73441c87588f1afa46ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856419": [
        {
            "ioc_value": "356da0ec0a8ee0dbbce0a40f84b960a9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856420": [
        {
            "ioc_value": "cc0e5688ca82ac4d9916e9d9308edc06d918558b724b2c8c296b55d8989d346f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856421": [
        {
            "ioc_value": "3d467e44c2c4e98ffcd99f690131a8f02d12d5c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856416": [
        {
            "ioc_value": "6a9ac6b3fff7b695dbd4df6ff7f6c516",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856417": [
        {
            "ioc_value": "d33682b92ddee2be9ab8dce71d6940cf17084571a869cf3e6cebe2f8a41137ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856418": [
        {
            "ioc_value": "f2eed6018f5e1bc8dbbf9145e6b24395e952ddc9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856412": [
        {
            "ioc_value": "0b93ef56795109dce8b398912f0d1e10905bfb23",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856413": [
        {
            "ioc_value": "077bb61e9d3cc382319c34388faf2065",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856414": [
        {
            "ioc_value": "872d8079ab450bfd1417b9128b619f7e9b43291dc7391044dd838f5b7e8dde52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856415": [
        {
            "ioc_value": "a16f271bf71922ada3541d4eb9a244c38438a7ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856409": [
        {
            "ioc_value": "5ff667d9f8993ce764ab772523b072e273cd885d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856410": [
        {
            "ioc_value": "a4fe1d12cfb25e841d32048c3c5a10bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856411": [
        {
            "ioc_value": "dc5ced17f0c85fef8a1fa466796a84fb83592eb7c8a86302d9b0cc9e5837c140",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-24 01:05:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856406": [
        {
            "ioc_value": "a3bcd3d86ce11488a403e5af142c9d95c6708424",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856407": [
        {
            "ioc_value": "58809009fa78d2d9c757f730bfe843a6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856408": [
        {
            "ioc_value": "212d6b6ed3c8910e12580e8d7f5844f1471aa4e4be50261f9402c8569fad6377",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-24 01:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856404": [
        {
            "ioc_value": "1b6ef1d87f6fc98261cfbdfec854878a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856405": [
        {
            "ioc_value": "78495c054f2466cb5997d0fc5d1ee913d01edeb191b7e730cf508d17ec1b3083",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856402": [
        {
            "ioc_value": "7ca92a98fd8560acf02d252b76b426e81e995587cd81fe5f5fe0944008e3cea8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856403": [
        {
            "ioc_value": "53c1557348f5abea772e6c07bec65f55dc0504ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856399": [
        {
            "ioc_value": "cc359d8b70f186ed204649ced3e94babce413ff0f62cb3910c1685450efe8143",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856400": [
        {
            "ioc_value": "667b45f178836d8ffe1b9941a25f20608a866a5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856401": [
        {
            "ioc_value": "c27cd9477eb9130abc64679274ebb99b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856397": [
        {
            "ioc_value": "86781df1c2cc1be157eaf562faf542a3aa469c64",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856398": [
        {
            "ioc_value": "8792005f7b055d1cc53ef15429b147f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856394": [
        {
            "ioc_value": "d5fa7d64200ec703d1a9d9264ca30cbfadd7f1b4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856395": [
        {
            "ioc_value": "162abdcac85d37a9c3953c8730190a9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856396": [
        {
            "ioc_value": "fa608193e8f5c475f7120317f319eb77ea199ddb7d8ddef58b4580181d4b763b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-24 01:05:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856390": [
        {
            "ioc_value": "941839c9e6720789cfacbe9993db460b8033a1da421ef3abacd94b75d5c886b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856391": [
        {
            "ioc_value": "5a202476deb95413af4aaccca38a2932ac774d5c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856392": [
        {
            "ioc_value": "0cfcb4c3fda04c09c01c32b7544c155a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-24 01:05:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856393": [
        {
            "ioc_value": "2c355642547e30bc702280efc25646ac33db35a49649d3abc6af5e8e9c339199",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856388": [
        {
            "ioc_value": "19e0253b7e48afe7f01b8749b8475c5c5780cce7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-24 01:05:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856389": [
        {
            "ioc_value": "100964269cd0b904e8a91a1e0e637db7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-24 01:05:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856386": [
        {
            "ioc_value": "5785ea78b4e7e0528c2c0c3291732d51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856387": [
        {
            "ioc_value": "d733c41692ef27d0a925ed79d5b09d9ff981c943e6a686d245cf420e06043b95",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-24 01:05:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856382": [
        {
            "ioc_value": "c71449356ad109f44abde01e77b72815de9feacf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-24 01:05:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856383": [
        {
            "ioc_value": "2680dd7239138d434e72e4e260792c00",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-24 01:05:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856384": [
        {
            "ioc_value": "054fe387cda25efcaf47ef4e5fc18fbfdc6c52f35715d2adbb22700eb96736be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856385": [
        {
            "ioc_value": "438b9abe8850803897999c0ff6a7be7d0b06b135",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856379": [
        {
            "ioc_value": "17bde51184e484f3c3e7444f051bee780e934282",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 01:05:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856380": [
        {
            "ioc_value": "fc80da6fac6d35bea5d9fe676acca41a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 01:05:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856381": [
        {
            "ioc_value": "f1ca533620933da6d4e119a4bc7b44e233617007cd4ee0239591d0fd0946e718",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-24 01:05:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856376": [
        {
            "ioc_value": "2bd0ff8fbf456364650bdd22b52078cbca595e48",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856377": [
        {
            "ioc_value": "851d82fdbc98057e893c8fb6510add04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856378": [
        {
            "ioc_value": "fe1e3f38e6bd2ec3cfcacc946a22c8d8212f083c8165cb3caa9ae301c25332ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-24 01:05:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856373": [
        {
            "ioc_value": "df46be58890f278ada21d0f04596dba936389974",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856374": [
        {
            "ioc_value": "c225f601c7e09fbd672b8f151d20cf73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856375": [
        {
            "ioc_value": "9c60f568244136d6ea1af2159ea85be3bb5058bbb464c8e4f979268dd9a9027f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856370": [
        {
            "ioc_value": "1f0018007ed4f8c86b7954cdcb91b7081ae25afe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-24 01:05:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856371": [
        {
            "ioc_value": "13aa55915fe8418214edc3f57138e29e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-24 01:05:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856372": [
        {
            "ioc_value": "239dede0d31cb07ddd78d5d521cbf30ae057c695d70fb43c98d3a70b112e5fd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-24 01:05:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856367": [
        {
            "ioc_value": "9b390674150f32ad0f2b7944f3afe21c01f84dbb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-24 01:05:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856368": [
        {
            "ioc_value": "71fc38575f3641e70a22e1a291e55395",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-24 01:05:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856369": [
        {
            "ioc_value": "5f2979cd7d8192bb50266546557be153907b952d73f911122655c79c9ba73591",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-24 01:05:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856366": [
        {
            "ioc_value": "731fc822a6bdfe76804b1d55fdd08de05680ca6d99bd8c3216a466ece9a3f92b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-24 01:05:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1856360": [
        {
            "ioc_value": "bwvi.elitehomeservicesut.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:04:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856359": [
        {
            "ioc_value": "elitehomeservicesut.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 01:04:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856355": [
        {
            "ioc_value": "dixietransportinc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 00:44:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856356": [
        {
            "ioc_value": "kinikar.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 00:44:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856354": [
        {
            "ioc_value": "qyns.eddieswindowtintca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 00:24:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856353": [
        {
            "ioc_value": "eddieswindowtintca.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-24 00:23:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856348": [
        {
            "ioc_value": "designerdistrola.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:49:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856347": [
        {
            "ioc_value": "spee.ecryptobits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:44:51",
            "last_seen_utc": "2026-07-31 19:29:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856345": [
        {
            "ioc_value": "dskv.glen4mora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:39:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856346": [
        {
            "ioc_value": "ce1l-craft.trave1.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:39:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856343": [
        {
            "ioc_value": "minihostunit.sporesyncnode.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:19:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856344": [
        {
            "ioc_value": "fine7taskhub.sporesyncnode.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:19:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856341": [
        {
            "ioc_value": "gila.ccbcpickens.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:05:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856338": [
        {
            "ioc_value": "derekwumd.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:04:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856337": [
        {
            "ioc_value": "ccbcpickens.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:02:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856336": [
        {
            "ioc_value": "catesautoservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 23:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856334": [
        {
            "ioc_value": "https://6thstar.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 23:00:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/6thstar.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856335": [
        {
            "ioc_value": "https://www.alechosterman.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 23:00:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.alechosterman.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856333": [
        {
            "ioc_value": "drift8siteview.sporesyncnode.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:59:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856332": [
        {
            "ioc_value": "qjha.castrofdn.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:55:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856331": [
        {
            "ioc_value": "high4logicgate.nimbusviewgate.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:54:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856330": [
        {
            "ioc_value": "castrofdn.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:53:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856329": [
        {
            "ioc_value": "cyfftx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:44:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856327": [
        {
            "ioc_value": "gray7taskhub.nimbusviewgate.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:34:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856326": [
        {
            "ioc_value": "nylh.caramelkosher.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:26:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856325": [
        {
            "ioc_value": "rainhostunit.nimbusviewgate.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:24:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856324": [
        {
            "ioc_value": "dunu.caramelkosher.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:17:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856323": [
        {
            "ioc_value": "caramelkosher.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:15:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856322": [
        {
            "ioc_value": "dark8siteview.nimbusviewgate.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:14:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856317": [
        {
            "ioc_value": "auth-clo-id.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:04:50",
            "last_seen_utc": "2026-08-14 02:20:42",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856315": [
        {
            "ioc_value": "dust3logicgate.sporesyncnode.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:04:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856316": [
        {
            "ioc_value": "cvnuts.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 22:04:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856314": [
        {
            "ioc_value": "step9pathgate.axonetworkhub.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 21:44:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856313": [
        {
            "ioc_value": "zocx.cannalawnetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 21:17:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856312": [
        {
            "ioc_value": "cannalawnetwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 21:15:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856310": [
        {
            "ioc_value": "206.238.123.8:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-23 21:05:07",
            "last_seen_utc": "2026-08-22 00:03:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856307": [
        {
            "ioc_value": "rgwshtif.ushealthlaboratories.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 20:40:11",
            "last_seen_utc": "2026-07-29 02:07:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856306": [
        {
            "ioc_value": "ego.merahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 20:26:45",
            "last_seen_utc": "2026-07-24 00:26:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856305": [
        {
            "ioc_value": "https://ego.merahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 20:26:44",
            "last_seen_utc": "2026-07-24 00:26:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856302": [
        {
            "ioc_value": "xuxk.cancunbayfiesta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 20:17:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856301": [
        {
            "ioc_value": "cancunbayfiesta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 20:14:32",
            "last_seen_utc": "2026-08-07 00:04:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856294": [
        {
            "ioc_value": "pulsemeshnode.axonetworkhub.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 20:04:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856295": [
        {
            "ioc_value": "link6taskhub.axonetworkhub.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 20:04:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856293": [
        {
            "ioc_value": "us7i0ql7.sansekerta.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 20:03:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856292": [
        {
            "ioc_value": "93.152.224.94:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 19:46:19",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856291": [
        {
            "ioc_value": "93.152.223.159:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 19:46:18",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856290": [
        {
            "ioc_value": "45.207.222.132:15847",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-23 19:45:40",
            "last_seen_utc": "2026-08-23 08:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856289": [
        {
            "ioc_value": "38.255.43.22:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 19:45:33",
            "last_seen_utc": "2026-08-25 18:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856288": [
        {
            "ioc_value": "2.27.248.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 19:44:28",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856285": [
        {
            "ioc_value": "2.27.248.232:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856286": [
        {
            "ioc_value": "2.27.248.236:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856287": [
        {
            "ioc_value": "2.27.248.72:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 19:44:27",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856284": [
        {
            "ioc_value": "155.117.232.184:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-23 19:43:44",
            "last_seen_utc": "2026-08-23 08:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856283": [
        {
            "ioc_value": "104.239.66.79:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 19:43:14",
            "last_seen_utc": "2026-08-23 08:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856282": [
        {
            "ioc_value": "nerve2logicnet.axonetworkhub.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 19:39:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856281": [
        {
            "ioc_value": "soft3logicnet.velumpulsebox.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 19:29:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856280": [
        {
            "ioc_value": "cool8siteview.stigmaflowlink.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 19:19:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856279": [
        {
            "ioc_value": "etlv.cafeonthehillbrooklyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 19:15:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856278": [
        {
            "ioc_value": "cafeonthehillbrooklyn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 19:14:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856270": [
        {
            "ioc_value": "104.249.10.122:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-23 18:43:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856271": [
        {
            "ioc_value": "104.249.10.122:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-23 18:43:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856272": [
        {
            "ioc_value": "104.249.10.122:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-23 18:43:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856269": [
        {
            "ioc_value": "railchalk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-23 18:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856266": [
        {
            "ioc_value": "http://103.68.31.134:38038/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 18:25:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.68.31.134",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856267": [
        {
            "ioc_value": "http://221.225.124.161:50875/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 18:25:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/221.225.124.161",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856268": [
        {
            "ioc_value": "http://103.244.172.155:53639/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 18:25:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.155",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856265": [
        {
            "ioc_value": "soilhostunit.stigmaflowlink.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 18:14:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856264": [
        {
            "ioc_value": "sssh.burntstorerecycling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 18:14:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856258": [
        {
            "ioc_value": "damp7taskhub.stigmaflowlink.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 18:00:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856249": [
        {
            "ioc_value": "marmiorobicl.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-23 17:58:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856252": [
        {
            "ioc_value": "quantum-auth.pages.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-23 17:58:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856257": [
        {
            "ioc_value": "wszq.burntstorerecycling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:47:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856256": [
        {
            "ioc_value": "burntstorerecycling.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:45:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856255": [
        {
            "ioc_value": "pure8siteview.chromacorebit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:45:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856254": [
        {
            "ioc_value": "moss1logicgate.stigmaflowlink.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:45:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856253": [
        {
            "ioc_value": "richpathgate.chromacorebit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:44:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856250": [
        {
            "ioc_value": "fadesyncbox.chromacorebit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:29:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856251": [
        {
            "ioc_value": "hue3meshway.chromacorebit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:29:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856248": [
        {
            "ioc_value": "tint6logicnet.chromacorebit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:15:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856247": [
        {
            "ioc_value": "rjdg.bambatagear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856202": [
        {
            "ioc_value": "149.28.158.66:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 17:10:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1856203": [
        {
            "ioc_value": "149.28.145.14:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 17:10:57",
            "last_seen_utc": "2026-07-26 00:47:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1856236": [
        {
            "ioc_value": "207.180.248.154:8592",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-23 17:10:53",
            "last_seen_utc": "2026-07-28 23:28:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1856246": [
        {
            "ioc_value": "view2pathgate.focallensview.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 17:07:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856243": [
        {
            "ioc_value": "https://legacyconsulting.co.ke/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 17:00:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/legacyconsulting.co.ke",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856240": [
        {
            "ioc_value": "framehostunit.focallensview.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 16:59:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856241": [
        {
            "ioc_value": "chicospaintingllc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 16:59:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856242": [
        {
            "ioc_value": "sharp7taskhub.focallensview.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 16:59:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856239": [
        {
            "ioc_value": "chronicillnesshumor.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 16:59:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856238": [
        {
            "ioc_value": "zwcp.bulan77terpercaya.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 16:54:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856237": [
        {
            "ioc_value": "bulan77terpercaya.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 16:48:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856234": [
        {
            "ioc_value": "https://puf.merahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 16:26:47",
            "last_seen_utc": "2026-07-23 19:50:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856235": [
        {
            "ioc_value": "puf.merahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 16:26:47",
            "last_seen_utc": "2026-07-23 19:50:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856222": [
        {
            "ioc_value": "https://www.daimajin.us/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 16:00:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.daimajin.us",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856219": [
        {
            "ioc_value": "zzux.birladharamshaala.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 15:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856217": [
        {
            "ioc_value": "depthmeshnode.focallensview.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 15:49:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856218": [
        {
            "ioc_value": "chapsandbags.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 15:49:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856216": [
        {
            "ioc_value": "8.135.47.140:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 15:46:56",
            "last_seen_utc": "2026-08-24 08:48:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856215": [
        {
            "ioc_value": "38.244.52.101:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 15:46:43",
            "last_seen_utc": "2026-08-24 08:48:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856214": [
        {
            "ioc_value": "102.204.223.106:2053",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 15:46:20",
            "last_seen_utc": "2026-08-27 10:47:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856213": [
        {
            "ioc_value": "www.ai2.qzz.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 15:46:18",
            "last_seen_utc": "2026-09-01 02:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856212": [
        {
            "ioc_value": "cloud-svc.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 15:46:13",
            "last_seen_utc": "2026-08-27 10:47:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856211": [
        {
            "ioc_value": "5teun337.yummiquickway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 15:40:53",
            "last_seen_utc": "2026-07-25 18:52:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856204": [
        {
            "ioc_value": "dc10varl.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 15:04:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856201": [
        {
            "ioc_value": "ljgw.bangla-mart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 14:48:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856200": [
        {
            "ioc_value": "198.46.243.188:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-23 14:46:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AnyDesk,RMM",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856199": [
        {
            "ioc_value": "154.29.76.248:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 14:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856198": [
        {
            "ioc_value": "198.46.243.188:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-23 14:40:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/96986991e6afc47c446c9f789014d6931ddc84d1f52257e77d8da915f985ed39/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856197": [
        {
            "ioc_value": "panel.munchyyyyyscpann.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 14:38:02",
            "last_seen_utc": "2026-07-23 14:38:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/96986991e6afc47c446c9f789014d6931ddc84d1f52257e77d8da915f985ed39/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856195": [
        {
            "ioc_value": "https://dev.merahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 14:26:43",
            "last_seen_utc": "2026-07-23 15:26:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856196": [
        {
            "ioc_value": "dev.merahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 14:26:43",
            "last_seen_utc": "2026-07-23 15:26:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856194": [
        {
            "ioc_value": "ccbcpickens.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 14:19:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856083": [
        {
            "ioc_value": "http://105.184.28.228:59307/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/105.184.28.228",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856084": [
        {
            "ioc_value": "http://153.117.6.49:50145/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.49",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856085": [
        {
            "ioc_value": "http://153.117.29.53:54397/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.29.53",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856086": [
        {
            "ioc_value": "http://218.59.12.92:42984/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/218.59.12.92",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856087": [
        {
            "ioc_value": "http://139.135.41.205:41015/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.41.205",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856088": [
        {
            "ioc_value": "http://111.92.157.252:52409/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.157.252",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856089": [
        {
            "ioc_value": "http://103.181.160.225:45451/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.181.160.225",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856090": [
        {
            "ioc_value": "http://223.123.35.175:51875/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.35.175",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856091": [
        {
            "ioc_value": "http://8.213.214.55/nerv.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:15:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/8.213.214.55",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856092": [
        {
            "ioc_value": "http://103.82.252.246:59187/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.82.252.246",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856093": [
        {
            "ioc_value": "http://182.126.83.212:46410/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.126.83.212",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856094": [
        {
            "ioc_value": "http://110.36.93.217:55109/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.36.93.217",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856095": [
        {
            "ioc_value": "http://190.196.253.174:11865/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/190.196.253.174",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856096": [
        {
            "ioc_value": "http://45.172.218.29:40260/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.172.218.29",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856097": [
        {
            "ioc_value": "http://119.30.116.132:54360/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.30.116.132",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856098": [
        {
            "ioc_value": "http://223.123.125.178:56479/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.125.178",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856099": [
        {
            "ioc_value": "http://72.255.32.85:46993/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.85",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856100": [
        {
            "ioc_value": "http://103.225.191.191:39325/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:15:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.191",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856101": [
        {
            "ioc_value": "http://175.107.36.234:50510/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.36.234",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856102": [
        {
            "ioc_value": "http://119.30.116.183:46906/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.30.116.183",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856103": [
        {
            "ioc_value": "http://103.186.23.7:43620/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.186.23.7",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856104": [
        {
            "ioc_value": "http://37.232.128.5:58602/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/37.232.128.5",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856105": [
        {
            "ioc_value": "http://139.135.45.238:44993/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.45.238",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856106": [
        {
            "ioc_value": "http://182.116.85.178:38214/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.116.85.178",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856107": [
        {
            "ioc_value": "http://103.26.86.109:33900/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.86.109",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856108": [
        {
            "ioc_value": "http://223.123.43.69:52040/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.69",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856109": [
        {
            "ioc_value": "http://110.37.76.236:59516/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.76.236",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856110": [
        {
            "ioc_value": "http://175.107.230.96:55631/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.230.96",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856111": [
        {
            "ioc_value": "http://119.30.117.164:43855/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.30.117.164",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856112": [
        {
            "ioc_value": "http://223.123.35.121:48476/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.35.121",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856113": [
        {
            "ioc_value": "http://153.117.15.186:44734/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.186",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856114": [
        {
            "ioc_value": "http://153.117.41.204:48789/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.41.204",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856115": [
        {
            "ioc_value": "http://103.244.172.163:60772/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.163",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856192": [
        {
            "ioc_value": "zoom4logicnet.focallensview.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 14:14:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856116": [
        {
            "ioc_value": "http://153.117.6.9:43639/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.9",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856117": [
        {
            "ioc_value": "http://139.135.41.199:57562/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.41.199",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856118": [
        {
            "ioc_value": "http://46.236.65.160:59737/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/46.236.65.160",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856119": [
        {
            "ioc_value": "http://110.38.247.245:32828/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.247.245",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856121": [
        {
            "ioc_value": "http://182.126.116.6:36449/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.126.116.6",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856120": [
        {
            "ioc_value": "http://223.123.38.94:43488/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.38.94",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856122": [
        {
            "ioc_value": "http://196.188.57.18:53423/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.188.57.18",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856123": [
        {
            "ioc_value": "http://103.173.7.135:47614/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.173.7.135",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856124": [
        {
            "ioc_value": "http://223.123.72.19:34571/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.19",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856125": [
        {
            "ioc_value": "http://190.196.253.237:10364/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/190.196.253.237",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856126": [
        {
            "ioc_value": "http://111.92.152.55:42928/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.92.152.55",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856127": [
        {
            "ioc_value": "http://139.135.43.132:45518/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.43.132",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856128": [
        {
            "ioc_value": "http://72.255.59.18:45250/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.59.18",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856129": [
        {
            "ioc_value": "http://36.255.33.176:53142/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.33.176",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856130": [
        {
            "ioc_value": "http://153.117.9.179:59746/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.9.179",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856131": [
        {
            "ioc_value": "http://72.255.33.251:40349/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.33.251",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856132": [
        {
            "ioc_value": "http://72.255.32.198:37746/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.198",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856133": [
        {
            "ioc_value": "http://223.29.232.232:39804/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.29.232.232",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856134": [
        {
            "ioc_value": "http://103.196.161.121:34506/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.196.161.121",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856135": [
        {
            "ioc_value": "http://223.123.38.121:60126/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.38.121",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856136": [
        {
            "ioc_value": "http://42.233.106.253:40838/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/42.233.106.253",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856137": [
        {
            "ioc_value": "http://46.236.65.155:38128/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/46.236.65.155",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856138": [
        {
            "ioc_value": "http://59.42.90.102:56735/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.42.90.102",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856139": [
        {
            "ioc_value": "http://103.31.100.2:50576/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.31.100.2",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856140": [
        {
            "ioc_value": "http://72.255.3.97:43987/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.3.97",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856141": [
        {
            "ioc_value": "http://222.140.183.234:35818/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/222.140.183.234",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856142": [
        {
            "ioc_value": "http://14.1.106.35:55694/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.106.35",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856143": [
        {
            "ioc_value": "http://119.73.23.168:36100/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.73.23.168",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856144": [
        {
            "ioc_value": "http://59.103.100.243:54640/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.103.100.243",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856145": [
        {
            "ioc_value": "http://110.37.19.9:36359/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.19.9",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856146": [
        {
            "ioc_value": "http://153.117.38.115:41776/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.38.115",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856147": [
        {
            "ioc_value": "http://123.130.179.57:49460/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.130.179.57",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856148": [
        {
            "ioc_value": "http://223.123.35.46:55325/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.35.46",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856149": [
        {
            "ioc_value": "http://103.186.77.76:53593/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.186.77.76",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856150": [
        {
            "ioc_value": "http://222.140.157.127:47546/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/222.140.157.127",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856151": [
        {
            "ioc_value": "http://101.53.225.88:54087/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.225.88",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856152": [
        {
            "ioc_value": "http://123.10.71.167:59319/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.10.71.167",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856153": [
        {
            "ioc_value": "http://153.117.8.55:47043/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.8.55",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856154": [
        {
            "ioc_value": "http://153.117.1.186:48812/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.1.186",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856155": [
        {
            "ioc_value": "http://103.225.191.182:46572/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.182",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856156": [
        {
            "ioc_value": "http://72.255.33.40:41920/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:14:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.33.40",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856157": [
        {
            "ioc_value": "http://223.123.77.11:58766/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.77.11",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856158": [
        {
            "ioc_value": "http://1.2.185.153:56553/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/1.2.185.153",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856159": [
        {
            "ioc_value": "http://223.123.43.2:43434/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.2",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856160": [
        {
            "ioc_value": "http://196.251.121.142/mp",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856161": [
        {
            "ioc_value": "http://153.117.34.75:53632/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.34.75",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856162": [
        {
            "ioc_value": "http://175.107.1.195:36599/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.1.195",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856163": [
        {
            "ioc_value": "http://139.135.41.56:38468/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.41.56",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856164": [
        {
            "ioc_value": "http://167.250.158.32:39225/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/167.250.158.32",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856165": [
        {
            "ioc_value": "http://139.135.44.119:39886/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.44.119",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856166": [
        {
            "ioc_value": "http://223.123.41.66:46735/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.41.66",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856167": [
        {
            "ioc_value": "http://153.117.6.13:49281/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.13",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856170": [
        {
            "ioc_value": "http://153.117.40.147:47416/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.40.147",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856168": [
        {
            "ioc_value": "http://94.255.130.174:54035/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/94.255.130.174",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856169": [
        {
            "ioc_value": "http://144.48.135.186:58179/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:13:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.135.186",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856171": [
        {
            "ioc_value": "3ba46a4b246db63935fc44fc1f02e3f00dc833574f14733c0012fab9f5896510",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:46",
            "last_seen_utc": "2026-08-25 00:20:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/8.213.214.55",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856172": [
        {
            "ioc_value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:06",
            "last_seen_utc": "2026-08-25 00:20:20",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.76.236:59516",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856173": [
        {
            "ioc_value": "06ffe84018080c60e67093332982be429619328bee027e104bc38a276e852c0b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:06",
            "last_seen_utc": "2026-08-25 00:20:20",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856174": [
        {
            "ioc_value": "c18aebf9c041c7f430259e590e4bfd921ad5d4fd641bad51132f7b64823b36f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:05",
            "last_seen_utc": "2026-08-25 00:20:21",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856175": [
        {
            "ioc_value": "9a9dda2b8029a3f249ea64873416b3be0dab8a5de4a4bb996b50ddc20c8623f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:05",
            "last_seen_utc": "2026-08-25 00:20:21",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856176": [
        {
            "ioc_value": "006bb7dbad34a262eb724d3c7062dd3513c98df19b681146931dc0e952035812",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:04",
            "last_seen_utc": "2026-08-25 00:20:22",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856177": [
        {
            "ioc_value": "a479ab28ecf91731d98fdd22d105c33368fa9611fccd03804c062235ce5db235",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:04",
            "last_seen_utc": "2026-08-25 00:20:22",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856178": [
        {
            "ioc_value": "2a1f933e02eb8ffdc3bac67927935dfc04fb27c2a6b2922d38920b39a8bcea5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:03",
            "last_seen_utc": "2026-08-25 00:20:23",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856179": [
        {
            "ioc_value": "a452bec6a3870ff512d0bf8a2c01b9e052752a6a1c6b1c2b8dd4e61d97cb611e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:02",
            "last_seen_utc": "2026-08-25 00:20:23",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856180": [
        {
            "ioc_value": "3c79d4fb9210a9fe2d202cb35eea82f4b0af46f8f34418e44bf10f2b65b862d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:02",
            "last_seen_utc": "2026-08-25 00:20:24",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856181": [
        {
            "ioc_value": "15761f2f036c388f2afcee8cdf507f59c9de0308f696c40cc68bb043027c0bd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:01",
            "last_seen_utc": "2026-08-25 00:20:24",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856182": [
        {
            "ioc_value": "5a77a8978f2c50071abf35abe267c317fdf364b14398bca2f85b3c8bfc52064e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:01",
            "last_seen_utc": "2026-08-25 00:20:25",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856183": [
        {
            "ioc_value": "a0ddcc91877481c641effcc9ac6d1dc918f24f7dd3f7efdc21e399779c43a01a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:13:00",
            "last_seen_utc": "2026-08-25 00:20:25",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856184": [
        {
            "ioc_value": "4e9cccc55530a83f6377e0d8fe971c4cca348b78f2479a1a9b0a93a44a1490c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:59",
            "last_seen_utc": "2026-08-25 00:20:25",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856185": [
        {
            "ioc_value": "3f46f24356ee0ca1a8147a0deea5a584870bb1d99f3fcc996ced516830148778",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:59",
            "last_seen_utc": "2026-08-25 00:20:26",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856186": [
        {
            "ioc_value": "ff1b92ad94b4db6f68de23a9050b3115a65c7e0d59de6ac1df12d34444cbc749",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:58",
            "last_seen_utc": "2026-08-25 00:20:26",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/192.142.28.77",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856187": [
        {
            "ioc_value": "06f341cf422dfbe0cfe3a571b1b2d0e5997c6074e4edbd1f4e3b3db9003c338b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:57",
            "last_seen_utc": "2026-08-25 00:20:27",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856188": [
        {
            "ioc_value": "c45d98ff74ce79277bcb8e298115511b618e0b94bff33dddec56a440afae59b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:57",
            "last_seen_utc": "2026-08-25 00:20:27",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/64.89.163.215",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856189": [
        {
            "ioc_value": "0a48519d35d37581c4130129a056268acb2cd348072a92993e6acc745bd5f308",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:56",
            "last_seen_utc": "2026-08-25 00:20:28",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856190": [
        {
            "ioc_value": "1a5e63f3df9755a66a5706d6080ec5cdc2c4fb0de2a60fd4ed633d6060244b0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:12:55",
            "last_seen_utc": "2026-08-25 00:20:28",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.188.254.224:8081",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856082": [
        {
            "ioc_value": "http://103.213.112.8:47315/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.213.112.8",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856081": [
        {
            "ioc_value": "http://119.73.7.216:37379/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.73.7.216",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856080": [
        {
            "ioc_value": "http://14.1.104.210:59926/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.104.210",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856079": [
        {
            "ioc_value": "http://124.135.10.58:51825/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.135.10.58",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856078": [
        {
            "ioc_value": "http://151.123.254.39:38647/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/151.123.254.39",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856077": [
        {
            "ioc_value": "http://125.41.4.72:45282/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.41.4.72",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856076": [
        {
            "ioc_value": "http://59.180.175.61:58089/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.180.175.61",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856074": [
        {
            "ioc_value": "http://110.37.102.129:53135/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.102.129",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856075": [
        {
            "ioc_value": "http://139.135.44.155:58256/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.44.155",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856073": [
        {
            "ioc_value": "http://103.199.123.147:35309/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.199.123.147",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856071": [
        {
            "ioc_value": "http://103.225.191.156:50810/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.156",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856072": [
        {
            "ioc_value": "http://139.135.41.222:38602/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.41.222",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856070": [
        {
            "ioc_value": "http://153.117.6.100:48208/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.100",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856069": [
        {
            "ioc_value": "http://139.135.46.192:54805/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.46.192",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856067": [
        {
            "ioc_value": "http://123.10.71.51:59319/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.10.71.51",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856068": [
        {
            "ioc_value": "http://103.26.86.224:34164/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.86.224",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856066": [
        {
            "ioc_value": "http://119.185.240.251:42075/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.185.240.251",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856065": [
        {
            "ioc_value": "http://103.18.14.24:51015/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.18.14.24",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856064": [
        {
            "ioc_value": "http://103.244.172.235:42778/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.235",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856063": [
        {
            "ioc_value": "http://175.107.0.161:44066/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.0.161",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856062": [
        {
            "ioc_value": "http://153.117.1.26:53270/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.1.26",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856061": [
        {
            "ioc_value": "http://103.65.30.139:59145/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.65.30.139",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856060": [
        {
            "ioc_value": "http://14.205.104.200:59243/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.205.104.200",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856059": [
        {
            "ioc_value": "http://120.240.219.23:48397/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/120.240.219.23",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856058": [
        {
            "ioc_value": "http://59.103.217.133:50166/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.103.217.133",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856057": [
        {
            "ioc_value": "http://196.251.121.142/a3f8d2/kaizen.mips_r1_srv",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 14:09:07",
            "last_seen_utc": "2026-08-25 00:19:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/196.251.121.142",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856056": [
        {
            "ioc_value": "http://175.107.228.106:33136/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.228.106",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856055": [
        {
            "ioc_value": "http://103.83.148.10:47821/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.83.148.10",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856054": [
        {
            "ioc_value": "http://139.135.60.3:47239/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.60.3",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856053": [
        {
            "ioc_value": "http://123.10.233.143:48569/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/123.10.233.143",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856052": [
        {
            "ioc_value": "http://223.123.72.107:33305/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.107",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856051": [
        {
            "ioc_value": "http://153.117.40.89:56813/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:09:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.40.89",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856049": [
        {
            "ioc_value": "http://39.40.178.228:32868/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:08:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/39.40.178.228",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856050": [
        {
            "ioc_value": "http://59.96.141.239:50991/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:08:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.96.141.239",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856048": [
        {
            "ioc_value": "http://72.255.32.24:36498/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-23 14:08:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.24",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1856044": [
        {
            "ioc_value": "qsou.brentwoodautoupholstery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 13:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856043": [
        {
            "ioc_value": "brentwoodautoupholstery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 13:46:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856042": [
        {
            "ioc_value": "23.226.57.16:771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-23 13:36:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dfba893f29cc0599b5261738d3292a624d853a0f1bb61b1116604716af4f4612/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856041": [
        {
            "ioc_value": "http://hairkeratin.net:4959",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-23 13:31:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8a6e25495bc52143928dfe6b31e52973884232e2a3d8024d0ae39dc96791b68b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856035": [
        {
            "ioc_value": "kjqo.breakfast-hut.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 12:50:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856032": [
        {
            "ioc_value": "glow8siteview.plasmagridunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 12:44:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856031": [
        {
            "ioc_value": "wavepathlink.plasmagridunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 12:44:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856024": [
        {
            "ioc_value": "brandonstreeservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:59:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856023": [
        {
            "ioc_value": "yqmdwk40.thetokestudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:57:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856022": [
        {
            "ioc_value": "bpwe.beyondhomehealthcareservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856021": [
        {
            "ioc_value": "155.103.71.115:15609",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-23 11:50:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a25ffcdd9e9409efe9df85f03a7218c644ad5fa4839c5f19ec7fbca069a98ffb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1856018": [
        {
            "ioc_value": "https://sky-arts.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 11:30:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sky-arts.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1856017": [
        {
            "ioc_value": "iuqf.beyondhomehealthcareservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:24:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856016": [
        {
            "ioc_value": "beyondhomehealthcareservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:23:56",
            "last_seen_utc": "2026-07-23 12:09:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856015": [
        {
            "ioc_value": "ionhostgate1.plasmagridunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:14:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1856014": [
        {
            "ioc_value": "amberskyforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856013": [
        {
            "ioc_value": "stormravenwatch.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856012": [
        {
            "ioc_value": "stormvenomcitadel.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856011": [
        {
            "ioc_value": "ironwraithkeep.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856010": [
        {
            "ioc_value": "ironwolfwatch.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856009": [
        {
            "ioc_value": "wildravencore.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856008": [
        {
            "ioc_value": "wildfirecrest.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856007": [
        {
            "ioc_value": "emberskyforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856003": [
        {
            "ioc_value": "darkmatrixcore.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1856001": [
        {
            "ioc_value": "crimsonskyforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-23 11:11:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855996": [
        {
            "ioc_value": "gswa.bettertalentadvisors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:03:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855995": [
        {
            "ioc_value": "bettertalentadvisors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 11:02:12",
            "last_seen_utc": "2026-07-23 11:02:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855994": [
        {
            "ioc_value": "https://kuchenna.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 11:00:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kuchenna.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855993": [
        {
            "ioc_value": "rxqy.brain-bright.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:59:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855992": [
        {
            "ioc_value": "brain-bright.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:58:52",
            "last_seen_utc": "2026-07-23 10:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855991": [
        {
            "ioc_value": "verification.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 10:58:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855990": [
        {
            "ioc_value": "xwkfjnri.wyattsgreenhouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:42:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855988": [
        {
            "ioc_value": "fuse5logicway.plasmagridunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:34:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855986": [
        {
            "ioc_value": "https://dev.masihsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 10:26:46",
            "last_seen_utc": "2026-07-23 13:26:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855987": [
        {
            "ioc_value": "dev.masihsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 10:26:46",
            "last_seen_utc": "2026-07-23 13:26:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855985": [
        {
            "ioc_value": "abcsgftr.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 10:17:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855984": [
        {
            "ioc_value": "azzy.bossynailspa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:16:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855983": [
        {
            "ioc_value": "62ukoitn.thetokestudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:14:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855981": [
        {
            "ioc_value": "heatmeshbase.plasmagridunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:09:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855975": [
        {
            "ioc_value": "authorization-id-browser.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 10:03:09",
            "last_seen_utc": "2026-07-23 16:09:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855974": [
        {
            "ioc_value": "krabochel.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 10:03:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855973": [
        {
            "ioc_value": "zldtgwwp.brj-contracting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:02:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855972": [
        {
            "ioc_value": "vuee.betpool.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855970": [
        {
            "ioc_value": "betpool.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 10:01:42",
            "last_seen_utc": "2026-07-23 10:02:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855969": [
        {
            "ioc_value": "64.224.17.167:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 09:45:56",
            "last_seen_utc": "2026-08-22 18:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855967": [
        {
            "ioc_value": "2.27.160.24:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 09:44:27",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855968": [
        {
            "ioc_value": "2.27.248.234:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-23 09:44:27",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855966": [
        {
            "ioc_value": "178.156.186.93:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 09:44:03",
            "last_seen_utc": "2026-08-22 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855964": [
        {
            "ioc_value": "172.239.45.42:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-23 09:43:57",
            "last_seen_utc": "2026-08-22 18:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855965": [
        {
            "ioc_value": "172.245.27.162:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 09:43:57",
            "last_seen_utc": "2026-08-22 18:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855963": [
        {
            "ioc_value": "157.20.182.22:9992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 09:43:48",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855962": [
        {
            "ioc_value": "157.20.182.21:1444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 09:43:47",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855961": [
        {
            "ioc_value": "151.243.145.220:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-23 09:43:39",
            "last_seen_utc": "2026-09-01 02:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855960": [
        {
            "ioc_value": "137.220.158.10:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-23 09:43:28",
            "last_seen_utc": "2026-08-25 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855959": [
        {
            "ioc_value": "130.17.9.209:36806",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-23 09:43:25",
            "last_seen_utc": "2026-08-22 18:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855958": [
        {
            "ioc_value": "109.122.18.70:20703",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 09:43:18",
            "last_seen_utc": "2026-08-27 18:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855955": [
        {
            "ioc_value": "juanmisagui.freeddns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 09:15:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fee6353b6b1d8a6efa09b78cc6a32a2cd65e6a90c171e406a162af3c09c5366f/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855954": [
        {
            "ioc_value": "obsh.bondbrandingco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 09:14:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855953": [
        {
            "ioc_value": "ldwv.bestnailsalonmedford.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 09:10:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855952": [
        {
            "ioc_value": "bestnailsalonmedford.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 09:05:21",
            "last_seen_utc": "2026-07-23 09:05:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855946": [
        {
            "ioc_value": "mirt.bondbrandingco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 09:03:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855930": [
        {
            "ioc_value": "45.77.32.3:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 08:57:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855944": [
        {
            "ioc_value": "https://www.picollege.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 08:30:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.picollege.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855943": [
        {
            "ioc_value": "qhin.bodyliciousllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855933": [
        {
            "ioc_value": "cloud-pic.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855934": [
        {
            "ioc_value": "drivefolder-photo7392.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855935": [
        {
            "ioc_value": "extranet-guests-reported.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855936": [
        {
            "ioc_value": "extranetpartner-reports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855937": [
        {
            "ioc_value": "imgcloudpr.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855938": [
        {
            "ioc_value": "photoimg-vault.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855939": [
        {
            "ioc_value": "safeimagephoto.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855940": [
        {
            "ioc_value": "safephoto-docs.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855941": [
        {
            "ioc_value": "safevisa-hb.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855942": [
        {
            "ioc_value": "secure-vh.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-23 08:29:08",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855931": [
        {
            "ioc_value": "http://nanuvvo.cn/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-23 08:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855929": [
        {
            "ioc_value": "s7uz9nrn.rayeganmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:13:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855928": [
        {
            "ioc_value": "37.77.150.162:5051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-23 08:10:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e87c28ea4cde41c36ff6016fd8f682f688db2f72b3af45525d787b38a4f65ee5/",
            "tags": "BlakcSeeStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855927": [
        {
            "ioc_value": "flow9taskunit.plasmagridunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:09:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855926": [
        {
            "ioc_value": "hckc.blueexorcistchapters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:06:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855925": [
        {
            "ioc_value": "64.177.113.11:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 08:05:07",
            "last_seen_utc": "2026-08-29 18:46:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855923": [
        {
            "ioc_value": "174.138.9.149:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 08:05:05",
            "last_seen_utc": "2026-09-01 02:44:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855921": [
        {
            "ioc_value": "dvhg.bestbusinessvoice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855920": [
        {
            "ioc_value": "bestbusinessvoice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:04:44",
            "last_seen_utc": "2026-07-23 08:05:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855919": [
        {
            "ioc_value": "blueexorcistchapters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:04:21",
            "last_seen_utc": "2026-07-23 08:04:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855918": [
        {
            "ioc_value": "iesandresperezserrano.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 08:02:03",
            "last_seen_utc": "2026-07-23 08:02:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855917": [
        {
            "ioc_value": "https://www.capitolosfera.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 08:00:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.capitolosfera.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855916": [
        {
            "ioc_value": "https://calacosta.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 08:00:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/calacosta.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855914": [
        {
            "ioc_value": "spark2zonebox.xenonraypoint.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 07:57:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855915": [
        {
            "ioc_value": "verifyrecapcha.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 07:57:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855912": [
        {
            "ioc_value": "http://158.180.49.41/Empire-usage.zip",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-07-23 07:41:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855913": [
        {
            "ioc_value": "106.75.11.70:801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 07:40:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-426352781",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855910": [
        {
            "ioc_value": "https://krabochel.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 07:30:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/krabochel.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855911": [
        {
            "ioc_value": "https://martamartinezvet.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 07:30:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/martamartinezvet.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855890": [
        {
            "ioc_value": "43.240.31.244:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.btmob",
            "malware_alias": null,
            "malware_printable": "BTMOB RAT",
            "first_seen_utc": "2026-07-23 07:30:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855898": [
        {
            "ioc_value": "207.148.66.2:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 07:30:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855901": [
        {
            "ioc_value": "43.240.31.186:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.btmob",
            "malware_alias": null,
            "malware_printable": "BTMOB RAT",
            "first_seen_utc": "2026-07-23 07:30:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855909": [
        {
            "ioc_value": "nrxs.becoquin.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 07:30:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855908": [
        {
            "ioc_value": "zesv.blossomnigeria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 07:28:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855907": [
        {
            "ioc_value": "becoquin.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 07:27:46",
            "last_seen_utc": "2026-07-23 07:28:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855906": [
        {
            "ioc_value": "blossomnigeria.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 07:23:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855902": [
        {
            "ioc_value": "bryk.telegrarn.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 06:46:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e02012ca164fa43c575d86a3e0855328a785b020ef5a268548b1cbb3224f7e86/",
            "tags": "geo,UKR",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855900": [
        {
            "ioc_value": "axes.endl.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 06:44:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e02012ca164fa43c575d86a3e0855328a785b020ef5a268548b1cbb3224f7e86/",
            "tags": "geo,UKR",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855899": [
        {
            "ioc_value": "https://axes.endl.site/adv2.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 06:44:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e02012ca164fa43c575d86a3e0855328a785b020ef5a268548b1cbb3224f7e86/",
            "tags": "geo,UKR",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855897": [
        {
            "ioc_value": "aeiq.becoffeecompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 06:29:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855896": [
        {
            "ioc_value": "lkka.blackwaterpaintandbodyllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 06:28:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855895": [
        {
            "ioc_value": "becoffeecompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 06:26:52",
            "last_seen_utc": "2026-08-06 09:53:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855894": [
        {
            "ioc_value": "195.201.123.9:8060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-07-23 06:26:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4275b18173e133af55c6d41312d07f633672bf905bde8572966d5e890760b359/",
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855893": [
        {
            "ioc_value": "5.101.84.21:8996",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-23 06:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/efba3ff3b61f64cd040726dd9c26a4fd02558ce2988a41582f9fa9b82524fd59/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855891": [
        {
            "ioc_value": "sxid.basicwhitegirlforgunrights.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 06:20:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855886": [
        {
            "ioc_value": "esed.bahiacafehotelsalvador.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 06:03:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855885": [
        {
            "ioc_value": "sni13.docsmanagement.endl.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 06:02:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32a962439ec0fb5559e494fe1ea6be039815d3c4c1cceb95b16dc123e5abde61/",
            "tags": "geo,UKR",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855883": [
        {
            "ioc_value": "https://global-research.space/adv13.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 06:01:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32a962439ec0fb5559e494fe1ea6be039815d3c4c1cceb95b16dc123e5abde61/",
            "tags": "geo,UKR",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855882": [
        {
            "ioc_value": "global-research.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 06:00:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32a962439ec0fb5559e494fe1ea6be039815d3c4c1cceb95b16dc123e5abde61/",
            "tags": "geo,UKR",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855881": [
        {
            "ioc_value": "6biioqya.vitalmcallen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:57:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855880": [
        {
            "ioc_value": "vitalmcallen.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:53:28",
            "last_seen_utc": "2026-07-23 05:54:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855878": [
        {
            "ioc_value": "krabochel.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:52:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855879": [
        {
            "ioc_value": "authorization-id-browser.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:52:16",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855877": [
        {
            "ioc_value": "cdn.pixelcss.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 05:46:03",
            "last_seen_utc": "2026-09-01 02:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855876": [
        {
            "ioc_value": "0co7tx46.worldofmacarons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855874": [
        {
            "ioc_value": "raypathlink.xenonraypoint.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:42:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855875": [
        {
            "ioc_value": "verification.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:42:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855872": [
        {
            "ioc_value": "94.154.43.102:345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 05:26:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cb0f0d095728f35528d8583f6cc9deeb1ab3cfe21323ba41cf8d72c377423a24/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855871": [
        {
            "ioc_value": "navj.blackriverlawn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:23:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855870": [
        {
            "ioc_value": "blackriverlawn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:22:32",
            "last_seen_utc": "2026-07-23 13:27:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855422": [
        {
            "ioc_value": "https://www.recapcha.space/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.recapcha.space",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855423": [
        {
            "ioc_value": "https://www.recapcha.store/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.recapcha.store",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855429": [
        {
            "ioc_value": "https://djmaurinho.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/djmaurinho.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855430": [
        {
            "ioc_value": "https://www.duquai.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.duquai.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855431": [
        {
            "ioc_value": "https://designsbymeinc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/designsbymeinc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855432": [
        {
            "ioc_value": "https://finishedimage.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/finishedimage.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855433": [
        {
            "ioc_value": "https://bringlearngrow.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bringlearngrow.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855434": [
        {
            "ioc_value": "https://dailycode.dev/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dailycode.dev",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855435": [
        {
            "ioc_value": "https://clubcanin-loctudy.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:20:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/clubcanin-loctudy.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855436": [
        {
            "ioc_value": "https://cursohenfil.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cursohenfil.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855437": [
        {
            "ioc_value": "https://denvercasado.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/denvercasado.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855438": [
        {
            "ioc_value": "https://design77.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/design77.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855439": [
        {
            "ioc_value": "https://ashtagmarketing.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ashtagmarketing.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855440": [
        {
            "ioc_value": "https://adj-tech.mx/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/adj-tech.mx",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855441": [
        {
            "ioc_value": "https://angular-engenharia.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/angular-engenharia.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855464": [
        {
            "ioc_value": "https://marianabertelli.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/marianabertelli.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855465": [
        {
            "ioc_value": "https://mateuszchwalisz.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mateuszchwalisz.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855466": [
        {
            "ioc_value": "https://kfcom.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kfcom.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855467": [
        {
            "ioc_value": "https://leprintexpress.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/leprintexpress.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855468": [
        {
            "ioc_value": "https://kwiaciarniaem.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kwiaciarniaem.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855469": [
        {
            "ioc_value": "https://jie-lin.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jie-lin.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855470": [
        {
            "ioc_value": "https://massagelichaamswerk.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/massagelichaamswerk.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855471": [
        {
            "ioc_value": "https://imperadoruniformes.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/imperadoruniformes.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855472": [
        {
            "ioc_value": "https://hydraulichoseservice.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hydraulichoseservice.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855473": [
        {
            "ioc_value": "https://infinityba.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/infinityba.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855474": [
        {
            "ioc_value": "https://jconnan.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jconnan.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855475": [
        {
            "ioc_value": "https://hollychase.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hollychase.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855476": [
        {
            "ioc_value": "https://hlks.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hlks.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855477": [
        {
            "ioc_value": "https://hispanophile.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hispanophile.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855478": [
        {
            "ioc_value": "https://hansu.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hansu.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855479": [
        {
            "ioc_value": "https://highsteel.net.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/highsteel.net.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855480": [
        {
            "ioc_value": "https://gulfpipes.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:19:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gulfpipes.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855869": [
        {
            "ioc_value": "110.42.189.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 05:16:50",
            "last_seen_utc": "2026-07-26 11:08:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855867": [
        {
            "ioc_value": "114.55.96.192:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 05:16:45",
            "last_seen_utc": "2026-07-25 05:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855868": [
        {
            "ioc_value": "81.70.97.147:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 05:16:45",
            "last_seen_utc": "2026-07-25 09:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855865": [
        {
            "ioc_value": "45.207.199.148:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 05:16:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855866": [
        {
            "ioc_value": "103.118.42.123:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-23 05:16:33",
            "last_seen_utc": "2026-08-07 07:15:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855415": [
        {
            "ioc_value": "thewrayforward.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-23 05:13:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1855402": [
        {
            "ioc_value": "https://fintops.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:13:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fintops.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855399": [
        {
            "ioc_value": "https://gasrihoirteyui.com/YB1XFqi0?s=2&t=uJI3r1GPf7gSKLbzq456Ug",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-23 05:13:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nxs4ret574-dat",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1855401": [
        {
            "ioc_value": "https://beajumper.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:13:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/beajumper.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855398": [
        {
            "ioc_value": "https://gasrihoirteyui.com/YB1XFqi0?m=1&t=coQHORsUSO8EfaqZPMOB7w",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-23 05:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nxs4ret574-dat",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1855363": [
        {
            "ioc_value": "124.71.159.136:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jsp.godzilla_webshell",
            "malware_alias": null,
            "malware_printable": "Godzilla Webshell",
            "first_seen_utc": "2026-07-23 05:13:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855361": [
        {
            "ioc_value": "91.92.42.213:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 05:13:13",
            "last_seen_utc": "2026-07-25 18:17:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "capture-drop,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1855360": [
        {
            "ioc_value": "41.216.189.236:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 05:13:12",
            "last_seen_utc": "2026-07-25 12:16:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "capture-drop,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1855359": [
        {
            "ioc_value": "91.92.47.9:8000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 05:13:11",
            "last_seen_utc": "2026-07-25 09:08:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1855357": [
        {
            "ioc_value": "207.148.66.2:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 05:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855375": [
        {
            "ioc_value": "159.65.143.171:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 05:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855380": [
        {
            "ioc_value": "https://adopt.media/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/adopt.media",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855387": [
        {
            "ioc_value": "45.76.146.2:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 05:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855390": [
        {
            "ioc_value": "https://unirec.co/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/unirec.co",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855396": [
        {
            "ioc_value": "app-api.metricsengine.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-23 05:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/5a9b272a-2f7c-4e33-880c-7b2cd611537e",
            "tags": "clickfix,etherhiding,stealer",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1855412": [
        {
            "ioc_value": "77.247.88.88:46996",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,ssh",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855545": [
        {
            "ioc_value": "https://vitamina.ppg.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vitamina.ppg.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855543": [
        {
            "ioc_value": "https://yapakesa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/yapakesa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855544": [
        {
            "ioc_value": "https://vpaaconsulting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vpaaconsulting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855542": [
        {
            "ioc_value": "https://wickedstickers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wickedstickers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855541": [
        {
            "ioc_value": "https://vspjconsulting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vspjconsulting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855546": [
        {
            "ioc_value": "https://unepetiteagence.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/unepetiteagence.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855547": [
        {
            "ioc_value": "https://www.whatgreeninvestment.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.whatgreeninvestment.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855548": [
        {
            "ioc_value": "https://totalpackagelandscape.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/totalpackagelandscape.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855549": [
        {
            "ioc_value": "https://itds.at/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/itds.at",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855550": [
        {
            "ioc_value": "https://thecompound.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thecompound.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855551": [
        {
            "ioc_value": "https://terrynbouwburo.be/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/terrynbouwburo.be",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855553": [
        {
            "ioc_value": "https://tanahabangmini.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tanahabangmini.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855552": [
        {
            "ioc_value": "https://sigarv.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sigarv.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855554": [
        {
            "ioc_value": "https://sakuratex.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sakuratex.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855555": [
        {
            "ioc_value": "https://swodeck.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/swodeck.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855556": [
        {
            "ioc_value": "https://www.sergiosworldbeers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sergiosworldbeers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855557": [
        {
            "ioc_value": "https://rinconada.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rinconada.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855558": [
        {
            "ioc_value": "https://www.radioradiosa.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.radioradiosa.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855559": [
        {
            "ioc_value": "https://rayyau.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rayyau.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855560": [
        {
            "ioc_value": "https://putti.lv/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/putti.lv",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855561": [
        {
            "ioc_value": "https://photovideosound.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/photovideosound.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855562": [
        {
            "ioc_value": "https://redbanksia.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/redbanksia.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855563": [
        {
            "ioc_value": "https://insights.business/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/insights.business",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855564": [
        {
            "ioc_value": "https://hoddan.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:12:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hoddan.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855575": [
        {
            "ioc_value": "https://archi3d.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/archi3d.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855578": [
        {
            "ioc_value": "https://helpgames.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/helpgames.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855579": [
        {
            "ioc_value": "https://greycells.co.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/greycells.co.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855592": [
        {
            "ioc_value": "https://stargateauto.site/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stargateauto.site",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855593": [
        {
            "ioc_value": "https://madeat531.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/madeat531.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855594": [
        {
            "ioc_value": "https://made-concept.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/made-concept.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855595": [
        {
            "ioc_value": "https://marcofabbri.be/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/marcofabbri.be",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855596": [
        {
            "ioc_value": "https://investmult.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/investmult.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855597": [
        {
            "ioc_value": "https://emmarholmes.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/emmarholmes.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855598": [
        {
            "ioc_value": "https://seim-linden.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/seim-linden.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855602": [
        {
            "ioc_value": "45.76.182.55:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 05:11:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855603": [
        {
            "ioc_value": "https://lcouvez.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lcouvez.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855604": [
        {
            "ioc_value": "https://turboquattro.no/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/turboquattro.no",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855605": [
        {
            "ioc_value": "https://viplife.co.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/viplife.co.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855610": [
        {
            "ioc_value": "https://thewrayforward.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thewrayforward.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855629": [
        {
            "ioc_value": "192.175.127.217:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/192.175.127.217",
            "tags": "APC-injection,bitsadmin,ClickFix,EarlyBird,trycloudflare",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1855838": [
        {
            "ioc_value": "137.184.135.42:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-23 05:11:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855843": [
        {
            "ioc_value": "45.74.3.37:9",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-23 05:11:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1855852": [
        {
            "ioc_value": "https://mbarc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-23 05:11:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mbarc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855864": [
        {
            "ioc_value": "hzek.bachelorpartyideasdenver.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855861": [
        {
            "ioc_value": "ehnrkbgw.tastebudspopcorncanton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 05:03:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855859": [
        {
            "ioc_value": "vmgs.autumnleavestreeremovalct.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 04:28:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855858": [
        {
            "ioc_value": "zvtw.birladharamshaala.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 04:24:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855857": [
        {
            "ioc_value": "autumnleavestreeremovalct.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 04:23:08",
            "last_seen_utc": "2026-07-23 04:23:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855856": [
        {
            "ioc_value": "birladharamshaala.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 04:22:09",
            "last_seen_utc": "2026-07-23 04:22:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855854": [
        {
            "ioc_value": "57b0rv7c.sansekerta.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 03:53:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855853": [
        {
            "ioc_value": "109.248.150.244:1070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-23 03:35:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1f79f7239d6f8cd9224064830720909884f98b989c1d7d01d90a3de686f02641/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855850": [
        {
            "ioc_value": "https://ssf.majusm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 03:26:46",
            "last_seen_utc": "2026-07-23 09:26:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855851": [
        {
            "ioc_value": "ssf.majusm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 03:26:46",
            "last_seen_utc": "2026-07-23 09:26:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855849": [
        {
            "ioc_value": "ckjr.augustus-kirby.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 03:24:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855848": [
        {
            "ioc_value": "ybzb.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 03:23:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855842": [
        {
            "ioc_value": "oyda.azautotraders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 02:47:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855839": [
        {
            "ioc_value": "cugl.audiovideoinsightllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 02:23:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855833": [
        {
            "ioc_value": "pcwx.thechildrencomefirst.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 01:56:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855832": [
        {
            "ioc_value": "4mrkjecd.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 01:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855829": [
        {
            "ioc_value": "ae58622241092d9ba1d2426a875119a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:48:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855826": [
        {
            "ioc_value": "face4acb042c323fca0ead3463d0e896",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.rn_stealer",
            "malware_alias": null,
            "malware_printable": "RN Stealer",
            "first_seen_utc": "2026-07-23 01:48:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855827": [
        {
            "ioc_value": "ef8f821a54f3f07ae8036c005c7656aa755f8078de6c70a1a8f72ebafe35fe69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:48:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855828": [
        {
            "ioc_value": "514853c657defc7e450cce08e5884fce6c0c1066",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:48:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855823": [
        {
            "ioc_value": "9460a4fc5ef4a5f6a8a3b851398c0b44",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:48:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855824": [
        {
            "ioc_value": "4c897108e8e793d6904110928c996815c302d6975c9bc61162149e855a963d50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.rn_stealer",
            "malware_alias": null,
            "malware_printable": "RN Stealer",
            "first_seen_utc": "2026-07-23 01:48:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855825": [
        {
            "ioc_value": "b3f6efdbac7547ee988417c636a9eea999e8eebb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.rn_stealer",
            "malware_alias": null,
            "malware_printable": "RN Stealer",
            "first_seen_utc": "2026-07-23 01:48:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855821": [
        {
            "ioc_value": "75a0d2b32af70bcbffb8ed27215b60c924efd460a85cd21013fc1b83e1d2fdc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:48:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855822": [
        {
            "ioc_value": "4b21892cf36b9e75f7ce2ee7e42227187a79f5e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:48:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855819": [
        {
            "ioc_value": "bd6c7efbdd13e521de1f00c22b2bc8104e2c10c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:48:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855820": [
        {
            "ioc_value": "512bb4a122568ab91f86b9bb716739a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:48:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855816": [
        {
            "ioc_value": "709ea37c2d8c2bc532b065d95af124d9a7dab1c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855817": [
        {
            "ioc_value": "0a635961383389c90b59d8104d1a70cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855818": [
        {
            "ioc_value": "72935b04a5ab38bfd9240514cd205935f7ffe921ae5a61d0b389495235feaeb3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:48:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855814": [
        {
            "ioc_value": "4b1ff336071a687cd35ef14ad285c854",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:48:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855815": [
        {
            "ioc_value": "ee313cc02f4f644e2a80a407a4971faa06df65ac484d1bd0f57e62eb2c55d8bd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855811": [
        {
            "ioc_value": "f9f49c54ef5a103b4efdfba8fe7bc54e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:48:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855812": [
        {
            "ioc_value": "ab161caf790e0722f10c95343132e648a3d64185ed575834e5a9853c9dca7618",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:48:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855813": [
        {
            "ioc_value": "9d7477931b00cfcd23ae914fc2bb8f781cfc7616",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:48:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855808": [
        {
            "ioc_value": "3eb6186b67791934b8e94d9ba5324abd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855809": [
        {
            "ioc_value": "42b7109a719a560e98953125a7c9b2fa3c9167312414ad379d88998a8a74665f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:48:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855810": [
        {
            "ioc_value": "f146650f0bc4339f236ef3cbbb98907223fe9890",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:48:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855806": [
        {
            "ioc_value": "fbc50ceb7446e4fca98ef34e5cf46ab650bb41f4abd1b93aa58778abe09155aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855807": [
        {
            "ioc_value": "26be56d9632f4d36cbd7cf59970a5e45a1c43254",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855802": [
        {
            "ioc_value": "108834f2d3ba6a9731c100c4f30a2825",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855803": [
        {
            "ioc_value": "764432a2592954ad4cf70f8c62b46ee81e55457b66b972e77de3e51017c02b10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:48:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855804": [
        {
            "ioc_value": "aa96729683ceab996103be5b55ea022e88330ffc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:48:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855805": [
        {
            "ioc_value": "470113d5421bc42ade9214abcafb4eb2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:48:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855800": [
        {
            "ioc_value": "90c46ec7e2400e4999afe7ad56f205afecb41041493ae2884c76666a77c82f8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855801": [
        {
            "ioc_value": "e45bdb988bc5dea61cb4833323bc2adb09568b6c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855798": [
        {
            "ioc_value": "7bfc9791f8645400f209a638810c0fb321bb8fbd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855799": [
        {
            "ioc_value": "44ef192c90d9ea302acceb3a7c70d8c2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855797": [
        {
            "ioc_value": "08916c59ba59c089e9d1140b6efa03611785e5c40d907cbb797e0f958be2dc29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855793": [
        {
            "ioc_value": "47e1b3a9fe7bd09242acbcbd0d515ded",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 01:48:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855794": [
        {
            "ioc_value": "b32527764b33b7584ab9466b5c34efe0e4c24daf2e19e792ce2bca59bd3bc4f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855795": [
        {
            "ioc_value": "65cd9bfca4f1326afa72ea4051cc72f9b8395ae1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855796": [
        {
            "ioc_value": "96d9b2e24488bf537a17b488e4aadc19",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855791": [
        {
            "ioc_value": "5fd493615b731c767be670d33a4e48ec89ad264bf583c2b087d7645a4727986b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 01:48:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855792": [
        {
            "ioc_value": "311cad9a898b4f64dfdeae1c5128fb81f2fb34cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 01:48:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855787": [
        {
            "ioc_value": "895c99e22e6da193dcdc7b895f53217b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-23 01:48:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855788": [
        {
            "ioc_value": "ad5a8f0a70678395eee394dbe48b2508784e06f37e7a980f4bd61599d180360d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-23 01:48:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855789": [
        {
            "ioc_value": "7c68c908dddecfa9ad6b4096f81127d46f1ca0d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-23 01:48:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855790": [
        {
            "ioc_value": "22ce9b4f200c32eeb293116301e97307",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-23 01:48:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855784": [
        {
            "ioc_value": "de7490e3bc31ad29ece7a3e275588d18",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-23 01:48:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855785": [
        {
            "ioc_value": "9236af4b0d79c2cd99e098b7e599106d85f377af7f2cab91e2cf733bfaeea43b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-23 01:48:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855786": [
        {
            "ioc_value": "65a887df163d492e207378e28962c059d5f075ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-23 01:48:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855782": [
        {
            "ioc_value": "310fcb28fd0a6616bea7db2a16414117507e449e0d7c27bf5fb1651b0e13ba7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-23 01:48:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855783": [
        {
            "ioc_value": "31ec4759a1e9fa2714eab2772a607fe36356fb7a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-23 01:48:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855778": [
        {
            "ioc_value": "85a032fedb8609b1bdc827115a5f5804",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855779": [
        {
            "ioc_value": "bbdb4e10ba2e085d83eeb97b10efc6f446cf040cfd10deb0ee48c375f4805953",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-23 01:48:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855780": [
        {
            "ioc_value": "3d4a32be0683889cb04ac6b4bcd979da84f34115",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-23 01:48:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855781": [
        {
            "ioc_value": "702503357d409579fe658b1a518d93a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-23 01:48:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855776": [
        {
            "ioc_value": "bfca8d582b0e243642dbb6f9cd945fc4f2c60d33e17062e8438c7820ac1372fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855777": [
        {
            "ioc_value": "b1019c19f9bf41b61abaa63c56089f76a8ce8884",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855773": [
        {
            "ioc_value": "5bcc88a01ec83f5fb45d0c329e6e16e8b6e74ffbb9b59d739507244604f16b53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-23 01:48:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855774": [
        {
            "ioc_value": "99d8a43baa68071ce5a0e5977b38bd346d5a87ba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-23 01:48:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855775": [
        {
            "ioc_value": "742e2171bb80e2aeed2f74a50d018cc3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-23 01:48:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855769": [
        {
            "ioc_value": "148c0d6f40d8c3bab6429761dd04fdd2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-23 01:48:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855770": [
        {
            "ioc_value": "13ee006f629843e9d74482b9b6a5cc2a7deb7c343729e69bc92d5f10c0c1879d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855771": [
        {
            "ioc_value": "62fe7c80aac811faf12b6c35f494ce0e3ab0a274",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855772": [
        {
            "ioc_value": "dd348ba303af14edfbf64a1ee1b67150",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855766": [
        {
            "ioc_value": "9d59e6476c4022f7dbb738d7207cad30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:48:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855767": [
        {
            "ioc_value": "6cfe4697bd8bc1509ac9ce6db874c2f0c2dba396167f92e89953bf2c71ba002d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-23 01:48:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855768": [
        {
            "ioc_value": "bf93fdd033e13cfcc64e7a165210ea239997dff3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-23 01:48:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855763": [
        {
            "ioc_value": "a998a470d68a17d1912685639320fd3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:48:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855764": [
        {
            "ioc_value": "6dc941968b3bc93e3f5709972f0ce23395eb65465fa23ddd68b8cb6ca52ddd0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:48:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855765": [
        {
            "ioc_value": "38a59765e43a7ea47ee773f001742c75670a8579",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:48:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855761": [
        {
            "ioc_value": "1501fb778e9ceefc0dca1f8cfe8c9fdd1738db5f6dbb0032348f3e161391d016",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:48:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855762": [
        {
            "ioc_value": "85ba9dadb71f696bd751ad5a031801f6704a34ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:48:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855757": [
        {
            "ioc_value": "218561da1c8f6b975d088e8ac4976795",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-23 01:48:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855758": [
        {
            "ioc_value": "ac197dc54bf1c690dce6eff2024651fee1c57f3273ef4deb253854fe2b0afba7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855759": [
        {
            "ioc_value": "e433cca452309f84f87100208fd3354d643643b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855760": [
        {
            "ioc_value": "710f0942c75f9b12c61f55c166b50fc4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855754": [
        {
            "ioc_value": "ef696834a9cae24973bb0d5f42d0d5d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.lambert",
            "malware_alias": "Plexor",
            "malware_printable": "Lambert",
            "first_seen_utc": "2026-07-23 01:48:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855755": [
        {
            "ioc_value": "dab034d5e6609eee42d40f4d61a0b95aa9dc4765c15d3d3dff81a2a16d7315bd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-23 01:48:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855756": [
        {
            "ioc_value": "65ecb0ec3954700dc5a7f9759996032e08c653e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-23 01:48:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855751": [
        {
            "ioc_value": "24f1c6fbb6cd28d53117bfbef3e9ec08",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 01:48:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855752": [
        {
            "ioc_value": "5da46290c303a3acb2b8f5ec1792f33728903b7700e742c9e37aac026270245b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lambert",
            "malware_alias": "Plexor",
            "malware_printable": "Lambert",
            "first_seen_utc": "2026-07-23 01:48:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855753": [
        {
            "ioc_value": "218c38724c6d59921894b98c15ed431e1ce17a3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.lambert",
            "malware_alias": "Plexor",
            "malware_printable": "Lambert",
            "first_seen_utc": "2026-07-23 01:48:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855750": [
        {
            "ioc_value": "056db76657f3108c8db03a33c59db1fa8ee1cd14",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 01:48:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855746": [
        {
            "ioc_value": "fb881f10b82cd577893fc57375fcfa43a5650c395f82ab42c18eca04874679d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855747": [
        {
            "ioc_value": "b4887b506b23eab809e9ba44c7733697ee82173c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855748": [
        {
            "ioc_value": "b7a1013cd426ba6847ed608ea7128584",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855749": [
        {
            "ioc_value": "e5dda4e7dc6b95830c066b519383e71abd4fb0a2340c0def898f635d9cfa13e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-23 01:48:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855743": [
        {
            "ioc_value": "47f8790c9b5b9aab6ae179a192a91d4a5b4e6aac17c14f103858fa3b72ceba25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.blackmatter",
            "malware_alias": null,
            "malware_printable": "BlackMatter",
            "first_seen_utc": "2026-07-23 01:47:59",
            "last_seen_utc": "2026-07-29 04:32:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855744": [
        {
            "ioc_value": "ac22c26cae3ae7842b8e60eb3ec23a0cdc16b88d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.blackmatter",
            "malware_alias": null,
            "malware_printable": "BlackMatter",
            "first_seen_utc": "2026-07-23 01:47:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855745": [
        {
            "ioc_value": "4af3347681b6ef41b4d8a444c03ac6ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.blackmatter",
            "malware_alias": null,
            "malware_printable": "BlackMatter",
            "first_seen_utc": "2026-07-23 01:47:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855741": [
        {
            "ioc_value": "69ecc978c6058b4c17f68693228c72a198757635",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:47:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855742": [
        {
            "ioc_value": "eba7c112a3522d28fc665e6384945ffc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:47:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855737": [
        {
            "ioc_value": "efadd757ffcdc156c9dbcac6745e70be5ca5174636d8853518839da82cf7e7b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855738": [
        {
            "ioc_value": "f464e40ef739466b9a836b725575c4c396a6cb9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855739": [
        {
            "ioc_value": "cb223174213a026c0dea090fc60de840",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855740": [
        {
            "ioc_value": "85142e27e44b83ae26230454694d1666652e718e3764e57a1d6539c83e448402",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:47:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855735": [
        {
            "ioc_value": "1f76ccce7f9bd948bfaa9e8fce0932951fe6e10d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855736": [
        {
            "ioc_value": "e8c5b5e6688f1b2ff4d72025e94e7b62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855731": [
        {
            "ioc_value": "6209b9f4af44f71e7b319c5b406603a6f15da3c7d8ca6bd06d434af65269990e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-23 01:47:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855732": [
        {
            "ioc_value": "c5f87d73051dcaddc335c2afee83178da9c5dc13",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-23 01:47:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855733": [
        {
            "ioc_value": "da0389526f86ac97819f464e3f1e8955",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-23 01:47:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855734": [
        {
            "ioc_value": "480bdd66621a0869dff575523f7e4ad5b7528744c1dc40f6f80bc85233433186",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855728": [
        {
            "ioc_value": "f407599100049194ce1289c24ab29a1aae7b9315369a08c012bbce2a72836297",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855729": [
        {
            "ioc_value": "33ace9fc8f80a4dbc35c9ffcacbf48ed10e372f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855730": [
        {
            "ioc_value": "79fe4da41e8136ba9fde4b269b497681",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855725": [
        {
            "ioc_value": "5e3f1dfa4b61b2e89c747b24bb8872f3d6aca557c2e89f867fdd3be112b18481",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855726": [
        {
            "ioc_value": "b40d81a2f40e3ddcdac8b7dc8d7f98dfdeb692d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855727": [
        {
            "ioc_value": "a5e14e67ed05dd0c1f4be5d923d24cb9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855721": [
        {
            "ioc_value": "5b1dbd70489b4ea2628d17733f141a25",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855722": [
        {
            "ioc_value": "d522aa8fab045f887e61992612d29696444e68104c1aa151219a526115ba1f4c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-23 01:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855723": [
        {
            "ioc_value": "d7953815217ebc2c5b4055a48de5783ef06120de",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-23 01:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855724": [
        {
            "ioc_value": "4c2dcc452a001e8d2d24f656e39ade24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-23 01:47:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855718": [
        {
            "ioc_value": "5b1204b44db0ecd0d72fe97adbbb1c5e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-23 01:47:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855719": [
        {
            "ioc_value": "88b1992718e4ba9abeec72bb8be2945c402354ca6a1407dfe09de0a8b773dec3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855720": [
        {
            "ioc_value": "e9013962701599851205055884858aa368d5eb57",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855715": [
        {
            "ioc_value": "732b551970c4f96c30cfde0565bb638e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855716": [
        {
            "ioc_value": "3db527a58b83f8422fc10029f337d5663005d2ca1a1667fb221e6672ed5ba360",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-23 01:47:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855717": [
        {
            "ioc_value": "9f9304bdf288fa5ccab32a837fa5f94bd7b7be15",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-23 01:47:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855712": [
        {
            "ioc_value": "411ba5fe7a02e876911a832fe105657d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855713": [
        {
            "ioc_value": "8836a9fbb659a8bcd2a400fd0f1b971d92b46cea173a583508010f6db52d3274",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855714": [
        {
            "ioc_value": "f1e8e55c31892eb323b5f71afcc2dd82938e03ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855708": [
        {
            "ioc_value": "15ca284e6855ee736443a9c7dd1a624da929c42f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855709": [
        {
            "ioc_value": "05841816e5acb11f3c46b0bf992743fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855710": [
        {
            "ioc_value": "f0f8c5389c9639798e99825b0ef038868c6170d7225d7fd7509cb8a246fb411b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855711": [
        {
            "ioc_value": "bf3b34479b707b5653f521e4ad68cde6eee4723d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855705": [
        {
            "ioc_value": "bc63c420e9112c2b4fb9aff97a0ffab8c93b5d0c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-23 01:47:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855706": [
        {
            "ioc_value": "b0a3221096478ce6a89495224ba4deb0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-23 01:47:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855707": [
        {
            "ioc_value": "354bf39ac11e66c61d8236a4ecdf7231e9b458d2943b7868e01b03c267e90096",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855702": [
        {
            "ioc_value": "9175fbce719442bbd2768a1e67c4fb94a6f3c367",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-23 01:47:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855703": [
        {
            "ioc_value": "7192731baec2a32f438a994c15f8ce8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-23 01:47:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855704": [
        {
            "ioc_value": "d0285d9b5584f7af316b695a7a45f65c7a7f1c83dca76e4029ddfb97bce25049",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-23 01:47:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855700": [
        {
            "ioc_value": "71d7459d44d8e6017b2bd14542a71c3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855701": [
        {
            "ioc_value": "b24fefefe8a95d6a765caff9b0ae40ed480dfdbfe2e5a46848b1a9d895ec83e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-23 01:47:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855696": [
        {
            "ioc_value": "33ca049d12dcb1f23ba998abb11d08110381ba8a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855697": [
        {
            "ioc_value": "b7721cf13508b02083feb0b010534423",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855698": [
        {
            "ioc_value": "10d403fbc19c7a382127a50eda809cc020fbabcabb7564d311d7de99935e01e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855699": [
        {
            "ioc_value": "b01c3e22af610b4c91c54ab80573481ebfbf9c19",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855693": [
        {
            "ioc_value": "b69d457a1e0a2f96fec11d371dca46d53117d9b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855694": [
        {
            "ioc_value": "02d713f4c3b31e93e1d21a7e071950db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855695": [
        {
            "ioc_value": "9992545ef435706e582bd516988195df8bae9985ff70d30ea2c20dc5206dfe3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855690": [
        {
            "ioc_value": "61464c72fdacc7c21a4238685546324131d760bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855691": [
        {
            "ioc_value": "213a13d658d47d269c6409eae79a9545",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855692": [
        {
            "ioc_value": "15788c62947475684edd84228a6167f915b68bb8ca81e9791a045995d72db38c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855688": [
        {
            "ioc_value": "b679a2beed0436eec3009d85882e57eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855689": [
        {
            "ioc_value": "546315806d197b8abeb8cbf024001c993b3ce347650eef8629b1f9b568cb8d86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855684": [
        {
            "ioc_value": "56fb375e0034f74fe8d698101fc4a4bd55b4decc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-23 01:47:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855685": [
        {
            "ioc_value": "e8a7ac97305bb29d2125dd9edeada249",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-23 01:47:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855686": [
        {
            "ioc_value": "a767946d8b54dfd0059012f87afeb9113d112b01e32db8359cadf60233b5bdd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855687": [
        {
            "ioc_value": "44ec8792f73c32880fca4997687734c671a052cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855681": [
        {
            "ioc_value": "9f064fac0e6fefc09338717338946002ee442d44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855682": [
        {
            "ioc_value": "63f0a90d02a53d468fd0084f01f5c051",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855683": [
        {
            "ioc_value": "cc947171d75e10754ecc10f1c560fbc9aa640e47fc10365d158a011677301310",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-23 01:47:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855677": [
        {
            "ioc_value": "d91084567f60c19702fd31ccbb03eab02b8681ade212212084e528c72370b66a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:47:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855678": [
        {
            "ioc_value": "aece1880087650e010c675a008cc780ab449720c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:47:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855679": [
        {
            "ioc_value": "5789ea58a3526ca028be23ddfcc70e9c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-23 01:47:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855680": [
        {
            "ioc_value": "9e3a55fb3dc6ecda84471b6b425259095f7237c607f5843af1582ecd0eddd624",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855674": [
        {
            "ioc_value": "bcb032caab1a92fa1257409a53bfa6d4704d8ed02b02572b0c6db1d206f5f870",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855675": [
        {
            "ioc_value": "f9804fb2d1830fec0d58512d29e6ae809467f7ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855676": [
        {
            "ioc_value": "a751e2fa583b9460ba600c6b43a51aa2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855671": [
        {
            "ioc_value": "4d94c1c41fdc9d7c77a4cd2eed5d03bebade3bc7f916f75c76fd5e3503f2df2c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-23 01:47:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855672": [
        {
            "ioc_value": "2be4360b68af437d52e127d2881f96191e239878",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-23 01:47:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855673": [
        {
            "ioc_value": "69a80c661490fc3f54873eda9f678b9c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-23 01:47:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855668": [
        {
            "ioc_value": "289c17c4dec8773aca593e4801b1c32a560df755af602efc54f0d5b7155f3eb5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855669": [
        {
            "ioc_value": "6d201b633274a78169bf511bcd4dc4e0bbf12a6e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855670": [
        {
            "ioc_value": "c1bdcd152d0a396950b8996ab1c5c239",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-23 01:47:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855666": [
        {
            "ioc_value": "60e26cfee4817ebcdfee1448396ef6e6a9b05469",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855667": [
        {
            "ioc_value": "2d569c5eaec74172ee46fb7af42962fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855662": [
        {
            "ioc_value": "942f2668e6611ce547411ba1a04224aefe461acf710f29a9ce7663607a125b41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-23 01:47:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855663": [
        {
            "ioc_value": "66da0fd03399463971ca71d898a8f2ec49a13c4e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-23 01:47:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855664": [
        {
            "ioc_value": "4aeff1b8916c6a4c9e6b4c65f4012994",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-23 01:47:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855665": [
        {
            "ioc_value": "b134896ab4f8a75cb79f559a1f3aa65b5cae52a3c39fb95ac8371d600c2c92a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855660": [
        {
            "ioc_value": "65da6850d086d2fbeff693f9c1499fda09f91895",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-23 01:47:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855661": [
        {
            "ioc_value": "2a3379120119c12e6281193c3f864c80",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-23 01:47:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855656": [
        {
            "ioc_value": "43b112c2bf170cb564047c064e9604dec8b28872e3171ec5c9c41f41baf92f53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:47:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855657": [
        {
            "ioc_value": "d079e715f7d64fb847b02701a9a376d5f88f7197",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:47:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855658": [
        {
            "ioc_value": "3e1c17a4235847b047e56501512a0af9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-23 01:47:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855659": [
        {
            "ioc_value": "59c292aaa6b81e0de85fd7f463c7042f680c49e00f7e0027e6d0940a0fc88d9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-23 01:47:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855653": [
        {
            "ioc_value": "32c9bf96fb8c0d6ad0d3a3d2707a8a9ae0b95ccefaa26ad0e33b518d9fd0a608",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-23 01:47:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855654": [
        {
            "ioc_value": "f4918cc9dd1ed3ae3481ab7ed1617eb6f7dc98d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-23 01:47:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855655": [
        {
            "ioc_value": "72ff3b17e97c7dd4f88bba3e7b7aa2e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-23 01:47:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855650": [
        {
            "ioc_value": "7a3a1ea98dd7a705e7f213d1466aee55c010d418bab8a9c174fa9f46040d1e1e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855651": [
        {
            "ioc_value": "a38457696be516b3df94d5447b18efca897bedb1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855652": [
        {
            "ioc_value": "3534bb2163564f8326a7af28958fb6d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855647": [
        {
            "ioc_value": "336b57387bf7f74d2b707d2908e21c26fe75a7acc0d0471ba73fc606a6f6a777",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-23 01:47:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855648": [
        {
            "ioc_value": "e429531543547497acfbd74e4b322c32aa4e6974",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-23 01:47:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855649": [
        {
            "ioc_value": "2e8485c56f8045122064cc3cd30679b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-23 01:47:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855645": [
        {
            "ioc_value": "1659d6a87f533bf3443f11a69c13d05f24ca28cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855646": [
        {
            "ioc_value": "2ef3065371366c7ef99577f4252b8c3c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855641": [
        {
            "ioc_value": "daf8f37785d226524b5403bc24e018955f01d5d2ce7d0952cb74c18bd79d09be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-23 01:47:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855642": [
        {
            "ioc_value": "bbf557d7b8ae61cec5b68d251ea12c78c97453f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-23 01:47:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855643": [
        {
            "ioc_value": "b63697cb6128ae927b67e1f95fcbbe0f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-23 01:47:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855644": [
        {
            "ioc_value": "1d83f7830dfad00877f7582bf2505463ce5f035a70d837d997c4f26852912288",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-23 01:47:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855638": [
        {
            "ioc_value": "f12c120af203e20c35f019ff8eefc52a3cc5fae18b4a55e9a8c835d6ee88f098",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855639": [
        {
            "ioc_value": "2430d4d428b8f4a4f63b3f62d917ae49afeed37a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855640": [
        {
            "ioc_value": "a6482ea44033007a9da963cd3ff5ce49",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855636": [
        {
            "ioc_value": "154484d6e6775ebef39dfdf7d3ca6c2f2a99d4fa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855637": [
        {
            "ioc_value": "7cec47740ae2e3a5914bb46bc2d0ffc6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855632": [
        {
            "ioc_value": "b172dbfbe82bb1ab9455c62688e47256a16233c21925ac450cab33b708c0ede8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855633": [
        {
            "ioc_value": "d9ea5b44988c76f0c7051fd66eba3fecd440d6b0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855634": [
        {
            "ioc_value": "b0c149367245352b5a12e181664da0e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-23 01:47:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855635": [
        {
            "ioc_value": "b811dce1aae1c0e0da249d5eb19dfd5b2640214627c9603b97f6f79c25a22e97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-23 01:47:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1855631": [
        {
            "ioc_value": "vggl.thunderinternationalgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 01:45:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855625": [
        {
            "ioc_value": "jfpi.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:51:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855624": [
        {
            "ioc_value": "hloj.bangla-mart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:49:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855623": [
        {
            "ioc_value": "bangla-mart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:44:06",
            "last_seen_utc": "2026-07-23 00:44:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855622": [
        {
            "ioc_value": "oh3nc2mh.monicarobles.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855620": [
        {
            "ioc_value": "bvd0k429.maia-bentley.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:38:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855619": [
        {
            "ioc_value": "lard.asset-images-konoha.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:11:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855618": [
        {
            "ioc_value": "asset-images-konoha.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-23 00:10:05",
            "last_seen_utc": "2026-07-23 00:10:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855614": [
        {
            "ioc_value": "uqfl.bambatagear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 23:46:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855613": [
        {
            "ioc_value": "bambatagear.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 23:43:33",
            "last_seen_utc": "2026-07-22 23:44:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855612": [
        {
            "ioc_value": "8jt1f2hv.wellcome-c-store.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 23:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855609": [
        {
            "ioc_value": "ksxu.thelazybunnyfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 23:10:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855601": [
        {
            "ioc_value": "vhxo.badgalbeautyllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 22:48:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855600": [
        {
            "ioc_value": "badgalbeautyllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 22:43:04",
            "last_seen_utc": "2026-07-22 22:43:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855599": [
        {
            "ioc_value": "pbhx.azautotraders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 22:41:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855587": [
        {
            "ioc_value": "nhku.azautotraders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 22:13:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855586": [
        {
            "ioc_value": "yujv.thehandymanconcierge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 22:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855585": [
        {
            "ioc_value": "azautotraders.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 22:08:17",
            "last_seen_utc": "2026-07-23 02:45:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855577": [
        {
            "ioc_value": "6rsny75a.tastebudspopcorncanton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 21:40:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855576": [
        {
            "ioc_value": "tastebudspopcorncanton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 21:39:34",
            "last_seen_utc": "2026-07-23 05:02:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855574": [
        {
            "ioc_value": "thewrayforward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 21:23:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855570": [
        {
            "ioc_value": "cqbl.thechildrencomefirst.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 21:09:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855569": [
        {
            "ioc_value": "gjpz.auladeingles.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 21:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855568": [
        {
            "ioc_value": "auladeingles.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 21:07:42",
            "last_seen_utc": "2026-07-22 21:08:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855540": [
        {
            "ioc_value": "nkvi.thunderinternationalgroup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 20:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855538": [
        {
            "ioc_value": "xroz.augustus-kirby.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 20:08:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855463": [
        {
            "ioc_value": "thechildrencomefirst.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:55:51",
            "last_seen_utc": "2026-07-23 13:35:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855461": [
        {
            "ioc_value": "wvgo.augustus-kirby.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:45:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855460": [
        {
            "ioc_value": "43.228.157.252:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:45:15",
            "last_seen_utc": "2026-09-01 02:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855459": [
        {
            "ioc_value": "43.213.142.102:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 19:45:14",
            "last_seen_utc": "2026-08-22 08:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855457": [
        {
            "ioc_value": "172.245.27.162:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:43:50",
            "last_seen_utc": "2026-08-22 08:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855458": [
        {
            "ioc_value": "172.245.27.162:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:43:50",
            "last_seen_utc": "2026-08-22 08:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855456": [
        {
            "ioc_value": "165.22.129.73:65000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 19:43:47",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855454": [
        {
            "ioc_value": "157.20.182.21:4442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:43:42",
            "last_seen_utc": "2026-08-27 18:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855455": [
        {
            "ioc_value": "157.20.182.22:1444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:43:42",
            "last_seen_utc": "2026-09-01 02:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855453": [
        {
            "ioc_value": "137.184.163.27:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 19:43:25",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855452": [
        {
            "ioc_value": "134.209.114.97:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-22 19:43:24",
            "last_seen_utc": "2026-08-24 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855451": [
        {
            "ioc_value": "12.187.175.73:8797",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855450": [
        {
            "ioc_value": "107.175.114.221:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 19:43:16",
            "last_seen_utc": "2026-08-22 08:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855448": [
        {
            "ioc_value": "sagxjkhp.solucionesintegralesgiraldo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:41:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855449": [
        {
            "ioc_value": "augustus-kirby.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:41:50",
            "last_seen_utc": "2026-07-23 03:23:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855447": [
        {
            "ioc_value": "pg22wk81.kuechen-welt.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:41:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855446": [
        {
            "ioc_value": "audiovideoinsightllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:40:31",
            "last_seen_utc": "2026-07-23 02:22:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855444": [
        {
            "ioc_value": "solucionesintegralesgiraldo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:39:00",
            "last_seen_utc": "2026-07-22 19:39:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855443": [
        {
            "ioc_value": "yz6ip5pa.kaltourusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:38:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855442": [
        {
            "ioc_value": "glowlogicgate.xenonraypoint.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855428": [
        {
            "ioc_value": "beam3meshsite.xenonraypoint.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:15:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855427": [
        {
            "ioc_value": "wheremymoney.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 19:10:20",
            "last_seen_utc": "2026-07-31 16:39:39",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855420": [
        {
            "ioc_value": "zcdd.therippleeffectcollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 18:53:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855418": [
        {
            "ioc_value": "ksms.therippleeffectcollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 18:49:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855417": [
        {
            "ioc_value": "therippleeffectcollc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 18:48:01",
            "last_seen_utc": "2026-07-22 18:54:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855416": [
        {
            "ioc_value": "xtxu.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 18:45:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855414": [
        {
            "ioc_value": "gte.majusm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-22 18:27:03",
            "last_seen_utc": "2026-07-22 22:27:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855413": [
        {
            "ioc_value": "https://gte.majusm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-22 18:27:01",
            "last_seen_utc": "2026-07-22 22:27:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "oz00x,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855400": [
        {
            "ioc_value": "dpdg.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:57:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855397": [
        {
            "ioc_value": "edtg.thelegalexpertise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:57:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855395": [
        {
            "ioc_value": "aokh.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:52:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855392": [
        {
            "ioc_value": "lncv1x6u.smokedamageinbellevue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:40:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855391": [
        {
            "ioc_value": "smokedamageinbellevue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:38:22",
            "last_seen_utc": "2026-07-22 17:39:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855389": [
        {
            "ioc_value": "futg.thelegalexpertise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:28:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855388": [
        {
            "ioc_value": "thelegalexpertise.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:26:52",
            "last_seen_utc": "2026-07-22 17:57:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855384": [
        {
            "ioc_value": "apfpf.trialvallidelcanera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 17:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855382": [
        {
            "ioc_value": "43.134.38.218:4543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 17:05:52",
            "last_seen_utc": "2026-09-01 02:45:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855379": [
        {
            "ioc_value": "kdyi.thetokestudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:52:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855378": [
        {
            "ioc_value": "thetokestudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:51:53",
            "last_seen_utc": "2026-07-23 13:33:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855377": [
        {
            "ioc_value": "nyre.tokobalindo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855374": [
        {
            "ioc_value": "auar.thebrandus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:32:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855373": [
        {
            "ioc_value": "thebrandus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:29:49",
            "last_seen_utc": "2026-07-22 16:30:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855372": [
        {
            "ioc_value": "gojq.theafribar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:27:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855370": [
        {
            "ioc_value": "bvsx.thelazybunnyfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:26:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855369": [
        {
            "ioc_value": "thelazybunnyfarm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 16:26:20",
            "last_seen_utc": "2026-07-22 23:10:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855365": [
        {
            "ioc_value": "zemmf2bl.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 15:41:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855364": [
        {
            "ioc_value": "ahwv.upthesmokee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 15:31:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855362": [
        {
            "ioc_value": "cock.thehandymanconcierge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 15:30:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855358": [
        {
            "ioc_value": "thehandymanconcierge.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 15:25:48",
            "last_seen_utc": "2026-07-22 22:09:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855351": [
        {
            "ioc_value": "epe20s1q.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:40:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855349": [
        {
            "ioc_value": "4sh78giy.jennyrussianbluepalace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:37:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855348": [
        {
            "ioc_value": "jrym.snydersflowershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:30:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855347": [
        {
            "ioc_value": "glrx.twobrothersjunkllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:26:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855327": [
        {
            "ioc_value": "91.92.42.213:1312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 14:17:30",
            "last_seen_utc": "2026-07-22 21:20:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1855332": [
        {
            "ioc_value": "2.26.229.254:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-22 14:17:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855345": [
        {
            "ioc_value": "tbzp.upthesmokee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855344": [
        {
            "ioc_value": "upthesmokee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:12:19",
            "last_seen_utc": "2026-07-22 15:27:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855336": [
        {
            "ioc_value": "dgmik.snydersflowershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 14:08:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855328": [
        {
            "ioc_value": "marvelouslooks.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 14:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855326": [
        {
            "ioc_value": "rnmhv672.segfortecorretoradeseguros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:39:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855325": [
        {
            "ioc_value": "segfortecorretoradeseguros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:37:18",
            "last_seen_utc": "2026-07-22 13:37:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855293": [
        {
            "ioc_value": "fabric16.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-22 13:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://mvm.lol/@merlin@kif.rocks/116963270035281731",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "tonik"
        }
    ],
    "1855294": [
        {
            "ioc_value": "kainashirt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-22 13:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://mvm.lol/@merlin@kif.rocks/116963270035281731",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "tonik"
        }
    ],
    "1855296": [
        {
            "ioc_value": "fc2009166867bee88885f2f889a608260cb971c1e946bbb79ea7d75ae0d429f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-22 13:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://mvm.lol/@merlin@kif.rocks/116963270035281731",
            "tags": "Amos",
            "anonymous": 0,
            "reporter": "tonik"
        }
    ],
    "1855324": [
        {
            "ioc_value": "dtub.twobrothersjunkllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855322": [
        {
            "ioc_value": "http://196.251.107.186/acovp/post.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-07-22 13:10:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/87d2052c1a961cf20137e158b32965ace9f1d85c3bd9744624ec0bd9346aed1b/",
            "tags": "svcstealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855321": [
        {
            "ioc_value": "http://196.251.107.163/bioxp/post.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-07-22 13:10:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/87d2052c1a961cf20137e158b32965ace9f1d85c3bd9744624ec0bd9346aed1b/",
            "tags": "svcstealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855320": [
        {
            "ioc_value": "http://192.162.199.186/usovp/post.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-07-22 13:10:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/87d2052c1a961cf20137e158b32965ace9f1d85c3bd9744624ec0bd9346aed1b/",
            "tags": "svcstealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855318": [
        {
            "ioc_value": "quqr.keymedconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855314": [
        {
            "ioc_value": "odomp.shopsoleilcollective.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855301": [
        {
            "ioc_value": "7b4b991e822eaebebd75246685ae83fc4594f32c4b3f8aaa73db575e243d3393",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855302": [
        {
            "ioc_value": "3a432ebb39e02f2e6397814ed931697fc820ed5ea1b41e2d595f26f5391adefd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855303": [
        {
            "ioc_value": "09051ca12c765d6924bfb0f749b039020f0b48bc172caea6bce36d4bb89a7669",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855304": [
        {
            "ioc_value": "28ed4300b02bf46b75bc6308f74d57256142d585227834c34bbfedfb4937bdc7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855305": [
        {
            "ioc_value": "0cee8e69fc0ac841371d917b70416fd015a0f68257f417ae02424f7bd3fb5e46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855306": [
        {
            "ioc_value": "ad934cf87b306026e1e983e5181d32fb3f6e472acd5a3d5d4b5e709b7baa72be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855307": [
        {
            "ioc_value": "8767ded54ab7a27b70b873e9cc35ee75088ff43c089731048f81da60fa01f9bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855308": [
        {
            "ioc_value": "d8f554e58aa646555f1b277ed9acb908bbaaf8654a6ff5b19b41716eb7e0ed9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855309": [
        {
            "ioc_value": "af2a34de39f74be9402871e3c947ba39df9e1556b11cd081be4d8a37cd2fa893",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855310": [
        {
            "ioc_value": "1f2778afba16c4fe5e06d233012b517f39e3dfc4f913e6e66ca4161ec998e6e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855311": [
        {
            "ioc_value": "ba4c2d8a377ae14b8c98750208405858b0b6419ea4f4f9c9699f2adad1d639f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855312": [
        {
            "ioc_value": "009023aeda3457861b31a4a8f29dfb058f16321f5621b1a74ebdb3137930158a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855313": [
        {
            "ioc_value": "b6849ce4f0c9c5a26b15b994a88e951c84cdb4a8721388878ed0c9bd1775cd67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 13:05:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://raw.githubusercontent.com/GossiTheDog/IoCs/refs/heads/main/StealerPlug",
            "tags": "StealerPlug",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855295": [
        {
            "ioc_value": "aawhn.salutemarket.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:01:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855292": [
        {
            "ioc_value": "tflo.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 13:00:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855290": [
        {
            "ioc_value": "seedhostunit1.biomasselement.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 12:56:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855291": [
        {
            "ioc_value": "leafpathgate.biomasselement.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 12:56:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855289": [
        {
            "ioc_value": "thetradestorevehicles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 12:55:28",
            "last_seen_utc": "2026-07-22 12:56:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855288": [
        {
            "ioc_value": "192.229.114.18:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-22 12:40:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855287": [
        {
            "ioc_value": "172.111.163.172:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-22 12:25:04",
            "last_seen_utc": "2026-09-01 03:18:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855276": [
        {
            "ioc_value": "xlwaf.virtuvespasaulis.lt",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 11:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855275": [
        {
            "ioc_value": "ozxc.stagneswv.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 11:56:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855273": [
        {
            "ioc_value": "stagneswv.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 11:54:56",
            "last_seen_utc": "2026-07-22 11:55:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855272": [
        {
            "ioc_value": "y71dzxlq.scissormasterstanningsalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 11:40:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855271": [
        {
            "ioc_value": "scissormasterstanningsalon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 11:36:48",
            "last_seen_utc": "2026-07-22 11:37:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855264": [
        {
            "ioc_value": "llcuj.virtuvespasaule.lv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 10:59:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855263": [
        {
            "ioc_value": "reku.sohosushigr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 10:55:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855261": [
        {
            "ioc_value": "sohosushigr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 10:54:26",
            "last_seen_utc": "2026-07-22 10:54:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855217": [
        {
            "ioc_value": "https://filpack.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-22 10:34:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/5b19a60b-8bbe-4c37-9c45-d09163119b99",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ThreatOpsX"
        }
    ],
    "1855218": [
        {
            "ioc_value": "95.85.238.57:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 10:34:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/88ea1d3b-09ce-4fda-9415-cd7a44693981",
            "tags": "Opendir",
            "anonymous": 0,
            "reporter": "ThreatOpsX"
        }
    ],
    "1855260": [
        {
            "ioc_value": "rootlogicway.biomasselement.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 10:26:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855256": [
        {
            "ioc_value": "quvf.sansekerta.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:56:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855255": [
        {
            "ioc_value": "wlphc.kuechen-welt.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:56:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855254": [
        {
            "ioc_value": "kuechen-welt.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:54:20",
            "last_seen_utc": "2026-07-22 19:40:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855251": [
        {
            "ioc_value": "goldunitpath.verdalya.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:49:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855252": [
        {
            "ioc_value": "cellpure9base.biomasselement.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:49:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855253": [
        {
            "ioc_value": "m.s-microsoft.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:49:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855250": [
        {
            "ioc_value": "s5y1e8c1.mofonloungewb.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:46:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855249": [
        {
            "ioc_value": "45.142.141.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-22 09:45:30",
            "last_seen_utc": "2026-08-30 08:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855248": [
        {
            "ioc_value": "23.94.197.120:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 09:45:17",
            "last_seen_utc": "2026-08-21 18:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855247": [
        {
            "ioc_value": "203.99.149.78:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 09:44:26",
            "last_seen_utc": "2026-08-21 18:44:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855246": [
        {
            "ioc_value": "20.200.61.22:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 09:44:24",
            "last_seen_utc": "2026-09-01 02:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855245": [
        {
            "ioc_value": "192.227.219.71:3341",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 09:44:15",
            "last_seen_utc": "2026-08-21 18:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855244": [
        {
            "ioc_value": "167.160.190.182:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-22 09:43:50",
            "last_seen_utc": "2026-08-21 18:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855243": [
        {
            "ioc_value": "157.20.182.21:1338",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 09:43:45",
            "last_seen_utc": "2026-08-29 18:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855242": [
        {
            "ioc_value": "157.20.182.21:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 09:43:44",
            "last_seen_utc": "2026-08-28 08:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855241": [
        {
            "ioc_value": "147.50.253.241:4415",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 09:43:34",
            "last_seen_utc": "2026-08-28 18:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855240": [
        {
            "ioc_value": "137.220.158.10:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-22 09:43:26",
            "last_seen_utc": "2026-08-25 18:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855239": [
        {
            "ioc_value": "132.145.210.148:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 09:43:25",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855238": [
        {
            "ioc_value": "104.248.69.160:65000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 09:43:14",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855236": [
        {
            "ioc_value": "enpji31a.impactpromotionsclt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:37:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855235": [
        {
            "ioc_value": "pixz1b5f.salsaonyxstudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:37:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855234": [
        {
            "ioc_value": "salsaonyxstudio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 09:36:18",
            "last_seen_utc": "2026-07-22 09:36:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855233": [
        {
            "ioc_value": "191.96.224.177:5552",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-22 09:15:54",
            "last_seen_utc": "2026-07-22 09:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3af05f96e69e75d243e1ca4e4fb62b31c29ae3eea529e5112a26729460d3e222/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855229": [
        {
            "ioc_value": "stormvenomforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-22 09:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855228": [
        {
            "ioc_value": "ktqwn.ktsoon.ee",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 08:56:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855226": [
        {
            "ioc_value": "217.60.241.34:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 08:55:56",
            "last_seen_utc": "2026-08-22 08:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/40b95ef52169126b3732d14479f1497715ec0f5bf1bc6fd0104188f7911f5fef/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855227": [
        {
            "ioc_value": "217.60.241.34:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 08:55:56",
            "last_seen_utc": "2026-08-23 08:46:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/40b95ef52169126b3732d14479f1497715ec0f5bf1bc6fd0104188f7911f5fef/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855225": [
        {
            "ioc_value": "kqut.pandlautoparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 08:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855223": [
        {
            "ioc_value": "pandlautoparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 08:53:26",
            "last_seen_utc": "2026-07-22 08:53:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855222": [
        {
            "ioc_value": "45.88.91.35:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-22 08:50:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09edc26a677870826648f171934793b831705359b356e7436751aab956921fd9/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855221": [
        {
            "ioc_value": "217.60.241.34:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-22 08:50:03",
            "last_seen_utc": "2026-08-22 08:45:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855220": [
        {
            "ioc_value": "http://93.152.223.30:5000/api/stealer/report",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 08:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/host/93.152.223.30/",
            "tags": "Stealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855219": [
        {
            "ioc_value": "93.152.223.30:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-22 08:48:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/host/93.152.223.30/",
            "tags": "Stealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855214": [
        {
            "ioc_value": "159.65.143.171:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-22 08:31:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855216": [
        {
            "ioc_value": "qselq.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 08:25:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855215": [
        {
            "ioc_value": "vsxc.webyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 08:21:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855202": [
        {
            "ioc_value": "http://vriclactrina.cz/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-07-22 08:06:59",
            "last_seen_utc": "2026-09-01 03:38:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,SmokeLoader",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855209": [
        {
            "ioc_value": "147.90.250.35:9155",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 08:05:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86a058d461cdc5486430c2f6b1800235a8fbfdbe7d1af4af5d2d2d2f003c7634/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855210": [
        {
            "ioc_value": "5.231.70.61:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 08:05:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86a058d461cdc5486430c2f6b1800235a8fbfdbe7d1af4af5d2d2d2f003c7634/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855206": [
        {
            "ioc_value": "31.76.244.171:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 08:01:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855205": [
        {
            "ioc_value": "94.26.90.219:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 07:57:32",
            "last_seen_utc": "2026-07-22 08:01:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8c1654ad1df9e9bf1c450657b12eb269d999934b83bbfdd59cbb886c6550f283/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855204": [
        {
            "ioc_value": "188.227.87.118:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 07:55:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ee5c5c69bb1c0d961dff49dd3bcfcef923406e1c2d80b662b76c611cd6fb94a3/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855203": [
        {
            "ioc_value": "94.154.43.102:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 07:51:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba05cace3369229c81af123cce385c78295c642918327df7a14a547b158fda84/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855199": [
        {
            "ioc_value": "5.231.70.61:4621",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 07:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d7bbf2d95d24046a8ae3a9b64c63ee280700434ce642df02d2530e13bcd8f2/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855200": [
        {
            "ioc_value": "129.121.114.124:5362",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 07:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d7bbf2d95d24046a8ae3a9b64c63ee280700434ce642df02d2530e13bcd8f2/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855201": [
        {
            "ioc_value": "129.121.114.124:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-22 07:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d7bbf2d95d24046a8ae3a9b64c63ee280700434ce642df02d2530e13bcd8f2/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855198": [
        {
            "ioc_value": "rmkr.webyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 07:40:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855197": [
        {
            "ioc_value": "bjpongw2.saleroblox.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 07:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855196": [
        {
            "ioc_value": "158.94.211.212:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-22 07:31:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3641be410d5da53702b6b8376e2b58d5ccfe78b90e97f6feb482b1a8855b5850/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855195": [
        {
            "ioc_value": "bdpcf.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 07:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855056": [
        {
            "ioc_value": "https://zaciszewbobrzy.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 06:54:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zaciszewbobrzy.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855067": [
        {
            "ioc_value": "72.62.195.74:5291",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-22 06:54:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6ed07eee8b090ad8c77052912c8a29a6,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855068": [
        {
            "ioc_value": "alkahan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 06:54:30",
            "last_seen_utc": "2026-08-19 21:11:43",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2318",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1855071": [
        {
            "ioc_value": "planet-grid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 06:54:27",
            "last_seen_utc": "2026-08-28 11:43:57",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2315",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1855079": [
        {
            "ioc_value": "gitenter.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-22 06:54:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1855076": [
        {
            "ioc_value": "carmag.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 06:54:23",
            "last_seen_utc": "2026-08-15 11:29:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/2143",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1855080": [
        {
            "ioc_value": "https://khaasbaatindia.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-22 06:54:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/khaasbaatindia.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855126": [
        {
            "ioc_value": "149.28.145.14:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-22 06:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855182": [
        {
            "ioc_value": "spfx.phimmoichilla.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 06:36:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855181": [
        {
            "ioc_value": "tnfoh.skygatewholesale.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 06:33:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855180": [
        {
            "ioc_value": "skygatewholesale.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 06:28:16",
            "last_seen_utc": "2026-07-22 06:28:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855172": [
        {
            "ioc_value": "raiselop.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.tonrat",
            "malware_alias": "TONResolver",
            "malware_printable": "TonRAT",
            "first_seen_utc": "2026-07-22 05:46:03",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855171": [
        {
            "ioc_value": "https://45.83.180.74",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-22 05:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3db527a58b83f8422fc10029f337d5663005d2ca1a1667fb221e6672ed5ba360/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855170": [
        {
            "ioc_value": "s617c6w1.rsudtarutung.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 05:37:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855169": [
        {
            "ioc_value": "uvfa.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 05:34:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855168": [
        {
            "ioc_value": "ykwpo.shopsoleilcollective.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 05:30:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855167": [
        {
            "ioc_value": "shopsoleilcollective.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 05:27:47",
            "last_seen_utc": "2026-07-22 14:24:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855166": [
        {
            "ioc_value": "yegs.taqueriadonamariaky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 05:10:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855164": [
        {
            "ioc_value": "taqueriadonamariaky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 05:05:42",
            "last_seen_utc": "2026-07-22 05:05:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855158": [
        {
            "ioc_value": "vtxdo.shawnmaltipoopuppies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 04:43:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855157": [
        {
            "ioc_value": "shawnmaltipoopuppies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 04:42:22",
            "last_seen_utc": "2026-07-22 04:42:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855156": [
        {
            "ioc_value": "phh4mjzz.missavws.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 04:40:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855154": [
        {
            "ioc_value": "4fkzvuv9.hurtigegevinster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 04:36:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855153": [
        {
            "ioc_value": "mbeo.studiofourfitnessnv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 04:06:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855147": [
        {
            "ioc_value": "cdzpf.seamsnstitches.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:42:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855146": [
        {
            "ioc_value": "seamsnstitches.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:41:53",
            "last_seen_utc": "2026-07-22 03:42:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855145": [
        {
            "ioc_value": "vgtrf.sdcwoodcraft.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:40:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855144": [
        {
            "ioc_value": "sdcwoodcraft.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:40:30",
            "last_seen_utc": "2026-07-22 03:40:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855143": [
        {
            "ioc_value": "t3x3brbb.rspmpanyabungan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:36:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855141": [
        {
            "ioc_value": "qsak.snydersflowershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:06:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855136": [
        {
            "ioc_value": "snydersflowershop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 03:04:40",
            "last_seen_utc": "2026-07-22 14:25:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855135": [
        {
            "ioc_value": "iqudg.salutemarket.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 02:41:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855134": [
        {
            "ioc_value": "salutemarket.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 02:40:01",
            "last_seen_utc": "2026-07-22 12:56:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855133": [
        {
            "ioc_value": "ywku.smoothbioticsgummies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 02:05:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855127": [
        {
            "ioc_value": "smoothbioticsgummies.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 02:04:16",
            "last_seen_utc": "2026-07-22 02:04:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855125": [
        {
            "ioc_value": "gorto.ridgerenovation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 01:40:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855124": [
        {
            "ioc_value": "yfma9er2.drrobertoiturralde.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 01:37:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855120": [
        {
            "ioc_value": "mpmu.slepsluzbaublizini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 01:05:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855119": [
        {
            "ioc_value": "slepsluzbaublizini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 01:03:38",
            "last_seen_utc": "2026-07-22 01:04:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855118": [
        {
            "ioc_value": "malekos.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_webinject",
            "malware_alias": null,
            "malware_printable": "Unknown Webinject",
            "first_seen_utc": "2026-07-22 00:50:31",
            "last_seen_utc": "2026-07-22 14:01:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1855117": [
        {
            "ioc_value": "clna.springhillcommons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 00:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855116": [
        {
            "ioc_value": "zqwhz.phimmoichilla.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 00:40:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855111": [
        {
            "ioc_value": "qyov.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-22 00:10:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855108": [
        {
            "ioc_value": "soyze.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 23:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855107": [
        {
            "ioc_value": "wig43mz5.keymedconsulting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 23:39:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855106": [
        {
            "ioc_value": "dccd28hw.hightidesuffolk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 23:39:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855104": [
        {
            "ioc_value": "octzfcoi.calculadoracomisiones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 23:37:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855103": [
        {
            "ioc_value": "xipr.reliablerentalz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 23:09:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855099": [
        {
            "ioc_value": "qkduh.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 22:40:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855098": [
        {
            "ioc_value": "zhbyv.everestpointnorthglenn.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 22:34:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855097": [
        {
            "ioc_value": "193.161.193.99:7474",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-21 22:31:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5fd493615b731c767be670d33a4e48ec89ad264bf583c2b087d7645a4727986b/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855096": [
        {
            "ioc_value": "http://aidrmvo.cn/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-21 22:25:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855095": [
        {
            "ioc_value": "159.223.110.159:50058",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-21 22:25:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855093": [
        {
            "ioc_value": "178.66.70.14:10776",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nworm",
            "malware_alias": "nw0rm,NWorm",
            "malware_printable": "N-W0rm",
            "first_seen_utc": "2026-07-21 22:25:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "N-W0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855094": [
        {
            "ioc_value": "206.238.20.21:6681",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-21 22:25:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855092": [
        {
            "ioc_value": "188.32.41.18:10777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nworm",
            "malware_alias": "nw0rm,NWorm",
            "malware_printable": "N-W0rm",
            "first_seen_utc": "2026-07-21 22:25:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "N-W0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855091": [
        {
            "ioc_value": "http://cy614451.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-21 22:25:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855090": [
        {
            "ioc_value": "107.174.33.15:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-21 22:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855089": [
        {
            "ioc_value": "141.11.243.110:60401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.adwind",
            "malware_alias": "AlienSpy,JSocket,Frutas,UNRECOM,JBifrost,Sockrat",
            "malware_printable": "AdWind",
            "first_seen_utc": "2026-07-21 22:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Adwind",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855088": [
        {
            "ioc_value": "193.161.193.99:49916",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-21 22:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855087": [
        {
            "ioc_value": "ndnj.webyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 22:08:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855086": [
        {
            "ioc_value": "webyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 22:07:05",
            "last_seen_utc": "2026-07-22 08:21:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855085": [
        {
            "ioc_value": "47.82.234.12:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-21 22:05:10",
            "last_seen_utc": "2026-08-18 11:58:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855078": [
        {
            "ioc_value": "gjif3sqh.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 21:35:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855077": [
        {
            "ioc_value": "eevmi.evansunitedspringcarnivalsherman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 21:34:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855062": [
        {
            "ioc_value": "ulqg.ridgerenovation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 21:07:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855057": [
        {
            "ioc_value": "nbaye.rickybobbystowing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 20:33:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855054": [
        {
            "ioc_value": "carbonmeshnode.verdalya.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 20:11:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855053": [
        {
            "ioc_value": "ymfr.ricardotaxiservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 20:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855052": [
        {
            "ioc_value": "ricardotaxiservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 20:06:03",
            "last_seen_utc": "2026-07-21 20:06:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855047": [
        {
            "ioc_value": "86.48.16.94:30100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-21 19:46:20",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855046": [
        {
            "ioc_value": "85.208.69.45:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-21 19:46:19",
            "last_seen_utc": "2026-09-01 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855045": [
        {
            "ioc_value": "45.59.120.31:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-21 19:45:46",
            "last_seen_utc": "2026-08-22 18:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855044": [
        {
            "ioc_value": "45.142.141.139:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-21 19:45:42",
            "last_seen_utc": "2026-08-29 18:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855043": [
        {
            "ioc_value": "43.213.171.100:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 19:45:41",
            "last_seen_utc": "2026-09-01 02:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855041": [
        {
            "ioc_value": "43.213.142.102:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 19:45:40",
            "last_seen_utc": "2026-09-01 02:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855042": [
        {
            "ioc_value": "43.213.171.100:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 19:45:40",
            "last_seen_utc": "2026-08-23 18:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855039": [
        {
            "ioc_value": "34.106.101.107:6932",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-21 19:45:33",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855040": [
        {
            "ioc_value": "34.28.220.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 19:45:33",
            "last_seen_utc": "2026-09-01 02:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855038": [
        {
            "ioc_value": "2.27.122.16:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-21 19:44:32",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855037": [
        {
            "ioc_value": "159.203.187.219:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-21 19:43:52",
            "last_seen_utc": "2026-08-20 18:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855036": [
        {
            "ioc_value": "147.50.253.241:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-21 19:43:38",
            "last_seen_utc": "2026-08-28 18:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855035": [
        {
            "ioc_value": "141.253.195.133:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 19:43:32",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855034": [
        {
            "ioc_value": "132.145.210.148:11235",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 19:43:28",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1855033": [
        {
            "ioc_value": "yn9w54gw.springfieldsummerhoops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:34:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855032": [
        {
            "ioc_value": "zvgxb.phimmoichilla.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:32:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855031": [
        {
            "ioc_value": "jdmkc.ordereltacofeliz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855030": [
        {
            "ioc_value": "7ixxwwhf.pacesettershomehealth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855029": [
        {
            "ioc_value": "pacesettershomehealth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:27:58",
            "last_seen_utc": "2026-07-21 19:28:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855028": [
        {
            "ioc_value": "newtownsquareweather.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:26:51",
            "last_seen_utc": "2026-07-21 19:27:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855027": [
        {
            "ioc_value": "udjn.restorepowerwash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:08:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855026": [
        {
            "ioc_value": "restorepowerwash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 19:05:35",
            "last_seen_utc": "2026-07-21 19:05:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855021": [
        {
            "ioc_value": "silicon7point.verdalya.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:56:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854976": [
        {
            "ioc_value": "cdn1-lake.skysriver.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-21 18:43:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854978": [
        {
            "ioc_value": "https://ahtimes.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 18:43:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ahtimes.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854979": [
        {
            "ioc_value": "https://mark-hatch.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 18:43:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mark-hatch.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854980": [
        {
            "ioc_value": "https://octopoda.gmbh/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 18:43:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/octopoda.gmbh",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854987": [
        {
            "ioc_value": "https://alkahan.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 18:43:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alkahan.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854990": [
        {
            "ioc_value": "https://planet-grid.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 18:43:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/planet-grid.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1855001": [
        {
            "ioc_value": "161.35.125.247:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 18:43:32",
            "last_seen_utc": "2026-07-29 12:16:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1855018": [
        {
            "ioc_value": "0hfy318f.medstopmedicalservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:39:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855017": [
        {
            "ioc_value": "zm0xs3ai.karinamasfina.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:38:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855016": [
        {
            "ioc_value": "ybm58ckf.finovestpedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:37:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855014": [
        {
            "ioc_value": "medstopmedicalservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:36:01",
            "last_seen_utc": "2026-07-21 18:36:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855010": [
        {
            "ioc_value": "yukgk.orangefarmersmarket.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:28:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855005": [
        {
            "ioc_value": "uxef.reliablerentalz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1855002": [
        {
            "ioc_value": "reliablerentalz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 18:04:58",
            "last_seen_utc": "2026-07-21 23:07:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1855000": [
        {
            "ioc_value": "rapidwavenet.verdalya.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 17:41:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854999": [
        {
            "ioc_value": "emwcx.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 17:36:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854998": [
        {
            "ioc_value": "hhqzk.stevestowingsatx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 17:19:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854996": [
        {
            "ioc_value": "ivox.polarstartire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 17:06:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854995": [
        {
            "ioc_value": "cbtlecmkc.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 17:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854989": [
        {
            "ioc_value": "t2yl06y1.letstalkrocks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 16:36:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854986": [
        {
            "ioc_value": "deltahostgate2.verdalya.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 16:26:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854985": [
        {
            "ioc_value": "jguzg.stashngrab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 16:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854984": [
        {
            "ioc_value": "stashngrab.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 16:22:29",
            "last_seen_utc": "2026-07-21 16:22:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854983": [
        {
            "ioc_value": "twcw.playantwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 16:06:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854977": [
        {
            "ioc_value": "hsdav.stable-virtual-camera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 15:22:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854975": [
        {
            "ioc_value": "stable-virtual-camera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 15:22:02",
            "last_seen_utc": "2026-07-21 15:22:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854974": [
        {
            "ioc_value": "ironlogicway5.florenth.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 15:11:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854973": [
        {
            "ioc_value": "nhos.pikachuplush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 15:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854952": [
        {
            "ioc_value": "r7e0hc30.legend-capital-group.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:37:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854947": [
        {
            "ioc_value": "77.42.90.175:9895",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-21 14:36:22",
            "last_seen_utc": "2026-07-29 23:31:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "758932669c2cccb72dce7588f8703839,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854948": [
        {
            "ioc_value": "62.171.177.27:2930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-21 14:36:21",
            "last_seen_utc": "2026-07-21 19:41:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854949": [
        {
            "ioc_value": "legend-capital-group.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:34:56",
            "last_seen_utc": "2026-07-21 14:35:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854946": [
        {
            "ioc_value": "ybsve.springhillcommons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:26:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854945": [
        {
            "ioc_value": "springhillcommons.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:21:28",
            "last_seen_utc": "2026-07-22 00:47:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854944": [
        {
            "ioc_value": "udsik.springfieldsummerhoops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:17:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854943": [
        {
            "ioc_value": "springfieldsummerhoops.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:16:27",
            "last_seen_utc": "2026-07-21 19:33:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854942": [
        {
            "ioc_value": "nrqbf.spencershorttexas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:13:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854941": [
        {
            "ioc_value": "spencershorttexas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:12:49",
            "last_seen_utc": "2026-07-21 14:12:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854940": [
        {
            "ioc_value": "cppeh.spacedecorideas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:09:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854939": [
        {
            "ioc_value": "spacedecorideas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:08:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854933": [
        {
            "ioc_value": "mvjx.phtaxiservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 14:04:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854913": [
        {
            "ioc_value": "api.googlevv.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 13:54:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "GovCERT_CH"
        }
    ],
    "1854914": [
        {
            "ioc_value": "analyzer01.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 13:54:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "GovCERT_CH"
        }
    ],
    "1854917": [
        {
            "ioc_value": "https://pub-7ac99e69d5af40ffa345a3f731c1b833.r2.dev/tz.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 13:54:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "GovCERT_CH"
        }
    ],
    "1854925": [
        {
            "ioc_value": "moorlandatlas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 13:54:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/moorlandatlas.com",
            "tags": "clickfix,curl,hetzner,loader,mshta",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1854926": [
        {
            "ioc_value": "5.161.192.203:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 13:54:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/moorlandatlas.com",
            "tags": "clickfix,curl,hetzner,loader,mshta",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1854932": [
        {
            "ioc_value": "http://fimmora.surf:6504",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-21 13:40:51",
            "last_seen_utc": "2026-07-28 21:21:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f3156f37607b62971c65a95cd5bd186d2d85194cb74119d558526f97424ff238/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854931": [
        {
            "ioc_value": "w3jxkd42.jardins-do-mar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:38:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854930": [
        {
            "ioc_value": "pmzvrv9c.ezgarageautorepairtx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:36:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854928": [
        {
            "ioc_value": "kori1903.anondns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:30:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ScreenConnect",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854927": [
        {
            "ioc_value": "213.232.235.51:8880",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ScreenConnect",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854924": [
        {
            "ioc_value": "jqtzbyimn.hrmotorsspringville.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:14:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854920": [
        {
            "ioc_value": "kdlff.riggsjacksboro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854918": [
        {
            "ioc_value": "izhx.phimmoichilla.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 13:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854912": [
        {
            "ioc_value": "6t7fjqk7.laurelcrownpartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 12:36:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854911": [
        {
            "ioc_value": "laurelcrownpartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 12:34:26",
            "last_seen_utc": "2026-07-21 12:34:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854909": [
        {
            "ioc_value": "eumlu.ridgerenovation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 12:08:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854907": [
        {
            "ioc_value": "wwmf.patxisdublin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 12:05:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854899": [
        {
            "ioc_value": "45.76.182.55:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 12:00:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854900": [
        {
            "ioc_value": "207.148.66.2:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 12:00:49",
            "last_seen_utc": "2026-07-26 00:47:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854901": [
        {
            "ioc_value": "ordereltacofeliz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 12:00:36",
            "last_seen_utc": "2026-07-21 19:29:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854898": [
        {
            "ioc_value": "embermeshnode.florenth.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 11:26:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854897": [
        {
            "ioc_value": "qrilb.rickybobbystowing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 11:07:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854896": [
        {
            "ioc_value": "rickybobbystowing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 11:07:12",
            "last_seen_utc": "2026-07-21 20:32:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854891": [
        {
            "ioc_value": "82.156.155.15:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-21 11:05:05",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854890": [
        {
            "ioc_value": "5.101.84.75:4242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-21 11:04:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af0afca585caa54140a6673622f2d2093dd5e76eb7b71d428e3893c130cf1f8b/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854889": [
        {
            "ioc_value": "uxwc.orangefarmersmarket.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 11:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854888": [
        {
            "ioc_value": "orangefarmersmarket.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 10:59:52",
            "last_seen_utc": "2026-07-21 18:28:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854869": [
        {
            "ioc_value": "https://markdl.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 10:52:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/markdl.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854872": [
        {
            "ioc_value": "149.28.128.253:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 10:52:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854873": [
        {
            "ioc_value": "45.76.146.2:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 10:52:01",
            "last_seen_utc": "2026-07-26 00:46:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854885": [
        {
            "ioc_value": "4.144.235.121:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-21 10:52:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854887": [
        {
            "ioc_value": "contabili.balanteo.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-21 10:40:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3565a7a2bb632357c35f6ca9e98eb083e1505526f0ab0e4d88df216299540069/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854886": [
        {
            "ioc_value": "oyawba10.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 10:36:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854884": [
        {
            "ioc_value": "lufry.mabelsnursery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 10:17:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854877": [
        {
            "ioc_value": "ayhd.opulentbeautybarllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 10:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854876": [
        {
            "ioc_value": "opulentbeautybarllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 09:59:22",
            "last_seen_utc": "2026-07-21 09:59:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854875": [
        {
            "ioc_value": "hbsgb.lunabybodyshaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 09:58:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854874": [
        {
            "ioc_value": "lunabybodyshaping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 09:58:10",
            "last_seen_utc": "2026-07-21 09:58:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854871": [
        {
            "ioc_value": "185.33.86.141:29292",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-21 09:44:16",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854870": [
        {
            "ioc_value": "alkociferblat.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 09:37:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854863": [
        {
            "ioc_value": "twhhp.lucymflowers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 09:02:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854862": [
        {
            "ioc_value": "cyyf.nurtured-in-nature.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 09:01:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854861": [
        {
            "ioc_value": "nurtured-in-nature.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:58:49",
            "last_seen_utc": "2026-07-21 08:58:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854854": [
        {
            "ioc_value": "156.234.7.21:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-21 08:38:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854859": [
        {
            "ioc_value": "87jcg6w8.everestpointnorthglenn.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854858": [
        {
            "ioc_value": "zbklcsro.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:35:47",
            "last_seen_utc": "2026-08-04 04:12:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854857": [
        {
            "ioc_value": "v23ewcsy.calculadoracomisiones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:35:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854853": [
        {
            "ioc_value": "cjdl.nspowdercoatingnj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:28:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854852": [
        {
            "ioc_value": "nspowdercoatingnj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:24:36",
            "last_seen_utc": "2026-07-21 08:25:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854851": [
        {
            "ioc_value": "mhuhx.longhornlodgemo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:22:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854850": [
        {
            "ioc_value": "xbzh.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:22:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854849": [
        {
            "ioc_value": "longhornlodgemo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 08:22:34",
            "last_seen_utc": "2026-07-21 08:22:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854819": [
        {
            "ioc_value": "167.172.80.107:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 08:20:50",
            "last_seen_utc": "2026-07-28 20:27:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854787": [
        {
            "ioc_value": "gbgl.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 07:28:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854786": [
        {
            "ioc_value": "qbmuv.loganlooneyresume.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 07:26:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854785": [
        {
            "ioc_value": "loganlooneyresume.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 07:21:23",
            "last_seen_utc": "2026-07-21 07:22:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854784": [
        {
            "ioc_value": "94.26.83.138:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 07:20:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9ceeacd7f64359972fc44c73798a4e215effeff4bda4f6e309bedc67bc0c8d38/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854782": [
        {
            "ioc_value": "94.26.83.138:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9ceeacd7f64359972fc44c73798a4e215effeff4bda4f6e309bedc67bc0c8d38/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854783": [
        {
            "ioc_value": "94.26.83.138:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 07:20:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9ceeacd7f64359972fc44c73798a4e215effeff4bda4f6e309bedc67bc0c8d38/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854779": [
        {
            "ioc_value": "tmnpc.lnlsealcoating.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 07:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854778": [
        {
            "ioc_value": "94.198.96.165:63921",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-21 07:10:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c937d0408fb8ef89b00c2fbcd785ade967210df57b0c5a128d2555b431d4634e/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854776": [
        {
            "ioc_value": "46.151.182.127:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-21 07:05:54",
            "last_seen_utc": "2026-08-20 18:55:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ce81e2c7d1beb834bda8a59ac5cd23b9b2700a697dad0358f5837df214af995d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854771": [
        {
            "ioc_value": "markdl.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 06:56:06",
            "last_seen_utc": "2026-07-21 21:29:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854770": [
        {
            "ioc_value": "202.61.160.189:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcom",
            "malware_alias": "RemoteCommandExecution",
            "malware_printable": "RemCom",
            "first_seen_utc": "2026-07-21 06:55:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af2ddbb1342c32efb23134f2a40d1ad390e85f57296c3dee753c99f867fc0ef2/",
            "tags": "RemCom",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854768": [
        {
            "ioc_value": "ironphantomcore.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-21 06:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854769": [
        {
            "ioc_value": "voidhunterkeep.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-21 06:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854767": [
        {
            "ioc_value": "http://196.251.107.186/api.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 06:50:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/573e68608bbbf05cd7364eb791141deb3daba35b3098d23a047ac66979c75be1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854766": [
        {
            "ioc_value": "141.98.10.188:52535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-21 06:47:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b8eca270e07e96f414a4a5ff00c099f1518a9d10ca2f1a4c69800e37b9699fea/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854765": [
        {
            "ioc_value": "192.169.7.60:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-21 06:45:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9e1c3817c2b4f5aff5b8ed5288fca53df1ad392022c2fa3b609e0103ec2ae08e/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854764": [
        {
            "ioc_value": "7wzfqmf9.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 06:36:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854763": [
        {
            "ioc_value": "ynwe.jetourmexico.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 06:31:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854762": [
        {
            "ioc_value": "mqljf.newcoservicemower.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 06:30:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854761": [
        {
            "ioc_value": "newcoservicemower.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 06:25:58",
            "last_seen_utc": "2026-07-21 06:26:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854760": [
        {
            "ioc_value": "tourtrade.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-21 06:14:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2cd6897845961d94d058970266728a7abb4d6fdaff48bb295acdb912dfac9f89/",
            "tags": "PhantomStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854759": [
        {
            "ioc_value": "5.101.84.80:8996",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-21 06:09:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/372d9cfbabe8c80e2b152739ea9ff7debe61b88360e3120c35832738400955df/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854758": [
        {
            "ioc_value": "188.132.242.67:7329",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-21 06:06:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5666f35c1033e019aa4d31dc7c123e39777909e2833e14135f9a3f3642551059/",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854757": [
        {
            "ioc_value": "anyqwp6fce.localto.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-21 06:06:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5666f35c1033e019aa4d31dc7c123e39777909e2833e14135f9a3f3642551059/",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854753": [
        {
            "ioc_value": "46.151.182.159:776",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-21 06:03:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a9ed64a27630a5a35e02d4659efab2e6485b394377a3ae7df4b556959f63fb3/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854752": [
        {
            "ioc_value": "lifeisabouthavingfun448.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-07-21 05:59:06",
            "last_seen_utc": "2026-08-11 12:16:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1cf3a473824ecd73dd246db96a9a11a3b094cf1052a085f86fa5327f550eecdf/",
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854751": [
        {
            "ioc_value": "185.196.41.201:35342",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-07-21 05:58:30",
            "last_seen_utc": "2026-07-29 17:55:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854737": [
        {
            "ioc_value": "162.243.163.143:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 05:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854750": [
        {
            "ioc_value": "141.11.243.110:586",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-07-21 05:54:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cc75bd30c623f080ee5dd003c2802a9c97a008f9fd6f4a1c4113a27b1242d290/",
            "tags": "RAT,STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854748": [
        {
            "ioc_value": "209.99.186.11:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:52:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854749": [
        {
            "ioc_value": "209.99.186.11:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:52:24",
            "last_seen_utc": "2026-07-21 05:52:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854747": [
        {
            "ioc_value": "162.251.120.10:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854739": [
        {
            "ioc_value": "135.136.144.95:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": "2026-07-21 05:50:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854740": [
        {
            "ioc_value": "135.136.144.95:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": "2026-07-21 05:50:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854741": [
        {
            "ioc_value": "135.136.144.95:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": "2026-07-21 05:50:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854742": [
        {
            "ioc_value": "38.92.47.237:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854743": [
        {
            "ioc_value": "38.92.47.237:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854744": [
        {
            "ioc_value": "38.92.47.237:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854745": [
        {
            "ioc_value": "162.251.120.10:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854746": [
        {
            "ioc_value": "162.251.120.10:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:50:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854738": [
        {
            "ioc_value": "198.37.105.33:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-21 05:47:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854736": [
        {
            "ioc_value": "31.76.252.47:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:46:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/566cc087706f3d3a0e49b9a1d9c8e27090211d80a069162de2e5e8a5b8847414/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854735": [
        {
            "ioc_value": "https://31.76.252.47/v1/telemetry/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:46:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/566cc087706f3d3a0e49b9a1d9c8e27090211d80a069162de2e5e8a5b8847414/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854734": [
        {
            "ioc_value": "wormfear.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-21 05:42:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854733": [
        {
            "ioc_value": "173.225.99.250:15500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:36:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854732": [
        {
            "ioc_value": "monitorondomainwintgt.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:36:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854731": [
        {
            "ioc_value": "157.20.182.81:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-21 05:35:20",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854730": [
        {
            "ioc_value": "ewmc.jenslittlerugrats.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 05:28:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854729": [
        {
            "ioc_value": "jpsym.mystic-brews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 05:27:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854728": [
        {
            "ioc_value": "mystic-brews.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 05:25:19",
            "last_seen_utc": "2026-07-21 05:26:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854567": [
        {
            "ioc_value": "ritchie.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854568": [
        {
            "ioc_value": "meduurst.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854569": [
        {
            "ioc_value": "monteiro.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854570": [
        {
            "ioc_value": "bitista.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854571": [
        {
            "ioc_value": "thibahlt.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854572": [
        {
            "ioc_value": "leconto.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854573": [
        {
            "ioc_value": "carreiro.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854574": [
        {
            "ioc_value": "henreques.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854575": [
        {
            "ioc_value": "fraitas.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854576": [
        {
            "ioc_value": "azevedo.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854577": [
        {
            "ioc_value": "schester.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854578": [
        {
            "ioc_value": "abernaahy.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854579": [
        {
            "ioc_value": "riviere.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854580": [
        {
            "ioc_value": "ackeamann.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854582": [
        {
            "ioc_value": "lombaidi.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854581": [
        {
            "ioc_value": "robests.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854583": [
        {
            "ioc_value": "reindardt.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854584": [
        {
            "ioc_value": "schuttc.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854585": [
        {
            "ioc_value": "bogisibh.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854586": [
        {
            "ioc_value": "ledesla.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854587": [
        {
            "ioc_value": "uolguin.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854588": [
        {
            "ioc_value": "olovier.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854589": [
        {
            "ioc_value": "chauvet.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854590": [
        {
            "ioc_value": "gautter.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854591": [
        {
            "ioc_value": "riihard.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854592": [
        {
            "ioc_value": "nonrueden.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854593": [
        {
            "ioc_value": "northcombe.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854594": [
        {
            "ioc_value": "omnivectis.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854595": [
        {
            "ioc_value": "willimsen.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854596": [
        {
            "ioc_value": "ssntana.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854597": [
        {
            "ioc_value": "fundivox.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854598": [
        {
            "ioc_value": "exoosito.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854599": [
        {
            "ioc_value": "oelgado.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854600": [
        {
            "ioc_value": "nitzschi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854601": [
        {
            "ioc_value": "vtcircuits.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854602": [
        {
            "ioc_value": "satserfield.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854603": [
        {
            "ioc_value": "quilborne.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854604": [
        {
            "ioc_value": "quiglgy.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854605": [
        {
            "ioc_value": "kovkcek.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854606": [
        {
            "ioc_value": "gccsinc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854607": [
        {
            "ioc_value": "barsows.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854608": [
        {
            "ioc_value": "ethervane.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854609": [
        {
            "ioc_value": "raventhorp.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854610": [
        {
            "ioc_value": "bradtkr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854611": [
        {
            "ioc_value": "dialectum.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854612": [
        {
            "ioc_value": "oakington.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:13",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854613": [
        {
            "ioc_value": "quorumix.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854614": [
        {
            "ioc_value": "saxonfield.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854615": [
        {
            "ioc_value": "sigmatauethifarma.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854616": [
        {
            "ioc_value": "hegmaen.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854617": [
        {
            "ioc_value": "orantow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854618": [
        {
            "ioc_value": "gileert.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854619": [
        {
            "ioc_value": "bartach.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854620": [
        {
            "ioc_value": "almontm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854621": [
        {
            "ioc_value": "moielli.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854622": [
        {
            "ioc_value": "corraia.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854623": [
        {
            "ioc_value": "henriqueq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:21:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854624": [
        {
            "ioc_value": "bbvalues.uk",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854625": [
        {
            "ioc_value": "treviro.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854626": [
        {
            "ioc_value": "eichmnnn.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854627": [
        {
            "ioc_value": "gerrirsen.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854628": [
        {
            "ioc_value": "diranda.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854629": [
        {
            "ioc_value": "loureiru.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854630": [
        {
            "ioc_value": "bernardi.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854631": [
        {
            "ioc_value": "marqueq.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854632": [
        {
            "ioc_value": "abernaehy.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854633": [
        {
            "ioc_value": "keneedy.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854634": [
        {
            "ioc_value": "reynoldy.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854635": [
        {
            "ioc_value": "heethcote.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854636": [
        {
            "ioc_value": "okunevk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854637": [
        {
            "ioc_value": "dground.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854638": [
        {
            "ioc_value": "meharsons.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854639": [
        {
            "ioc_value": "leusceke.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854640": [
        {
            "ioc_value": "zgsjyxzx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854641": [
        {
            "ioc_value": "luthel.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854642": [
        {
            "ioc_value": "jnlysj.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-21 05:20:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1854643": [
        {
            "ioc_value": "https://www.studiotecnicoareanova.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:20:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.studiotecnicoareanova.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854658": [
        {
            "ioc_value": "137.184.135.42:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 05:20:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854668": [
        {
            "ioc_value": "149.28.128.253:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 05:20:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854543": [
        {
            "ioc_value": "45.76.182.55:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 05:20:19",
            "last_seen_utc": "2026-07-26 00:47:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854549": [
        {
            "ioc_value": "149.28.128.253:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 05:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854559": [
        {
            "ioc_value": "https://www.fluorite.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:20:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.fluorite.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854562": [
        {
            "ioc_value": "ebaa6717e0011710c3cc8f4b2fd7fb767a3a0e4d01415957d9b24919650a7a09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-21 05:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "dll,sideloading,stealer,vidar",
            "anonymous": 0,
            "reporter": "emmpallis"
        }
    ],
    "1854532": [
        {
            "ioc_value": "https://theprosperinghouse.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:19:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/theprosperinghouse.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854533": [
        {
            "ioc_value": "https://theholecompany.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-21 05:19:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/theholecompany.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854528": [
        {
            "ioc_value": "logintrust5845.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854527": [
        {
            "ioc_value": "syshash4392.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854526": [
        {
            "ioc_value": "authservice6020.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854525": [
        {
            "ioc_value": "portalbyte8345.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854524": [
        {
            "ioc_value": "webtask6566.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854523": [
        {
            "ioc_value": "apibyte4811.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854522": [
        {
            "ioc_value": "statpass3183.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854521": [
        {
            "ioc_value": "1629bqt9p34elwv.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854520": [
        {
            "ioc_value": "basehex1267.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.mints_loader",
            "malware_alias": null,
            "malware_printable": "MintsLoader",
            "first_seen_utc": "2026-07-21 05:19:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260720-w22dqsc13x/behavioral1",
            "tags": "clickfix,MINTSLOADER",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1854717": [
        {
            "ioc_value": "162.243.163.143:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-21 05:18:41",
            "last_seen_utc": "2026-07-28 19:10:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854723": [
        {
            "ioc_value": "bopyq.myhillcountrygrass.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 04:43:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854721": [
        {
            "ioc_value": "hvao.jbgroup21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 04:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854720": [
        {
            "ioc_value": "1s3hqwvr.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 04:32:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854719": [
        {
            "ioc_value": "byrio.muscle-up-yavne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 04:15:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854718": [
        {
            "ioc_value": "muscle-up-yavne.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 04:12:19",
            "last_seen_utc": "2026-07-21 04:12:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854714": [
        {
            "ioc_value": "ndpyt.mechanic-on-site.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 04:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854713": [
        {
            "ioc_value": "mechanic-on-site.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 03:59:16",
            "last_seen_utc": "2026-07-21 03:59:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854704": [
        {
            "ioc_value": "avfzq.maia-bentley.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 03:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854698": [
        {
            "ioc_value": "ewyjl357.flashhomebuyerskc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 03:38:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854696": [
        {
            "ioc_value": "maia-bentley.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 03:37:50",
            "last_seen_utc": "2026-07-23 00:37:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854695": [
        {
            "ioc_value": "iahg2idr.evansunitedspringcarnivalsherman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 03:36:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854688": [
        {
            "ioc_value": "gytm.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 03:31:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854682": [
        {
            "ioc_value": "foivs.highkickstkd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 02:42:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854677": [
        {
            "ioc_value": "xhtn.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 02:29:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854676": [
        {
            "ioc_value": "luy6lvmh.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 02:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854662": [
        {
            "ioc_value": "ikkqh.dermexcel.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 01:32:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854660": [
        {
            "ioc_value": "jilc.kaltourusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 01:30:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854659": [
        {
            "ioc_value": "kaltourusa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 01:28:47",
            "last_seen_utc": "2026-07-22 19:37:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854657": [
        {
            "ioc_value": "cstee.diamonddumpsterrental.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 01:23:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854656": [
        {
            "ioc_value": "diamonddumpsterrental.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 01:21:13",
            "last_seen_utc": "2026-07-21 01:21:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854651": [
        {
            "ioc_value": "xdox.groeschelcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 00:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854650": [
        {
            "ioc_value": "dgctf.concretewestgj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 00:32:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854649": [
        {
            "ioc_value": "yeo0jmkq.kimsnailsalonmadison.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-21 00:26:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854566": [
        {
            "ioc_value": "ovzdi.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 23:41:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854565": [
        {
            "ioc_value": "gjwc.kalientestore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 23:28:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854558": [
        {
            "ioc_value": "mlmgp.jenslittlerugrats.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:37:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854557": [
        {
            "ioc_value": "dwvygj31.dermatologycongress.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:37:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854556": [
        {
            "ioc_value": "jenslittlerugrats.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:35:40",
            "last_seen_utc": "2026-07-21 05:26:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854555": [
        {
            "ioc_value": "h51ee0ex.emeraldualzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:35:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854553": [
        {
            "ioc_value": "4gfsvs7l.jennyrussianbluepalace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:28:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854552": [
        {
            "ioc_value": "sutf.kafekarachi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:27:40",
            "last_seen_utc": "2026-07-23 03:22:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854551": [
        {
            "ioc_value": "jennyrussianbluepalace.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 22:25:10",
            "last_seen_utc": "2026-07-22 14:36:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854546": [
        {
            "ioc_value": "wakgo.jbgroup21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 21:40:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854545": [
        {
            "ioc_value": "zztz.jetourmexico.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 21:27:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854529": [
        {
            "ioc_value": "txvii.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 20:37:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854519": [
        {
            "ioc_value": "ttvsj7o9.jdexteriorcleaning.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 20:29:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854518": [
        {
            "ioc_value": "atlasgridflow.florenth.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 20:28:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854517": [
        {
            "ioc_value": "xkzh.highkickstkd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 20:27:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854511": [
        {
            "ioc_value": "macro3siteview.florenth.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 20:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854508": [
        {
            "ioc_value": "94.154.43.77:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-20 19:45:56",
            "last_seen_utc": "2026-09-01 02:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854507": [
        {
            "ioc_value": "77.237.114.150:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-07-20 19:45:43",
            "last_seen_utc": "2026-08-20 08:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854506": [
        {
            "ioc_value": "46.29.162.159:52310",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:45:29",
            "last_seen_utc": "2026-08-22 08:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854505": [
        {
            "ioc_value": "23.94.197.120:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 19:45:07",
            "last_seen_utc": "2026-08-21 18:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854504": [
        {
            "ioc_value": "220.154.3.197:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:45:02",
            "last_seen_utc": "2026-09-01 02:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854503": [
        {
            "ioc_value": "203.83.238.164:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:44:22",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854502": [
        {
            "ioc_value": "2.27.248.61:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-20 19:44:19",
            "last_seen_utc": "2026-09-01 02:44:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854501": [
        {
            "ioc_value": "181.234.136.109:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-07-20 19:43:58",
            "last_seen_utc": "2026-08-22 18:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854500": [
        {
            "ioc_value": "176.12.79.82:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:43:54",
            "last_seen_utc": "2026-08-20 08:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854499": [
        {
            "ioc_value": "lunarwaveunit.grovessa.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 19:43:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854498": [
        {
            "ioc_value": "151.243.101.44:21343",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:43:37",
            "last_seen_utc": "2026-09-01 02:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854496": [
        {
            "ioc_value": "14.22.75.6:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854497": [
        {
            "ioc_value": "14.22.75.6:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854495": [
        {
            "ioc_value": "12.202.180.13:6745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854494": [
        {
            "ioc_value": "vuwvp.drdavidzweiback.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 19:35:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854493": [
        {
            "ioc_value": "klca.hieliao-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 19:30:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854492": [
        {
            "ioc_value": "iemb.hansikaenterprises.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 19:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854468": [
        {
            "ioc_value": "161.35.125.247:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 19:12:00",
            "last_seen_utc": "2026-07-29 09:18:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854474": [
        {
            "ioc_value": "hajar-tricks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.5t_downloader",
            "malware_alias": null,
            "malware_printable": "5.t Downloader",
            "first_seen_utc": "2026-07-20 19:11:58",
            "last_seen_utc": "2026-07-21 01:56:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854478": [
        {
            "ioc_value": "167.172.80.107:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 19:11:56",
            "last_seen_utc": "2026-07-21 02:03:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854477": [
        {
            "ioc_value": "http://giftorcharden.comxa.com/Panel/gate.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.pony",
            "malware_alias": "Siplog,Fareit",
            "malware_printable": "Pony",
            "first_seen_utc": "2026-07-20 18:35:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Pony",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854476": [
        {
            "ioc_value": "cunts.colg1.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 18:34:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854475": [
        {
            "ioc_value": "jnhygwu4.gulfbreezervrentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 18:25:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854473": [
        {
            "ioc_value": "gulfbreezervrentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 18:24:07",
            "last_seen_utc": "2026-07-20 18:24:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854472": [
        {
            "ioc_value": "zvni.frizzhairforecast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 18:13:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854469": [
        {
            "ioc_value": "syqmn.calirayalake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 18:04:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854467": [
        {
            "ioc_value": "85.17.192.152:55615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-20 17:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854466": [
        {
            "ioc_value": "z52rumys.customhomebuildersplainfield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 17:33:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854465": [
        {
            "ioc_value": "47ytdzjs.economywindowsparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 17:32:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854464": [
        {
            "ioc_value": "gravitfluxbox.grovessa.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 17:23:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854458": [
        {
            "ioc_value": "kzsf.concretewestgj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 17:04:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854457": [
        {
            "ioc_value": "tjhsq.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 17:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854456": [
        {
            "ioc_value": "concretewestgj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 17:02:13",
            "last_seen_utc": "2026-07-21 00:32:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854455": [
        {
            "ioc_value": "urbanhostgate.grovessa.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:48:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854454": [
        {
            "ioc_value": "smartmeshsys2.petalune.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:33:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854453": [
        {
            "ioc_value": "2zm9lhlg.groeschelcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:27:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854452": [
        {
            "ioc_value": "groeschelcompany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:23:34",
            "last_seen_utc": "2026-07-21 00:28:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854448": [
        {
            "ioc_value": "zpbn.comptonanimalrescue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:04:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854447": [
        {
            "ioc_value": "lxlwn.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:04:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854446": [
        {
            "ioc_value": "comptonanimalrescue.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:04:03",
            "last_seen_utc": "2026-07-20 16:04:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854445": [
        {
            "ioc_value": "glmm.colg1.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:03:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854444": [
        {
            "ioc_value": "lcare.mrslopezsings.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 16:02:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854418": [
        {
            "ioc_value": "45.76.146.2:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 15:55:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854433": [
        {
            "ioc_value": "165.232.88.245:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:17",
            "last_seen_utc": "2026-07-25 09:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854434": [
        {
            "ioc_value": "134.209.93.215:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:17",
            "last_seen_utc": "2026-07-25 09:43:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854435": [
        {
            "ioc_value": "157.245.77.63:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:16",
            "last_seen_utc": "2026-07-25 09:43:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854436": [
        {
            "ioc_value": "64.227.69.17:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:16",
            "last_seen_utc": "2026-07-25 09:42:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854437": [
        {
            "ioc_value": "134.122.48.179:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:16",
            "last_seen_utc": "2026-07-25 09:59:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854438": [
        {
            "ioc_value": "164.92.153.43:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:15",
            "last_seen_utc": "2026-07-25 09:43:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854439": [
        {
            "ioc_value": "209.38.99.84:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:15",
            "last_seen_utc": "2026-07-25 09:44:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854440": [
        {
            "ioc_value": "188.166.121.223:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:14",
            "last_seen_utc": "2026-07-25 09:43:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854441": [
        {
            "ioc_value": "68.183.0.134:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:14",
            "last_seen_utc": "2026-07-25 09:44:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854442": [
        {
            "ioc_value": "188.166.58.104:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 15:55:14",
            "last_seen_utc": "2026-07-25 09:44:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854443": [
        {
            "ioc_value": "wctvn.mrslopezsings.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 15:54:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854432": [
        {
            "ioc_value": "lvcrn.monicarobles.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 15:29:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854431": [
        {
            "ioc_value": "monicarobles.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 15:24:46",
            "last_seen_utc": "2026-07-23 00:40:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854430": [
        {
            "ioc_value": "drsvt.nextbahis.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 15:22:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854425": [
        {
            "ioc_value": "axoo.colg1.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 15:07:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854419": [
        {
            "ioc_value": "colg1.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 15:03:54",
            "last_seen_utc": "2026-07-21 00:31:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854416": [
        {
            "ioc_value": "162.243.163.143:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 14:48:20",
            "last_seen_utc": "2026-07-27 03:44:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854417": [
        {
            "ioc_value": "xhbgt.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 14:47:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854415": [
        {
            "ioc_value": "aeiyi.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 14:32:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854414": [
        {
            "ioc_value": "pjjuosk1.fredcoplumbingpros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 14:26:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854413": [
        {
            "ioc_value": "energy4665.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-20 14:25:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/356106324c797ba967a2a8cde2156e866fe008332046747866efa82a99e62083/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854397": [
        {
            "ioc_value": "https://blocuriizolatetermic.primariapetrosani.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 14:14:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/blocuriizolatetermic.primariapetrosani.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1854407": [
        {
            "ioc_value": "igsx.closedfistllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 14:08:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854399": [
        {
            "ioc_value": "aruhq.jbgroup21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 14:04:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854398": [
        {
            "ioc_value": "vastlogicweb.petalune.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 13:43:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854396": [
        {
            "ioc_value": "stellar5bit.petalune.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 13:28:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854395": [
        {
            "ioc_value": "clouderfaster.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 13:22:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854394": [
        {
            "ioc_value": "wbpypinui.generososbakerycafe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 13:15:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854383": [
        {
            "ioc_value": "cglp.cleantruckchecksac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 13:03:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854382": [
        {
            "ioc_value": "embvx.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 13:02:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854380": [
        {
            "ioc_value": "grandnode3unit.solavern.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:43:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854381": [
        {
            "ioc_value": "freetasksite8.petalune.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:43:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854369": [
        {
            "ioc_value": "162.243.163.143:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 12:35:53",
            "last_seen_utc": "2026-07-23 00:27:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854379": [
        {
            "ioc_value": "a6du2gsx.fit2leadconference.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:34:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854378": [
        {
            "ioc_value": "hag0wqv7.estrelamardedetizadora.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854375": [
        {
            "ioc_value": "qaqatrf8.dermatologycongress.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:26:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854374": [
        {
            "ioc_value": "bcmej6hr.goodlifelakerentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:26:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854373": [
        {
            "ioc_value": "2gfxwchj.emeraldualzone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:23:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854371": [
        {
            "ioc_value": "goodlifelakerentals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:22:38",
            "last_seen_utc": "2026-07-20 12:23:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854216": [
        {
            "ioc_value": "159.223.212.162:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:31",
            "last_seen_utc": "2026-07-20 14:06:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854228": [
        {
            "ioc_value": "https://solaric.com.ph/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 12:20:31",
            "last_seen_utc": "2026-07-21 05:30:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/c90fffe0-fc10-4608-99b1-01d0ff1b5f4d",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ThreatOpsX"
        }
    ],
    "1854229": [
        {
            "ioc_value": "167.99.46.90:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:30",
            "last_seen_utc": "2026-07-20 14:07:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854230": [
        {
            "ioc_value": "209.38.38.123:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:30",
            "last_seen_utc": "2026-07-20 14:07:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854231": [
        {
            "ioc_value": "161.35.85.184:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:29",
            "last_seen_utc": "2026-07-20 14:06:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854232": [
        {
            "ioc_value": "209.38.44.99:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:29",
            "last_seen_utc": "2026-07-20 14:08:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854233": [
        {
            "ioc_value": "152.42.140.47:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:28",
            "last_seen_utc": "2026-07-20 14:07:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854234": [
        {
            "ioc_value": "134.122.57.112:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:28",
            "last_seen_utc": "2026-07-20 14:07:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854235": [
        {
            "ioc_value": "209.38.106.41:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:28",
            "last_seen_utc": "2026-07-20 14:09:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854236": [
        {
            "ioc_value": "206.189.6.103:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:27",
            "last_seen_utc": "2026-07-20 13:54:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854244": [
        {
            "ioc_value": "178.62.251.175:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-20 12:20:27",
            "last_seen_utc": "2026-07-20 14:07:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854340": [
        {
            "ioc_value": "167.172.80.107:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 12:20:26",
            "last_seen_utc": "2026-07-28 14:44:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854368": [
        {
            "ioc_value": "bhrbc90m.fredcoplumbingpros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:16:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854365": [
        {
            "ioc_value": "xgu7k53h.economywindowsparts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:14:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854364": [
        {
            "ioc_value": "fredcoplumbingpros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:13:27",
            "last_seen_utc": "2026-07-20 14:23:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854363": [
        {
            "ioc_value": "ea168jci.customhomebuildersplainfield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854360": [
        {
            "ioc_value": "kwgn9wkj.cupprimosouth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:10:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854358": [
        {
            "ioc_value": "vrdh.calirayalake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:07:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854357": [
        {
            "ioc_value": "43.130.249.174:3232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 12:05:49",
            "last_seen_utc": "2026-07-25 16:05:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77ed2de688c8f7e1315dc239763f72079ab0eb883591b81f5fbb9266ae4407d5/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854356": [
        {
            "ioc_value": "166.88.132.80:2323",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-20 12:05:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77ed2de688c8f7e1315dc239763f72079ab0eb883591b81f5fbb9266ae4407d5/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854353": [
        {
            "ioc_value": "yywem.drdavidzweiback.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 12:03:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854352": [
        {
            "ioc_value": "8iuwoa4l.of-tencent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:56:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854347": [
        {
            "ioc_value": "kkid.hightidesuffolk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:48:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854346": [
        {
            "ioc_value": "xcavl.crossonerecords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:46:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854345": [
        {
            "ioc_value": "hightidesuffolk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:44:59",
            "last_seen_utc": "2026-07-21 23:35:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854344": [
        {
            "ioc_value": "crossonerecords.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:44:28",
            "last_seen_utc": "2026-07-21 23:37:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854343": [
        {
            "ioc_value": "54e20j57.mrslopezsings.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:43:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854342": [
        {
            "ioc_value": "y0fui15e.corgiwarehouse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:42:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854341": [
        {
            "ioc_value": "mrslopezsings.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:42:18",
            "last_seen_utc": "2026-07-20 16:02:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854338": [
        {
            "ioc_value": "20ntquqt.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:34:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854337": [
        {
            "ioc_value": "1eriimge.consultingsolutionsjp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:33:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854335": [
        {
            "ioc_value": "uz1hqtn3.phtaxiservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:23:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854332": [
        {
            "ioc_value": "3fc95667b98c637ba785b67dff1bd15ff7a21f082d25894c3a78ec1b6206fcd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-20 11:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854333": [
        {
            "ioc_value": "e17f76e0b4c47a5f54ca51b105be0dd29df50c7c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-20 11:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854334": [
        {
            "ioc_value": "eff8675fac22c49107a2a42d3c735f10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-20 11:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854329": [
        {
            "ioc_value": "f47ac99afe9dbccccf308de99a8c791c675810047d11bd4613c5a4a4f08568e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-07-20 11:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854330": [
        {
            "ioc_value": "3a838467763d722b11890d0cd331144aeac5f8f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-07-20 11:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854331": [
        {
            "ioc_value": "159e06ef198371caf78e9a168b5ef4e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-07-20 11:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854325": [
        {
            "ioc_value": "84b7baaa2e134146258d883388114f18",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854326": [
        {
            "ioc_value": "0a4b3b6e4de78361552735cbbc95a1819a7338c810e7f31e1a3d68a06a5252bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854327": [
        {
            "ioc_value": "2dc11386a208dfe528ef8fdd70d7b81290e7b5ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854328": [
        {
            "ioc_value": "788fc952b7bdc334fc677426dcf2af39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854322": [
        {
            "ioc_value": "aac21459dc203d21c539a72d54221102",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854323": [
        {
            "ioc_value": "3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854324": [
        {
            "ioc_value": "91f2324c19f08256d45bfc675a80efd6ad1e8748",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854320": [
        {
            "ioc_value": "78e53037a3b94c1a14f4c8283f27b1b9b6a0601515fe6b4cdc28ac8fce9b938f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854321": [
        {
            "ioc_value": "61a27756cba4c8be0a6465912de786b90f6f8de1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854317": [
        {
            "ioc_value": "164e4dd739dacd0e13fb125905abd4ef3293391d34405421ddad4470826c1941",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-20 11:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854318": [
        {
            "ioc_value": "ed5e0b6b2cab48f0d86d7f2b6cd7354ce760c7ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-20 11:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854319": [
        {
            "ioc_value": "7aff39817fd60f3ea5b9298e8838b481",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-20 11:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854315": [
        {
            "ioc_value": "1a096f222444db6d4a189dc14d0461423e7bda96",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854316": [
        {
            "ioc_value": "ea96de1d5ee80bbe8795d352f7ac3e30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854311": [
        {
            "ioc_value": "43fe17a95010413fce338858f7f675708e1f3b9fb1998a436881c35dbe49825f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 11:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854312": [
        {
            "ioc_value": "29fb8a163ec801d7e28fe0e8e817f8501b6cae86",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 11:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854313": [
        {
            "ioc_value": "eb3fd1706066aecf68f002c744100218",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 11:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854314": [
        {
            "ioc_value": "7a8f47c4a4d9870b838791d51abafab65b8279e5c347add2b7e5aaa0222ab84a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 11:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854308": [
        {
            "ioc_value": "58328b7f4fecb0407da1947937b41162e23a61559d6f49526ec1683febad6ddc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854309": [
        {
            "ioc_value": "1c89e143465d44f7d3fa6561436624b6990027fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854310": [
        {
            "ioc_value": "10cc531b5f4765f53cd3a58a2c23ffcf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854305": [
        {
            "ioc_value": "2112d749000ec32a1eeb719eb1e0daee69cda7946eab3049f5d2fd83bac566c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854306": [
        {
            "ioc_value": "22d0daad3abfb17c90862ac3fd80746738c9074e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854307": [
        {
            "ioc_value": "d8d19575c1de6c091ebf0624596478fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854304": [
        {
            "ioc_value": "d1dc20911470ed43af8bce0355fd0cf7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-20 11:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854302": [
        {
            "ioc_value": "80571d10fe416a63ceb0c3b582c547573c41c1b1108ebda0e5604edf4532ff97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-20 11:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854303": [
        {
            "ioc_value": "cf7fa092c3cec9deb2bb4a008535f540a6d1ec46",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-20 11:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854299": [
        {
            "ioc_value": "2d1a5a0c9b43b6dbff32bd3b66d1a96c0d36773f5b7b546fcb9da93580f9246a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-20 11:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854300": [
        {
            "ioc_value": "50d5e712edfc416e508aaf221110d6b4a3df93e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-20 11:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854301": [
        {
            "ioc_value": "8465b5392ea382ceec662c25ea7acc34",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-20 11:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854296": [
        {
            "ioc_value": "e16ea5b5892442616eb4b0d8e53a242e6532b77db42202d33b78ef9461745cc5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-20 11:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854297": [
        {
            "ioc_value": "74983470e89aea81c6f0de3a50616b5ddd1988fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-20 11:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854298": [
        {
            "ioc_value": "b3f9d748284ba06c5f74c062b11c6066",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-20 11:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854293": [
        {
            "ioc_value": "9aa928b433983f53758e42961aa0cf8096a4211a5562bfcd7ba3cb63d902282b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-20 11:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854294": [
        {
            "ioc_value": "98c8c5d84a81cc068d24a68b1e2bb3dc7babae41",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-20 11:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854295": [
        {
            "ioc_value": "c8a7ae786c0294734130e1685a6f5ae3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-20 11:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854290": [
        {
            "ioc_value": "d3adedb75d5f43ee0a1400fa5be76e4f734ec031d40b426a390ec5f453a40859",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854291": [
        {
            "ioc_value": "6f1cc02617b24127df7fb482c2e1c9496c0aafbc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854292": [
        {
            "ioc_value": "0c9381cfd85e2d1aad8ccbe8bec861ca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854286": [
        {
            "ioc_value": "6b1f9dee6182e98eabff20baa433fced12a7f584e4973eb7b020f6a0c297fcec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854287": [
        {
            "ioc_value": "a3b4e81b5da8cf8a500cb87939e2be9bff352145",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854288": [
        {
            "ioc_value": "a563ff5a153b001223ff8d93d68405c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854289": [
        {
            "ioc_value": "bjastqph.chrisbrownallegiantstadium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:22:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854283": [
        {
            "ioc_value": "330f79845eb9694405707e1b2ef8621e8673920b3da8ccb3a4136418b7404254",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-20 11:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854284": [
        {
            "ioc_value": "e162d5f789a9cba57f46da154fabdde31a72683b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-20 11:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854285": [
        {
            "ioc_value": "e14ec518b3e9768fd51d95f13c60dea1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-20 11:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854281": [
        {
            "ioc_value": "ea88765037a10234f4558c076d3bb1805fe402f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854282": [
        {
            "ioc_value": "a3f6cbc6b8366c4378504eedbb2408d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854280": [
        {
            "ioc_value": "865884c27b7ee53c1744c183ca07ce310b4485dfa085fe3ed3c658e38f7d99f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-20 11:22:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854277": [
        {
            "ioc_value": "a0abe6eb238036b9a233799296c270282a19f603ed5560d4874a277fa55b17c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-20 11:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854278": [
        {
            "ioc_value": "ae67101984cab3956d8a8f50c36418a102909723",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-20 11:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854279": [
        {
            "ioc_value": "a77da66551da74d743efd55f09d46dc8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-07-20 11:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854275": [
        {
            "ioc_value": "a302b2902da6ebf1c6f9b79158320bb4111d75a0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854276": [
        {
            "ioc_value": "791d27fd45d5ac5f25235b46547129ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854272": [
        {
            "ioc_value": "7a5ce656b36a081d0f93d5add93a9c8ddc329abf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 11:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854273": [
        {
            "ioc_value": "44ddc80c714f91959bcaa1aeb3cfe1d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 11:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854274": [
        {
            "ioc_value": "940f0d74f64672c50d4b6ed704aefa743d81b7cdfbeb6666a00f690f80b7b001",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854268": [
        {
            "ioc_value": "e6290924b6e7a434776239ae19e79b02e88c3a6bef1b0e1d61041cc4176dec6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854269": [
        {
            "ioc_value": "ea9efc587962f4a1286aa26d274354039472d436",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854270": [
        {
            "ioc_value": "a757a8b09d99acc2835fd0d26541e46c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-20 11:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854271": [
        {
            "ioc_value": "26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 11:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854265": [
        {
            "ioc_value": "707d1f44be9210b1f0dd678a37aef925c4b09c3072289a575fadad571470ed2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854266": [
        {
            "ioc_value": "2f8782ed3f725c8df861b7c3c3b54c5b37f0c87d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854267": [
        {
            "ioc_value": "ca9050aa6e139627dd5c0d4cdd5e3eaa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854261": [
        {
            "ioc_value": "584e516edb5fc2b79960940b18cd65b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854262": [
        {
            "ioc_value": "b4991986b29c3882404e7078ccd37954f9f9676bb766f83161199eee1f1b85d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-20 11:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854263": [
        {
            "ioc_value": "f2cf888fb2133a89254455c4f50df81db384912a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-20 11:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854264": [
        {
            "ioc_value": "4be889e143b460ccf80fc02e44840ee0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-20 11:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854260": [
        {
            "ioc_value": "4ad57334dee1fafb11f25b63df07a64370153ea7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854259": [
        {
            "ioc_value": "7132a14099e6824598c5899dea19a4b8f4d89683bb01774b402674da1d4fee2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-20 11:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854257": [
        {
            "ioc_value": "616a15883f34627757fe19b12324ed8f0583b739",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.privateloader",
            "malware_alias": null,
            "malware_printable": "PrivateLoader",
            "first_seen_utc": "2026-07-20 11:22:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854258": [
        {
            "ioc_value": "be9aee8c3cb56fa17d293d48dd0fc1d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.privateloader",
            "malware_alias": null,
            "malware_printable": "PrivateLoader",
            "first_seen_utc": "2026-07-20 11:22:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854255": [
        {
            "ioc_value": "3270606f7138f08b0c4e051d0a9ebc2b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 11:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854256": [
        {
            "ioc_value": "65ab49119c845801f29a57e8aa177146b2ffbd289d4278109b146f933380f951",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.privateloader",
            "malware_alias": null,
            "malware_printable": "PrivateLoader",
            "first_seen_utc": "2026-07-20 11:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854253": [
        {
            "ioc_value": "d5e71f60f77f8f7853d80ff308d7b0420e20600fe03af2529a2c8e740ed52943",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 11:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854254": [
        {
            "ioc_value": "da7422fee4ab158c1ffb61b901e854fa375d57c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 11:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854251": [
        {
            "ioc_value": "g2o19aql.charmedanddangerousplush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854250": [
        {
            "ioc_value": "mevd0fjv.phimmoichilla.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854243": [
        {
            "ioc_value": "biirwl32.patxisdublin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:01:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854242": [
        {
            "ioc_value": "tq6ay9c3.broadwaylotterytickets.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 11:00:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854239": [
        {
            "ioc_value": "okv4iaii.contempoconstructiontx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:51:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854238": [
        {
            "ioc_value": "fgsnlppf.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:50:55",
            "last_seen_utc": "2026-07-31 15:45:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854237": [
        {
            "ioc_value": "contempoconstructiontx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:50:40",
            "last_seen_utc": "2026-07-20 10:50:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854227": [
        {
            "ioc_value": "tgbft.countertops-dfw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:45:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854226": [
        {
            "ioc_value": "giwl.highkickstkd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854225": [
        {
            "ioc_value": "107.173.47.142:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-20 10:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854224": [
        {
            "ioc_value": "highkickstkd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:44:35",
            "last_seen_utc": "2026-07-21 02:37:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854222": [
        {
            "ioc_value": "3efofny3.cielohillsevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:40:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854221": [
        {
            "ioc_value": "cielohillsevents.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:39:29",
            "last_seen_utc": "2026-07-20 10:39:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854220": [
        {
            "ioc_value": "hpnohznb.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:33:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854219": [
        {
            "ioc_value": "u9p8kb56.crvbl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:33:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854218": [
        {
            "ioc_value": "wnq8bmsb.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:32:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854215": [
        {
            "ioc_value": "f9e2ff2h.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:23:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854205": [
        {
            "ioc_value": "apexstorm6link.solavern.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854206": [
        {
            "ioc_value": "neogateway9hub.solavern.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 10:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854204": [
        {
            "ioc_value": "ddsr.hieliao-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:49:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854203": [
        {
            "ioc_value": "lightsiteview1.solavern.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:48:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854202": [
        {
            "ioc_value": "cnxst.jardins-do-mar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:48:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854201": [
        {
            "ioc_value": "89.124.104.192:49999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-20 09:45:58",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854200": [
        {
            "ioc_value": "220.154.3.197:8766",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 09:45:09",
            "last_seen_utc": "2026-09-01 02:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854198": [
        {
            "ioc_value": "203.83.238.164:8766",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 09:44:25",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854199": [
        {
            "ioc_value": "203.83.238.164:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 09:44:25",
            "last_seen_utc": "2026-09-01 02:44:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854197": [
        {
            "ioc_value": "192.227.219.71:34471",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 09:44:15",
            "last_seen_utc": "2026-08-21 18:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854196": [
        {
            "ioc_value": "185.212.131.28:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-20 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854195": [
        {
            "ioc_value": "185.212.128.155:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-20 09:44:07",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854194": [
        {
            "ioc_value": "hieliao-app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:44:05",
            "last_seen_utc": "2026-07-20 19:26:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854193": [
        {
            "ioc_value": "169.58.12.228:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-20 09:43:51",
            "last_seen_utc": "2026-09-01 02:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854192": [
        {
            "ioc_value": "154.83.186.39:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-20 09:43:39",
            "last_seen_utc": "2026-08-19 18:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854191": [
        {
            "ioc_value": "147.93.191.75:20800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 09:43:35",
            "last_seen_utc": "2026-08-19 18:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854190": [
        {
            "ioc_value": "147.93.191.75:20700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-20 09:43:34",
            "last_seen_utc": "2026-08-22 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854189": [
        {
            "ioc_value": "jardins-do-mar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:43:25",
            "last_seen_utc": "2026-07-21 13:37:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854188": [
        {
            "ioc_value": "103.185.249.13:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 09:43:11",
            "last_seen_utc": "2026-09-01 02:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854187": [
        {
            "ioc_value": "ryr4q9kj.playantwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:22:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854186": [
        {
            "ioc_value": "vividmeshflow.solavern.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 09:18:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854184": [
        {
            "ioc_value": "20.230.138.200:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-20 09:14:17",
            "last_seen_utc": "2026-07-28 07:23:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854183": [
        {
            "ioc_value": "121.40.141.52:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-20 09:14:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854182": [
        {
            "ioc_value": "216.250.255.1:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-20 09:14:04",
            "last_seen_utc": "2026-07-24 14:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854181": [
        {
            "ioc_value": "115.191.29.91:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-20 09:14:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1854176": [
        {
            "ioc_value": "boldlogicgate4.mistbriar.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:58:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854175": [
        {
            "ioc_value": "cyki.hayleymarienorman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:45:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854174": [
        {
            "ioc_value": "jsthk.jademckenzieco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:45:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854173": [
        {
            "ioc_value": "swift7tasknet.mistbriar.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:43:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854172": [
        {
            "ioc_value": "hayleymarienorman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:43:34",
            "last_seen_utc": "2026-07-20 08:44:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854170": [
        {
            "ioc_value": "twyd6y14.elizabethspizzadenton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:22:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854169": [
        {
            "ioc_value": "01ejjpa2.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 08:07:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854160": [
        {
            "ioc_value": "62.60.156.152:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854161": [
        {
            "ioc_value": "62.60.156.105:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854162": [
        {
            "ioc_value": "167.233.225.221:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854163": [
        {
            "ioc_value": "178.105.212.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854152": [
        {
            "ioc_value": "62.60.156.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854153": [
        {
            "ioc_value": "144.76.97.182:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854154": [
        {
            "ioc_value": "62.60.148.253:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854155": [
        {
            "ioc_value": "37.27.227.56:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854156": [
        {
            "ioc_value": "167.233.223.34:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854157": [
        {
            "ioc_value": "37.27.235.227:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854158": [
        {
            "ioc_value": "65.108.197.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854159": [
        {
            "ioc_value": "188.40.215.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854146": [
        {
            "ioc_value": "46.224.109.175:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854147": [
        {
            "ioc_value": "178.105.203.113:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854148": [
        {
            "ioc_value": "62.60.156.150:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854149": [
        {
            "ioc_value": "195.201.33.212:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854150": [
        {
            "ioc_value": "168.119.108.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854151": [
        {
            "ioc_value": "46.4.77.212:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854137": [
        {
            "ioc_value": "sei.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854138": [
        {
            "ioc_value": "okx.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854139": [
        {
            "ioc_value": "ylp.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854140": [
        {
            "ioc_value": "mgg.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854141": [
        {
            "ioc_value": "wvg.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854142": [
        {
            "ioc_value": "fwb.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854143": [
        {
            "ioc_value": "h1r.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854144": [
        {
            "ioc_value": "sei.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854145": [
        {
            "ioc_value": "okx.brslot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854132": [
        {
            "ioc_value": "ylp.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854133": [
        {
            "ioc_value": "mgg.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854134": [
        {
            "ioc_value": "wvg.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854135": [
        {
            "ioc_value": "fwb.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854136": [
        {
            "ioc_value": "h1r.loloxsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:51:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854131": [
        {
            "ioc_value": "https://178.105.212.106/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854125": [
        {
            "ioc_value": "https://37.27.235.227/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854126": [
        {
            "ioc_value": "https://65.108.197.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854127": [
        {
            "ioc_value": "https://188.40.215.132/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854128": [
        {
            "ioc_value": "https://62.60.156.152/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854129": [
        {
            "ioc_value": "https://62.60.156.105/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854130": [
        {
            "ioc_value": "https://167.233.225.221/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:53",
            "last_seen_utc": "2026-08-11 04:49:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854120": [
        {
            "ioc_value": "https://62.60.156.9/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:52",
            "last_seen_utc": "2026-08-11 04:50:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854121": [
        {
            "ioc_value": "https://144.76.97.182/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854122": [
        {
            "ioc_value": "https://62.60.148.253/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854123": [
        {
            "ioc_value": "https://37.27.227.56/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854124": [
        {
            "ioc_value": "https://167.233.223.34/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854115": [
        {
            "ioc_value": "https://178.105.203.113/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854116": [
        {
            "ioc_value": "https://62.60.156.150/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:51",
            "last_seen_utc": "2026-08-11 04:49:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854117": [
        {
            "ioc_value": "https://195.201.33.212/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854118": [
        {
            "ioc_value": "https://168.119.108.231/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:51",
            "last_seen_utc": "2026-08-14 13:42:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854119": [
        {
            "ioc_value": "https://46.4.77.212/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854111": [
        {
            "ioc_value": "https://h1r.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854112": [
        {
            "ioc_value": "https://sei.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854113": [
        {
            "ioc_value": "https://okx.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854114": [
        {
            "ioc_value": "https://46.224.109.175/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:50",
            "last_seen_utc": "2026-08-11 04:49:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854106": [
        {
            "ioc_value": "https://okx.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854107": [
        {
            "ioc_value": "https://ylp.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854108": [
        {
            "ioc_value": "https://mgg.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854109": [
        {
            "ioc_value": "https://wvg.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854110": [
        {
            "ioc_value": "https://fwb.brslot.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854101": [
        {
            "ioc_value": "https://mgg.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854102": [
        {
            "ioc_value": "https://wvg.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854103": [
        {
            "ioc_value": "https://fwb.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854104": [
        {
            "ioc_value": "https://h1r.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854105": [
        {
            "ioc_value": "https://sei.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854098": [
        {
            "ioc_value": "https://t.me/np33yk",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:47",
            "last_seen_utc": "2026-08-24 13:42:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854099": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198671804195",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:47",
            "last_seen_utc": "2026-08-24 12:41:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854100": [
        {
            "ioc_value": "https://ylp.loloxsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-20 07:50:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1854097": [
        {
            "ioc_value": "pkspm.informatik-ai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 07:47:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854096": [
        {
            "ioc_value": "todn.hansikaenterprises.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 07:43:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854094": [
        {
            "ioc_value": "informatik-ai.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 07:42:24",
            "last_seen_utc": "2026-07-20 07:42:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854084": [
        {
            "ioc_value": "oqtr.haleywoodportfolio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854083": [
        {
            "ioc_value": "tztgw.impactpromotionsclt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854082": [
        {
            "ioc_value": "haleywoodportfolio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:42:33",
            "last_seen_utc": "2026-07-20 06:43:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854081": [
        {
            "ioc_value": "impactpromotionsclt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:41:52",
            "last_seen_utc": "2026-07-22 09:36:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854080": [
        {
            "ioc_value": "primeglow2unit.mistbriar.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:38:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853931": [
        {
            "ioc_value": "https://rolems.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rolems.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853933": [
        {
            "ioc_value": "https://www.nr-7releases.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.nr-7releases.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853932": [
        {
            "ioc_value": "https://rumahlift.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rumahlift.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853934": [
        {
            "ioc_value": "https://moroneyaccountants.ie/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/moroneyaccountants.ie",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853935": [
        {
            "ioc_value": "https://yourhomeguide.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/yourhomeguide.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853936": [
        {
            "ioc_value": "https://mazradioaurora.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mazradioaurora.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853937": [
        {
            "ioc_value": "https://lucianasalomao.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lucianasalomao.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853938": [
        {
            "ioc_value": "https://guiasantosdumont.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/guiasantosdumont.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853939": [
        {
            "ioc_value": "https://instantfixservices.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/instantfixservices.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853940": [
        {
            "ioc_value": "https://mobilitate.primariapetrosani.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mobilitate.primariapetrosani.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853941": [
        {
            "ioc_value": "https://toufafashion.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/toufafashion.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853943": [
        {
            "ioc_value": "https://www.casadesignsrl.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.casadesignsrl.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853942": [
        {
            "ioc_value": "https://dailyinterior.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dailyinterior.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853944": [
        {
            "ioc_value": "https://euregio-camper.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/euregio-camper.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853957": [
        {
            "ioc_value": "159.65.143.171:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:35",
            "last_seen_utc": "2026-07-29 11:33:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853963": [
        {
            "ioc_value": "bognervopi.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f780a-dfa5-7038-a6b7-f3cac68c2e4f/",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "darses"
        }
    ],
    "1853964": [
        {
            "ioc_value": "tcp://45.153.34.153/rondo.dus",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:33",
            "last_seen_utc": "2026-07-21 02:50:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1853970": [
        {
            "ioc_value": "https://daoyiyuan.cn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-20 06:28:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/daoyiyuan.cn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853973": [
        {
            "ioc_value": "162.249.125.140:4569",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-20 06:28:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1853974": [
        {
            "ioc_value": "162.249.125.140:4568",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-20 06:28:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1853975": [
        {
            "ioc_value": "162.249.125.140:9018",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-20 06:28:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1853976": [
        {
            "ioc_value": "nvms9000.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-20 06:28:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1853977": [
        {
            "ioc_value": "137.184.135.42:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:31",
            "last_seen_utc": "2026-07-26 10:08:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853980": [
        {
            "ioc_value": "168.144.135.136:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:29",
            "last_seen_utc": "2026-07-28 18:48:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853986": [
        {
            "ioc_value": "161.35.125.247:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:28",
            "last_seen_utc": "2026-07-27 22:58:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854055": [
        {
            "ioc_value": "162.243.163.143:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:28",
            "last_seen_utc": "2026-07-28 10:26:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854064": [
        {
            "ioc_value": "162.243.163.143:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:27",
            "last_seen_utc": "2026-07-29 11:07:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854065": [
        {
            "ioc_value": "159.65.143.171:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854072": [
        {
            "ioc_value": "159.65.143.171:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854077": [
        {
            "ioc_value": "167.172.80.107:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-20 06:28:26",
            "last_seen_utc": "2026-07-21 07:30:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1854079": [
        {
            "ioc_value": "signalwestport.mistbriar.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:23:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854078": [
        {
            "ioc_value": "t13ecldw.calculadoracomisiones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:21:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854073": [
        {
            "ioc_value": "proxyfastzone.lunavera.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 06:03:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854071": [
        {
            "ioc_value": "brightnode9sys.lunavera.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:53:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854070": [
        {
            "ioc_value": "llttu.hurtigegevinster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:46:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854069": [
        {
            "ioc_value": "rbnz.hairbyniki.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:45:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854068": [
        {
            "ioc_value": "hairbyniki.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:42:00",
            "last_seen_utc": "2026-07-20 05:42:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854066": [
        {
            "ioc_value": "trendscanview.lunavera.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:38:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854063": [
        {
            "ioc_value": "ksuqx.cnbgladespring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:07:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854062": [
        {
            "ioc_value": "cnbgladespring.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:05:20",
            "last_seen_utc": "2026-07-20 05:05:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854058": [
        {
            "ioc_value": "dduf.bolesfarms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 05:01:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854057": [
        {
            "ioc_value": "ldgcg.closedfistllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 04:57:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854056": [
        {
            "ioc_value": "closedfistllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 04:56:10",
            "last_seen_utc": "2026-07-20 14:04:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854054": [
        {
            "ioc_value": "xbwtz.cleantruckchecksac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 04:31:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854053": [
        {
            "ioc_value": "cleantruckchecksac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 04:29:29",
            "last_seen_utc": "2026-07-20 13:02:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854052": [
        {
            "ioc_value": "dnrlgtwo.frizzhairforecast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 04:24:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854051": [
        {
            "ioc_value": "alkh.jbgroup21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 04:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854044": [
        {
            "ioc_value": "marblewavegate.thorniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:28:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854045": [
        {
            "ioc_value": "silica4path.lunavera.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:28:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854043": [
        {
            "ioc_value": "hrykp.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:23:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854042": [
        {
            "ioc_value": "pylonstaticbase.thorniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:13:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854041": [
        {
            "ioc_value": "auyc.pikachuplush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:06:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854036": [
        {
            "ioc_value": "pikachuplush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:04:30",
            "last_seen_utc": "2026-07-21 15:03:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854037": [
        {
            "ioc_value": "fby6y3nd.illuigiitaliancuisine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:04:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854035": [
        {
            "ioc_value": "oceanicmesh7.thorniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 03:03:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854033": [
        {
            "ioc_value": "g1wgxqj5.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 02:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854032": [
        {
            "ioc_value": "hnhdl.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 02:20:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854031": [
        {
            "ioc_value": "clinkscalesdrugssc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 02:10:37",
            "last_seen_utc": "2026-07-20 02:11:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854030": [
        {
            "ioc_value": "gofq.phtaxiservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 02:09:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854025": [
        {
            "ioc_value": "phtaxiservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 02:04:21",
            "last_seen_utc": "2026-07-21 14:03:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1854024": [
        {
            "ioc_value": "uxlcj.fontanayoga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 01:20:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854023": [
        {
            "ioc_value": "ftvfx.faux-paws.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 01:18:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854021": [
        {
            "ioc_value": "canyonsyncbox.thorniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 01:18:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854022": [
        {
            "ioc_value": "vertex2urban.thorniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 01:18:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1854020": [
        {
            "ioc_value": "8c21b2fbded2faeb6db2e7a20c513cdb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-20 01:16:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854017": [
        {
            "ioc_value": "52f56cc1abe3ed2f437aaae0c74f5db9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-20 01:16:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854018": [
        {
            "ioc_value": "b59653f1e2b8dae784ca4211199d2887ea676d27e7af9d057a625cf9281c17e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-20 01:16:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854019": [
        {
            "ioc_value": "38b837cc5fe814ca9580f9029386aa405f8e94df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-20 01:16:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854014": [
        {
            "ioc_value": "9c986d7e311ce1e8db7bd65b8271a87d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 01:16:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854015": [
        {
            "ioc_value": "5f85e22acb86ebc9031256efb11af9f1eed58621312a0c0bf448fe699e809c92",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-20 01:16:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854016": [
        {
            "ioc_value": "196515f98d4a043751629ffdc6e4fc371391b5b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-20 01:16:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854010": [
        {
            "ioc_value": "5a8031f3c9ff3c65ebaa0aa60f9e59feba83c71c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-20 01:16:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854011": [
        {
            "ioc_value": "b0c4fe17a83df1621ce3db824684bb55",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-20 01:16:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854012": [
        {
            "ioc_value": "40c98ff9673f67cfa82d9e2e16a2e55644f71fec87e2d92f25821a2b917f8145",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 01:16:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854013": [
        {
            "ioc_value": "5c542d609013e48e6095af6ce5ef28208a35bb3f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 01:16:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854007": [
        {
            "ioc_value": "0bf07f316fe80ace56c947a2021e56a07dab0d6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-20 01:16:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854008": [
        {
            "ioc_value": "d0b2dbfbc3a1d6474628f5268cf884fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-20 01:16:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854009": [
        {
            "ioc_value": "2ac492ce3b66a7979ceba5f26c594f0a69698d19b2ffdb56ac8b741dc30f8e5e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-20 01:16:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854004": [
        {
            "ioc_value": "602862693c2edba1df17afd61b4fcdc3a5ca139f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 01:16:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854005": [
        {
            "ioc_value": "0561a3921c93fe5913454241362e80e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 01:16:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854006": [
        {
            "ioc_value": "2c292ea5d66b3aa9b531e60f55d6af341d101961a649614d022111ff743492f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-20 01:16:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854003": [
        {
            "ioc_value": "e6f4c46f2a72a4d8b1eda2c2c431c64d73eae7057221b35a6fc16138e4dc4d43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-20 01:15:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854000": [
        {
            "ioc_value": "e85149704da6ee8f9bc1c55304c560d1a792180489d4859a64cf0a4e056ccf52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-20 01:15:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854001": [
        {
            "ioc_value": "16646bfd7f6554cd170fb373ce813c24f37e829e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-20 01:15:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1854002": [
        {
            "ioc_value": "f8e68cddf13a94d821a4b265172a0e32",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-20 01:15:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853999": [
        {
            "ioc_value": "5d11d7b9b175695c197014bc6aa2fbdb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-20 01:15:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853997": [
        {
            "ioc_value": "a86c023a02f1454738b39f753f50777c238b4ea296ffc76cd41c3059f216be10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-20 01:15:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853998": [
        {
            "ioc_value": "c25b20a5f15a0f69e0343b539bb4408a4e3739db",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-20 01:15:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853992": [
        {
            "ioc_value": "vqwj.phimmoichilla.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 01:03:39",
            "last_seen_utc": "2026-07-23 04:52:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853991": [
        {
            "ioc_value": "basalt9logic.thorniva.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:58:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853990": [
        {
            "ioc_value": "quartz5prism.veloria.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:43:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853989": [
        {
            "ioc_value": "dbomd.famscargo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:20:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853988": [
        {
            "ioc_value": "ijm1e9p4.chrisbrownstlouis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:10:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853985": [
        {
            "ioc_value": "sonicpathhub.veloria.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:08:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853979": [
        {
            "ioc_value": "dtzu.patxisdublin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853978": [
        {
            "ioc_value": "patxisdublin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-20 00:02:47",
            "last_seen_utc": "2026-07-21 12:02:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853972": [
        {
            "ioc_value": "http://192.162.199.186/aB7xTy2N/mAjOR.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-19 23:45:09",
            "last_seen_utc": "2026-07-21 06:50:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853971": [
        {
            "ioc_value": "http://196.251.107.186/qK3mRv9L/pLdWr.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-19 23:45:06",
            "last_seen_utc": "2026-07-21 06:50:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853969": [
        {
            "ioc_value": "8g7kgrp5.frisbeeburgerllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 23:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853968": [
        {
            "ioc_value": "imrmd.drdavidzweiback.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 23:17:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853967": [
        {
            "ioc_value": "192.197.113.54:332",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-19 23:15:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e6f4c46f2a72a4d8b1eda2c2c431c64d73eae7057221b35a6fc16138e4dc4d43/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853962": [
        {
            "ioc_value": "moszp.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 22:35:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853961": [
        {
            "ioc_value": "edtbi.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 22:27:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853960": [
        {
            "ioc_value": "zwhun.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 22:22:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853959": [
        {
            "ioc_value": "wxfwe0h3.chrisbrowndetroit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 22:10:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853958": [
        {
            "ioc_value": "chrisbrowndetroit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 22:09:34",
            "last_seen_utc": "2026-07-19 22:10:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853951": [
        {
            "ioc_value": "wz43qign.houseofhakka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 22:04:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853949": [
        {
            "ioc_value": "154.82.93.242:778",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-19 22:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853948": [
        {
            "ioc_value": "194.156.79.151:55615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-19 21:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853947": [
        {
            "ioc_value": "qpduk.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 21:48:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853946": [
        {
            "ioc_value": "vectorpointbit.veloria.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 21:48:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853945": [
        {
            "ioc_value": "silicon8host.veloria.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 21:33:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853930": [
        {
            "ioc_value": "alpha4gateweb.glenmora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 21:08:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853926": [
        {
            "ioc_value": "yvryz.gepco-energy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853925": [
        {
            "ioc_value": "yferx.gepco-energy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:43:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853924": [
        {
            "ioc_value": "xxklt.gamehazarat.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853923": [
        {
            "ioc_value": "cucumber-oslo.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-19 20:39:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7502ed3956c621d9442e51343a9d9fd22fb080d1a9edcffc1386901ebb4da9ec/",
            "tags": "NWHStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853922": [
        {
            "ioc_value": "cyberflux9unit.glenmora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:38:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853921": [
        {
            "ioc_value": "atibr.gamehazarat.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:37:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853920": [
        {
            "ioc_value": "konr.domirunway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:36:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853919": [
        {
            "ioc_value": "oqjvp.gamehazarat.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853918": [
        {
            "ioc_value": "etaru.oasis-active.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:18:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853917": [
        {
            "ioc_value": "oasis-active.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:17:22",
            "last_seen_utc": "2026-07-19 20:18:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853916": [
        {
            "ioc_value": "canss.mountoliveccc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:16:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853915": [
        {
            "ioc_value": "mountoliveccc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:15:31",
            "last_seen_utc": "2026-07-19 20:15:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853914": [
        {
            "ioc_value": "uwaho.midiowagrowth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:14:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853913": [
        {
            "ioc_value": "midiowagrowth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:12:53",
            "last_seen_utc": "2026-07-19 20:13:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853730": [
        {
            "ioc_value": "195.201.63.48:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:48",
            "last_seen_utc": "2026-07-20 07:51:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d4e81a7304049c20e0b606220ff924dc48c70d46a8ab466c97d7c6a896e886f5/",
            "tags": "c2,vidar",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1853731": [
        {
            "ioc_value": "https://195.201.63.48/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:47",
            "last_seen_utc": "2026-07-20 07:50:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d4e81a7304049c20e0b606220ff924dc48c70d46a8ab466c97d7c6a896e886f5/",
            "tags": "c2,vidar",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1853732": [
        {
            "ioc_value": "unixcheats.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 20:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1853733": [
        {
            "ioc_value": "https://frolen.life/def.ps1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 20:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d750e2ddfed6f984d95ab0419a085e21f124924c4ab64be5732a1d93719299",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1853734": [
        {
            "ioc_value": "frolen.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 20:10:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d750e2ddfed6f984d95ab0419a085e21f124924c4ab64be5732a1d93719299",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1853736": [
        {
            "ioc_value": "rgb.arizonafamilylawfirm.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:43",
            "last_seen_utc": "2026-07-19 12:28:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d750e2ddfed6f984d95ab0419a085e21f124924c4ab64be5732a1d93719299",
            "tags": "c2,vidar",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1853751": [
        {
            "ioc_value": "167.172.80.107:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 20:10:39",
            "last_seen_utc": "2026-07-28 05:25:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853788": [
        {
            "ioc_value": "137.184.135.42:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 20:10:38",
            "last_seen_utc": "2026-07-29 11:14:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853792": [
        {
            "ioc_value": "161.35.125.247:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 20:10:35",
            "last_seen_utc": "2026-07-29 11:56:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853793": [
        {
            "ioc_value": "168.144.135.136:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 20:10:34",
            "last_seen_utc": "2026-07-25 20:42:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853809": [
        {
            "ioc_value": "159.65.143.171:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 20:10:28",
            "last_seen_utc": "2026-07-29 03:54:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853823": [
        {
            "ioc_value": "http://telco.snovabits.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-19 20:10:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853856": [
        {
            "ioc_value": "https://stac.com.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 20:10:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stac.com.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853858": [
        {
            "ioc_value": "babydiapersinturkey.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:19",
            "last_seen_utc": "2026-07-27 08:04:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1853865": [
        {
            "ioc_value": "daoyiyuan.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:09",
            "last_seen_utc": "2026-08-15 13:39:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,compromised,etherhiding,Polygon,Vidar,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1853867": [
        {
            "ioc_value": "euregio-camper.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:08",
            "last_seen_utc": "2026-08-26 21:48:08",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,compromised,etherhiding,Polygon,Vidar,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1853869": [
        {
            "ioc_value": "instantfixservices.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 20:10:06",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,compromised,etherhiding,Polygon,Vidar,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1853895": [
        {
            "ioc_value": "45fb50f074613b46672fac2ce2f30f1dd5f4e15a3d7f1fd53c333b1e198dbbc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified macOS 001 (UnionCryptoTrader)",
            "first_seen_utc": "2026-07-19 20:09:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/45fb50f074613b46672fac2ce2f30f1dd5f4e15a3d7f1fd53c333b1e198dbbc3",
            "tags": "AMOS,ClickFix,macOS,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853907": [
        {
            "ioc_value": "137.184.135.42:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 20:09:47",
            "last_seen_utc": "2026-07-27 19:46:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853909": [
        {
            "ioc_value": "104.245.245.146:5202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-19 20:05:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853908": [
        {
            "ioc_value": "w8sxay63.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 20:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853906": [
        {
            "ioc_value": "ivclr.mango-sushi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:56:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853905": [
        {
            "ioc_value": "ikyu.domirunway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:56:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853904": [
        {
            "ioc_value": "89.223.24.227:52709",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-07-19 19:45:39",
            "last_seen_utc": "2026-08-19 08:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853903": [
        {
            "ioc_value": "213.160.77.221:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-19 19:44:23",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853902": [
        {
            "ioc_value": "209.160.115.136:8624",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-19 19:44:19",
            "last_seen_utc": "2026-08-19 08:44:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853901": [
        {
            "ioc_value": "178.105.144.206:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-19 19:43:50",
            "last_seen_utc": "2026-08-24 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853900": [
        {
            "ioc_value": "159.65.232.209:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-19 19:43:41",
            "last_seen_utc": "2026-08-19 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853899": [
        {
            "ioc_value": "157.230.235.215:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-19 19:43:40",
            "last_seen_utc": "2026-08-19 08:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853898": [
        {
            "ioc_value": "14.22.75.6:8766",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853897": [
        {
            "ioc_value": "fbbzh.mango-sushi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:40:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853894": [
        {
            "ioc_value": "litsotravels.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:29:43",
            "last_seen_utc": "2026-07-19 19:29:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853893": [
        {
            "ioc_value": "koin99.link",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:19:43",
            "last_seen_utc": "2026-07-19 19:20:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853892": [
        {
            "ioc_value": "istudiosgl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:14:32",
            "last_seen_utc": "2026-07-19 19:14:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853891": [
        {
            "ioc_value": "cydm.domirunway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:10:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853890": [
        {
            "ioc_value": "domirunway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:09:30",
            "last_seen_utc": "2026-07-19 20:36:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853889": [
        {
            "ioc_value": "divoraworld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 19:08:21",
            "last_seen_utc": "2026-07-19 19:09:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853857": [
        {
            "ioc_value": "zenithlogicbase.glenmora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853855": [
        {
            "ioc_value": "fsjkul62.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:21:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853854": [
        {
            "ioc_value": "bwwxd.polarstartire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:15:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853852": [
        {
            "ioc_value": "polarstartire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:13:49",
            "last_seen_utc": "2026-07-21 17:04:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853851": [
        {
            "ioc_value": "wnbl.divanailsachse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853850": [
        {
            "ioc_value": "kelforge6ix.immer-weeping.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:08:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853849": [
        {
            "ioc_value": "divanailsachse.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:07:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853847": [
        {
            "ioc_value": "umq3dj7m.tampabayspin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 18:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853841": [
        {
            "ioc_value": "cleastora.immer-weeping.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853839": [
        {
            "ioc_value": "https://qar.arizonafamilylawfirm.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 17:27:03",
            "last_seen_utc": "2026-08-13 01:24:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853840": [
        {
            "ioc_value": "qar.arizonafamilylawfirm.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 17:27:03",
            "last_seen_utc": "2026-08-13 01:24:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853838": [
        {
            "ioc_value": "cort-cargo.immer-weeping.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:18:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853837": [
        {
            "ioc_value": "dautw.playantwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:15:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853835": [
        {
            "ioc_value": "playantwatch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:13:07",
            "last_seen_utc": "2026-07-21 16:04:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853834": [
        {
            "ioc_value": "hxqt.faux-paws.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:07:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853833": [
        {
            "ioc_value": "faux-paws.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:05:07",
            "last_seen_utc": "2026-07-20 01:18:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853829": [
        {
            "ioc_value": "h9fw1u0e.hanasushiorlando.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 17:03:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853824": [
        {
            "ioc_value": "https://amazon-ny-gifts.com/shellsajshdasd/ftpaksjdkasdjkxnckzxn/ywOVkkem.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 16:38:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853825": [
        {
            "ioc_value": "web-captcha.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 16:38:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853826": [
        {
            "ioc_value": "http://193.148.56.98/WQUKDbdzO8yY5asDU6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 16:38:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853827": [
        {
            "ioc_value": "https://recaptcha.boit.cloud/recaptcha-verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 16:38:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853822": [
        {
            "ioc_value": "stqdx.gominhabjj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 16:18:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853821": [
        {
            "ioc_value": "gominhabjj.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 16:12:53",
            "last_seen_utc": "2026-07-19 16:13:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853817": [
        {
            "ioc_value": "wlgv.famscargo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 16:09:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853811": [
        {
            "ioc_value": "famscargo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 16:04:38",
            "last_seen_utc": "2026-07-20 00:17:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853810": [
        {
            "ioc_value": "z15e6bey.nextbahis.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 16:02:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853807": [
        {
            "ioc_value": "traile4-branch.immer-weeping.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 15:28:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853805": [
        {
            "ioc_value": "https://qrt.arizonafamilylawfirm.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 15:27:02",
            "last_seen_utc": "2026-07-19 16:27:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853806": [
        {
            "ioc_value": "qrt.arizonafamilylawfirm.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 15:27:02",
            "last_seen_utc": "2026-07-19 16:27:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853804": [
        {
            "ioc_value": "imccj.gobgem.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 15:17:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853803": [
        {
            "ioc_value": "lumcrestor5.fashina5pread.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 15:13:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853802": [
        {
            "ioc_value": "gobgem.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 15:12:09",
            "last_seen_utc": "2026-07-19 15:12:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853801": [
        {
            "ioc_value": "uafu.fadedfractal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 15:09:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853795": [
        {
            "ioc_value": "fadedfractal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 15:04:07",
            "last_seen_utc": "2026-07-19 15:04:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853794": [
        {
            "ioc_value": "c4rr1-switch.fashina5pread.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 14:58:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853791": [
        {
            "ioc_value": "hollowash.fashina5pread.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 14:28:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853789": [
        {
            "ioc_value": "https://htk.arizonafamilylawfirm.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 14:27:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853790": [
        {
            "ioc_value": "htk.arizonafamilylawfirm.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 14:27:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853787": [
        {
            "ioc_value": "uxddr.goatedcollection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 14:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853785": [
        {
            "ioc_value": "khob.formonstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 14:08:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853782": [
        {
            "ioc_value": "179.43.186.214:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-19 14:05:04",
            "last_seen_utc": "2026-08-18 11:58:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853781": [
        {
            "ioc_value": "formonstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 14:03:36",
            "last_seen_utc": "2026-07-19 14:03:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853780": [
        {
            "ioc_value": "uaycwz4b.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 14:03:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853778": [
        {
            "ioc_value": "https://fsc.arizonafamilylawfirm.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 13:27:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853779": [
        {
            "ioc_value": "fsc.arizonafamilylawfirm.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 13:27:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853777": [
        {
            "ioc_value": "wgp8mmcl.nextbahis.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 13:20:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853776": [
        {
            "ioc_value": "hzzgoxjvb.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 13:15:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853775": [
        {
            "ioc_value": "ekjcg.gettalloway.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 13:13:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853773": [
        {
            "ioc_value": "202.61.84.99:9123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-19 13:10:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b1dd9ebb57480de3da86e683639b328e9dcf291b4bd2d4816986d1b0cdfa9342/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853772": [
        {
            "ioc_value": "202.61.84.99:9122",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-19 13:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853768": [
        {
            "ioc_value": "mjca.fontanayoga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 13:04:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853767": [
        {
            "ioc_value": "fontanayoga.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 13:03:05",
            "last_seen_utc": "2026-07-20 01:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853766": [
        {
            "ioc_value": "brdxo.old-ground.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 12:23:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853764": [
        {
            "ioc_value": "dyzjs.gepco-energy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 12:11:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853763": [
        {
            "ioc_value": "gepco-energy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 12:10:47",
            "last_seen_utc": "2026-07-19 20:46:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853762": [
        {
            "ioc_value": "jasf.braverybeans.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 12:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853756": [
        {
            "ioc_value": "zawzq25p.grupoelede.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 12:04:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853755": [
        {
            "ioc_value": "p5ymbof6.drdavidzweiback.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 12:03:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853752": [
        {
            "ioc_value": "sparr5-vault.old-ground.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 11:32:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853750": [
        {
            "ioc_value": "https://rgb.arizonafamilylawfirm.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-19 11:27:04",
            "last_seen_utc": "2026-07-19 12:28:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "bhipk,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853749": [
        {
            "ioc_value": "ember-sdk.old-ground.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 11:17:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853748": [
        {
            "ioc_value": "ifmpb.frizzhairforecast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 11:15:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853742": [
        {
            "ioc_value": "txwd.borrender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 11:04:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853741": [
        {
            "ioc_value": "6bj30.eightyen1arge.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 11:02:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853740": [
        {
            "ioc_value": "borrender.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 11:01:55",
            "last_seen_utc": "2026-07-19 11:02:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853739": [
        {
            "ioc_value": "ark-crestos.eightyen1arge.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 10:47:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853729": [
        {
            "ioc_value": "154.12.85.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-19 10:16:42",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853728": [
        {
            "ioc_value": "47.116.60.211:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-19 10:16:28",
            "last_seen_utc": "2026-07-24 04:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853710": [
        {
            "ioc_value": "167.172.80.107:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 10:14:28",
            "last_seen_utc": "2026-07-29 12:39:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853711": [
        {
            "ioc_value": "161.35.125.247:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 10:14:27",
            "last_seen_utc": "2026-07-29 12:28:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853712": [
        {
            "ioc_value": "159.65.143.171:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 10:14:27",
            "last_seen_utc": "2026-07-29 12:30:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853713": [
        {
            "ioc_value": "168.144.135.136:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 10:14:26",
            "last_seen_utc": "2026-07-29 12:37:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853714": [
        {
            "ioc_value": "https://markol.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 10:14:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/markol.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853715": [
        {
            "ioc_value": "137.184.135.42:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 10:14:25",
            "last_seen_utc": "2026-07-29 12:25:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853716": [
        {
            "ioc_value": "162.243.163.143:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 10:14:25",
            "last_seen_utc": "2026-07-29 12:34:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853727": [
        {
            "ioc_value": "znnop.frisbeeburgerllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 10:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853726": [
        {
            "ioc_value": "frisbeeburgerllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 10:09:33",
            "last_seen_utc": "2026-07-19 23:20:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853725": [
        {
            "ioc_value": "gwcs.bolesfarms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 10:06:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853720": [
        {
            "ioc_value": "g5sy0m2g.calirayalake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 10:02:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853719": [
        {
            "ioc_value": "bolesfarms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 10:01:21",
            "last_seen_utc": "2026-07-20 04:56:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853718": [
        {
            "ioc_value": "91.92.47.95:56999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-19 09:46:24",
            "last_seen_utc": "2026-08-18 18:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853717": [
        {
            "ioc_value": "185.147.83.58:64213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-19 09:44:11",
            "last_seen_utc": "2026-09-01 02:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853709": [
        {
            "ioc_value": "ystr.bittersweetkennel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 09:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853703": [
        {
            "ioc_value": "bittersweetkennel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 09:00:51",
            "last_seen_utc": "2026-07-19 09:01:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853701": [
        {
            "ioc_value": "zuibs.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 08:59:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853697": [
        {
            "ioc_value": "trivaleal9.eightyen1arge.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 08:37:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853698": [
        {
            "ioc_value": "markol.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 08:37:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853690": [
        {
            "ioc_value": "bzeg.bikertlane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 08:01:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853689": [
        {
            "ioc_value": "m4jpiubh.royaldoorsspringdale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 08:00:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853688": [
        {
            "ioc_value": "bikertlane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 08:00:21",
            "last_seen_utc": "2026-07-19 08:00:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853687": [
        {
            "ioc_value": "royaldoorsspringdale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 07:59:10",
            "last_seen_utc": "2026-07-19 07:59:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853686": [
        {
            "ioc_value": "4yl6u62i.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 07:58:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853685": [
        {
            "ioc_value": "otcgf.christorem.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 07:56:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853684": [
        {
            "ioc_value": "christorem.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 07:54:45",
            "last_seen_utc": "2026-07-19 07:55:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853682": [
        {
            "ioc_value": "https://alababababa.cloud/cVGvQio6.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853683": [
        {
            "ioc_value": "https://productionai.shop/recaptcha-verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853681": [
        {
            "ioc_value": "http://95.164.53.115:5506/do.vbs",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853679": [
        {
            "ioc_value": "http://95.164.53.214:5554/d.bat",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853680": [
        {
            "ioc_value": "https://natural-health-news.com/Verify.msi?I",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853676": [
        {
            "ioc_value": "http://93.152.224.29/VMvDWLT7AqpC45hhHf",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853677": [
        {
            "ioc_value": "https://gerenland.click/flask/whales.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853678": [
        {
            "ioc_value": "http://178.17.59.195:5506/ll.vbs",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:37:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853675": [
        {
            "ioc_value": "https://gerenland.click/api/stale.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:28:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853674": [
        {
            "ioc_value": "res.explicittweak.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-19 07:12:21",
            "last_seen_utc": "2026-07-19 07:12:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cb336a6e3fc0e9aa62b5768bffc207c09b372546636a5c58057a1b6d0708df06/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853543": [
        {
            "ioc_value": "23.94.197.120:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-19 07:08:40",
            "last_seen_utc": null,
            "confidence_level": 77,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1853569": [
        {
            "ioc_value": "103.83.87.122:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853570": [
        {
            "ioc_value": "103.83.87.122:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853571": [
        {
            "ioc_value": "103.83.87.122:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853572": [
        {
            "ioc_value": "103.83.87.122:8060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853573": [
        {
            "ioc_value": "103.83.87.122:4444",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853574": [
        {
            "ioc_value": "http://103.83.87.122/telnet.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853575": [
        {
            "ioc_value": "http://103.83.87.122/iran.x86_64",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853576": [
        {
            "ioc_value": "http://103.83.87.122/iran.aarch64",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853577": [
        {
            "ioc_value": "http://103.83.87.122/iran.m68k",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853578": [
        {
            "ioc_value": "http://103.83.87.122/iran.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853579": [
        {
            "ioc_value": "http://103.83.87.122/iran.mipsel",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853580": [
        {
            "ioc_value": "http://103.83.87.122/iran.powerpc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853581": [
        {
            "ioc_value": "http://103.83.87.122/iran.sparc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853582": [
        {
            "ioc_value": "http://103.83.87.122/iran.sh4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853583": [
        {
            "ioc_value": "http://103.83.87.122/iran.arc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853584": [
        {
            "ioc_value": "http://103.83.87.122/iran.i486",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853585": [
        {
            "ioc_value": "http://103.83.87.122/iran.armv4l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853586": [
        {
            "ioc_value": "http://103.83.87.122/iran.armv5l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853587": [
        {
            "ioc_value": "http://103.83.87.122/iran.armv6l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853588": [
        {
            "ioc_value": "http://103.83.87.122/iran.armv7l",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853590": [
        {
            "ioc_value": "b1a6dba6636b519d76d7219f6264ac9f1456681c0855baef954fb435d3e25ce5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853591": [
        {
            "ioc_value": "bf38b3e5d645c78377599a6c218a347312c5a3daef693c7931f2710806d85317",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853592": [
        {
            "ioc_value": "f5cb6dadaee4399a1f014ef5946d0a4c1af578d15ff078e725e0757f28dc8493",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853593": [
        {
            "ioc_value": "e987bb8b32facef51c3cc5a94bd51e01d8c3be8a19c106de70147ab5ce84dc66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853594": [
        {
            "ioc_value": "6e709fb9b09d9f8318724a8620812f55411a3ea49de6319c4832885547773ddd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853595": [
        {
            "ioc_value": "0d64cd75599dea5b8cf393b6e2b709f51b3971e64b96920e0707020e22ee7953",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853596": [
        {
            "ioc_value": "f38d748d9ea29424c28744c52bcd1d14328d49fcb604ca08fab3547ec500d6f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853597": [
        {
            "ioc_value": "b4acd1ab65624b694946b1181bba0732bb63c88c51b8334914c26c1805b2e1aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853598": [
        {
            "ioc_value": "21c5f4a04173a5176d60b06095bf5d25e0022ffbe304601e368eccf718587dc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853599": [
        {
            "ioc_value": "ec442a132f27486d1dfa3faa92c03e10012afe2b8de39fa9b42b367f7971c989",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853600": [
        {
            "ioc_value": "9538c8a2edeaa8667134a469d03a7057ddc1e753ce1e5250f92f01c1097fcb1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853601": [
        {
            "ioc_value": "d8cd1d9f8c092aa4a6c1b1b2b97c7de71d55c2af8332532d2956e4f5becac17e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853602": [
        {
            "ioc_value": "95f5bd70c4e40f9663b67d40d23a46ca21d97448f9a609be10b12837e6a59805",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853603": [
        {
            "ioc_value": "b1f2808e05cb42894790c12172ffacf8673a0a7e14c7af5ad43d5bedfa62a5e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-19 07:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853613": [
        {
            "ioc_value": "207.148.66.2:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 07:08:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853640": [
        {
            "ioc_value": "45.77.32.3:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 07:08:22",
            "last_seen_utc": "2026-07-26 00:47:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853652": [
        {
            "ioc_value": "https://flavaradioandtv.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:08:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/flavaradioandtv.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853663": [
        {
            "ioc_value": "https://ws.upgifter.pro/c",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://ws.upgifter.pro/c",
            "tags": "backdoor,mtproto,python,stealer,telegram",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853669": [
        {
            "ioc_value": "195.24.237.240:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-19 07:08:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://sigsec.tech",
            "tags": "black3,cowrie,diicot,ELF,honeypot,mexals,ssh",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1853454": [
        {
            "ioc_value": "45.76.146.2:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 07:08:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853537": [
        {
            "ioc_value": "149.28.158.66:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-19 07:08:13",
            "last_seen_utc": "2026-07-20 21:57:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853673": [
        {
            "ioc_value": "dlvk.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 07:05:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853668": [
        {
            "ioc_value": "ht326ul6.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 07:02:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853667": [
        {
            "ioc_value": "photo-hotel8413.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-19 07:02:02",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853666": [
        {
            "ioc_value": "imagephotosafe.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-19 07:02:01",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853665": [
        {
            "ioc_value": "lqcah.cheaperthan-dirt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 06:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853664": [
        {
            "ioc_value": "cheaperthan-dirt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 06:53:51",
            "last_seen_utc": "2026-07-19 06:54:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853662": [
        {
            "ioc_value": "olotu.cardanaircraft.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 06:33:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853661": [
        {
            "ioc_value": "cardanaircraft.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 06:32:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853656": [
        {
            "ioc_value": "xexop.burritodelight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 05:59:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853655": [
        {
            "ioc_value": "qjhi.taktikkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 05:59:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853654": [
        {
            "ioc_value": "ybntipf1.ramenizakaya-himeji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 05:59:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853653": [
        {
            "ioc_value": "burritodelight.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 05:59:12",
            "last_seen_utc": "2026-07-19 05:59:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853647": [
        {
            "ioc_value": "bvxbg.buildableconcepts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 05:01:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853646": [
        {
            "ioc_value": "buildableconcepts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 04:59:47",
            "last_seen_utc": "2026-07-19 05:00:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853645": [
        {
            "ioc_value": "tomi.socialclub112.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 04:58:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853644": [
        {
            "ioc_value": "vcjh.shimiaodaoflushing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 04:38:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853643": [
        {
            "ioc_value": "wsfls.hazaratbet.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 04:26:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853642": [
        {
            "ioc_value": "http://keutbdump3.temp.swtest.ru/pipePhpjsPacketLongpoll.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-19 04:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853641": [
        {
            "ioc_value": "62.60.226.68:24044",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-19 04:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853634": [
        {
            "ioc_value": "6ytetbzh.quickandcleanfetish.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 04:02:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853633": [
        {
            "ioc_value": "amse.senorgyros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 03:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853632": [
        {
            "ioc_value": "hcrty.funxbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 03:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853629": [
        {
            "ioc_value": "ru4xmcs2.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 02:58:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853628": [
        {
            "ioc_value": "uina.noodlesbymomi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 02:39:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853627": [
        {
            "ioc_value": "yxzsj.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 02:20:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853626": [
        {
            "ioc_value": "zugaztieta.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 02:09:46",
            "last_seen_utc": "2026-07-19 02:10:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853620": [
        {
            "ioc_value": "vftudd2r.gamehazarat.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 02:03:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853618": [
        {
            "ioc_value": "a2wk5fd0.purity-pharmaceuticals.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 01:59:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853617": [
        {
            "ioc_value": "purity-pharmaceuticals.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 01:57:35",
            "last_seen_utc": "2026-07-19 01:57:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853616": [
        {
            "ioc_value": "sultanoffc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 01:49:59",
            "last_seen_utc": "2026-07-19 01:50:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853614": [
        {
            "ioc_value": "hszy.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 01:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853612": [
        {
            "ioc_value": "sultan88.de.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-19 01:29:43",
            "last_seen_utc": "2026-07-19 01:29:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853589": [
        {
            "ioc_value": "n5yqon6r.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 23:58:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853568": [
        {
            "ioc_value": "38.76.169.75:870",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 23:46:07",
            "last_seen_utc": "2026-09-01 02:47:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853567": [
        {
            "ioc_value": "130.94.34.66:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 23:45:54",
            "last_seen_utc": "2026-08-20 10:47:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853566": [
        {
            "ioc_value": "bzki.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 23:34:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853565": [
        {
            "ioc_value": "lfumk.winston.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 23:27:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853560": [
        {
            "ioc_value": "jtab.jbgroup21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 22:32:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853559": [
        {
            "ioc_value": "ynzpk.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 22:22:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853555": [
        {
            "ioc_value": "4dc5hwj8.nextbahis.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 21:57:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853554": [
        {
            "ioc_value": "g9epkl53.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 21:57:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853553": [
        {
            "ioc_value": "flyi.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 21:34:26",
            "last_seen_utc": "2026-07-31 01:29:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853551": [
        {
            "ioc_value": "caycn.tampabayspin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 21:24:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853545": [
        {
            "ioc_value": "o59dzghe.calculadoracomisiones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 21:02:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853544": [
        {
            "ioc_value": "https://windows-update-local.rest",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-18 20:51:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5679dcddde61ea4ea8ee5199339ba059940b1257211fcf95c80d1d5b4063e85a/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853542": [
        {
            "ioc_value": "fazv.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 20:36:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853541": [
        {
            "ioc_value": "inasa.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 20:21:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853536": [
        {
            "ioc_value": "u6ggk611.elizabethspizzadenton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 19:57:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853535": [
        {
            "ioc_value": "elizabethspizzadenton.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 19:55:59",
            "last_seen_utc": "2026-07-20 08:21:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853534": [
        {
            "ioc_value": "64.89.161.190:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 19:45:54",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853533": [
        {
            "ioc_value": "5.35.91.124:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 19:45:46",
            "last_seen_utc": "2026-08-18 08:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853531": [
        {
            "ioc_value": "198.23.185.95:20100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 19:44:24",
            "last_seen_utc": "2026-08-18 08:44:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853532": [
        {
            "ioc_value": "198.23.185.95:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 19:44:24",
            "last_seen_utc": "2026-08-18 08:44:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853530": [
        {
            "ioc_value": "193.93.193.135:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-18 19:44:20",
            "last_seen_utc": "2026-08-18 08:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853529": [
        {
            "ioc_value": "147.93.191.75:20100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 19:43:34",
            "last_seen_utc": "2026-08-19 18:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853528": [
        {
            "ioc_value": "144.172.88.233:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-18 19:43:31",
            "last_seen_utc": "2026-08-18 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853525": [
        {
            "ioc_value": "b8006c2a5a511648876a967f55bae95ccb5515ff0436e7855ce5d2ecc7dd407f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853526": [
        {
            "ioc_value": "044b9e2eba3cb9c410aff01e350676b2405c930e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853527": [
        {
            "ioc_value": "52709e9850a742eea194b78fcb9a5528",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853522": [
        {
            "ioc_value": "cdc0d27aee64dbcc4b67a3a6cdde4c7f32065144d8fbb6ada691143456e7d756",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853523": [
        {
            "ioc_value": "d13ff91e9a6fc4c6fb02a2e1e766d18859f84641",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853524": [
        {
            "ioc_value": "43cb4e27e723dad9476b5907e60f7f44",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853519": [
        {
            "ioc_value": "ccce59754ac625d60cda648debe4a3021b70a30bc8b85d9a7d5612b1b64ef52a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853520": [
        {
            "ioc_value": "718574faa7708402d748edd30bc9deac049abad0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853521": [
        {
            "ioc_value": "1b344651227f8909c586256a6e7541a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853516": [
        {
            "ioc_value": "235f91d8d4634d2af5a9a504420d624496f11af6ffc8a98adea083121b88ab1e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853517": [
        {
            "ioc_value": "cdb870a8ea5056f88d548e2bd8c6b7a2004f452f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853518": [
        {
            "ioc_value": "7b1c118968b9261ad00231a7fc8180ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853513": [
        {
            "ioc_value": "f3feecf1f6fb2fec70747006dbb8a09b73dfeb8f54946a4d701c13fd71d4600c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853514": [
        {
            "ioc_value": "33297bdf9799e478a11ad7215d5342cc9afe5c5e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853515": [
        {
            "ioc_value": "ed4861335d1a898ce5b42d2bb1ab98f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853509": [
        {
            "ioc_value": "8b41af0eb62a9152cc69899f82472db9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853510": [
        {
            "ioc_value": "5d16539260e3c23da6f5fee3ba39104fde4f68d4226a9957b1c7e35b4a9c1cd4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853511": [
        {
            "ioc_value": "4080d4e71549072b27b24b5cb902d2d2cdb05da5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853512": [
        {
            "ioc_value": "bc4a779062e33deafacd023552b70b70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853506": [
        {
            "ioc_value": "14bb9ecf6b180317899ee49c68008b63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853507": [
        {
            "ioc_value": "a82cd50cbc1beec0bb4d774c248d3daa58f858fa4bddc99b314874cb9914eaca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853508": [
        {
            "ioc_value": "51ac02e4dd3ba3ae244f0830166dbdaf6cdefe56",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853503": [
        {
            "ioc_value": "fc85c6ec73bec24c13e3c845b01f517c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853504": [
        {
            "ioc_value": "64a3a21cb92d06b12229c7788f6578dc71a3a61cd8658c53fa9cafe051b11b2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853505": [
        {
            "ioc_value": "0301c109feb04625b760b29cc34fceadd8c62e6f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853500": [
        {
            "ioc_value": "f409be3647f3a4b0b01e59213a1ef5d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853501": [
        {
            "ioc_value": "72c5cec904df799ee47952dba0d830fccd58e49c4810db5261e85747d4495713",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853502": [
        {
            "ioc_value": "c2cea49d2daec034380b762d47dea91725311948",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853497": [
        {
            "ioc_value": "778aad49c1279d5a647759894155d40a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-18 19:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853498": [
        {
            "ioc_value": "1352fc1e651300138b7f5cd431dac11935e54639f8c8b3f87fa9ea6937e6a07a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853499": [
        {
            "ioc_value": "3145629198744f73861f58763e0396f728039972",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853495": [
        {
            "ioc_value": "b2ab8825b84e6f0209cf713dcf7156c93ae82f37a6d9f0ca9072e228825c8d63",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-18 19:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853496": [
        {
            "ioc_value": "54fbaa90e47e9ea04deebb6dd2a5e8ed48e86a35",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-18 19:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853492": [
        {
            "ioc_value": "31cf473bb93abef0760d4992d45bafcd936edb7c26193c175f8491f8ffaef0e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-18 19:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853493": [
        {
            "ioc_value": "1d17d0e432e085af891afabedafaf9c1f1b3993f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-18 19:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853494": [
        {
            "ioc_value": "d1e5cbeac0e02e97a34aca7c9c54db5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-18 19:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853489": [
        {
            "ioc_value": "7d936e44f50cafb14afdc8ea652905f611db0f04f10da8feb5d5ba74bcbf5a22",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-18 19:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853490": [
        {
            "ioc_value": "4d66fca32efec8db198b4ff11ed5bb653a39d6e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-18 19:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853491": [
        {
            "ioc_value": "52c1c5a26091c68f322fc44b0afcd6d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-18 19:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853485": [
        {
            "ioc_value": "f86db3e1c8635ecc820ef308302524bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 19:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853486": [
        {
            "ioc_value": "555fd5790046add4e994dfe655efe0ced7b31b73849793bd81bcff983f022013",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 19:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853487": [
        {
            "ioc_value": "0a07b70b37919c01cfddd5e4b4260b144e138ac5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 19:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853488": [
        {
            "ioc_value": "906010fce0c7b37b29ee13a78b6e130f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 19:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853482": [
        {
            "ioc_value": "3dd256518361ce5770b58c28b2847df5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-18 19:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853483": [
        {
            "ioc_value": "b473b09292b0e9ed4d4089344f77a12465242cf69db10768c93ba6cd40cfe770",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 19:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853484": [
        {
            "ioc_value": "90657841d1dab058acc5292711047d2999b05df5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 19:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853478": [
        {
            "ioc_value": "30d9b5c56983375335bee44843115b393b7c711b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-18 19:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853479": [
        {
            "ioc_value": "58224bee686c03b0f7394a459d3ff971",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-18 19:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853480": [
        {
            "ioc_value": "5cdb6a3810a5148518252110e51655297a6a9832f254f65f804b5a6fad1e3259",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-18 19:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853481": [
        {
            "ioc_value": "358cafc8ac2911426b31c56cce308437d68b0db7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-18 19:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853475": [
        {
            "ioc_value": "0f8a097b3bb53c2bdd08ca1b23b749e6b2ca1f2a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-18 19:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853476": [
        {
            "ioc_value": "466d3130f4f427ec39fb1378ee142e6f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-18 19:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853477": [
        {
            "ioc_value": "f2b9739fe3aced2d2074db022b5d1e23003b44fbc24413f3bd3298f1623c6665",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-18 19:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853471": [
        {
            "ioc_value": "72344facd02bea9007c59c2a67bd96d521838b566298caf0f80c6ceecf93520f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-18 19:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853472": [
        {
            "ioc_value": "fb7cd49f47060a8514fe5c358bb2a9f74eb215f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-18 19:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853473": [
        {
            "ioc_value": "f238406f5cd53942450f145e1c977476",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-18 19:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853474": [
        {
            "ioc_value": "16a4a7b5a478ce3dd732b318f7dfadbd337ab51d804a0a261623ea941417fd5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-18 19:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853467": [
        {
            "ioc_value": "8d9fa801432654ebfe456974bb355bd2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-18 19:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853468": [
        {
            "ioc_value": "9264d342f207b8a9233c393b864c26617385071283b030ec6b6976069d91a587",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853469": [
        {
            "ioc_value": "50cba914311bba28c423bbc11d499b429b1b64ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853470": [
        {
            "ioc_value": "8ab0732a85899cb205f645e969d0b4b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-18 19:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853464": [
        {
            "ioc_value": "036227aa4ccacd6153de68143e02f001",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-18 19:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853465": [
        {
            "ioc_value": "6aa982f7c6167752e8f58083dc5f1c11ff0aa63b3c3d2e192009cce2cef84ee0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-18 19:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853466": [
        {
            "ioc_value": "875108112d2fdfbdb04d75bbbe993b1ce8aea140",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-18 19:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853462": [
        {
            "ioc_value": "c1d7ce9290ee9a148ea430871f900a44511b8db374dedcb4d417072b54e48d07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-18 19:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853463": [
        {
            "ioc_value": "746b7fc0665654244961885933decb7c3f7dc3a4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-18 19:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853461": [
        {
            "ioc_value": "103.119.3.160:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-18 19:36:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0a3061ce09d7e3cb2b3d3453432da69ee83b59b782853d1f6462fd177db75a7a/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853460": [
        {
            "ioc_value": "jfwh.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 19:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853459": [
        {
            "ioc_value": "ijt1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-18 19:35:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2e0cc1e150d44c19a28246ad632d71efeae39ce1a71ff32be4707b2fb8303360/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853458": [
        {
            "ioc_value": "xhozx.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 19:25:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853457": [
        {
            "ioc_value": "154.203.165.5:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-18 19:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853456": [
        {
            "ioc_value": "154.94.123.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-18 19:25:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853455": [
        {
            "ioc_value": "154.94.123.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-18 19:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853448": [
        {
            "ioc_value": "149.28.158.66:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-18 19:10:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853447": [
        {
            "ioc_value": "ncia.hazaratbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 18:32:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853446": [
        {
            "ioc_value": "jxrml.luxurygoodscaree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 18:23:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853440": [
        {
            "ioc_value": "156.67.218.115:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-07-18 18:02:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a2d67291d87fe8f4d6e92fdb45c0190fb372cdd2c83ccc9ab8fb81bf69c74588/",
            "tags": "Tsunami",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853441": [
        {
            "ioc_value": "151.106.52.209:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-07-18 18:02:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a2d67291d87fe8f4d6e92fdb45c0190fb372cdd2c83ccc9ab8fb81bf69c74588/",
            "tags": "Tsunami",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853438": [
        {
            "ioc_value": "quorashift.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:59:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ea2ab216b5e157d55e0dd2d8a229adda6b4507c1b1d72bf12f7879e864718b6/",
            "tags": "ZigClipper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853439": [
        {
            "ioc_value": "static.quorashift.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:59:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ea2ab216b5e157d55e0dd2d8a229adda6b4507c1b1d72bf12f7879e864718b6/",
            "tags": "ZigClipper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853437": [
        {
            "ioc_value": "6leriop4.littleitalypizzafortwashington.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 17:55:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853436": [
        {
            "ioc_value": "littleitalypizzafortwashington.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 17:55:28",
            "last_seen_utc": "2026-07-18 17:55:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853435": [
        {
            "ioc_value": "login.metricsdashboard.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:53:48",
            "last_seen_utc": "2026-07-18 17:53:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ea2ab216b5e157d55e0dd2d8a229adda6b4507c1b1d72bf12f7879e864718b6/",
            "tags": "ZigClipper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853430": [
        {
            "ioc_value": "kqgn.fg777jbg.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 17:33:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853098": [
        {
            "ioc_value": "fiscalnotificacionmunicipal.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853099": [
        {
            "ioc_value": "fundacionolipica.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853100": [
        {
            "ioc_value": "notificadorlocalsolionesfis.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853101": [
        {
            "ioc_value": "www.remicionesexternas.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853102": [
        {
            "ioc_value": "www.firmaprincipal.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853103": [
        {
            "ioc_value": "comidarapidas.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853104": [
        {
            "ioc_value": "solicitudelarchivo.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853105": [
        {
            "ioc_value": "calzadoswer.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853106": [
        {
            "ioc_value": "cominiucadosinternos.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853107": [
        {
            "ioc_value": "notificacionesnacionales.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853108": [
        {
            "ioc_value": "cpantalonesnegro.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853109": [
        {
            "ioc_value": "etiendasb.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853110": [
        {
            "ioc_value": "bpadellcali.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853111": [
        {
            "ioc_value": "detalleselparaiso.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-18 17:33:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853117": [
        {
            "ioc_value": "nuevocomienzp333.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-18 17:33:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853118": [
        {
            "ioc_value": "gfhdsjkasd.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-18 17:33:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1852859": [
        {
            "ioc_value": "https://2hbau.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:33:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/2hbau.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852860": [
        {
            "ioc_value": "loveloveinfo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-18 17:33:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852877": [
        {
            "ioc_value": "auth-id-browser.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-18 17:33:05",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852893": [
        {
            "ioc_value": "206.189.144.140:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-18 17:33:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853184": [
        {
            "ioc_value": "https://store.julias.makeup/img_094957.png",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-18 17:33:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1853224": [
        {
            "ioc_value": "catholicsma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:33:01",
            "last_seen_utc": "2026-08-19 21:11:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/1578",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1853225": [
        {
            "ioc_value": "burutrading.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:33:00",
            "last_seen_utc": "2026-08-20 20:38:26",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/1577",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1853241": [
        {
            "ioc_value": "103.177.46.67:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-18 17:32:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1853245": [
        {
            "ioc_value": "20.244.105.238:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-18 17:32:59",
            "last_seen_utc": "2026-08-03 17:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "8075,c2,censys,quasar",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1853255": [
        {
            "ioc_value": "1trusted.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:32:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/9b9fdccfbd73d13b4d4efeed9166625fe7c645b2d35751d7905035f7f87eb14e",
            "tags": "ConnectWise,RMM,ScreenConnect,unattended-access",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1853258": [
        {
            "ioc_value": "159.203.1.105:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-18 17:32:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853284": [
        {
            "ioc_value": "https://www.pressurewashingsacramento.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:32:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.pressurewashingsacramento.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853307": [
        {
            "ioc_value": "https://jenniferhagen.ch/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:32:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jenniferhagen.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853347": [
        {
            "ioc_value": "http://91.92.42.213/phantom.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:32:56",
            "last_seen_utc": "2026-07-18 10:00:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1853352": [
        {
            "ioc_value": "searchranktraffic.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-18 17:32:55",
            "last_seen_utc": "2026-08-17 08:06:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1853365": [
        {
            "ioc_value": "https://babelo.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 17:32:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/babelo.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1853400": [
        {
            "ioc_value": "robbylinkpi.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-18 17:32:55",
            "last_seen_utc": "2026-07-29 01:29:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1853406": [
        {
            "ioc_value": "45.77.168.73:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-18 17:32:54",
            "last_seen_utc": "2026-07-22 15:16:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1853429": [
        {
            "ioc_value": "116.11.4.136:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 17:32:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853428": [
        {
            "ioc_value": "103.86.65.202:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 17:31:55",
            "last_seen_utc": "2026-08-20 10:47:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853427": [
        {
            "ioc_value": "15.224.128.203:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 17:31:42",
            "last_seen_utc": "2026-08-03 07:25:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853426": [
        {
            "ioc_value": "nfghq.kmmits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 17:24:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853423": [
        {
            "ioc_value": "bkmu.ronarcher.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 16:28:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853422": [
        {
            "ioc_value": "ronarcher.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 16:28:00",
            "last_seen_utc": "2026-07-18 16:28:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853421": [
        {
            "ioc_value": "rzaxl.switch-vodka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 16:19:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853420": [
        {
            "ioc_value": "switch-vodka.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 16:18:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853419": [
        {
            "ioc_value": "es2utu9l.samsann.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 16:14:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853413": [
        {
            "ioc_value": "ajp3btj8.nextbahis.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 16:01:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853412": [
        {
            "ioc_value": "47sat9ax.corpuschristiairporthotel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 15:56:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853410": [
        {
            "ioc_value": "yefu.rftmacncheese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 15:29:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853408": [
        {
            "ioc_value": "qlzqh.sultankito.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 15:22:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853407": [
        {
            "ioc_value": "sultankito.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 15:18:04",
            "last_seen_utc": "2026-07-18 15:18:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853399": [
        {
            "ioc_value": "sjhofpgpz.rahmagrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 14:27:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853398": [
        {
            "ioc_value": "rahmagrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 14:26:45",
            "last_seen_utc": "2026-07-18 14:27:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853397": [
        {
            "ioc_value": "gygor.sultankito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 14:19:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853396": [
        {
            "ioc_value": "sultankito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 14:17:34",
            "last_seen_utc": "2026-07-18 14:17:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853392": [
        {
            "ioc_value": "iqr1pfqd.okegass.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 13:57:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853385": [
        {
            "ioc_value": "cloud-scn.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-18 13:36:15",
            "last_seen_utc": "2026-07-27 08:42:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853386": [
        {
            "ioc_value": "imagestore-vault.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-18 13:36:15",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853387": [
        {
            "ioc_value": "protectvids.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-18 13:36:15",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853388": [
        {
            "ioc_value": "skrin-archiv.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-18 13:36:15",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853389": [
        {
            "ioc_value": "vault-imagehub.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-18 13:36:15",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853390": [
        {
            "ioc_value": "vid-secure.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-18 13:36:15",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853384": [
        {
            "ioc_value": "aabqjhcdf.quickandcleanfetish.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 13:32:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853382": [
        {
            "ioc_value": "mtvhf.socialclub112.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 13:21:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853376": [
        {
            "ioc_value": "pouulacmu.phogoldencow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 12:31:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853375": [
        {
            "ioc_value": "phogoldencow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 12:30:04",
            "last_seen_utc": "2026-07-18 12:30:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853374": [
        {
            "ioc_value": "ktkxw.shimiaodaoflushing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 12:16:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853367": [
        {
            "ioc_value": "8hrhd061.noodlesbymomi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:56:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853364": [
        {
            "ioc_value": "vtneuluzf.pathfindersafrica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:28:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853363": [
        {
            "ioc_value": "ddj8f1ro.ruralrouterust.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:16:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853362": [
        {
            "ioc_value": "zaflv.senorgyros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:16:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853357": [
        {
            "ioc_value": "p43qsij4.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:01:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853356": [
        {
            "ioc_value": "nsbnqzdnv.pathfindersafrica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:01:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853355": [
        {
            "ioc_value": "jeekd.senorgyros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853354": [
        {
            "ioc_value": "senorgyros.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 11:00:13",
            "last_seen_utc": "2026-07-19 03:35:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853353": [
        {
            "ioc_value": "pathfindersafrica.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 10:58:42",
            "last_seen_utc": "2026-07-18 11:29:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853346": [
        {
            "ioc_value": "yvzqh.hazaratbet.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 10:00:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853345": [
        {
            "ioc_value": "vwpanxmoc.orlandosmuncy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 10:00:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853344": [
        {
            "ioc_value": "jifyi.gamehazarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 09:58:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853343": [
        {
            "ioc_value": "orlandosmuncy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 09:58:10",
            "last_seen_utc": "2026-07-18 09:58:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853342": [
        {
            "ioc_value": "7uaho90m.myluxurykitchenandbath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 09:53:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853341": [
        {
            "ioc_value": "myluxurykitchenandbath.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 09:53:18",
            "last_seen_utc": "2026-07-18 09:54:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853340": [
        {
            "ioc_value": "errjothcxmklspp.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:49:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853339": [
        {
            "ioc_value": "errakgrwenmjibedi.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:49:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853338": [
        {
            "ioc_value": "159.94.211.163:14443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 09:47:35",
            "last_seen_utc": "2026-08-24 14:48:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853337": [
        {
            "ioc_value": "158.94.211.163:14443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-18 09:47:34",
            "last_seen_utc": "2026-08-24 14:48:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853336": [
        {
            "ioc_value": "clouderrtufjcb.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:46:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853335": [
        {
            "ioc_value": "46.246.12.19:2703",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 09:46:23",
            "last_seen_utc": "2026-08-17 20:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853334": [
        {
            "ioc_value": "45.55.98.175:60560",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-18 09:46:14",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853333": [
        {
            "ioc_value": "31.57.93.182:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:45:59",
            "last_seen_utc": "2026-09-01 02:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853331": [
        {
            "ioc_value": "217.217.97.111:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-18 09:45:49",
            "last_seen_utc": "2026-09-01 02:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853330": [
        {
            "ioc_value": "2.59.132.84:7434",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 09:44:45",
            "last_seen_utc": "2026-08-17 20:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853329": [
        {
            "ioc_value": "198.23.185.95:1000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-18 09:44:41",
            "last_seen_utc": "2026-08-17 20:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853328": [
        {
            "ioc_value": "138.124.90.26:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-18 09:43:33",
            "last_seen_utc": "2026-08-20 08:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1853327": [
        {
            "ioc_value": "auth-id-browser.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:33:31",
            "last_seen_utc": "2026-07-26 20:22:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853326": [
        {
            "ioc_value": "babelo.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:32:40",
            "last_seen_utc": "2026-07-27 22:54:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853325": [
        {
            "ioc_value": "baboke.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 09:32:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853319": [
        {
            "ioc_value": "lbtzq.funxbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 08:58:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853318": [
        {
            "ioc_value": "kgptwmgqf.taktikkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 08:58:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853317": [
        {
            "ioc_value": "voidravenstorm.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-18 08:49:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853316": [
        {
            "ioc_value": "yblfhadfu.mango90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 08:49:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853314": [
        {
            "ioc_value": "158.94.211.92:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-18 08:47:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853308": [
        {
            "ioc_value": "rmxohycah.sky7bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 08:02:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853306": [
        {
            "ioc_value": "heork.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 07:59:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853305": [
        {
            "ioc_value": "8862moud.mikespizzafairfield.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 07:53:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853299": [
        {
            "ioc_value": "mpuwd.deepspaceparker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 06:57:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853298": [
        {
            "ioc_value": "uvxzsajar.lion1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 06:57:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853297": [
        {
            "ioc_value": "atqfb.calirayalake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 06:33:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853296": [
        {
            "ioc_value": "jppxuuhae.imagederm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 06:23:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853294": [
        {
            "ioc_value": "5ipju606.venus90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 06:11:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853289": [
        {
            "ioc_value": "hdz7omr1.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 06:01:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853288": [
        {
            "ioc_value": "i0bep9cj.medallionfoodsinctempura.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 05:54:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853286": [
        {
            "ioc_value": "olyqj.luxurygoodscaree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 05:34:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853285": [
        {
            "ioc_value": "luxurygoodscaree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 05:32:03",
            "last_seen_utc": "2026-07-18 18:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853283": [
        {
            "ioc_value": "dogfrpygx.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 05:24:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853277": [
        {
            "ioc_value": "acvwd.lunapizzaco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 04:32:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853276": [
        {
            "ioc_value": "lunapizzaco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 04:31:33",
            "last_seen_utc": "2026-07-18 04:31:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853275": [
        {
            "ioc_value": "ubwzdjejr.fun777game.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 04:24:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853268": [
        {
            "ioc_value": "4j6m037n.mcbelize.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 03:55:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853267": [
        {
            "ioc_value": "mcbelize.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 03:51:48",
            "last_seen_utc": "2026-07-18 03:52:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853266": [
        {
            "ioc_value": "tygnu.lokercorp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 03:31:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853265": [
        {
            "ioc_value": "lokercorp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 03:31:04",
            "last_seen_utc": "2026-07-18 03:31:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853264": [
        {
            "ioc_value": "cgocpkfgd.fg777tasya.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 03:22:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853257": [
        {
            "ioc_value": "cvyfg.kopicoffeeco.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 02:33:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853254": [
        {
            "ioc_value": "isrjnxfeb.fg777kito.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 02:22:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853251": [
        {
            "ioc_value": "nle3gi30.makingreview.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 01:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853249": [
        {
            "ioc_value": "nyenf.kmmits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 01:32:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853248": [
        {
            "ioc_value": "cqjeqfltg.fg777jbg.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 01:21:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853246": [
        {
            "ioc_value": "no3htbxq.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 01:11:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853240": [
        {
            "ioc_value": "y4h1lqu6.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 00:53:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853239": [
        {
            "ioc_value": "uoxqk.kampongflowers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 00:30:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853237": [
        {
            "ioc_value": "mcdejwixr.fg777depo5k.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-18 00:22:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853234": [
        {
            "ioc_value": "fiwvrsju.yekbetyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 23:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853233": [
        {
            "ioc_value": "xwuuj.juragansolar.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 23:33:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853232": [
        {
            "ioc_value": "https://crf.masterklass.net",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:29:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853231": [
        {
            "ioc_value": "juragansolar.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 23:28:41",
            "last_seen_utc": "2026-07-17 23:29:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853230": [
        {
            "ioc_value": "xwjoalrqt.evohempstore.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 23:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853228": [
        {
            "ioc_value": "yqlmrtdrf.event-scatter.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 23:19:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853219": [
        {
            "ioc_value": "https://xverikstat.us/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:14:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853218": [
        {
            "ioc_value": "https://xverikstat.us/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:14:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853217": [
        {
            "ioc_value": "https://xverikstat.us/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:14:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853216": [
        {
            "ioc_value": "https://xverikstat.us/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853215": [
        {
            "ioc_value": "xverikstat.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:13:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853214": [
        {
            "ioc_value": "https://usalaborforhire.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853213": [
        {
            "ioc_value": "https://usalaborforhire.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:11:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853212": [
        {
            "ioc_value": "https://usalaborforhire.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:11:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853211": [
        {
            "ioc_value": "https://usalaborforhire.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:11:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853210": [
        {
            "ioc_value": "usalaborforhire.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:10:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853209": [
        {
            "ioc_value": "https://stroinnetsata.biz/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:09:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853208": [
        {
            "ioc_value": "https://stroinnetsata.biz/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:09:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853207": [
        {
            "ioc_value": "https://stroinnetsata.biz/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:08:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853206": [
        {
            "ioc_value": "https://stroinnetsata.biz/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:08:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853205": [
        {
            "ioc_value": "stroinnetsata.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:08:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853204": [
        {
            "ioc_value": "https://stek-moldova.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853203": [
        {
            "ioc_value": "https://stek-moldova.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:06:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853202": [
        {
            "ioc_value": "https://stek-moldova.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:06:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853201": [
        {
            "ioc_value": "https://stek-moldova.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:05:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853200": [
        {
            "ioc_value": "stek-moldova.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:05:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853198": [
        {
            "ioc_value": "https://sosstat.beer/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:04:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853197": [
        {
            "ioc_value": "https://sosstat.beer/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853196": [
        {
            "ioc_value": "https://sosstat.beer/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:04:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853195": [
        {
            "ioc_value": "https://sosstat.beer/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:03:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853194": [
        {
            "ioc_value": "sosstat.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:03:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853193": [
        {
            "ioc_value": "https://masterklass.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853192": [
        {
            "ioc_value": "https://masterklass.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:01:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853191": [
        {
            "ioc_value": "https://masterklass.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:01:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853190": [
        {
            "ioc_value": "https://masterklass.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:01:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853189": [
        {
            "ioc_value": "masterklass.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 23:00:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853188": [
        {
            "ioc_value": "https://sorrystartstat1.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:59:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853187": [
        {
            "ioc_value": "https://sorrystartstat1.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:58:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853186": [
        {
            "ioc_value": "https://sorrystartstat1.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:58:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853185": [
        {
            "ioc_value": "https://sorrystartstat1.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:57:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853183": [
        {
            "ioc_value": "sorrystartstat1.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:57:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853182": [
        {
            "ioc_value": "https://snowwhitefox.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:55:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853181": [
        {
            "ioc_value": "https://snowwhitefox.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:55:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853178": [
        {
            "ioc_value": "https://snowwhitefox.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:54:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853177": [
        {
            "ioc_value": "https://snowwhitefox.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:54:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853176": [
        {
            "ioc_value": "snowwhitefox.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:54:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853175": [
        {
            "ioc_value": "https://smarthouseapp.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853174": [
        {
            "ioc_value": "https://smarthouseapp.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:53:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853173": [
        {
            "ioc_value": "https://smarthouseapp.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:52:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853172": [
        {
            "ioc_value": "https://smarthouseapp.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:52:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853171": [
        {
            "ioc_value": "smarthouseapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:52:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853168": [
        {
            "ioc_value": "7073018596b174f584299d5152cf90f89a1f4e3bf072b778fc3342fda5c82f4f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853169": [
        {
            "ioc_value": "915456ad1037056f7b542db11a97011da74d710f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853170": [
        {
            "ioc_value": "c45f291fda8740a843202a77180a15a1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853166": [
        {
            "ioc_value": "f6d6bf43990bde77af73d24f237c86889adacbfd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853167": [
        {
            "ioc_value": "240861bb6ee7723f0a7449ec501c466b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853163": [
        {
            "ioc_value": "3ec44d141f4d08ada015759eb2c5c79d76b53c54",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853164": [
        {
            "ioc_value": "cf4866e9f6c60a4b253de4bb85f4da90",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853165": [
        {
            "ioc_value": "8ca5069041a3de3536f0be3b8f1b9044a0dfffd0295d7495cbd57d6a312af0b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853159": [
        {
            "ioc_value": "06ba715b44892af143c4336c189c28b5d95f446d3d07ca7ce7a6ab2a0601168b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853160": [
        {
            "ioc_value": "904eed155444a8ba021d2f6b1c1bb6c89cb739e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853161": [
        {
            "ioc_value": "0a9a59c9e53e6d9f218fc6c307016b44",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853162": [
        {
            "ioc_value": "2fdcac512cef51c5b0d8a4fb23c278b973d20978aab5d463abbe131dd04879a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853155": [
        {
            "ioc_value": "7514a13877ee29b842859862663a03ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853156": [
        {
            "ioc_value": "c13be88a14d2c50b4e5ebca6b490fd6b8a6982555051c58b1d45fef6011671ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853157": [
        {
            "ioc_value": "3dd7b3bbb0dcfe89e1a3ff1c1b0abcd5371b706e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853158": [
        {
            "ioc_value": "057739a12fa0d25a1017e5f7a8538140",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:51:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853151": [
        {
            "ioc_value": "ee2a0f806eea5db5f8ed4e22f52d1b2492e62a6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853152": [
        {
            "ioc_value": "752b88ff4f0f5ea39ac1912c924f2f4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853153": [
        {
            "ioc_value": "8d5025b2ab7917dc3283738d91634a741d1bc3e03196d2855a1fd81fd9d80381",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:50:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853154": [
        {
            "ioc_value": "7df07eb1b7ba163c1a97b2120f15fdfb4bbc0cd6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 22:50:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853148": [
        {
            "ioc_value": "1963f2cceff182e761507020f6cd92e54cb5194d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853149": [
        {
            "ioc_value": "b0a87d0fcdd49c072364c4378dfc9f8b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853150": [
        {
            "ioc_value": "431e527d800caf5391917f79b07bb0650501ded29678edca8627007f629c1bad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853147": [
        {
            "ioc_value": "https://siteaimecool.org/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853145": [
        {
            "ioc_value": "1da954be17c19b2e61d605097f1c7b29",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853146": [
        {
            "ioc_value": "3b6603d9bd648152700076a8e00a0e23218fd642ce63b5b47891f9db9ec0172b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853143": [
        {
            "ioc_value": "48fca9f4433f79d8595fb75fe0940af8177b91b51068c132655472551b91af5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853144": [
        {
            "ioc_value": "e7aae02abc7dc06ef69efeb1e98654dd69efd500",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853142": [
        {
            "ioc_value": "993e330b2c80db36a50514c5fd50466c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853139": [
        {
            "ioc_value": "81961b2997cdf859ab8b96c3dd0afb07",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 22:50:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853140": [
        {
            "ioc_value": "4caa645feeb04cad5af75a3c5024076e99560678584c84ae07950c9c106d2af0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853141": [
        {
            "ioc_value": "55e3f9a3ae32da95511ccff3c3b2fcdde3b87c7a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853136": [
        {
            "ioc_value": "53b75c21bfc49c21d1e3998cf2acd14a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853137": [
        {
            "ioc_value": "938a9136aa1f128c6462899bac6ab7a6a7cfd3a1bcc79fb38bfb207032d8515b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 22:50:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853138": [
        {
            "ioc_value": "d9572b10599730d1c7b68f510258037f70c0cd36",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 22:50:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853134": [
        {
            "ioc_value": "1574e58fb3f049dd10d6923ca6b36bc440160cfdf57407328191ada99d3e1a89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853135": [
        {
            "ioc_value": "189661f059be5bc53c2f0a3af5d8bec1540adff3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-17 22:50:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1853133": [
        {
            "ioc_value": "https://siteaimecool.org/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:50:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853132": [
        {
            "ioc_value": "https://siteaimecool.org/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853131": [
        {
            "ioc_value": "https://siteaimecool.org/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:49:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853130": [
        {
            "ioc_value": "siteaimecool.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:49:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853129": [
        {
            "ioc_value": "https://ryazan.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:48:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853128": [
        {
            "ioc_value": "https://ryazan.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:48:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853127": [
        {
            "ioc_value": "https://ryazan.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:47:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853126": [
        {
            "ioc_value": "https://ryazan.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:47:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853125": [
        {
            "ioc_value": "ryazan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853124": [
        {
            "ioc_value": "https://rhumbshop.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:46:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853123": [
        {
            "ioc_value": "https://rhumbshop.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:45:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853122": [
        {
            "ioc_value": "https://rhumbshop.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:45:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853121": [
        {
            "ioc_value": "https://rhumbshop.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853120": [
        {
            "ioc_value": "rhumbshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853119": [
        {
            "ioc_value": "https://profidiam.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:43:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853116": [
        {
            "ioc_value": "https://profidiam.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:43:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853115": [
        {
            "ioc_value": "https://profidiam.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853114": [
        {
            "ioc_value": "https://profidiam.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:42:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853113": [
        {
            "ioc_value": "profidiam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:41:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853112": [
        {
            "ioc_value": "https://ostekstatmen.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:40:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853097": [
        {
            "ioc_value": "https://ostekstatmen.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:40:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853096": [
        {
            "ioc_value": "https://ostekstatmen.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:39:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853095": [
        {
            "ioc_value": "https://ostekstatmen.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:39:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853094": [
        {
            "ioc_value": "ostekstatmen.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:39:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853093": [
        {
            "ioc_value": "https://optimum-online.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:38:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853092": [
        {
            "ioc_value": "https://optimum-online.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:37:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853091": [
        {
            "ioc_value": "https://optimum-online.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:37:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853090": [
        {
            "ioc_value": "https://optimum-online.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:36:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853089": [
        {
            "ioc_value": "optimum-online.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:36:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853088": [
        {
            "ioc_value": "https://ololo-ufo.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:34:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853087": [
        {
            "ioc_value": "https://ololo-ufo.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:34:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853086": [
        {
            "ioc_value": "https://ololo-ufo.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:34:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853085": [
        {
            "ioc_value": "https://ololo-ufo.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:33:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853084": [
        {
            "ioc_value": "ololo-ufo.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853083": [
        {
            "ioc_value": "gxcgc.jobsindeep.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 22:32:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853082": [
        {
            "ioc_value": "https://okliimnwq.co/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:32:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853081": [
        {
            "ioc_value": "https://okliimnwq.co/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:32:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853080": [
        {
            "ioc_value": "https://okliimnwq.co/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:31:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853079": [
        {
            "ioc_value": "https://okliimnwq.co/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:31:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853078": [
        {
            "ioc_value": "oac-okliimnwq.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:30:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853077": [
        {
            "ioc_value": "https://oac-live.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:30:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853076": [
        {
            "ioc_value": "https://oac-live.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:29:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853075": [
        {
            "ioc_value": "https://oac-live.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:28:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853074": [
        {
            "ioc_value": "https://oac-live.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:28:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853073": [
        {
            "ioc_value": "jobsindeep.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 22:28:07",
            "last_seen_utc": "2026-07-17 22:28:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1853072": [
        {
            "ioc_value": "oac-live.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:27:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853071": [
        {
            "ioc_value": "https://morsenstat.beer/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:26:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853070": [
        {
            "ioc_value": "https://morsenstat.beer/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:26:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853069": [
        {
            "ioc_value": "https://morsenstat.beer/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:26:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853068": [
        {
            "ioc_value": "https://morsenstat.beer/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:25:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853067": [
        {
            "ioc_value": "morsenstat.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:25:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853066": [
        {
            "ioc_value": "https://morganstat.sbs/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:24:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853065": [
        {
            "ioc_value": "https://morganstat.sbs/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853064": [
        {
            "ioc_value": "https://morganstat.sbs/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:23:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853063": [
        {
            "ioc_value": "https://morganstat.sbs/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:23:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853062": [
        {
            "ioc_value": "morganstat.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:22:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853061": [
        {
            "ioc_value": "https://moonstatemecool.biz/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:22:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853060": [
        {
            "ioc_value": "https://moonstatemecool.biz/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:21:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853059": [
        {
            "ioc_value": "https://moonstatemecool.biz/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:21:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853058": [
        {
            "ioc_value": "https://moonstatemecool.biz/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:20:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853057": [
        {
            "ioc_value": "moonstatemecool.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:20:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853056": [
        {
            "ioc_value": "https://moonglobaliteemecool.mom/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:19:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853055": [
        {
            "ioc_value": "https://moonglobaliteemecool.mom/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:19:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853054": [
        {
            "ioc_value": "https://moonglobaliteemecool.mom/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:18:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853053": [
        {
            "ioc_value": "https://moonglobaliteemecool.mom/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:18:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853052": [
        {
            "ioc_value": "wblfdanab.ethanhartyblacksmith.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 22:18:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1853051": [
        {
            "ioc_value": "moonglobaliteemecool.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:18:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853049": [
        {
            "ioc_value": "https://monsterimac.lat/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:17:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853048": [
        {
            "ioc_value": "https://monsterimac.lat/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:16:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853047": [
        {
            "ioc_value": "https://monsterimac.lat/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:16:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853046": [
        {
            "ioc_value": "https://monsterimac.lat/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:15:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853045": [
        {
            "ioc_value": "monsterimac.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:15:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853044": [
        {
            "ioc_value": "https://molterstat.xyz/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:14:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853043": [
        {
            "ioc_value": "https://molterstat.xyz/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:14:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853042": [
        {
            "ioc_value": "https://molterstat.xyz/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853041": [
        {
            "ioc_value": "https://molterstat.xyz/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853040": [
        {
            "ioc_value": "molterstat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853039": [
        {
            "ioc_value": "https://mogilevskaya.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:11:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853038": [
        {
            "ioc_value": "https://mogilevskaya.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:11:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853037": [
        {
            "ioc_value": "https://mogilevskaya.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:09:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853036": [
        {
            "ioc_value": "https://mogilevskaya.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:08:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853035": [
        {
            "ioc_value": "mogilevskaya.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853034": [
        {
            "ioc_value": "https://milkglobalstat.click/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853033": [
        {
            "ioc_value": "https://milkglobalstat.click/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:06:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853032": [
        {
            "ioc_value": "https://milkglobalstat.click/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:06:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853031": [
        {
            "ioc_value": "https://milkglobalstat.click/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:05:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853030": [
        {
            "ioc_value": "milkglobalstat.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:05:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853029": [
        {
            "ioc_value": "https://milkcoolbalstat.help/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:04:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853028": [
        {
            "ioc_value": "https://milkcoolbalstat.help/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853027": [
        {
            "ioc_value": "https://milkcoolbalstat.help/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:04:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853026": [
        {
            "ioc_value": "https://milkcoolbalstat.help/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:03:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853025": [
        {
            "ioc_value": "milkcoolbalstat.help",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:03:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853024": [
        {
            "ioc_value": "https://merkureenv.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:02:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853023": [
        {
            "ioc_value": "https://merkureenv.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:01:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853022": [
        {
            "ioc_value": "https://merkureenv.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:01:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853021": [
        {
            "ioc_value": "https://merkureenv.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:01:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853020": [
        {
            "ioc_value": "merkureenv.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:00:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853019": [
        {
            "ioc_value": "https://maxstatesus.org/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 22:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853018": [
        {
            "ioc_value": "https://maxstatesus.org/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:59:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853017": [
        {
            "ioc_value": "https://maxstatesus.org/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:59:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853016": [
        {
            "ioc_value": "https://maxstatesus.org/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:59:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853015": [
        {
            "ioc_value": "maxstatesus.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:58:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853014": [
        {
            "ioc_value": "https://massstat.co/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:57:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853013": [
        {
            "ioc_value": "https://massstat.co/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:56:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853012": [
        {
            "ioc_value": "https://massstat.co/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:56:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853011": [
        {
            "ioc_value": "https://massstat.co/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:56:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853010": [
        {
            "ioc_value": "massstat.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:55:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853009": [
        {
            "ioc_value": "https://mariposa-wedding.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:54:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853008": [
        {
            "ioc_value": "https://mariposa-wedding.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:54:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853007": [
        {
            "ioc_value": "https://mariposa-wedding.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:53:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853006": [
        {
            "ioc_value": "https://mariposa-wedding.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:53:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853005": [
        {
            "ioc_value": "mariposa-wedding.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:52:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853004": [
        {
            "ioc_value": "https://massstat.biz/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853003": [
        {
            "ioc_value": "https://massstat.biz/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:51:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853002": [
        {
            "ioc_value": "https://massstat.biz/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:51:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853001": [
        {
            "ioc_value": "https://massstat.biz/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1853000": [
        {
            "ioc_value": "9t8bbts2.winston.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 21:50:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852999": [
        {
            "ioc_value": "massstat.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:50:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852998": [
        {
            "ioc_value": "winston.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 21:50:06",
            "last_seen_utc": "2026-07-18 23:23:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852997": [
        {
            "ioc_value": "https://malenko.net/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:49:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852996": [
        {
            "ioc_value": "https://malenko.net/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:48:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852995": [
        {
            "ioc_value": "https://malenko.net/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:48:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852994": [
        {
            "ioc_value": "https://malenko.net/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:48:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852993": [
        {
            "ioc_value": "malenko.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:47:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852992": [
        {
            "ioc_value": "https://kamyanetski.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852991": [
        {
            "ioc_value": "45.194.17.39:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-17 21:46:50",
            "last_seen_utc": "2026-08-30 08:47:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852990": [
        {
            "ioc_value": "https://kamyanetski.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:46:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852989": [
        {
            "ioc_value": "https://kamyanetski.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:46:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852988": [
        {
            "ioc_value": "https://kamyanetski.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:46:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852987": [
        {
            "ioc_value": "kamyanetski.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:45:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852986": [
        {
            "ioc_value": "https://jobworkny.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852985": [
        {
            "ioc_value": "https://jobworkny.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:44:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852984": [
        {
            "ioc_value": "https://jobworkny.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:44:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852983": [
        {
            "ioc_value": "https://jobworkny.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:43:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852982": [
        {
            "ioc_value": "jobworkny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:43:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852981": [
        {
            "ioc_value": "https://intellerium.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:41:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852980": [
        {
            "ioc_value": "https://intellerium.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:41:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852979": [
        {
            "ioc_value": "https://intellerium.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:41:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852978": [
        {
            "ioc_value": "https://intellerium.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:40:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852977": [
        {
            "ioc_value": "intellerium.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:40:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852976": [
        {
            "ioc_value": "https://infoworkerone.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:38:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852975": [
        {
            "ioc_value": "https://infoworkerone.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:38:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852974": [
        {
            "ioc_value": "https://infoworkerone.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:37:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852973": [
        {
            "ioc_value": "https://infoworkerone.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:37:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852972": [
        {
            "ioc_value": "infoworkerone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:37:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852971": [
        {
            "ioc_value": "https://implantcentr.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:36:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852970": [
        {
            "ioc_value": "https://implantcentr.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:36:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852969": [
        {
            "ioc_value": "https://implantcentr.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:35:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852968": [
        {
            "ioc_value": "https://implantcentr.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:35:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852967": [
        {
            "ioc_value": "implantcentr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:34:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852966": [
        {
            "ioc_value": "https://ilovetobe.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:34:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852965": [
        {
            "ioc_value": "https://ilovetobe.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:32:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852964": [
        {
            "ioc_value": "https://ilovetobe.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:32:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852963": [
        {
            "ioc_value": "https://ilovetobe.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:31:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852962": [
        {
            "ioc_value": "ilovetobe.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:31:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852961": [
        {
            "ioc_value": "https://humo-liber.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852960": [
        {
            "ioc_value": "lvdit.jenderalkito.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 21:29:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852959": [
        {
            "ioc_value": "https://humo-liber.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:29:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852958": [
        {
            "ioc_value": "https://humo-liber.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:29:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852957": [
        {
            "ioc_value": "https://humo-liber.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:28:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852956": [
        {
            "ioc_value": "humo-liber.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:28:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852955": [
        {
            "ioc_value": "jenderalkito.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 21:27:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852954": [
        {
            "ioc_value": "https://hi-tech-news.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:27:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852953": [
        {
            "ioc_value": "https://hi-tech-news.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:27:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852952": [
        {
            "ioc_value": "https://hi-tech-news.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:26:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852951": [
        {
            "ioc_value": "https://hi-tech-news.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:26:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852950": [
        {
            "ioc_value": "hi-tech-news.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:25:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852949": [
        {
            "ioc_value": "https://harrenshipping.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852948": [
        {
            "ioc_value": "https://harrenshipping.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:24:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852947": [
        {
            "ioc_value": "https://harrenshipping.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:24:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852946": [
        {
            "ioc_value": "https://harrenshipping.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:23:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852945": [
        {
            "ioc_value": "harrenshipping.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:23:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852944": [
        {
            "ioc_value": "https://grand-tandyr.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:21:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852943": [
        {
            "ioc_value": "https://grand-tandyr.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:21:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852942": [
        {
            "ioc_value": "https://grand-tandyr.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:21:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852941": [
        {
            "ioc_value": "https://grand-tandyr.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:20:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852940": [
        {
            "ioc_value": "grand-tandyr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852939": [
        {
            "ioc_value": "https://globalfiats.click/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:19:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852938": [
        {
            "ioc_value": "zafnuzmgt.emergingtalentllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 21:18:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852937": [
        {
            "ioc_value": "https://globalfiats.click/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:18:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852936": [
        {
            "ioc_value": "https://globalfiats.click/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:18:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852935": [
        {
            "ioc_value": "https://globalfiats.click/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:18:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852934": [
        {
            "ioc_value": "globalfiats.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:17:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852933": [
        {
            "ioc_value": "emergingtalentllc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 21:17:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852932": [
        {
            "ioc_value": "https://esotericpro.com/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:17:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852931": [
        {
            "ioc_value": "https://esotericpro.com/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:16:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852930": [
        {
            "ioc_value": "https://esotericpro.com/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:16:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852929": [
        {
            "ioc_value": "https://esotericpro.com/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:16:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852928": [
        {
            "ioc_value": "esotericpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:15:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852927": [
        {
            "ioc_value": "https://destinkol.lol/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:14:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852926": [
        {
            "ioc_value": "https://destinkol.lol/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:14:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852925": [
        {
            "ioc_value": "https://destinkol.lol/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:14:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852924": [
        {
            "ioc_value": "https://destinkol.lol/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852923": [
        {
            "ioc_value": "destinkol.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:13:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852922": [
        {
            "ioc_value": "https://cookischase.us/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:11:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852921": [
        {
            "ioc_value": "https://cookischase.us/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852920": [
        {
            "ioc_value": "https://cookischase.us/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:11:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852919": [
        {
            "ioc_value": "https://cookischase.us/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:10:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852918": [
        {
            "ioc_value": "cookischase.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:10:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852917": [
        {
            "ioc_value": "https://cookcoolbaistat.lol/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:08:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852916": [
        {
            "ioc_value": "https://cookcoolbaistat.lol/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:07:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852915": [
        {
            "ioc_value": "https://cookcoolbaistat.lol/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:07:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852914": [
        {
            "ioc_value": "https://cookcoolbaistat.lol/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:06:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852913": [
        {
            "ioc_value": "cookcoolbaistat.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:06:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852911": [
        {
            "ioc_value": "https://boodystat.click/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852912": [
        {
            "ioc_value": "20.2.87.168:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:05:07",
            "last_seen_utc": "2026-09-01 02:44:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852910": [
        {
            "ioc_value": "https://boodystat.click/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:04:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852909": [
        {
            "ioc_value": "https://boodystat.click/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:02:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852908": [
        {
            "ioc_value": "https://boodystat.click/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:01:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852907": [
        {
            "ioc_value": "boodystat.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 21:01:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852906": [
        {
            "ioc_value": "https://basebaistat.my/dl/file/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 20:59:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852905": [
        {
            "ioc_value": "https://basebaistat.my/ccheck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 20:58:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852904": [
        {
            "ioc_value": "https://basebaistat.my/cload",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 20:57:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852903": [
        {
            "ioc_value": "https://basebaistat.my/tracker.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 20:56:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852902": [
        {
            "ioc_value": "basebaistat.my",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 20:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,JokerStat,TDS",
            "anonymous": 0,
            "reporter": "HuntYethHounds"
        }
    ],
    "1852901": [
        {
            "ioc_value": "pgfiv.jbgroup21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 20:27:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852900": [
        {
            "ioc_value": "maytwilcz.easternartmuseum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 20:19:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852898": [
        {
            "ioc_value": "6mhijma6.tampabayspin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 20:04:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852897": [
        {
            "ioc_value": "acslkqpil.easternartmuseum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 19:59:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852896": [
        {
            "ioc_value": "easternartmuseum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 19:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852895": [
        {
            "ioc_value": "nuqx7vo8.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 19:52:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852894": [
        {
            "ioc_value": "5uat7o6m.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 19:50:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852892": [
        {
            "ioc_value": "62.109.10.128:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 19:45:58",
            "last_seen_utc": "2026-08-17 08:47:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852890": [
        {
            "ioc_value": "46.225.160.243:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-17 19:45:49",
            "last_seen_utc": "2026-08-19 08:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852891": [
        {
            "ioc_value": "46.246.82.7:2003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-17 19:45:49",
            "last_seen_utc": "2026-08-19 18:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852889": [
        {
            "ioc_value": "221.212.219.56:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-17 19:45:23",
            "last_seen_utc": "2026-08-16 18:45:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852888": [
        {
            "ioc_value": "207.180.29.217:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 19:44:34",
            "last_seen_utc": "2026-08-29 08:45:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852887": [
        {
            "ioc_value": "198.23.185.95:50",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 19:44:27",
            "last_seen_utc": "2026-08-17 08:45:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852886": [
        {
            "ioc_value": "181.235.4.60:5010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 19:44:05",
            "last_seen_utc": "2026-08-25 08:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852885": [
        {
            "ioc_value": "178.83.226.199:9091",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-17 19:44:03",
            "last_seen_utc": "2026-08-19 08:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852884": [
        {
            "ioc_value": "157.20.182.17:1665",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 19:43:48",
            "last_seen_utc": "2026-08-16 18:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852883": [
        {
            "ioc_value": "15.235.149.212:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-17 19:43:41",
            "last_seen_utc": "2026-09-01 02:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852881": [
        {
            "ioc_value": "147.93.191.75:50",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 19:43:39",
            "last_seen_utc": "2026-08-21 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852882": [
        {
            "ioc_value": "149.104.110.202:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 19:43:39",
            "last_seen_utc": "2026-08-20 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852880": [
        {
            "ioc_value": "104.249.10.121:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-17 19:43:17",
            "last_seen_utc": "2026-08-17 20:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852879": [
        {
            "ioc_value": "104.168.0.147:1989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-17 19:43:15",
            "last_seen_utc": "2026-08-17 08:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852878": [
        {
            "ioc_value": "eqxun.jayswraps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 19:26:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852875": [
        {
            "ioc_value": "kmtdw.jayswraps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 18:58:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852874": [
        {
            "ioc_value": "jayswraps.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 18:56:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852873": [
        {
            "ioc_value": "rxaveihpg.drdavidzweiback.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 18:56:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852872": [
        {
            "ioc_value": "175.43.223.223:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 18:05:06",
            "last_seen_utc": "2026-08-17 20:44:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852871": [
        {
            "ioc_value": "vddrs.inkbossstudios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 17:58:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852870": [
        {
            "ioc_value": "eabcewlhe.diloro.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 17:56:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852869": [
        {
            "ioc_value": "inkbossstudios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 17:56:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852868": [
        {
            "ioc_value": "diloro.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 17:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852867": [
        {
            "ioc_value": "2lob5o1r.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 17:42:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852864": [
        {
            "ioc_value": "lmkxs.imagederm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 16:56:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852863": [
        {
            "ioc_value": "imagederm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 16:55:32",
            "last_seen_utc": "2026-07-18 06:23:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852862": [
        {
            "ioc_value": "beqbfjhnf.deepspaceparker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 16:54:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852861": [
        {
            "ioc_value": "deepspaceparker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 16:52:52",
            "last_seen_utc": "2026-07-18 06:57:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852858": [
        {
            "ioc_value": "http://80.76.49.77",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-17 16:15:37",
            "last_seen_utc": "2026-08-27 07:29:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7ef71165b0dd233fd0f5642d2a4e1e36fddc5656a209236d80460d50417fae76/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852856": [
        {
            "ioc_value": "tiwdt.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 15:57:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852855": [
        {
            "ioc_value": "qzfhwillb.crazyhotchicken.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 15:54:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852854": [
        {
            "ioc_value": "crazyhotchicken.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 15:52:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852853": [
        {
            "ioc_value": "47.106.110.47:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-17 15:47:00",
            "last_seen_utc": "2026-07-17 18:47:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852852": [
        {
            "ioc_value": "sebw9xod.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 15:44:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852842": [
        {
            "ioc_value": "3u06kg6l.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 15:00:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852841": [
        {
            "ioc_value": "cgavi.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 14:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852840": [
        {
            "ioc_value": "prl0ivfr.hazaratbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 14:54:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852839": [
        {
            "ioc_value": "cachmkcqj.venus90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 14:52:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852832": [
        {
            "ioc_value": "dtsmmaphe.tampabayspin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 13:55:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852831": [
        {
            "ioc_value": "caudzzwo.coop-fresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 13:55:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852830": [
        {
            "ioc_value": "mlmaatvd.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 13:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852819": [
        {
            "ioc_value": "infociganka.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 13:02:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852807": [
        {
            "ioc_value": "bacon-rumors.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-17 13:01:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852818": [
        {
            "ioc_value": "djqiyxyx.calirayalake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 12:54:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852817": [
        {
            "ioc_value": "gkpaspaky.taktikkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 12:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852816": [
        {
            "ioc_value": "47.122.120.5:14299",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-17 12:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852815": [
        {
            "ioc_value": "http://smaeak.top:5789",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-17 12:46:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13e04612e4ef8382114ad8a314130d99e691c6b13a1872e0b000c586ba778d06/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852806": [
        {
            "ioc_value": "gdtuyoor.gamehazarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 11:55:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852805": [
        {
            "ioc_value": "xfakmoduw.lion1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 11:54:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852804": [
        {
            "ioc_value": "8kq7qw7a.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 11:43:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852789": [
        {
            "ioc_value": "records.perfectlinestarter.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-17 11:33:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate,inject",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852803": [
        {
            "ioc_value": "159.89.132.240:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-17 11:33:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1852802": [
        {
            "ioc_value": "https://okx.kliksm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 11:10:08",
            "last_seen_utc": "2026-08-27 17:27:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1852801": [
        {
            "ioc_value": "okx.kliksm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-17 11:10:07",
            "last_seen_utc": "2026-08-27 17:27:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1852795": [
        {
            "ioc_value": "http://digiace.top:4190",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-17 11:05:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/91cd2a441412b79d75d75f708c51147533c5dddafaff0c065cf0ee626946aa90/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852793": [
        {
            "ioc_value": "wtkxprzu.funxbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 10:57:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852792": [
        {
            "ioc_value": "earthweight.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-17 10:53:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852791": [
        {
            "ioc_value": "hzdmfcatc.sky7bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 10:50:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852790": [
        {
            "ioc_value": "185.149.24.6:2405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-17 10:45:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852783": [
        {
            "ioc_value": "vzsagfrw.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 09:52:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852782": [
        {
            "ioc_value": "dvc734k1.hazaratbet.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 09:52:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852781": [
        {
            "ioc_value": "3x6v81kc.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 09:51:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852780": [
        {
            "ioc_value": "lhozmsokb.nextbahis.coupons",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 09:49:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852779": [
        {
            "ioc_value": "eogwp3fe.site-shartbandi-pasor.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 09:41:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852769": [
        {
            "ioc_value": "http://144.31.57.94/350be244a2f97a3a4ca8.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-17 09:14:30",
            "last_seen_utc": "2026-07-19 20:08:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "build1,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1852770": [
        {
            "ioc_value": "http://41.216.189.236/nz.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 09:14:29",
            "last_seen_utc": "2026-07-17 09:00:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1852768": [
        {
            "ioc_value": "pygnidup.gem90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 08:52:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852767": [
        {
            "ioc_value": "dsdvsvqgy.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 08:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852766": [
        {
            "ioc_value": "dlylkjaji.jetboro.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 08:48:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852759": [
        {
            "ioc_value": "185.236.203.99:58798",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-17 07:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852758": [
        {
            "ioc_value": "bgtnaqoc.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 07:52:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852757": [
        {
            "ioc_value": "football-attraction.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-17 07:52:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852756": [
        {
            "ioc_value": "aefauhqwk.irani-music.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 07:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852755": [
        {
            "ioc_value": "iodz0i3f.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 07:31:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852753": [
        {
            "ioc_value": "198.46.175.153:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-17 07:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852754": [
        {
            "ioc_value": "8.141.121.30:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-17 07:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852752": [
        {
            "ioc_value": "103.43.18.230:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-17 07:30:32",
            "last_seen_utc": "2026-07-21 04:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852751": [
        {
            "ioc_value": "arvujwijm.irani-music.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 07:05:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852746": [
        {
            "ioc_value": "itwynsuh.enfejartime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 06:51:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852744": [
        {
            "ioc_value": "drive-search-id84192.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-17 06:50:39",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852745": [
        {
            "ioc_value": "photo-check93123.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-17 06:50:39",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852743": [
        {
            "ioc_value": "mytrfnuif.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.needle_stealer",
            "malware_alias": null,
            "malware_printable": "NeedleStealer",
            "first_seen_utc": "2026-07-17 06:48:15",
            "last_seen_utc": "2026-08-19 18:19:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0fc86211a5e23f1ae72edd5612dc550f93138ce5c607c7a68517ca26cb7556a4/",
            "tags": "NeedleStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852579": [
        {
            "ioc_value": "solucionesfiscales.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-17 06:36:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1852580": [
        {
            "ioc_value": "colombiajudiciales.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-17 06:36:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1852582": [
        {
            "ioc_value": "solicitudesinternas.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-17 06:36:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1852581": [
        {
            "ioc_value": "comunicacioones.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-17 06:36:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1852584": [
        {
            "ioc_value": "ccleanerupdate.mysynology.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-17 06:36:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1852652": [
        {
            "ioc_value": "https://chorg.xyz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 06:36:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chorg.xyz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852653": [
        {
            "ioc_value": "https://robinhrood.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/robinhrood.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852656": [
        {
            "ioc_value": "https://strastergy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/strastergy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852667": [
        {
            "ioc_value": "https://content-website-analytics.com/script.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-07-17 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "inject-delivery,SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852671": [
        {
            "ioc_value": "rebel-pause.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-17 06:36:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852700": [
        {
            "ioc_value": "168.245.203.140:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-17 06:36:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1852701": [
        {
            "ioc_value": "168.245.203.179:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-17 06:36:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1852714": [
        {
            "ioc_value": "https://stogagirlssoccer.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-17 06:36:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stogagirlssoccer.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852737": [
        {
            "ioc_value": "scjzlqeyk.hazzarat.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 06:03:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852736": [
        {
            "ioc_value": "suwqmlyd.efbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 05:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852735": [
        {
            "ioc_value": "6j7gyyz9.barkerautoms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 05:30:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852734": [
        {
            "ioc_value": "wexltdqtf.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 05:07:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852730": [
        {
            "ioc_value": "los16zn2.celebritiesadda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 04:51:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852729": [
        {
            "ioc_value": "dy6t0cul.hazarat.now",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 04:51:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852728": [
        {
            "ioc_value": "ggitkzzn.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 04:49:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852727": [
        {
            "ioc_value": "https://t.me/still_stellc",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-17 04:05:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5ef1aa40084a122011be62539f8d67aebcf7f9a0b1a31e6a057cbd1726a2b575/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852722": [
        {
            "ioc_value": "nruyvebwd.taktikkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 04:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852721": [
        {
            "ioc_value": "http://89.110.104.237/46893b462dca7432.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-17 03:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852720": [
        {
            "ioc_value": "ovbeoktk.coop-fresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 03:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852719": [
        {
            "ioc_value": "jorjsrfgd.lion1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 03:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852718": [
        {
            "ioc_value": "u5dn1e6x.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 03:14:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852713": [
        {
            "ioc_value": "chsxhscsh.tampabayspin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 02:35:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852712": [
        {
            "ioc_value": "vkvmygpg.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 02:27:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852708": [
        {
            "ioc_value": "rdusnlyzh.sky7bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 01:32:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852707": [
        {
            "ioc_value": "iqgxtjfc.hazzarat.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 01:27:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852706": [
        {
            "ioc_value": "a1h9t4pt.venus90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 01:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852692": [
        {
            "ioc_value": "dvzzqxef.gamehazarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-17 00:27:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852689": [
        {
            "ioc_value": "g3b4hjbg.calculadoracomisiones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 23:50:53",
            "last_seen_utc": "2026-07-21 23:33:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852688": [
        {
            "ioc_value": "wig5l9be.calirayalake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 23:50:46",
            "last_seen_utc": "2026-07-20 18:03:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852686": [
        {
            "ioc_value": "zdgfs8pf.cacharreriamilenio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 23:48:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852684": [
        {
            "ioc_value": "ahxpqhqnc.nextbahis.coupons",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 23:41:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852681": [
        {
            "ioc_value": "https://ffz.kliksm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-16 23:26:51",
            "last_seen_utc": "2026-07-17 00:26:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852682": [
        {
            "ioc_value": "ffz.kliksm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-16 23:26:51",
            "last_seen_utc": "2026-07-17 00:26:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852680": [
        {
            "ioc_value": "bkgtqeai.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 23:25:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852675": [
        {
            "ioc_value": "eprqnfyeb.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 22:41:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852672": [
        {
            "ioc_value": "zetkskre.funxbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 22:25:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852668": [
        {
            "ioc_value": "eqodjhwk.enfejartime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 22:03:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852666": [
        {
            "ioc_value": "drkynxdcu.gem90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 21:43:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852665": [
        {
            "ioc_value": "gardoone-shans-pool.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 21:36:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852664": [
        {
            "ioc_value": "9zzh7dnw.coop-fresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 21:11:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852663": [
        {
            "ioc_value": "coop-fresh.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 21:11:09",
            "last_seen_utc": "2026-08-12 20:32:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852662": [
        {
            "ioc_value": "edhabqne.taktikkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 21:09:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852655": [
        {
            "ioc_value": "tjcmwnljp.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 20:37:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852654": [
        {
            "ioc_value": "arpumupr.site-shartbandi-pasor.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 20:32:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852649": [
        {
            "ioc_value": "80.240.21.145:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 19:46:46",
            "last_seen_utc": "2026-08-15 18:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852648": [
        {
            "ioc_value": "64.177.120.228:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 19:46:37",
            "last_seen_utc": "2026-08-15 18:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852647": [
        {
            "ioc_value": "5.200.192.159:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-16 19:46:28",
            "last_seen_utc": "2026-08-15 18:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852646": [
        {
            "ioc_value": "45.32.90.122:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 19:46:15",
            "last_seen_utc": "2026-08-15 18:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852645": [
        {
            "ioc_value": "43.225.157.146:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 19:46:09",
            "last_seen_utc": "2026-09-01 02:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852644": [
        {
            "ioc_value": "217.60.241.10:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 19:45:50",
            "last_seen_utc": "2026-08-23 08:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852643": [
        {
            "ioc_value": "199.247.22.101:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 19:44:42",
            "last_seen_utc": "2026-08-15 18:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852642": [
        {
            "ioc_value": "194.32.142.225:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-16 19:44:38",
            "last_seen_utc": "2026-08-15 18:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852641": [
        {
            "ioc_value": "188.166.40.236:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 19:44:30",
            "last_seen_utc": "2026-09-01 02:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852640": [
        {
            "ioc_value": "154.19.229.197:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-16 19:43:49",
            "last_seen_utc": "2026-08-15 18:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852639": [
        {
            "ioc_value": "xyoyfdeyf.efbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 19:38:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852638": [
        {
            "ioc_value": "pzsbygor.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 19:31:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852636": [
        {
            "ioc_value": "974e94efa9515e53d57b16f538c37bb9a81a39ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-16 19:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852637": [
        {
            "ioc_value": "3166ae39b46472d2ee53a880eb8248e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-16 19:26:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852633": [
        {
            "ioc_value": "9b225681a471b474fde2cca61ff61498a7c7f9e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 19:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852634": [
        {
            "ioc_value": "2b46ed6e01f2baae933707d06704d14c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 19:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852635": [
        {
            "ioc_value": "0e8553970999b60c3a0a2637e0c282ca52b33d3e3ae88c99b6fa426bddc0075d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-16 19:26:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852631": [
        {
            "ioc_value": "c20a54cc45596e10f5eaf83a388128fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852632": [
        {
            "ioc_value": "e6d51d45edea7591b826b2d703c20a426fffa27a022c0156916ae9c35245bd07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 19:26:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852630": [
        {
            "ioc_value": "7fb8478bfa214c20a0d4ed26b293501d39c475bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852628": [
        {
            "ioc_value": "3a85be4f475378e774b44aafd20102cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852629": [
        {
            "ioc_value": "04bc0dbf904d347bfa0b064bb436650fad0583b550dbd9450c8d00f4cb5a3b1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852625": [
        {
            "ioc_value": "56ff460150b3ddeb5f1a01495ab44ee2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852626": [
        {
            "ioc_value": "551854f430801e8352f6562a48077cb04f399cdc505b42f0daaa3ad61d0e9f62",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852627": [
        {
            "ioc_value": "9f4426b75d6dca82fb22a1f5ebfef3205ef78bca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852623": [
        {
            "ioc_value": "eee7db42470f6c58dc1e696ee937e87bd72f0cabe8df566021a79880d288e370",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852624": [
        {
            "ioc_value": "b524c7848c2599868c1a39d57f4bfb261d194197",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 19:26:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852620": [
        {
            "ioc_value": "9a0cea11f75f63bbff8d0cea420787da972e78d8eb3baa14cd575f55bde369d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-16 19:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852621": [
        {
            "ioc_value": "fcb14e821e391defa8096c553066e5f555280de0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-16 19:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852622": [
        {
            "ioc_value": "23285f10bb9b3002a24d3dbf865f07e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-16 19:26:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852617": [
        {
            "ioc_value": "68c9207a1e4e703b897300fc6c21cf0472549b352d80a64259e21ed4fdfe63a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-16 19:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852618": [
        {
            "ioc_value": "54f998f02bb83c71a0746cd38ca8203ed9a90a3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-16 19:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852619": [
        {
            "ioc_value": "1f017ca7bcdae763c27483193017747a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-16 19:26:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1852616": [
        {
            "ioc_value": "r4iuquzx.cookeatrun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 19:14:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852615": [
        {
            "ioc_value": "cookeatrun.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 19:10:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852608": [
        {
            "ioc_value": "qfphjme9.irani-music.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 18:50:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852607": [
        {
            "ioc_value": "ic7s8w54.jetboro.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 18:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852606": [
        {
            "ioc_value": "ojwvrerrm.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 18:35:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852605": [
        {
            "ioc_value": "auucqutq.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 18:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852604": [
        {
            "ioc_value": "cra.kliksm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-16 18:27:03",
            "last_seen_utc": "2026-07-16 22:27:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852603": [
        {
            "ioc_value": "https://cra.kliksm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-16 18:27:02",
            "last_seen_utc": "2026-07-16 22:27:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852599": [
        {
            "ioc_value": "maxwhywtk.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 17:33:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852598": [
        {
            "ioc_value": "hdjdchgb.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 17:29:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852597": [
        {
            "ioc_value": "2rhdb98z.comfortinnlaytonutah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 17:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852596": [
        {
            "ioc_value": "comfortinnlaytonutah.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 17:10:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852590": [
        {
            "ioc_value": "http://43.198.235.91/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 16:40:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852589": [
        {
            "ioc_value": "154.91.74.87:774",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-16 16:35:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eee7db42470f6c58dc1e696ee937e87bd72f0cabe8df566021a79880d288e370/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852588": [
        {
            "ioc_value": "lvppjubyy.barkerautoms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 16:32:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852587": [
        {
            "ioc_value": "qkvgzbcv.nextbahis.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 16:30:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852583": [
        {
            "ioc_value": "zkgeaxbs.nextbahis.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 16:13:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852576": [
        {
            "ioc_value": "rmlgnuvje.barkerautoms.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 16:09:33",
            "last_seen_utc": "2026-07-16 16:32:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852565": [
        {
            "ioc_value": "uvzbxwuc.gamehazarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 15:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852564": [
        {
            "ioc_value": "694j5tdy.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 15:11:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852558": [
        {
            "ioc_value": "babelo.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-16 15:10:44",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1852563": [
        {
            "ioc_value": "vwwbeohrh.apolloconeyisland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 15:08:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852562": [
        {
            "ioc_value": "apolloconeyisland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 15:06:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852559": [
        {
            "ioc_value": "betyek.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 14:50:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852557": [
        {
            "ioc_value": "102.220.160.105:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-16 14:20:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a9ab393275643769579674ba78b285a6305e8e6795b1466a49f782cb83e8802b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852550": [
        {
            "ioc_value": "bhcivpxh.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 14:11:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852548": [
        {
            "ioc_value": "mseikoean.allboroughrealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 14:08:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852547": [
        {
            "ioc_value": "allboroughrealestate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 14:05:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852541": [
        {
            "ioc_value": "ir1xbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 14:03:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852540": [
        {
            "ioc_value": "74ock8ke.mahbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 13:49:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852539": [
        {
            "ioc_value": "x35w4q0s.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 13:49:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852536": [
        {
            "ioc_value": "fashionblush.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-16 13:44:08",
            "last_seen_utc": null,
            "confidence_level": 25,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "UnknownSilicon"
        }
    ],
    "1852537": [
        {
            "ioc_value": "https://leposeur.com/assets/js/bootstrap.bundle.min.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-16 13:44:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "UnknownSilicon"
        }
    ],
    "1852534": [
        {
            "ioc_value": "vwrgeckmh.adsbln5.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 13:07:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852528": [
        {
            "ioc_value": "dqgfzcgm.hazzarat.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 13:04:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852527": [
        {
            "ioc_value": "y4d9qpyb.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 12:52:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852473": [
        {
            "ioc_value": "https://www.lmstamper.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 12:07:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.lmstamper.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852504": [
        {
            "ioc_value": "https://nykaa.cloud/?__cf_chl_f_tk=s9E_M0.0thAbE5QhoOfMRMfP_WCBEvi9TNh8W2CdnPE-1783412894-1.0.1.1-pWen9T.IbakHP2Za25DiFM_FCjcXPWiFxTygAHHwcA4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 12:07:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nykaa.cloud",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852521": [
        {
            "ioc_value": "77.246.110.198:3051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 12:07:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ngate",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1852522": [
        {
            "ioc_value": "146.103.102.176:3051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 12:07:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ngate",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1852526": [
        {
            "ioc_value": "tturfmcfk.adsbln4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 12:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852520": [
        {
            "ioc_value": "bjoqbxxh.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 12:03:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852514": [
        {
            "ioc_value": "203.9.150.13:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-16 11:54:11",
            "last_seen_utc": "2026-07-21 18:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852515": [
        {
            "ioc_value": "107.173.85.194:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-16 11:54:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852511": [
        {
            "ioc_value": "adsbln4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 11:08:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852512": [
        {
            "ioc_value": "adsbln5.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 11:08:39",
            "last_seen_utc": "2026-07-16 13:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852510": [
        {
            "ioc_value": "buaoqtgen.adsbln3.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 11:06:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852506": [
        {
            "ioc_value": "adsbln3.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 11:04:42",
            "last_seen_utc": "2026-07-16 11:08:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852505": [
        {
            "ioc_value": "eastbwxa.funxbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 11:04:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852503": [
        {
            "ioc_value": "j112srgz.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 10:51:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852498": [
        {
            "ioc_value": "ftcfotjnd.adsbln2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 10:08:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852493": [
        {
            "ioc_value": "adsbln2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 10:03:34",
            "last_seen_utc": "2026-07-16 11:08:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852492": [
        {
            "ioc_value": "rzecbgjw.enfejartime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 10:02:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852491": [
        {
            "ioc_value": "203.91.75.89:5005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-16 09:47:53",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852490": [
        {
            "ioc_value": "85.120.217.235:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 09:46:58",
            "last_seen_utc": "2026-08-23 08:47:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852489": [
        {
            "ioc_value": "64.89.161.190:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:46:46",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852486": [
        {
            "ioc_value": "5.56.25.238:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:46:37",
            "last_seen_utc": "2026-08-15 18:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852487": [
        {
            "ioc_value": "5.56.25.238:6723",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:46:37",
            "last_seen_utc": "2026-08-15 08:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852488": [
        {
            "ioc_value": "5.56.25.238:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:46:37",
            "last_seen_utc": "2026-08-15 08:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852485": [
        {
            "ioc_value": "37.60.239.250:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:46:12",
            "last_seen_utc": "2026-08-22 08:46:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852484": [
        {
            "ioc_value": "217.60.241.10:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:45:57",
            "last_seen_utc": "2026-08-23 08:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852483": [
        {
            "ioc_value": "209.99.189.225:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 09:45:04",
            "last_seen_utc": "2026-09-01 02:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852482": [
        {
            "ioc_value": "207.180.250.181:20300",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:44:58",
            "last_seen_utc": "2026-08-15 08:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852480": [
        {
            "ioc_value": "204.44.93.75:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-16 09:44:56",
            "last_seen_utc": "2026-08-15 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852481": [
        {
            "ioc_value": "204.44.93.75:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-16 09:44:56",
            "last_seen_utc": "2026-08-15 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852479": [
        {
            "ioc_value": "192.142.37.30:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 09:44:40",
            "last_seen_utc": "2026-08-20 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852478": [
        {
            "ioc_value": "154.19.229.85:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-16 09:43:52",
            "last_seen_utc": "2026-08-15 18:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852477": [
        {
            "ioc_value": "147.124.219.0:8805",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:43:47",
            "last_seen_utc": "2026-08-16 18:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852475": [
        {
            "ioc_value": "109.123.230.199:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 09:43:25",
            "last_seen_utc": "2026-08-17 20:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852476": [
        {
            "ioc_value": "109.123.230.199:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 09:43:25",
            "last_seen_utc": "2026-08-15 18:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852474": [
        {
            "ioc_value": "104.168.134.25:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 09:43:19",
            "last_seen_utc": "2026-08-16 18:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852471": [
        {
            "ioc_value": "iygfxiad.efcasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 09:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852466": [
        {
            "ioc_value": "zwydarcig.adsbln1.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 09:03:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852465": [
        {
            "ioc_value": "cdmke7zf.sky7bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:51:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852464": [
        {
            "ioc_value": "x78boe03.lion1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852463": [
        {
            "ioc_value": "cfplyjmq.efcasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:49:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852462": [
        {
            "ioc_value": "jii17zh7.yekbetyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:47:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852461": [
        {
            "ioc_value": "isbbetvcj.adsbln1.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:47:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852460": [
        {
            "ioc_value": "mzzetrvqf.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:46:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852455": [
        {
            "ioc_value": "xhbmcyyao.adsbln1.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:33:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852454": [
        {
            "ioc_value": "adsbln1.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:28:36",
            "last_seen_utc": "2026-07-16 11:08:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852453": [
        {
            "ioc_value": "tufxszft.efcasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 08:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852446": [
        {
            "ioc_value": "shadowemberstrike.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-16 07:55:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1852445": [
        {
            "ioc_value": "http://ct607808.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-16 07:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852444": [
        {
            "ioc_value": "5.56.25.178:7019",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 07:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852443": [
        {
            "ioc_value": "mukmnvwls.101motorsports.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 07:32:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1852439": [
        {
            "ioc_value": "159.89.132.240:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-16 07:32:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1852441": [
        {
            "ioc_value": "https://teambluewhitezuerich.ch/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 07:32:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/teambluewhitezuerich.ch",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1852442": [
        {
            "ioc_value": "102.220.160.143:5010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-16 07:31:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/414adc9d44514fb2aa210571d1330c64ae2ba691c796859f21ba1b6aef2a4e4c/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852440": [
        {
            "ioc_value": "64.89.161.16:1470",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-16 07:25:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/401b70e0313d7f6dd1fd444a8d61e25ae433a5944a2607405fe5ddbc9b8f7afc/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852438": [
        {
            "ioc_value": "gals.kleenghjah.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-16 07:21:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b6d4a7fa08aa0698393495fc84368c275fd145616eedb9b6e458bbf4eda0531/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852437": [
        {
            "ioc_value": "38.255.40.44:4747",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-16 07:21:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b6d4a7fa08aa0698393495fc84368c275fd145616eedb9b6e458bbf4eda0531/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852435": [
        {
            "ioc_value": "103.186.64.138:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-16 07:16:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f12cc58a3f69a6ed7839464f5a507bda0797c22cf347a557380b31609f0cd0e9/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851437": [
        {
            "ioc_value": "45.150.195.235:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-16 07:15:03",
            "last_seen_utc": "2026-07-25 04:21:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://sigsec.tech",
            "tags": "andromeda,cowrie,ELF,honeypot,mirai,ssh",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1851438": [
        {
            "ioc_value": "205.237.110.232:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-16 07:15:03",
            "last_seen_utc": "2026-07-24 18:15:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://sigsec.tech",
            "tags": "andromeda,cowrie,ELF,honeypot,mirai,ssh",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1852428": [
        {
            "ioc_value": "yyowcsswsesksomi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852429": [
        {
            "ioc_value": "yyqewussumqweisi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852430": [
        {
            "ioc_value": "yyqisgekkgammukq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852431": [
        {
            "ioc_value": "yyqkageayymeoses.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852432": [
        {
            "ioc_value": "yyqokiuoyqkuwiog.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852433": [
        {
            "ioc_value": "yywesmeciecsmksk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852414": [
        {
            "ioc_value": "yquagqysgcsuceqs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852415": [
        {
            "ioc_value": "yqukwqcwqgceousm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852416": [
        {
            "ioc_value": "yqusqqumoekaqaoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852417": [
        {
            "ioc_value": "yqwqkcaiaeemoouq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852418": [
        {
            "ioc_value": "yqwysiuoiyomosec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852419": [
        {
            "ioc_value": "yqyoccyuaoysckmm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852420": [
        {
            "ioc_value": "yqyueyuoukmsmqem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852421": [
        {
            "ioc_value": "yyaqcymcosceugwu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852422": [
        {
            "ioc_value": "yyaygggumsoywcwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852423": [
        {
            "ioc_value": "yyeckmeayawguoim.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852424": [
        {
            "ioc_value": "yyeoguuueeoaggwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852425": [
        {
            "ioc_value": "yygiiasyoqkgsqee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852426": [
        {
            "ioc_value": "yyigcsagquigikkq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852427": [
        {
            "ioc_value": "yyiicoewgysyayam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852399": [
        {
            "ioc_value": "yqaaywumkgiuoegk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852400": [
        {
            "ioc_value": "yqagqiuauqoyuwkw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852401": [
        {
            "ioc_value": "yqaiqmaygauogoyk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852402": [
        {
            "ioc_value": "yqckmsmisoycykgc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852403": [
        {
            "ioc_value": "yqeaqqsiqwgaoyws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852404": [
        {
            "ioc_value": "yqegkgwweowiowmw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852405": [
        {
            "ioc_value": "yqiiwqcuyquwcmse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852406": [
        {
            "ioc_value": "yqkquakgsccocsqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852407": [
        {
            "ioc_value": "yqkyggoocksesowc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852408": [
        {
            "ioc_value": "yqmaimewwksoksue.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852409": [
        {
            "ioc_value": "yqmcoeokqwwmmaea.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852410": [
        {
            "ioc_value": "yqqccumwacwqowuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852411": [
        {
            "ioc_value": "yqqioagmmsciwquq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852412": [
        {
            "ioc_value": "yqsacwmwiwukwuig.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852413": [
        {
            "ioc_value": "yqsciwsaaeeucqaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852385": [
        {
            "ioc_value": "ykoqymcuwwwggkqw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852386": [
        {
            "ioc_value": "ykqegysecaamkage.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852387": [
        {
            "ioc_value": "ykqeoegaiwmekyiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852388": [
        {
            "ioc_value": "ykqwogyoeasiaugw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852389": [
        {
            "ioc_value": "ykugyiiicguawywq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852390": [
        {
            "ioc_value": "ykuiqqumgamwwgia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852391": [
        {
            "ioc_value": "ykuqogqmoqmgsyow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852392": [
        {
            "ioc_value": "ykwgeqoaawkkemos.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852393": [
        {
            "ioc_value": "ykwmoukgikemiauc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852394": [
        {
            "ioc_value": "ykwosqoemowmuqyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852395": [
        {
            "ioc_value": "ykyieuyoesksuqiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852396": [
        {
            "ioc_value": "ykyiieuemcesiuwe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852397": [
        {
            "ioc_value": "ykyoiggwuoyeskkw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852398": [
        {
            "ioc_value": "yoigusekcwamuoqe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852369": [
        {
            "ioc_value": "yeyaqmgqcmwukkmi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852370": [
        {
            "ioc_value": "yeymcemuyesuegwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852371": [
        {
            "ioc_value": "ykawoykgskcugsoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852372": [
        {
            "ioc_value": "ykceckkkaymoqqeo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852373": [
        {
            "ioc_value": "ykeocysgkssoickc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852374": [
        {
            "ioc_value": "ykeogsgcgmgywomq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852375": [
        {
            "ioc_value": "ykeqssksoiasceeo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852376": [
        {
            "ioc_value": "ykgiaiyekymwqsgq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852377": [
        {
            "ioc_value": "ykgkokuywgcceucw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852378": [
        {
            "ioc_value": "ykgsggkaeeoaiqwe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852379": [
        {
            "ioc_value": "ykgusysquwkesmsq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852380": [
        {
            "ioc_value": "ykicegcgagsosumk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852381": [
        {
            "ioc_value": "ykkiucwoqgyoigqu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852382": [
        {
            "ioc_value": "ykkusmyeskgaqwyi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852383": [
        {
            "ioc_value": "ykmiogscecaquiiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852384": [
        {
            "ioc_value": "ykmyoegkukequqai.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852352": [
        {
            "ioc_value": "yeaoggeocmegsmyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852353": [
        {
            "ioc_value": "yeaywwiiioioeoso.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852354": [
        {
            "ioc_value": "yeccikamswuywqia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852355": [
        {
            "ioc_value": "yecmwqwcmqsumkck.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852356": [
        {
            "ioc_value": "yeeggqsocegykyms.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852357": [
        {
            "ioc_value": "yeeogccyqusgamgo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852358": [
        {
            "ioc_value": "yeeswyoqkoaqiyoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852359": [
        {
            "ioc_value": "yegkeaecmqwmskke.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852360": [
        {
            "ioc_value": "yegucggccceieoiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852361": [
        {
            "ioc_value": "yeicawgmcymcsysc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852362": [
        {
            "ioc_value": "yeiiwgaeeagygwas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852363": [
        {
            "ioc_value": "yeiiwgiyeemckymo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852364": [
        {
            "ioc_value": "yekaackwqsggueqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852365": [
        {
            "ioc_value": "yemikyoakukcyakm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852366": [
        {
            "ioc_value": "yeuiogagyqkyqoyq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852367": [
        {
            "ioc_value": "yeusqeigqwuwyuwu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852368": [
        {
            "ioc_value": "yeuumkwgwgqouwie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852339": [
        {
            "ioc_value": "wmqggqacomwuusyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852340": [
        {
            "ioc_value": "wmqgoqqowyiewiag.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852341": [
        {
            "ioc_value": "wmqikoumgsagskyg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852342": [
        {
            "ioc_value": "wmsoueekcksooosg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852343": [
        {
            "ioc_value": "wmycykewmususgki.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852344": [
        {
            "ioc_value": "wmyeuwcyseaymqyc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852345": [
        {
            "ioc_value": "wuguosqckgugmiie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852346": [
        {
            "ioc_value": "wumuuyaqymcgmygw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852347": [
        {
            "ioc_value": "wuoaocgyeeocaueu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852348": [
        {
            "ioc_value": "wuomeyaiueumywcq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852349": [
        {
            "ioc_value": "wuowqwycqyaaiaww.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852350": [
        {
            "ioc_value": "wuugucayuciiyqky.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852351": [
        {
            "ioc_value": "wyewewsyuogiiugy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852325": [
        {
            "ioc_value": "wgyyucckgwowcoiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852326": [
        {
            "ioc_value": "wkymyaaegeucmiui.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852327": [
        {
            "ioc_value": "wmaacoiokoioisse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852328": [
        {
            "ioc_value": "wmaqacugcmeeoweq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852329": [
        {
            "ioc_value": "wmassqqiaigwesou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852330": [
        {
            "ioc_value": "wmaygayyisyiyekc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852331": [
        {
            "ioc_value": "wmcmqqowgokcqcyi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852332": [
        {
            "ioc_value": "wmeyywmqcggeosww.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852333": [
        {
            "ioc_value": "wmgkceuekwkaaemu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852334": [
        {
            "ioc_value": "wmiemgkciesqgksu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852335": [
        {
            "ioc_value": "wmkiescqyocsywwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852336": [
        {
            "ioc_value": "wmmeeoymccygauua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852337": [
        {
            "ioc_value": "wmmueauaskcsggqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852338": [
        {
            "ioc_value": "wmowucciewcsoqss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852311": [
        {
            "ioc_value": "wgiggeosqomogwws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852312": [
        {
            "ioc_value": "wgiuieuyagqkceei.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852313": [
        {
            "ioc_value": "wgkasgokkeweggam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852314": [
        {
            "ioc_value": "wgkmoowogoiqsiau.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852315": [
        {
            "ioc_value": "wgokwsgewwwosoow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852316": [
        {
            "ioc_value": "wgoyicuqkoysocgg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852317": [
        {
            "ioc_value": "wguigkwsksgqueek.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852318": [
        {
            "ioc_value": "wgukuiiukkmyagww.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852319": [
        {
            "ioc_value": "wgwkugwmcsiyywiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852320": [
        {
            "ioc_value": "wgyeiykqkucumcqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852321": [
        {
            "ioc_value": "wgygacwseemuaqwq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852322": [
        {
            "ioc_value": "wgymeumcmkgukaao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852323": [
        {
            "ioc_value": "wgymmigugksgecca.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852324": [
        {
            "ioc_value": "wgywwwwocaaakcwc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852295": [
        {
            "ioc_value": "waaekaeaaewyoyig.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852296": [
        {
            "ioc_value": "waakyguguoaieygq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852297": [
        {
            "ioc_value": "wacagaoiqwimiiwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852298": [
        {
            "ioc_value": "wacseaaagmwuyiio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852299": [
        {
            "ioc_value": "wakaoomiaaiumawc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852300": [
        {
            "ioc_value": "wakiwkuwagsyqiaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852301": [
        {
            "ioc_value": "wamuaoaiwgogeqgi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852302": [
        {
            "ioc_value": "waqeemsqqskqwueq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852303": [
        {
            "ioc_value": "wasymakswqqcimkk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852304": [
        {
            "ioc_value": "wawuggiwoasasqcc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852305": [
        {
            "ioc_value": "wgauqygysmuwkwmk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852306": [
        {
            "ioc_value": "wgcqiqqugqqckyka.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852307": [
        {
            "ioc_value": "wgeaoecewsyewueg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852308": [
        {
            "ioc_value": "wgekwuogmcmqocqq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852309": [
        {
            "ioc_value": "wgeqaayoyoayioic.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852310": [
        {
            "ioc_value": "wggamqkicoowgscy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852293": [
        {
            "ioc_value": "uwwuaeuwigooywga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852294": [
        {
            "ioc_value": "uwyowgaeommgyokc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852292": [
        {
            "ioc_value": "uwwaimmmycamyqgk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852281": [
        {
            "ioc_value": "uwayimkyueaysuss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852282": [
        {
            "ioc_value": "uwcmaemeieukcomm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852283": [
        {
            "ioc_value": "uwgqwquwgwcqkmso.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852284": [
        {
            "ioc_value": "uwiiiwyagicqcqoi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852285": [
        {
            "ioc_value": "uwiomsmcougegqgk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852286": [
        {
            "ioc_value": "uwkuoauwgqaiqwiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852287": [
        {
            "ioc_value": "uwmumeuemmcwyyii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852288": [
        {
            "ioc_value": "uwowcosuywesqims.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852289": [
        {
            "ioc_value": "uwowueswwqmekome.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852290": [
        {
            "ioc_value": "uwsomgwmgmcyisgs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852291": [
        {
            "ioc_value": "uwuguckaeeiaucqu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852267": [
        {
            "ioc_value": "uiiamccsmoeaowys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852268": [
        {
            "ioc_value": "uimcmuioigsmgicq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852269": [
        {
            "ioc_value": "uioeisikswmysmcm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852270": [
        {
            "ioc_value": "uiyqaiseouycimck.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852271": [
        {
            "ioc_value": "uiysoewmgucoegss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852272": [
        {
            "ioc_value": "uiyucwkaymeaykio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852273": [
        {
            "ioc_value": "uqciiasmyaicaaoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852274": [
        {
            "ioc_value": "uqcqiukuygaicqsw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852275": [
        {
            "ioc_value": "uqmsyasksaoaiqso.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852276": [
        {
            "ioc_value": "uqoemmmgcskamsgc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852277": [
        {
            "ioc_value": "uqquaumoewosaeiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852278": [
        {
            "ioc_value": "uqyaakgqymuksosc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852279": [
        {
            "ioc_value": "uumcceymkuymmqou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852280": [
        {
            "ioc_value": "uwaowgwwiokugqqk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852252": [
        {
            "ioc_value": "ucsagasggwucgcou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852253": [
        {
            "ioc_value": "ucsiakoaysqkcqus.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852254": [
        {
            "ioc_value": "ucsiyocyukuakwas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852255": [
        {
            "ioc_value": "ucssyssuwkeqgwqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852256": [
        {
            "ioc_value": "ucucwquiacuwyawi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852257": [
        {
            "ioc_value": "ucumoeuugqeuacee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852258": [
        {
            "ioc_value": "ucusuammqsgeiuiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852259": [
        {
            "ioc_value": "ucwegeykoamqiycu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852260": [
        {
            "ioc_value": "ucwgcciskqossaas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852261": [
        {
            "ioc_value": "ucwoiqkiamygsyuq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852262": [
        {
            "ioc_value": "ucwoqeaycuqwkeyo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852263": [
        {
            "ioc_value": "ucwqiiwawoswwgkq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852264": [
        {
            "ioc_value": "ucwyqcegcaooycqe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852265": [
        {
            "ioc_value": "uiaoweomysoyumys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852266": [
        {
            "ioc_value": "uieqmsuekgkukuio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852238": [
        {
            "ioc_value": "ucggmqqqwqiqwiwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852239": [
        {
            "ioc_value": "ucgmgcocmycqyysy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852240": [
        {
            "ioc_value": "ucgssieiuewkccaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852241": [
        {
            "ioc_value": "ucigeigqcowckyaw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852242": [
        {
            "ioc_value": "uciseyagkewmcgyq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852243": [
        {
            "ioc_value": "uciyiigmkwswqiua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852244": [
        {
            "ioc_value": "uckqgscwkwisuoia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852245": [
        {
            "ioc_value": "ucmccuugamcgqciq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852246": [
        {
            "ioc_value": "ucmeyieyssyuyyug.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852247": [
        {
            "ioc_value": "ucmwuswcskygaguw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852248": [
        {
            "ioc_value": "ucomcuacegweiass.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852249": [
        {
            "ioc_value": "ucqeecqquykkooky.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852250": [
        {
            "ioc_value": "ucqiqciqgcacmmwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852251": [
        {
            "ioc_value": "ucqmqowkkmomaeee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852224": [
        {
            "ioc_value": "syqseimsowywgskg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852225": [
        {
            "ioc_value": "syqwmkmwuyemakiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852226": [
        {
            "ioc_value": "sysouiyqeogigwyc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852227": [
        {
            "ioc_value": "syuaqaceoackmqec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852228": [
        {
            "ioc_value": "syuiqukoyqmowqoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852229": [
        {
            "ioc_value": "syuqiwmwimksqeym.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852230": [
        {
            "ioc_value": "syuuacscmuoawkec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852231": [
        {
            "ioc_value": "sywyoammcykmqgem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852232": [
        {
            "ioc_value": "sywyowomaysqiwsm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852233": [
        {
            "ioc_value": "ucaoiqwweqyyeiyc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852234": [
        {
            "ioc_value": "ucawqqamoksseeye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852235": [
        {
            "ioc_value": "uccowoakywacsaku.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852236": [
        {
            "ioc_value": "ucegqgkucmgcgkom.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852237": [
        {
            "ioc_value": "uceooecyiksqquci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852210": [
        {
            "ioc_value": "sykmggecgyqwqguo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852211": [
        {
            "ioc_value": "sykmgicssaqcqgwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852212": [
        {
            "ioc_value": "sykmsicowwmaaiwe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852213": [
        {
            "ioc_value": "sykokawagcmigeyi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852214": [
        {
            "ioc_value": "symakmicoycemeam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852215": [
        {
            "ioc_value": "symimwouqkakwmew.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852216": [
        {
            "ioc_value": "symsacmoyiwmmgay.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852217": [
        {
            "ioc_value": "symwyycqseygoiwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852218": [
        {
            "ioc_value": "symyakyaskqukkme.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852219": [
        {
            "ioc_value": "symycewoeggcmysg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852220": [
        {
            "ioc_value": "syomkygaoaegymeg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852221": [
        {
            "ioc_value": "syosaiagugksyyye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852222": [
        {
            "ioc_value": "syqgkkaimswumcca.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852223": [
        {
            "ioc_value": "syqmwocqesawmycs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852196": [
        {
            "ioc_value": "sycyowusyckaukwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852197": [
        {
            "ioc_value": "syeassweguqgookw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852198": [
        {
            "ioc_value": "syecucqwkqiuueuy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852199": [
        {
            "ioc_value": "syeoocaueewgcgyq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852200": [
        {
            "ioc_value": "sygaoamqgymoygec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852201": [
        {
            "ioc_value": "sygoemgwoyqmicqk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852202": [
        {
            "ioc_value": "sygqoqiegcoisqae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852203": [
        {
            "ioc_value": "syguyyaakmkyuamw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852204": [
        {
            "ioc_value": "syiwaogcwiwayoaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852205": [
        {
            "ioc_value": "syiyymyqquqosawo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852206": [
        {
            "ioc_value": "sykcmiemgyegowwy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852207": [
        {
            "ioc_value": "sykgkkakewoeysgw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852208": [
        {
            "ioc_value": "sykiaekyowiokywo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852209": [
        {
            "ioc_value": "sykkeqmyoeeysqmi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852180": [
        {
            "ioc_value": "ssmecayyakeuamsu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852181": [
        {
            "ioc_value": "ssmsikcemooiqmcg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852182": [
        {
            "ioc_value": "ssmwgygymswmeyyk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852183": [
        {
            "ioc_value": "ssomcgmuukuiawie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852184": [
        {
            "ioc_value": "ssqaaiggwqwsokwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852185": [
        {
            "ioc_value": "ssqcywymeaywoeyq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852186": [
        {
            "ioc_value": "ssqeiyywesygmcoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852187": [
        {
            "ioc_value": "ssqkaeuoygeyiegu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852188": [
        {
            "ioc_value": "ssqueokumqmayssi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852189": [
        {
            "ioc_value": "ssuokqukkymyusgo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852190": [
        {
            "ioc_value": "ssyeugmiisqiukws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852191": [
        {
            "ioc_value": "swceukaucguyuaqm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852192": [
        {
            "ioc_value": "swcowquyaqcwsqmo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852193": [
        {
            "ioc_value": "syaieisyswocikki.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852194": [
        {
            "ioc_value": "sycqmogqkgmkgqqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852195": [
        {
            "ioc_value": "sycwamemeeygskuk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852165": [
        {
            "ioc_value": "smyskiusokcsoikk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852166": [
        {
            "ioc_value": "sqyqimygwkcywkqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852167": [
        {
            "ioc_value": "ssaiokkquqwaqcmm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852168": [
        {
            "ioc_value": "ssaisuuawgqikyus.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852169": [
        {
            "ioc_value": "sscamgmqycygeygc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852170": [
        {
            "ioc_value": "sscesqqicwekysaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852171": [
        {
            "ioc_value": "sscmewcmyggosmga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852172": [
        {
            "ioc_value": "sseemsimqwkqaikc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852173": [
        {
            "ioc_value": "ssegieuccemaimgs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852174": [
        {
            "ioc_value": "ssewqgomyumkimqs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852175": [
        {
            "ioc_value": "ssgqwkmqoqiysmiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852176": [
        {
            "ioc_value": "ssieqaaiwiqoqiam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852177": [
        {
            "ioc_value": "sskcesmuuyuoieow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852178": [
        {
            "ioc_value": "sskcgkuwimkyqmqs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852179": [
        {
            "ioc_value": "sskucuemskkmgkks.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852151": [
        {
            "ioc_value": "secakqagsakkowyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852152": [
        {
            "ioc_value": "secsimaamquuoqko.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852153": [
        {
            "ioc_value": "segiayiwqamcgygg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852154": [
        {
            "ioc_value": "segmoqquwkyymgqk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852155": [
        {
            "ioc_value": "sekguqqwqykgeykw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852156": [
        {
            "ioc_value": "semqmmwcgukoiyka.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852157": [
        {
            "ioc_value": "seqwokskwyiiikgc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852158": [
        {
            "ioc_value": "sesyooggocuqaqum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852159": [
        {
            "ioc_value": "smgoiwekkqsuioou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852160": [
        {
            "ioc_value": "smiasuwimwiyicag.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852161": [
        {
            "ioc_value": "smiwkkyuccsegqog.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852162": [
        {
            "ioc_value": "smkaqgocoaacecma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852163": [
        {
            "ioc_value": "smkwmqieqgoagkac.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852164": [
        {
            "ioc_value": "smqemscyoimqmmuc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852138": [
        {
            "ioc_value": "quskeqkeuackaoeu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852139": [
        {
            "ioc_value": "qusqucwciquecscu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852140": [
        {
            "ioc_value": "quuckumwmyyiioma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852141": [
        {
            "ioc_value": "quuikiecgwuseqai.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852142": [
        {
            "ioc_value": "quuwucmyquiegyqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852143": [
        {
            "ioc_value": "quwoaeowmqeoqukw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852144": [
        {
            "ioc_value": "quwyymgakyuqueks.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852145": [
        {
            "ioc_value": "quygkusucsckmska.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852146": [
        {
            "ioc_value": "quyiaismmkesyoku.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852147": [
        {
            "ioc_value": "seagaieoseccqeai.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852148": [
        {
            "ioc_value": "seaqwqeyukcikcii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852149": [
        {
            "ioc_value": "seasegugokqgaceg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852150": [
        {
            "ioc_value": "seaukokksccciqcg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852122": [
        {
            "ioc_value": "quaoueiausmkucag.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852123": [
        {
            "ioc_value": "quauuacgeausqkgy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852124": [
        {
            "ioc_value": "quawuacegiemokis.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852125": [
        {
            "ioc_value": "quccwsymamiwgiew.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852126": [
        {
            "ioc_value": "quemswiyykkukeoi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852127": [
        {
            "ioc_value": "qugkkyacgcsukaua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852128": [
        {
            "ioc_value": "qugkmkymsccosmme.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852129": [
        {
            "ioc_value": "quguwqimiaicuwcs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852130": [
        {
            "ioc_value": "qugykwswmwysssca.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852131": [
        {
            "ioc_value": "quiaqgaaoqaeagss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852132": [
        {
            "ioc_value": "quiwiwqqmegeoicq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852133": [
        {
            "ioc_value": "qukeuwgmycyagyss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852134": [
        {
            "ioc_value": "qukyeiooicuqieys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852135": [
        {
            "ioc_value": "qumacoeiwiwaaaau.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852136": [
        {
            "ioc_value": "qumemaakgoagqqqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852137": [
        {
            "ioc_value": "qumscaqoiaymkmak.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852107": [
        {
            "ioc_value": "qoeqscaymcqiyiem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852108": [
        {
            "ioc_value": "qoguigyyoamqcmsy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852109": [
        {
            "ioc_value": "qoiaymskemiakasg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852110": [
        {
            "ioc_value": "qokeegiqskggaiws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852111": [
        {
            "ioc_value": "qokuyekauygcykyi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852112": [
        {
            "ioc_value": "qomgoiqoyscassuq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852113": [
        {
            "ioc_value": "qomgscoemogwcewu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852114": [
        {
            "ioc_value": "qommaceciswmasau.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852115": [
        {
            "ioc_value": "qommyuoyqukiywma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852116": [
        {
            "ioc_value": "qooameimygucicum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852117": [
        {
            "ioc_value": "qoomswgcsqquyweu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852118": [
        {
            "ioc_value": "qosmkasciccqgeum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852119": [
        {
            "ioc_value": "qoweeyykoewmiiui.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852120": [
        {
            "ioc_value": "qowquuyueykwcuka.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852121": [
        {
            "ioc_value": "qoyieeammkewseqm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852094": [
        {
            "ioc_value": "qikkcsyucaimsyyk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852095": [
        {
            "ioc_value": "qimicmumwioomgga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852096": [
        {
            "ioc_value": "qimsuwsisomyyyek.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852097": [
        {
            "ioc_value": "qiqcueykamekyaaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852098": [
        {
            "ioc_value": "qissaymcyieceecu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852099": [
        {
            "ioc_value": "qiumksogqmwcamuq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852100": [
        {
            "ioc_value": "qiyiigqycwgyqsma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852101": [
        {
            "ioc_value": "qiyqyckiosaigoac.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852102": [
        {
            "ioc_value": "qoagqyewqoamkumi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852103": [
        {
            "ioc_value": "qoakeoquuimgkiqi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852104": [
        {
            "ioc_value": "qocckeuamwksaoiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852105": [
        {
            "ioc_value": "qoeewuwssaaecoss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852106": [
        {
            "ioc_value": "qoeiguaemquyacmi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852079": [
        {
            "ioc_value": "qaegoiqamesgkuke.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852080": [
        {
            "ioc_value": "qaesugaikooqosiq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852081": [
        {
            "ioc_value": "qagmckgswgaaqeig.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852082": [
        {
            "ioc_value": "qaieskaoqeaoacuy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852083": [
        {
            "ioc_value": "qaiooeuqywwiasgu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852084": [
        {
            "ioc_value": "qakcyiwuysiiaeqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852085": [
        {
            "ioc_value": "qakycigiueusmwky.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852086": [
        {
            "ioc_value": "qamcswmgmeiwksyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852087": [
        {
            "ioc_value": "qaucyyqkusqmqwec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852088": [
        {
            "ioc_value": "qaugckksigakycws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852089": [
        {
            "ioc_value": "qauuqwegyyycesaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852090": [
        {
            "ioc_value": "qauwuackqaoquaym.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852091": [
        {
            "ioc_value": "qawqqeaiykyceyqo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852092": [
        {
            "ioc_value": "qayiwkogiouiwemk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852093": [
        {
            "ioc_value": "qayiwswomqaqgske.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852064": [
        {
            "ioc_value": "owkgikmmyuyiuugg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852065": [
        {
            "ioc_value": "owkiqskyaoaaommk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852066": [
        {
            "ioc_value": "owksmkwgsmukciwa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852067": [
        {
            "ioc_value": "owqaaosuuiygqugs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852068": [
        {
            "ioc_value": "owsauuecoeckiuwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852069": [
        {
            "ioc_value": "owuymoaeegmemqku.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852070": [
        {
            "ioc_value": "owwgcmucysswyuky.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852071": [
        {
            "ioc_value": "owyiewwkgqcaugkm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852072": [
        {
            "ioc_value": "owyisimcwuikgwss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852073": [
        {
            "ioc_value": "owywioyuowqaoocg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852074": [
        {
            "ioc_value": "owyyaaycmuuyimeo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852075": [
        {
            "ioc_value": "qaaeysoaoqieeikk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852076": [
        {
            "ioc_value": "qaeacamquamakmeu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852077": [
        {
            "ioc_value": "qaeaeeyqgaakugag.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852078": [
        {
            "ioc_value": "qaeccaimagyiikwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852046": [
        {
            "ioc_value": "oqsgueyousauqics.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852047": [
        {
            "ioc_value": "oqskcuqiqyiuocse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852048": [
        {
            "ioc_value": "oqskgmkwigqeawma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852049": [
        {
            "ioc_value": "oqssgackqcykauws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852050": [
        {
            "ioc_value": "oquqeioasecousmu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852051": [
        {
            "ioc_value": "oqwoomsiqsyiguqa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852052": [
        {
            "ioc_value": "oqyagkqmocsauuay.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852053": [
        {
            "ioc_value": "owamoegqeyiaicqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852054": [
        {
            "ioc_value": "owaqucsgyciccagu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852055": [
        {
            "ioc_value": "owcaeeciiceeiuiq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852056": [
        {
            "ioc_value": "owccomauocwckocg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852057": [
        {
            "ioc_value": "owckawysgqiyiewi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852058": [
        {
            "ioc_value": "owcwkeeeyyqiqiao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852059": [
        {
            "ioc_value": "owewkougwykuyiue.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852060": [
        {
            "ioc_value": "owgowwowacygqsqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852061": [
        {
            "ioc_value": "owgqcgcmyqyeykgg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852062": [
        {
            "ioc_value": "owicscwaocmgyayq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852063": [
        {
            "ioc_value": "owioaycqiaciwqse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852029": [
        {
            "ioc_value": "oqaaoysgmcqecgmi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852030": [
        {
            "ioc_value": "oqakicqmcasciwwe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852031": [
        {
            "ioc_value": "oqasuckykemaikie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852032": [
        {
            "ioc_value": "oqcaaywymskauykc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852033": [
        {
            "ioc_value": "oqcaeqqgkkmiiqoe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852034": [
        {
            "ioc_value": "oqccsqgmyiooycus.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852035": [
        {
            "ioc_value": "oqckgaowiqkakuwm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852036": [
        {
            "ioc_value": "oqcucymemsoaqwck.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852037": [
        {
            "ioc_value": "oqcyogquyswssgsw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852038": [
        {
            "ioc_value": "oqeksecqmowqkqqw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852039": [
        {
            "ioc_value": "oqeowwyemqmgekks.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852040": [
        {
            "ioc_value": "oqgiisuyigsomomu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852041": [
        {
            "ioc_value": "oqgwauymeauwwces.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852042": [
        {
            "ioc_value": "oqiqumqwwcemksii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852043": [
        {
            "ioc_value": "oqiwyuokyumusuok.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852044": [
        {
            "ioc_value": "oqkeqoocyekakgio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852045": [
        {
            "ioc_value": "oqkkcoysuqmsiocs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852013": [
        {
            "ioc_value": "okcymcousyaiqooq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852014": [
        {
            "ioc_value": "okeuwwwiogcioami.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852015": [
        {
            "ioc_value": "okgmmikekimyikmm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852016": [
        {
            "ioc_value": "okigeyqwuwkgqawc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852017": [
        {
            "ioc_value": "okioyycyoaekuicm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852018": [
        {
            "ioc_value": "okiqmaumowmmiyeq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852019": [
        {
            "ioc_value": "okkemkkmomiskyis.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852020": [
        {
            "ioc_value": "okkkyaucgwmeeumc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852021": [
        {
            "ioc_value": "okmimckagsmcmmma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852022": [
        {
            "ioc_value": "oksskousgiowcckc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852023": [
        {
            "ioc_value": "oksssqqeksgcwecm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852024": [
        {
            "ioc_value": "okugayaawqwaemqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852025": [
        {
            "ioc_value": "okugsieycoqickko.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852026": [
        {
            "ioc_value": "okwegimkkokcauue.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852027": [
        {
            "ioc_value": "okymuksseymsakew.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852028": [
        {
            "ioc_value": "oocoakymuqkykuoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851998": [
        {
            "ioc_value": "msumuagcswqwcuqu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851999": [
        {
            "ioc_value": "msusyaacsegowuwy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852000": [
        {
            "ioc_value": "msyaoeyoekgwyceq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852001": [
        {
            "ioc_value": "msygeyawuuwmsuwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852002": [
        {
            "ioc_value": "myyoikamwqwuuaia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852003": [
        {
            "ioc_value": "oeegigmywecuymea.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852004": [
        {
            "ioc_value": "oeiicuaskysesomk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852005": [
        {
            "ioc_value": "oemqgaiqosmkaeco.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852006": [
        {
            "ioc_value": "oesewumkcucqyguo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852007": [
        {
            "ioc_value": "oeuiceekkcqaqiiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852008": [
        {
            "ioc_value": "oewcgeokwwcmmcss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852009": [
        {
            "ioc_value": "oewmycugkummiams.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852010": [
        {
            "ioc_value": "oeycoweesgqcimyy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852011": [
        {
            "ioc_value": "okcskwiewsmgamec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1852012": [
        {
            "ioc_value": "okcwuygowiacuqoc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851983": [
        {
            "ioc_value": "msasqokeqoeiaiaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851984": [
        {
            "ioc_value": "mscaqkqguqykukiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851985": [
        {
            "ioc_value": "msceyuikaqmyyaoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851986": [
        {
            "ioc_value": "msckiwammowiwyum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851987": [
        {
            "ioc_value": "msequcmykikuuuyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851988": [
        {
            "ioc_value": "mseuygekeamookmu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851989": [
        {
            "ioc_value": "msgkmmaoawwieycw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851990": [
        {
            "ioc_value": "msgqaugcyymqageg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851991": [
        {
            "ioc_value": "msguywyyiyswokwa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851992": [
        {
            "ioc_value": "msgwcwqwowsqsgoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851993": [
        {
            "ioc_value": "msigecisoisaqeuu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851994": [
        {
            "ioc_value": "msiueiiiioewikcg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851995": [
        {
            "ioc_value": "msomsiowykugysgi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851996": [
        {
            "ioc_value": "msuceageeigqscga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851997": [
        {
            "ioc_value": "msuciiaucqsmiguc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851966": [
        {
            "ioc_value": "mmkqeoamkwsaqssg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851967": [
        {
            "ioc_value": "mmksuyaauoocyiwe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851968": [
        {
            "ioc_value": "mmkymkkquemoieqs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851969": [
        {
            "ioc_value": "mmmcwuuiwimmuuai.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851970": [
        {
            "ioc_value": "mmmqcsusmgqmgyeo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851971": [
        {
            "ioc_value": "mmoicciugkwigygy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851972": [
        {
            "ioc_value": "mmoiqocseeswqigi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851973": [
        {
            "ioc_value": "mmqaeymekukcagkm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851974": [
        {
            "ioc_value": "mmqkaesesmgmycuc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851975": [
        {
            "ioc_value": "mmsagyqewcommeue.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851976": [
        {
            "ioc_value": "mmsieiqagccomqsg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851977": [
        {
            "ioc_value": "mmswekcowawscekm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851978": [
        {
            "ioc_value": "mmsyueageuumkqiq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851979": [
        {
            "ioc_value": "mmuomgyakagmmcos.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851980": [
        {
            "ioc_value": "mmuqamceysqwkyge.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851981": [
        {
            "ioc_value": "mmyeukskiwwyumug.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851982": [
        {
            "ioc_value": "msaegckugeiokawk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851949": [
        {
            "ioc_value": "mgmcekiymqsgwkkk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851950": [
        {
            "ioc_value": "mgqyiuueaswucwci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851951": [
        {
            "ioc_value": "mgsqqsaogkyigomc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851952": [
        {
            "ioc_value": "mguqogkuacgmmwyk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851953": [
        {
            "ioc_value": "mgwosowckigwkoig.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851954": [
        {
            "ioc_value": "mgyyasgoygsimmsa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851955": [
        {
            "ioc_value": "mgyymmasyyiowmsu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851956": [
        {
            "ioc_value": "mkqsacieswwiwako.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851957": [
        {
            "ioc_value": "mkyoyoywyisyaqsi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851958": [
        {
            "ioc_value": "mmascokyuwikcgky.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851959": [
        {
            "ioc_value": "mmaweisgokeeeasm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851960": [
        {
            "ioc_value": "mmayigkciiaikqgm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851961": [
        {
            "ioc_value": "mmcewwqaygmmgwwm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851962": [
        {
            "ioc_value": "mmeeggewqeuaaguk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851963": [
        {
            "ioc_value": "mmeqcsyakwwyoeqm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851964": [
        {
            "ioc_value": "mmguwickugmmkkcc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851965": [
        {
            "ioc_value": "mmgwqwcecsgyaesk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851934": [
        {
            "ioc_value": "maugeiciyokkmggq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851935": [
        {
            "ioc_value": "maweyiaycwwoayoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851936": [
        {
            "ioc_value": "mawiouwakeoeeiqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851937": [
        {
            "ioc_value": "mayoaooyykakuegi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851938": [
        {
            "ioc_value": "mgckoksqiiaoagaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851939": [
        {
            "ioc_value": "mgcuqyseqgcqgmie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851940": [
        {
            "ioc_value": "mgeccekqwukweiyo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851941": [
        {
            "ioc_value": "mgesygagamsikusm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851942": [
        {
            "ioc_value": "mgiesiyoacesiisc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851943": [
        {
            "ioc_value": "mgisigiqaoymqaiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851944": [
        {
            "ioc_value": "mgiywygmmeqkksqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851945": [
        {
            "ioc_value": "mgkgeogiyqciwuks.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851946": [
        {
            "ioc_value": "mgkmwukoguwayuog.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851947": [
        {
            "ioc_value": "mgkuyeecsuiguuuk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851948": [
        {
            "ioc_value": "mgkweuqesymamgci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851918": [
        {
            "ioc_value": "maaoiewasykauogs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851919": [
        {
            "ioc_value": "maawaageeauayigi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851920": [
        {
            "ioc_value": "macgqemssuascaee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851921": [
        {
            "ioc_value": "macisueeuukowseo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851922": [
        {
            "ioc_value": "maeoikkuiuwegcwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851923": [
        {
            "ioc_value": "magaukykcswsyamm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851924": [
        {
            "ioc_value": "maiaoqeuekuosskg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851925": [
        {
            "ioc_value": "maiokquauyoegsem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851926": [
        {
            "ioc_value": "makoyqkeciyueoea.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851927": [
        {
            "ioc_value": "maksysiceoiiqssa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851928": [
        {
            "ioc_value": "mamcwgmwoakuwems.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851929": [
        {
            "ioc_value": "maoucmymyickssmw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851930": [
        {
            "ioc_value": "maqwuegsiayquqem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851931": [
        {
            "ioc_value": "maqwuoogyqosquma.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851932": [
        {
            "ioc_value": "mascyeamiumawaiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851933": [
        {
            "ioc_value": "maswckeeycmksies.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851901": [
        {
            "ioc_value": "koweeswuiaggmaiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851902": [
        {
            "ioc_value": "kowysmaugcaqsciq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851903": [
        {
            "ioc_value": "koyqaukqaoikmyms.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851904": [
        {
            "ioc_value": "koyswsmioemuqqem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851905": [
        {
            "ioc_value": "kwakayoekscegaci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851906": [
        {
            "ioc_value": "kwawoisswqscousm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851907": [
        {
            "ioc_value": "kwawyeckemiwmuwq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851908": [
        {
            "ioc_value": "kwcmyowqeccmewem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851909": [
        {
            "ioc_value": "kweymkaugaewseow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851910": [
        {
            "ioc_value": "kwgsweecasiiguiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851911": [
        {
            "ioc_value": "kwiakwoeguscqoao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851912": [
        {
            "ioc_value": "kwickewsiqwcmuak.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851913": [
        {
            "ioc_value": "kwkcywosewayyeym.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851914": [
        {
            "ioc_value": "kwmgicksuuwiaosk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851915": [
        {
            "ioc_value": "kwmukeusiykcaigq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851916": [
        {
            "ioc_value": "kwsaycgagaceuoei.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851917": [
        {
            "ioc_value": "kwskwwkkucgcamyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851885": [
        {
            "ioc_value": "kocaskysguiuuwmu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851886": [
        {
            "ioc_value": "kocmqukicmskqick.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851887": [
        {
            "ioc_value": "kocqqkyyyswiumuc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851888": [
        {
            "ioc_value": "koeqcoommgkagouk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851889": [
        {
            "ioc_value": "kogggwaqqekmqiao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851890": [
        {
            "ioc_value": "koiwmmsceicqaweg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851891": [
        {
            "ioc_value": "kokkegioigaeggyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851892": [
        {
            "ioc_value": "kooisusoiwgesyoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851893": [
        {
            "ioc_value": "koosaiusskgcmwwu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851894": [
        {
            "ioc_value": "koqmsemqkiecuycu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851895": [
        {
            "ioc_value": "kosewkiogowqaoeo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851896": [
        {
            "ioc_value": "kosgukmymeuiwqua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851897": [
        {
            "ioc_value": "kosigsqigeqquciq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851898": [
        {
            "ioc_value": "kouigaggmiqugaku.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851899": [
        {
            "ioc_value": "kowaaokaecceoaks.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851900": [
        {
            "ioc_value": "kowcawiawagscwos.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851871": [
        {
            "ioc_value": "kiomccassamkccys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851872": [
        {
            "ioc_value": "kioswaskwsqyscac.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851873": [
        {
            "ioc_value": "kiqaceaqecyiugkq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851874": [
        {
            "ioc_value": "kiqaiymyeyycyaee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851875": [
        {
            "ioc_value": "kiqcmqimwkoqmoyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851876": [
        {
            "ioc_value": "kiqqqgciqgwycses.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851877": [
        {
            "ioc_value": "kisgucygsqeowmcc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851878": [
        {
            "ioc_value": "kiuaiqgiqwsyggea.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851879": [
        {
            "ioc_value": "kiueekmauckommao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851880": [
        {
            "ioc_value": "kiyowywcgiqemqoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851881": [
        {
            "ioc_value": "kiyqoakucmyocauq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851882": [
        {
            "ioc_value": "kmccemwaaikaggqs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851883": [
        {
            "ioc_value": "koaaiygaakekayye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851884": [
        {
            "ioc_value": "koasoikiwyskwggq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851855": [
        {
            "ioc_value": "kcykgmiswgkceqse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851856": [
        {
            "ioc_value": "kiagcguqaoyqgemc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851857": [
        {
            "ioc_value": "kiaooawiqmkaouoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851858": [
        {
            "ioc_value": "kiauiocguoigcaey.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851859": [
        {
            "ioc_value": "kiaummkqaqgoiqaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851860": [
        {
            "ioc_value": "kiaywkmokaakqggm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851861": [
        {
            "ioc_value": "kiciqckgmqykuksy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851862": [
        {
            "ioc_value": "kicugioeomcsgkeg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851863": [
        {
            "ioc_value": "kieaqsgmsssmicgw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851864": [
        {
            "ioc_value": "kieyggokikwukmqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851865": [
        {
            "ioc_value": "kigiugukemiuaioy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851866": [
        {
            "ioc_value": "kigkkuqaqcusyaes.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851867": [
        {
            "ioc_value": "kigqyyaouqikiuci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851868": [
        {
            "ioc_value": "kiicsosecqmmkaam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851869": [
        {
            "ioc_value": "kikckwoumqigemae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851870": [
        {
            "ioc_value": "kimuquoemskggauo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851841": [
        {
            "ioc_value": "kckeogemcikqweqk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851842": [
        {
            "ioc_value": "kckeugooacgyugau.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851843": [
        {
            "ioc_value": "kckkmcmsmuiiewss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851844": [
        {
            "ioc_value": "kckossiegaqwkyas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851845": [
        {
            "ioc_value": "kckswcuwiiquuioi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851846": [
        {
            "ioc_value": "kcosiayamoocqowy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851847": [
        {
            "ioc_value": "kcqqucimqkuckoui.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851848": [
        {
            "ioc_value": "kcsksaecceiiamwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851849": [
        {
            "ioc_value": "kcsmiggoccmegcuy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851850": [
        {
            "ioc_value": "kcsmukmosauaweia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851851": [
        {
            "ioc_value": "kcsookaoswqkycoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851852": [
        {
            "ioc_value": "kcsuiggeoyuioqwa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851853": [
        {
            "ioc_value": "kcueciemkgkosiuy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851854": [
        {
            "ioc_value": "kcyacgesgciqkuok.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851825": [
        {
            "ioc_value": "iyogaikqwmwkimcc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851826": [
        {
            "ioc_value": "iyokwqeqccqwayaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851827": [
        {
            "ioc_value": "iyomyoqyosqkswoy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851828": [
        {
            "ioc_value": "iyquaoomomkykigo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851829": [
        {
            "ioc_value": "iysckyosmsyqkyia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851830": [
        {
            "ioc_value": "iysqeicgswwmsqys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851831": [
        {
            "ioc_value": "iysqqsociokckgcm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851832": [
        {
            "ioc_value": "iyswcgomswmuscii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851833": [
        {
            "ioc_value": "iyukcwcecoaeksyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851834": [
        {
            "ioc_value": "iyumwqggeyuiugqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851835": [
        {
            "ioc_value": "iyuuqyekwwaocmui.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851836": [
        {
            "ioc_value": "iyuykywsycoiaeow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851837": [
        {
            "ioc_value": "iywgueowcemyisig.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851838": [
        {
            "ioc_value": "iyyquyssuccogqsw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851839": [
        {
            "ioc_value": "kcaasiiogywqgseu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851840": [
        {
            "ioc_value": "kcaumkkyqkqsywse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851812": [
        {
            "ioc_value": "ikyiaisaoqkwqomu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851813": [
        {
            "ioc_value": "ikyyuomqiayscmkg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851814": [
        {
            "ioc_value": "isaqmaawuoakeewc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851815": [
        {
            "ioc_value": "iscaoamigosagiua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851816": [
        {
            "ioc_value": "iscymmggocumiomc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851817": [
        {
            "ioc_value": "iseugwcwemequeas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851818": [
        {
            "ioc_value": "isqumsceusukeqoy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851819": [
        {
            "ioc_value": "iyaoqyiumcwgqcca.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851820": [
        {
            "ioc_value": "iyckceeogmaoiicy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851821": [
        {
            "ioc_value": "iyewmiamigsgieqe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851822": [
        {
            "ioc_value": "iyiamukgwiwescoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851823": [
        {
            "ioc_value": "iykoqcsiaqqmimio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851824": [
        {
            "ioc_value": "iymsomywwqeuswii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851797": [
        {
            "ioc_value": "ikimquigykukwkgm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851798": [
        {
            "ioc_value": "ikkeacqwooawweoc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851799": [
        {
            "ioc_value": "ikmmuwecscmgssui.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851800": [
        {
            "ioc_value": "ikmuiykseasyksoi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851801": [
        {
            "ioc_value": "ikoqicamegmugoyo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851802": [
        {
            "ioc_value": "ikosygiikgkgoeco.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851803": [
        {
            "ioc_value": "ikqesosqmkakgyye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851804": [
        {
            "ioc_value": "ikqmkwaucaquqcio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851805": [
        {
            "ioc_value": "ikqyqeykigkgoqqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851806": [
        {
            "ioc_value": "ikqyyqoisawiccoe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851807": [
        {
            "ioc_value": "iksywccsemaiysiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851808": [
        {
            "ioc_value": "ikucmwsqqgogoiwc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851809": [
        {
            "ioc_value": "ikuoykswecyquwcw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851810": [
        {
            "ioc_value": "ikuuuyiyamaysgoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851811": [
        {
            "ioc_value": "ikygkoquikmsuwck.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851782": [
        {
            "ioc_value": "iesyyacakggqgkyo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851783": [
        {
            "ioc_value": "iewaiaeicgsyqscm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851784": [
        {
            "ioc_value": "iewikaokkgeccica.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851785": [
        {
            "ioc_value": "iewmaqqyqsayeawc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851786": [
        {
            "ioc_value": "iewqamwsycqoeeam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851787": [
        {
            "ioc_value": "iewswkywegsswqwu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851788": [
        {
            "ioc_value": "ieyeuaoimksiisga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851789": [
        {
            "ioc_value": "ieygeccocgswyumc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851790": [
        {
            "ioc_value": "ieyqkmmawewoaoao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851791": [
        {
            "ioc_value": "ikacuamiaoikukmg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851792": [
        {
            "ioc_value": "ikamsmqcmesqewec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851793": [
        {
            "ioc_value": "ikeiuosaaamkouuu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851794": [
        {
            "ioc_value": "ikesmyimaskqkiaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851795": [
        {
            "ioc_value": "ikgiikscecyugswi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851796": [
        {
            "ioc_value": "ikguakuwyumugium.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851764": [
        {
            "ioc_value": "guuckmgogwiceiyq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851765": [
        {
            "ioc_value": "guwyueikoyikgmaw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851766": [
        {
            "ioc_value": "guyekosmoakcaqiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851767": [
        {
            "ioc_value": "guyiyaeemsykycuc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851768": [
        {
            "ioc_value": "ieaqiayismkgakoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851769": [
        {
            "ioc_value": "iecggkwkukscsekw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851770": [
        {
            "ioc_value": "ieeasswmaoiwygsw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851771": [
        {
            "ioc_value": "iegswyuwqiuiyguu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851772": [
        {
            "ioc_value": "iekcmgmoewumgcaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851773": [
        {
            "ioc_value": "iemeeycwsgesuouw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851774": [
        {
            "ioc_value": "iemscwiwqmuecqci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851775": [
        {
            "ioc_value": "ieoekamqmseuwgoa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851776": [
        {
            "ioc_value": "ieoscasoaisoqasa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851777": [
        {
            "ioc_value": "ieoysymkweoqmaci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851778": [
        {
            "ioc_value": "ieqgmgywewecmaco.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851779": [
        {
            "ioc_value": "ieqqusaugaoygmui.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851780": [
        {
            "ioc_value": "iesicoieqkwwkyas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851781": [
        {
            "ioc_value": "iesuegoaiwmwuccs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851749": [
        {
            "ioc_value": "gomucsqgmoassouo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851750": [
        {
            "ioc_value": "gucqmqymoaaqammq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851751": [
        {
            "ioc_value": "gueymguoqysusuwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851752": [
        {
            "ioc_value": "guiwqqukagiywike.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851753": [
        {
            "ioc_value": "gukccqauswacuaaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851754": [
        {
            "ioc_value": "gukeasiiqcwuiiqw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851755": [
        {
            "ioc_value": "gukikuwwwwycqgqo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851756": [
        {
            "ioc_value": "gumiymwigooywusk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851757": [
        {
            "ioc_value": "guoaywqggoswoqmq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851758": [
        {
            "ioc_value": "guoeokcauqwmsgsm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851759": [
        {
            "ioc_value": "guomcyaaigigseeq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851760": [
        {
            "ioc_value": "guqimquoyqueqquk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851761": [
        {
            "ioc_value": "gusakccgyqogeass.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851762": [
        {
            "ioc_value": "gusgiaagmgoamioq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851763": [
        {
            "ioc_value": "gusgkwuwsgqkeeoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851735": [
        {
            "ioc_value": "ggqmoicywymiucgo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851736": [
        {
            "ioc_value": "ggqmuksckqowmcog.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851737": [
        {
            "ioc_value": "ggquyiaqciasiokc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851738": [
        {
            "ioc_value": "ggumeqygucsgqiss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851739": [
        {
            "ioc_value": "ggweckyuqeygakyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851740": [
        {
            "ioc_value": "ggwuesucikscgsay.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851741": [
        {
            "ioc_value": "ggymiagewkimcaqu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851742": [
        {
            "ioc_value": "gocogmqsgyqqmeis.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851743": [
        {
            "ioc_value": "goeemwsgkegoycwq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851744": [
        {
            "ioc_value": "goeuaigkucuigaou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851745": [
        {
            "ioc_value": "gogyweowscmmeumo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851746": [
        {
            "ioc_value": "goigeqiawsogwgke.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851747": [
        {
            "ioc_value": "gokksosyecuwukcw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851748": [
        {
            "ioc_value": "gokooiuegwiiiiys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851718": [
        {
            "ioc_value": "gawiaggegqkowqms.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851719": [
        {
            "ioc_value": "gawwykasiaowgkcu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851720": [
        {
            "ioc_value": "gayioegcywyyusga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851721": [
        {
            "ioc_value": "gayoouakiiesssse.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851722": [
        {
            "ioc_value": "gayqkcausycqmcuq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851723": [
        {
            "ioc_value": "gayssoawioymwyuk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851724": [
        {
            "ioc_value": "ggaicciaoygoagio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851725": [
        {
            "ioc_value": "ggasoaommseoqmqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851726": [
        {
            "ioc_value": "ggasusyoqoqukmme.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851727": [
        {
            "ioc_value": "ggaymgcuqqoggesc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851728": [
        {
            "ioc_value": "ggicieaoowskgosa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851729": [
        {
            "ioc_value": "ggmwswweqysccskq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851730": [
        {
            "ioc_value": "ggogmaoyoguaycie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851731": [
        {
            "ioc_value": "ggoigaeocaywuecw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851732": [
        {
            "ioc_value": "ggqcsymsiueiygci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851733": [
        {
            "ioc_value": "ggqcwaaigwceaoia.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851734": [
        {
            "ioc_value": "ggqkmqwcwemsyyaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851703": [
        {
            "ioc_value": "gaiyqqkisasaaeyi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851704": [
        {
            "ioc_value": "gakaoscogwowcqom.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851705": [
        {
            "ioc_value": "gakceoyoeocomioe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851706": [
        {
            "ioc_value": "gakkuawkwciycyeg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851707": [
        {
            "ioc_value": "gakwiockeoeqgsqw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851708": [
        {
            "ioc_value": "gamksygwmsaayqmm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851709": [
        {
            "ioc_value": "gaoaigioyocckkey.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851710": [
        {
            "ioc_value": "gaqcskwuoowsmomo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851711": [
        {
            "ioc_value": "gaqkweawewiyuimg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851712": [
        {
            "ioc_value": "gaqqqccykioaegss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851713": [
        {
            "ioc_value": "gascwmskqoggmyki.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851714": [
        {
            "ioc_value": "gasmoceikmoswaqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851715": [
        {
            "ioc_value": "gaukooiqcwkmwkua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851716": [
        {
            "ioc_value": "gauoqigcuaqsmmou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851717": [
        {
            "ioc_value": "gaweueagukggakmg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851686": [
        {
            "ioc_value": "gaaeacuogsywmiue.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851687": [
        {
            "ioc_value": "gaagkgwmciyykqeu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851688": [
        {
            "ioc_value": "gaaiumckmyummmyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851689": [
        {
            "ioc_value": "gaauqaeqcyaygees.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851690": [
        {
            "ioc_value": "gacgmicogiqymeaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851691": [
        {
            "ioc_value": "gaciaaqgsmuswugg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851692": [
        {
            "ioc_value": "gacoygyuqysscoyw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851693": [
        {
            "ioc_value": "gacwkuoemkiyccss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851694": [
        {
            "ioc_value": "gacyqsgoawsgkyuq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851695": [
        {
            "ioc_value": "gaeaoqkamaucasuk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851696": [
        {
            "ioc_value": "gaeowickausikmew.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851697": [
        {
            "ioc_value": "gaeucikkcqiyecyc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851698": [
        {
            "ioc_value": "gaewwmsaeqckmoio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851699": [
        {
            "ioc_value": "gagayksccyoaegsy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851700": [
        {
            "ioc_value": "gaiawkqymeqmqwci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851701": [
        {
            "ioc_value": "gaiqcmwiuiaiwwcq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851702": [
        {
            "ioc_value": "gaiwmqgquwgikyum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851669": [
        {
            "ioc_value": "ewgcykacmokegoee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851670": [
        {
            "ioc_value": "ewgwucwuaiqswyeo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851671": [
        {
            "ioc_value": "ewgymogckysisaaw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851672": [
        {
            "ioc_value": "ewiskeagmkgyskyc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851673": [
        {
            "ioc_value": "ewiyswswmqwsccog.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851674": [
        {
            "ioc_value": "ewkeqaccuqoqwyyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851675": [
        {
            "ioc_value": "ewkggaewcaagmkus.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851676": [
        {
            "ioc_value": "ewoasiiiaggammko.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851677": [
        {
            "ioc_value": "ewocyiqaioawskoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851678": [
        {
            "ioc_value": "ewomkgwgaksogouu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851679": [
        {
            "ioc_value": "ewommamkwuaekyss.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851680": [
        {
            "ioc_value": "ewoswwmkeauescuk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851681": [
        {
            "ioc_value": "ewqyiwwswagykcyg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851682": [
        {
            "ioc_value": "ewsiocqguamqsoac.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851683": [
        {
            "ioc_value": "ewwuwikyomgeqmww.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851684": [
        {
            "ioc_value": "ewwyeywqaqwqiusw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851685": [
        {
            "ioc_value": "ewygquiagosmykcu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851652": [
        {
            "ioc_value": "eqgiuyokqwcokkmm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851653": [
        {
            "ioc_value": "eqgmkcwwgeyuwcsw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851654": [
        {
            "ioc_value": "eqiieaooiyyswome.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851655": [
        {
            "ioc_value": "eqikomeaswogskau.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851656": [
        {
            "ioc_value": "eqkeggmoowumqaec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851657": [
        {
            "ioc_value": "eqqeymgsiyuyegaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851658": [
        {
            "ioc_value": "eqsewksioowmmmgw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851659": [
        {
            "ioc_value": "eqsuuiqsogqiqyws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851660": [
        {
            "ioc_value": "equecgemyikeqqga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851661": [
        {
            "ioc_value": "eqyoosykksekcqyy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851662": [
        {
            "ioc_value": "ewaouoqocowsycco.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851663": [
        {
            "ioc_value": "ewawggussgamswao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851664": [
        {
            "ioc_value": "ewaysyoicmgmmcio.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851665": [
        {
            "ioc_value": "ewckieomgesgkwsg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851666": [
        {
            "ioc_value": "ewcswekywiwaoqii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851667": [
        {
            "ioc_value": "eweeaygkiuwgwymy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851668": [
        {
            "ioc_value": "ewewgyoqeqaysouo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851636": [
        {
            "ioc_value": "eksmgoeeaoceagca.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851637": [
        {
            "ioc_value": "ekucqgmaymemggow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851638": [
        {
            "ioc_value": "ekussowwgiccymoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851639": [
        {
            "ioc_value": "ekygqaeiiyaieege.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851640": [
        {
            "ioc_value": "ekymawegcmqskcam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851641": [
        {
            "ioc_value": "eoguwycuwkyqkawk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851642": [
        {
            "ioc_value": "eqaksoicusiasqim.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851643": [
        {
            "ioc_value": "eqauckeqymiqcsqa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851644": [
        {
            "ioc_value": "eqaucwwiqikuowei.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851645": [
        {
            "ioc_value": "eqcgwywgecqesisu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851646": [
        {
            "ioc_value": "eqckkyugsgsisasm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851647": [
        {
            "ioc_value": "eqcwuiekcyiesmya.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851648": [
        {
            "ioc_value": "eqcyywsmyqyucsaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851649": [
        {
            "ioc_value": "eqegqmggumoumsyo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851650": [
        {
            "ioc_value": "eqeomamgecusygam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851651": [
        {
            "ioc_value": "eqgegaccaemgyaum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851620": [
        {
            "ioc_value": "ecqwemwwuguosoym.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851621": [
        {
            "ioc_value": "ecseoiioowgsiuci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851622": [
        {
            "ioc_value": "ecsgkcgqsqyasmuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851623": [
        {
            "ioc_value": "ecskkoosuuyocwqe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851624": [
        {
            "ioc_value": "ecsmeuskqaqoikwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851625": [
        {
            "ioc_value": "ecsqkeisymysegkm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851626": [
        {
            "ioc_value": "ecswamaaywukkmik.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851627": [
        {
            "ioc_value": "ecusmmqceswusswo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851628": [
        {
            "ioc_value": "ecwoawoekuewcuke.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851629": [
        {
            "ioc_value": "ekcyiyekyccsikgw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851630": [
        {
            "ioc_value": "ekeeoscmywcmukye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851631": [
        {
            "ioc_value": "ekegosywcuwakwgs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851632": [
        {
            "ioc_value": "ekgyykkawsoaoqme.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851633": [
        {
            "ioc_value": "ekmuwuwowakimqys.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851634": [
        {
            "ioc_value": "ekquegyucicocywa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851635": [
        {
            "ioc_value": "ekquemucssoqqgca.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851605": [
        {
            "ioc_value": "ecekwyoogmoyywgq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851606": [
        {
            "ioc_value": "ecewgycgsseiqyao.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851607": [
        {
            "ioc_value": "ecgkwwikwumookeu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851608": [
        {
            "ioc_value": "ecieeswggsawkusu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851609": [
        {
            "ioc_value": "ecigsmyykauwcqce.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851610": [
        {
            "ioc_value": "eckiqaakqecymmak.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851611": [
        {
            "ioc_value": "eckmkceeucegawow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851612": [
        {
            "ioc_value": "ecmgugcskqeiiaok.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851613": [
        {
            "ioc_value": "ecmsykmiceaqwcmw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851614": [
        {
            "ioc_value": "ecoeoeoakwswwsaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851615": [
        {
            "ioc_value": "ecokgyweeqwgosoy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851616": [
        {
            "ioc_value": "ecomcqgiaguuqwmk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851617": [
        {
            "ioc_value": "ecoocoqeowaygquq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851618": [
        {
            "ioc_value": "ecqioykyqcamsicq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851619": [
        {
            "ioc_value": "ecqqwwywgeoogaiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851591": [
        {
            "ioc_value": "cymmomiwkiqeskiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851592": [
        {
            "ioc_value": "cyqcukcgowcuogga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851593": [
        {
            "ioc_value": "cyqmesgeucuesuae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851594": [
        {
            "ioc_value": "cyqomoscemsacmig.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851595": [
        {
            "ioc_value": "cyqqcwceqaqqmsuq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851596": [
        {
            "ioc_value": "cysmomswcqwuwwas.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851597": [
        {
            "ioc_value": "cyswywukoyyeciuy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851598": [
        {
            "ioc_value": "cywkcgcckgyiaoai.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851599": [
        {
            "ioc_value": "cyygiqguqusuqcuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851600": [
        {
            "ioc_value": "cyysmscysqmwkqmo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851601": [
        {
            "ioc_value": "eaeqoumsiggwqwqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851602": [
        {
            "ioc_value": "ecaakmuwiwwesugo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851603": [
        {
            "ioc_value": "ecccaqcooiqsacuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851604": [
        {
            "ioc_value": "ecegswwqsqeuoyow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851575": [
        {
            "ioc_value": "cssaaiukomkasyuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851576": [
        {
            "ioc_value": "cssekgkqiayacmwc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851577": [
        {
            "ioc_value": "cssemisoskiawsiy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851578": [
        {
            "ioc_value": "cssqyeguascqyqae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851579": [
        {
            "ioc_value": "cssuagiamskkscmg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851580": [
        {
            "ioc_value": "cswmuuocsqymkiim.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851581": [
        {
            "ioc_value": "cswsyscciioiguci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851582": [
        {
            "ioc_value": "cswysawsmkoqcwga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851583": [
        {
            "ioc_value": "csysuceoqmmgemea.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851584": [
        {
            "ioc_value": "cyceykkyisyoccuk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851585": [
        {
            "ioc_value": "cygssyoikeiaeaye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851586": [
        {
            "ioc_value": "cyguauuqseuccaew.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851587": [
        {
            "ioc_value": "cyiiwwigcsgyyicw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851588": [
        {
            "ioc_value": "cyikiigogaigomci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851589": [
        {
            "ioc_value": "cyisgkgmomimayiq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851590": [
        {
            "ioc_value": "cykmgcciguiacecy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851560": [
        {
            "ioc_value": "cscysekqmcyygiek.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851561": [
        {
            "ioc_value": "cseamukoaooikoam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851562": [
        {
            "ioc_value": "csguqkmiaeuqmica.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851563": [
        {
            "ioc_value": "csgwiiquessimkgw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851564": [
        {
            "ioc_value": "csikiciuauquyeis.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851565": [
        {
            "ioc_value": "csiuguksgomquyei.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851566": [
        {
            "ioc_value": "csiwqocgciykmscc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851567": [
        {
            "ioc_value": "csiwsekmsgogooiw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851568": [
        {
            "ioc_value": "cskewwkgggceyayy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851569": [
        {
            "ioc_value": "cskmgyysogmgsigg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851570": [
        {
            "ioc_value": "csmiemokwuusmysq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851571": [
        {
            "ioc_value": "csoeugwmissoyiuw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851572": [
        {
            "ioc_value": "csqccqkiwogqiime.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851573": [
        {
            "ioc_value": "csqcocscsuwwioco.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851574": [
        {
            "ioc_value": "csqoececackykgag.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851542": [
        {
            "ioc_value": "cmgcqegciwikayuw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851543": [
        {
            "ioc_value": "cmgkcoaoqkaegsoe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851544": [
        {
            "ioc_value": "cmgkgqwgugmkswom.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851545": [
        {
            "ioc_value": "cmiaqsosywyqygqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851546": [
        {
            "ioc_value": "cmigckmkigsoguiu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851547": [
        {
            "ioc_value": "cmkwgaoikmiomcay.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851548": [
        {
            "ioc_value": "cmouauugyssmciks.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851549": [
        {
            "ioc_value": "cmuekysqcogeyciu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851550": [
        {
            "ioc_value": "cmueqqqggcyqecie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851551": [
        {
            "ioc_value": "cmugkyqygiequkuu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851552": [
        {
            "ioc_value": "cmukogeeuiwyaeyy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851553": [
        {
            "ioc_value": "cmuyoyuqcyeaccco.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851554": [
        {
            "ioc_value": "cmymgykayckguwou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851555": [
        {
            "ioc_value": "csaagqcouseqiika.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851556": [
        {
            "ioc_value": "csawaogwyakyqyuo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851557": [
        {
            "ioc_value": "csayeccyigcqgcay.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851558": [
        {
            "ioc_value": "cscsuwiagiusosoi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851559": [
        {
            "ioc_value": "cscwgceyowwcccii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851524": [
        {
            "ioc_value": "auykkgimyugaugye.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851525": [
        {
            "ioc_value": "auyyqkmswyesycqw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851526": [
        {
            "ioc_value": "ceoasyigymmigmgi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851527": [
        {
            "ioc_value": "cgmoeigcwomskamc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851528": [
        {
            "ioc_value": "cgmwawugukquwswa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851529": [
        {
            "ioc_value": "cgsweaggegiayyeq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851530": [
        {
            "ioc_value": "cguaymoewggocess.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851531": [
        {
            "ioc_value": "cguigsayiosckesq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851532": [
        {
            "ioc_value": "cguwweusuyqcemww.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851533": [
        {
            "ioc_value": "cgwiokykqwuemuwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851534": [
        {
            "ioc_value": "cmaogogisysiceya.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851535": [
        {
            "ioc_value": "cmaugmucqookyacg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851536": [
        {
            "ioc_value": "cmayecgeeaaygiae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851537": [
        {
            "ioc_value": "cmcawouuyeiqyyim.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851538": [
        {
            "ioc_value": "cmcsuqkyokmimmow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851539": [
        {
            "ioc_value": "cmcwkuyeemgoigii.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851540": [
        {
            "ioc_value": "cmecwwocgagqccwi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851541": [
        {
            "ioc_value": "cmessseusksmsiam.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851509": [
        {
            "ioc_value": "auakuqmwimksosqw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851510": [
        {
            "ioc_value": "aucceqaqcqqkcsyc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851511": [
        {
            "ioc_value": "augcigegkwegqwqk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851512": [
        {
            "ioc_value": "augqaayuywkucywy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851513": [
        {
            "ioc_value": "auikgecaauwqaqyy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851514": [
        {
            "ioc_value": "aumiamciyyywkeai.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851515": [
        {
            "ioc_value": "auokkscosqimmowa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851516": [
        {
            "ioc_value": "auqyuyekqcegwuem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851517": [
        {
            "ioc_value": "ausicsckckkoaiaq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851518": [
        {
            "ioc_value": "auugqmmuscykqygy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851519": [
        {
            "ioc_value": "auumeyoceeqkomqc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851520": [
        {
            "ioc_value": "auuuesswgauuwkow.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851521": [
        {
            "ioc_value": "auwomcuycgsamskq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851522": [
        {
            "ioc_value": "auwqeoswoesauqgm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851523": [
        {
            "ioc_value": "auwqymmgeokeuugy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851495": [
        {
            "ioc_value": "aoqasikiwwoqqcem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851496": [
        {
            "ioc_value": "aoqkeakmsgmmyaum.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851497": [
        {
            "ioc_value": "aoqwgycaesckcsay.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851498": [
        {
            "ioc_value": "aosccegsmweggymu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851499": [
        {
            "ioc_value": "aosiuwiwgmougoga.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851500": [
        {
            "ioc_value": "aosiuwsmqwieyuqm.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851501": [
        {
            "ioc_value": "aosiweuosuqkkwqy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851502": [
        {
            "ioc_value": "aosuemyyymciamoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851503": [
        {
            "ioc_value": "aouokogwwygwiiso.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851504": [
        {
            "ioc_value": "aowickcyqoksieim.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851505": [
        {
            "ioc_value": "aoyccseqyoiqqema.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851506": [
        {
            "ioc_value": "aoygegmukgsguiqg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851507": [
        {
            "ioc_value": "aoykecyskumssicc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851508": [
        {
            "ioc_value": "aoyokswosmsmoeae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851476": [
        {
            "ioc_value": "aoaqamyyeyaiysee.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851477": [
        {
            "ioc_value": "aociemqseuocooaw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851478": [
        {
            "ioc_value": "aoeqaaykywimaasi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851479": [
        {
            "ioc_value": "aogimmwoaimsawaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851480": [
        {
            "ioc_value": "aogooyauimkssqmo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851481": [
        {
            "ioc_value": "aogsaecmsgsykwoi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851482": [
        {
            "ioc_value": "aogyaqcaokiukgoc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851483": [
        {
            "ioc_value": "aoigqgagamiukigg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851484": [
        {
            "ioc_value": "aoiqwmskmkawwsyy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851485": [
        {
            "ioc_value": "aokcasmuguuokeqq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851486": [
        {
            "ioc_value": "aokkescwusgagyoq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851487": [
        {
            "ioc_value": "aokmsiksywgmyuwu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851488": [
        {
            "ioc_value": "aomaecoycyoyqekk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851489": [
        {
            "ioc_value": "aomgiycykcyqgqec.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851490": [
        {
            "ioc_value": "aomskgiiekaakimk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851491": [
        {
            "ioc_value": "aooaeaeqweauykua.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851492": [
        {
            "ioc_value": "aoogkekciwaykqeg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851493": [
        {
            "ioc_value": "aooqcicaokcwyuac.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851494": [
        {
            "ioc_value": "aoosqoeckeswiuic.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851457": [
        {
            "ioc_value": "aigyuukouqaiuwms.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851458": [
        {
            "ioc_value": "aiiwsqemgcoagoem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851459": [
        {
            "ioc_value": "aikuqommeauisccy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851460": [
        {
            "ioc_value": "aikyoyiamaeiiqsq.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851461": [
        {
            "ioc_value": "aimgyuksyaqwgmck.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851462": [
        {
            "ioc_value": "aimiseaukkgkskaw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851463": [
        {
            "ioc_value": "aimoyswgwskqwgcc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851464": [
        {
            "ioc_value": "aioqwiqcmsgcuwmg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851465": [
        {
            "ioc_value": "aiqikqayagwuswgg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851466": [
        {
            "ioc_value": "aisckkoygksoeiwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851467": [
        {
            "ioc_value": "aisowckweggqyuoo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851468": [
        {
            "ioc_value": "aisowuqoigwmyswa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851469": [
        {
            "ioc_value": "aiusqiayuyasssmc.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851470": [
        {
            "ioc_value": "aiwicaguewkmuwae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851471": [
        {
            "ioc_value": "aiwkkmcgiaqgmwyg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851472": [
        {
            "ioc_value": "aiwkokmmoweqwusa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851473": [
        {
            "ioc_value": "aiyweowgoymswqos.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851474": [
        {
            "ioc_value": "amyguomycmsqwiqe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851475": [
        {
            "ioc_value": "aoaeqqyiscysyqwy.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851442": [
        {
            "ioc_value": "acomuowuwwisieic.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851443": [
        {
            "ioc_value": "acseuuqmmmswmmuu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851444": [
        {
            "ioc_value": "acuksqoyyqacyqya.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851445": [
        {
            "ioc_value": "acusoiwwwqcaaqwk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851446": [
        {
            "ioc_value": "acuwicecgicucucu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851447": [
        {
            "ioc_value": "acwkwkeigqemkgqi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851448": [
        {
            "ioc_value": "aiacwsyguwmiquie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851449": [
        {
            "ioc_value": "aiaikqkmoyomaigw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851450": [
        {
            "ioc_value": "aiaugaiggciaoekg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851451": [
        {
            "ioc_value": "aicawckmgkkccuou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851452": [
        {
            "ioc_value": "aicgmoaaeycswaoi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851453": [
        {
            "ioc_value": "aicsusamamcmyeeg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851454": [
        {
            "ioc_value": "aieesukoociwagak.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851455": [
        {
            "ioc_value": "aigekqusymaeaqaa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851456": [
        {
            "ioc_value": "aigmwmiksuwmoama.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851439": [
        {
            "ioc_value": "acakygeemesqkkyu.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851440": [
        {
            "ioc_value": "accgkogmeuimwuci.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851441": [
        {
            "ioc_value": "acigoquksycmyucs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:12:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851435": [
        {
            "ioc_value": "217.60.195.17:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-16 07:11:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb112bb9c4a80dfa451b0af100d3d4dd90e803575c1e18bc1f72ed222a3ec49b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851436": [
        {
            "ioc_value": "64.89.161.94:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-16 07:11:05",
            "last_seen_utc": "2026-08-31 19:00:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b19a5e35b834b52e290d4287956eaaf93e5d19a92ced03638fd7f0305c23b896/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851434": [
        {
            "ioc_value": "aupzcajq.biabet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 07:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851433": [
        {
            "ioc_value": "213.139.77.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:10:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851432": [
        {
            "ioc_value": "slot-send.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-16 07:09:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b2ad27cbc88b9f9879923572ef88eefc509d69170fba16589ff382da463933/",
            "tags": "MetaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851427": [
        {
            "ioc_value": "wp8zfvuu.sky7bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 06:54:40",
            "last_seen_utc": "2026-07-18 07:56:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851426": [
        {
            "ioc_value": "91.219.238.243:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 06:51:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dcf964e5f926d82bb55b81dc5f21001b28dea9fc2a1f0508c9e07e391b0bd1d6/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851425": [
        {
            "ioc_value": "144.31.168.100:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-16 06:44:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/545916cb0c7569ed136d04e3e71446bca2717a883f5f16a17f8cc32189c93d52/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851424": [
        {
            "ioc_value": "31.77.144.86:9469",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-16 06:42:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d066c9129eaa023a8841cbca3cd3586e217abd3517d193fd432b4a8660cf02c4/",
            "tags": "SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851423": [
        {
            "ioc_value": "5m1ugnlr.yekbetyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 06:36:29",
            "last_seen_utc": "2026-07-20 04:21:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851422": [
        {
            "ioc_value": "kgfkfhqgg.gem90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 06:30:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851421": [
        {
            "ioc_value": "ohdvttqo.tampabayspin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 06:15:25",
            "last_seen_utc": "2026-07-19 18:02:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851417": [
        {
            "ioc_value": "extranet-partner-report.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-16 06:07:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851418": [
        {
            "ioc_value": "drive-mail-folder9133.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-16 06:07:36",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851413": [
        {
            "ioc_value": "fmgvaoemg.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 05:41:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851412": [
        {
            "ioc_value": "cdctvukr.taktikkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 05:30:31",
            "last_seen_utc": "2026-07-21 04:27:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851411": [
        {
            "ioc_value": "bgzdrdniv.venus90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 05:28:26",
            "last_seen_utc": "2026-07-18 06:10:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851408": [
        {
            "ioc_value": "5.79.70.5:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-16 05:05:04",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851407": [
        {
            "ioc_value": "cdbxemdoq.toofan90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 05:03:25",
            "last_seen_utc": "2026-07-18 01:01:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851406": [
        {
            "ioc_value": "6lphdepl.sibbet90iran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 04:53:56",
            "last_seen_utc": "2026-07-17 00:41:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851405": [
        {
            "ioc_value": "i365pptc.lion1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 04:53:03",
            "last_seen_utc": "2026-07-19 09:55:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851404": [
        {
            "ioc_value": "fcmznlck.hazaratbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 04:45:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851403": [
        {
            "ioc_value": "196.251.107.60:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:34:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85653065a3e7a86fb2bdc5e06c7a54808b24740b798089ca081ebd87bfceea93/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851349": [
        {
            "ioc_value": "Toureurpi51924.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-16 04:25:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "HeckinTeagan"
        }
    ],
    "1851353": [
        {
            "ioc_value": "https://petx.vet/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/petx.vet",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851354": [
        {
            "ioc_value": "85.11.167.190:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:14",
            "last_seen_utc": "2026-07-15 23:50:42",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptomining,Diicot,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1851355": [
        {
            "ioc_value": "5.178.96.15:222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptomining,Diicot,ElPatrono1337,GPU-hunter,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1851356": [
        {
            "ioc_value": "31.57.105.94:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptomining,Diicot,ElPatrono1337,GPU-hunter,Mexals,Zephyr",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1851370": [
        {
            "ioc_value": "120.192.20.243:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-16 04:25:10",
            "last_seen_utc": "2026-07-20 06:05:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "24444,c2,censys,quasar",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1851373": [
        {
            "ioc_value": "http://j9af4sr.guru",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-16 04:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "amos,c2",
            "anonymous": 0,
            "reporter": "HeckinTeagan"
        }
    ],
    "1851374": [
        {
            "ioc_value": "http://196.251.107.163/ca2f6543a0826c0f55e0.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-16 04:25:06",
            "last_seen_utc": "2026-08-27 07:29:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "build,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1851392": [
        {
            "ioc_value": "80.76.49.99:8040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/shinysp1d3r-intel",
            "tags": "evilconwi,live,rogue-rmm,screenconnect",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851393": [
        {
            "ioc_value": "services-server0-web.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/shinysp1d3r-intel",
            "tags": "evilconwi,live,rogue-rmm,screenconnect",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851394": [
        {
            "ioc_value": "https://raiatec.ir/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/raiatec.ir",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851396": [
        {
            "ioc_value": "https://catholicsma.com/h4r2.html?v=mxhrbmchnv",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-16 04:25:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/catholicsma.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851401": [
        {
            "ioc_value": "xquxoceqj.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 04:06:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851397": [
        {
            "ioc_value": "14.29.160.181:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-16 04:05:05",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851395": [
        {
            "ioc_value": "qfammnuy.hazaratbet.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 03:58:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851391": [
        {
            "ioc_value": "vqsoqrdq.hazarat.now",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 03:13:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851390": [
        {
            "ioc_value": "rmxixoixm.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 03:06:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851384": [
        {
            "ioc_value": "zdjnhqub.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 02:54:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851383": [
        {
            "ioc_value": "hardydiagnostics.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 02:35:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bc2d5313943d2e4a33cdb0a4708c6ec94c60f26ae402626caf970e283d0ad9d4/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851382": [
        {
            "ioc_value": "vusjrbtl.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 02:28:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851381": [
        {
            "ioc_value": "5.56.25.183:7033",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-16 02:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851375": [
        {
            "ioc_value": "eturxuynx.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 02:02:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851372": [
        {
            "ioc_value": "paevzvhgt.efbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 01:41:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851371": [
        {
            "ioc_value": "54snw6zk.nextbahis.coupons",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 01:36:54",
            "last_seen_utc": "2026-07-16 23:40:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851367": [
        {
            "ioc_value": "kfpjbqczj.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 01:02:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851366": [
        {
            "ioc_value": "nboshbzcj.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 00:56:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851365": [
        {
            "ioc_value": "e2u97o8c.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 00:53:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851364": [
        {
            "ioc_value": "jmlhfhrif.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 00:11:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851358": [
        {
            "ioc_value": "tiojsrajb.gem90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-16 00:00:44",
            "last_seen_utc": "2026-07-16 21:39:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851357": [
        {
            "ioc_value": "doj7trs7.kenzobet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 23:52:51",
            "last_seen_utc": "2026-07-18 05:53:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851352": [
        {
            "ioc_value": "acnuzqcgq.daddybetiran.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 23:25:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851339": [
        {
            "ioc_value": "ueirqemz.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 22:54:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851338": [
        {
            "ioc_value": "jtbbsdahq.gamehazarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 22:53:52",
            "last_seen_utc": "2026-07-16 15:10:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851321": [
        {
            "ioc_value": "aweubyemm.boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 22:39:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851317": [
        {
            "ioc_value": "sndexiwvd.boro3.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 21:56:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851316": [
        {
            "ioc_value": "vvopvrgbi.gamehazarat.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 21:55:15",
            "last_seen_utc": "2026-07-19 20:41:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851315": [
        {
            "ioc_value": "107.174.254.62:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-15 21:46:16",
            "last_seen_utc": "2026-08-22 14:47:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851314": [
        {
            "ioc_value": "ulzjpypuy.nextbahis.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 21:10:02",
            "last_seen_utc": "2026-07-16 16:10:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851308": [
        {
            "ioc_value": "https://burutrading.com/h4r2.html",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 21:02:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/burutrading.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851307": [
        {
            "ioc_value": "xpzjxywai.funxbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 20:56:47",
            "last_seen_utc": "2026-07-21 01:28:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851306": [
        {
            "ioc_value": "wj3om1ni.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 20:52:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851305": [
        {
            "ioc_value": "192.253.228.193:4412",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-15 20:45:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12b920865bc8bd9bad20650a0f7849fe2856de3d72bc5f1a93bb288e8eefaca2/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851304": [
        {
            "ioc_value": "192.253.228.193:4411",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-15 20:45:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/12b920865bc8bd9bad20650a0f7849fe2856de3d72bc5f1a93bb288e8eefaca2/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851303": [
        {
            "ioc_value": "tafhu17n.nextbahis.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 20:36:09",
            "last_seen_utc": "2026-07-28 14:03:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851302": [
        {
            "ioc_value": "qzjihweyr.nextbahis.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 20:27:34",
            "last_seen_utc": "2026-07-20 15:21:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851244": [
        {
            "ioc_value": "a8bce1f0f47ce0d99f70cb9fada5bc53162d7c4e13643fa8fb47dd07ae656487",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851245": [
        {
            "ioc_value": "88a4125114cfe57530d3fbcbd156280ae1f33e192b769c96f1fbab7411fd0a98",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851246": [
        {
            "ioc_value": "b54739eeed5e94c43e842add170215fe4b29395794fad74b8c984cc8d2ddf5db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851247": [
        {
            "ioc_value": "7a8af8f1ae8a92da1a0ef308244614985c4e06a24fe92309c1f83ba51d89b198",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851248": [
        {
            "ioc_value": "eb9593141d9fa54bc5efd32317a6937a0b0ea32af43a31fd81df409f4c946038",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851249": [
        {
            "ioc_value": "430509e6c4abd1f99e66c95d80b73ea13a05ff7eb4607e825468bf8a3cb43de1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851250": [
        {
            "ioc_value": "7f20a8ff2715a03992bae2fe9bad9902400167ffd12c925baf34ecece5bc5599",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851251": [
        {
            "ioc_value": "d83c065f3cca6b3e7c3c2950dd7f3d35883b060663978e67a2d2a7d5be8c8c18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851252": [
        {
            "ioc_value": "5978bfbdeb6870a58fee2a41053ef1ed48de69fce47eca045cef895cddccedf4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851253": [
        {
            "ioc_value": "f713df2282855e0c7a30c01351610ae7f23e5b7c1e567dfd262d4560ef7c4d0e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851254": [
        {
            "ioc_value": "221c8e492f89b7dd3ae693c08e2106c0696472b1a23e48b65b4d90eb520d1e96",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851255": [
        {
            "ioc_value": "996b279cf54c713f74de0c4dc33f5342204646dd574d782644eb3856003dcbae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 20:21:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851256": [
        {
            "ioc_value": "envi12.dynuddns.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 20:21:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1851263": [
        {
            "ioc_value": "113.19.109.137:8635",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-15 20:21:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot,ssh-dropper",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1851274": [
        {
            "ioc_value": "https://tscd.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 20:21:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tscd.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851296": [
        {
            "ioc_value": "quetrex.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-15 20:21:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/ce7b87fe-c180-4288-9220-01721f5d0d39",
            "tags": "hijackloader,meshagent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1851297": [
        {
            "ioc_value": "mygameszones.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-15 20:21:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/ce7b87fe-c180-4288-9220-01721f5d0d39",
            "tags": "hijackloader,meshagent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1851291": [
        {
            "ioc_value": "borcwefhl.esteglal.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 19:56:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851289": [
        {
            "ioc_value": "64.23.182.12:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-15 19:46:03",
            "last_seen_utc": "2026-08-19 08:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851290": [
        {
            "ioc_value": "64.89.160.127:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 19:46:03",
            "last_seen_utc": "2026-08-15 08:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851288": [
        {
            "ioc_value": "5.56.25.238:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 19:45:56",
            "last_seen_utc": "2026-08-15 08:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851286": [
        {
            "ioc_value": "216.250.249.83:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 19:45:24",
            "last_seen_utc": "2026-08-15 08:45:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851287": [
        {
            "ioc_value": "216.250.249.83:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 19:45:24",
            "last_seen_utc": "2026-08-15 18:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851284": [
        {
            "ioc_value": "204.44.93.75:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 19:44:38",
            "last_seen_utc": "2026-08-15 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851285": [
        {
            "ioc_value": "204.44.93.75:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 19:44:38",
            "last_seen_utc": "2026-08-15 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851283": [
        {
            "ioc_value": "185.212.131.22:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-15 19:44:19",
            "last_seen_utc": "2026-09-01 02:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851282": [
        {
            "ioc_value": "185.115.164.59:7723",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 19:44:13",
            "last_seen_utc": "2026-08-15 08:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851281": [
        {
            "ioc_value": "178.73.192.16:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-15 19:44:08",
            "last_seen_utc": "2026-08-15 08:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851280": [
        {
            "ioc_value": "162.35.175.224:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-15 19:43:55",
            "last_seen_utc": "2026-08-26 08:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851279": [
        {
            "ioc_value": "104.225.104.237:3020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-15 19:43:16",
            "last_seen_utc": "2026-08-14 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851278": [
        {
            "ioc_value": "104.168.134.25:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 19:43:15",
            "last_seen_utc": "2026-08-16 18:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851277": [
        {
            "ioc_value": "103.83.86.48:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 19:43:14",
            "last_seen_utc": "2026-08-15 08:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851276": [
        {
            "ioc_value": "103.11.41.10:17328",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 19:43:06",
            "last_seen_utc": "2026-08-15 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851275": [
        {
            "ioc_value": "ajzzqcazg.nextbahis.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 19:37:43",
            "last_seen_utc": "2026-07-23 10:41:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851273": [
        {
            "ioc_value": "gtm-service.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 19:22:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1851262": [
        {
            "ioc_value": "rxxcydjgk.enfejartime.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 18:56:05",
            "last_seen_utc": "2026-07-16 10:01:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851261": [
        {
            "ioc_value": "http://vertefx.top:7538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-15 18:55:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/966365f729aadfc95f0450a1a605422b63d7fc2628310108e26054ed04fbf03b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851260": [
        {
            "ioc_value": "tsexoxslh.nextbahis.free",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 18:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851259": [
        {
            "ioc_value": "6fk656iq.irani-music.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 18:51:34",
            "last_seen_utc": "2026-07-17 07:03:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851258": [
        {
            "ioc_value": "gai1ehyu.jetboro.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 18:50:15",
            "last_seen_utc": "2026-07-17 08:48:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851236": [
        {
            "ioc_value": "ffz1et.eightyen1arge.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 17:47:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851227": [
        {
            "ioc_value": "https://softsystems.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:40:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/softsystems.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851228": [
        {
            "ioc_value": "https://maialimentosreales.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:40:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/maialimentosreales.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851229": [
        {
            "ioc_value": "https://waltonsoftware.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:40:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/waltonsoftware.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851230": [
        {
            "ioc_value": "https://sealaunchservices.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:40:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sealaunchservices.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851169": [
        {
            "ioc_value": "https://alianzaamericanaseguros.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:08:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alianzaamericanaseguros.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851170": [
        {
            "ioc_value": "https://caramdistribuciones.com.ar/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:08:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/caramdistribuciones.com.ar",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851171": [
        {
            "ioc_value": "https://dokonalebydleni.cz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:08:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dokonalebydleni.cz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851172": [
        {
            "ioc_value": "https://cmla.blog/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:08:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cmla.blog",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851173": [
        {
            "ioc_value": "https://baumas.no/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:08:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/baumas.no",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851174": [
        {
            "ioc_value": "https://artsunfold.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:08:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/artsunfold.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851187": [
        {
            "ioc_value": "178.128.38.77:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 17:07:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1851188": [
        {
            "ioc_value": "159.65.26.135:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 17:07:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1851189": [
        {
            "ioc_value": "164.92.183.242:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 17:07:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1851193": [
        {
            "ioc_value": "https://cydesys.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cydesys.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851202": [
        {
            "ioc_value": "https://racquetclubofgastonia.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/racquetclubofgastonia.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851203": [
        {
            "ioc_value": "https://quaideazamcollege.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/quaideazamcollege.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851204": [
        {
            "ioc_value": "https://vin2.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vin2.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851205": [
        {
            "ioc_value": "https://sarahcole.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sarahcole.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851206": [
        {
            "ioc_value": "https://thebookoninvesting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thebookoninvesting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851207": [
        {
            "ioc_value": "https://samarkegypt.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/samarkegypt.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851208": [
        {
            "ioc_value": "https://ngb.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ngb.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851209": [
        {
            "ioc_value": "https://racingoperations.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/racingoperations.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851210": [
        {
            "ioc_value": "https://pcl.hamburg/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 17:07:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pcl.hamburg",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851213": [
        {
            "ioc_value": "tssjiwjfx.hazzarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 15:58:42",
            "last_seen_utc": "2026-07-18 19:30:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851212": [
        {
            "ioc_value": "opeendacc.efcasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 15:41:24",
            "last_seen_utc": "2026-07-16 08:10:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851211": [
        {
            "ioc_value": "dohnx2bh.hazaratbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 15:35:23",
            "last_seen_utc": "2026-07-21 02:35:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851201": [
        {
            "ioc_value": "ckugvmkpg.hazarat.now",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 15:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851192": [
        {
            "ioc_value": "154.82.93.200:778",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-15 14:56:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5876be168613a5e77024f79dad518662e8fd418f01d5839fc7e73ecb0f085a92/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851191": [
        {
            "ioc_value": "evfdqijee.efbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 14:42:11",
            "last_seen_utc": "2026-07-16 19:35:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851190": [
        {
            "ioc_value": "tfys92ie.hazzarat.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 14:36:30",
            "last_seen_utc": "2026-07-16 13:03:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851186": [
        {
            "ioc_value": "llgrzomtw.hazaratbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 14:17:53",
            "last_seen_utc": "2026-07-18 18:30:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851185": [
        {
            "ioc_value": "saraviadorablogport.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 14:09:11",
            "last_seen_utc": "2026-07-16 07:21:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1851184": [
        {
            "ioc_value": "2d4e5f6-7a8b-4c2d-9e1f-3b5a7c8d9e0fc.s3.us-east-1.amazonaws.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 14:09:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1851183": [
        {
            "ioc_value": "91.92.241.13:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 14:09:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1851168": [
        {
            "ioc_value": "kxxpvutsn.derbi.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 13:41:40",
            "last_seen_utc": "2026-07-20 18:02:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850986": [
        {
            "ioc_value": "https://asioklaydpory.com/h4r2.html",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 13:26:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/asioklaydpory.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1851060": [
        {
            "ioc_value": "samarkegypt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-15 13:26:02",
            "last_seen_utc": "2026-08-19 21:11:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,Latrodectus,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1851071": [
        {
            "ioc_value": "193.202.84.99:8880",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 13:26:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a1b407a872fe6e53608b7af6a7668a82c440eb24c089ebd8f7694d49285db4ac/",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1851139": [
        {
            "ioc_value": "kcosmetics.kr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 13:25:59",
            "last_seen_utc": "2026-08-26 21:48:10",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "https://www.clickfixed.uk/intel/1372",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1851163": [
        {
            "ioc_value": "hqndcsdha.hazaratbet.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 13:24:15",
            "last_seen_utc": "2026-07-19 04:20:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851157": [
        {
            "ioc_value": "143.110.142.104:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 13:05:05",
            "last_seen_utc": "2026-08-19 07:09:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "supershell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851156": [
        {
            "ioc_value": "hkdcvzivw.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:57:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851155": [
        {
            "ioc_value": "lzlptqkwc.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:44:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851154": [
        {
            "ioc_value": "xtocpnhiv.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:41:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851153": [
        {
            "ioc_value": "pyjaihoat.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:39:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851152": [
        {
            "ioc_value": "cryztbbzl.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:37:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851151": [
        {
            "ioc_value": "uk1nymxr.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:36:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851150": [
        {
            "ioc_value": "kdfjhkykz.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:29:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851149": [
        {
            "ioc_value": "qmrmfxcme.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:27:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851148": [
        {
            "ioc_value": "hgbyapzpe.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:27:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851147": [
        {
            "ioc_value": "tvknglirv.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851146": [
        {
            "ioc_value": "xomsymkut.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851145": [
        {
            "ioc_value": "umkjldsnc.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851133": [
        {
            "ioc_value": "zbxcdsga.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 12:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851132": [
        {
            "ioc_value": "krswsgcg.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 11:58:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851131": [
        {
            "ioc_value": "ncfgesrw.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 11:41:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851130": [
        {
            "ioc_value": "jtdi6w23.biabet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 11:41:33",
            "last_seen_utc": "2026-07-17 19:42:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851129": [
        {
            "ioc_value": "yhiqsntq.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 11:40:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851128": [
        {
            "ioc_value": "0f3c2a17015bb0a23f6ea77eefaf2b2b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-15 11:36:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851124": [
        {
            "ioc_value": "933dae1905bb3785792efe6b22fc73c32da1d4f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-15 11:36:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851125": [
        {
            "ioc_value": "d700d60ff5e0b83309c8fa0f6f962f71",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-15 11:36:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851126": [
        {
            "ioc_value": "9a9d372cc821b6d2f7e30abb80aff7cae841703db0fb78bd859e6581420fbc07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-15 11:36:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851127": [
        {
            "ioc_value": "0838936a59ac61612dc2937993ec1ae60f12c6df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-15 11:36:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851121": [
        {
            "ioc_value": "889cfba23f6dd239ae496099f0117e28afd3b190",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851122": [
        {
            "ioc_value": "e12f2359c07a123a2d80ed1993358515",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851123": [
        {
            "ioc_value": "4e05e6b226ade766091106229105a259325e8289400c4f2ce8576435fd931590",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-15 11:36:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851118": [
        {
            "ioc_value": "cfff61d7105d15e0f55b04437b85bc1655a085c6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851119": [
        {
            "ioc_value": "1a642946760f29766d58bf97d7b003e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851120": [
        {
            "ioc_value": "b90c05f02a075ce083a83a4d200293c5b5872ebda631032a49197907743bc8fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851114": [
        {
            "ioc_value": "31a112aad9a7bddfbb2b8e26e95193ba68cc687e23aa36ea18cf6cb216547831",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851115": [
        {
            "ioc_value": "5fe96b9c8ecba00d9e31ed26b7c1f9e141a4044a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851116": [
        {
            "ioc_value": "7fc5c85ef78d560ed838d206b9144356",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851117": [
        {
            "ioc_value": "3550ec27fd231bf442f81a50e9024377c7f3766140291e7b7d95e762ab1bfb5e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851111": [
        {
            "ioc_value": "b528393be0b45d9f7733f3724ea77e3e13c9acbe22985f1713ccde9aef4cdcf7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851112": [
        {
            "ioc_value": "146abacce03a21d7890a7090e7b612e71ef00d94",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851113": [
        {
            "ioc_value": "6f78795c971999fa0998ea71885020dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851108": [
        {
            "ioc_value": "991548c6e6b6b0fa1984a620a5ebea746d21a5b3cbbf6b4c389e0e6f5bfd13cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-15 11:36:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851109": [
        {
            "ioc_value": "ffac3a4b5df2f35ef101c291ae7acc7b048ebb57",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-15 11:36:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851110": [
        {
            "ioc_value": "7756c713d2320a6efe616217e44b002c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-15 11:36:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851105": [
        {
            "ioc_value": "d6cdd792b00ce9204762d8a6b4a426b8e569cb5f356c512b51fb29514ca11d24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851106": [
        {
            "ioc_value": "c6c3fbed4c2614fa32d54a56e03256263c3c7522",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851107": [
        {
            "ioc_value": "482e5be9438d7a8c515448f7861f2e58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-07-15 11:36:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851102": [
        {
            "ioc_value": "b6e7280ba661be15d93b1f814579580eb7c93e699353a5e79b1e219dec4283ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-15 11:36:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851103": [
        {
            "ioc_value": "12ca315b295820427a520a0467f6e8334d1bec04",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-15 11:36:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851104": [
        {
            "ioc_value": "369affa224fcf1f5107c7914c8d4d85e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-15 11:36:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851099": [
        {
            "ioc_value": "a9b557921c40fd625b775e66d6fd99807058133057e94ee7483990f10817fdb4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-15 11:36:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851100": [
        {
            "ioc_value": "5a3f7098a615342a0f28f60c20aacf35693bdfc9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-15 11:36:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851101": [
        {
            "ioc_value": "527122586ca9de7a2c7b2f54035c4298",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-15 11:36:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851096": [
        {
            "ioc_value": "f2145437eba0d3bb81c9b7bc905b4cd26a546a8b9a958e5e8ad5c38c0323dcda",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-15 11:36:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851097": [
        {
            "ioc_value": "977173776f3cd3005d8c6cc21b12e19712196c05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-15 11:36:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851098": [
        {
            "ioc_value": "08c3a66548259d0589ca348c905ad3ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-15 11:36:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851094": [
        {
            "ioc_value": "b0a40cb77958323603879c3595142914b78c3308",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-15 11:36:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851095": [
        {
            "ioc_value": "c1a5bc0019c3f894bc908e0c0c0e3ff7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-15 11:36:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851091": [
        {
            "ioc_value": "53412b309f4cd4ef623471aa9b017ee7eaac4081",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851092": [
        {
            "ioc_value": "d7891518770b94c0f91d303a1a6d96a4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851093": [
        {
            "ioc_value": "fbec2d3d5a42f56aa8ddda61d924445dfa11580f6b98d34006701639b7d65ad7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-15 11:36:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851088": [
        {
            "ioc_value": "7c939bdb2f802427d8a7b69e15d3986d914b131c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851089": [
        {
            "ioc_value": "90f6a430b6fa883472bfeca9fc46af3e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851090": [
        {
            "ioc_value": "795d128ec0a86ec32764fcde64dba9f4d68274841f5df712747a23eb336abc4d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851085": [
        {
            "ioc_value": "8885493a9c37797de23f65100bd3d932272f8041",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-15 11:36:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851086": [
        {
            "ioc_value": "91ea5ad1a386bf675fc972b879f5638f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-15 11:36:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851087": [
        {
            "ioc_value": "c4a41e9127dc4cd50d2cd11e98013ba59b12d853f5d5732686a2c3bdb1370a98",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851082": [
        {
            "ioc_value": "e138af0fbb68cf6500e45111a19b67a69baa8aff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851083": [
        {
            "ioc_value": "9732ccef82d6d9a01043e3e3aca53463",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851084": [
        {
            "ioc_value": "1c779b7ae8a6e781242c7853e8d809255b8eb0cd598f63a20a5dcc3fe8e104db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-07-15 11:36:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851080": [
        {
            "ioc_value": "f6e79a492bf496a18af4c58dcfb11c98",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851081": [
        {
            "ioc_value": "39a5efdadf567ffb7a89dffffeb6f51e89ea02f4f727219da822b769faafade2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851077": [
        {
            "ioc_value": "73c52089f08fd3c78e5acc88971c6b83",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851078": [
        {
            "ioc_value": "42c875dfcb47118ef39274399fca5a1a990ac8370809ba56728e84958a3f8ef4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851079": [
        {
            "ioc_value": "822a44acc38f171f027235447e0a3ed4d9946882",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-15 11:36:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851075": [
        {
            "ioc_value": "e5f2a58d5213a42f53183a7828b7ff571f0c4e4e025b83fd0eae21c97acaeee9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851076": [
        {
            "ioc_value": "ee6aa408f40f992031604858733c8a5495215295",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 11:36:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1851074": [
        {
            "ioc_value": "dbeasxyp.derbi.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 11:33:37",
            "last_seen_utc": "2026-07-16 14:09:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851073": [
        {
            "ioc_value": "hzbu0kgt.betyekios.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 11:10:21",
            "last_seen_utc": "2026-07-16 14:59:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851072": [
        {
            "ioc_value": "distansae.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 11:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/262a0b5128055fb1099f77b4c8586513c4ad8bdf9658405e1bf90415c09a2d62/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1851070": [
        {
            "ioc_value": "nxyhlvha.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:47:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851069": [
        {
            "ioc_value": "pcipjcar.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:41:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851068": [
        {
            "ioc_value": "i6s46ndy.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:38:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851067": [
        {
            "ioc_value": "mgnj.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:36:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851066": [
        {
            "ioc_value": "litwpjrq.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:36:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851065": [
        {
            "ioc_value": "j1xayyip.bordbett10.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:35:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851064": [
        {
            "ioc_value": "frqbuzgo.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:34:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851063": [
        {
            "ioc_value": "mpygi.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:33:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851062": [
        {
            "ioc_value": "ycrarqcd.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:33:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851061": [
        {
            "ioc_value": "078zq932.betyek.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 10:33:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1851007": [
        {
            "ioc_value": "portablessd.site",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-15 10:14:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850987": [
        {
            "ioc_value": "http://syntaxj.top:6278",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-15 10:01:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/42c875dfcb47118ef39274399fca5a1a990ac8370809ba56728e84958a3f8ef4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850981": [
        {
            "ioc_value": "0rlxki7g.bordbett10.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:56:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850979": [
        {
            "ioc_value": "vjs8k4dd.betyek.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:54:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850972": [
        {
            "ioc_value": "82.47.101.76:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-15 09:46:24",
            "last_seen_utc": "2026-08-16 18:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850971": [
        {
            "ioc_value": "74.0.32.137:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-15 09:46:18",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850969": [
        {
            "ioc_value": "216.250.254.245:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 09:45:31",
            "last_seen_utc": "2026-08-14 18:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850967": [
        {
            "ioc_value": "213.152.186.188:18856",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 09:44:48",
            "last_seen_utc": "2026-08-14 18:44:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850966": [
        {
            "ioc_value": "204.44.69.214:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 09:44:41",
            "last_seen_utc": "2026-08-14 18:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850965": [
        {
            "ioc_value": "192.255.195.147:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 09:44:28",
            "last_seen_utc": "2026-08-14 18:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850964": [
        {
            "ioc_value": "191.104.219.22:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-07-15 09:44:26",
            "last_seen_utc": "2026-08-14 18:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850962": [
        {
            "ioc_value": "124.198.132.119:5220",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 09:43:27",
            "last_seen_utc": "2026-08-14 18:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850961": [
        {
            "ioc_value": "104.225.104.237:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-15 09:43:17",
            "last_seen_utc": "2026-08-16 18:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850960": [
        {
            "ioc_value": "103.11.41.10:62452",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 09:43:08",
            "last_seen_utc": "2026-08-14 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850959": [
        {
            "ioc_value": "103.11.41.10:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 09:43:06",
            "last_seen_utc": "2026-08-14 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850956": [
        {
            "ioc_value": "brmzm.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:40:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850955": [
        {
            "ioc_value": "cgzt.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:38:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850954": [
        {
            "ioc_value": "krdqfpte.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:38:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850952": [
        {
            "ioc_value": "https://maloke.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 09:37:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/maloke.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1850951": [
        {
            "ioc_value": "nkqj.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:29:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850950": [
        {
            "ioc_value": "zxpimegb.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850945": [
        {
            "ioc_value": "xnshgwgf.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:07:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850941": [
        {
            "ioc_value": "jw27s0al.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:04:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850923": [
        {
            "ioc_value": "https://asioklaydpory.com/h4r2.html",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-15 09:03:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1850939": [
        {
            "ioc_value": "hcnmjrat.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 09:02:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850929": [
        {
            "ioc_value": "wagosinga.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.houdini",
            "malware_alias": "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi",
            "malware_printable": "Houdini",
            "first_seen_utc": "2026-07-15 08:56:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/abd4aa5fa228310a6afef8a232f7f8dea6398bf1854d2a0a66f76333d91dba14/",
            "tags": "RAT,WSHRat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850928": [
        {
            "ioc_value": "auth-code-verif.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 08:52:31",
            "last_seen_utc": "2026-07-26 20:22:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850927": [
        {
            "ioc_value": "maloke.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 08:52:29",
            "last_seen_utc": "2026-07-15 12:04:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850925": [
        {
            "ioc_value": "163.245.210.240:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 08:50:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/122ea2e5316fd4d1118531531de2f4bf737166d0f83f0d923529daf234a3a5f3/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850924": [
        {
            "ioc_value": "carcarcarla22.twilightparadox.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 08:46:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/122ea2e5316fd4d1118531531de2f4bf737166d0f83f0d923529daf234a3a5f3/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850922": [
        {
            "ioc_value": "izehzccr.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 08:44:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850921": [
        {
            "ioc_value": "mhyp.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 08:32:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850916": [
        {
            "ioc_value": "109.122.18.38:4525",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 08:12:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a7446556a540e7eb6a5848e8698e040e823348c5c72271c1128f941e89a80cd9/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850915": [
        {
            "ioc_value": "64.89.160.127:4561",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 08:10:42",
            "last_seen_utc": "2026-08-06 08:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bae274a82104ff3de6a373770d83dc1fa222834da8850193148265e606449b47/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850912": [
        {
            "ioc_value": "zelpx.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-15 08:04:08",
            "last_seen_utc": "2026-07-31 12:38:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850911": [
        {
            "ioc_value": "wxxlppea.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 07:49:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850910": [
        {
            "ioc_value": "5.101.81.172:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-15 07:49:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6a12f1abc4da3ddd12c0daa56533ba0f5596bfced9658163e731003db9422cac/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850909": [
        {
            "ioc_value": "133.18.107.191:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 07:45:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/700df84ded9b9c5d9c4dc3ce258bd4db565916ae1dcc7c6c6b623421b718d5c7/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850908": [
        {
            "ioc_value": "106.54.44.181:801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-15 07:41:22",
            "last_seen_utc": "2026-07-18 17:31:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850907": [
        {
            "ioc_value": "116.11.4.167:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-15 07:41:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850906": [
        {
            "ioc_value": "118.89.69.45:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-15 07:41:18",
            "last_seen_utc": "2026-07-29 07:31:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850905": [
        {
            "ioc_value": "pajp.oragh8kaso1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:40:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/902ef58dce89bdb4967c5514c2717aafe592f0e675ea8106270616a4694c01d6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850902": [
        {
            "ioc_value": "gros59kalmso1.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:40:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/902ef58dce89bdb4967c5514c2717aafe592f0e675ea8106270616a4694c01d6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850903": [
        {
            "ioc_value": "gros59kalmso2.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:40:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/902ef58dce89bdb4967c5514c2717aafe592f0e675ea8106270616a4694c01d6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850904": [
        {
            "ioc_value": "metromachine.4nmn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:40:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/442a9fb5c664490d9b8bf41dc2b63e071bd67376118841effcf9ef69e92c5a25/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850900": [
        {
            "ioc_value": "armcobarriersuppliers.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:35:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2895bcd88775c25f9c89af2a85f371fa54fc5b48df774345b76c989f0efb1818/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850901": [
        {
            "ioc_value": "armcobarriersuppliersbk.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:35:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2895bcd88775c25f9c89af2a85f371fa54fc5b48df774345b76c989f0efb1818/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850899": [
        {
            "ioc_value": "77.239.125.25:5041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 07:31:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d4b9c899268f2ce39c69b8ae0c454d320f0c38eec49fa1ee8e9aaca6fe7b2f8a/",
            "tags": "RAT,SheetRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850898": [
        {
            "ioc_value": "216.250.250.247:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 07:31:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fe9faa53e2c69c974ef6e08493beb7a85ec307f34721f53ef2d979d59778279e/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850896": [
        {
            "ioc_value": "216.250.250.247:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 07:30:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fe9faa53e2c69c974ef6e08493beb7a85ec307f34721f53ef2d979d59778279e/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850897": [
        {
            "ioc_value": "216.250.250.247:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 07:30:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fe9faa53e2c69c974ef6e08493beb7a85ec307f34721f53ef2d979d59778279e/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850894": [
        {
            "ioc_value": "102.220.160.104:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:30:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b61df9782f0003db853cb3bde83fa69c72fbef12ed7fd0f139b85ff2e6d97060/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850895": [
        {
            "ioc_value": "161.248.179.182:37171",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:30:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f5076864157a79a819f7deb463194c18f1318f710e630391fe688118c4166577/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850893": [
        {
            "ioc_value": "pnsc.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 07:30:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850891": [
        {
            "ioc_value": "130.12.182.47:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:25:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6bf6a00087aae00b200c602ebc4e2d8a2c15b5f1e7a05e8ee6e5a2d6cd5a0c9a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850892": [
        {
            "ioc_value": "194.59.31.232:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:25:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/530eb6682463ceb6408579b9c995131fb4bb75e80422fce6d9b5d3e734c4ae62/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850890": [
        {
            "ioc_value": "ftp.fundacionpiaz.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-15 07:21:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/92a8c3e419a95289ffb23788926d70322dc5aef94c82ff0a4cff397a33388c89/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850889": [
        {
            "ioc_value": "165.227.80.236:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:20:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d33f6bd48d7a46fa09cebad6a43f82615451d5243c143a7da6aeaebfc24aec64/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850888": [
        {
            "ioc_value": "kavfquba.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 07:19:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850881": [
        {
            "ioc_value": "195.201.39.59:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850882": [
        {
            "ioc_value": "172.233.54.53:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850883": [
        {
            "ioc_value": "116.202.6.159:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850884": [
        {
            "ioc_value": "46.62.203.15:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850885": [
        {
            "ioc_value": "37.27.191.220:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850886": [
        {
            "ioc_value": "157.90.247.15:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850887": [
        {
            "ioc_value": "159.69.204.46:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850880": [
        {
            "ioc_value": "xpo.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850870": [
        {
            "ioc_value": "tdd.ambiltogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850871": [
        {
            "ioc_value": "dtm.ambiltogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850872": [
        {
            "ioc_value": "bdm.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850873": [
        {
            "ioc_value": "gmn.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850874": [
        {
            "ioc_value": "fwh.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850875": [
        {
            "ioc_value": "kss.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850876": [
        {
            "ioc_value": "pve.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850877": [
        {
            "ioc_value": "sra.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850878": [
        {
            "ioc_value": "dum.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850879": [
        {
            "ioc_value": "hab.paptogel.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850861": [
        {
            "ioc_value": "tdd.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850862": [
        {
            "ioc_value": "dtm.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850863": [
        {
            "ioc_value": "gmn.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850864": [
        {
            "ioc_value": "fwh.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850865": [
        {
            "ioc_value": "kss.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850866": [
        {
            "ioc_value": "pve.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850867": [
        {
            "ioc_value": "sra.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850868": [
        {
            "ioc_value": "dum.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850869": [
        {
            "ioc_value": "hab.kijangturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850859": [
        {
            "ioc_value": "https://157.90.247.15/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850860": [
        {
            "ioc_value": "https://159.69.204.46/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:50",
            "last_seen_utc": "2026-08-14 13:57:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850855": [
        {
            "ioc_value": "https://172.233.54.53/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850856": [
        {
            "ioc_value": "https://116.202.6.159/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850857": [
        {
            "ioc_value": "https://46.62.203.15/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850858": [
        {
            "ioc_value": "https://37.27.191.220/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850850": [
        {
            "ioc_value": "https://sra.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850851": [
        {
            "ioc_value": "https://dum.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850852": [
        {
            "ioc_value": "https://hab.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850853": [
        {
            "ioc_value": "https://xpo.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850854": [
        {
            "ioc_value": "https://195.201.39.59/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850845": [
        {
            "ioc_value": "https://bdm.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850846": [
        {
            "ioc_value": "https://gmn.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850847": [
        {
            "ioc_value": "https://fwh.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850848": [
        {
            "ioc_value": "https://kss.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850849": [
        {
            "ioc_value": "https://pve.paptogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850841": [
        {
            "ioc_value": "https://dum.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850842": [
        {
            "ioc_value": "https://hab.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850843": [
        {
            "ioc_value": "https://tdd.ambiltogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850844": [
        {
            "ioc_value": "https://dtm.ambiltogel.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850837": [
        {
            "ioc_value": "https://fwh.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850838": [
        {
            "ioc_value": "https://kss.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850839": [
        {
            "ioc_value": "https://pve.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850840": [
        {
            "ioc_value": "https://sra.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850832": [
        {
            "ioc_value": "https://telegram.me/r7t3at",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:44",
            "last_seen_utc": "2026-08-20 19:37:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850833": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198674661449",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:44",
            "last_seen_utc": "2026-08-20 19:37:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850834": [
        {
            "ioc_value": "https://tdd.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850835": [
        {
            "ioc_value": "https://dtm.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850836": [
        {
            "ioc_value": "https://gmn.kijangturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-15 07:13:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1850831": [
        {
            "ioc_value": "drive-photo-id83123.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 07:10:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850830": [
        {
            "ioc_value": "safeimageguest.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 07:10:18",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850829": [
        {
            "ioc_value": "82.38.171.235:8091",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 07:05:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/31d6f080dee4e86aa08a9ef73c216044c9e046724310b97dbae15cd95d138b15/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850828": [
        {
            "ioc_value": "qds1jo2q.site-shartbandi-pasor.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 07:02:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850827": [
        {
            "ioc_value": "160.25.72.34:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-15 07:00:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15a9a83377456de32bbdb36a8ec3113bf8ca07c884a45617c9410f80990ed4b3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850821": [
        {
            "ioc_value": "e00d92ca28a2cfd75e96f71fc0408747f04942657fcab0f2a25ce79bc3ad23a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-07-15 06:57:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.akamai.com/blog/security-research/2026/jul/langflow-exploited-build-custom-ddos-gafgyt-botnets",
            "tags": "bashlite,botnet,ddos,gafgyt,langflow",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850822": [
        {
            "ioc_value": "38.146.219.149:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-15 06:54:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c28f3bec83935b19e652533c1dd08815cb703c39cf1bd5b8fc260f52cfd0ff39/",
            "tags": "PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850820": [
        {
            "ioc_value": "stickcloth.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 06:51:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850819": [
        {
            "ioc_value": "beefsofa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-15 06:48:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850818": [
        {
            "ioc_value": "185.69.122.37:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 06:47:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2b5f7211a6c98dc9302023024cf7e11e5360314160a6b291f74350eeb46c072d/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850817": [
        {
            "ioc_value": "185.69.123.172:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 06:47:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6f2139d68bc0222b441fadeb6f484650ee7192aceea86c5399749b279898abd0/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850816": [
        {
            "ioc_value": "137.184.133.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 06:36:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/732dfed9c6d0fbdfd29addfb4d3981dd4f50bbb1417bd397ad42787a21b7558a/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850815": [
        {
            "ioc_value": "104.131.86.222:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 06:35:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/97219eed1eda6a12d672138da9c9c540e95be415d227fd81c6933eb1b81f7160/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850814": [
        {
            "ioc_value": "77.91.123.220:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 06:34:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44b6d6bbd97152d4e7cd25ed49bde0f8a1c5d30c241d99c4a34f66cec3f28e2f/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850813": [
        {
            "ioc_value": "176.123.9.22:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-15 06:33:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/24cf9f32c1e3ebec5e810a865ad4acdcd28669d4b548929c8e4a962d77e44b1b/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850812": [
        {
            "ioc_value": "pdzb.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 06:28:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850811": [
        {
            "ioc_value": "sdtawdiq.niliafshar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 06:24:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850810": [
        {
            "ioc_value": "https://productionai-shop.pages.dev/recaptcha-verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 06:22:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850809": [
        {
            "ioc_value": "niliafshar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 06:22:05",
            "last_seen_utc": "2026-07-15 06:22:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850759": [
        {
            "ioc_value": "04dcae7c2f31870f4a59ed6faec513a5e252491d911ae9e62b9c3026ccf598cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 06:17:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/04dcae7c2f31870f4a59ed6faec513a5e252491d911ae9e62b9c3026ccf598cd",
            "tags": "ClearFake,ClickFix,gc-key,go-loader,rundll32,webdav,win-0x4679",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850760": [
        {
            "ioc_value": "https://pbhwzixj.boro1.bet/4f9a7c78-781f-4987-9e83-e804fb9a98e2/gc.key",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 06:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/04dcae7c2f31870f4a59ed6faec513a5e252491d911ae9e62b9c3026ccf598cd",
            "tags": "ClearFake,ClickFix,gc-key,go-loader,rundll32,webdav,win-0x4679",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850782": [
        {
            "ioc_value": "164.37.109.234:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 06:17:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850785": [
        {
            "ioc_value": "https://watersolutionsfl.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 06:17:44",
            "last_seen_utc": "2026-07-17 00:50:48",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/watersolutionsfl.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1850786": [
        {
            "ioc_value": "https://marjdl.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-15 06:17:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/marjdl.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1850788": [
        {
            "ioc_value": "161.35.220.210:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 06:17:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850789": [
        {
            "ioc_value": "178.128.45.212:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 06:17:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850790": [
        {
            "ioc_value": "165.232.100.127:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 06:17:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850791": [
        {
            "ioc_value": "139.59.141.246:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 06:17:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850795": [
        {
            "ioc_value": "206.189.144.140:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-15 06:17:41",
            "last_seen_utc": "2026-07-18 08:13:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850807": [
        {
            "ioc_value": "mprwjkek.betwanaa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 05:28:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850806": [
        {
            "ioc_value": "umnb.daddybetiran.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 05:28:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850805": [
        {
            "ioc_value": "217.217.97.75:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-15 05:20:03",
            "last_seen_utc": "2026-08-16 18:45:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850802": [
        {
            "ioc_value": "a9fh521j.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 05:04:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850801": [
        {
            "ioc_value": "kc2m8580.booro.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 04:58:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850800": [
        {
            "ioc_value": "1og90icd.betyek.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 04:55:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850797": [
        {
            "ioc_value": "byqxztkz.bethazarat.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 04:31:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850796": [
        {
            "ioc_value": "wpvz.boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 04:27:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850793": [
        {
            "ioc_value": "rvjbusgo.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 03:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850792": [
        {
            "ioc_value": "qsry.boro3.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 03:29:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850787": [
        {
            "ioc_value": "12zjij7k.betrein90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 03:03:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850784": [
        {
            "ioc_value": "btlbbyxf.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 02:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850783": [
        {
            "ioc_value": "rnrx.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 02:26:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850778": [
        {
            "ioc_value": "yclhedrx.site-shartbandi-pasor.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 01:47:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850777": [
        {
            "ioc_value": "ibai.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 01:26:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850774": [
        {
            "ioc_value": "sw10j5d9.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 01:00:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850773": [
        {
            "ioc_value": "xnuleibw.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 00:50:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850772": [
        {
            "ioc_value": "fnvr.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-15 00:26:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850767": [
        {
            "ioc_value": "6kqr6pgl.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 23:56:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850766": [
        {
            "ioc_value": "5lbitou7.bomb90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 23:55:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850765": [
        {
            "ioc_value": "oqfrcpbn.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 23:55:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850761": [
        {
            "ioc_value": "hkfj.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 23:27:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850755": [
        {
            "ioc_value": "nlxmperk.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 23:03:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850754": [
        {
            "ioc_value": "1nto2x4n.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 23:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850752": [
        {
            "ioc_value": "bxto.site-shartbandi-variz-kam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 22:24:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850747": [
        {
            "ioc_value": "ssefhahu.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 22:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850746": [
        {
            "ioc_value": "206.119.178.109:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-14 21:46:37",
            "last_seen_utc": "2026-08-20 10:48:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850745": [
        {
            "ioc_value": "gejy.site-shartbandi-takhtenard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 21:24:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850743": [
        {
            "ioc_value": "cckoient.boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 21:07:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850742": [
        {
            "ioc_value": "148.163.71.124:4545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 21:07:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af4ba8a010dfa75131e0b57fd00d63ecf9dc954a3c1124cea1c5fc18b848b2ad/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850741": [
        {
            "ioc_value": "serversniperxx.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 21:07:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af4ba8a010dfa75131e0b57fd00d63ecf9dc954a3c1124cea1c5fc18b848b2ad/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850736": [
        {
            "ioc_value": "u1uo84tz.dadyybet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 21:01:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850734": [
        {
            "ioc_value": "unauth-amper.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-14 20:56:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/94b21f488f5fecc9aa5ec4a4188e7d14049d0b9e0d3d64027a450640bfbd706d/",
            "tags": "NWHStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850733": [
        {
            "ioc_value": "kyfyltaw.boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 20:55:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850732": [
        {
            "ioc_value": "162.33.179.231:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850724": [
        {
            "ioc_value": "18523n3s71bgf06.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850725": [
        {
            "ioc_value": "1muv2munv2jlsmf.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850726": [
        {
            "ioc_value": "4349njvs2uk88f9.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850727": [
        {
            "ioc_value": "8v5gactq7cahe0i.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850728": [
        {
            "ioc_value": "fa91c3ker16sq4k.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850729": [
        {
            "ioc_value": "jxzglmh8jjfj3bb.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850730": [
        {
            "ioc_value": "l41kcmrpq6l1b29.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850731": [
        {
            "ioc_value": "v4lfh2trw03nr9r.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-14 20:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0b4fce23e3d10f41a48415946cdda7a31d656e0b484405eb815bd549521220e/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850651": [
        {
            "ioc_value": "http://162.249.125.141/garm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850652": [
        {
            "ioc_value": "http://162.249.125.141/garm5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850653": [
        {
            "ioc_value": "http://162.249.125.141/garm7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850654": [
        {
            "ioc_value": "162.249.125.141:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850655": [
        {
            "ioc_value": "162.249.125.141:13",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850656": [
        {
            "ioc_value": "www.c1s.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850657": [
        {
            "ioc_value": "sc.c1s.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850658": [
        {
            "ioc_value": "1c38405a026f44a612256e5e8ca0af5f1e7292731f5dc71b54a4c41490cd7745",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850659": [
        {
            "ioc_value": "33d9b53c42674663d0d7d23c251a7dce5f2ea7992a42540e421ab3956e621595",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850660": [
        {
            "ioc_value": "8ea817d0ed3395ae61643b36726bcc4ed3e55a555acf739ed94b2307b885af34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "aussie,botnet,ddos,garm,jackskid,mirai,rctea",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850679": [
        {
            "ioc_value": "152.42.189.206:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 20:48:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850692": [
        {
            "ioc_value": "http://41.216.189.157/run.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 20:48:27",
            "last_seen_utc": "2026-07-15 07:30:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1850723": [
        {
            "ioc_value": "hbxigpqk.boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 20:25:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850722": [
        {
            "ioc_value": "bhvj.betwanaa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 20:25:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850721": [
        {
            "ioc_value": "betwanaa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 20:22:53",
            "last_seen_utc": "2026-07-15 05:27:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850713": [
        {
            "ioc_value": "ykkgplvw.boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 19:46:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850712": [
        {
            "ioc_value": "87.232.83.18:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-14 19:46:04",
            "last_seen_utc": "2026-08-14 08:46:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850711": [
        {
            "ioc_value": "85.206.168.238:4646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 19:46:01",
            "last_seen_utc": "2026-08-13 18:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850710": [
        {
            "ioc_value": "64.89.161.190:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:45:50",
            "last_seen_utc": "2026-09-01 02:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850709": [
        {
            "ioc_value": "45.74.7.107:5691",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 19:45:34",
            "last_seen_utc": "2026-08-14 08:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850708": [
        {
            "ioc_value": "45.155.69.254:1488",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 19:45:31",
            "last_seen_utc": "2026-09-01 02:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850707": [
        {
            "ioc_value": "217.60.241.10:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:45:13",
            "last_seen_utc": "2026-08-23 08:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850706": [
        {
            "ioc_value": "boroo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 19:44:22",
            "last_seen_utc": "2026-07-15 04:27:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850704": [
        {
            "ioc_value": "192.169.7.60:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:44:18",
            "last_seen_utc": "2026-08-15 08:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850705": [
        {
            "ioc_value": "192.169.7.60:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:44:18",
            "last_seen_utc": "2026-08-15 08:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850703": [
        {
            "ioc_value": "191.101.130.245:5199",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:44:17",
            "last_seen_utc": "2026-08-14 08:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850702": [
        {
            "ioc_value": "185.223.57.86:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:44:12",
            "last_seen_utc": "2026-08-14 08:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850701": [
        {
            "ioc_value": "185.115.164.59:53353",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 19:44:06",
            "last_seen_utc": "2026-08-14 08:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850700": [
        {
            "ioc_value": "158.94.211.63:32333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 19:43:47",
            "last_seen_utc": "2026-08-31 08:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850699": [
        {
            "ioc_value": "155.103.71.115:15608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 19:43:43",
            "last_seen_utc": "2026-08-14 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850698": [
        {
            "ioc_value": "151.145.34.33:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-07-14 19:43:39",
            "last_seen_utc": "2026-09-01 02:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850697": [
        {
            "ioc_value": "147.182.143.172:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-14 19:43:36",
            "last_seen_utc": "2026-08-24 18:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850696": [
        {
            "ioc_value": "147.124.214.170:4056",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 19:43:35",
            "last_seen_utc": "2026-08-14 08:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850695": [
        {
            "ioc_value": "103.83.86.48:1616",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 19:43:14",
            "last_seen_utc": "2026-08-15 08:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850694": [
        {
            "ioc_value": "tptc.betrein90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 19:24:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850678": [
        {
            "ioc_value": "m55uqh6r.daddybetiran.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 19:01:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850676": [
        {
            "ioc_value": "ql1aii3f.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 18:56:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850675": [
        {
            "ioc_value": "prb02wy1.bingobet.bingo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 18:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850673": [
        {
            "ioc_value": "xmpjsaza.boro3.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 18:51:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850672": [
        {
            "ioc_value": "pnurgmjx.boro3.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 18:37:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850671": [
        {
            "ioc_value": "boro3.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 18:36:40",
            "last_seen_utc": "2026-07-15 03:27:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850670": [
        {
            "ioc_value": "ggot.betmajic90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 18:23:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850666": [
        {
            "ioc_value": "45.55.232.28:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 18:05:08",
            "last_seen_utc": "2026-09-01 02:45:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850663": [
        {
            "ioc_value": "154.88.96.42:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-14 18:05:04",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850662": [
        {
            "ioc_value": "gbntwgmi.boro2.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 17:43:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850661": [
        {
            "ioc_value": "boro2.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 17:41:09",
            "last_seen_utc": "2026-07-14 17:41:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850650": [
        {
            "ioc_value": "pdkj.betkhaneiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 17:23:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850646": [
        {
            "ioc_value": "862e54dc3f126e9bdc1c1be9c2abf1cea7348c39d22044b20bab193e74871e8e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850647": [
        {
            "ioc_value": "5f9b041f77fb0af092e1e5a567cb3882e843fa64",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850648": [
        {
            "ioc_value": "e22497172f8d4c6b9a465fdee1cd1c94",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850644": [
        {
            "ioc_value": "9139a0817ef5a3c0f4e97e562c22b2bb878d981a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 17:06:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850645": [
        {
            "ioc_value": "6b1a870bc9aa0a5d88931278f4375f50",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 17:06:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850641": [
        {
            "ioc_value": "097e7d7db52c47e763663991962b99f4920a3a5b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850642": [
        {
            "ioc_value": "96643dad566ec23b8917bd08cd0bb575",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850643": [
        {
            "ioc_value": "7b2a28e5ecbdeb4e608026e8c548ef5f50e4aad5da5ae7bfcc5e9ee05e91e80a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 17:06:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850638": [
        {
            "ioc_value": "3c679b739501a308372dffb6485de4ae9c14293b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850639": [
        {
            "ioc_value": "132fd7e557ae7b95f7dc8c2b5bbefe06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850640": [
        {
            "ioc_value": "68e91f0bde5d4c602eefa5e8057d65cf5a4af17021215736de2359fb4d577ce0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850635": [
        {
            "ioc_value": "e256b2b7d0235138cea6b818f9bb44d7cfb5e4c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-14 17:06:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850636": [
        {
            "ioc_value": "87700720a8a003a7d6e6da15958e4664",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-14 17:06:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850637": [
        {
            "ioc_value": "8dbd16903437126bd14983912aac07748f95289da274c04f5f4a6610e77bfd9c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850632": [
        {
            "ioc_value": "ea709516603279a6513ab58ae93ce220f0f0210e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-14 17:06:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850633": [
        {
            "ioc_value": "bb80b31e43893a35fabbdca00c3fd55e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-14 17:06:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850634": [
        {
            "ioc_value": "1105c195ea9bf21dcfc8882b1c3887d5056bece5b96170e0ad349cd82a3203a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-14 17:06:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850630": [
        {
            "ioc_value": "d76b3e385a5f85b7c2a547ee7053342c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-07-14 17:06:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850631": [
        {
            "ioc_value": "ae1a58b73c14de3d0d4af02ac0c136a4e804ed1a911de386fa40208672611309",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-14 17:06:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850627": [
        {
            "ioc_value": "12be7a6c060a27bbed222ab8181ba592",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850628": [
        {
            "ioc_value": "13eabc99acd666de32c3db953f8416543a3fa7f86a18b922adda6f3b1045ab1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-07-14 17:06:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850629": [
        {
            "ioc_value": "bace6a7c8b3a6df67feb7af9e7ead11a17505697",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-07-14 17:06:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850624": [
        {
            "ioc_value": "3509393b29d79798b259223623bca4e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850625": [
        {
            "ioc_value": "e30c4e9e950ee26b0480a07c5a5128167a76b64dfac40ae06a0bb070a80838a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850626": [
        {
            "ioc_value": "cf918f6f67e2f0eaf5aa329280199a0c4adc9f37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850621": [
        {
            "ioc_value": "018669315fa61b7c7a64c8298abd5971",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850622": [
        {
            "ioc_value": "825f8963d55e53cad341401c2f235523b2f9e87b503f83019fdac5f9f2714088",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850623": [
        {
            "ioc_value": "3b004549daf62319f3bd68dbe423c50acf3203be",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-14 17:06:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850619": [
        {
            "ioc_value": "dab128d1dba2feeb8762b300bc6ba32eb976cbe33274ac29c2c0d4c4eda5e6f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850620": [
        {
            "ioc_value": "7f082fa8bd8540595bfcbc719dbcdb19ec7b2ceb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850616": [
        {
            "ioc_value": "3d37860fe035a6172640cdafc011fffcbf72f3a80674cc9cb4999cdc4da24a2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850617": [
        {
            "ioc_value": "a468b7bb7e5f2e81da0aeb48ae1f962ce176ae0c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850618": [
        {
            "ioc_value": "04476cdf1450037de677bd47af342410",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850613": [
        {
            "ioc_value": "cd362b63aa5130a6290d1326abc883309aa218a5869e82ecd2c106a80de61047",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-14 17:06:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850614": [
        {
            "ioc_value": "fd93e9618ec713af5483d30360f1d7b4f660d876",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-14 17:06:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850615": [
        {
            "ioc_value": "d0a612c5bc14cb830954e6ba4dbd1e9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-14 17:06:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850610": [
        {
            "ioc_value": "cdb4ac5717e2bfe3bb375d15e53fd8741c4a35e7db4f2389c29c77d66bc5cc57",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-14 17:06:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850611": [
        {
            "ioc_value": "a912c5fa300ba329099d1ac7c71fa92452dae968",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-14 17:06:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850612": [
        {
            "ioc_value": "715d3af46531f2815ab9f67b47f2472d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-14 17:06:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850607": [
        {
            "ioc_value": "d9c0b912f48061c64b6603bc3d1f2958bc3d9752bc4934a5a9e1dceb3b90fe72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850608": [
        {
            "ioc_value": "3e20757561ad9ebd3141199994a3057a9eaf2eed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850609": [
        {
            "ioc_value": "684060325606206e6547f97e6cc8e423",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850604": [
        {
            "ioc_value": "bc6d86cef1b7404823c1d830387b2c9b1289c453620482fc1749dd5d2ade3897",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850605": [
        {
            "ioc_value": "b9308e6c91b64f4695a5418276a25f35e6eb18ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850606": [
        {
            "ioc_value": "183573ffe3b0c5f9188c5fab6b80ebec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850602": [
        {
            "ioc_value": "199af4936e44ed894ea45b84500a84268792dca3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-14 17:06:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850603": [
        {
            "ioc_value": "f1a04ffaa889c11b99b33610e4a87dec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-14 17:06:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850598": [
        {
            "ioc_value": "8c50b7a1ddc3e95f1106e7515fb36811c298257135b3b376c82bee04391e6cfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zeus",
            "malware_alias": "Zbot",
            "malware_printable": "Zeus",
            "first_seen_utc": "2026-07-14 17:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850599": [
        {
            "ioc_value": "c22abd6f58b80af730abad42dde43979de469117",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.zeus",
            "malware_alias": "Zbot",
            "malware_printable": "Zeus",
            "first_seen_utc": "2026-07-14 17:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850600": [
        {
            "ioc_value": "0a15d395369645b594180541e13f05d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.zeus",
            "malware_alias": "Zbot",
            "malware_printable": "Zeus",
            "first_seen_utc": "2026-07-14 17:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850601": [
        {
            "ioc_value": "4f4d405d32d76a170ca2899c70b48ef6ffaaef792e024b6f8aab98d4ae55eae4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-14 17:06:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850595": [
        {
            "ioc_value": "c5b0a5ab88c4530029bc900d9f3a3a3e7868d5cd3adde5a479a302fed2d50fb2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850596": [
        {
            "ioc_value": "248d7c09262684327d785410a5aea70158cf5147",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850597": [
        {
            "ioc_value": "30c502ded0262fcef7266948147d963d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850593": [
        {
            "ioc_value": "dd6d0514ba78dbf7e39288b14a9fa36338ca76d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850594": [
        {
            "ioc_value": "70ccc55374a58a7513304ffafa37db6e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850590": [
        {
            "ioc_value": "7c61077ca3c1d12c73e308b2a674212bab4bf88b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850591": [
        {
            "ioc_value": "578a549be9926fbd8016a8ff8ec0636e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850592": [
        {
            "ioc_value": "fe3e2114d24a0409a7b58e97a67c9da775fef6bc736e26f5a3ddaab131b090a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850587": [
        {
            "ioc_value": "e96244a68e280ef833f34ee984557ac35deb2c57",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850588": [
        {
            "ioc_value": "8951ce27300748d7b3d471020fbbd830",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850589": [
        {
            "ioc_value": "284ad50e9107b510ea42440c143b96f88fc30b524f325e4c450f659871438475",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850584": [
        {
            "ioc_value": "65a8ef55ec58fefe4b376547e0779f003b05bab5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850585": [
        {
            "ioc_value": "4df01b918569068a3a0199826627abde",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850586": [
        {
            "ioc_value": "e3a7b527e98ba28056ccaf3c3504d067714782de35c5f5141781f12cb894c4b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850581": [
        {
            "ioc_value": "828547dae1fcb05f9e12cdec3faa9b8914eec7ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850582": [
        {
            "ioc_value": "013081a63b3561182855875975b849ea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850583": [
        {
            "ioc_value": "e51673c5981d94544b0392939ce7c0ac0f31bad427b1ea6ea998634b8e443b3e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850579": [
        {
            "ioc_value": "a4ba482014b7881e331029d59c1fd739",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850580": [
        {
            "ioc_value": "ba368193363e2f907a667c48ebb1335aab4dcffb38a6843687a3a46bc9ca0b0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850576": [
        {
            "ioc_value": "89a42088178e5c5778bcef4b02930b14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850577": [
        {
            "ioc_value": "4f78fc5a1fff341c00583c7276902f0efb6a9edefe1bbd327d72fa1cc7311eee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850578": [
        {
            "ioc_value": "87d1fe176708d762d7c4218a71ff2ba8e0098c63",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850573": [
        {
            "ioc_value": "83aaec9b27ca20a5f1cdd75aa3c89d9a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850574": [
        {
            "ioc_value": "0de09d55351a5e10c4f51dd12b0edb385eb56da86d54d80276915116a0c847ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850575": [
        {
            "ioc_value": "2b150301ee3c2b37c551fefb4bf2a291db3660ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850570": [
        {
            "ioc_value": "a985c254ed2d791688736f83ee2befde",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850571": [
        {
            "ioc_value": "97b6c601828796cbb4b7f7d7dba3789a792816fdca70201e3965dc57694882a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850572": [
        {
            "ioc_value": "aad5448e55ecb42184fc171c6128d809a8396596",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850567": [
        {
            "ioc_value": "a85f8ef34cc5ab90e0aa6c9b1a5b289d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850568": [
        {
            "ioc_value": "6e00f52072b251d58ce01eecd95aa6022db7ba161e7d68d2c224091392f6c832",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850569": [
        {
            "ioc_value": "397819924ee78628c50f09b86a88b10ce6eb4299",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850564": [
        {
            "ioc_value": "73d3a30675edff0224cfaeef1b578b66",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850565": [
        {
            "ioc_value": "56e83469b37785a3ff4a82395e014c95da9643b58733d3a085944821dd1fd653",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850566": [
        {
            "ioc_value": "ae187e52be3f84d92e9994c62de1edab36c339b4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850561": [
        {
            "ioc_value": "071115ffd93938e9703e32d309dc887a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850562": [
        {
            "ioc_value": "8365a58fe73a021c914e57868087df4299d61dfdfd34e00cc89e496aa18c0572",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850563": [
        {
            "ioc_value": "125ce3384144e4475e652027623b0aa5d6da081b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 17:06:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850559": [
        {
            "ioc_value": "49e4ba4a041e13fd07567d4f5be07a4d9b26b356546ae1ba035dff0719c2ee63",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850560": [
        {
            "ioc_value": "683d65ce0d91e87a2caa9a7591053a34b9745972",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850556": [
        {
            "ioc_value": "78b21599a83dbfad39c17202d37dd2b6d552c9679755bc199a9826f3dd0e40db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-14 17:06:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850557": [
        {
            "ioc_value": "40ebd40d5c84d2facd38a01ac800890315bf0bff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-14 17:06:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850558": [
        {
            "ioc_value": "055b997d5589c2c01799c98752cdde44",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-14 17:06:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850553": [
        {
            "ioc_value": "5e5f0122c172b364cb32ddefc79b381113a04ed48bf194a6a975cc7f564fa07b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-14 17:06:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850554": [
        {
            "ioc_value": "cfc94a406e187b8cba207c605374c398ce80a036",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-14 17:06:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850555": [
        {
            "ioc_value": "6145fff517e81b6afc77d6d5149b73da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-14 17:06:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850551": [
        {
            "ioc_value": "f58452957de3da4cd434a94a17cbd8ae658b29bf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850552": [
        {
            "ioc_value": "e2da5244179b68d7aeb36e764659132b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850548": [
        {
            "ioc_value": "b23452357b766f78e42fe315cacec7e2697064dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-14 17:06:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850549": [
        {
            "ioc_value": "13ea5c2f23f1822b68f4699f3064b440",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-14 17:06:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850550": [
        {
            "ioc_value": "39030298332d4ad0b3b3cb987a4bb9501f19d8ba48b393f187cf560db6b60a79",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850546": [
        {
            "ioc_value": "c675bb64f1d89f4a1c2ccc5818bba942",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:06:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850547": [
        {
            "ioc_value": "970d178fff5e535e65917b5b007dbaf5948d32668899bded7d954e5823fb50b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.krakenkeylogger",
            "malware_alias": null,
            "malware_printable": "KrakenKeylogger",
            "first_seen_utc": "2026-07-14 17:06:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850543": [
        {
            "ioc_value": "baf37d8f887d4c5a8d2da49feabd08f2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850544": [
        {
            "ioc_value": "c459fdd1f0a39b4de680a45f20a822b204ca897437b4aff99f088f0067a11327",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850545": [
        {
            "ioc_value": "6fd020314552b3b7b161e9d92baeb31de6492d35",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:06:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850540": [
        {
            "ioc_value": "bb4c905374d5e8c5506c6b6eb9859328",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850541": [
        {
            "ioc_value": "f8cd736a531c65cce00a01fab875cb2cc350b4561e6eaa643fb46d1b62cb3ba7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850542": [
        {
            "ioc_value": "69d1d2ed3ab3519d348748d141dbc12e9c819215",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:06:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850538": [
        {
            "ioc_value": "d1f43c0c7c2179f53a9eb0c8800ee2507375c3aa4dae4966e08c37472f254e5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850539": [
        {
            "ioc_value": "4ceae2a8c8f583c9ad9c96da3a218c2a2b03ba99",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850536": [
        {
            "ioc_value": "428710fe6cd300d607805b25cea48516275eed76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-14 17:06:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850537": [
        {
            "ioc_value": "b7e5d882f64df87f2d70b9df4df1033f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-14 17:06:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850533": [
        {
            "ioc_value": "b850b2e82c47543cfbf1997046a068543ff1de91",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-14 17:06:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850534": [
        {
            "ioc_value": "fcdf36f4778815825ab6128b2e46dd61",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-14 17:06:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850535": [
        {
            "ioc_value": "03ff10f626253ac8613b7c489170d602c524b9e8b69ebc13d677a800b0bdb0db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-14 17:06:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850530": [
        {
            "ioc_value": "13aaac2d18f6f3525da20f4b31bfb060a531d372",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850531": [
        {
            "ioc_value": "37073ab135f9616618661ba7f69f12d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850532": [
        {
            "ioc_value": "85168dcb0ef99f785cbb51ec6481a0c6940a099cec3671faaef59e5f3978de45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-07-14 17:06:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850528": [
        {
            "ioc_value": "3c230061e5a16cc559b0a7f025f08250",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-14 17:06:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850529": [
        {
            "ioc_value": "9b91432230f930df707d577b9a1d2d5a82ca2d370491608a0c20c729c66d0257",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:06:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850525": [
        {
            "ioc_value": "2400507f87fef5cc83e59bdc47ae9a4e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-14 17:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850526": [
        {
            "ioc_value": "93b19bc56952ae1e82f1f41db49f455316736e2b8d161e64b115a150d8dcf204",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-14 17:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850527": [
        {
            "ioc_value": "fd4bf20350133d8f8c12ed6047853571d89209df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-14 17:06:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850524": [
        {
            "ioc_value": "1deb24c371bfa6af74a660dc93253575ab5e0132",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-14 17:06:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850523": [
        {
            "ioc_value": "9344ddd2906925b386bad207e1fb416739a5657a7103feed770d6d6b8d042556",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-14 17:06:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850520": [
        {
            "ioc_value": "19d6b52e50a865b56f34724d77af88b87e065c179d91ea6614d7e36ce1370216",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:06:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850521": [
        {
            "ioc_value": "15585c70f6dc9bfb5a73d8a70766c63355997dda",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:06:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850522": [
        {
            "ioc_value": "a36374b54d03e24d666466928d208624",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:06:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850517": [
        {
            "ioc_value": "386fbb57ba83864ee57a9e8a271c6dc215dc20bb1521ee85ad414f0dc67babdc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tokyox",
            "malware_alias": null,
            "malware_printable": "TokyoX",
            "first_seen_utc": "2026-07-14 17:05:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850518": [
        {
            "ioc_value": "3701617822f99debbf2579602b32eb99034581ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tokyox",
            "malware_alias": null,
            "malware_printable": "TokyoX",
            "first_seen_utc": "2026-07-14 17:05:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850519": [
        {
            "ioc_value": "d77aa7f5bf7c008232f4cbec127c30db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tokyox",
            "malware_alias": null,
            "malware_printable": "TokyoX",
            "first_seen_utc": "2026-07-14 17:05:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850514": [
        {
            "ioc_value": "d18e257734e43eb0c07ae7e8c97747744bacbabe0fc404f6943e59be7935ec76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.teslacrypt",
            "malware_alias": "cryptesla",
            "malware_printable": "TeslaCrypt",
            "first_seen_utc": "2026-07-14 17:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850515": [
        {
            "ioc_value": "ed3142a4312b880f546417c3412526d352c2f1e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.teslacrypt",
            "malware_alias": "cryptesla",
            "malware_printable": "TeslaCrypt",
            "first_seen_utc": "2026-07-14 17:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850516": [
        {
            "ioc_value": "ad26c937b235a8db39468fb7a4dae4de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.teslacrypt",
            "malware_alias": "cryptesla",
            "malware_printable": "TeslaCrypt",
            "first_seen_utc": "2026-07-14 17:05:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850511": [
        {
            "ioc_value": "9df99c94a008d23ebe56d2ac7c893867d798f58855a24ca4852d8577cb00b006",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ytstealer",
            "malware_alias": null,
            "malware_printable": "YTStealer",
            "first_seen_utc": "2026-07-14 17:05:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850512": [
        {
            "ioc_value": "c79310cd6ea5b5131c71a288491e1d9837c59164",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ytstealer",
            "malware_alias": null,
            "malware_printable": "YTStealer",
            "first_seen_utc": "2026-07-14 17:05:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850513": [
        {
            "ioc_value": "7aff04a2469f7e8029279fa064e2b13e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ytstealer",
            "malware_alias": null,
            "malware_printable": "YTStealer",
            "first_seen_utc": "2026-07-14 17:05:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850508": [
        {
            "ioc_value": "66aa355bbe91a7fdf756e69fb9649cc5b6cc46f61f69ac2650b9842e3545256f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850509": [
        {
            "ioc_value": "db0a976ca10fecdb75d2713b536155feacaddb96",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850510": [
        {
            "ioc_value": "7263d0a05b38f329d32c73fd1492827c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850505": [
        {
            "ioc_value": "4156bba1cedff1d77c924e18d6061c8fa181da9195b1a79aaa6d0a52214a5769",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850506": [
        {
            "ioc_value": "d91a856e41cd1ea25121cbf8b4f7a34e7a3d9437",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850507": [
        {
            "ioc_value": "d3f4bd59f93e39f940948edab4ee978f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850502": [
        {
            "ioc_value": "d5330658c04e6b1b9b57374df216b0186fefb051ce3e868c404073be59dc7900",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "ps1.skyrat",
            "malware_alias": null,
            "malware_printable": "skyrat",
            "first_seen_utc": "2026-07-14 17:05:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850503": [
        {
            "ioc_value": "7d3c0a4df9f5cf13cf852ee560bb1acdae9bc336",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "ps1.skyrat",
            "malware_alias": null,
            "malware_printable": "skyrat",
            "first_seen_utc": "2026-07-14 17:05:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850504": [
        {
            "ioc_value": "6f95ed6c41a67d3ccdb5f5b0f9a86466",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "ps1.skyrat",
            "malware_alias": null,
            "malware_printable": "skyrat",
            "first_seen_utc": "2026-07-14 17:05:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850499": [
        {
            "ioc_value": "8aa5c3cd3117f58ff76888ec83157436c775c87600b4c1b6c2620b93e5d41271",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-14 17:05:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850500": [
        {
            "ioc_value": "712554a7d420d657936131a1789f4a38117c7bca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-14 17:05:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850501": [
        {
            "ioc_value": "1dc9b9053a4c36993b761696745cc724",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-07-14 17:05:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850496": [
        {
            "ioc_value": "ab782f75957f3a4e4a398f170f5d41c592d2f8ca135bda12875b994944e78ab2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850497": [
        {
            "ioc_value": "da1704cfbae51d5ae66f214596e1462fc8878d87",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850498": [
        {
            "ioc_value": "9062fd38a3c4505e53941ca086bc777c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-14 17:05:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850493": [
        {
            "ioc_value": "863cce022db6778dcea360cf8a268103bcddbd0057e936cc5a2d060b2796022a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:05:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850494": [
        {
            "ioc_value": "876b86a1480c6d2bcc58d97215af3d38a2564bfb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:05:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850495": [
        {
            "ioc_value": "022de1fd649f7d495f8bdd08acdc7048",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:05:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850490": [
        {
            "ioc_value": "7fc964fe47e08d13c158f808d0d68f3f2b9341dfb1ba6fb2a48690fe27e22682",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 17:05:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850491": [
        {
            "ioc_value": "78ea202006943110cb3d7559fc1bb7c4fe08755f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 17:05:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850492": [
        {
            "ioc_value": "72aa3594e47ab58aecf445d9703f6c43",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 17:05:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850487": [
        {
            "ioc_value": "9115c69843820f1a93b137bf6eab805294d61bfee04b971b7df01de2c927a12b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.poscardstealer",
            "malware_alias": null,
            "malware_printable": "poscardstealer",
            "first_seen_utc": "2026-07-14 17:05:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850488": [
        {
            "ioc_value": "772623b208e9e5e6768d3e10fc41a9851ac73a52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.poscardstealer",
            "malware_alias": null,
            "malware_printable": "poscardstealer",
            "first_seen_utc": "2026-07-14 17:05:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850489": [
        {
            "ioc_value": "7866e055d6135c7fcbebc7bbdb8266d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.poscardstealer",
            "malware_alias": null,
            "malware_printable": "poscardstealer",
            "first_seen_utc": "2026-07-14 17:05:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850483": [
        {
            "ioc_value": "4faa4dc2ba332b3ea09ce2e4480e9663",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850484": [
        {
            "ioc_value": "4e5c8cedafeb1be4d6d1719cc913d5e13666c8b67e23e0c29f94baff0c00ce45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-14 17:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850485": [
        {
            "ioc_value": "e8c9bae6dcae34bfb51c0073d89b7f2d944f68c6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-14 17:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850486": [
        {
            "ioc_value": "2f577ce224d2311a841d8d76abb63b70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-14 17:05:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850480": [
        {
            "ioc_value": "b171382e01c1dc929798fd9deaa52217",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:05:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850481": [
        {
            "ioc_value": "0251d469d95ad1bde34b0ab228dfff4ee2bdff73f0612e6bc481667c757596cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:05:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850482": [
        {
            "ioc_value": "bc7d674aa2dbd5aab2e00b85f536681b766441a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:05:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850477": [
        {
            "ioc_value": "aecbad9bc246f34850ea7eb99a879985",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850478": [
        {
            "ioc_value": "1ea0efe8085044813cd678376144c54efc5c6a56bbf41ff2fa5b64099c4a689a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850479": [
        {
            "ioc_value": "6b135dc844dd62a0a875e6bd143a46075646cec4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-14 17:05:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850474": [
        {
            "ioc_value": "15742024eec468767a0b6bdf96085c20",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-14 17:05:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850475": [
        {
            "ioc_value": "5df3d8d157cea2c1e957202eaea1c2dc27279e992828cfd8be931d48f9458d19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:05:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850476": [
        {
            "ioc_value": "59a4d0464a5bc0d3b588aee5192e40003841abd4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 17:05:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850471": [
        {
            "ioc_value": "773dda7eb9d848d9a3491ec2b61a9f0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-14 17:05:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850472": [
        {
            "ioc_value": "c42130f2f9f1fc1a1c4189b6cc3bc5ce0207d21620e20cc4119ae86951105344",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-14 17:05:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850473": [
        {
            "ioc_value": "05ac6fa423372e3095b06adb6712178b888b2c60",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-14 17:05:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850468": [
        {
            "ioc_value": "7046e88eb63b1d5271901092ce6e3838",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850469": [
        {
            "ioc_value": "b366811f3f74717395eddf884e59b329cf192d2a310cf47deadbf4102ef71e67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-14 17:05:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850470": [
        {
            "ioc_value": "b6b659b8e152bb1f8d9fc954b68b4542fe256530",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-14 17:05:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850466": [
        {
            "ioc_value": "8fe09be2bb21339f8b9ab4f3f30a9bcb4f6e167410ef3449f9659b3fb6f1cd10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850467": [
        {
            "ioc_value": "cc8caab23e20032831b1dc6e45a781925b6ee938",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850463": [
        {
            "ioc_value": "daca7dff705d30c7f81ae424b54ee528e5559d7d4160eed7ffd357e294bf411e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850464": [
        {
            "ioc_value": "083ea9ca81bc01c51d55a276aeb1fed9b3717ad0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850465": [
        {
            "ioc_value": "27a888a3dbaa952dbb432ef33815fbec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850460": [
        {
            "ioc_value": "28f28077680c530e9d4278cecf0d8a9ac0682ed63bf9ee1d6a90cd18b88e67fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-14 17:05:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850461": [
        {
            "ioc_value": "a62e579ffd189f9a7c4e962b7a517dec7561a10f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-14 17:05:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850462": [
        {
            "ioc_value": "f6e76ba53c968b6c967b618fe1788b0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-14 17:05:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850458": [
        {
            "ioc_value": "24e62aa365df0031addf76831f231468b7b8bef2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850459": [
        {
            "ioc_value": "7b6b7be273f8c409f44fd94655b3e6cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850455": [
        {
            "ioc_value": "af959c3a23704bc5712f71031b848e0f2b286ae7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850456": [
        {
            "ioc_value": "765c50d86c02177d5479ae31794e8447",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850457": [
        {
            "ioc_value": "24cf9f32c1e3ebec5e810a865ad4acdcd28669d4b548929c8e4a962d77e44b1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850452": [
        {
            "ioc_value": "dcab0b70a530de49ade1fa12c5f91e22bb69bb3b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850453": [
        {
            "ioc_value": "f12bb455c44905d39301d85baae785ef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850454": [
        {
            "ioc_value": "cd68d01fe8e57890fcbbe66833a8416981feda4d79148a661692fa364db66738",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850448": [
        {
            "ioc_value": "2b5f7211a6c98dc9302023024cf7e11e5360314160a6b291f74350eeb46c072d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850449": [
        {
            "ioc_value": "fe327af001f6ffb002f053c3a03e15cca1384a1e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850450": [
        {
            "ioc_value": "1002b1cb400c7198c2c72b2dd6dfb029",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850451": [
        {
            "ioc_value": "0b3a0e6bf514f9baecd9f26cdbeb74afc455666d0d41db4b8673f7a98cd855cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850445": [
        {
            "ioc_value": "6f2139d68bc0222b441fadeb6f484650ee7192aceea86c5399749b279898abd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850446": [
        {
            "ioc_value": "6a77c9d084298edb321ac95c28a94eb2eb8a0c9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850447": [
        {
            "ioc_value": "e29f64a18e8b2a5f4e8ef07d5ff70d84",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850442": [
        {
            "ioc_value": "44b6d6bbd97152d4e7cd25ed49bde0f8a1c5d30c241d99c4a34f66cec3f28e2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850443": [
        {
            "ioc_value": "7a26456e44190c848ec4af15a57be6e836db01fa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850444": [
        {
            "ioc_value": "aa5eaae30652c27a23f084070f12e897",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850440": [
        {
            "ioc_value": "e3bc15a2d2a89e5a384e1d323f7a7d8e6ba5d0a6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850441": [
        {
            "ioc_value": "abffa933bba9273c4dc2096c0e125ff9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850437": [
        {
            "ioc_value": "fc414f6d56efac6c248b597ef62dc956ff8bedd8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850438": [
        {
            "ioc_value": "0b7c8886fecd8f44cd53fd423caa3d68",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850439": [
        {
            "ioc_value": "97219eed1eda6a12d672138da9c9c540e95be415d227fd81c6933eb1b81f7160",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850436": [
        {
            "ioc_value": "732dfed9c6d0fbdfd29addfb4d3981dd4f50bbb1417bd397ad42787a21b7558a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-14 17:05:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1850431": [
        {
            "ioc_value": "npa8g2x5.cozmo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 16:58:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850430": [
        {
            "ioc_value": "cozmo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 16:57:08",
            "last_seen_utc": "2026-07-14 16:57:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850429": [
        {
            "ioc_value": "pbhwzixj.boro1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 16:48:48",
            "last_seen_utc": "2026-07-14 23:23:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850427": [
        {
            "ioc_value": "fqul.betkhanee.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 16:23:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850425": [
        {
            "ioc_value": "oudwaubach.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 16:20:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99d0eb6047cc8c9f8cd061a6fcd18bb1fb6a5d4cfb78dd626b7f90a2d90e11b2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850424": [
        {
            "ioc_value": "91.92.42.141:4525",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 16:15:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0bef1f58295a8d704c4f0ab7d3f8a3c6b9af49ed2cb28066327754080e202b26/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850423": [
        {
            "ioc_value": "purchaseorder.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 16:15:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0bef1f58295a8d704c4f0ab7d3f8a3c6b9af49ed2cb28066327754080e202b26/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850413": [
        {
            "ioc_value": "185.76.78.136:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dosia",
            "malware_alias": "DDOSIA",
            "malware_printable": "Dosia",
            "first_seen_utc": "2026-07-14 16:11:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ddosia/report.md",
            "tags": "botnet,c2,ddos,ddosia,noname057",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850416": [
        {
            "ioc_value": "chrisparrycollection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-14 16:11:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1850418": [
        {
            "ioc_value": "bcouiutk.bordvipbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 15:52:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850415": [
        {
            "ioc_value": "gwix.bethazarat.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 15:23:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850414": [
        {
            "ioc_value": "bethazarat.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 15:20:27",
            "last_seen_utc": "2026-07-15 04:32:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850408": [
        {
            "ioc_value": "luckyware.cy",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 15:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1942286/0/html#domains",
            "tags": "c2,DiscordTokenStealer,LuckyWare",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1850402": [
        {
            "ioc_value": "vrlr8kbu.couple.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 14:57:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850385": [
        {
            "ioc_value": "128.14.232.215:50289",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850386": [
        {
            "ioc_value": "128.14.226.122:49653",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850387": [
        {
            "ioc_value": "152.32.155.176:36478",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850388": [
        {
            "ioc_value": "185.81.29.221:51476",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850389": [
        {
            "ioc_value": "169.197.113.233:56789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850390": [
        {
            "ioc_value": "165.154.32.212:51709",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850391": [
        {
            "ioc_value": "152.32.154.146:26701",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850392": [
        {
            "ioc_value": "152.32.181.65:43561",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850393": [
        {
            "ioc_value": "107.150.105.104:37654",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850394": [
        {
            "ioc_value": "43.165.198.45:43210",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850395": [
        {
            "ioc_value": "43.133.143.167:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850396": [
        {
            "ioc_value": "43.129.55.206:36127",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850397": [
        {
            "ioc_value": "43.134.188.2:54321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850398": [
        {
            "ioc_value": "43.133.154.239:34891",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850399": [
        {
            "ioc_value": "118.193.56.165:62345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:57:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/jackskid/report.md",
            "tags": "botnet,c2,ddos,jackskid",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850400": [
        {
            "ioc_value": "ecourwue.takhtenard-online.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 14:56:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850384": [
        {
            "ioc_value": "takhtenard-online.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 14:54:37",
            "last_seen_utc": "2026-07-14 14:55:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850360": [
        {
            "ioc_value": "45.140.204.40:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850361": [
        {
            "ioc_value": "87.120.219.81:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:22",
            "last_seen_utc": "2026-08-25 12:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850362": [
        {
            "ioc_value": "91.219.23.237:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850363": [
        {
            "ioc_value": "93.94.51.4:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850364": [
        {
            "ioc_value": "45.95.233.236:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:21",
            "last_seen_utc": "2026-08-25 12:20:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850365": [
        {
            "ioc_value": "91.219.23.252:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850366": [
        {
            "ioc_value": "45.82.13.27:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850367": [
        {
            "ioc_value": "87.120.219.88:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850368": [
        {
            "ioc_value": "5.253.59.242:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850369": [
        {
            "ioc_value": "62.133.62.11:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:19",
            "last_seen_utc": "2026-08-25 12:20:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850370": [
        {
            "ioc_value": "87.120.219.83:42061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850371": [
        {
            "ioc_value": "45.140.204.59:15987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850372": [
        {
            "ioc_value": "217.60.195.191:46852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850373": [
        {
            "ioc_value": "87.120.219.86:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850374": [
        {
            "ioc_value": "91.219.23.234:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850375": [
        {
            "ioc_value": "5.253.59.209:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850376": [
        {
            "ioc_value": "91.219.23.235:7193",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850377": [
        {
            "ioc_value": "45.140.204.61:32876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850378": [
        {
            "ioc_value": "2.59.163.244:27651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850379": [
        {
            "ioc_value": "93.94.51.38:54123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850380": [
        {
            "ioc_value": "45.82.13.42:49376",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850381": [
        {
            "ioc_value": "85.11.167.99:23789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/potassium/report.md",
            "tags": "botnet,c2,ddos,potassium",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850382": [
        {
            "ioc_value": "23.27.49.74:25632",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/drifter/report.md",
            "tags": "botnet,c2,ddos,drifter",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850383": [
        {
            "ioc_value": "23.27.201.166:36605",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:53:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/drifter/report.md",
            "tags": "botnet,c2,ddos,drifter",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850358": [
        {
            "ioc_value": "sso.northjournal.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:16",
            "last_seen_utc": "2026-07-27 15:30:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850359": [
        {
            "ioc_value": "worker.ivoryboard.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:16",
            "last_seen_utc": "2026-07-27 15:30:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850349": [
        {
            "ioc_value": "audit.techreef.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850350": [
        {
            "ioc_value": "catalog3.calmtexture.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850351": [
        {
            "ioc_value": "cron6.health-ly.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-30 14:19:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850352": [
        {
            "ioc_value": "deploy.works-rhythm8.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850353": [
        {
            "ioc_value": "dns.frame-works.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850354": [
        {
            "ioc_value": "index.gentle-weekly.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850355": [
        {
            "ioc_value": "queue8.vibepulse.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-30 13:46:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850356": [
        {
            "ioc_value": "relay7.apiforge.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850357": [
        {
            "ioc_value": "scheduler.civic-team.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.revstealer",
            "malware_alias": null,
            "malware_printable": "RevStealer",
            "first_seen_utc": "2026-07-14 14:44:15",
            "last_seen_utc": "2026-07-27 15:30:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/Myrtus0x0",
            "tags": "exe,revstealer",
            "anonymous": 0,
            "reporter": "Myrtus0x0"
        }
    ],
    "1850346": [
        {
            "ioc_value": "154.90.70.222:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:42:42",
            "last_seen_utc": "2026-08-20 00:48:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/report.md",
            "tags": "botnet,c2,ddos,ens,vibenet",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850347": [
        {
            "ioc_value": "154.90.70.111:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/vibenet/report.md",
            "tags": "botnet,c2,ddos,ens,vibenet",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850348": [
        {
            "ioc_value": "exczx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-14 14:41:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0e23c87ec9f79d88430c5ced864ee42a01c667061ceb30800012babdd781f83f/",
            "tags": "PhantomStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850343": [
        {
            "ioc_value": "159.89.132.240:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 14:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850345": [
        {
            "ioc_value": "38.240.55.7:65535",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-14 14:36:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7948f29c8da354c9860efc87b920097a14b759af05fc7fb77a8d1a2074d2477a/",
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850344": [
        {
            "ioc_value": "paymenthhcvhs.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-14 14:36:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7948f29c8da354c9860efc87b920097a14b759af05fc7fb77a8d1a2074d2477a/",
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850342": [
        {
            "ioc_value": "ftp.episcenergy.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-07-14 14:32:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/131e5a9bdeea0a91fb744d30aef33159f1cb7882d113500a26d61a79027d49df/",
            "tags": "PhantomStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850341": [
        {
            "ioc_value": "67.21.33.98:8470",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-14 14:30:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a88512a75d65766e556d3ef13bda81a0dd08b5468a26b5c58dcf6c875d5e51f1/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850340": [
        {
            "ioc_value": "82.29.72.65:3467",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 14:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/55504df33a0196066494d26d6f8c0533391b220630a9c800c7f1eb0cbc776ce2/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850339": [
        {
            "ioc_value": "wkstazionmagat.obrigadocristiano.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 14:24:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/55504df33a0196066494d26d6f8c0533391b220630a9c800c7f1eb0cbc776ce2/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850338": [
        {
            "ioc_value": "ftp.elsyexpertise.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 14:22:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/46055195777c8088c7800715c4561af2da0b7dd088cb12f5473af5281aec537c/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850337": [
        {
            "ioc_value": "sycr.betforward90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 14:21:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850335": [
        {
            "ioc_value": "mail.trimnt.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-07-14 14:19:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bda828c196603e74f8cf5edd2fc03cf04e26a76a1ea6935fdc7e57133894b9f8/",
            "tags": "MassLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850334": [
        {
            "ioc_value": "5.101.84.18:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-14 14:17:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13c2a9cc1c290c3ede00c01dff7f3ff5164054a55e74b46cd2a91de1791e08ab/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850249": [
        {
            "ioc_value": "WHNLICUSAMU42.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7daf16b2b8890df95d33bd7ec7e1b04beef9cd7ea91ec657899adfd77ac505c9",
            "tags": "ClickFix,DLLSideload,NetSupport,netsupportmanager",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850250": [
        {
            "ioc_value": "WHNLICUSAMU41.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7daf16b2b8890df95d33bd7ec7e1b04beef9cd7ea91ec657899adfd77ac505c9",
            "tags": "ClickFix,DLLSideload,NetSupport,netsupportmanager",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850251": [
        {
            "ioc_value": "7daf16b2b8890df95d33bd7ec7e1b04beef9cd7ea91ec657899adfd77ac505c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7daf16b2b8890df95d33bd7ec7e1b04beef9cd7ea91ec657899adfd77ac505c9",
            "tags": "ClickFix,DefenderDLPabuse,DLLSideload,NetSupport,netsupportmanager",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850252": [
        {
            "ioc_value": "384a2975252cfe4e94512aa043226dde5243ef40ff07ea74b4151cdf9074d143",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7daf16b2b8890df95d33bd7ec7e1b04beef9cd7ea91ec657899adfd77ac505c9",
            "tags": "catbox,ClickFix,gzip-dropper,NetSupport,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850264": [
        {
            "ioc_value": "apk.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850265": [
        {
            "ioc_value": "190.92.219.122:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "AlexMods,Android,GBWhatsApp,Huawei,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850266": [
        {
            "ioc_value": "151.243.18.118:2611",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7daf16b2b8890df95d33bd7ec7e1b04beef9cd7ea91ec657899adfd77ac505c9",
            "tags": "ClickFix,DLLSideload,NetSupport,netsupportmanager",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1850283": [
        {
            "ioc_value": "www.vidfree.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AlexMods,Android,GBWhatsApp,Triada,VidMate",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850284": [
        {
            "ioc_value": "videmateshare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AlexMods,Android,GBWhatsApp,Triada,VidMate",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850285": [
        {
            "ioc_value": "prod-weblink.videmateshare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AlexMods,Android,GBWhatsApp,Triada,VidMate",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850286": [
        {
            "ioc_value": "vid-cdn.vidfree.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AlexMods,Android,GBWhatsApp,Triada,VidMate",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850287": [
        {
            "ioc_value": "node-vml.vidfree.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 14:11:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AlexMods,Android,GBWhatsApp,Triada,VidMate",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850288": [
        {
            "ioc_value": "102z512uqjl6m.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850289": [
        {
            "ioc_value": "108h764sg7npw.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850290": [
        {
            "ioc_value": "1ard675vnxd1l.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850291": [
        {
            "ioc_value": "1jmldxvj0gimm.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850292": [
        {
            "ioc_value": "1p6kkehfjfb2s.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850293": [
        {
            "ioc_value": "1v9g4jgcqisg4.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850294": [
        {
            "ioc_value": "1z0ky1gcb02j8.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850295": [
        {
            "ioc_value": "20hc9ahim3kky.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850296": [
        {
            "ioc_value": "212uqd371gsar.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850297": [
        {
            "ioc_value": "2169tae0hhtd6.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850298": [
        {
            "ioc_value": "226c6tcnujin1.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850299": [
        {
            "ioc_value": "2hnjv5o9tq18x.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850300": [
        {
            "ioc_value": "2qww8z7zh33r1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850301": [
        {
            "ioc_value": "2t8cpyvwbhcze.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850302": [
        {
            "ioc_value": "2w189cccuwx1s.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850303": [
        {
            "ioc_value": "2w6p9lgp0st41.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850304": [
        {
            "ioc_value": "2xzklzguutbgd.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850305": [
        {
            "ioc_value": "32caj76pwqj8t.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850306": [
        {
            "ioc_value": "3dfkb2ls19wa5.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850307": [
        {
            "ioc_value": "3hhx8mtzd3dnc.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850308": [
        {
            "ioc_value": "3kyn1qbvv8l4s.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850309": [
        {
            "ioc_value": "3n5t7tlqbvfbi.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850310": [
        {
            "ioc_value": "3o93soz9pvqis.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850311": [
        {
            "ioc_value": "3vbdn0ysm07pe.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850312": [
        {
            "ioc_value": "6uh312tvknrg.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850313": [
        {
            "ioc_value": "a6dz9tb6oicn.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850314": [
        {
            "ioc_value": "emig4ta5wi0z.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850315": [
        {
            "ioc_value": "j56d50s1q53v.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850316": [
        {
            "ioc_value": "se2lnidzfvts.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850317": [
        {
            "ioc_value": "vrgqgg8y4ryf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "api-join,ClickFix,Cloudflare,DGA",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850318": [
        {
            "ioc_value": "chant-78.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Cloudflare",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850319": [
        {
            "ioc_value": "current99.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Cloudflare",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850320": [
        {
            "ioc_value": "159.223.216.143:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850321": [
        {
            "ioc_value": "193.188.22.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-07-14 14:11:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1850333": [
        {
            "ioc_value": "195.177.94.16:1912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 14:11:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7fc964fe47e08d13c158f808d0d68f3f2b9341dfb1ba6fb2a48690fe27e22682/",
            "tags": "redline",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850326": [
        {
            "ioc_value": "haqkrygx.site-takhtenard-sharti.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:59:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850324": [
        {
            "ioc_value": "2skmlgm2.motabartarin-site-shartbandi-jahan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850323": [
        {
            "ioc_value": "zsvipfhj.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:53:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850282": [
        {
            "ioc_value": "gbij.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:23:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850281": [
        {
            "ioc_value": "auth-code-verif.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:21:55",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850280": [
        {
            "ioc_value": "ewer.betbuf90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:19:22",
            "last_seen_utc": "2026-07-23 07:54:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850279": [
        {
            "ioc_value": "fwyw.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:18:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850278": [
        {
            "ioc_value": "gufbylzl.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:08:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850270": [
        {
            "ioc_value": "rrfljnpj.site-takhtenard-sharti-betland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 13:03:34",
            "last_seen_utc": "2026-07-21 02:26:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850269": [
        {
            "ioc_value": "jps9pmag.bw90bet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 12:57:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850268": [
        {
            "ioc_value": "j4af75zm.bw90bet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 12:56:10",
            "last_seen_utc": "2026-07-14 12:56:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850267": [
        {
            "ioc_value": "zhnar.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 12:53:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850263": [
        {
            "ioc_value": "ebju.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 12:18:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850262": [
        {
            "ioc_value": "kxwuxeow.site-shartbandi-variz-mostagim.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 12:09:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850248": [
        {
            "ioc_value": "gugonaftikzin.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 11:37:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850247": [
        {
            "ioc_value": "lqom.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 11:18:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850246": [
        {
            "ioc_value": "vgepnjpy.site-shartbandi-variz-kam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 11:17:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850245": [
        {
            "ioc_value": "cogv.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 11:17:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850239": [
        {
            "ioc_value": "kysv223u.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 10:58:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850238": [
        {
            "ioc_value": "mg0bl3r5.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 10:55:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850237": [
        {
            "ioc_value": "ratsales.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 10:25:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e5b838465187678ecd5392d4c7503ecf9f920c56cb2c537e46f2265aa6b9dc86/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850236": [
        {
            "ioc_value": "46.151.182.38:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 10:21:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/888625bb2887f6965cf6d46b7888f73d9d55c0f0caf0abe54221bc455e5534d1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850235": [
        {
            "ioc_value": "104.239.66.185:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-14 10:20:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3738537154bfc5ea1b5af6034602c550f603deb11cbbef3018f668f4907f4d37/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850234": [
        {
            "ioc_value": "bujybzpn.site-shartbandi-takhtenard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 10:19:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850233": [
        {
            "ioc_value": "zpuc.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 10:18:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850232": [
        {
            "ioc_value": "site-shartbandi-takhtenard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 10:17:26",
            "last_seen_utc": "2026-07-14 21:23:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850231": [
        {
            "ioc_value": "hwfd.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 10:16:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850230": [
        {
            "ioc_value": "connectus.cristianoobrigado.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 10:15:56",
            "last_seen_utc": "2026-07-14 14:24:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/55504df33a0196066494d26d6f8c0533391b220630a9c800c7f1eb0cbc776ce2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850225": [
        {
            "ioc_value": "173.231.188.245:21075",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 10:11:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78b21599a83dbfad39c17202d37dd2b6d552c9679755bc199a9826f3dd0e40db/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850224": [
        {
            "ioc_value": "ftp.conceptpavagebtp.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 10:08:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0a8c62f9f4bb3fbc99e098bc5fb87317c6642fb74f74da861ecc88bf65193700/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850220": [
        {
            "ioc_value": "185.242.3.87:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-14 09:59:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1850219": [
        {
            "ioc_value": "robin43hf.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 09:55:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/24ae9a43b77aafcbf4fb08285ab0fbd725fddf2611f1713ab1a7c1097ecaa3db/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850218": [
        {
            "ioc_value": "ferjksax.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 09:55:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/24ae9a43b77aafcbf4fb08285ab0fbd725fddf2611f1713ab1a7c1097ecaa3db/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850163": [
        {
            "ioc_value": "166.1.60.161:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/mossadproxy/README.md",
            "tags": "botnet,c2,ddos,mossadproxy,proxy",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850164": [
        {
            "ioc_value": "194.190.152.35:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/mossadproxy/README.md",
            "tags": "botnet,c2,ddos,mossadproxy,proxy",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850165": [
        {
            "ioc_value": "194.226.121.96:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/mossadproxy/README.md",
            "tags": "botnet,c2,ddos,mossadproxy,proxy",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850166": [
        {
            "ioc_value": "192.145.30.230:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/mossadproxy/README.md",
            "tags": "botnet,c2,ddos,mossadproxy,proxy",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850167": [
        {
            "ioc_value": "45.10.164.23:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/mossadproxy/README.md",
            "tags": "botnet,c2,ddos,mossadproxy,proxy",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850170": [
        {
            "ioc_value": "176.65.139.120:10213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/cecbot/report.md",
            "tags": "android,botnet,c2,cecbot,ddos",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850171": [
        {
            "ioc_value": "194.61.121.154:10213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/cecbot/report.md",
            "tags": "android,botnet,c2,cecbot,ddos",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850172": [
        {
            "ioc_value": "45.156.27.243:10213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:50:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/cecbot/report.md",
            "tags": "android,botnet,c2,cecbot,ddos",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850173": [
        {
            "ioc_value": "185.241.208.52:10213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/cecbot/report.md",
            "tags": "android,botnet,c2,cecbot,ddos",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850174": [
        {
            "ioc_value": "45.154.98.125:10213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/cecbot/report.md",
            "tags": "android,botnet,c2,cecbot,ddos",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850175": [
        {
            "ioc_value": "169.40.135.108:10213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/cecbot/report.md",
            "tags": "android,botnet,c2,cecbot,ddos",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850189": [
        {
            "ioc_value": "141.98.10.141:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850190": [
        {
            "ioc_value": "169.40.135.108:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850191": [
        {
            "ioc_value": "217.60.195.22:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850192": [
        {
            "ioc_value": "31.57.184.162:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850193": [
        {
            "ioc_value": "45.156.87.174:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850168": [
        {
            "ioc_value": "206.189.146.157:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 09:49:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850194": [
        {
            "ioc_value": "62.60.226.111:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850195": [
        {
            "ioc_value": "80.94.92.73:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850196": [
        {
            "ioc_value": "91.92.42.236:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850197": [
        {
            "ioc_value": "93.152.221.240:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 09:49:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/katana/report.md",
            "tags": "botnet,c2,ddos,katana,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1850202": [
        {
            "ioc_value": "159.89.132.240:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 09:49:48",
            "last_seen_utc": "2026-07-18 08:16:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850217": [
        {
            "ioc_value": "96.9.231.213:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:47:18",
            "last_seen_utc": "2026-08-19 18:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850216": [
        {
            "ioc_value": "47.109.181.81:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:46:38",
            "last_seen_utc": "2026-08-13 18:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850215": [
        {
            "ioc_value": "35.78.107.61:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:46:14",
            "last_seen_utc": "2026-08-29 08:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850214": [
        {
            "ioc_value": "216.9.225.38:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 09:45:59",
            "last_seen_utc": "2026-08-13 08:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850213": [
        {
            "ioc_value": "204.44.69.214:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 09:44:51",
            "last_seen_utc": "2026-08-13 08:45:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850212": [
        {
            "ioc_value": "20.226.72.17:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:44:48",
            "last_seen_utc": "2026-08-24 18:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850211": [
        {
            "ioc_value": "198.135.49.85:62025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 09:44:41",
            "last_seen_utc": "2026-08-14 18:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850210": [
        {
            "ioc_value": "192.255.195.147:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 09:44:34",
            "last_seen_utc": "2026-08-13 18:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850209": [
        {
            "ioc_value": "185.115.164.60:65531",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 09:44:21",
            "last_seen_utc": "2026-08-13 08:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850208": [
        {
            "ioc_value": "185.115.164.60:11883",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 09:44:19",
            "last_seen_utc": "2026-08-13 18:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850207": [
        {
            "ioc_value": "172.232.122.241:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:44:05",
            "last_seen_utc": "2026-08-17 20:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850206": [
        {
            "ioc_value": "164.90.202.48:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:44:01",
            "last_seen_utc": "2026-08-25 08:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850205": [
        {
            "ioc_value": "139.199.87.99:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:43:35",
            "last_seen_utc": "2026-08-17 20:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850204": [
        {
            "ioc_value": "130.49.214.23:59838",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-14 09:43:30",
            "last_seen_utc": "2026-08-16 18:43:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850203": [
        {
            "ioc_value": "118.89.121.171:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-14 09:43:26",
            "last_seen_utc": "2026-08-13 18:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850201": [
        {
            "ioc_value": "vozzijig.site-shartbandi-pasor.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 09:22:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850200": [
        {
            "ioc_value": "qjrfbafk.site-shartbandi-pasor.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 09:21:17",
            "last_seen_utc": "2026-07-15 07:01:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850199": [
        {
            "ioc_value": "drij.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 09:17:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850185": [
        {
            "ioc_value": "fnexayyt.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:59:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850184": [
        {
            "ioc_value": "yvfhioet.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:59:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850183": [
        {
            "ioc_value": "172.111.169.69:56090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 08:57:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d26c2fb14d85c8d1d31bb271590c9c9d694a891e2db4385e6c7dc16bf6c9d481/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850182": [
        {
            "ioc_value": "ntegm9h9.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:55:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850181": [
        {
            "ioc_value": "9sykbnjf.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:55:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850180": [
        {
            "ioc_value": "46.183.222.96:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 08:55:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30bb2e3f95802ba961bceb0f553ebe9ea81745fe6c63a49dff9c04727a48535c/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850179": [
        {
            "ioc_value": "qhy0wolx.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:53:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850178": [
        {
            "ioc_value": "nwp4ut5h.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:53:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850177": [
        {
            "ioc_value": "204.44.69.214:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 08:52:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a50b107c3c5ad5704f784b9d651d4d3e94e9931eea94c69705c4f935161dea1d/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850176": [
        {
            "ioc_value": "judasbuoyeahuruhusitemnaakezigbonduyaaaa.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 08:50:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c478f13eefa74178e585ec29988ab6bc045077b3db9dea930109793716928fad/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850169": [
        {
            "ioc_value": "marjdl.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-14 08:19:50",
            "last_seen_utc": "2026-07-14 19:09:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850162": [
        {
            "ioc_value": "gksn.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:16:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850157": [
        {
            "ioc_value": "feulntzw.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 08:04:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850156": [
        {
            "ioc_value": "woolstem.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-14 07:49:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850155": [
        {
            "ioc_value": "moonshadowforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-14 07:47:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850151": [
        {
            "ioc_value": "endpoint.project0.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-14 07:45:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "cryptominer,etchash,gpu-hunter,project0",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1850152": [
        {
            "ioc_value": "5.189.149.171:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-14 07:45:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "etchash,gpu-hunter,project0",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1850153": [
        {
            "ioc_value": "5.189.149.171:1010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-14 07:45:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "etchash,gpu-hunter,project0",
            "anonymous": 0,
            "reporter": "sigsec"
        }
    ],
    "1850154": [
        {
            "ioc_value": "ftp.fibrasanchez.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-14 07:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30876a3777a474cfb1517a30d48d1c588774c8e69c090377dbc6e7f554e16e54/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850150": [
        {
            "ioc_value": "zrul.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 07:22:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850149": [
        {
            "ioc_value": "ydfa.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 07:20:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850148": [
        {
            "ioc_value": "zwtocirl.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 07:14:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850147": [
        {
            "ioc_value": "pkspkyrf.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 07:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850146": [
        {
            "ioc_value": "45.88.186.125:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 07:06:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dab128d1dba2feeb8762b300bc6ba32eb976cbe33274ac29c2c0d4c4eda5e6f7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850143": [
        {
            "ioc_value": "45.13.238.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 07:04:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850141": [
        {
            "ioc_value": "178.128.208.65:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 07:01:43",
            "last_seen_utc": "2026-07-15 09:19:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850142": [
        {
            "ioc_value": "213.152.162.21:11525",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-14 07:01:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ae1a58b73c14de3d0d4af02ac0c136a4e804ed1a911de386fa40208672611309/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850140": [
        {
            "ioc_value": "39.105.94.168:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-14 06:57:56",
            "last_seen_utc": "2026-07-15 07:41:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850139": [
        {
            "ioc_value": "17eqwy30.takhtenard.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 06:55:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850137": [
        {
            "ioc_value": "206.189.146.157:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 06:38:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850136": [
        {
            "ioc_value": "cwkw.site-shartbandi-bedun-filter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 06:24:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850132": [
        {
            "ioc_value": "dddododiiik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-14 06:22:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850133": [
        {
            "ioc_value": "extranet-partners-report.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-14 06:22:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850134": [
        {
            "ioc_value": "imagesafedown.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-14 06:22:42",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850135": [
        {
            "ioc_value": "mentopo.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-14 06:22:42",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850131": [
        {
            "ioc_value": "ghyrtamr.plinko-1xbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 06:19:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850130": [
        {
            "ioc_value": "bfpi.site-shartbandi-bedun-filter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 06:19:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850129": [
        {
            "ioc_value": "tdzfnvda.plinko-1xbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 06:15:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850128": [
        {
            "ioc_value": "yliw.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 06:14:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850127": [
        {
            "ioc_value": "94.154.32.144:1912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-14 06:10:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850124": [
        {
            "ioc_value": "ucpwcpfl.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 05:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850123": [
        {
            "ioc_value": "eonjaoyi.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 05:53:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850122": [
        {
            "ioc_value": "edge.kernelmonitor.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-14 05:33:38",
            "last_seen_utc": "2026-07-14 05:33:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/093fc9123303ffdcd62b53d3e091bc2b0e7f2a205227825294b4f247c33f8de5/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850054": [
        {
            "ioc_value": "https://irahook.com/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 05:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850055": [
        {
            "ioc_value": "https://irahook.com/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 05:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850058": [
        {
            "ioc_value": "http://44.223.110.247:1337/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 05:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850059": [
        {
            "ioc_value": "http://44.223.110.247:1337/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 05:30:29",
            "last_seen_utc": "2026-07-13 23:27:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850060": [
        {
            "ioc_value": "http://44.223.110.247:1337/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 05:30:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850061": [
        {
            "ioc_value": "http://44.223.110.247:1337/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-14 05:30:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850106": [
        {
            "ioc_value": "188.166.146.39:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-14 05:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1850121": [
        {
            "ioc_value": "dscf.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 05:23:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850120": [
        {
            "ioc_value": "yaxy.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 05:20:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850115": [
        {
            "ioc_value": "ewdllypo.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 05:00:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850114": [
        {
            "ioc_value": "bjf54ffm.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 04:56:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850113": [
        {
            "ioc_value": "hbh9htqr.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 04:54:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850112": [
        {
            "ioc_value": "wcwe.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 04:33:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850110": [
        {
            "ioc_value": "154.88.97.61:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-14 04:05:07",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850105": [
        {
            "ioc_value": "euspwbzy.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 04:03:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850104": [
        {
            "ioc_value": "eekeltps.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 04:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850103": [
        {
            "ioc_value": "jz8kpepi.jadoou.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:53:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850102": [
        {
            "ioc_value": "mpdmwhr9.jadoobet.forum",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:53:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850101": [
        {
            "ioc_value": "brfavfmp.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:48:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850100": [
        {
            "ioc_value": "bshttocg.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:47:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850099": [
        {
            "ioc_value": "iowx.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:47:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850098": [
        {
            "ioc_value": "ezbj.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:45:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850097": [
        {
            "ioc_value": "crehmoqz.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:30:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850096": [
        {
            "ioc_value": "fukyfket.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 03:28:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850089": [
        {
            "ioc_value": "s645gfw3.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 02:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850088": [
        {
            "ioc_value": "nqzp.jadoou.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 02:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850081": [
        {
            "ioc_value": "43.161.215.33:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-14 02:05:05",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850080": [
        {
            "ioc_value": "sqbw.jadoou.makeup",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 01:49:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850079": [
        {
            "ioc_value": "ydzi.jadoou.makeup",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 01:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850078": [
        {
            "ioc_value": "wmgbwskd.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 01:38:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850077": [
        {
            "ioc_value": "fbecwqni.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 01:37:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850073": [
        {
            "ioc_value": "hczzqwrl.pinbahis-bedon-filter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 00:54:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850072": [
        {
            "ioc_value": "mkneg2lo.pinbahis-bedon-filter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 00:53:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850070": [
        {
            "ioc_value": "wjek.jadoou.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 00:45:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850069": [
        {
            "ioc_value": "epal.jadoou.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 00:44:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850068": [
        {
            "ioc_value": "marjdl.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-14 00:16:48",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850063": [
        {
            "ioc_value": "cvjd.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 23:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850062": [
        {
            "ioc_value": "vbtl.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 23:43:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850057": [
        {
            "ioc_value": "hqmcfjqy.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 23:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850056": [
        {
            "ioc_value": "178.80.40.237:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-13 23:20:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850053": [
        {
            "ioc_value": "ukoyzikh.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 23:18:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850048": [
        {
            "ioc_value": "uwkx2xdq.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:56:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850047": [
        {
            "ioc_value": "xprba39f.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:55:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850046": [
        {
            "ioc_value": "znmcx4xz.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:53:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850045": [
        {
            "ioc_value": "igowjhcd.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850044": [
        {
            "ioc_value": "xt19c0ua.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:52:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850043": [
        {
            "ioc_value": "ztusvabt.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:51:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850042": [
        {
            "ioc_value": "vxqz.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:44:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850041": [
        {
            "ioc_value": "kzho.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 22:43:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850036": [
        {
            "ioc_value": "bwimlqru.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 21:58:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850035": [
        {
            "ioc_value": "pnxturjz.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 21:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850034": [
        {
            "ioc_value": "bfpu.rayeganmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 21:44:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850033": [
        {
            "ioc_value": "ciry.rayeganmarket.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 21:42:55",
            "last_seen_utc": "2026-07-23 08:12:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850032": [
        {
            "ioc_value": "217.60.195.194:29710",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 21:35:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41f04280d3247586155c62404609431b378f99bd7c7aff4e711e15330ee978c9/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850031": [
        {
            "ioc_value": "telemetry.incidentcenter.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-13 21:23:08",
            "last_seen_utc": "2026-07-13 21:23:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b50f2a725bec5a139e3bebe5d823af0c25d0a7335adab21b53743c2afdc0b6cb/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850029": [
        {
            "ioc_value": "cloudgateway.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-13 21:22:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/24636cfe302fe7c74efa9e78f343e1fdd984468117ebf2df80a141ef7a635fb8/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850030": [
        {
            "ioc_value": "releases.cloudgateway.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-13 21:22:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/24636cfe302fe7c74efa9e78f343e1fdd984468117ebf2df80a141ef7a635fb8/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850028": [
        {
            "ioc_value": "sermver.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 21:15:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/681def091d48f5ae99867f186a5474474e3e67e49e0ca9360fb7e2aa1b929abc/",
            "tags": "RAT,RemcosRAt",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850027": [
        {
            "ioc_value": "godpleaseblessmyworkiwanttogive.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 21:15:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/37427ee8f03636381fe41c2549b9552b52a188540cc56c859c59bcfc63f2a9b1/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850026": [
        {
            "ioc_value": "odoba.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 21:14:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850025": [
        {
            "ioc_value": "ftp.maytestlasb.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 21:11:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cab102a77fbb862f897f739bec603105ed8f49345410ff56da8b51333dd6c2fa/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850023": [
        {
            "ioc_value": "178.16.52.93:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-13 21:09:07",
            "last_seen_utc": "2026-08-27 07:29:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/de561c4a3b59f0351d866721a5a204bb9c1396f5a2b4d9140f7385b0c2ea102d/",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850022": [
        {
            "ioc_value": "155.103.71.115:15680",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 21:05:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48dbf74443280fa3f68e0cb00c2c482f5692428b56c95f44ee0246aab27e3cd6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850021": [
        {
            "ioc_value": "155.103.71.115:15670",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 21:05:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48dbf74443280fa3f68e0cb00c2c482f5692428b56c95f44ee0246aab27e3cd6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1850018": [
        {
            "ioc_value": "lgmkszyl.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850017": [
        {
            "ioc_value": "ljlmzirx.site-shartbandi-farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:57:56",
            "last_seen_utc": "2026-07-14 23:54:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850016": [
        {
            "ioc_value": "qnu58lbv.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850015": [
        {
            "ioc_value": "ryodr8kw.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:52:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849916": [
        {
            "ioc_value": "cacophonydiaphanous-acquiesce.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-13 20:50:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/8b0588b9-b8f3-4341-b7cd-353877f732e3",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849918": [
        {
            "ioc_value": "digitalenterprise2026.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-13 20:50:02",
            "last_seen_utc": "2026-08-20 19:47:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/9cb4c7eb-84ad-4634-ab28-5d452eeabcdb",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849922": [
        {
            "ioc_value": "iwannagetmoremoney.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-13 20:50:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0534bef5-b653-47b6-93cd-29010b9687d2",
            "tags": "clickfix,etherhiding,hijackloader,snappyclient",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849923": [
        {
            "ioc_value": "slippingpit61353.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-13 20:50:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0534bef5-b653-47b6-93cd-29010b9687d2",
            "tags": "clickfix,etherhiding,hijackloader,snappyclient",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849925": [
        {
            "ioc_value": "91.92.240.254:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-07-13 20:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0534bef5-b653-47b6-93cd-29010b9687d2",
            "tags": "clickfix,etherhiding,hijackloader,snappyclient",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849926": [
        {
            "ioc_value": "91.92.240.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-07-13 20:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0534bef5-b653-47b6-93cd-29010b9687d2",
            "tags": "clickfix,etherhiding,hijackloader,snappyclient",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849933": [
        {
            "ioc_value": "206.189.17.74:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 20:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849934": [
        {
            "ioc_value": "0id1.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849935": [
        {
            "ioc_value": "0id2.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849936": [
        {
            "ioc_value": "0id3.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849938": [
        {
            "ioc_value": "0id5.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849937": [
        {
            "ioc_value": "0id4.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849939": [
        {
            "ioc_value": "0id6.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849940": [
        {
            "ioc_value": "0id7.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:54",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849941": [
        {
            "ioc_value": "0id8.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:54",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849942": [
        {
            "ioc_value": "0id9.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:54",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849943": [
        {
            "ioc_value": "authid1.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:53",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849944": [
        {
            "ioc_value": "authid2.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:53",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849945": [
        {
            "ioc_value": "authid3.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:52",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849946": [
        {
            "ioc_value": "authid4.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:52",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849947": [
        {
            "ioc_value": "authid5.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:52",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849948": [
        {
            "ioc_value": "authid6.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:51",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849949": [
        {
            "ioc_value": "authid7.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:51",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849950": [
        {
            "ioc_value": "193.181.46.146:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:50",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849951": [
        {
            "ioc_value": "193.104.222.134:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:50",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849952": [
        {
            "ioc_value": "http://159.65.201.180/verify/request.vbs",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849953": [
        {
            "ioc_value": "http://159.65.201.180/hGkBCsBr/Full%20AES.pyw",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix,clipper,pyAdmin2,python-rat",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849961": [
        {
            "ioc_value": "206.189.146.157:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 20:49:47",
            "last_seen_utc": "2026-07-15 08:54:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849980": [
        {
            "ioc_value": "lb-rnypyjwi-rzm2gb9ys7wtc4u0.clb.sg-tencentclb.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849981": [
        {
            "ioc_value": "lb-ndrq4ayq-1h7mf9psqdkb65lv.clb.sg-tencentclb.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849982": [
        {
            "ioc_value": "c.gbwhat.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:46",
            "last_seen_utc": "2026-07-13 19:56:46",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849983": [
        {
            "ioc_value": "h5.gbwhatsapp.download",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:46",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849984": [
        {
            "ioc_value": "gbwaapps.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:45",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849985": [
        {
            "ioc_value": "gb-dwnplus.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:44",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849986": [
        {
            "ioc_value": "gbw.cmpc.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849987": [
        {
            "ioc_value": "ug.gbwhat.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:43",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849988": [
        {
            "ioc_value": "ug.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:43",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849989": [
        {
            "ioc_value": "ug.obwhatsappdownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:42",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849990": [
        {
            "ioc_value": "gbappze.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:42",
            "last_seen_utc": "2026-07-13 19:56:47",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849991": [
        {
            "ioc_value": "app.gbwhat.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849992": [
        {
            "ioc_value": "app.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849993": [
        {
            "ioc_value": "static.cdns.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849996": [
        {
            "ioc_value": "origin-apk.gbwhat.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849994": [
        {
            "ioc_value": "apk.obwhatsappdownload.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849995": [
        {
            "ioc_value": "apk.whatsplusdownload.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849997": [
        {
            "ioc_value": "origin-apk.obwhatsappdownload.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849998": [
        {
            "ioc_value": "origin-ug.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849999": [
        {
            "ioc_value": "origin-www.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "android,gbwhatsapp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850011": [
        {
            "ioc_value": "twimg.media",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 20:49:33",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "cloaker,tds,turnstile",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1850014": [
        {
            "ioc_value": "hxea.psikologer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:43:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850013": [
        {
            "ioc_value": "xhqt.psikologer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:42:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1850002": [
        {
            "ioc_value": "obsudfch.site-shartbandi-enfejar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1850001": [
        {
            "ioc_value": "wbffakmr.site-shartbandi-enfejar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 20:02:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849979": [
        {
            "ioc_value": "85.8.149.156:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 19:45:28",
            "last_seen_utc": "2026-09-01 02:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849978": [
        {
            "ioc_value": "5.175.218.71:5691",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 19:45:13",
            "last_seen_utc": "2026-08-13 08:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849977": [
        {
            "ioc_value": "45.59.114.202:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-13 19:45:03",
            "last_seen_utc": "2026-08-15 08:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849976": [
        {
            "ioc_value": "37.235.54.142:53236",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-13 19:44:54",
            "last_seen_utc": "2026-09-01 02:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849974": [
        {
            "ioc_value": "23.27.52.106:28736",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-13 19:44:48",
            "last_seen_utc": "2026-09-01 02:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849975": [
        {
            "ioc_value": "ecyz.plinko-1xbet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 19:44:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849973": [
        {
            "ioc_value": "212.180.120.35:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 19:44:18",
            "last_seen_utc": "2026-08-13 08:45:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849972": [
        {
            "ioc_value": "204.44.69.214:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 19:44:13",
            "last_seen_utc": "2026-08-13 18:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849970": [
        {
            "ioc_value": "192.255.195.147:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 19:44:03",
            "last_seen_utc": "2026-08-12 18:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849971": [
        {
            "ioc_value": "192.255.195.147:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 19:44:03",
            "last_seen_utc": "2026-08-12 18:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849968": [
        {
            "ioc_value": "188.209.158.161:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 19:44:00",
            "last_seen_utc": "2026-08-13 08:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849969": [
        {
            "ioc_value": "188.209.158.161:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 19:44:00",
            "last_seen_utc": "2026-08-13 08:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849967": [
        {
            "ioc_value": "185.212.131.27:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-13 19:43:57",
            "last_seen_utc": "2026-09-01 02:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849966": [
        {
            "ioc_value": "172.86.119.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-13 19:43:44",
            "last_seen_utc": "2026-08-14 08:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849965": [
        {
            "ioc_value": "128.90.105.247:7998",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-13 19:43:19",
            "last_seen_utc": "2026-08-19 18:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849964": [
        {
            "ioc_value": "113.31.102.219:21935",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 19:43:17",
            "last_seen_utc": "2026-08-13 08:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849963": [
        {
            "ioc_value": "103.83.87.107:4098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 19:43:11",
            "last_seen_utc": "2026-08-14 08:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849960": [
        {
            "ioc_value": "texjqbwa.site-shartbandi-bedun-filter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 19:08:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849957": [
        {
            "ioc_value": "36.140.162.173:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 19:05:07",
            "last_seen_utc": "2026-09-01 02:47:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849955": [
        {
            "ioc_value": "ign0g5ax.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 18:54:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849954": [
        {
            "ioc_value": "7vq4on85.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 18:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849932": [
        {
            "ioc_value": "wjyt.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 18:43:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849931": [
        {
            "ioc_value": "tvfe.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 18:41:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849930": [
        {
            "ioc_value": "nswofmyl.site-shartbandi-50toman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 18:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849929": [
        {
            "ioc_value": "bdkiwoqn.site-shartbandi-50toman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 18:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849924": [
        {
            "ioc_value": "p9kos7r3.scriptyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 17:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849919": [
        {
            "ioc_value": "kzjx.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 17:43:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849917": [
        {
            "ioc_value": "xymg.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 17:41:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849914": [
        {
            "ioc_value": "moonshadowforge.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-13 17:24:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/9a5e1992-edbc-408d-a24d-4f6aa1df5ac1",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849915": [
        {
            "ioc_value": "etomskuk.site-shartbandi5000toman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 17:17:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849913": [
        {
            "ioc_value": "nazvnhtd.site-shartbandi5000toman.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 17:15:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849911": [
        {
            "ioc_value": "172.111.169.73:57700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 17:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849910": [
        {
            "ioc_value": "sc-crypt.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 17:09:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dedabf845427e3983739ceef739528d80bffd209ca1a6328892dd169385b5d4a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849909": [
        {
            "ioc_value": "timecommittee.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-13 17:07:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849908": [
        {
            "ioc_value": "nexrogcapital.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-13 17:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6eb36447883376c1cc14129e77d8bebec87a1ac31ea069442ba76949797da3e1/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849901": [
        {
            "ioc_value": "3cdd0d915cb1e61ab3d3145107fa4f3ed2800402",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849902": [
        {
            "ioc_value": "66a00a43bf3626d775015cec5bb11d8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849897": [
        {
            "ioc_value": "746c06f05b8e3bc93d6495a6c447c3c1874bd77011c33b0bcfe74ae27addbfaf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-13 16:58:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849898": [
        {
            "ioc_value": "6ce65e50e8b91686e401e7fda41935a04503a2a6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-13 16:58:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849899": [
        {
            "ioc_value": "474de2155ee5c575d408806412c90411",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-13 16:58:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849900": [
        {
            "ioc_value": "63423364abc33ebeda68838dd5605d60b883e21f3c29b1d98c927c75c8fb25d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849894": [
        {
            "ioc_value": "f36467769f8a9e79cf9342a01622cd6a099fb0104f20057c44fa8758823f1c6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849895": [
        {
            "ioc_value": "3fe86ee5b3223af55f54554f37003ab8a33e9b0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849896": [
        {
            "ioc_value": "57cc2a7038bbd3e297c59144e2f3ed85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849891": [
        {
            "ioc_value": "4049128f0308d05dcb8d24b668f69238d720199de32ba0d8304cd3c3b3bde1b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-13 16:58:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849892": [
        {
            "ioc_value": "b35a83420c9d263788f785d5d0e0c64801521a52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-13 16:58:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849893": [
        {
            "ioc_value": "1b707c3c5fbb377d78c06eff79829490",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-13 16:58:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849888": [
        {
            "ioc_value": "3ecae3266e1e24200de4a94f0ecdd504219d6de741af53340f65de9c8098fa01",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849889": [
        {
            "ioc_value": "9a2f37ff8710fe00d976d49179d9b9110a2b4e04",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849890": [
        {
            "ioc_value": "fcc1104a5b4508c3f0c1c467d88941e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849884": [
        {
            "ioc_value": "879ad6297b69d8265245cc370e7c0d05",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849885": [
        {
            "ioc_value": "d81d3e290d3e6f3f453a0e911069c95065ad52287bf2d46d4cbd12f268a423e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849886": [
        {
            "ioc_value": "fe3f06c245b31847c1cbddfa747c384ed355ce22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849887": [
        {
            "ioc_value": "2ea79a634c56d40338763ea276e596a0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-13 16:58:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849881": [
        {
            "ioc_value": "0c193f0e39efbab65b8ab5dbd6bdb7e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849882": [
        {
            "ioc_value": "9587e8422655a68369d7b00e521b7d1cd3b32e57b624c253526a9b0e094f33fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849883": [
        {
            "ioc_value": "c07235fe29987131be0d3640164d9c720094c7c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849878": [
        {
            "ioc_value": "50cf5b4eb0b43d08455a381b05f4a4d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.qvoidstealer",
            "malware_alias": "Qvoid-Token-Grabber",
            "malware_printable": "QvoidStealer",
            "first_seen_utc": "2026-07-13 16:58:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849879": [
        {
            "ioc_value": "25f0b776a5fa4bbf0f0727207cdcf58b3f883d2f0e210556350d050b427e69d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849880": [
        {
            "ioc_value": "cff5e73dac39d69216ae96b95134373ff5ffc418",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849875": [
        {
            "ioc_value": "ec9416ccf51a95a73d9cbd6a54394212",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-13 16:58:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849876": [
        {
            "ioc_value": "34ad97945a1f70cdbf8af7777a6c71c990d841840cf3c94a387f6cc83450ad4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.qvoidstealer",
            "malware_alias": "Qvoid-Token-Grabber",
            "malware_printable": "QvoidStealer",
            "first_seen_utc": "2026-07-13 16:58:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849877": [
        {
            "ioc_value": "63000ff3aa0958801d3549446c7853f0d0223bcf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.qvoidstealer",
            "malware_alias": "Qvoid-Token-Grabber",
            "malware_printable": "QvoidStealer",
            "first_seen_utc": "2026-07-13 16:58:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849872": [
        {
            "ioc_value": "bc8c370a9bf67ef75534753fb0d601df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-13 16:58:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849873": [
        {
            "ioc_value": "52bd61ba2153572260fc9b8f7eac34b613272c428e715fe6b3505f96e4eacf5d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-13 16:58:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849874": [
        {
            "ioc_value": "f70b70582d3935ae4b225e7899f8e19c7983f0b7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-13 16:58:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849869": [
        {
            "ioc_value": "8043b87976309cfaf0ccff63f629b9b6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-13 16:58:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849870": [
        {
            "ioc_value": "c4fc9162227b35c631fbe623ee30fa7f660ed015915ed66c76942b1583ac3f77",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-13 16:58:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849871": [
        {
            "ioc_value": "e315a7611e35a532955b1c4ddcf8a6c50771cf8b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-13 16:58:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849866": [
        {
            "ioc_value": "9449a051bb8d647541dd980b998baabd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-13 16:58:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849867": [
        {
            "ioc_value": "475774774c013c3a5d6db3ccdb025504c7151999a63097bf98476578d0533f5b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-13 16:58:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849868": [
        {
            "ioc_value": "116e43d5451e060b48a892e46a6f83e0374bde3f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-13 16:58:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849863": [
        {
            "ioc_value": "866428edb5f4c4900085fc9cd5f114f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849864": [
        {
            "ioc_value": "937c16c2f853b605c2be68982a65109fcd5f2cdf704b9438cd254a38ff529b7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-13 16:58:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849865": [
        {
            "ioc_value": "83dd3427c1f594f93bdec864dca1a59377259012",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-13 16:58:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849860": [
        {
            "ioc_value": "5cbb51cf747cd514eb333f402e21866c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-13 16:58:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849861": [
        {
            "ioc_value": "655456dd88dbb7f8c7770dc5abd8637a4a5177c8df3edea15f51f49eee1cf325",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849862": [
        {
            "ioc_value": "cb822a77c0b8eac0f1a38aa488db71939c44dd39",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849856": [
        {
            "ioc_value": "b4875cd62a35191d2d62b541a1b4e5505b71e0ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 16:58:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849857": [
        {
            "ioc_value": "e57a87dc9ab5bd0bf814434f9579cfff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 16:58:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849858": [
        {
            "ioc_value": "3b328b13d6925bb86cfa46b58586530dd14e6f0f627ec92a1f14ef162d5712ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-13 16:58:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849859": [
        {
            "ioc_value": "6e1561e0b51a74b01a2e0377f52ea95a38e439fb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-13 16:58:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849854": [
        {
            "ioc_value": "0a6d724265d49486a917d7af4907cda2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849855": [
        {
            "ioc_value": "8b05e74af9b6c18b31a656b26f3458dbd1bab2527ba6830954978c66c6e219ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 16:58:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849851": [
        {
            "ioc_value": "0a9429738e11acea24949b0247b31ba2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849852": [
        {
            "ioc_value": "3e8fb7acab8a93b43f25cbdb63b4186057754dcc4a07bcd91fb5ca7090ccb9e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849853": [
        {
            "ioc_value": "ef1415db341fb693f3e5c71af5d5c14955bb95dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849847": [
        {
            "ioc_value": "57a314d4466848294bb2c2bdf87c666185574b18",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-13 16:58:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849848": [
        {
            "ioc_value": "7f3edcd0ad17cae6ef95cc16e208eedf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-13 16:58:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849849": [
        {
            "ioc_value": "1c82635c29f40e971971e150ebee6f36dabdd2a156f51214f20425315abb413f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849850": [
        {
            "ioc_value": "6a08b69f2d8b331b829365e91611f201898817a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849844": [
        {
            "ioc_value": "92a66775c2c210b5d664b45bba13551745b71d97",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849845": [
        {
            "ioc_value": "b1fa9db8d01240bf70550768a66b4e5b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849846": [
        {
            "ioc_value": "7906d425e122ae7f4922dbeff8c261be021a921c5f13471a470c60c583280504",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-13 16:58:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849841": [
        {
            "ioc_value": "842612a287011c76730a167a6cae7786aee760e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849842": [
        {
            "ioc_value": "dd0634be42cda34fa24999471f418ad1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849843": [
        {
            "ioc_value": "6336530458fcfd312eca97cf85fb0d701b44514824a90e0da4c8107e768301e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849837": [
        {
            "ioc_value": "6546aad603716ebbe02412440e8d8d8e5fd7af80f212c6fe45e50a76f093c6d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849838": [
        {
            "ioc_value": "0607eb8418f7f08970c5c7439dfcf2fab2d82ace",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849839": [
        {
            "ioc_value": "cb0c6801af564392ff22f3865cd31759",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849840": [
        {
            "ioc_value": "32146526cbc3e98467c0e6fbb684f489015e59bed6a4dcff756f6f82d787c5ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849834": [
        {
            "ioc_value": "df603ed55cbf6f9d74068b956ab966a7b785eb102e1045f343d96255eb2cdc24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-13 16:58:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849835": [
        {
            "ioc_value": "5f283f5a5eb22bfeb153756a81728bf5d5c6ee71",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-13 16:58:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849836": [
        {
            "ioc_value": "1aa9416b733743f534abea90982dcd16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-13 16:58:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849831": [
        {
            "ioc_value": "d11e793159f0da3c88a9ecebb8e5df88919843a1eeaaf71117377db58224a1ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849832": [
        {
            "ioc_value": "27476d28d66e08f6f1a2b9886ca53e3fff316f76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849833": [
        {
            "ioc_value": "b83b607adaa4e982a4dfa29c57306a0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849827": [
        {
            "ioc_value": "3b483dce1793ec320b176f90492e1731",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 16:58:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849828": [
        {
            "ioc_value": "7a8e12bf814ad24df54b360d6f80bd5abf196b948ed3fc419631579fd14ffb88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849829": [
        {
            "ioc_value": "08ef6344faa6ba44127c418f11c018959f2b2ff4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849830": [
        {
            "ioc_value": "e19b9699ef34073da3ed7b181d063ddc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849824": [
        {
            "ioc_value": "8e389a517fa8de44ac433b2ab0610fd1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849825": [
        {
            "ioc_value": "65a3bf90bb49d29d3970b75e5b6e16527c135e0784bc93a23b8f206e906db79f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 16:58:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849826": [
        {
            "ioc_value": "c2ca3ffb1274c7c5898e84bac2e52e75d317cbb2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 16:58:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849821": [
        {
            "ioc_value": "dc97d08061dcc998c1033ef07b5199a6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-13 16:58:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849822": [
        {
            "ioc_value": "ae460d66dc6e46b9ee5310e9bd7e420f68a7b57c8cf25f162c18b882f37ba9aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849823": [
        {
            "ioc_value": "20e700ff615370f0573993c43fb20b8cf0d4b903",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849819": [
        {
            "ioc_value": "09abf355cbd02decf15685d6dfc47e032edd30546da64425e56721490695ffbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-13 16:58:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849820": [
        {
            "ioc_value": "361bdcf246f96e3260b22e925dbea57532e7d385",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-13 16:58:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849815": [
        {
            "ioc_value": "40eea8d73bc1f6356ac6d3f7083616b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849816": [
        {
            "ioc_value": "0fa477cedacdea2e1782414d0568b7b5e83e86ccb827710a724448e43bbf6a09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-13 16:58:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849817": [
        {
            "ioc_value": "6755f01a7afcc38ab77aff560b0c905e4dc7d7df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-13 16:58:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849818": [
        {
            "ioc_value": "4af1d2af508abef8bfc77dafa3b80444",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-13 16:58:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849812": [
        {
            "ioc_value": "026286f87e3719a78ade47685a01e31d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849813": [
        {
            "ioc_value": "b92b1cc46a2b5ca150981b4202972178a6a522d909cbf941c73f6640c46ca062",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849814": [
        {
            "ioc_value": "092a332c960a7fe7ac8381790db4bc49c359e8ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-13 16:58:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849810": [
        {
            "ioc_value": "74dcd1f64bd3b43cf659359bff1f43131d43b4e07f3a3aa2a1f74d6e7970be09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849811": [
        {
            "ioc_value": "26668a26d5eca6ecde87587b76b1e500cdf2f915",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 16:58:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849808": [
        {
            "ioc_value": "38ec84f3853bcc13d75471163ea0d0dbbfc714ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 16:58:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849809": [
        {
            "ioc_value": "7afdd824c99b170d2f2bacd172128d2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 16:58:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849807": [
        {
            "ioc_value": "cac491234125411fafd0c83e6f46066af9e4104c4d12462d09af8225f64006da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-13 16:58:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1849806": [
        {
            "ioc_value": "143.244.141.187:9895",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-13 16:55:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0b845b890586407658a6bfcb1030b32be641760120e304bdf372a835ca5d77a4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849805": [
        {
            "ioc_value": "http://zelpx.garden:9895",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-13 16:55:50",
            "last_seen_utc": "2026-07-28 21:20:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0b845b890586407658a6bfcb1030b32be641760120e304bdf372a835ca5d77a4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849804": [
        {
            "ioc_value": "30zu55sj.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:53:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849803": [
        {
            "ioc_value": "glj24nrt.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:52:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849802": [
        {
            "ioc_value": "anazon2-aws.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-13 16:48:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/7d136a0a-0819-4c7e-83a1-cab76cd3bafa",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1849801": [
        {
            "ioc_value": "bycl.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:42:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849761": [
        {
            "ioc_value": "159.89.132.240:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 16:42:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849766": [
        {
            "ioc_value": "dirone3rl3vvq64ckcnrvhe2ogrhjrwu5u7hqzrlotu3rfvmqmmbsuqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 16:42:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2076678894569296038",
            "tags": "d1r",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1849773": [
        {
            "ioc_value": "46.101.228.130:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 16:42:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849774": [
        {
            "ioc_value": "45.225.135.18:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849775": [
        {
            "ioc_value": "45.225.135.18:1212",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849776": [
        {
            "ioc_value": "64.89.163.22:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849777": [
        {
            "ioc_value": "45.225.135.18:8080",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849778": [
        {
            "ioc_value": "45.225.135.18:9091",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849779": [
        {
            "ioc_value": "45.225.135.18:6262",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "capture-drop,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849780": [
        {
            "ioc_value": "59.110.152.228:9292",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 16:42:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot,ssh-dropper",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1849783": [
        {
            "ioc_value": "79b6817aa671bd0319f64a6707e2785f15cbbc415ffc5b1fd7ce3f1d98c3b2a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 16:42:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/79b6817aa671bd0319f64a6707e2785f15cbbc415ffc5b1fd7ce3f1d98c3b2a6",
            "tags": "digitalpulse,golang,grpc,proxyware,serverModel",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1849784": [
        {
            "ioc_value": "bapp.netlink-connect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 16:42:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/79b6817aa671bd0319f64a6707e2785f15cbbc415ffc5b1fd7ce3f1d98c3b2a6",
            "tags": "digitalpulse,doh,golang,grpc,proxyware,serverModel",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1849800": [
        {
            "ioc_value": "rrbc.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:40:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849799": [
        {
            "ioc_value": "stvdwyqw.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:23:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849798": [
        {
            "ioc_value": "grajnalm.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:20:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849797": [
        {
            "ioc_value": "rqsjaodh.site-asli-bedon-filter-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:18:29",
            "last_seen_utc": "2026-07-23 00:51:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849792": [
        {
            "ioc_value": "gate-dock.deryuga-sablist.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 16:06:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849787": [
        {
            "ioc_value": "zzcg.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 15:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849786": [
        {
            "ioc_value": "zucx.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 15:40:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849785": [
        {
            "ioc_value": "kaumdowe.jadoou.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 15:37:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849768": [
        {
            "ioc_value": "2cca57zt.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 14:52:41",
            "last_seen_utc": "2026-07-21 03:29:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849767": [
        {
            "ioc_value": "tzcy9ec8.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 14:51:29",
            "last_seen_utc": "2026-07-19 18:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849765": [
        {
            "ioc_value": "ulgqmzld.jadoou.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 14:43:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849764": [
        {
            "ioc_value": "dzjr.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 14:40:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849763": [
        {
            "ioc_value": "rjhrnhqj.jadoou.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 14:39:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849762": [
        {
            "ioc_value": "qwfh.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 14:39:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849758": [
        {
            "ioc_value": "133.18.165.80:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 14:05:50",
            "last_seen_utc": "2026-08-26 08:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc14aa1d739c79a92ae7342a7f6941aab24df1b03fedd0a99d9a57cd972d569d/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849759": [
        {
            "ioc_value": "133.18.165.80:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 14:05:50",
            "last_seen_utc": "2026-07-20 18:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc14aa1d739c79a92ae7342a7f6941aab24df1b03fedd0a99d9a57cd972d569d/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849753": [
        {
            "ioc_value": "51.38.99.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-13 14:04:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/34ad97945a1f70cdbf8af7777a6c71c990d841840cf3c94a387f6cc83450ad4b/",
            "tags": "StomidaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849752": [
        {
            "ioc_value": "outlook8web.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-13 14:00:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b11880bbadb5a06cd44f60e08f48dd5592ad9add9377c81810f5216437415865/",
            "tags": "NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849751": [
        {
            "ioc_value": "133.18.165.80:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 14:00:05",
            "last_seen_utc": "2026-08-26 18:43:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849744": [
        {
            "ioc_value": "136.0.213.113:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-13 13:59:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6eb36447883376c1cc14129e77d8bebec87a1ac31ea069442ba76949797da3e1/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849743": [
        {
            "ioc_value": "droptest.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-13 13:53:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849742": [
        {
            "ioc_value": "45.198.0.193:22265",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:49:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/475774774c013c3a5d6db3ccdb025504c7151999a63097bf98476578d0533f5b/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849741": [
        {
            "ioc_value": "tcp.niceports.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:49:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/475774774c013c3a5d6db3ccdb025504c7151999a63097bf98476578d0533f5b/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849740": [
        {
            "ioc_value": "yxxyqkkf.jadoou.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:47:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849670": [
        {
            "ioc_value": "178.62.228.25:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:44",
            "last_seen_utc": "2026-07-20 09:59:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849671": [
        {
            "ioc_value": "178.62.235.14:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:43",
            "last_seen_utc": "2026-07-20 09:58:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849672": [
        {
            "ioc_value": "188.166.1.226:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:42",
            "last_seen_utc": "2026-07-20 09:58:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849673": [
        {
            "ioc_value": "188.166.105.148:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:41",
            "last_seen_utc": "2026-07-20 09:45:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849674": [
        {
            "ioc_value": "167.99.42.38:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:40",
            "last_seen_utc": "2026-07-20 08:57:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849675": [
        {
            "ioc_value": "142.93.231.53:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:39",
            "last_seen_utc": "2026-07-20 10:00:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849676": [
        {
            "ioc_value": "209.38.46.121:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:37",
            "last_seen_utc": "2026-07-20 10:00:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849677": [
        {
            "ioc_value": "178.128.249.233:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:37",
            "last_seen_utc": "2026-07-20 09:59:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849678": [
        {
            "ioc_value": "157.245.71.64:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:36",
            "last_seen_utc": "2026-07-20 09:58:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849679": [
        {
            "ioc_value": "64.225.73.161:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-13 13:44:35",
            "last_seen_utc": "2026-07-20 10:00:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849696": [
        {
            "ioc_value": "genesis-cheats.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:44:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1849700": [
        {
            "ioc_value": "wifihgu.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 13:44:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1849709": [
        {
            "ioc_value": "lumennix.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:44:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1849710": [
        {
            "ioc_value": "jadoou.boats",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849711": [
        {
            "ioc_value": "jadoou.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849712": [
        {
            "ioc_value": "jadoou.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849713": [
        {
            "ioc_value": "jadoou.monster",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849714": [
        {
            "ioc_value": "jadoou.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849715": [
        {
            "ioc_value": "jadoou.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849716": [
        {
            "ioc_value": "jadoou.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849717": [
        {
            "ioc_value": "jadoou.skin",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849718": [
        {
            "ioc_value": "jadoou.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849719": [
        {
            "ioc_value": "jadoou.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849720": [
        {
            "ioc_value": "jadoou.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:44:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849733": [
        {
            "ioc_value": "instance-v81wjy-relay.screenconnect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:44:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "access-broker,ConnectWise,RAT,remote-access-tool-abuse,ScreenConnect,SSA-phish,T1219",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849734": [
        {
            "ioc_value": "fanampiana.screenconnect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:44:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "access-broker,ConnectWise,RAT,remote-access-tool-abuse,ScreenConnect,SSA-phish,T1219",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849735": [
        {
            "ioc_value": "37.59.66.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:44:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "access-broker,ConnectWise,RAT,remote-access-tool-abuse,ScreenConnect,SSA-phish,T1219",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849737": [
        {
            "ioc_value": "cdnssa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 13:44:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "access-broker,ConnectWise,RAT,remote-access-tool-abuse,ScreenConnect,SSA-phish,T1219",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849739": [
        {
            "ioc_value": "hnzi.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:41:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849738": [
        {
            "ioc_value": "owhj.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 13:39:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849729": [
        {
            "ioc_value": "5dov6pg7.jadoou.yachts",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:52:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849728": [
        {
            "ioc_value": "k7d5sjnk.jadoobet.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:52:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849727": [
        {
            "ioc_value": "bzd7mk6q.parsalip.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:52:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849726": [
        {
            "ioc_value": "ciofzlfd.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:50:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849723": [
        {
            "ioc_value": "asuf.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:49:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849721": [
        {
            "ioc_value": "zigeoavk.jadoou.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849708": [
        {
            "ioc_value": "vzcr.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:10:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849707": [
        {
            "ioc_value": "103.118.243.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 12:10:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849706": [
        {
            "ioc_value": "hmmz.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 12:08:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849701": [
        {
            "ioc_value": "576m4hgs.jadoobet.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 11:55:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849699": [
        {
            "ioc_value": "imjbwe71.jadoou.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 11:53:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849698": [
        {
            "ioc_value": "92991q0f.jadoou.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 11:52:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849697": [
        {
            "ioc_value": "https://69.164.253.21",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-13 11:50:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3b328b13d6925bb86cfa46b58586530dd14e6f0f627ec92a1f14ef162d5712ec/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849695": [
        {
            "ioc_value": "lqljywai.jadoou.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 11:42:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849694": [
        {
            "ioc_value": "ahdwvzwy.jadoou.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 11:39:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849692": [
        {
            "ioc_value": "zxx1gpmw.pars90.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 11:16:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849685": [
        {
            "ioc_value": "154.88.99.58:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-13 11:05:06",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849683": [
        {
            "ioc_value": "ovcvaphj.jadoou.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 10:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849682": [
        {
            "ioc_value": "vnuhxmfp.jadoou.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 10:44:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849681": [
        {
            "ioc_value": "zxco.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 10:37:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849680": [
        {
            "ioc_value": "ukgf.madgal.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 10:32:21",
            "last_seen_utc": "2026-07-14 08:53:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849669": [
        {
            "ioc_value": "193.26.115.211:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-13 10:06:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6c212f1d0ae56bc0f959e24580771ad1f12ef9613b6347bc393cade21b61fe64/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849668": [
        {
            "ioc_value": "roland.uscourt.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-13 10:06:06",
            "last_seen_utc": "2026-07-13 10:06:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6c212f1d0ae56bc0f959e24580771ad1f12ef9613b6347bc393cade21b61fe64/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849667": [
        {
            "ioc_value": "37.27.30.5:2406",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 10:05:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4fc9162227b35c631fbe623ee30fa7f660ed015915ed66c76942b1583ac3f77/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849665": [
        {
            "ioc_value": "37.27.30.5:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 10:05:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4fc9162227b35c631fbe623ee30fa7f660ed015915ed66c76942b1583ac3f77/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849666": [
        {
            "ioc_value": "37.27.30.5:2405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 10:05:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c4fc9162227b35c631fbe623ee30fa7f660ed015915ed66c76942b1583ac3f77/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849661": [
        {
            "ioc_value": "5ufm19dl.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 09:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849660": [
        {
            "ioc_value": "ikjsbyby.pdfbama.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 09:52:14",
            "last_seen_utc": "2026-08-07 00:04:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849659": [
        {
            "ioc_value": "qcancmnq.jadoou.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 09:51:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849658": [
        {
            "ioc_value": "yyigpwsf.jadoou.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 09:48:33",
            "last_seen_utc": "2026-07-14 03:52:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849657": [
        {
            "ioc_value": "91.92.42.50:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-13 09:46:37",
            "last_seen_utc": "2026-08-17 20:46:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849656": [
        {
            "ioc_value": "216.9.225.38:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 09:45:31",
            "last_seen_utc": "2026-08-12 08:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849655": [
        {
            "ioc_value": "211.159.223.14:22005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 09:44:45",
            "last_seen_utc": "2026-08-12 18:44:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849654": [
        {
            "ioc_value": "188.209.158.161:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 09:44:23",
            "last_seen_utc": "2026-08-13 18:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849653": [
        {
            "ioc_value": "136.111.38.101:6932",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-13 09:43:27",
            "last_seen_utc": "2026-08-14 18:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849651": [
        {
            "ioc_value": "vfld.jadoou.my",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 09:32:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849645": [
        {
            "ioc_value": "46.101.228.130:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 09:31:45",
            "last_seen_utc": "2026-07-14 19:48:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849646": [
        {
            "ioc_value": "209.97.129.135:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 09:31:45",
            "last_seen_utc": "2026-07-14 19:48:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849647": [
        {
            "ioc_value": "188.166.146.39:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 09:31:44",
            "last_seen_utc": "2026-07-14 19:48:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849648": [
        {
            "ioc_value": "46.101.218.232:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 09:31:44",
            "last_seen_utc": "2026-07-14 19:48:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849649": [
        {
            "ioc_value": "206.189.17.74:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 09:31:44",
            "last_seen_utc": "2026-07-14 19:48:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849644": [
        {
            "ioc_value": "151.239.24.33:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 09:19:07",
            "last_seen_utc": "2026-07-15 07:41:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849643": [
        {
            "ioc_value": "64.90.13.61:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 09:19:06",
            "last_seen_utc": "2026-08-04 08:18:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849642": [
        {
            "ioc_value": "106.54.44.181:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-13 09:18:45",
            "last_seen_utc": "2026-07-14 06:57:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849636": [
        {
            "ioc_value": "zjyozhki.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 08:54:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849635": [
        {
            "ioc_value": "rdywfklo.jadoou.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 08:53:03",
            "last_seen_utc": "2026-07-15 09:38:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849634": [
        {
            "ioc_value": "gcyp.jadoou.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 08:35:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849633": [
        {
            "ioc_value": "23euhdso.deryuga-sablist.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 08:31:32",
            "last_seen_utc": "2026-07-19 07:13:19",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849631": [
        {
            "ioc_value": "63mkau.deryuga-sablist.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 08:16:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849625": [
        {
            "ioc_value": "sol-forgeen.deryuga-sablist.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 08:01:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849624": [
        {
            "ioc_value": "cacbvgql.jadoou.skin",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:59:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849622": [
        {
            "ioc_value": "fahv2h6l.kimimaro-trance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:52:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849621": [
        {
            "ioc_value": "jmwdyds9.kimimaro-trance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:51:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849619": [
        {
            "ioc_value": "l74u0.ima8invika.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:46:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849618": [
        {
            "ioc_value": "qcvuzme.ima8invika.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:46:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849617": [
        {
            "ioc_value": "tkhf.jadoou.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:33:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849616": [
        {
            "ioc_value": "omze.jadoou.mom",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:30:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849614": [
        {
            "ioc_value": "frqljktr.jadoou.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:07:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849588": [
        {
            "ioc_value": "206.189.119.212:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849589": [
        {
            "ioc_value": "139.59.161.246:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849590": [
        {
            "ioc_value": "134.122.98.48:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849591": [
        {
            "ioc_value": "167.99.143.174:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849592": [
        {
            "ioc_value": "165.232.71.140:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849593": [
        {
            "ioc_value": "64.227.117.72:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849594": [
        {
            "ioc_value": "47.107.224.89:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:07",
            "last_seen_utc": "2026-08-07 05:52:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849595": [
        {
            "ioc_value": "47.107.224.89:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:07",
            "last_seen_utc": "2026-08-06 12:09:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849596": [
        {
            "ioc_value": "144.124.239.18:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:07",
            "last_seen_utc": "2026-08-03 19:03:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849597": [
        {
            "ioc_value": "144.124.239.18:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:06",
            "last_seen_utc": "2026-08-02 13:08:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849598": [
        {
            "ioc_value": "160.119.71.125:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849599": [
        {
            "ioc_value": "160.119.71.125:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849600": [
        {
            "ioc_value": "78.153.136.26:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849601": [
        {
            "ioc_value": "78.153.136.26:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849602": [
        {
            "ioc_value": "109.237.98.136:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849603": [
        {
            "ioc_value": "109.237.98.136:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849604": [
        {
            "ioc_value": "103.214.146.46:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:02",
            "last_seen_utc": "2026-09-01 03:31:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849606": [
        {
            "ioc_value": "206.189.146.157:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:02",
            "last_seen_utc": "2026-07-16 19:23:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849605": [
        {
            "ioc_value": "103.214.146.46:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:01",
            "last_seen_utc": "2026-08-30 02:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849607": [
        {
            "ioc_value": "164.37.109.234:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:01",
            "last_seen_utc": "2026-07-18 20:33:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849608": [
        {
            "ioc_value": "178.128.208.65:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 07:03:00",
            "last_seen_utc": "2026-07-17 00:32:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/aisuru/README.md",
            "tags": "airashi,aisuru,botnet,c2,ddos,mirai",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1849610": [
        {
            "ioc_value": "bsrqzaff.jadoou.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 07:02:00",
            "last_seen_utc": "2026-07-13 11:20:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849609": [
        {
            "ioc_value": "byagqv8a.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 06:54:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849587": [
        {
            "ioc_value": "mlbn.jadoou.makeup",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 06:31:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849585": [
        {
            "ioc_value": "sth4xz5f.pacificcrestforaging.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 06:16:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849583": [
        {
            "ioc_value": "kffd3.vexlatech.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 06:13:11",
            "last_seen_utc": "2026-07-13 11:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e9a85beb46d004dec0de69d07a2e8a812b5b0d54316be9a66c0658745e54d2a6/",
            "tags": "ZigClipper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849582": [
        {
            "ioc_value": "dl.connectivityplatform.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-13 06:10:54",
            "last_seen_utc": "2026-07-13 06:10:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e9a85beb46d004dec0de69d07a2e8a812b5b0d54316be9a66c0658745e54d2a6/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849581": [
        {
            "ioc_value": "auth.predatordeuce.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-13 06:09:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69bddeb75e3b47d1e8a26073149c695309a95da1808ff3d6fefd0a1ec7affdd3/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849580": [
        {
            "ioc_value": "predatordeuce.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-13 06:09:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69bddeb75e3b47d1e8a26073149c695309a95da1808ff3d6fefd0a1ec7affdd3/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849579": [
        {
            "ioc_value": "gotynotbag.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 06:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849578": [
        {
            "ioc_value": "blakcinwhitexn.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 06:08:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849577": [
        {
            "ioc_value": "knihrdel.jadoou.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 06:08:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849576": [
        {
            "ioc_value": "auth-code-check.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 06:07:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849575": [
        {
            "ioc_value": "hruqsetf.jadoou.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 06:06:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849389": [
        {
            "ioc_value": "84bddb4249fecd2ab39b957c6394c828d8cf52b30c93012d91d229300fe5b272",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:02:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849388": [
        {
            "ioc_value": "dc25c20249bb00a996d25421f51518d4d731779a2b0351d80eb69cc7643f5dc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:02:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849390": [
        {
            "ioc_value": "b12890de51d3879bfbef2605fa74cb577a331a9fe6542b5551a57878175242b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:02:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849391": [
        {
            "ioc_value": "b71a5204be101bf70949cf9139734b2c24f221c90f13a937ff42579e8c16abab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:02:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849392": [
        {
            "ioc_value": "b732b3584d7ca6f0efa23e4f769d097f78a834f8ab27c82fbdb72bb9bbb889f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849393": [
        {
            "ioc_value": "c2e14ab636b91d09035f9f3cd539fb440803420e43d5ccd863a26cf76e62bb3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849394": [
        {
            "ioc_value": "c426daade9bacef035bbb1313f7e671ca5fae400d756670a869465f90acdd0c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849395": [
        {
            "ioc_value": "d1faaba9ccaa1ab752619342809a71d33562c69292debeafdbefcd72e0482034",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849396": [
        {
            "ioc_value": "db49945ae3e345c98501a4a9ba114f8d0ee17c8e6d12accdd5b8fb11f37290fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849397": [
        {
            "ioc_value": "e33572e56b5e3c0f75e2b7f21a3bb4a26e8616bfcbbcaaf727154a24842e823b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849398": [
        {
            "ioc_value": "eb75d27b128dc1d52e7995a404e679972fe9c881551052acbc73830a88fc98f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849399": [
        {
            "ioc_value": "eba6b5445b17bb12c5906151ac462af92e183ab4e4166d2c7517a35e2dc0fc79",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849400": [
        {
            "ioc_value": "ecb9ef2e567994ea1875226028331499d3ecf38e4426dc9ec76c26f855721c00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849401": [
        {
            "ioc_value": "ef3058513d8602821716b37128f30174022695e032dd459a6c892d268a46abfb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849402": [
        {
            "ioc_value": "f32ae21132020fd3af9479f846d4c2cbcf37c245214d298d7e70d6a14d00591e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849403": [
        {
            "ioc_value": "fbf1f069f8b9054ff20372363d41140bc12a39115245d73fac66eabc7131ac81",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849404": [
        {
            "ioc_value": "fe4195f80a950008daed587cb52b788616a54c9f09c73f42199c3f72b00fb365",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849405": [
        {
            "ioc_value": "12de27788ff089d827775fb562f89c1793122de3c7acc7bc0625c8a6496b1238",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849406": [
        {
            "ioc_value": "14438a46fae8d846e700db6d0233f2eb38ccb15ba31ec445532e2fb755edd0b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849407": [
        {
            "ioc_value": "1c9feb726b51601660408b3ad008d6fccdd8244158ae4179801df14f3df41e37",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849408": [
        {
            "ioc_value": "13467dfc0be4aa390a3b7b4873835c3cbcaad56e14e47545d4b205fedd86e662",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849409": [
        {
            "ioc_value": "13ba45489313dcd40736bb2a0b17c8a22197836485617a39515f400137c5c3b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849410": [
        {
            "ioc_value": "1b32baeb3ab66c02778e6a1de6b5840e57519cedf49f6448c9158b9c4cd34a0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849411": [
        {
            "ioc_value": "18bc19036d0195cd49f3de77c41df13982b0d2e9caddbdd8839039bd4a028cac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849412": [
        {
            "ioc_value": "18a1b42350607e3b8fca55f9bb0def6e8ddb8816688bcad71c5dab0571849455",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849413": [
        {
            "ioc_value": "174fb1202023795b7b800a7a1df621f2265f29898d8084ec7d7c155fae66cc0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849414": [
        {
            "ioc_value": "16ce238bae097e8c1c85e9c6f8b94eaf3a31431a84d82c25afaae874d4128d1a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849415": [
        {
            "ioc_value": "16919b7c70d1ac6bd35add83c94cef0ac5f7793372b7e8d70e2cd18d2e846f86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849416": [
        {
            "ioc_value": "1631d66da46472a743b221900bef6d07371d80ac170ec4d1a1e02af5e8f3fdba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849417": [
        {
            "ioc_value": "15e88b6e8590b5405c94dd395b1f33ced96a82073bbb8c3bac311cba9d79b72d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849418": [
        {
            "ioc_value": "0db4b9b06c2e05a60017bc0198d1627f55de41565c8ae30c823a99ef504a546b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849419": [
        {
            "ioc_value": "103583686cde76ef43b92fb9b7864f7242a0031afbc2f54fbbbefbc451251aad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849420": [
        {
            "ioc_value": "1389b1493f4112938ae22e6a3ae595bc7a2bca19cd308f1b8b84899c5b8dcf37",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849421": [
        {
            "ioc_value": "677c3054ca1a07cf6cdd0398f615f60ab69449d3b00dd9626e5caf71cda17829",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849422": [
        {
            "ioc_value": "9ce859a03c883759048cb702b5b187ac57ec14ab8fd12d1be5d70c39c0aa3deb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849423": [
        {
            "ioc_value": "9e337f5c3dccbb55c0e087ab3ff624c40789206135b4aa66d8266b888f1a4136",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849424": [
        {
            "ioc_value": "6333a7c2c56d9cc23ecc360870d3f784bd8557b60fedf94c7241468085d383f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849425": [
        {
            "ioc_value": "3098914bbad0149feda5f9ce9c14e1d4c0db37ed103e25384a6c9fbd5464733b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849426": [
        {
            "ioc_value": "18e2006ae25b12849a17cc8d94f009cfc43c5fb3a4d6b0b734732aa0f46066e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849427": [
        {
            "ioc_value": "72d0dbd8103521598061f22449ffa78107ccc60f1460fdf138de20d9623957ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849428": [
        {
            "ioc_value": "9b63f82a69ca19519cb188de471334479bf638af1d6cbc81aa58aab2d11f39ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849429": [
        {
            "ioc_value": "10f0b9fe9fb08fe804622dccfc33517e3db86b72453bdec6ab2482b5c06b7791",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849430": [
        {
            "ioc_value": "c219760a9a685e94da130a56703f9be06adff8021dea5837b710dc7c1fd0dfae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849431": [
        {
            "ioc_value": "b87a1bf2c48aadf3515b66a951b1e6fa6bd0e563f3529707f6201784cdfb8a3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849432": [
        {
            "ioc_value": "3d34c01ca87b8dab5bbdb9ef542efa50e6d44b5a39c4fe632a23c997af474c05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849433": [
        {
            "ioc_value": "b481de1e109a8395487aefe78174662b4fb8a02e8a3d520c5a1288f5dd2b6ec8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849434": [
        {
            "ioc_value": "7dfc057b129dc9156417334e8124e71343bc1aaeb60fffc370af58753748ebe0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849435": [
        {
            "ioc_value": "3f4bcaa0231d67040cf58eac16679c847795808e364139d4e944bc7338d41877",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849436": [
        {
            "ioc_value": "9974f44a315d71e74ce110d9dfcc7b58fcd8169718ffe13d0cb1975f071a45aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849437": [
        {
            "ioc_value": "cb0e709592ddb0e75862ab856af8cc887bdf47a2ee69495a8c062ae225e4a773",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849438": [
        {
            "ioc_value": "cd80de12a74341b9ab6a7218de49dd164d91c56ab31fa06722d964d8259a328f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849439": [
        {
            "ioc_value": "9eef714e2b7da736de9a050018be7c2490424290874519341377304b2ed75ff6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849440": [
        {
            "ioc_value": "77c0e543ef46ea1dc2182585c88f8d228f7d2c97fef4837687d06920735cf71a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849441": [
        {
            "ioc_value": "a279dfe7c95888af314337ffb9dcb3c4c528efc72dcf33764f3ec163067eb96f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849442": [
        {
            "ioc_value": "85757208f4b58cdcc94d8e85bb94a8edeeb5a6f74031195d3097b7fa237716ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849443": [
        {
            "ioc_value": "97b0093b1cc2809fa72be2d935210efecd2a7c4afab9532a832f7982f9b7d711",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849444": [
        {
            "ioc_value": "7632af21392892dc9a1a351667aa3cb425eb30026b39b82ae82268b300d4d8ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849445": [
        {
            "ioc_value": "784751e30d2f729ac455a9fc4336ee8ef53fa956fc6e16200328bba81f9c4e62",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849446": [
        {
            "ioc_value": "43bd9ddefa376c5b146d89cfa8b537bd3220945a809e0e7d6185ed3510749f6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849447": [
        {
            "ioc_value": "bc45bdd4f6623eeb898b28a483fa708b1af8078e477f18fbc7292db1240188c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849448": [
        {
            "ioc_value": "43858f85d02d85d19c84f4267293bf19a8efee6392e4c46e7213b4d82f0c9be2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849449": [
        {
            "ioc_value": "8e19018514d35c160a0d1556574457ee609e23c0527f69642a14a3f18645b246",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849450": [
        {
            "ioc_value": "dcc00ebae36b8464d44721629308bf51b9c751dcd4dbf1ca0225480fd2ad4e20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849452": [
        {
            "ioc_value": "326579ddd29f9cb523ed2438157de328085a7a77276ce895a7ed9b35045fa10c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849453": [
        {
            "ioc_value": "d92afc008e4e36487ac91bdeba83c2d3d2566debb94584197c666cd8ca051cb3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849454": [
        {
            "ioc_value": "6e1fd3355aa57043be674431fc852e4545a3286bf3de2157a2acfa2a22aee5c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849456": [
        {
            "ioc_value": "140ffa631061375a6e653331d564c6d96381c8dc3f219d108ad482054dfd83e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849455": [
        {
            "ioc_value": "a6e32bd51f133d3f7697f5100895cf4296d995107e9e0cf99cb94f307c602ed8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849457": [
        {
            "ioc_value": "3963820a8e4dab609eee66dde37f466d22889a5fea5c7282a8893a8ce348593f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849458": [
        {
            "ioc_value": "82629bb83c998a012f546817fa9745d269a012d856836ec12e98945efc76eab0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849459": [
        {
            "ioc_value": "e2a233929593848d5d52f64e1d2a482879cf513d6d685f59f3ef52361e9f018c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849460": [
        {
            "ioc_value": "98adcc5533b101861b1783d73ff950a5574829fd1a9aeb440e14b89de7cbcfb6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849461": [
        {
            "ioc_value": "28ada66863e7c08b4b7ae4033b53e01c8500fe71923ae4e1b4c0e395e2e4bd6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849462": [
        {
            "ioc_value": "c956d93d0feece67d00c476ccf23239af0b61f5fa746c9b0c712770dfc3b2d92",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849463": [
        {
            "ioc_value": "63e860567eabfd5b79f5bcc2c1b94cb8f9f4da51ee8567f2acdc1d6247e7057f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849464": [
        {
            "ioc_value": "22beb8ce784571bc9bc1706004d8b2500309f1f33a19b9dd87cae518e1d9ddb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849465": [
        {
            "ioc_value": "185b732676cff7978e65835e4cbaa96feace25c1c00c0a0ba6e3ff9790a4388a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849466": [
        {
            "ioc_value": "8c6615392c643ff2c8e13a5211fa0e0533812149f4fe837d9e0df934990b3143",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849467": [
        {
            "ioc_value": "6ec8662268923c6ff04ae21a35d0283d65c6adafb89ed8878a524d1eb7552779",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849468": [
        {
            "ioc_value": "717705566ef94eaaa7d0daa2254ae7273a1f7376bb5bc2f4f8bbd7119cfb6df5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849469": [
        {
            "ioc_value": "dd840ffa33510e57f44f0b2373d067937054cb7ec934ef13a6a4b2264cc2fb28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849470": [
        {
            "ioc_value": "4c7ca50e506e202c083a0c4502a13fd4394b7f925fa46193fad2a412b1d92e13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849471": [
        {
            "ioc_value": "39138796b72606b51b20df0835209d0893c6d6a03f5d6f3ab2527327aacf620a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849472": [
        {
            "ioc_value": "3fc2a7e874224dacdc2326790d798c7634a38374fbe872e6c05e6be6dca23a39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849473": [
        {
            "ioc_value": "8155a6c39cbf6731cf3641c70c318d0616c593862b51df70c5e0c843c1b6a5c5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849474": [
        {
            "ioc_value": "2052093678efe1af4c5a989855ac7a1f71c338b095a51cf2414feb3bf0f3dfc4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849475": [
        {
            "ioc_value": "2b7c1394d93c9f56348170d13e2892654991f0dfc6dcca4f9ed6c05d561a5258",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849476": [
        {
            "ioc_value": "347eb640e4fbd88db11e827324fbec09b6864956171fa5a425f059152bc9e736",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849477": [
        {
            "ioc_value": "343332e6514054cdfbea932550b74935b077fbb42bba378bad9a4fa5ac77cbf1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849478": [
        {
            "ioc_value": "25909f83379af111b2fef5f1324de6e0a282c94a148f296f0d7a9695536f2d5d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849479": [
        {
            "ioc_value": "130d37c61d617d67613b4edf9051249a77214c371471ed969d47e9fff5fbe426",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849480": [
        {
            "ioc_value": "23dcc662006db1a7d4bfbd65b0dd9ccb39d4790839e5d3aa415693703c6c1b6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849481": [
        {
            "ioc_value": "1825427fd4dc930f0d257bac348060332d6a4cde7329df89beba02ffb3ba8dc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849482": [
        {
            "ioc_value": "a70e28df8386ea567a98c89bc880dee686b64392da5e1aa519945ca5cf1e0b60",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849451": [
        {
            "ioc_value": "add197631db1a40de6de6cfe152d0c416f2fca377a4e3ac165a8c9e75d92328e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849483": [
        {
            "ioc_value": "91215033b273d050ae96042f77a7bc74f087fe535a7f5641ea9969a6a0383b29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849484": [
        {
            "ioc_value": "5fcdf7c6117b9c9e5d6d1554995aaa1fafadac09a216d52892980dc32b954942",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849485": [
        {
            "ioc_value": "baff2c289cc5f5244952ad6a79f7285ef7abc683a19a1731077ca9bbdde170e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849486": [
        {
            "ioc_value": "64297489ece610516e42145ca0c6e907c37eafcbe8548634b532bb69a049ca05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849487": [
        {
            "ioc_value": "aeed98f1197d723cb4255a09b55305ce35db777e080c292a0b3b56f1bad1d7d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849488": [
        {
            "ioc_value": "d7d5c9a3525005ca5a9ea67eb81bbe0b27d46833a6fc7bf51a6202ea2de2519f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849489": [
        {
            "ioc_value": "7303e7f703a38ad579f1b4baa88ed9bf68a4b4bc84e9d49c79326688c9608105",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849490": [
        {
            "ioc_value": "a35152f7d447f3e3cd988db11ba7f5da10214f23f89a2cf277a3c8fa3a70e99d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849491": [
        {
            "ioc_value": "8d28ec36b7544d35b2d7502839f56aac5c07c7eef2b42cfcea43578d826e61bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849492": [
        {
            "ioc_value": "0acf11f21fb0235791158fedf72c788c81702ee3965aab3335475a74fcbc4603",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849493": [
        {
            "ioc_value": "175f3e411a949a0afc5ddea4676a9b12e2d1dee5d182f1263e3a13cc2ba03ffb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:01:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849494": [
        {
            "ioc_value": "e817c45c2327831ba73a6fcb114fe7c274309e8ea33ddb83fcd9538560d502ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849495": [
        {
            "ioc_value": "11fb0774340b0967cf8bf28e1dde7f9e13d3939cb1d51a44e817961571706b0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849496": [
        {
            "ioc_value": "063b283fe2f3b8d75e2cd85d8e818afa0fadbfae73582d3b563fcdda18398b8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849497": [
        {
            "ioc_value": "1d7caeb680f72195d43327de0a577cef944eda553f26c918ca75d074b7124a39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849498": [
        {
            "ioc_value": "12e4d4c97baedabc92efe4584ce0d069ed39fe99fda6993c3a9e66121df39285",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849499": [
        {
            "ioc_value": "1293b71a7224c8a836f42e3860188d20d09189998a510afbb93534f0edd9a026",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849500": [
        {
            "ioc_value": "08accbb0d504e7d92aa2434c90799f4715cc7648425878c7a4c80892d098cb47",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849501": [
        {
            "ioc_value": "0866a1d47c9bb005cf753e310c0fe537406619f87d956a784407ce585f97a29f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849502": [
        {
            "ioc_value": "0933b116a526a241a5a6c111505329aa741ecb026d6184dbc45a33d95af8301d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849503": [
        {
            "ioc_value": "0b58f91b95e60f1693202981033cfdd8d9c97b3078b90d209ccba501d4568cd2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849504": [
        {
            "ioc_value": "0bc0e7b2696f2d4ed28a99f2ba645c15342a95503c21651f7152d91108227275",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849505": [
        {
            "ioc_value": "082ba1ebf80f3a599a25fc98eb54ce80abe0da0261b5f6f084c778f5cb726f70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849506": [
        {
            "ioc_value": "0ef4cd4e3ee63d72b1639f777d022e2f3e1ae44826548fb40f492d280efebea2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849507": [
        {
            "ioc_value": "05571882276c7414f2a2937ed1404670d4c4279a584dc8c196f694a8eb710cae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849508": [
        {
            "ioc_value": "e068ddb768a6a26d1e80889625b6fa8ad6c51c43e64c2b0d6e0913fd0c1d499a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849509": [
        {
            "ioc_value": "05d27e44b8ed299576257f2a396f8c1029d968a3536baed22129c990d7a4e4c5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849510": [
        {
            "ioc_value": "0cbe96b9139038552d9d0c71569ef6272ff376822f839e17f3f22510aa1ff3b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849511": [
        {
            "ioc_value": "0cbd383a2d68d0b51c53543fedd96760f57d2f0f6755705e2318c37345381e03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849512": [
        {
            "ioc_value": "a8ce4f9071f8729ac304fcd42f5f13f29762aad1c1cab6754aa511fb28f9f838",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849513": [
        {
            "ioc_value": "0a14bbfecbf3e26007097ce29fddc5f7804f0fd814982076388305b6163a9cd5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849514": [
        {
            "ioc_value": "09139f1a5c427d3b07230dd5956c94d4de2fed98ff6df18e5234621cba998d25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849515": [
        {
            "ioc_value": "08dd90bdaf08fc5251f08e5428ed35bb3a93948c88b2a6562d24877feede770f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849516": [
        {
            "ioc_value": "086bee8839948d85c9a8eb0e57806a3c5b99bbc3b74aad42d14b616ba62b04d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849535": [
        {
            "ioc_value": "206.189.144.140:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 06:00:41",
            "last_seen_utc": "2026-07-16 18:09:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849179": [
        {
            "ioc_value": "43.163.58.184:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849180": [
        {
            "ioc_value": "43.163.58.72:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849181": [
        {
            "ioc_value": "file.pushclick.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849175": [
        {
            "ioc_value": "176.108.209.127:0",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 06:00:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://cp.netstorm.site/security/dashboard",
            "tags": "cowrie,honeypot,nsvps-soc",
            "anonymous": 0,
            "reporter": "NetStorm"
        }
    ],
    "1849170": [
        {
            "ioc_value": "103.177.46.31:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-13 06:00:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1849168": [
        {
            "ioc_value": "https://irahook.com/get/config",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-13 06:00:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "CuteCraft,downloader,irahook,jar,java,Minecraft,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849169": [
        {
            "ioc_value": "https://irahook.com/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-13 06:00:24",
            "last_seen_utc": "2026-07-13 23:19:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "CuteCraft,downloader,irahook,jar,java,Minecraft,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849167": [
        {
            "ioc_value": "irahook.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-13 06:00:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "CuteCraft,downloader,irahook,jar,java,Minecraft,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849165": [
        {
            "ioc_value": "138.68.138.44:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 06:00:20",
            "last_seen_utc": "2026-07-13 06:36:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849166": [
        {
            "ioc_value": "64.227.117.72:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 06:00:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849157": [
        {
            "ioc_value": "c.whatsplusdownload.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:19",
            "last_seen_utc": "2026-07-13 19:53:26",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849158": [
        {
            "ioc_value": "c.obwhatsappdownload.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:18",
            "last_seen_utc": "2026-07-13 19:53:26",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849159": [
        {
            "ioc_value": "server.fbsecurity.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:18",
            "last_seen_utc": "2026-07-13 19:53:26",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849160": [
        {
            "ioc_value": "rpif.ad-tracker.network",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:18",
            "last_seen_utc": "2026-07-13 19:53:26",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849161": [
        {
            "ioc_value": "app.pushonline.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:17",
            "last_seen_utc": "2026-07-13 19:53:27",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849162": [
        {
            "ioc_value": "app.whatsplusdownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:16",
            "last_seen_utc": "2026-07-13 19:53:27",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849163": [
        {
            "ioc_value": "app.obwhatsappdownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:16",
            "last_seen_utc": "2026-07-13 19:53:27",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849151": [
        {
            "ioc_value": "https://gbwaaplus.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849152": [
        {
            "ioc_value": "https://gbwaaplus.com/download/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849156": [
        {
            "ioc_value": "c.pushonline.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:15",
            "last_seen_utc": "2026-07-13 19:53:26",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "Android,GBWhatsApp,OBWhatsApp,Tencent,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849104": [
        {
            "ioc_value": "159.89.132.240:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 06:00:12",
            "last_seen_utc": "2026-07-18 04:27:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849110": [
        {
            "ioc_value": "94.154.43.60:0",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-13 06:00:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://cp.netstorm.site/security/dashboard",
            "tags": "cowrie,honeypot,nsvps-soc",
            "anonymous": 0,
            "reporter": "NetStorm"
        }
    ],
    "1849111": [
        {
            "ioc_value": "134.122.98.48:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 06:00:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849131": [
        {
            "ioc_value": "206.189.144.140:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 06:00:10",
            "last_seen_utc": "2026-07-17 17:07:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849077": [
        {
            "ioc_value": "h5.webser.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:09",
            "last_seen_utc": "2026-07-13 01:16:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849078": [
        {
            "ioc_value": "c.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:08",
            "last_seen_utc": "2026-07-13 19:53:26",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849079": [
        {
            "ioc_value": "app.gbwhat.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:08",
            "last_seen_utc": "2026-07-13 01:16:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849080": [
        {
            "ioc_value": "app.whatsplus.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849081": [
        {
            "ioc_value": "https://drive.google.com/uc?export=download&id=1HcFfTSeJ59rLIfby_DJTz0sLYvQV_a7T",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849082": [
        {
            "ioc_value": "https://www.whatsplus.online/gbwhatsapp.apk",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849083": [
        {
            "ioc_value": "https://cdn.gbwhatsapp.download/app/android/conf/gb_wakeup.json",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849084": [
        {
            "ioc_value": "20e613ebf934844e6a08b0aac6b6be92d746a36de9da8bb73edbcd63d00383be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849085": [
        {
            "ioc_value": "009862bde115a3829df8acd3587c73b4416c7f35d32dfcc4e2b72906544d7c1a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:06",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849075": [
        {
            "ioc_value": "p.thelayzf.fyi",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:02",
            "last_seen_utc": "2026-07-13 01:16:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849076": [
        {
            "ioc_value": "q.thelayzf.fyi",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:02",
            "last_seen_utc": "2026-07-13 01:16:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849073": [
        {
            "ioc_value": "dubai.thelayzf.fyi",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849074": [
        {
            "ioc_value": "gbw.cmpc.fun",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 06:00:01",
            "last_seen_utc": "2026-07-13 01:16:19",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://tria.ge/260712-xp8gysfx5m",
            "tags": "AlexMods,Android,GBWhatsApp",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849054": [
        {
            "ioc_value": "167.99.143.174:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 05:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849058": [
        {
            "ioc_value": "178.128.208.65:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-13 05:59:57",
            "last_seen_utc": "2026-07-18 08:24:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1849044": [
        {
            "ioc_value": "stake.libertariancounterpoint.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-07-13 05:59:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1849568": [
        {
            "ioc_value": "xc1y2oam.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:52:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849567": [
        {
            "ioc_value": "d9xy3942.jetbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:51:30",
            "last_seen_utc": "2026-07-20 23:36:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849565": [
        {
            "ioc_value": "kelvenis.ima8invika.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:36:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849566": [
        {
            "ioc_value": "growthflo.ima8invika.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:36:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849564": [
        {
            "ioc_value": "ahkx.jadoou.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:34:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849562": [
        {
            "ioc_value": "pqxhifiu.jadoou.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:13:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849558": [
        {
            "ioc_value": "154.88.97.38:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-13 05:05:06",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849553": [
        {
            "ioc_value": "r0ot-line.veget-growing.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:01:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849554": [
        {
            "ioc_value": "drawsmart.veget-growing.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 05:01:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849552": [
        {
            "ioc_value": "pbcx.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 04:31:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849551": [
        {
            "ioc_value": "pwuz.jadoou.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 04:29:03",
            "last_seen_utc": "2026-07-30 22:12:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849550": [
        {
            "ioc_value": "validatorgateway.veget-growing.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 04:21:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849549": [
        {
            "ioc_value": "ajkcsyzc.jadoou.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 04:16:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849548": [
        {
            "ioc_value": "gwnyqoxh.jadoou.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 04:15:36",
            "last_seen_utc": "2026-07-13 14:40:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849542": [
        {
            "ioc_value": "n85e216p.jadoou.yachts",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 03:52:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849540": [
        {
            "ioc_value": "103.67.163.108:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-13 03:40:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09cc1c77657400e803310dd7ba58a91854fb275e5b29adf53a6ee2827f848366/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849539": [
        {
            "ioc_value": "viuc.jadoou.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 03:31:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849538": [
        {
            "ioc_value": "tfdu.jadoou.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 03:28:29",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849537": [
        {
            "ioc_value": "kclujyvd.jadoou.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 03:22:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849530": [
        {
            "ioc_value": "h4rd-craft.interfe7ewith.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:36:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849531": [
        {
            "ioc_value": "aiqv.interfe7ewith.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:36:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849529": [
        {
            "ioc_value": "klsv.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849528": [
        {
            "ioc_value": "bfdn.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:27:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849527": [
        {
            "ioc_value": "vspzxyds.jadoobet.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:25:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849526": [
        {
            "ioc_value": "wkmxvtlb.jadoobet.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:24:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849520": [
        {
            "ioc_value": "threadtheory.interfe7ewith.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 02:01:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849519": [
        {
            "ioc_value": "ceayo90m.jadoou.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849518": [
        {
            "ioc_value": "7c7ax36p.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:51:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849517": [
        {
            "ioc_value": "q7me81i7.jadoou.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:50:32",
            "last_seen_utc": "2026-07-13 11:52:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849383": [
        {
            "ioc_value": "04ad46d5d0ecc6996dfbf63e258e859be14c3dc8bb04d80ea46098c38629ff4f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849384": [
        {
            "ioc_value": "60f3695ccb00cbcdc7df8b12822e74808ffa3f1ec5b101c03a92b548a2a1dd88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849385": [
        {
            "ioc_value": "12510b901eafc84169485fa775fb1cadca7e5636524b0d7cd1114eb3b907fdc5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849386": [
        {
            "ioc_value": "0f4eaf6c5e61a0e5b2e20cb376c9572f3d043707f19624eefbab508a3beda635",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849387": [
        {
            "ioc_value": "4251b9ac666839fc5bdc9083bd8242f4451f6c16aed838523132b9eab0c8608d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849362": [
        {
            "ioc_value": "bdee18f0eccf8ef1b733c32e43fa9bfeaa8aaf11a38434c080b6fd9175c6bd04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849363": [
        {
            "ioc_value": "d311d6b7b942f03aee7db0cc93070b22b2ba717201320f176cae23ca655db8c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849364": [
        {
            "ioc_value": "45922fe943fe870c29019fe650a5a6123548dfc34cffebb7606842972dd19a05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849365": [
        {
            "ioc_value": "317c89d34c9f8c1fc298aebb0cb40b118f12b2f29e686668b6bb484a38a11b52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849366": [
        {
            "ioc_value": "79cc99080c2f61999444a98310e248b8955bb16a6fd048eba0b149ca8374e48d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849367": [
        {
            "ioc_value": "3fe4920f9be01fd08ed7b2a477f06089b98660523512d5500a113b83025f303e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849368": [
        {
            "ioc_value": "f98e1c63af2629fb8f9a5eafec0b86681730a79df4b5d697cd870e2c98468d59",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849369": [
        {
            "ioc_value": "4e7c95f469b3aea908b47dfddd15061b009688d9bbcdf6814f730a348328b693",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849370": [
        {
            "ioc_value": "43963c03892b392a2f31b49284883c74e52dfa60c266f06f506d1c5cb0001c7d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849371": [
        {
            "ioc_value": "952641d7dec14fa59e5e225719c3bd3827d1f097cceb66caf54197131fc150d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849372": [
        {
            "ioc_value": "9ee97085782e773a165c2e7ba779b278e0868ea1d06aa885c2f653360a99b3db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849373": [
        {
            "ioc_value": "0df9cd530a55b18a9ff5ac92a7e4dfe7dc3821d475fea4a9cd0b91c9caf7dc2c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849374": [
        {
            "ioc_value": "67901f3d18978fcd27098e0ceb9183364ed175bb9b26cb8be2c1b4e6dd83e5c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849375": [
        {
            "ioc_value": "2822cdd8cde578b7d8395be449f9fcda38f97f68612628d13c82e2948f54da7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849376": [
        {
            "ioc_value": "f738a1baafa6fe80e31473b3789db597b7b865a7df4b9266f6c6b79f1eef13bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849377": [
        {
            "ioc_value": "726a53e1b4955ecd0746304f801f79a14e3327ef91c7ab777adf13b6184d27a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849378": [
        {
            "ioc_value": "c1c7d278c397a92528bb080401d09a322054c24615e04a4a9c3ccd22f8f00363",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849379": [
        {
            "ioc_value": "f80db1a2f44ec21e7ff261a0516907c8813fbc0860b546d715ff1ce997d112a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849380": [
        {
            "ioc_value": "7acec905a544fbe05839d2e9dbe799f5c13e11b58606679bee8c62d575741e62",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849381": [
        {
            "ioc_value": "cb7f0c8386a7725f0ff935650d00fb5d52c9d33595fb23ac664e76725ff8b882",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849382": [
        {
            "ioc_value": "45c76e50b2250c4127f975e7c1cb47eca00ab1716fc59b34a48e3dfe3932405c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849341": [
        {
            "ioc_value": "b261825a8ab88b701db75afc0a56435af9d6e94e2779c397f1b7b87ba8565fd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849342": [
        {
            "ioc_value": "66f67ffa861ce27287965a27b7de30f98c2bd72790bc20884e461f8fe2fb4989",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849343": [
        {
            "ioc_value": "ca670b69f5bed7af153e941e9c020deb16b08b0f46ecca02b2b9a1e73205cc1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849344": [
        {
            "ioc_value": "6fdf6f46d9ce25f5cd50d512269337c1eae1d3bd06e735f591b1e1d9aaccc9ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849345": [
        {
            "ioc_value": "21fcf62ee8e78ed03c08827fc5f73338024f5295f5b09ca8161dec949fbf3d6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849346": [
        {
            "ioc_value": "26f7189cc31db590f4ddbb505f73c7d72de3e3dd1dbe4b0569a50c0e0766083b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849347": [
        {
            "ioc_value": "1f249b68ef16fd6b86246746595610f8aef6a5b3b4b21155831aa01ae8877b32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849348": [
        {
            "ioc_value": "2862c3ed47eb19d70c2a307098b2a9072dfbcfb4e3da47b6fac219d22c2cfbe3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849349": [
        {
            "ioc_value": "283d34c8c00158f48e507c795d7e0e8e275469adbef3a04bc16536f4cd8b770c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849350": [
        {
            "ioc_value": "51ec43b3251fe260e1da9a07bc57c6ff7ef9a4842d8a70d573d283a860713822",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849351": [
        {
            "ioc_value": "261697075fb35177230089357ff1683c59bd480a61b670356ede89de83a6e911",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849352": [
        {
            "ioc_value": "17a9149c155afac00546162cb3859769b3f1e2214ee5fa83f6b60dbe57e72c52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849353": [
        {
            "ioc_value": "19085765d8e1477fb0bead84360e0f0d0a2f7b703c63bea819077491b1fdc8d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849354": [
        {
            "ioc_value": "16a10381559a6ad0550d87b5375da636e25037946ff1a06ddc426770c8fbc23e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849355": [
        {
            "ioc_value": "24152e454317765f3d7370f930a14f46fe187055233c721217a3f6113d2d1dca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849356": [
        {
            "ioc_value": "24111106aaf1cccdf508964b4c87ede7f77c8298ecd26cbd08c8a5ca0c11eeb1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849357": [
        {
            "ioc_value": "219f57bdaa806eaabe251510ce1d24bc59fe963b5d88083d5398cb1c24e75a14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849358": [
        {
            "ioc_value": "be7836849e6a9328d3a7319cae39500ca0281e77d0f936434bbe2b4d288e2e7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849359": [
        {
            "ioc_value": "207f7eb2c508704b0fa6a559aac93ed02a30792f5332750b65ff512d489c9279",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849360": [
        {
            "ioc_value": "201babe615bb2f7414a8c4835b366f67a567b47647ae4e45ab79f4ac43b3e847",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849361": [
        {
            "ioc_value": "c6114a146bcb75870edc4567d1bb7af2cc5c8b52164dc90b0ee73df4926f0765",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849321": [
        {
            "ioc_value": "f6ed09571973ea89d6e9a57f938c411cf1cea5316c7854f65a71329a7e3762f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849322": [
        {
            "ioc_value": "cabba4a9d66895bb4c9153b4b4ca997b7150ee85b79c69f4028e70f8b0d4d4c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849323": [
        {
            "ioc_value": "66e752ffc703a217cb1b8d73442ea1f7a51bba56ed3628dcf2ed02577fae748e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849324": [
        {
            "ioc_value": "6e2b3bb84fbe7851cb95d724cbeaed4cfe4a44d7195b702a738e02fbbdaf8e75",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849325": [
        {
            "ioc_value": "731b063455dbf6b83769151d4dd758a5266874710f8f9fe1daf57db5690cb590",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849326": [
        {
            "ioc_value": "29dc3312e991d40ba022c0a94454a69229ec37120a365c10325e147c129f1b6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849327": [
        {
            "ioc_value": "fd19e9ca15cc4997fb97eab9db438023eef90cb6c52c07cefa32c2f30ddc6d07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849328": [
        {
            "ioc_value": "7f9c870dc9cf6b0f86d2aea26cc5ab5267e76bdab7cfaa47508831455268e9f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849329": [
        {
            "ioc_value": "9bb2281d6503d6583f9ed911c2c0b02b1ce718a68e16a4a08507d657a1c76601",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849330": [
        {
            "ioc_value": "1b6878bfe56bfbef68c7a803c6ce3d84746a09a7005b5e34bd7dfee99ab98f6c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849331": [
        {
            "ioc_value": "d96797a79c7d96deab469b62c753f3cc73dcfabdb2d8bb0a08b9d534642e7ace",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849332": [
        {
            "ioc_value": "46458bd4ece4452096c9e343428a7ab5bfd250d754a2798dec873c804fce1e6c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849333": [
        {
            "ioc_value": "1ab6db0394a9ac7767dcdc2187c39c363ba6deccba772fd537b6a6003a231135",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849334": [
        {
            "ioc_value": "42ed7805a6c2e860375ee5dac1bb2c0dfed454e2166d0ec91e1f8c471ab8302a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849335": [
        {
            "ioc_value": "5e31318c2bc9648547bb03cfafb62035a95601b6a6bae80110488b7564ec2afa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849336": [
        {
            "ioc_value": "279e025aab49f8c483721db1ad30d77e5f6adfcc3322f3b9e7a2494b0fe14786",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849337": [
        {
            "ioc_value": "4e42c8756f47235397a23b2dd749ecc6a98d4241588535423b8e04cc18311493",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849338": [
        {
            "ioc_value": "89f082c9d7a26a5d1e9d4cb0f489a99b15b5190bca7e3fc5cf316c102cdf181e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849339": [
        {
            "ioc_value": "3c6725ba6aa2157211e7a174d44bf349d1c990c5ac02ec9f9bdcfc308120a32a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849340": [
        {
            "ioc_value": "38d61076600f01f0aefdf8b210a9697f033de1ae133962e05133bff11d2a069a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849301": [
        {
            "ioc_value": "95474b11230198caaad403176fd7791790f0d9671fa7bab137e808b6c22b41cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849302": [
        {
            "ioc_value": "098dceae9ceff22882c78a793cdd9d682b8e22940f705f004a04ee864029178d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849303": [
        {
            "ioc_value": "d360947a5a90cf12ca4d696a812235c18fa7470b9b446468c952edc08f98af4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849304": [
        {
            "ioc_value": "5438a13b224231b9b20ba1769c55afca620ced31af59fa4db85e43579f96aa06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849305": [
        {
            "ioc_value": "68f4348764d8046dc11cb9dda9daad5b6149109c837d64b10b629b8e11e81353",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849306": [
        {
            "ioc_value": "4522824a3717b7fdc7026ccfc18b72ac6148ffe1a3e0f768d1d8e2af18970651",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849307": [
        {
            "ioc_value": "676961cace32abacfe5370ee71e6967ef635859e2a3826a953a0578283e00a2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849308": [
        {
            "ioc_value": "d0c0682f08d6d74fe63ee71c1ee46c41406314e8fddc55fd1a38abd5021d1f50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849309": [
        {
            "ioc_value": "d7272aaaad4c29c12dd7e768c8afefc531f22d9dde3858bbc304a6827d0e6ad3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849310": [
        {
            "ioc_value": "8db50d7250a84d2a79b62a563224973ae2c02a2b89fac38bd0491198caefaaff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849311": [
        {
            "ioc_value": "1b1e7003d61df54dc37738089a501d17f4db49441dc0693f89286481f3a7c2b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849312": [
        {
            "ioc_value": "74d0817c7ffa9266e2428383fb038b0b5d8d253bc2ac995ca3852154ab7a5628",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849313": [
        {
            "ioc_value": "14123463a06a513c8aba18122df9a954b904f9f984ebd565b734700bd3815af6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849314": [
        {
            "ioc_value": "3a5f9a42cf513091a0d8262f510b96a93cb7d02658200ed0bc465a2a7281badc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849315": [
        {
            "ioc_value": "58e5cfadc19d67be5f0ca4228db0f56e07be0ee041a16920f88b516596a7a4cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849316": [
        {
            "ioc_value": "8f14f02e0332f62c8b8327793a5a4f338c3bb8f45594e97769f0083abd9202fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849317": [
        {
            "ioc_value": "06e07b730b38c60eaabad30fd90dee227cf24ff8a781cdd4646e737c66dac262",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849318": [
        {
            "ioc_value": "3549049924398ea00f6c0c4134d8ab41af1e0930ef3079445f062c6ddc8dcfaf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849319": [
        {
            "ioc_value": "70e0cd8cec13f4c4444705bcbd02e8105c4375f59915b571a489c3eeeeed33cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849320": [
        {
            "ioc_value": "ec1d8c428e2ed3cbe69709b0107ef32be58954cebe0ce6bbad774a755d1379fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849286": [
        {
            "ioc_value": "f5827e3035e0560be1379a414fc25e94bb625e90743c24f13df0dd724b831596",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849287": [
        {
            "ioc_value": "8336c7c24e3f0ca10d8759df7091934a228249198c9888655cdef2345bc70add",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849288": [
        {
            "ioc_value": "7fe388404521f29d019ff0c20cf704d207a1134e79647719a5e64f6b6df5ae97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849289": [
        {
            "ioc_value": "c58e3d74fc5a13940b86a238963dfbe532502a50af47bcd3f317d35610834a00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849290": [
        {
            "ioc_value": "07bcea19549d3e94d88380472ed8dbfc25de087641d4989e49a476be084937d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849291": [
        {
            "ioc_value": "0087a58cc8108f82b6f7543f0c68473571d75aae57039f6ee9f6936e922967a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849292": [
        {
            "ioc_value": "02eb21a827de60ffb33c8e5dc94e3d775767ba9f773d17b397ae88715dcfa119",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849293": [
        {
            "ioc_value": "03f2db46a84fb66b33fe6d75566bcae330deb685ccac361973b35dc6a2b2a2ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849294": [
        {
            "ioc_value": "05f582c9c0cb87872a38be82cbf2f5cfc5d8a11544be80468142224035a7e3d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849295": [
        {
            "ioc_value": "27f0f6800396e8877d00e84d6aa800a0775f739329c8b445493638fd3600df32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849296": [
        {
            "ioc_value": "2a7d4373f0b6d52514b86b173b5c5d42c7d9000d1004a61d9ca05cf27ed4d34a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849297": [
        {
            "ioc_value": "2e8286e313582941b829d74b110b929c2525fe992b2d49a77e888ffe31f321a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849298": [
        {
            "ioc_value": "3fb1419046d0c0e96a656580714fd6984bb380870fa8199a8585fab0ea396bc7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849299": [
        {
            "ioc_value": "5e2786c5607e16e0184a94085a205f04d8ec62914b8ade2bc00537a4ea9ddad4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849300": [
        {
            "ioc_value": "434dd232b5bbe72d517648d495e51a4392a563dcf356754db21dd05068183424",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849263": [
        {
            "ioc_value": "2ab13a1486fe5795b4da9186850a86b1e7cc95bc856f3619c65bc0eba5a5b841",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849264": [
        {
            "ioc_value": "58ef84ef61ef5b9e4fd337521c1aa31c3020cffb5c51e5b75a2b960f891dbed4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849265": [
        {
            "ioc_value": "2a4f1f5cda88540864d1bb05a91fa938cff4da40e7177c7d0a377b8f0405a91c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849266": [
        {
            "ioc_value": "298a3039316c29080a425a8f883d8c83efd1953e0107157f295cbbf06cd7a996",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849267": [
        {
            "ioc_value": "1e21e1dd9b2f33e4bec78e9a798f9859b0ba651bb715b9cf47079107f38cda16",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849268": [
        {
            "ioc_value": "8eda6c744a6a71508caeb49f228a8618682ae197ea55fb30b71b04ae671a94dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849269": [
        {
            "ioc_value": "0d6ae65fbfbf6910ae3ce69b9b7ccaf39682a3732d3b034304b23e86c1d71148",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849270": [
        {
            "ioc_value": "04efa497bfc6337b43170617510cf20b8c03f4ed6b0f013455e3682d32125349",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849271": [
        {
            "ioc_value": "0a5c0f4c4d8ced64786c01de53cbb7548ea75f397fb91d189743b0e501a8a906",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849272": [
        {
            "ioc_value": "651b05218e7cc09941fcb9cbbc331512768f02643878348c4b46ad0e7bdcb9ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849273": [
        {
            "ioc_value": "17ce814af8c8401db23070fc90b89eb7aaecba7a5e031599c2218039c5a96411",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849274": [
        {
            "ioc_value": "0576d00b63c95739a970ca41802436b7e72b827205af4c9dc5dfcf45ed9eb2aa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849275": [
        {
            "ioc_value": "0348e1892c785f57a5e83a0d93f9fafaf05d12ce419c39ee45687e2a27afc3be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849276": [
        {
            "ioc_value": "1d216ddb50d1f68fc9158373266fa2107716a7d3b744bb48ec1c753fa651949c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849277": [
        {
            "ioc_value": "af74ec66487853e1c23bd15fcbdc283a03e52759fe6138859f145ef12ab54887",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849278": [
        {
            "ioc_value": "0e09f6fe4b1966f1a7f2ebc5b4e19032b3fbde348b8f0c04ee0712a64fd92f4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849279": [
        {
            "ioc_value": "33d0825a340991c0c498c7afa1e8df07377654195d2b0abb47c2e3f7d9c2cecd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849280": [
        {
            "ioc_value": "b08ab68389410eaea6f8135a021acceca2bb816de8e7f92f367a6b4339cb5359",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849281": [
        {
            "ioc_value": "998a5f8feb0caf828501d375ab8cf470d9982ac6b7723ddca4fb181aa07fd375",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849282": [
        {
            "ioc_value": "e213674bc7d3bf8217aa0edad98042b09938fd66c8011b82c9359d0de2f98e56",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849283": [
        {
            "ioc_value": "d6551b783f9934d42c253fb412c99a08f20603b5f2348deaeb35a5232f2d874c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849284": [
        {
            "ioc_value": "4b1497c81bd10c766c42fdcca522f7591b0bcaebdc3913b063d722fd5322bab0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849285": [
        {
            "ioc_value": "1864eafe0af1db68b0d9c3a17f57aae6baf9d124f937386829b2f1d92d7703e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849239": [
        {
            "ioc_value": "17096388935f2df2faa480dc8ded52d2e1f4320f7dca065eba0b2030805011f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849240": [
        {
            "ioc_value": "234f5457f492692f3e9e09f1e9748b9f5de36fd62e7b7b8c44e61bc0d07fa409",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849241": [
        {
            "ioc_value": "1cb3f9c466247deaecf328a239debad4fcb56191fc7dee795666d6227e345536",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849242": [
        {
            "ioc_value": "8bb389922eb6fb5bc4ed06d8001c39a397ce99b6f3dd4d8cc8e37521884c3dd5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849243": [
        {
            "ioc_value": "1a0a451e9a8fb20cfa1ba64acb6b2d44b835a2aa65de48ffd1f0489029e66cfd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849244": [
        {
            "ioc_value": "1884272676a11efa07b5824daff66ad256a245217acf747b7b7fd870c970b88d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849245": [
        {
            "ioc_value": "e0a7449129916f1ab094c487287a67233955836876abeb93e9835305439dd0e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849246": [
        {
            "ioc_value": "4cbdd3ba5ff11327a6c400751f03b14eb0c578289d9433ba6dfadbeb695aded3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849247": [
        {
            "ioc_value": "a18d0322a2f1ca4e04efc60d70888a071aa2d617126fd6d3b95af723bffbd6a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849248": [
        {
            "ioc_value": "071fbda9b5ca94653d964b2940723b93f8b69298bdd892bc8f866dccb45a359a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849249": [
        {
            "ioc_value": "0d2ccd8cc328b7c372713115cf141a0fa5ec96527fa59da2d11ffa74cfd37706",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849250": [
        {
            "ioc_value": "240b481eb014e35c5bdab57a56beee35ec2c02f2a66649f85bec35bd28fb4b1c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849251": [
        {
            "ioc_value": "a24b8e63c8980d81ae4ef5049e3db426cbea32f44f215d381a2d97fd2682b726",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849252": [
        {
            "ioc_value": "33bd74eb120d50eacb815f98744a6d6622c20c36d8d72636d481791674472fd5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849253": [
        {
            "ioc_value": "2a9a456a5f34097043907beb52d0bddb9796f04d66f72d6421c268ff75353e94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849254": [
        {
            "ioc_value": "2d877e99f3ae1fbbdf2147545adc9c95deb5530dbd254bb1f91fcbec31339f90",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849255": [
        {
            "ioc_value": "2af69477d4cbdcbea016e3b7838850cc837742153688eb15706d3245b814b810",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849256": [
        {
            "ioc_value": "32284719fec591a81f2986e7ebff83c145618cb91e7526b160500c8ca1c004db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849257": [
        {
            "ioc_value": "3226d78c9c6cc50d8e2a36350d0afd3f8a522f58a0de53b6da09b09cde1e1f49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849258": [
        {
            "ioc_value": "31e7eff9d87b9dad9dc8a5c3a1e75d0f7e30cb628106d42c3bb04111955dc56d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849259": [
        {
            "ioc_value": "31d0fed64fe92fda4c6a3f68f92b38ee440b5a83beef78be8e9278059960001b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849260": [
        {
            "ioc_value": "25a6a74a9b863cfc9a41601e5aa18823d81ca59e9d636c41240f22aa52bb9d44",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849261": [
        {
            "ioc_value": "270c120ced5b2a2f47c8852f44d1e0a06f48de987e4a13a8fefa4ea3f8867bf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849262": [
        {
            "ioc_value": "2b650c00a09b4b499e55125aaab477ff1e55cdb30e4d86abaa5cd9603dc4355e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849214": [
        {
            "ioc_value": "6c931f265387a1c3ec43b98758ef1a18d9373f266544a3946557b72804ec8cd5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849215": [
        {
            "ioc_value": "6ced41031eb85a6791f10adadfde7cf2d5cadb8c6b06974a0d1ef306a10f1e6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849216": [
        {
            "ioc_value": "73dfe3aa0dce27c2732b60da1e581fd10840836fb323a6f007c89bc87b8aa998",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849217": [
        {
            "ioc_value": "7616645eead3749183bae04e84bfbc8f9b91ce9cf3a34258f2221de4303fbc25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849218": [
        {
            "ioc_value": "84d2caf34b201887ecba83458822612b44babd497793420c94a72fbe1a236f15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849219": [
        {
            "ioc_value": "86ad74c6c461b97aa00f42a433676376a2324cbbc36cf9ff5d64edea92b064d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849220": [
        {
            "ioc_value": "8ae73d6516e1947861df3441265530cfda90e26a5f05d7a6c18e2d4250e4a09f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849221": [
        {
            "ioc_value": "92188dfa54f97f1ef6cb5e8ad5297c1ba94f54abb86881693265743f516cc0cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849222": [
        {
            "ioc_value": "93ba0aacfeabb89aa3fb49100615e622c57b7df1a0a00c0e9d82d3f9089c4cc7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849223": [
        {
            "ioc_value": "993459a0bc634ba827f1104f80a4a08716b538afe026b7fa131039f99e14eaf7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849224": [
        {
            "ioc_value": "a098a4bcaa0db8e9c55d78cd22c45394a074cacfb14251161190134b17233bef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849225": [
        {
            "ioc_value": "a1a6e6cf84ef1d44a3ea7204ae03f7ce72cfaea80beba25ff21700fc5c89a678",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849226": [
        {
            "ioc_value": "a2ed6c8be5c3675c5ac515bfd05a6a3fbd101e2bde55b9c91ef2b9bd726a17c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849227": [
        {
            "ioc_value": "a48c82ef727658b2c84265dce8995c8213c2d907956cbc05607d044afc960021",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849228": [
        {
            "ioc_value": "a69ba1844ee3370e311ce28c92ff4438651212a8d778f8163256d72ac2313308",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849229": [
        {
            "ioc_value": "aa4dab2ae52eb7fe1a3b60bd6c429576d76912c57a487845cbc97ddc997884ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849230": [
        {
            "ioc_value": "ab0e6fd8e27eba9b407cd0a6626b0b5bf7230530966124c0d90e7ebae65f8a0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849231": [
        {
            "ioc_value": "00f7cc8fb09af049b840926618c0748e587d1dacd11cfb967521ee58f190eca8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849232": [
        {
            "ioc_value": "2a66448b807b57935101dc309ca234eefc4b3a9fd691caae85d9846459a9b2a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849233": [
        {
            "ioc_value": "2a5d03cd9548783b20c967ff3380396c458dc0832f7f6706c802a59811f730c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849234": [
        {
            "ioc_value": "720fb5fb4f8f94dde9c055b9c20f429f1e81648af5ee2ad1d04df67dae5124ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849235": [
        {
            "ioc_value": "2d169286ee0653cc36870eff78f70badb5c6b7296a411773857315b132068079",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849236": [
        {
            "ioc_value": "211d1a7c59194de2d68320ea06a85362d32b90d0967cb9009356f9009fb76a7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849237": [
        {
            "ioc_value": "1bdc71519aed9326a0643631b9b2ec78883a8012d428bd976fdbaa82f716cda8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849238": [
        {
            "ioc_value": "ff7e99a78bdc252f29ec2608f951854280b983adafedb26c08c264df80697e89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849191": [
        {
            "ioc_value": "038e258ccd885463130a8cfdc8b9e76ddc1a729ba81761904a2fa4a64ab9c63a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849192": [
        {
            "ioc_value": "1c0ac2ff2acfa9f44990153d6f44ccbe95ddb269fa771edd9e354a5a659ffec9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849193": [
        {
            "ioc_value": "203f7d1226b7a6156f239309364dc67bc7e7ec4f9e1c44163d6b11a2f71350bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849194": [
        {
            "ioc_value": "2bf6e61906c749baf0fd8397f13f2976d8b531e23373feb30ccdffaa765796d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849195": [
        {
            "ioc_value": "2e3e35923fbc75d16d9658576ed4719bafc7db5f396ca8e1e273551f72ee228c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849196": [
        {
            "ioc_value": "33b09e0b4b36a3a403a04e238042b21ac754633180f32e10abf8d249f708c494",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849197": [
        {
            "ioc_value": "3600028d15720865cc9f27db526ad40dd364d0e638501c266fecde90583bcefe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849198": [
        {
            "ioc_value": "39b13a66df3f24aeb4a10b0115412a1e4504f3fa5a0c760ba85b6ce63d386eaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849199": [
        {
            "ioc_value": "3a8d98484b004392027a49631167c31179fa8c5888718cf0766c2c55b09d1dcc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849200": [
        {
            "ioc_value": "3c3de683b0f967419f24f043b423170f46f31bbdc8b40f0814f1b37f6d027f6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849201": [
        {
            "ioc_value": "3cc0e6353fc59c193b2faf70078122a413ca2de2223a9a89233dc89c0dc7a982",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849202": [
        {
            "ioc_value": "4020e4fb0223d1e9e77cc8f62d5a164936c2378d257668563675adba7c64cebb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849203": [
        {
            "ioc_value": "447bdd6deb792a07e7b20d75adae2cafb3c3db33a59ff040251a12cffcc58f64",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849204": [
        {
            "ioc_value": "519f2c7272e7111e96da252fc3ed7559c0419c019ba6086ed6b6af86718f9c8a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849205": [
        {
            "ioc_value": "56ef89664bb119111f11b4ec6cf98c92078e6ecbb48c8a041b6cf49d70f4947f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849206": [
        {
            "ioc_value": "5ad6a0a47dc3c2e4db2fbe8140b6ffc95e2e90be573409c06e5343bb28eeed15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849207": [
        {
            "ioc_value": "5b50fe92ca79ac45cb4f9a27360ed375ff89db6edf895bfaecdc7b5011a91294",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849208": [
        {
            "ioc_value": "626e332d0fe6fd3e9a6614a8615fab64da1ea9a7511656bab2799a805d012293",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849209": [
        {
            "ioc_value": "63bf8ac99c055c375e500431f6a60cf39b1f60db37d2ab96f68d81eb0921cd7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849210": [
        {
            "ioc_value": "6439666bb04bd11c3856857232b4edef77f5ce0419871a92d902ff230d0f9657",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849211": [
        {
            "ioc_value": "65600f1978830a4e7826eb3ace340286409b11076dbaa81697640d782633c09c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849212": [
        {
            "ioc_value": "662d87e889b86803bfc21f54a3cd3c6cb759ba58e665138f77f6178af73b9705",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849213": [
        {
            "ioc_value": "698a2a07cda2b4de0b0dd226aebec57ca0b65a6a132d43af71b6488f12e5df10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:46:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849190": [
        {
            "ioc_value": "lichentoken.interfe7ewith.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:41:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849189": [
        {
            "ioc_value": "http://95.40.222.37/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 01:30:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849188": [
        {
            "ioc_value": "143.92.61.212:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 01:30:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849187": [
        {
            "ioc_value": "ogedjbqx.jadoou.baby",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849186": [
        {
            "ioc_value": "103.12.149.93:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 01:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849185": [
        {
            "ioc_value": "103.43.11.40:1443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-13 01:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849184": [
        {
            "ioc_value": "exlt.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:29:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849183": [
        {
            "ioc_value": "dzlr.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 01:27:29",
            "last_seen_utc": "2026-07-23 05:40:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849182": [
        {
            "ioc_value": "http://apk.gbwhat.pro/GBWhatsApp_2.23.9.490_gw_08_09_1510_sec_sign.apk",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "apk.triada",
            "malware_alias": null,
            "malware_printable": "Triada",
            "first_seen_utc": "2026-07-13 01:16:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,GBWhatsApp,Triada",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1849164": [
        {
            "ioc_value": "yjrbnmoc.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 00:36:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849155": [
        {
            "ioc_value": "qhziiivs.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 00:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849154": [
        {
            "ioc_value": "kcpj.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 00:30:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849153": [
        {
            "ioc_value": "gluv.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-13 00:26:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849149": [
        {
            "ioc_value": "154.88.102.45:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-13 00:05:06",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849150": [
        {
            "ioc_value": "154.88.102.46:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-13 00:05:06",
            "last_seen_utc": "2026-08-22 00:03:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849145": [
        {
            "ioc_value": "uwrt8xqz.jadoou.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:53:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849144": [
        {
            "ioc_value": "ust394mk.jadoou.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849143": [
        {
            "ioc_value": "acthktpb.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:38:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849142": [
        {
            "ioc_value": "ztyjalwc.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:38:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849141": [
        {
            "ioc_value": "vwhp.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:27:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849140": [
        {
            "ioc_value": "mnmz.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:26:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849139": [
        {
            "ioc_value": "merge2-signal.simpres-solst.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 23:11:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849135": [
        {
            "ioc_value": "vend-path.simpres-solst.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:56:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849136": [
        {
            "ioc_value": "2mm9.simpres-solst.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:56:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849134": [
        {
            "ioc_value": "sidnxgci.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849133": [
        {
            "ioc_value": "ewenzoju.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:42:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849132": [
        {
            "ioc_value": "f3rn-forge.simpres-solst.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:41:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849130": [
        {
            "ioc_value": "cdba.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:31:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849129": [
        {
            "ioc_value": "yimfx.closer1ook.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:26:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849128": [
        {
            "ioc_value": "meau.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:25:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849127": [
        {
            "ioc_value": "cinema7-scope.closer1ook.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 22:06:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849123": [
        {
            "ioc_value": "mfej25tu.jadoou.cyou",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 21:51:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849122": [
        {
            "ioc_value": "kz7rv55b.jadoou.cyou",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 21:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849121": [
        {
            "ioc_value": "eikgcqyt.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 21:47:57",
            "last_seen_utc": "2026-07-18 19:21:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849120": [
        {
            "ioc_value": "bcltojfy.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 21:46:56",
            "last_seen_utc": "2026-07-15 07:49:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849119": [
        {
            "ioc_value": "fock.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 21:46:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849118": [
        {
            "ioc_value": "hxtm.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 21:25:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849113": [
        {
            "ioc_value": "http://tzpx.courses:4437",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-12 21:01:06",
            "last_seen_utc": "2026-07-28 21:20:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5e815731f67cb070fb1b31272c45bd7f4ecd4a408cbbc68a9545bafc3292d72c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849112": [
        {
            "ioc_value": "sjzcjaqs.jadoou.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:54:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849109": [
        {
            "ioc_value": "mypwk0n2.jadoou.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:52:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849107": [
        {
            "ioc_value": "jidm.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:25:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849106": [
        {
            "ioc_value": "thfn.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:25:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849105": [
        {
            "ioc_value": "launchato.closer1ook.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:16:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849103": [
        {
            "ioc_value": "fdmyrhjq.jadoobet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:07:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849098": [
        {
            "ioc_value": "154.88.101.56:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-12 20:05:04",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849097": [
        {
            "ioc_value": "ufdrepkt.jadoou.autos",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 20:01:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849096": [
        {
            "ioc_value": "85.206.168.238:23501",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-12 19:46:07",
            "last_seen_utc": "2026-08-11 18:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849095": [
        {
            "ioc_value": "http://87.120.104.81/d19ca32cb5a444ac8b87.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 19:45:40",
            "last_seen_utc": "2026-07-15 02:11:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2206ca98d1c523aa6b5fc27efd7918a596be8be6b0e8e64861977a4bc69a8d84/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849094": [
        {
            "ioc_value": "45.198.224.93:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-12 19:45:37",
            "last_seen_utc": "2026-08-29 08:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849092": [
        {
            "ioc_value": "23.106.52.176:2489",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-12 19:45:18",
            "last_seen_utc": "2026-08-12 08:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849093": [
        {
            "ioc_value": "23.106.52.176:3984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-12 19:45:18",
            "last_seen_utc": "2026-08-12 08:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849091": [
        {
            "ioc_value": "211.159.223.14:22003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-12 19:44:38",
            "last_seen_utc": "2026-08-12 08:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849090": [
        {
            "ioc_value": "178.73.218.4:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-12 19:44:04",
            "last_seen_utc": "2026-08-13 08:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849089": [
        {
            "ioc_value": "157.20.182.18:1665",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-12 19:43:47",
            "last_seen_utc": "2026-08-17 08:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849088": [
        {
            "ioc_value": "137.220.152.132:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-12 19:43:29",
            "last_seen_utc": "2026-08-30 08:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849087": [
        {
            "ioc_value": "137.220.152.131:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-12 19:43:28",
            "last_seen_utc": "2026-08-20 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849086": [
        {
            "ioc_value": "104.164.46.55:62721",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-12 19:43:14",
            "last_seen_utc": "2026-08-12 08:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849071": [
        {
            "ioc_value": "103.11.41.19:52811",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-12 19:43:09",
            "last_seen_utc": "2026-08-12 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849072": [
        {
            "ioc_value": "103.11.41.19:64045",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-12 19:43:09",
            "last_seen_utc": "2026-08-12 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1849070": [
        {
            "ioc_value": "olptz5o4.jadoou.beauty",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 19:37:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849069": [
        {
            "ioc_value": "jkvw.jadoobet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 19:27:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849068": [
        {
            "ioc_value": "ayoz.jadoobet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 19:24:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849067": [
        {
            "ioc_value": "validateinfo.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-12 19:11:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849059": [
        {
            "ioc_value": "dudqylyo.jadoou.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 19:03:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849057": [
        {
            "ioc_value": "snvd.jadoobet.ink",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 18:25:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849056": [
        {
            "ioc_value": "xave.jadoobet.ink",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 18:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849053": [
        {
            "ioc_value": "lwqeujgc.jadoobet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 18:06:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849048": [
        {
            "ioc_value": "ggagehbk.jadoobet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 18:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849046": [
        {
            "ioc_value": "azffnyvq.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 17:37:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849045": [
        {
            "ioc_value": "5awlkzgo.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 17:36:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849043": [
        {
            "ioc_value": "aujh.jadoobet.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 17:24:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849040": [
        {
            "ioc_value": "fggcvmnq.jadoobet.forum",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 17:10:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849034": [
        {
            "ioc_value": "tcxc.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 16:24:50",
            "last_seen_utc": "2026-07-21 21:33:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849033": [
        {
            "ioc_value": "qevb.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 16:23:14",
            "last_seen_utc": "2026-07-21 06:33:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849032": [
        {
            "ioc_value": "qcilezmw.jadoobet.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 16:15:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849026": [
        {
            "ioc_value": "ap9nqrjc.jadoou.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:51:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849024": [
        {
            "ioc_value": "xuqbplvg.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:37:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849023": [
        {
            "ioc_value": "m8tjzg79.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:35:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849013": [
        {
            "ioc_value": "shadowcape.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-12 15:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHOOK",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1849014": [
        {
            "ioc_value": "44.223.110.247:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-12 15:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849022": [
        {
            "ioc_value": "ljqk.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:23:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849021": [
        {
            "ioc_value": "jdpn.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:22:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849020": [
        {
            "ioc_value": "qqjbcfkl.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:19:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849019": [
        {
            "ioc_value": "sefikhvg.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:18:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849018": [
        {
            "ioc_value": "tl9afxug.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 15:06:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849016": [
        {
            "ioc_value": "154.88.101.33:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-12 15:05:06",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849012": [
        {
            "ioc_value": "kyqwfrjr.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 14:23:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849011": [
        {
            "ioc_value": "rddj.jadoou.boats",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 14:23:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849010": [
        {
            "ioc_value": "sknbnyhz.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 14:23:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849009": [
        {
            "ioc_value": "nsuoqcej.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 14:22:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849008": [
        {
            "ioc_value": "lrduhdmx.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 14:20:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1849007": [
        {
            "ioc_value": "llar.jadoou.boats",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 14:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848985": [
        {
            "ioc_value": "voltix-net.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 13:49:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848990": [
        {
            "ioc_value": "arcanemods.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 13:49:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1849001": [
        {
            "ioc_value": "https://cbsnews.date/tgv/RandApp",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 13:46:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1849000": [
        {
            "ioc_value": "qfjwyksn.jadoobet.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 13:36:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848999": [
        {
            "ioc_value": "tdyx2uq8.jadoobet.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 13:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848998": [
        {
            "ioc_value": "zduyoblb.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 13:27:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848997": [
        {
            "ioc_value": "kantnxrl.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 13:25:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848996": [
        {
            "ioc_value": "ltvz.jadoou.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 13:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848989": [
        {
            "ioc_value": "peiry.casinomilyon.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 12:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848987": [
        {
            "ioc_value": "wubbueiu.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 12:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848986": [
        {
            "ioc_value": "iifoqkzw.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 12:29:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848984": [
        {
            "ioc_value": "xxaz.jadoou.beauty",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 12:15:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848982": [
        {
            "ioc_value": "imagehubguest.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-12 12:06:34",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848973": [
        {
            "ioc_value": "134.122.128.66:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-12 11:45:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15015ac752a84281d406e0ddf814688dcae0e803394491368b479be4c73fe58f/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848974": [
        {
            "ioc_value": "134.122.128.66:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-12 11:45:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15015ac752a84281d406e0ddf814688dcae0e803394491368b479be4c73fe58f/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848975": [
        {
            "ioc_value": "202.95.8.27:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-12 11:45:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8bf54a76924ad62e3b5562826f0e491c4c498f166276b071c177b694762199f6/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848976": [
        {
            "ioc_value": "202.95.8.27:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-12 11:45:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8bf54a76924ad62e3b5562826f0e491c4c498f166276b071c177b694762199f6/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848972": [
        {
            "ioc_value": "134.122.128.66:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-12 11:45:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15015ac752a84281d406e0ddf814688dcae0e803394491368b479be4c73fe58f/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848920": [
        {
            "ioc_value": "159.65.61.151:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 11:40:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848924": [
        {
            "ioc_value": "206.189.119.212:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 11:40:25",
            "last_seen_utc": "2026-07-12 21:58:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848927": [
        {
            "ioc_value": "http://130.162.240.8:7317/api/register",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 11:40:24",
            "last_seen_utc": "2026-07-12 09:23:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/5832cb09caa91d3f3205b32b8f9fb13b9c8d79521bab33738b5f66c62f7e11cb/relations",
            "tags": "317Stealer,c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848928": [
        {
            "ioc_value": "http://130.162.240.8:7317/api/hvnc/register",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 11:40:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/5832cb09caa91d3f3205b32b8f9fb13b9c8d79521bab33738b5f66c62f7e11cb/relations",
            "tags": "317Stealer,c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848929": [
        {
            "ioc_value": "130.162.240.8:7317",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 11:40:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/5832cb09caa91d3f3205b32b8f9fb13b9c8d79521bab33738b5f66c62f7e11cb",
            "tags": "317Stealer,c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848930": [
        {
            "ioc_value": "5832cb09caa91d3f3205b32b8f9fb13b9c8d79521bab33738b5f66c62f7e11cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 11:40:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "317Stealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848971": [
        {
            "ioc_value": "owhzzucu.jadoou.cyou",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 11:36:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848970": [
        {
            "ioc_value": "zbplgmhe.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 11:35:20",
            "last_seen_utc": "2026-07-15 08:44:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848969": [
        {
            "ioc_value": "uynxgugn.jadoou.cyou",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 11:34:46",
            "last_seen_utc": "2026-07-12 21:49:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848968": [
        {
            "ioc_value": "epsqvddd.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 11:34:26",
            "last_seen_utc": "2026-07-15 02:40:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848967": [
        {
            "ioc_value": "elng.jadoou.baby",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 11:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848961": [
        {
            "ioc_value": "196.251.121.120:35630",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-12 11:05:05",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848960": [
        {
            "ioc_value": "mjbpgp3k.jadoou.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 10:53:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848958": [
        {
            "ioc_value": "fibvhxte.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 10:39:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848957": [
        {
            "ioc_value": "ondgegtt.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 10:38:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848956": [
        {
            "ioc_value": "tgjg.jadoou.autos",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 10:07:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848954": [
        {
            "ioc_value": "rgklgdmw.jadoobet.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 10:06:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848949": [
        {
            "ioc_value": "93.95.226.207:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 09:46:09",
            "last_seen_utc": "2026-08-12 18:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848946": [
        {
            "ioc_value": "45.61.149.187:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-12 09:45:32",
            "last_seen_utc": "2026-08-11 08:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848947": [
        {
            "ioc_value": "45.61.149.187:8004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-12 09:45:32",
            "last_seen_utc": "2026-08-11 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848948": [
        {
            "ioc_value": "45.61.149.187:8005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-12 09:45:32",
            "last_seen_utc": "2026-08-11 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848945": [
        {
            "ioc_value": "45.198.224.94:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-12 09:45:30",
            "last_seen_utc": "2026-08-29 18:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848944": [
        {
            "ioc_value": "38.54.8.74:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-12 09:45:25",
            "last_seen_utc": "2026-09-01 02:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848943": [
        {
            "ioc_value": "27.102.137.139:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-12 09:45:16",
            "last_seen_utc": "2026-08-11 08:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848942": [
        {
            "ioc_value": "216.9.225.38:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-12 09:45:11",
            "last_seen_utc": "2026-08-11 08:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848941": [
        {
            "ioc_value": "acthwqwn.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 09:44:12",
            "last_seen_utc": "2026-07-14 22:58:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848940": [
        {
            "ioc_value": "172.86.77.116:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-12 09:43:56",
            "last_seen_utc": "2026-08-15 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848937": [
        {
            "ioc_value": "118.107.45.29:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-07-12 09:43:23",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848938": [
        {
            "ioc_value": "118.107.45.70:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-07-12 09:43:23",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848939": [
        {
            "ioc_value": "118.107.45.73:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-07-12 09:43:23",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848936": [
        {
            "ioc_value": "107.172.90.117:4322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-12 09:43:18",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848935": [
        {
            "ioc_value": "ihosymvc.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 09:43:16",
            "last_seen_utc": "2026-07-14 04:54:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848933": [
        {
            "ioc_value": "104.207.93.150:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 09:43:14",
            "last_seen_utc": "2026-08-13 18:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848934": [
        {
            "ioc_value": "104.207.93.150:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 09:43:14",
            "last_seen_utc": "2026-08-15 18:43:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848932": [
        {
            "ioc_value": "9h5e0vbd.jadoou.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 09:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848926": [
        {
            "ioc_value": "omwf.jadoou.art",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 09:11:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848919": [
        {
            "ioc_value": "xmgonqda.jadoobet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 08:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848918": [
        {
            "ioc_value": "jadoobet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 08:47:46",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848917": [
        {
            "ioc_value": "gog.tb88tank.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-12 08:12:56",
            "last_seen_utc": "2026-07-12 08:12:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0a8f1fa93f96182e78f5b95abd940d98bf53f06dc1fbe172bb913f821a3647d3/",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848916": [
        {
            "ioc_value": "tetz.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 08:06:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848915": [
        {
            "ioc_value": "htro.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 08:06:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848911": [
        {
            "ioc_value": "154.88.99.40:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-12 08:05:06",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848909": [
        {
            "ioc_value": "kokkpxut.jadoobet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 07:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848904": [
        {
            "ioc_value": "ceranet.goliath.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU,c2,CAFEBABE,DNS-TXT",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848903": [
        {
            "ioc_value": "5748.reformuk.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU,c2,CAFEBABE,DNS-TXT",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848905": [
        {
            "ioc_value": "s.goliath.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:42:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU,c2,CAFEBABE,DNS-TXT",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848906": [
        {
            "ioc_value": "hardload.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:42:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU,c2,CAFEBABE,DNS-TXT",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848907": [
        {
            "ioc_value": "u.idsource.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:42:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AISURU,c2,CAFEBABE,DNS-TXT",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848902": [
        {
            "ioc_value": "qzl7oi7a.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 07:36:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848901": [
        {
            "ioc_value": "45.32.253.166:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-12 07:36:14",
            "last_seen_utc": "2026-07-13 09:18:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-100000",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848900": [
        {
            "ioc_value": "121.4.76.54:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-12 07:36:13",
            "last_seen_utc": "2026-07-14 06:57:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848899": [
        {
            "ioc_value": "120.26.244.247:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-12 07:35:59",
            "last_seen_utc": "2026-07-14 16:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848898": [
        {
            "ioc_value": "47.113.98.42:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-12 07:35:58",
            "last_seen_utc": "2026-07-13 23:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848678": [
        {
            "ioc_value": "bewsertinekk.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-12 07:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Latrodectus,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848696": [
        {
            "ioc_value": "a1.ishano456.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848697": [
        {
            "ioc_value": "t1.ishano456.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848698": [
        {
            "ioc_value": "a1.xmsae.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848699": [
        {
            "ioc_value": "t1.xmsae.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848700": [
        {
            "ioc_value": "a1.xshaon123.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848701": [
        {
            "ioc_value": "t1.xshaon123.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848702": [
        {
            "ioc_value": "172.96.114.6:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848703": [
        {
            "ioc_value": "98.98.71.19:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848704": [
        {
            "ioc_value": "98.98.71.20:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848705": [
        {
            "ioc_value": "165.154.202.29:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848706": [
        {
            "ioc_value": "144.217.243.201:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "apk.badbox",
            "malware_alias": null,
            "malware_printable": "BADBOX",
            "first_seen_utc": "2026-07-12 07:30:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/deepfield/public-research/blob/main/ipmoyu/report.md",
            "tags": "moyu,tigertv,zhima",
            "anonymous": 0,
            "reporter": "deepfield"
        }
    ],
    "1848712": [
        {
            "ioc_value": "update.norwayeast.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-12 07:30:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848713": [
        {
            "ioc_value": "tklovers.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-12 07:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848717": [
        {
            "ioc_value": "77.90.185.121:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:24",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848716": [
        {
            "ioc_value": "172.86.113.33:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848718": [
        {
            "ioc_value": "77.90.185.122:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:22",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848719": [
        {
            "ioc_value": "85.120.81.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:21",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848725": [
        {
            "ioc_value": "160.20.109.68:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848726": [
        {
            "ioc_value": "158.94.210.57:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:20",
            "last_seen_utc": "2026-08-01 17:40:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848727": [
        {
            "ioc_value": "158.94.211.3:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:20",
            "last_seen_utc": "2026-08-01 17:40:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848728": [
        {
            "ioc_value": "181.174.164.6:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-12 07:30:20",
            "last_seen_utc": "2026-07-30 09:00:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1848789": [
        {
            "ioc_value": "5BEA5AF5215089D97749D438351D7288310D0B8A472616EDBE1B34168AD1001C",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-12 07:30:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "7za-exe,Latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848790": [
        {
            "ioc_value": "https://2d4e5f6-7a8b-4c2d-9e1f-3b5a7c8d9e0fc.s3.us-east-1.amazonaws.com/config.cmd",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-12 07:30:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "config-file,Latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848795": [
        {
            "ioc_value": "fb-api.raydianpainting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-07-12 07:30:16",
            "last_seen_utc": "2026-08-12 16:12:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish,TDS",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848807": [
        {
            "ioc_value": "164.92.179.21:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:30:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848808": [
        {
            "ioc_value": "https://klonfcrtyseaflow.com/inline.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-07-12 07:30:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848828": [
        {
            "ioc_value": "206.189.146.157:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:30:13",
            "last_seen_utc": "2026-07-17 22:37:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848830": [
        {
            "ioc_value": "51.68.209.36:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-12 07:30:12",
            "last_seen_utc": "2026-07-12 03:05:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "16276,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1848837": [
        {
            "ioc_value": "206.189.119.212:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:30:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848863": [
        {
            "ioc_value": "178.128.208.65:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-12 07:30:11",
            "last_seen_utc": "2026-07-17 02:14:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848889": [
        {
            "ioc_value": "45.90.163.37:18129",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-12 07:30:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1848897": [
        {
            "ioc_value": "91.208.197.30:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-12 07:25:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/308c4dfa19d1c4a47c9fbe46bb174b97e6deb192e78de2db02a7e09734d65279/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848896": [
        {
            "ioc_value": "plzm.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 07:10:59",
            "last_seen_utc": "2026-07-15 07:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848895": [
        {
            "ioc_value": "uohs.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 07:05:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848891": [
        {
            "ioc_value": "ruuupkia.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:59:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848890": [
        {
            "ioc_value": "prmznhyt.jadoobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:56:40",
            "last_seen_utc": "2026-07-18 20:31:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848888": [
        {
            "ioc_value": "winopenhaus4.zexorcloudsync.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:21:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848887": [
        {
            "ioc_value": "xywz.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:06:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848886": [
        {
            "ioc_value": "caeb.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:05:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848881": [
        {
            "ioc_value": "ichnwcqh.jadoobet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:02:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848880": [
        {
            "ioc_value": "enzccxnn.jadoobet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 06:01:10",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848879": [
        {
            "ioc_value": "vefzvud7.jadoou.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:50:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848877": [
        {
            "ioc_value": "81ro1qyb.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:33:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848876": [
        {
            "ioc_value": "p2cl2uyk.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:32:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848874": [
        {
            "ioc_value": "micfybfh.jadoobet.ink",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:07:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848873": [
        {
            "ioc_value": "mdzt.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:06:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848872": [
        {
            "ioc_value": "fnrok367.jadoobet.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:06:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848871": [
        {
            "ioc_value": "jadoobet.ink",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:05:41",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848865": [
        {
            "ioc_value": "doqr.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 05:04:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848862": [
        {
            "ioc_value": "rnjaeyqy.jadoobet.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 04:11:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848860": [
        {
            "ioc_value": "bjmd.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 04:05:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848855": [
        {
            "ioc_value": "bwch.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 04:04:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848854": [
        {
            "ioc_value": "5r48e4d3.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 03:34:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848853": [
        {
            "ioc_value": "h3cyc1or.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 03:32:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848852": [
        {
            "ioc_value": "yfekdkqg.jadoobet.forum",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 03:15:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848850": [
        {
            "ioc_value": "hksv.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 03:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848846": [
        {
            "ioc_value": "buip.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 03:03:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848845": [
        {
            "ioc_value": "nisosznd.jadoobet.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 02:20:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848843": [
        {
            "ioc_value": "lblbjusf.betgar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 02:18:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848840": [
        {
            "ioc_value": "lmhk.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 02:04:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848839": [
        {
            "ioc_value": "zfs6aubs.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 01:32:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848838": [
        {
            "ioc_value": "n5mcqgf0.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 01:31:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848836": [
        {
            "ioc_value": "osgeorhf.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 01:27:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848835": [
        {
            "ioc_value": "twykfnsu.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 01:22:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848834": [
        {
            "ioc_value": "fhqc.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 01:05:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848829": [
        {
            "ioc_value": "kooq.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 01:02:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848827": [
        {
            "ioc_value": "nwhygnbt.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 00:29:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848826": [
        {
            "ioc_value": "qfsqhkap.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 00:27:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848825": [
        {
            "ioc_value": "vlfnosj4.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 00:13:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848824": [
        {
            "ioc_value": "https://mhw.codes/check",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-12 00:06:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848821": [
        {
            "ioc_value": "154.88.100.56:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-12 00:05:04",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848820": [
        {
            "ioc_value": "sh6ze53a.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 00:04:44",
            "last_seen_utc": "2026-07-14 04:03:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848819": [
        {
            "ioc_value": "lskz.bettilt90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 00:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848818": [
        {
            "ioc_value": "bqig.bettilt90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-12 00:02:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848817": [
        {
            "ioc_value": "http://178.17.59.40:5506/qk.vbs",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 23:56:21",
            "last_seen_utc": "2026-07-12 00:06:21",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848816": [
        {
            "ioc_value": "http://inkbookwriters.com/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 23:51:20",
            "last_seen_utc": "2026-07-11 23:56:20",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848815": [
        {
            "ioc_value": "186.241.75.134:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 23:46:14",
            "last_seen_utc": "2026-08-12 12:48:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848814": [
        {
            "ioc_value": "wntzwdju.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 23:34:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848813": [
        {
            "ioc_value": "etoncwgd.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 23:34:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848812": [
        {
            "ioc_value": "zxspbpeb.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 23:31:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848811": [
        {
            "ioc_value": "wsmvommb.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 23:31:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848810": [
        {
            "ioc_value": "oxlg.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 23:07:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848809": [
        {
            "ioc_value": "cwhr.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 23:01:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848806": [
        {
            "ioc_value": "nxiyquas.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 22:39:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848805": [
        {
            "ioc_value": "lieynrbq.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 22:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848804": [
        {
            "ioc_value": "scanvertzeit.zexorcloudsync.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 22:21:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848803": [
        {
            "ioc_value": "154.88.100.40:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 22:05:06",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848799": [
        {
            "ioc_value": "uonh.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 22:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848796": [
        {
            "ioc_value": "bnyr.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 22:01:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848794": [
        {
            "ioc_value": "orjrdtyn.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 21:46:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848793": [
        {
            "ioc_value": "bhzyklcp.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 21:40:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848792": [
        {
            "ioc_value": "s7rpvlti.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 21:34:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848791": [
        {
            "ioc_value": "cyjzdlpi.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 21:30:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848784": [
        {
            "ioc_value": "jnjv.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 21:02:50",
            "last_seen_utc": "2026-07-15 08:29:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848783": [
        {
            "ioc_value": "dirb.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 21:00:45",
            "last_seen_utc": "2026-07-14 08:15:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848782": [
        {
            "ioc_value": "puqrhdze.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 20:47:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848776": [
        {
            "ioc_value": "iwyx.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 20:03:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848775": [
        {
            "ioc_value": "btye.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 20:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848774": [
        {
            "ioc_value": "tjsojdll.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 19:52:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848772": [
        {
            "ioc_value": "82.158.229.189:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-11 19:46:05",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848773": [
        {
            "ioc_value": "82.158.229.30:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-11 19:46:05",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848771": [
        {
            "ioc_value": "82.158.229.143:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-11 19:46:04",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848770": [
        {
            "ioc_value": "62.109.10.128:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 19:45:53",
            "last_seen_utc": "2026-08-16 18:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848769": [
        {
            "ioc_value": "45.74.7.201:3305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 19:45:41",
            "last_seen_utc": "2026-08-14 18:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848768": [
        {
            "ioc_value": "31.207.4.197:9872",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-11 19:45:23",
            "last_seen_utc": "2026-09-01 02:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848767": [
        {
            "ioc_value": "23.106.52.176:59838",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-11 19:45:19",
            "last_seen_utc": "2026-08-12 08:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848766": [
        {
            "ioc_value": "216.9.225.38:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 19:45:16",
            "last_seen_utc": "2026-08-14 08:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848765": [
        {
            "ioc_value": "185.244.149.240:61443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-11 19:44:14",
            "last_seen_utc": "2026-09-01 02:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848764": [
        {
            "ioc_value": "178.104.249.136:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-11 19:43:59",
            "last_seen_utc": "2026-09-01 02:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848759": [
        {
            "ioc_value": "156.234.43.100:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848760": [
        {
            "ioc_value": "156.234.43.101:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848761": [
        {
            "ioc_value": "156.234.43.102:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848762": [
        {
            "ioc_value": "156.234.43.98:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848763": [
        {
            "ioc_value": "156.234.43.99:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:43",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848758": [
        {
            "ioc_value": "144.91.76.114:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 19:43:33",
            "last_seen_utc": "2026-08-12 08:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848756": [
        {
            "ioc_value": "137.220.152.131:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:27",
            "last_seen_utc": "2026-08-20 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848757": [
        {
            "ioc_value": "137.220.152.132:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 19:43:27",
            "last_seen_utc": "2026-08-29 08:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848755": [
        {
            "ioc_value": "1.14.234.68:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-11 19:43:03",
            "last_seen_utc": "2026-09-01 02:43:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848754": [
        {
            "ioc_value": "5jsdebh3.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 19:31:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848752": [
        {
            "ioc_value": "jhzehezj.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 19:30:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848747": [
        {
            "ioc_value": "eksq11dg.dancebet90.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 19:04:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848745": [
        {
            "ioc_value": "lpzi.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 19:01:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848744": [
        {
            "ioc_value": "lnfl.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 18:59:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848742": [
        {
            "ioc_value": "llgdqtat.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 18:54:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848741": [
        {
            "ioc_value": "fpbgrevs.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 18:54:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848738": [
        {
            "ioc_value": "http://93.152.224.29/IpS9GN16MBsmhWBe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848739": [
        {
            "ioc_value": "http://85.239.149.16/CloudFlare_Verification_Code_845270",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848740": [
        {
            "ioc_value": "http://85.239.149.16/CloudFlare_Captcha_Code_839101",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848734": [
        {
            "ioc_value": "http://85.239.149.16/wbpLpf9vg2EVbxmbfW",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848735": [
        {
            "ioc_value": "http://85.239.149.16/WOBVpWpXWLm37L9XF",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848736": [
        {
            "ioc_value": "http://85.239.149.40/lrcaoQ7xSYfFVno2S9",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848737": [
        {
            "ioc_value": "http://85.239.149.16/BvCPpznZO6547X47",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848733": [
        {
            "ioc_value": "http://93.152.224.29/tBiNhjfyJ2VFClAx85",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:48:41",
            "last_seen_utc": "2026-07-11 18:48:42",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848732": [
        {
            "ioc_value": "167.148.201.142:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 18:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NetSupport",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848731": [
        {
            "ioc_value": "http://85.239.149.16/gWowSyTRkvfEcGsIj",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 18:36:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848724": [
        {
            "ioc_value": "bqvojtsj.betgar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 18:02:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848723": [
        {
            "ioc_value": "prre.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 18:01:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848722": [
        {
            "ioc_value": "eijm.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:59:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848721": [
        {
            "ioc_value": "evspwohq.betgar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:58:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848720": [
        {
            "ioc_value": "wkeysfdb.stacknexus.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:56:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848715": [
        {
            "ioc_value": "qs268cl5.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:31:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848714": [
        {
            "ioc_value": "ouodqxjr.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:29:51",
            "last_seen_utc": "2026-07-15 07:29:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848711": [
        {
            "ioc_value": "wrryvujx.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:06:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848710": [
        {
            "ioc_value": "154.88.99.51:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 17:05:06",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848708": [
        {
            "ioc_value": "154.88.98.61:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 17:05:05",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848695": [
        {
            "ioc_value": "uyxg.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:02:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848694": [
        {
            "ioc_value": "hlkdfuhu.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 17:01:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848693": [
        {
            "ioc_value": "hhtm.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:58:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848692": [
        {
            "ioc_value": "http://columna.lol:6590",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-11 16:55:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dd255b896e9bb61ada543cc6ad859ba9ba9578fd9140c9a9864a8e303bb0d36f/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848691": [
        {
            "ioc_value": "lbsv.logiccascade.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848690": [
        {
            "ioc_value": "http://198.13.158.127:5506/dd.vbs",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:47:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848689": [
        {
            "ioc_value": "http://85.239.149.16/f6ptObhnkvaYRgMEJ",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:47:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848688": [
        {
            "ioc_value": "inrs.kernelbridge.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:45:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848687": [
        {
            "ioc_value": "http://91.92.242.243:6600/ESPIxN5lducyZQW5we\\",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:42:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848686": [
        {
            "ioc_value": "jxiluxhf.radioshartbandi.chat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 16:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848682": [
        {
            "ioc_value": "154.88.98.43:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 16:05:04",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848680": [
        {
            "ioc_value": "tglc.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:47:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848679": [
        {
            "ioc_value": "pgxi.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:44:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848677": [
        {
            "ioc_value": "xb7ea3kq.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848676": [
        {
            "ioc_value": "jhrwzjpx.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:29:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848675": [
        {
            "ioc_value": "kaleda.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:16:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848674": [
        {
            "ioc_value": "gtcymxsv.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:15:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848673": [
        {
            "ioc_value": "osqbereb.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 15:10:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848576": [
        {
            "ioc_value": "bonavol.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848572": [
        {
            "ioc_value": "genesis-softs.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848577": [
        {
            "ioc_value": "nightmare-download.pw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:21",
            "last_seen_utc": "2026-07-12 09:24:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848585": [
        {
            "ioc_value": "https://91.98.111.49/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-11 15:02:20",
            "last_seen_utc": "2026-08-11 04:48:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4992cb5f29594ae1cea78e028a2e6a51d571a610ceeb4442b605953b916dd1c4/",
            "tags": "c2,vidar",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848587": [
        {
            "ioc_value": "138.68.138.44:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 15:02:20",
            "last_seen_utc": "2026-07-13 04:28:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848590": [
        {
            "ioc_value": "http://41.216.189.92/nz.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:19",
            "last_seen_utc": "2026-07-11 10:40:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1848593": [
        {
            "ioc_value": "data.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-minecraft-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848594": [
        {
            "ioc_value": "r1.kill-bot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-minecraft-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848595": [
        {
            "ioc_value": "r3.nl.kill-bot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-minecraft-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848596": [
        {
            "ioc_value": "r4.us.kill-bot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-minecraft-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848597": [
        {
            "ioc_value": "connect.xlauncher.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "fake-minecraft-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848598": [
        {
            "ioc_value": "85.198.103.105:9274",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848625": [
        {
            "ioc_value": "r5.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848626": [
        {
            "ioc_value": "sql.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848627": [
        {
            "ioc_value": "mail.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848628": [
        {
            "ioc_value": "redirect.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848629": [
        {
            "ioc_value": "new.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848623": [
        {
            "ioc_value": "data.kill-bot.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848624": [
        {
            "ioc_value": "msk.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848612": [
        {
            "ioc_value": "164.92.179.21:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 15:02:12",
            "last_seen_utc": "2026-07-13 06:36:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848630": [
        {
            "ioc_value": "b.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848631": [
        {
            "ioc_value": "mc.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848632": [
        {
            "ioc_value": "tt.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848633": [
        {
            "ioc_value": "18452654.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848634": [
        {
            "ioc_value": "41637610.killbot.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848635": [
        {
            "ioc_value": "tds.xlauncher.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848638": [
        {
            "ioc_value": "ansamble.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848636": [
        {
            "ioc_value": "download.xlauncher.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848637": [
        {
            "ioc_value": "content.xlauncher.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848639": [
        {
            "ioc_value": "ansamble-auth.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "botnet,fake-game-launcher,killbot,loader,XLauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848667": [
        {
            "ioc_value": "minetoday.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 15:02:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "killbot,minecraft-lure,mobile-branch,tds,xlauncher",
            "anonymous": 0,
            "reporter": "KaiErikNiermann"
        }
    ],
    "1848666": [
        {
            "ioc_value": "xbvj.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 14:49:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848665": [
        {
            "ioc_value": "gqtw.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 14:44:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848663": [
        {
            "ioc_value": "ocglemkm.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 14:16:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848661": [
        {
            "ioc_value": "hrunarqq.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 14:14:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848656": [
        {
            "ioc_value": "h81b1ag4.code-hediye-1xbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 14:04:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848654": [
        {
            "ioc_value": "cal.magicalegyptwomen.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 13:53:33",
            "last_seen_utc": "2026-07-11 14:46:56",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848653": [
        {
            "ioc_value": "syqi.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 13:48:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848652": [
        {
            "ioc_value": "jqpy.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 13:43:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848651": [
        {
            "ioc_value": "zs3z44wh.bettilt90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 13:30:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848650": [
        {
            "ioc_value": "u9f06vxn.systemcompass.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 13:22:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848649": [
        {
            "ioc_value": "gglosnig.betewin.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 13:19:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848646": [
        {
            "ioc_value": "154.88.103.48:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 13:05:06",
            "last_seen_utc": "2026-08-22 00:03:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848644": [
        {
            "ioc_value": "pavementmg.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 12:45:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/47af1f0d9932840767920b3cb2befb3839bbc980e610c6a14327edf1b1682b2d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848643": [
        {
            "ioc_value": "igjp.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 12:44:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848642": [
        {
            "ioc_value": "wgyp.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 12:43:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848641": [
        {
            "ioc_value": "hdqzc.casinomhub.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 12:39:43",
            "last_seen_utc": "2026-07-15 00:25:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848640": [
        {
            "ioc_value": "192.236.217.94:4551",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 12:35:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848622": [
        {
            "ioc_value": "ifpzjway.betebet.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 12:25:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848617": [
        {
            "ioc_value": "139.155.157.79:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 11:46:39",
            "last_seen_utc": "2026-08-15 22:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848616": [
        {
            "ioc_value": "123.58.64.57:50040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 11:46:37",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848615": [
        {
            "ioc_value": "115.190.237.175:6677",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 11:46:31",
            "last_seen_utc": "2026-08-13 12:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848614": [
        {
            "ioc_value": "jbqh.betaverse.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 11:43:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848611": [
        {
            "ioc_value": "209.50.250.34:62957",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-11 11:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848610": [
        {
            "ioc_value": "adewbrfg.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 11:29:10",
            "last_seen_utc": "2026-07-14 03:48:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848607": [
        {
            "ioc_value": "dybndxun.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 11:28:06",
            "last_seen_utc": "2026-07-14 03:47:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848606": [
        {
            "ioc_value": "tniukh64.bitbet.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 11:23:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848604": [
        {
            "ioc_value": "3.127.138.57:15186",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-11 11:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848600": [
        {
            "ioc_value": "154.88.100.42:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 11:05:06",
            "last_seen_utc": "2026-08-22 00:03:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848599": [
        {
            "ioc_value": "172.174.154.130:1024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-11 11:05:05",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848592": [
        {
            "ioc_value": "hlme.bet90forward.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 10:44:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848589": [
        {
            "ioc_value": "uzmapubv.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 10:37:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848588": [
        {
            "ioc_value": "dawsszrm.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 10:32:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848583": [
        {
            "ioc_value": "137.220.194.15:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 09:46:53",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848582": [
        {
            "ioc_value": "r0.erloro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 09:46:35",
            "last_seen_utc": "2026-08-25 20:47:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848581": [
        {
            "ioc_value": "89.144.10.64:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-11 09:46:21",
            "last_seen_utc": "2026-08-14 18:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848580": [
        {
            "ioc_value": "69.10.49.136:2005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-11 09:46:08",
            "last_seen_utc": "2026-08-10 18:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848578": [
        {
            "ioc_value": "66.97.33.99:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-11 09:46:07",
            "last_seen_utc": "2026-08-10 18:46:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848579": [
        {
            "ioc_value": "67.211.221.131:65291",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-11 09:46:07",
            "last_seen_utc": "2026-08-10 18:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848575": [
        {
            "ioc_value": "103.195.238.98:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-11 09:43:11",
            "last_seen_utc": "2026-08-12 18:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848574": [
        {
            "ioc_value": "tuvu.bet404.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848571": [
        {
            "ioc_value": "stdcamtp.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:38:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848570": [
        {
            "ioc_value": "gpxingif.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:37:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848521": [
        {
            "ioc_value": "139.59.161.246:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 09:34:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848568": [
        {
            "ioc_value": "stromrechnung.receiver.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 09:34:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c2997496b91ff937c75eb5eb0ac72b0da520f532b5602636d62970e7228af8f/",
            "tags": "c2,SilentNet",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848569": [
        {
            "ioc_value": "dfdghfhddhdhfhdfhdfyhdfdfh.pages.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 09:34:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c2997496b91ff937c75eb5eb0ac72b0da520f532b5602636d62970e7228af8f/",
            "tags": "c2,SilentNet",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848562": [
        {
            "ioc_value": "a9lrz6z9.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:23:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848561": [
        {
            "ioc_value": "678y5rzq.betturkey.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:21:36",
            "last_seen_utc": "2026-07-14 13:18:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848560": [
        {
            "ioc_value": "64.89.160.127:1818",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-11 09:13:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dd5d6e714667c0699571435b4d4ada397372f49b11fe7f0f4007b3b5fa766047/",
            "tags": "NjRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848559": [
        {
            "ioc_value": "indigo2forjoy.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-11 09:13:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dd5d6e714667c0699571435b4d4ada397372f49b11fe7f0f4007b3b5fa766047/",
            "tags": "NjRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848558": [
        {
            "ioc_value": "o82lzdzb.networkatlas.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848556": [
        {
            "ioc_value": "64.44.131.64:4242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-11 09:10:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/23ac49199d2dd8bd67f71c43afe84526efe5cce2c1fff478b2b0db24a91f8a77/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848555": [
        {
            "ioc_value": "67.21.33.92:6544",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-11 09:08:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/38d8dbf64062747f22fd847354d4f74282946532899a3def1006004675a55d65/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848549": [
        {
            "ioc_value": "154.88.103.60:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 09:05:04",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848548": [
        {
            "ioc_value": "qcarxtrl.betcool90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 09:03:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848546": [
        {
            "ioc_value": "106.13.74.185:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 08:53:06",
            "last_seen_utc": "2026-07-12 07:35:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848545": [
        {
            "ioc_value": "106.13.74.185:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 08:53:05",
            "last_seen_utc": "2026-07-14 06:57:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848544": [
        {
            "ioc_value": "81.70.21.248:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 08:52:51",
            "last_seen_utc": "2026-09-01 02:47:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848543": [
        {
            "ioc_value": "bahrjtdryj843gsn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 08:50:58",
            "last_seen_utc": "2026-07-27 08:42:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848542": [
        {
            "ioc_value": "rufrzzcs.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 08:47:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848541": [
        {
            "ioc_value": "pbdb.bet303.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 08:43:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848540": [
        {
            "ioc_value": "chyeselq.betpublic.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 08:41:37",
            "last_seen_utc": "2026-07-13 16:41:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848539": [
        {
            "ioc_value": "imnx.bet303.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 08:41:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848533": [
        {
            "ioc_value": "ggnytlvj.betnef.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 07:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848531": [
        {
            "ioc_value": "lokb.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 07:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848530": [
        {
            "ioc_value": "rntb.bekabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 07:40:46",
            "last_seen_utc": "2026-07-14 10:16:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848529": [
        {
            "ioc_value": "betmel.coupons",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 07:26:26",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848528": [
        {
            "ioc_value": "py01df9v.bettilt90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 07:23:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848527": [
        {
            "ioc_value": "6cyzeu86.bettilt90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 07:21:06",
            "last_seen_utc": "2026-07-12 00:02:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848525": [
        {
            "ioc_value": "open.citadelsquishyhumvee.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 07:19:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848526": [
        {
            "ioc_value": "hp.citadelsquishyhumvee.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 07:19:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848524": [
        {
            "ioc_value": "gw.portallbridge.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-11 07:18:35",
            "last_seen_utc": "2026-07-11 07:18:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/34c37d16da934f0281861d55fd766ddac8e1860e9f62204bbb32cfb0052f51d7/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848522": [
        {
            "ioc_value": "operationsframework.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-11 07:17:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/34c37d16da934f0281861d55fd766ddac8e1860e9f62204bbb32cfb0052f51d7/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848523": [
        {
            "ioc_value": "account.operationsframework.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-11 07:17:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/34c37d16da934f0281861d55fd766ddac8e1860e9f62204bbb32cfb0052f51d7/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848520": [
        {
            "ioc_value": "79.141.165.55:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 07:15:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d92f3155a058d19c81eba292df6fa7d5080c684ba6a19d3d04d2bdd24796d53c/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848518": [
        {
            "ioc_value": "217.60.195.213:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-11 07:15:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ae5e5ae12ed257ab82efc258dce8da1daaa662159553b8107de78271113300c7/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848519": [
        {
            "ioc_value": "217.60.195.237:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-11 07:15:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ddc5a9b45c817b2095762c523c38ae28a816ef5c0639d74dae1855ce18f2298a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848517": [
        {
            "ioc_value": "102.220.160.103:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 07:15:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/369478c13ad42c86ddfacd1943b4aa23d2451ff42d8bbe1a26f664f5d5748433/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848515": [
        {
            "ioc_value": "fb88.style",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 07:15:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9ff18f1e02141c1ef02b3ae37c4d7d8508de00bf633c5a3fdc9a3ec0503e4e69/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848516": [
        {
            "ioc_value": "ultraportal.4nmn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-11 07:15:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5e9cf53e891d6e59478c8e863312a4eac67c7b77e5cb6c569130b6f95177e54a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848514": [
        {
            "ioc_value": "ftp.dklak.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-11 07:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c5c7a9e148ee943262c9a5f67f5ce65a276dc04beddf5e12900c0acac40ece89/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848512": [
        {
            "ioc_value": "135.136.134.57:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-11 07:10:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ee51d1a275065d0aee9723013aba36d1272ef5441ad7cdfb63b0468914e0c746/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848513": [
        {
            "ioc_value": "217.60.195.12:7006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-11 07:10:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81d1be154c6ac1d29d5074a2836b53caae2649b2b18868fe75506c7fb5771df6/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848511": [
        {
            "ioc_value": "38.49.217.221:21001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-11 07:10:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4bb16555c6d16051154f98850757d5eacfefcd07031cdde2054e574f988e8c5b/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848510": [
        {
            "ioc_value": "172.111.163.169:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-11 07:09:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/37fefd2ad2ef806d5dd0858f7976a74e1548f99ddd634f9d46fb11b5e020808a/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848505": [
        {
            "ioc_value": "82.38.71.155:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-07-11 07:01:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7b41f5b9d24dc10eec387c8ae7b8ba34695f63a72b5a50816b95af233429664e/",
            "tags": "Dofoil,Smoke Loader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848504": [
        {
            "ioc_value": "51.195.136.174:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 06:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b36b132b5d8a5f3a3239302f8ca730c4a76f8abf4783cd670a5f4fd7a35a32c9/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848503": [
        {
            "ioc_value": "195.63.145.106:3308",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-11 06:53:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848501": [
        {
            "ioc_value": "tolail.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-11 06:49:51",
            "last_seen_utc": "2026-07-27 15:54:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848502": [
        {
            "ioc_value": "organp.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-11 06:49:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848500": [
        {
            "ioc_value": "209.99.189.121:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-11 06:49:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/db6b320a2d734a81d7b5c5ffeb47d01629ebc4db7023c89ff19eeffbbaa2fbe4/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848499": [
        {
            "ioc_value": "80.234.41.242:7895",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-11 06:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848498": [
        {
            "ioc_value": "teoz.radioshartbandi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 06:41:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848497": [
        {
            "ioc_value": "auty.radioshartbandi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 06:40:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848496": [
        {
            "ioc_value": "jcttadgn.betlivo90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 06:33:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848495": [
        {
            "ioc_value": "oarfizul.betlivo90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 06:30:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848492": [
        {
            "ioc_value": "g70jv5jnisaopa3.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-11 06:22:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2186a1d4bafc51969dc84c97aafea7231cbbbb55566fca72a5df983060099f5a/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848493": [
        {
            "ioc_value": "clkd3xc031atgdk.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-11 06:22:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2186a1d4bafc51969dc84c97aafea7231cbbbb55566fca72a5df983060099f5a/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848494": [
        {
            "ioc_value": "dht5z2yx50uypbr.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-11 06:22:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2186a1d4bafc51969dc84c97aafea7231cbbbb55566fca72a5df983060099f5a/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848490": [
        {
            "ioc_value": "64.95.13.85:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-11 06:22:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2186a1d4bafc51969dc84c97aafea7231cbbbb55566fca72a5df983060099f5a/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848491": [
        {
            "ioc_value": "64.95.13.85:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-11 06:22:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2186a1d4bafc51969dc84c97aafea7231cbbbb55566fca72a5df983060099f5a/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848471": [
        {
            "ioc_value": "139.59.161.246:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 06:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848483": [
        {
            "ioc_value": "178.128.208.65:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 06:12:58",
            "last_seen_utc": "2026-07-17 05:23:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848489": [
        {
            "ioc_value": "cppqqgxg.betlivo90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 06:10:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848488": [
        {
            "ioc_value": "cywkkhmc.betlivo90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 06:07:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848485": [
        {
            "ioc_value": "154.88.103.57:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 06:05:04",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848482": [
        {
            "ioc_value": "157.20.182.81:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-11 05:55:11",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848480": [
        {
            "ioc_value": "157.20.182.81:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-11 05:55:10",
            "last_seen_utc": "2026-08-08 17:35:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848481": [
        {
            "ioc_value": "196.251.121.90:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-11 05:55:10",
            "last_seen_utc": "2026-08-08 17:35:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848479": [
        {
            "ioc_value": "112.213.101.132:1121",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:49:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848478": [
        {
            "ioc_value": "afdm.scloudflareb.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:48:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a0d1e6b471522635bcf7ca0176d6ee8febcf90184078b5e8ce24e0eca970b532/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848477": [
        {
            "ioc_value": "osgyx.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:47:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848475": [
        {
            "ioc_value": "154.36.188.90:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848476": [
        {
            "ioc_value": "95.41.4.54:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:46:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848474": [
        {
            "ioc_value": "18.163.0.245:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:45:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8715bb53fad907f12ab1b5ec7bad49d2a4f72bf07f81bb2a6621fd1f9f55ffa1/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848473": [
        {
            "ioc_value": "qqdhq.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-11 05:45:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8715bb53fad907f12ab1b5ec7bad49d2a4f72bf07f81bb2a6621fd1f9f55ffa1/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848472": [
        {
            "ioc_value": "pyrd.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 05:40:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848383": [
        {
            "ioc_value": "ourluckytiger.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 05:30:20",
            "last_seen_utc": "2026-08-19 19:31:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,timer-loader,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848390": [
        {
            "ioc_value": "tauma.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 05:30:08",
            "last_seen_utc": "2026-08-28 10:45:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,timer-loader,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848396": [
        {
            "ioc_value": "configservermu.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 05:30:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848398": [
        {
            "ioc_value": "kartina-na-zakaz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 05:30:03",
            "last_seen_utc": "2026-08-19 19:31:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "BirdKit,ClickFix,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848401": [
        {
            "ioc_value": "stptest1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 05:30:01",
            "last_seen_utc": "2026-08-15 11:47:13",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "BirdKit,ClickFix,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848403": [
        {
            "ioc_value": "xn--e1acm1a.xn--p1ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-11 05:30:00",
            "last_seen_utc": "2026-08-19 19:31:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "BirdKit,ClickFix,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848221": [
        {
            "ioc_value": "shift-art.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-11 05:29:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1848215": [
        {
            "ioc_value": "2.26.133.156:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_webinject",
            "malware_alias": null,
            "malware_printable": "Unknown Webinject",
            "first_seen_utc": "2026-07-11 05:29:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/tsundere-blockchain-c2",
            "tags": "blockchain-c2,CastleRAT,EtherHiding,EtherRAT,Tsundere",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848235": [
        {
            "ioc_value": "104.168.149.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 05:29:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/babb2be39ea328fc1f47015aa1cda9a5ce02a9fca1afd784b1e013e62c9110da",
            "tags": "c2,clickfix,stealer",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848242": [
        {
            "ioc_value": "159.89.132.240:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:54",
            "last_seen_utc": "2026-07-18 10:01:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848268": [
        {
            "ioc_value": "165.232.71.140:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848277": [
        {
            "ioc_value": "164.37.109.234:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:50",
            "last_seen_utc": "2026-07-18 10:06:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848305": [
        {
            "ioc_value": "164.37.109.234:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848306": [
        {
            "ioc_value": "138.68.138.44:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848342": [
        {
            "ioc_value": "159.89.132.240:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848363": [
        {
            "ioc_value": "138.68.93.46:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:48",
            "last_seen_utc": "2026-07-13 06:36:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848226": [
        {
            "ioc_value": "https://pub-73d9654eeb344c8db5408c750d655c66.r2.dev/Financial%20Transcript.vbs",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 05:29:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0becac3708194f61f084acf35602644f8cef1bcb33a7bbdebbd96b0d1888bda3",
            "tags": "action1,loader,r2dev,rmm,vbs",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848227": [
        {
            "ioc_value": "0becac3708194f61f084acf35602644f8cef1bcb33a7bbdebbd96b0d1888bda3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 05:29:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0becac3708194f61f084acf35602644f8cef1bcb33a7bbdebbd96b0d1888bda3",
            "tags": "action1,loader,r2dev,rmm,vbs",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848225": [
        {
            "ioc_value": "https://pub-b42d42acf73b4e5887636c7e58ea9500.r2.dev/msi/8724661604/20260706_033518_c703143c.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 05:29:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0becac3708194f61f084acf35602644f8cef1bcb33a7bbdebbd96b0d1888bda3",
            "tags": "action1,loader,r2dev,rmm,vbs",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848276": [
        {
            "ioc_value": "75.2.88.106:6008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-11 05:29:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/24b1c3f96179633ed7a40190ea103c558cc182c32cab38e3399a81524cb578b5/community",
            "tags": "Yephiler",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1848324": [
        {
            "ioc_value": "45.76.84.95:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 05:29:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b933cbb44491b9684f7e65b3a6f1c1c18b1a30c5d5b60af4ebe08e7277ace913",
            "tags": "ClickFix,raw-tcp-c2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848325": [
        {
            "ioc_value": "webinteurope.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-11 05:29:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b933cbb44491b9684f7e65b3a6f1c1c18b1a30c5d5b60af4ebe08e7277ace913",
            "tags": "ClickFix,raw-tcp-c2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848326": [
        {
            "ioc_value": "a9f1e873451adc5be1e9924d876ebaf79a467ab94b3f6a4e27068206f7b52719",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848327": [
        {
            "ioc_value": "9d7f9ba8bde293ce8fc8b703ea016eda37bdb5726fa2f86f83e70d09fcef919d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848328": [
        {
            "ioc_value": "82c64ef8e028f5b58f3a61719792e82bc43fe01f8a6185700ff60b71943d97f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848329": [
        {
            "ioc_value": "a5f7f39121b4fdf1d9dd9c2e8cacdbae1c00cd29383eceeea2cfb3b3a03187c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848330": [
        {
            "ioc_value": "928ccfc1aed294c58960d22ec011f3a6730c1d35cf8d1d5cc54a408326636d32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848331": [
        {
            "ioc_value": "4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848332": [
        {
            "ioc_value": "6fa62584242262b5da8dab22c790e32cf84adae04d231c09d26aae689547a800",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,DLL-sideload,Emmenhtal,msiexec,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848333": [
        {
            "ioc_value": "bcrfix.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:34",
            "last_seen_utc": "2026-07-13 23:35:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "c2,ClickFix,Emmenhtal,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848334": [
        {
            "ioc_value": "tamweelke.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:33",
            "last_seen_utc": "2026-07-13 23:35:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "c2,ClickFix,Emmenhtal,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848335": [
        {
            "ioc_value": "https://us-addnewdevice.com/dl-callback/peevmnpz-psenf5s7-927uja3p-uey4ex9n/setup.msi/e5cdedc2f6f167f2bf343a5bb57aa7f6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,cloudflare-r2,Emmenhtal,iex-irm,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848336": [
        {
            "ioc_value": "https://pub-f2969eb764264a9280dffa75e6803e93.r2.dev/setup.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,cloudflare-r2,Emmenhtal,iex-irm,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848337": [
        {
            "ioc_value": "http://us-addnewdevice.com/Vzj72DFgvUe1Psg5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,cloudflare-r2,Emmenhtal,iex-irm,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848338": [
        {
            "ioc_value": "us-addnewdevice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-11 05:29:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/4ef9bef04dc4ae1d85773c78249f02f739efcea500ee644e9e200c44340049c2",
            "tags": "ClickFix,cloudflare-r2,Emmenhtal,iex-irm,NetSupport",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1848395": [
        {
            "ioc_value": "bd894e0e215af7fa9a6c99cb939efd7183b5cbf845c9e0b5e6038a95bd58c11a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.cpuminer",
            "malware_alias": null,
            "malware_printable": "Cpuminer",
            "first_seen_utc": "2026-07-11 05:29:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "chronic-nightmare,credential-theft,monero-miner,rootkit,tor-c2,worm",
            "anonymous": 0,
            "reporter": "MatthewBurford"
        }
    ],
    "1848404": [
        {
            "ioc_value": "139.59.255.98:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-11 05:29:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14061,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1848409": [
        {
            "ioc_value": "103.177.46.36:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-11 05:29:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1848410": [
        {
            "ioc_value": "168.245.203.188:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-11 05:29:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1848411": [
        {
            "ioc_value": "168.245.203.104:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-11 05:29:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1848412": [
        {
            "ioc_value": "168.245.203.176:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-11 05:29:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1848439": [
        {
            "ioc_value": "159.65.61.151:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:20",
            "last_seen_utc": "2026-07-13 06:36:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848452": [
        {
            "ioc_value": "164.37.109.234:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:19",
            "last_seen_utc": "2026-07-19 09:11:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848463": [
        {
            "ioc_value": "164.92.179.21:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:18",
            "last_seen_utc": "2026-07-12 13:22:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848464": [
        {
            "ioc_value": "165.232.71.140:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-11 05:29:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848470": [
        {
            "ioc_value": "zh3l5x4j.betstrong.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 05:22:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848469": [
        {
            "ioc_value": "egpdhjpf.betstrong.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 05:20:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848466": [
        {
            "ioc_value": "pqyajjta.betgar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 05:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848465": [
        {
            "ioc_value": "juymyarc.betgar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 05:11:37",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848457": [
        {
            "ioc_value": "pmhy.gorgbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 04:44:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848456": [
        {
            "ioc_value": "bbhf.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 04:32:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848455": [
        {
            "ioc_value": "fphhkiyz.betforward.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 04:16:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848454": [
        {
            "ioc_value": "rfiwztch.betforward.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 04:16:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848451": [
        {
            "ioc_value": "q0oocq7q.basari90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 04:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848449": [
        {
            "ioc_value": "1qvrznky.runtimebeacon.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 04:05:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848448": [
        {
            "ioc_value": "154.88.103.42:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 04:05:08",
            "last_seen_utc": "2026-08-22 00:03:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848442": [
        {
            "ioc_value": "http://bonneli.rs/tmp/coreserver/gate.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.pony",
            "malware_alias": "Siplog,Fareit",
            "malware_printable": "Pony",
            "first_seen_utc": "2026-07-11 03:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Pony",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848441": [
        {
            "ioc_value": "akvz.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 03:34:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848440": [
        {
            "ioc_value": "fgdd.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 03:32:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848438": [
        {
            "ioc_value": "zcnevugr.betewin.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 03:22:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848437": [
        {
            "ioc_value": "fzneds6a.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 03:21:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848435": [
        {
            "ioc_value": "cjxj9gkn.betropol.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 03:20:11",
            "last_seen_utc": "2026-07-14 12:18:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848431": [
        {
            "ioc_value": "tvcp.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 02:36:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848430": [
        {
            "ioc_value": "euls.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 02:31:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848429": [
        {
            "ioc_value": "xcfumaos.betebet.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 02:26:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848427": [
        {
            "ioc_value": "auth-code-check.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 02:19:55",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848426": [
        {
            "ioc_value": "154.88.100.50:8885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-11 02:05:07",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848422": [
        {
            "ioc_value": "skgm.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:31:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848421": [
        {
            "ioc_value": "hlhmjajy.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:31:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848420": [
        {
            "ioc_value": "bacu.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:31:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848419": [
        {
            "ioc_value": "ybirhhkf.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:29:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848418": [
        {
            "ioc_value": "gpukjn7z.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:21:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848417": [
        {
            "ioc_value": "v91rw911.betraca.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:19:45",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848416": [
        {
            "ioc_value": "rtaanbaq.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:19:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848415": [
        {
            "ioc_value": "wjubztvg.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:15:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848413": [
        {
            "ioc_value": "ij7y2j4o.bet1xegypt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 01:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848369": [
        {
            "ioc_value": "zbrz.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 00:35:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848368": [
        {
            "ioc_value": "qkkw.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 00:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848367": [
        {
            "ioc_value": "qfgzzlba.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 00:20:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848366": [
        {
            "ioc_value": "dydmteto.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 00:19:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848365": [
        {
            "ioc_value": "jbiyqacd.bcgame.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 00:18:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848364": [
        {
            "ioc_value": "zzwjboym.bcgame.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-11 00:18:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848360": [
        {
            "ioc_value": "62.60.226.185:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-11 00:00:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848359": [
        {
            "ioc_value": "addictedmenswear.myddns.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 23:55:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/60314e99e9c7cf30f9b51fb1956852dafc4d87d996cb56cd05040640cdad99a8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848358": [
        {
            "ioc_value": "8.134.70.73:6111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 23:46:33",
            "last_seen_utc": "2026-09-01 02:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848357": [
        {
            "ioc_value": "137.220.194.15:8011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 23:46:08",
            "last_seen_utc": "2026-08-11 18:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848356": [
        {
            "ioc_value": "115.190.237.175:23333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 23:46:00",
            "last_seen_utc": "2026-08-13 12:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848355": [
        {
            "ioc_value": "112.124.106.45:8887",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 23:45:58",
            "last_seen_utc": "2026-08-17 12:47:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848354": [
        {
            "ioc_value": "tvbx.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 23:31:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848353": [
        {
            "ioc_value": "phnf.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 23:29:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848352": [
        {
            "ioc_value": "zf82e23p.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 23:15:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848351": [
        {
            "ioc_value": "5yvw9e40.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 23:11:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848350": [
        {
            "ioc_value": "35quvguj.banko90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 23:11:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848344": [
        {
            "ioc_value": "y06e8hvi.proxyharbor.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 23:02:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848341": [
        {
            "ioc_value": "rvbpwiks.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 22:38:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848340": [
        {
            "ioc_value": "rdtptnmb.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 22:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848339": [
        {
            "ioc_value": "tvzo.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 22:31:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848323": [
        {
            "ioc_value": "vxgz.1xsaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 22:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848322": [
        {
            "ioc_value": "144.91.123.81:5655",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.rms",
            "malware_alias": "Gussdoor,Remote Manipulator System,RuRAT",
            "malware_printable": "RMS",
            "first_seen_utc": "2026-07-10 22:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemoteManipulator",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848321": [
        {
            "ioc_value": "hznh.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 22:10:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848320": [
        {
            "ioc_value": "62.60.226.68:24043",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 22:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848316": [
        {
            "ioc_value": "ayehtlgp.systemcompass.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 21:42:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848315": [
        {
            "ioc_value": "npwzigwd.systemcompass.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 21:40:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848313": [
        {
            "ioc_value": "ggj2o3iw.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 21:15:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848312": [
        {
            "ioc_value": "er4goixf.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 21:11:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848311": [
        {
            "ioc_value": "ovya.logiccascade.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 21:11:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848310": [
        {
            "ioc_value": "dhig.logiccascade.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 21:09:48",
            "last_seen_utc": "2026-07-11 16:49:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848304": [
        {
            "ioc_value": "tjdxsecd.stacknexus.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 20:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848303": [
        {
            "ioc_value": "mpsysysx.stacknexus.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 20:45:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848301": [
        {
            "ioc_value": "hihankidaha.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 20:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848300": [
        {
            "ioc_value": "mamkor.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 20:34:34",
            "last_seen_utc": "2026-07-10 23:41:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848299": [
        {
            "ioc_value": "103.75.46.34:10801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-10 20:25:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848298": [
        {
            "ioc_value": "ruxi.kernelbridge.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 20:11:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848297": [
        {
            "ioc_value": "lkls.kernelbridge.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 20:09:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848293": [
        {
            "ioc_value": "pxic.bet1xegypt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848292": [
        {
            "ioc_value": "dkkmrjmb.signalfrontier.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:50:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848291": [
        {
            "ioc_value": "vuxxtdqp.signalfrontier.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:49:51",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848290": [
        {
            "ioc_value": "rvkf.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848289": [
        {
            "ioc_value": "93.115.172.235:7579",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-10 19:46:10",
            "last_seen_utc": "2026-08-14 18:46:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848288": [
        {
            "ioc_value": "87.232.83.18:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-10 19:46:04",
            "last_seen_utc": "2026-08-13 18:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848287": [
        {
            "ioc_value": "45.74.7.199:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 19:45:36",
            "last_seen_utc": "2026-08-14 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848286": [
        {
            "ioc_value": "45.74.7.191:1202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 19:45:35",
            "last_seen_utc": "2026-08-14 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848285": [
        {
            "ioc_value": "216.133.157.16:21935",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 19:45:12",
            "last_seen_utc": "2026-08-10 08:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848284": [
        {
            "ioc_value": "155.103.71.115:13508",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 19:43:41",
            "last_seen_utc": "2026-08-09 18:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848283": [
        {
            "ioc_value": "144.31.117.38:47825",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-10 19:43:32",
            "last_seen_utc": "2026-08-21 18:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848282": [
        {
            "ioc_value": "103.83.86.48:1818",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 19:43:13",
            "last_seen_utc": "2026-08-14 18:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848281": [
        {
            "ioc_value": "nblv.1xsaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:39:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848280": [
        {
            "ioc_value": "ygpl.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:34:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848279": [
        {
            "ioc_value": "kmfnh0zd.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848278": [
        {
            "ioc_value": "vigaacqv.behtarin-site-shartbandi-football.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 19:11:16",
            "last_seen_utc": "2026-07-15 09:37:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848270": [
        {
            "ioc_value": "qfkvyjft.scriptfoundry.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:59:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848269": [
        {
            "ioc_value": "cangwawg.scriptfoundry.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:54:28",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848267": [
        {
            "ioc_value": "vgjb.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:36:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848266": [
        {
            "ioc_value": "bitbluemond9.zexorcloudsync.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:34:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848265": [
        {
            "ioc_value": "jpnz.bahsegel90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:33:42",
            "last_seen_utc": "2026-07-14 22:03:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848264": [
        {
            "ioc_value": "grgsg.onexbet.best",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:33:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848262": [
        {
            "ioc_value": "pathnoirbaum.qivornodeunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:19:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848261": [
        {
            "ioc_value": "jc5eb1c5.radioshartbandi.chat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:13:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848249": [
        {
            "ioc_value": "loadpetitstar1.qivornodeunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:04:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848248": [
        {
            "ioc_value": "viewdarkberg5.qivornodeunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:04:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848247": [
        {
            "ioc_value": "hyh08ykm.packetmeridian.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848245": [
        {
            "ioc_value": "mfrsnkup.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 18:00:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848244": [
        {
            "ioc_value": "xzxllyxf.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:58:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848243": [
        {
            "ioc_value": "mikdsgmy.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:54:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848240": [
        {
            "ioc_value": "pointrougesoft.qivornodeunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:49:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848241": [
        {
            "ioc_value": "mamkor.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:49:53",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848238": [
        {
            "ioc_value": "vxfo.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:34:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848237": [
        {
            "ioc_value": "ttfg.bahigo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:33:19",
            "last_seen_utc": "2026-07-13 12:09:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848236": [
        {
            "ioc_value": "s8p4n4bz.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:15:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848234": [
        {
            "ioc_value": "pqu0ohtm.behtarin-site-shartbandi-football.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:10:46",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848229": [
        {
            "ioc_value": "glwpjrqq.bcgame.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 17:00:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848228": [
        {
            "ioc_value": "ywjiklsh.bcgame.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:57:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848224": [
        {
            "ioc_value": "jtkeavok.bcgame.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:48:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848222": [
        {
            "ioc_value": "bcgame.ink",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:40:49",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848220": [
        {
            "ioc_value": "snmg.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:32:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848219": [
        {
            "ioc_value": "fyav.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:32:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848218": [
        {
            "ioc_value": "47.243.36.18:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-10 16:31:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d95b179001682c28bdadf09f6e344285562d68f15a2194b0234117de3c5e8408/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848217": [
        {
            "ioc_value": "47.243.36.18:5252",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-10 16:31:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d95b179001682c28bdadf09f6e344285562d68f15a2194b0234117de3c5e8408/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848216": [
        {
            "ioc_value": "ertt.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:28:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848214": [
        {
            "ioc_value": "mfno.bahigo90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 16:23:37",
            "last_seen_utc": "2026-07-14 07:21:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848213": [
        {
            "ioc_value": "http://cw212153.tw1.ru/L1nc0In.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-10 16:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848204": [
        {
            "ioc_value": "134.122.204.241:447",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nworm",
            "malware_alias": "nw0rm,NWorm",
            "malware_printable": "N-W0rm",
            "first_seen_utc": "2026-07-10 15:55:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "N-W0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848057": [
        {
            "ioc_value": "138.68.138.44:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 15:47:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848202": [
        {
            "ioc_value": "awvz.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 15:28:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848201": [
        {
            "ioc_value": "suvc.backgammon.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 15:23:05",
            "last_seen_utc": "2026-07-12 01:03:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848199": [
        {
            "ioc_value": "u1n70yhl.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 15:11:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848198": [
        {
            "ioc_value": "9tg4kvyj.behtarin-site-shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 15:10:18",
            "last_seen_utc": "2026-07-13 13:39:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848192": [
        {
            "ioc_value": "mjomrlox.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 14:57:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848191": [
        {
            "ioc_value": "0b4bfd9422eb241b2d324cb69d65900b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:55:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848188": [
        {
            "ioc_value": "f85edfbd3b5d8c22774f4239c920727e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-10 14:55:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848189": [
        {
            "ioc_value": "9a42d843c5c0dd751898a0bec5a68d0fc097364788f99cdba6533b2f125b4a5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:55:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848190": [
        {
            "ioc_value": "ad76e4103136992aef4bba1d6f5518fec9255c51",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:55:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848187": [
        {
            "ioc_value": "fb85963c2e68338d4f33bdef2ee4020d7f698317",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-10 14:55:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848186": [
        {
            "ioc_value": "dacc3d21d8d1e49fd7728f3500943b9eddd80589264d939fbe1fd880fe03938d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-10 14:55:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848183": [
        {
            "ioc_value": "56ca405fa5c12838051af41d5b515a3dc6064531eaabe635242d13e0e72de848",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:55:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848184": [
        {
            "ioc_value": "e4ef197da5354c0a2948f6a2f14104c587a9b385",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:55:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848185": [
        {
            "ioc_value": "a1d1d914cd05bb1cbced378d002a44f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:55:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848182": [
        {
            "ioc_value": "a3c1ef1092965bc58c12d579a889f296",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:55:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848181": [
        {
            "ioc_value": "3e5560670aeaf9ae87844f896264751efc1446cd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:55:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848179": [
        {
            "ioc_value": "968b49795eddd02848759e0f1cf7c838",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:55:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848180": [
        {
            "ioc_value": "d9e8f073c050b9f75f78003c05cc77bc0b60fb5bbdfb980fe6216fa0fd8ace6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:55:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848178": [
        {
            "ioc_value": "0cb3f9f77acf2075a6074b05b56ab1b54125226d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848175": [
        {
            "ioc_value": "c4785f0696cae4e8630d28e545bbee207544e7e3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-10 14:54:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848176": [
        {
            "ioc_value": "6e66f889923ccb7dc34641a4d7ddc234",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-10 14:54:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848177": [
        {
            "ioc_value": "e08ba6b6bd164546cc8f8819ab67d22f7a410d6fe9bbb2e350dbe24786e93d55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848171": [
        {
            "ioc_value": "ac0ba770904dedc4cd0f713b89359048325993ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848172": [
        {
            "ioc_value": "c4f11447afc4928a9ce8843fc81cb25c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848173": [
        {
            "ioc_value": "7ee796a8fef94d38a6ef3d906fe3d37052b5b6c2435420dcc75e459fbc501a68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-10 14:54:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848174": [
        {
            "ioc_value": "azrhfmdl.bazisangkaqazgeychidancepoli.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 14:54:57",
            "last_seen_utc": "2026-07-15 05:01:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848169": [
        {
            "ioc_value": "44faf223cbf8b4bd1d4221476322fab4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-10 14:54:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848170": [
        {
            "ioc_value": "1fc2634ee7f9bdddc44bdb2424e898e71d844b8935c2d9c6bb208a6a5befba9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848166": [
        {
            "ioc_value": "d653ada71dcf3f24d2d6dd5ef22a169b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848167": [
        {
            "ioc_value": "59eb2fad261dc13a1e9bfab3a57cd51a4841f82787130202ff348bbaf2c6409d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-10 14:54:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848168": [
        {
            "ioc_value": "a11f2aeabbb8ebfa0e66c457ecdc06d232b4ca51",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-07-10 14:54:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848165": [
        {
            "ioc_value": "ec84b042161c8037b5e6d556dc7795c10788f24c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848163": [
        {
            "ioc_value": "f77dafb7f7cf6d7c3318f8ff01fa5e6d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848164": [
        {
            "ioc_value": "d632a7428a5a8a6c4642ba4ddecfbbe96e28ed030a204156c5018527ba4a6b46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848162": [
        {
            "ioc_value": "cf236e17e176cacaa951e086637bf62c04635080",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848160": [
        {
            "ioc_value": "46a7d8d9303db9b9c5301b6d080088cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848161": [
        {
            "ioc_value": "a6b325e695644ddaaf6edf0c41604179fd53d1e515afa52e5d526426a4644d76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848158": [
        {
            "ioc_value": "81438ec974a24527a4218f451214e4abeda74c6d112c2b2366571d1ba8eb700e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848159": [
        {
            "ioc_value": "27312667da1771cefb8880a0364d41ed056b59f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848156": [
        {
            "ioc_value": "2e70ac7f1bdfc2f9912448ee2b6c2c478bef3aab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-10 14:54:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848157": [
        {
            "ioc_value": "1b622c451fcc9d83aad8bf45b1c42b5f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-10 14:54:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848154": [
        {
            "ioc_value": "13ed2a77b08df2b52e3420205e763a41",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848155": [
        {
            "ioc_value": "df4e36252bf8a2b1dee291bcaf9e0505246cacc1d1ea9db3494f30c8506ba0cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-10 14:54:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848152": [
        {
            "ioc_value": "34da1d049c92313152f28cdf5bad644bff93cc6beca25e139453e20ed7a1a85f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848153": [
        {
            "ioc_value": "6d8433dceb879d60c4fbcaf3c1fa66832d8ed101",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848150": [
        {
            "ioc_value": "679fb2dbfe81808a883729d15cd03b99eda8d1ba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848151": [
        {
            "ioc_value": "654607f31a256d943a2de9b63b30929c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848148": [
        {
            "ioc_value": "983cca37c0534eb53f981fb4eb89a7f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848149": [
        {
            "ioc_value": "f35b6cb6af991bfa735e039f6bc0e49c69759c015a2074b87eed8f20e4200135",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848145": [
        {
            "ioc_value": "fd9284cedf382def729cf6450aec8e54",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 14:54:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848146": [
        {
            "ioc_value": "c0762bd8b3b098c6d5300256f9e8bc67d45709dc244db37cc55c5e2b0312e907",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848147": [
        {
            "ioc_value": "b818f746e14dc148f6572c8ab264a62dbe6bc760",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-10 14:54:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848142": [
        {
            "ioc_value": "9a1983ef9feea7bdb06c17d5957db7aa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-10 14:54:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848143": [
        {
            "ioc_value": "c35055499d7bf39198746a21bac07fb902e6307818898d6f961f3fdddaff5bde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 14:54:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848144": [
        {
            "ioc_value": "9ad4cd770ff008c6368b50661c59a2e436877b52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 14:54:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848139": [
        {
            "ioc_value": "914f0b43128f5ede1083809ab35b144c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848140": [
        {
            "ioc_value": "e8573e97c75bec4b9645f40c94a1f961971aa28444e3726564f4dda1312aac25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-10 14:54:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848141": [
        {
            "ioc_value": "3ef07367be035c6524b96fd552a57f309710b34b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-10 14:54:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848137": [
        {
            "ioc_value": "6953e6d2e8facd1ad7eaef3d95e3aae39f660a539329df240582dfab4501b49b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848138": [
        {
            "ioc_value": "daa33e089ca3b9adbbf5bf3b12153c6323cd01d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848136": [
        {
            "ioc_value": "e3ee9a97d742f50631e085a1ede54613",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848133": [
        {
            "ioc_value": "be24a7ff3d55f1b0b790dbec25fb1695",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-10 14:54:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848134": [
        {
            "ioc_value": "e32a3cc8a2a999af697bbfca1ab41f7605a593484d241da10d3fa6819c8c598b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848135": [
        {
            "ioc_value": "3100edb0f59e934d64fc4f173ebe6b860ed0d0ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848131": [
        {
            "ioc_value": "414d268d7f08654ce40f25c564ac3ac4b624007eb73c09a10e4bb2ff734d6295",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-10 14:54:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848132": [
        {
            "ioc_value": "2d0b2c22db90bced28ac61e4a32a185859c5ae86",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-10 14:54:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848128": [
        {
            "ioc_value": "aeb57ec14b5c7cf3b5ecf41bc4e783cd6a917ab56202404183ab42bd8bfed3d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848129": [
        {
            "ioc_value": "478d9285432671ef3f2672d4581ff7625f6f0708",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848130": [
        {
            "ioc_value": "739d254907a3a933f0718634112582bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848125": [
        {
            "ioc_value": "7197e9097b977d138f3856a8aca3a3b3c6b28b82cc76a3667ef1364e820195cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-10 14:54:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848126": [
        {
            "ioc_value": "caceab5925bfda9eac39d24585f42db05071f531",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-10 14:54:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848127": [
        {
            "ioc_value": "845a1bc9408c542cf748ba647c2e680e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-10 14:54:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848124": [
        {
            "ioc_value": "1b05bb4b7783efd8ac3e9d0ea2cd0254",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848120": [
        {
            "ioc_value": "57ccec59ebeb2aecbc045d01853412ca2b1c3e0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-10 14:54:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848121": [
        {
            "ioc_value": "dc614bc8781cb85e4ddf2bbb7860cb84",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-10 14:54:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848122": [
        {
            "ioc_value": "1138f7a02699421c300ea4a08e02fa014ea1e15f36647b27cd79eb339231842d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848123": [
        {
            "ioc_value": "9d1f8916a0a1b5379dc2138fb2ffc3b552d2285b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848118": [
        {
            "ioc_value": "8ed6ba61d3f45cc25d65f72605ed3f18",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-07-10 14:54:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848119": [
        {
            "ioc_value": "e4846ec6171f65e96c2909ad93359451551e3ac95aa89ab349d5ab773cbaa0d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-10 14:54:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848115": [
        {
            "ioc_value": "9ab13dc4c79fdd894774735987c9b60e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848116": [
        {
            "ioc_value": "558695e3c131c802602abb91b368cb4a1f04b6cf48b4e8ffaf86f1ec30394730",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-07-10 14:54:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848117": [
        {
            "ioc_value": "0b021082f6584ff7ad306d7f81371a3d666febd5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.loki",
            "malware_alias": null,
            "malware_printable": "Loki",
            "first_seen_utc": "2026-07-10 14:54:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848113": [
        {
            "ioc_value": "760b4354419627ed1018cd9185c7fe4c7573904203b21dadacb7dec5e03f5da4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848114": [
        {
            "ioc_value": "ba3822857415a736647fed9a5eeeb9dd72d5cc9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848110": [
        {
            "ioc_value": "d519cb7c67d7b9c0b6a3986c68082a9e57da057fda50cdcc9a14260f934a0ee1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848111": [
        {
            "ioc_value": "b0db754088392116bc03aaa867860478bd9a9db4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848112": [
        {
            "ioc_value": "65db1ec512c7e7f7dd0c6a3718efcedb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848107": [
        {
            "ioc_value": "518820c647ae2a73253b8cadffe1c3881be40936c228cf774c85af42a1c06b9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848108": [
        {
            "ioc_value": "43bf652c52e286bf637b42f2ae8a6aef92cf9f2b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848109": [
        {
            "ioc_value": "d9f41571617f5566313d683b8750483c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848105": [
        {
            "ioc_value": "226d89e2a300032ca5b72b622a71579040e0af9b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-10 14:54:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848106": [
        {
            "ioc_value": "a0823dfc3073cb32be7c4ede5f17ed10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-10 14:54:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848101": [
        {
            "ioc_value": "5867c518b37d23212e74e19ddfca7c78c1ffee07de17db413a75ded7d2d58b7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-10 14:54:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848102": [
        {
            "ioc_value": "255f8f700beb2825b333fbb78ec584816a6c2954",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-10 14:54:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848103": [
        {
            "ioc_value": "d55d6a4722973772857f242f86a2ef4a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-10 14:54:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848104": [
        {
            "ioc_value": "d4d16e820f6ca79bf362d7bf90656c9a063658bfca57713658cd6253cc34e5d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-10 14:54:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848098": [
        {
            "ioc_value": "f99db7a12ab80b11c3fdec7bf6688e3f6a8d028fe07de01d5fd8fc5d5ac8a577",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-10 14:54:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848099": [
        {
            "ioc_value": "c779ca8d539832e84941e51c4e557a454680b984",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-10 14:54:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848100": [
        {
            "ioc_value": "9ac739f69647379eb083546f9c126bf3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-10 14:54:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848096": [
        {
            "ioc_value": "747d3e6a68f00e4d2f65a4bf071d2c2752a7d1ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848097": [
        {
            "ioc_value": "19f235b2a219eaa317bb0cdf87464175",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848094": [
        {
            "ioc_value": "3298425727d0644a337faeef0a259802",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848095": [
        {
            "ioc_value": "485163c279b9dced626742d7fbb6dc9deb989459ba4781aac1a733c9f9b67596",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848091": [
        {
            "ioc_value": "5d7abaa64f6ee8117b900cb20ea8d893",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848092": [
        {
            "ioc_value": "38b184d316cda0368a6dcead584e84fa7bdc53fd12b117860e16bee849f46963",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848093": [
        {
            "ioc_value": "507b161a23629d5a6ede55c8ba9bad5f6e0ed513",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848089": [
        {
            "ioc_value": "c3742e8050b8664520fc1a00b7c84c2aac7eac7cec6249b7be5468504ce22d7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848090": [
        {
            "ioc_value": "4503d6b9653b4ed66da01b3f3c1c8b688841c9fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-10 14:54:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848088": [
        {
            "ioc_value": "982be584be605ccc38f90ff57060efbc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848086": [
        {
            "ioc_value": "5a2f726ab9db35f6fe00d364f017e09cb0cbd7a13d98e2a9cdbb12cc7676ce51",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848087": [
        {
            "ioc_value": "e4f5fa66cc88f57cbf61c8d1881f36585298a466",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-10 14:54:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848085": [
        {
            "ioc_value": "bb7d6536cecdff9abacfb25618aeb2d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848083": [
        {
            "ioc_value": "ae887a7346ca3547c459962ff760fda8b221c16d96fcde758422586fe7a886e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848084": [
        {
            "ioc_value": "0a23a08199e61347c0f4a56fa3204b5774e1b63a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-10 14:54:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848081": [
        {
            "ioc_value": "040ec489b5490566e5f254d4a2ae864901878372",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-10 14:54:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848082": [
        {
            "ioc_value": "981d4eb72393f6460c64e5444c963d19",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-10 14:54:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848080": [
        {
            "ioc_value": "1ab810f65b846b0d1aef311bda3d0e96dcc806dd7bdfc7eb414a68d53786a6ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-10 14:54:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1848079": [
        {
            "ioc_value": "rsxg.app-bet303.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 14:27:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848073": [
        {
            "ioc_value": "cooldogshistory.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 14:02:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848072": [
        {
            "ioc_value": "godhelp-us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 14:02:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848071": [
        {
            "ioc_value": "ilikegoodpersontoo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 14:02:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848070": [
        {
            "ioc_value": "nnxhoedm.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 14:01:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848067": [
        {
            "ioc_value": "coolrecipients.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 14:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848068": [
        {
            "ioc_value": "opendocumentsforfree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 14:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848069": [
        {
            "ioc_value": "youmustviewit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 14:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848066": [
        {
            "ioc_value": "figcqryq.onjabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:59:25",
            "last_seen_utc": "2026-07-15 07:18:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848065": [
        {
            "ioc_value": "usgpuuzb.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:50:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848063": [
        {
            "ioc_value": "https://bdm.omni-signage.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 13:27:18",
            "last_seen_utc": "2026-07-17 10:26:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848064": [
        {
            "ioc_value": "bdm.omni-signage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 13:27:18",
            "last_seen_utc": "2026-07-17 10:26:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848062": [
        {
            "ioc_value": "bdm.kencangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 13:27:06",
            "last_seen_utc": "2026-08-27 16:24:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848061": [
        {
            "ioc_value": "https://bdm.kencangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 13:27:05",
            "last_seen_utc": "2026-08-27 16:24:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848060": [
        {
            "ioc_value": "dzij.alevcasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:26:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848059": [
        {
            "ioc_value": "185.91.69.99:5657",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-10 13:22:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bc238716915c304156134fbea50602ff998524470d72bd71edd69d7c943c76a0/",
            "tags": "PurLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848039": [
        {
            "ioc_value": "178.128.208.65:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 13:17:11",
            "last_seen_utc": "2026-07-18 09:52:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848043": [
        {
            "ioc_value": "206.189.144.140:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 13:17:11",
            "last_seen_utc": "2026-07-18 09:54:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848045": [
        {
            "ioc_value": "152.42.214.91:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 13:17:10",
            "last_seen_utc": "2026-07-10 14:09:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848056": [
        {
            "ioc_value": "q6972jc6.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:11:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848055": [
        {
            "ioc_value": "oj7f87i3.radioshartbandi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:11:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848054": [
        {
            "ioc_value": "u4eum9pz.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:09:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848050": [
        {
            "ioc_value": "xz1aa7xc.royalshart.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:03:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848049": [
        {
            "ioc_value": "wsqnts4a.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848048": [
        {
            "ioc_value": "http://geminyw.xyz:5003",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-10 13:00:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ae887a7346ca3547c459962ff760fda8b221c16d96fcde758422586fe7a886e3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1848046": [
        {
            "ioc_value": "adbjginw.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 13:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848044": [
        {
            "ioc_value": "pyjh.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:58:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848042": [
        {
            "ioc_value": "nnyw.1xsaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:52:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848041": [
        {
            "ioc_value": "mxcf.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:51:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848040": [
        {
            "ioc_value": "vwkr.bet1xindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:46:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848038": [
        {
            "ioc_value": "iuko.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:39:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848037": [
        {
            "ioc_value": "wsjp.1xsaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:29:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848036": [
        {
            "ioc_value": "izsv.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:24:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848035": [
        {
            "ioc_value": "taskironland.qivornodeunit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:20:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848033": [
        {
            "ioc_value": "64.227.117.72:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 12:19:02",
            "last_seen_utc": "2026-07-11 09:58:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1848034": [
        {
            "ioc_value": "206.189.146.157:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 12:19:01",
            "last_seen_utc": "2026-07-18 09:46:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847941": [
        {
            "ioc_value": "algo2nest.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-10 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847978": [
        {
            "ioc_value": "138.68.93.46:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 12:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847980": [
        {
            "ioc_value": "omgexplolts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 12:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1847981": [
        {
            "ioc_value": "lumennix.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 12:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1848024": [
        {
            "ioc_value": "rvqijhjo.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 12:00:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848023": [
        {
            "ioc_value": "jytlbnje.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:59:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848022": [
        {
            "ioc_value": "ujniklzz.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:49:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1848021": [
        {
            "ioc_value": "nwsaduex.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:49:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848015": [
        {
            "ioc_value": "nightstalkerwatch.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848016": [
        {
            "ioc_value": "shadowburninside.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848017": [
        {
            "ioc_value": "shadowmatrixpls.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848018": [
        {
            "ioc_value": "shadowrunevail.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848019": [
        {
            "ioc_value": "voidwalkerforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848020": [
        {
            "ioc_value": "warmcoffeetime.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848000": [
        {
            "ioc_value": "ashenravenfort.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848001": [
        {
            "ioc_value": "ashenshadowfort.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848002": [
        {
            "ioc_value": "bloodboundcitadel.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848003": [
        {
            "ioc_value": "bloodthornkeep.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": "2026-08-25 20:14:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848004": [
        {
            "ioc_value": "brokenvelvetdream.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848005": [
        {
            "ioc_value": "darkflamewatch.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848006": [
        {
            "ioc_value": "electricvoidfire.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848007": [
        {
            "ioc_value": "electricvoidsig.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848008": [
        {
            "ioc_value": "frostvenomfort.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848009": [
        {
            "ioc_value": "frozennebularhy.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848010": [
        {
            "ioc_value": "frozenwildheart.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848011": [
        {
            "ioc_value": "ironwolfcrest.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848012": [
        {
            "ioc_value": "ironwraithtower.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848013": [
        {
            "ioc_value": "mistwalkerforge.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1848014": [
        {
            "ioc_value": "nightflamevortex.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-07-10 11:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847999": [
        {
            "ioc_value": "101.42.255.92:2234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 11:46:34",
            "last_seen_utc": "2026-09-01 02:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847998": [
        {
            "ioc_value": "nfvh.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:25:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847997": [
        {
            "ioc_value": "fgkz.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:23:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847992": [
        {
            "ioc_value": "bizec8bu.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847988": [
        {
            "ioc_value": "o9a66qig.zaribbala.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:02:03",
            "last_seen_utc": "2026-07-14 10:56:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847987": [
        {
            "ioc_value": "ohnymfxm.btyek.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 11:00:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847986": [
        {
            "ioc_value": "eosgdskc.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 10:48:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847985": [
        {
            "ioc_value": "mbzomqnr.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 10:44:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847984": [
        {
            "ioc_value": "ydmotena.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 10:37:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847983": [
        {
            "ioc_value": "mvyj.radioshartbandi.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 10:26:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847979": [
        {
            "ioc_value": "huzlrwhe.btyek.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 10:17:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847977": [
        {
            "ioc_value": "101.42.255.92:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 10:05:08",
            "last_seen_utc": "2026-09-01 02:46:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847974": [
        {
            "ioc_value": "vacnkjqi.btyek.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 10:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847973": [
        {
            "ioc_value": "wlmulfgg.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:56:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847971": [
        {
            "ioc_value": "85.206.168.238:26076",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 09:46:22",
            "last_seen_utc": "2026-08-15 08:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847970": [
        {
            "ioc_value": "74.0.32.137:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-10 09:46:14",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847969": [
        {
            "ioc_value": "54.65.16.199:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-10 09:46:07",
            "last_seen_utc": "2026-08-15 18:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847967": [
        {
            "ioc_value": "45.74.7.195:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 09:45:53",
            "last_seen_utc": "2026-08-14 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847966": [
        {
            "ioc_value": "38.207.176.218:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 09:45:41",
            "last_seen_utc": "2026-09-01 02:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847965": [
        {
            "ioc_value": "207.180.250.181:10900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-10 09:44:41",
            "last_seen_utc": "2026-08-09 08:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847964": [
        {
            "ioc_value": "20.204.61.204:21891",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 09:44:38",
            "last_seen_utc": "2026-08-09 18:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847963": [
        {
            "ioc_value": "179.43.149.253:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 09:44:08",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847962": [
        {
            "ioc_value": "155.103.69.30:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 09:43:45",
            "last_seen_utc": "2026-08-09 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847961": [
        {
            "ioc_value": "147.124.218.54:62025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-10 09:43:38",
            "last_seen_utc": "2026-08-09 18:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847960": [
        {
            "ioc_value": "13.73.107.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 09:43:27",
            "last_seen_utc": "2026-08-09 18:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847959": [
        {
            "ioc_value": "104.250.161.126:2061",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-10 09:43:16",
            "last_seen_utc": "2026-09-01 02:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847957": [
        {
            "ioc_value": "103.212.187.217:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-10 09:43:13",
            "last_seen_utc": "2026-08-19 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847958": [
        {
            "ioc_value": "103.212.187.217:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-10 09:43:13",
            "last_seen_utc": "2026-08-19 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847956": [
        {
            "ioc_value": "103.146.231.107:7771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-10 09:43:12",
            "last_seen_utc": "2026-08-24 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847955": [
        {
            "ioc_value": "100.31.133.28:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-10 09:43:03",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847954": [
        {
            "ioc_value": "authorization-press-enter.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 09:39:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847953": [
        {
            "ioc_value": "lyrp.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:28:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847951": [
        {
            "ioc_value": "https://dup.omni-signage.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 09:27:03",
            "last_seen_utc": "2026-07-10 12:27:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847952": [
        {
            "ioc_value": "dup.omni-signage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 09:27:03",
            "last_seen_utc": "2026-07-10 12:27:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847949": [
        {
            "ioc_value": "https://dup.kencangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 09:26:51",
            "last_seen_utc": "2026-07-10 12:27:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847950": [
        {
            "ioc_value": "dup.kencangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 09:26:51",
            "last_seen_utc": "2026-07-10 12:27:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847948": [
        {
            "ioc_value": "oria.radioshartbandi.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:22:33",
            "last_seen_utc": "2026-07-13 16:52:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847945": [
        {
            "ioc_value": "x53ini6v.winnerbaz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:04:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847944": [
        {
            "ioc_value": "aonwiltw.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:02:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847943": [
        {
            "ioc_value": "huy9e25g.winnerbaz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:01:54",
            "last_seen_utc": "2026-07-10 09:02:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847942": [
        {
            "ioc_value": "ddsmolcn.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 09:00:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847940": [
        {
            "ioc_value": "kzdccycs.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:54:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847939": [
        {
            "ioc_value": "gjuqzxwz.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:49:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847938": [
        {
            "ioc_value": "tdfdekwf.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:46:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847937": [
        {
            "ioc_value": "base4openwald.dexispointnexus.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:45:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847936": [
        {
            "ioc_value": "abkp.site-shartbandi-khareji.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:22:44",
            "last_seen_utc": "2026-07-15 00:49:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847935": [
        {
            "ioc_value": "sxewurs5.radioshartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:02:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847934": [
        {
            "ioc_value": "hn8ah9qr.pdfteach.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 08:01:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847931": [
        {
            "ioc_value": "tjxoublo.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:52:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847930": [
        {
            "ioc_value": "http://techfonet.com/pw/Panel/five/fre.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-07-10 07:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Loki",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847929": [
        {
            "ioc_value": "vsdspmqv.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:33:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847919": [
        {
            "ioc_value": "fd.gstats-api-contact.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:30:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1847920": [
        {
            "ioc_value": "islandepstain.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:30:12",
            "last_seen_utc": "2026-07-13 11:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1847924": [
        {
            "ioc_value": "gamorarar.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:30:12",
            "last_seen_utc": "2026-07-13 11:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1847921": [
        {
            "ioc_value": "pkg.vogueatelier.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:30:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1847922": [
        {
            "ioc_value": "solid-manage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:30:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1847923": [
        {
            "ioc_value": "tikcettoread.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:30:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1847928": [
        {
            "ioc_value": "140.143.239.224:8050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 07:30:00",
            "last_seen_utc": "2026-08-12 20:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847927": [
        {
            "ioc_value": "kqbnjbmm.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:29:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847926": [
        {
            "ioc_value": "meba.sib90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:24:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847918": [
        {
            "ioc_value": "authorization-press-enter.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:05:50",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847913": [
        {
            "ioc_value": "m5wftmcs.vip1xbet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:02:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847912": [
        {
            "ioc_value": "ke2odk7l.vip1xbet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 07:01:04",
            "last_seen_utc": "2026-07-10 07:01:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847911": [
        {
            "ioc_value": "lquhgnrw.studypersia.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 06:36:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847910": [
        {
            "ioc_value": "fguhhncc.studypersia.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 06:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847908": [
        {
            "ioc_value": "yhlv.shartbandi.video",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 06:24:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847754": [
        {
            "ioc_value": "132.243.199.3:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847758": [
        {
            "ioc_value": "91.108.249.140:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847759": [
        {
            "ioc_value": "91.108.249.186:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847760": [
        {
            "ioc_value": "54.158.27.132:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 06:12:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Silver",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1847763": [
        {
            "ioc_value": "134.122.98.48:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:36",
            "last_seen_utc": "2026-07-13 08:24:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847766": [
        {
            "ioc_value": "138.68.138.44:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:35",
            "last_seen_utc": "2026-07-13 08:24:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847764": [
        {
            "ioc_value": "165.232.71.140:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:34",
            "last_seen_utc": "2026-07-13 08:24:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847765": [
        {
            "ioc_value": "206.189.119.212:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:33",
            "last_seen_utc": "2026-07-13 08:24:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847767": [
        {
            "ioc_value": "138.68.93.46:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:33",
            "last_seen_utc": "2026-07-13 08:24:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847768": [
        {
            "ioc_value": "167.99.143.174:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:32",
            "last_seen_utc": "2026-07-13 08:24:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847770": [
        {
            "ioc_value": "164.92.179.21:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:32",
            "last_seen_utc": "2026-07-13 08:24:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847769": [
        {
            "ioc_value": "64.227.117.72:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:31",
            "last_seen_utc": "2026-07-13 08:24:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847771": [
        {
            "ioc_value": "159.65.61.151:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:30",
            "last_seen_utc": "2026-07-13 08:24:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847772": [
        {
            "ioc_value": "139.59.161.246:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:29",
            "last_seen_utc": "2026-07-13 08:24:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847850": [
        {
            "ioc_value": "91.108.249.140:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847881": [
        {
            "ioc_value": "3ff6b2e928215ef498bd4c0e6157692ca352202a68f4aa01f48bace5b059a5d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 06:12:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "tags": "AutoIt,ClearFake,ClickFix,infostealer,WEXTRACT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847882": [
        {
            "ioc_value": "7c8fc17802ae0c7ffed37f708b50f9184cd2f3c35c52130104eaf32a3e2dc1ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-10 06:12:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "tags": "AutoIt,ClearFake,ClickFix,infostealer,WEXTRACT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847895": [
        {
            "ioc_value": "138.68.93.46:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-10 06:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847905": [
        {
            "ioc_value": "119.45.160.160:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 06:05:05",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847903": [
        {
            "ioc_value": "zbmcuemc.sporttraining.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 05:41:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847902": [
        {
            "ioc_value": "uummkhfb.sporttraining.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 05:40:11",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847900": [
        {
            "ioc_value": "https://cft.omni-signage.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 05:27:09",
            "last_seen_utc": "2026-07-10 08:27:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847901": [
        {
            "ioc_value": "cft.omni-signage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 05:27:09",
            "last_seen_utc": "2026-07-10 08:27:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847898": [
        {
            "ioc_value": "https://cft.kencangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 05:26:57",
            "last_seen_utc": "2026-07-10 08:26:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847899": [
        {
            "ioc_value": "cft.kencangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-10 05:26:57",
            "last_seen_utc": "2026-07-10 08:26:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847897": [
        {
            "ioc_value": "jvdf.serial.video",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 05:25:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847892": [
        {
            "ioc_value": "gfhtxq18.varzeshnow.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 05:02:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847891": [
        {
            "ioc_value": "wzccvtvl.varzeshnow.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 05:00:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847889": [
        {
            "ioc_value": "iaqzkapq.marketsport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 04:50:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847888": [
        {
            "ioc_value": "bsfadhle.marketsport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 04:44:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847886": [
        {
            "ioc_value": "xriz.safabet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 04:20:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847880": [
        {
            "ioc_value": "cmdzspvk.btyek.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847879": [
        {
            "ioc_value": "anubixfreedom001.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 03:50:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3563a0dd216236d5f6f8bc871afe1f98f5bff78afe2d95f80276906dcdf278e2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847878": [
        {
            "ioc_value": "38.54.61.225:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 03:46:14",
            "last_seen_utc": "2026-08-10 08:47:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847877": [
        {
            "ioc_value": "101.34.235.198:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 03:45:49",
            "last_seen_utc": "2026-08-09 08:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847876": [
        {
            "ioc_value": "102.220.160.125:56793",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 03:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847875": [
        {
            "ioc_value": "chyoxppm.bet1xindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:34:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847874": [
        {
            "ioc_value": "josu.rubixbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:21:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847873": [
        {
            "ioc_value": "tccn.rubixbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:19:48",
            "last_seen_utc": "2026-07-10 03:20:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847872": [
        {
            "ioc_value": "http://158.178.230.77:7443/3Jms",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 03:15:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c35055499d7bf39198746a21bac07fb902e6307818898d6f961f3fdddaff5bde/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847871": [
        {
            "ioc_value": "http://18.163.217.102/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-10 03:10:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847870": [
        {
            "ioc_value": "16.16.126.52:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-10 03:10:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847869": [
        {
            "ioc_value": "137.220.156.66:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-10 03:10:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847868": [
        {
            "ioc_value": "158.178.230.77:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 03:10:21",
            "last_seen_utc": "2026-08-28 14:48:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847867": [
        {
            "ioc_value": "109.122.18.70:7045",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-07-10 03:10:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Vjw0rm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847866": [
        {
            "ioc_value": "172.111.163.176:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 03:10:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847865": [
        {
            "ioc_value": "172.111.225.72:56090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 03:10:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847864": [
        {
            "ioc_value": "198.135.51.238:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-10 03:10:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847863": [
        {
            "ioc_value": "147.93.4.228:5552",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-10 03:10:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847862": [
        {
            "ioc_value": "http://wagosinga.ydns.eu:7045/is-ready",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.houdini",
            "malware_alias": "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi",
            "malware_printable": "Houdini",
            "first_seen_utc": "2026-07-10 03:10:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847858": [
        {
            "ioc_value": "78sdc3hp.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:03:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847857": [
        {
            "ioc_value": "yr69u41b.pdfcoach.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:00:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847856": [
        {
            "ioc_value": "kde67fcv.sportphoto.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:00:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847854": [
        {
            "ioc_value": "wzkxsv5k.varzeshlife.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 03:00:14",
            "last_seen_utc": "2026-07-21 04:32:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847852": [
        {
            "ioc_value": "nunszxef.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:41:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847851": [
        {
            "ioc_value": "ftlvugqf.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:39:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847849": [
        {
            "ioc_value": "vpookndh.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:31:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847848": [
        {
            "ioc_value": "2emkqggv.pdfclass.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:30:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847846": [
        {
            "ioc_value": "fxsr.akhbarirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:20:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847845": [
        {
            "ioc_value": "jzhh.akhbarirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:19:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847844": [
        {
            "ioc_value": "klak.1xsaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 02:10:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847839": [
        {
            "ioc_value": "unitkaltwind.dexispointnexus.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:45:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847838": [
        {
            "ioc_value": "fjndvnei.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:37:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847837": [
        {
            "ioc_value": "xmklveaf.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847836": [
        {
            "ioc_value": "9edpkf5o.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:29:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847835": [
        {
            "ioc_value": "j5oz3iqp.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:29:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847834": [
        {
            "ioc_value": "y3ol49ip.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:19:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847833": [
        {
            "ioc_value": "atlf.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847832": [
        {
            "ioc_value": "fud0tirx.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:11:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847831": [
        {
            "ioc_value": "zrnj.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 01:09:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847828": [
        {
            "ioc_value": "rrsr.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 00:59:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847827": [
        {
            "ioc_value": "klbj.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 00:49:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847826": [
        {
            "ioc_value": "aeheayou.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 00:42:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847825": [
        {
            "ioc_value": "http://62.234.54.51:443/ga.js",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 00:35:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41bfb4bb51823fd994d0f34504be227ea6367c9506bb99ca0f1bef6968fd7fba/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847824": [
        {
            "ioc_value": "http://62.234.54.51:443/DCqe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-10 00:35:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/41bfb4bb51823fd994d0f34504be227ea6367c9506bb99ca0f1bef6968fd7fba/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847823": [
        {
            "ioc_value": "mubzqaxs.sportfun.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-10 00:21:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847821": [
        {
            "ioc_value": "195.114.193.201:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-10 00:05:06",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847819": [
        {
            "ioc_value": "lgwe.catsandcarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:54:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847818": [
        {
            "ioc_value": "78.17.212.136:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-09 23:46:10",
            "last_seen_utc": "2026-08-10 08:47:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847817": [
        {
            "ioc_value": "59.110.23.216:8181",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-09 23:46:08",
            "last_seen_utc": "2026-08-11 18:47:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847816": [
        {
            "ioc_value": "jipykgyi.pishbini90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:45:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847815": [
        {
            "ioc_value": "xnkjsqgz.pishbini90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847814": [
        {
            "ioc_value": "ajyg.betzopoda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:39:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847813": [
        {
            "ioc_value": "yvsy.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:37:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847812": [
        {
            "ioc_value": "vukvhota.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:20:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847811": [
        {
            "ioc_value": "npdqxvsz.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:20:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847810": [
        {
            "ioc_value": "mdf6yt40.river90.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:14:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847809": [
        {
            "ioc_value": "ybuvyfhz.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:13:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847808": [
        {
            "ioc_value": "blry.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847807": [
        {
            "ioc_value": "ykiprhlu.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:11:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847805": [
        {
            "ioc_value": "csoafppc.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:11:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847802": [
        {
            "ioc_value": "xfstunjg.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:04:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847801": [
        {
            "ioc_value": "wcmqweka.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 23:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847800": [
        {
            "ioc_value": "pdfg.ozabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:58:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847799": [
        {
            "ioc_value": "pqqqcbso.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:58:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847798": [
        {
            "ioc_value": "egjyjugz.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:56:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847797": [
        {
            "ioc_value": "dopz07hy.rewardbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847796": [
        {
            "ioc_value": "udocahjq.persianeducation.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:53:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847795": [
        {
            "ioc_value": "aodz.oza.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:51:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847794": [
        {
            "ioc_value": "iehcbcgc.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:49:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847793": [
        {
            "ioc_value": "fzjukjic.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:49:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847792": [
        {
            "ioc_value": "tcot.one1winbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:44:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847791": [
        {
            "ioc_value": "fibxbqsm.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:42:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847790": [
        {
            "ioc_value": "nyakvcev.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:41:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847789": [
        {
            "ioc_value": "wpbjs814.radmanwear.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:41:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847788": [
        {
            "ioc_value": "mnoo.betawarz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 22:39:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847785": [
        {
            "ioc_value": "yyyvzlgy.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 21:48:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847784": [
        {
            "ioc_value": "vblr.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 21:37:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847783": [
        {
            "ioc_value": "ggittwjb.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 21:31:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847782": [
        {
            "ioc_value": "nkzajnx4.pablobet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 21:30:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847780": [
        {
            "ioc_value": "4x9zxbge.ritzo1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 21:14:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847762": [
        {
            "ioc_value": "auai.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 20:36:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847761": [
        {
            "ioc_value": "knyjwxkg.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 20:34:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847756": [
        {
            "ioc_value": "https://littleforlot.com/nfront.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-07-09 19:59:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/595e3d46169a51dcf93d15690d34508726729c6f6cdfec88b5e366070934537d/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847755": [
        {
            "ioc_value": "littleforlot.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-07-09 19:58:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/595e3d46169a51dcf93d15690d34508726729c6f6cdfec88b5e366070934537d/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847753": [
        {
            "ioc_value": "37.72.172.58:4212",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 19:45:23",
            "last_seen_utc": "2026-09-01 02:45:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847752": [
        {
            "ioc_value": "216.9.225.38:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 19:45:12",
            "last_seen_utc": "2026-08-14 18:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847751": [
        {
            "ioc_value": "213.209.159.91:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 19:44:37",
            "last_seen_utc": "2026-09-01 02:44:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847750": [
        {
            "ioc_value": "212.46.38.117:4445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-09 19:44:36",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847749": [
        {
            "ioc_value": "185.244.149.240:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-07-09 19:44:12",
            "last_seen_utc": "2026-08-09 08:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847748": [
        {
            "ioc_value": "179.43.149.251:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 19:43:58",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847747": [
        {
            "ioc_value": "156.244.11.247:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-09 19:43:41",
            "last_seen_utc": "2026-08-26 18:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847746": [
        {
            "ioc_value": "155.103.71.115:13507",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 19:43:40",
            "last_seen_utc": "2026-08-10 18:43:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847745": [
        {
            "ioc_value": "13.70.174.70:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 19:43:24",
            "last_seen_utc": "2026-08-09 08:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847744": [
        {
            "ioc_value": "122.114.12.155:17891",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-09 19:43:22",
            "last_seen_utc": "2026-08-30 08:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847743": [
        {
            "ioc_value": "115.42.60.122:7912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 19:43:21",
            "last_seen_utc": "2026-09-01 02:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847742": [
        {
            "ioc_value": "oksz.ozabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 19:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847740": [
        {
            "ioc_value": "sfzfzyeb.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 19:32:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847739": [
        {
            "ioc_value": "gifqd3gd.mahbet.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 19:22:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847737": [
        {
            "ioc_value": "odng6v0p.rewardbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 19:11:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847735": [
        {
            "ioc_value": "twit-follow.vg",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.count_loader",
            "malware_alias": null,
            "malware_printable": "CountLoader",
            "first_seen_utc": "2026-07-09 19:09:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7324e58b1ad0cc4fe55d0b3d5a05ea9f470e599709f9566d712419c18ffb309b/",
            "tags": "CountLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847734": [
        {
            "ioc_value": "push.telemetryportal.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-09 19:07:30",
            "last_seen_utc": "2026-07-09 19:07:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8466a8c4ff7403d7f65061197e1b71c37906ca94f324565cb4224d1ef5c78142/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847733": [
        {
            "ioc_value": "stream.luminfrastructure.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-09 19:06:47",
            "last_seen_utc": "2026-07-09 19:06:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c3c9b8decfee2a1d19e59bb127e935e6a57fbb30869bf6c24f39936f1522492/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847732": [
        {
            "ioc_value": "cochru.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-09 19:05:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab9f94297521abeb581de3358345eca3ccb32b944ce9fca9445a60af93f7b1da/",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847729": [
        {
            "ioc_value": "kffd3.vogueatelier.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-09 19:03:01",
            "last_seen_utc": "2026-07-13 11:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4603d1b3ece918536b331545efb568cc32b3c66692318c86297f0d72e299a205/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847728": [
        {
            "ioc_value": "kkc.vogueatelier.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-09 18:48:54",
            "last_seen_utc": "2026-07-13 11:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba52a19f0d5122e39768a35c97a786d7e65360afc1d2422277231cf7d5ba792c/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847727": [
        {
            "ioc_value": "static.stacksupport.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-09 18:48:11",
            "last_seen_utc": "2026-07-09 18:48:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba52a19f0d5122e39768a35c97a786d7e65360afc1d2422277231cf7d5ba792c/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847726": [
        {
            "ioc_value": "31.56.209.62:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-09 18:45:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/37d820586008e23767774a05f15c698bd09c42cd3b11da36ec672cc278023fd5/",
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847725": [
        {
            "ioc_value": "ppdp.oza.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 18:35:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847724": [
        {
            "ioc_value": "khlko.gorgbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 18:35:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847720": [
        {
            "ioc_value": "237cefba9f8c884c927609b00aa0b4e6c98330b0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 18:23:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847721": [
        {
            "ioc_value": "4a909313c462ab3bddc6c522b20cc49c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 18:23:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847716": [
        {
            "ioc_value": "02c6d4de3aa8feee3ac76efc66d092ad115b95eb93d1b025c547df241f218adb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-09 18:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847717": [
        {
            "ioc_value": "2d1bb5186dd6a4f61cb160b1b62adc050dea8e36",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-09 18:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847718": [
        {
            "ioc_value": "3326190e2f46a296874ac230d1c83f35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-09 18:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847719": [
        {
            "ioc_value": "9c6be60162b611918d074da4f14322909bc031c74e66201219c23370423fcf91",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 18:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847712": [
        {
            "ioc_value": "1ee5e73581b14ae8ea6518a23dbcbaa9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847713": [
        {
            "ioc_value": "7f64d735d36b1edd27b092687be4851c5d2a7ec69f377ed7286acc3a429994b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-09 18:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847714": [
        {
            "ioc_value": "175069df57d6e45420072b44a1b0df1984f42cc4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-09 18:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847715": [
        {
            "ioc_value": "ccff072ed5aa19a1eed7f6a769ed2c5d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-09 18:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847708": [
        {
            "ioc_value": "0bf7c92460da65ec5040d4c84171fc55dca0bd06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-09 18:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847709": [
        {
            "ioc_value": "37732f094ee78c5a820f225aa70f44b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-09 18:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847710": [
        {
            "ioc_value": "e297d36196e4cbfaa728c40a3e9025da0661095287df0dc849505d5b49397204",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847711": [
        {
            "ioc_value": "ff1f5aaf6a36aeed47e20c7bdd004323b8ac8a34",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847704": [
        {
            "ioc_value": "e005f4371595d366f009d37294af1a6f894fbcad4487f92a50124237523f4ec1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847705": [
        {
            "ioc_value": "ebdbfb0cd5aff1a15c70070bf57854e4f480c2ef",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847706": [
        {
            "ioc_value": "a5e54656b4967f3399969170ee6263cd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847707": [
        {
            "ioc_value": "d3d8e0363520cf5dd010122ffdf1ffe4d73f461029caa992d381dae096f16db2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-09 18:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847701": [
        {
            "ioc_value": "9c5edc9006283a724d619d2f230767343c8c22de736ab05af57fcc8226b69db5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-09 18:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847702": [
        {
            "ioc_value": "6dee21947d106b7501d00bafcb3beffaa5391b2f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-09 18:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847703": [
        {
            "ioc_value": "ee611ed8ba479a08b18f25e7c81fabbf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-09 18:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847697": [
        {
            "ioc_value": "0e6987e3a5a53fa34808a4273f6e7230",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847698": [
        {
            "ioc_value": "a74e6207d1525ea4d505fc7fb9546828e51a2d15cabc412ec8f949fec93fee23",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847699": [
        {
            "ioc_value": "1b3823b352f1e6a85814bf227250c0b474629f43",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847700": [
        {
            "ioc_value": "00e540646ecc1b7e2ae7b65b2ba61338",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-09 18:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847694": [
        {
            "ioc_value": "9383dfc389707b42cb1792cd8b4828db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847695": [
        {
            "ioc_value": "f1c14a7fb9a6ddc65bf2df2e5230a4e22bb1d7e9636c4bca50b545c03a368dc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847696": [
        {
            "ioc_value": "03dbcd102ca38f818348d61d45361dc3f4aaff71",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847691": [
        {
            "ioc_value": "12d8f743f9abbf1cb92c342a86687dcb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847692": [
        {
            "ioc_value": "d575962d0a17de040a7fd985b94daffb7cc8edfd82bcc374c39cf023a5feadb2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847693": [
        {
            "ioc_value": "4eec62fe481dd7e2f46101da4afa087aa7dfbc9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847687": [
        {
            "ioc_value": "d9e742ecd5b29c3a5ad0ccf6a88aa35a1be31d83",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847688": [
        {
            "ioc_value": "26f9fceff4ac3f791648b7fc49bdf382",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847689": [
        {
            "ioc_value": "37f5c4fbdcd45051a8b098b18a8dfc53f8e01922851f7e673542e27fa5154cb5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847690": [
        {
            "ioc_value": "baa65a7521502e38f3614e1e7db2bad17c6b6357",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847684": [
        {
            "ioc_value": "d008c6360ec96d0116c5b90434e219766b5688bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847685": [
        {
            "ioc_value": "19ea61c208ddf0170ba98ecf2c5cf012",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847686": [
        {
            "ioc_value": "de9123300942f93ba72d2d0f32f99eb032ce4a4f3fb262831517f75561dc2983",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847682": [
        {
            "ioc_value": "1bc4fce0bfa6e83285e3a52582f5b77f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847683": [
        {
            "ioc_value": "b2c06a9ab9fac39d31229d4aa70aded718ef629858158baf0d3d9f48431ceacc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847678": [
        {
            "ioc_value": "5cccb08a36c1ae55b6b7a6e5c6f47297439e41f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847679": [
        {
            "ioc_value": "29e726a3332a4f1dc32e5a7c9f96423f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847680": [
        {
            "ioc_value": "3d62b2f3e5c8aabe7ff07838576a378f7ee5dc37d7eade33d64c5fdd43342729",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847681": [
        {
            "ioc_value": "8409f28fec57d8bda8c2b00b4a4facd324eeff85",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847674": [
        {
            "ioc_value": "5e54d3e82a7afd6b1bcecec1f0061ccad66a92e7c0b0cd55eb2e436430d3a2fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847675": [
        {
            "ioc_value": "2c3158d7173fbd1b1748e03a86475a2303e1f2d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847676": [
        {
            "ioc_value": "e5604a5b1fa1d859e7b21db07cf0aa0f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847677": [
        {
            "ioc_value": "5a32a7e96ff150b0a10bff34ae6b04e215562ae815212390385d99b103178548",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847670": [
        {
            "ioc_value": "7f59606db92157241b6eb0dd47f95f60",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-09 18:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847671": [
        {
            "ioc_value": "f1a654b02d6b9f2b20396a832ab96d8a98b19c7a657c9253e513d53e78234a38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847672": [
        {
            "ioc_value": "439876440a57d6b79d7bf1f1246f83f20424251e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847673": [
        {
            "ioc_value": "4baf0403803e0f305542899f5ab18b47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 18:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847667": [
        {
            "ioc_value": "c2129f59f43570484456038599bcf74b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-09 18:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847668": [
        {
            "ioc_value": "4d1b345bfd91ece59dd400a5aaba9f405e474e7f3bda23fd8086c9dbf2ec8880",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-09 18:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847669": [
        {
            "ioc_value": "87937f163c77613f1df21e150f69f85dc24b776c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-09 18:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847664": [
        {
            "ioc_value": "cd9bbcba0733e834a50214132f6338f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-09 18:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847665": [
        {
            "ioc_value": "89f1f236a5fbc95e3540626caf9cdfe525bcd85789c4ac95c8b99e1781015a8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-09 18:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847666": [
        {
            "ioc_value": "d3c429775900e927c44c81f52fd080ebede3abb6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-09 18:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847662": [
        {
            "ioc_value": "1f31686990b1715d79718451c1865512566cb6a0bcc65f9d421fc1567e5cf6e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-09 18:23:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847663": [
        {
            "ioc_value": "899054a1848bcd07e3afffe148e9adfd9dd817c5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-09 18:23:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1847661": [
        {
            "ioc_value": "kesyothd.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 18:20:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847659": [
        {
            "ioc_value": "194.238.25.148:5747",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-09 18:10:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab9f94297521abeb581de3358345eca3ccb32b944ce9fca9445a60af93f7b1da/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847660": [
        {
            "ioc_value": "http://dikdiy.xyz:6504",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-09 18:10:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab9f94297521abeb581de3358345eca3ccb32b944ce9fca9445a60af93f7b1da/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847658": [
        {
            "ioc_value": "http://cochru.xyz:5747",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-09 18:10:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab9f94297521abeb581de3358345eca3ccb32b944ce9fca9445a60af93f7b1da/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847651": [
        {
            "ioc_value": "noirmond9site.dexispointnexus.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 17:35:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847650": [
        {
            "ioc_value": "vbhm.one1winbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 17:35:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847648": [
        {
            "ioc_value": "caewscad.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 17:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847647": [
        {
            "ioc_value": "p8rzf42g.radmanwear.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 17:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847634": [
        {
            "ioc_value": "undh.ofoghchat.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 16:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847632": [
        {
            "ioc_value": "xaktywhe.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 16:19:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847631": [
        {
            "ioc_value": "bxodsojs.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 16:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847630": [
        {
            "ioc_value": "31.76.251.246:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 16:08:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1e7b899a75f867dd679e02b5da421202d45778baeda5a91af323a20699dda603/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847629": [
        {
            "ioc_value": "qowmn9c8.iranvibes.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 16:04:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847627": [
        {
            "ioc_value": "178.16.54.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-09 15:51:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/02c6d4de3aa8feee3ac76efc66d092ad115b95eb93d1b025c547df241f218adb/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847626": [
        {
            "ioc_value": "jgtl.novin-gps.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:38:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847609": [
        {
            "ioc_value": "weallth.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:39",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847606": [
        {
            "ioc_value": "vyponeindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:38",
            "last_seen_utc": "2026-08-28 11:44:49",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847585": [
        {
            "ioc_value": "traveltooth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:37",
            "last_seen_utc": "2026-08-23 17:27:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847569": [
        {
            "ioc_value": "tetridevifoundation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:36",
            "last_seen_utc": "2026-08-19 06:47:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847578": [
        {
            "ioc_value": "tjejardinagem.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:36",
            "last_seen_utc": "2026-08-14 08:58:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847557": [
        {
            "ioc_value": "suresolar.ng",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:35",
            "last_seen_utc": "2026-08-16 13:14:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847559": [
        {
            "ioc_value": "swatishingare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:35",
            "last_seen_utc": "2026-08-16 12:49:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847563": [
        {
            "ioc_value": "taxinairobiairports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:35",
            "last_seen_utc": "2026-08-14 08:58:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847505": [
        {
            "ioc_value": "rfkennedy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:32",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847506": [
        {
            "ioc_value": "riddenbynature.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:32",
            "last_seen_utc": "2026-08-25 16:44:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847510": [
        {
            "ioc_value": "rodchang.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:32",
            "last_seen_utc": "2026-08-19 06:47:46",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847519": [
        {
            "ioc_value": "saedel.cm",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:32",
            "last_seen_utc": "2026-08-28 11:43:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847500": [
        {
            "ioc_value": "rejuvolife.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:31",
            "last_seen_utc": "2026-08-14 08:58:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847483": [
        {
            "ioc_value": "prolithiumbattery.no",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:30",
            "last_seen_utc": "2026-08-16 11:59:48",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847466": [
        {
            "ioc_value": "patrimonio.ceipsantaanacuenca.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:29",
            "last_seen_utc": "2026-08-14 08:58:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847448": [
        {
            "ioc_value": "nothing-new.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:28",
            "last_seen_utc": "2026-08-28 11:43:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847418": [
        {
            "ioc_value": "mercedariospanama.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:26",
            "last_seen_utc": "2026-08-28 11:43:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847412": [
        {
            "ioc_value": "marajoa.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:25",
            "last_seen_utc": "2026-08-18 22:09:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847413": [
        {
            "ioc_value": "markethon-agirabcd.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:25",
            "last_seen_utc": "2026-08-19 06:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847388": [
        {
            "ioc_value": "lasertooling.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:24",
            "last_seen_utc": "2026-08-26 21:54:39",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847395": [
        {
            "ioc_value": "lembagakursusrinny.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:24",
            "last_seen_utc": "2026-08-14 08:57:36",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847370": [
        {
            "ioc_value": "kirschwellness.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:23",
            "last_seen_utc": "2026-08-24 00:37:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847379": [
        {
            "ioc_value": "kushvillagecolorado.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:23",
            "last_seen_utc": "2026-08-26 21:54:40",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847340": [
        {
            "ioc_value": "indeeyah.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:21",
            "last_seen_utc": "2026-08-14 08:57:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847341": [
        {
            "ioc_value": "inno-change.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:21",
            "last_seen_utc": "2026-08-14 08:57:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847346": [
        {
            "ioc_value": "iqglobalsolutions.co.ke",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:21",
            "last_seen_utc": "2026-08-28 11:42:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847312": [
        {
            "ioc_value": "grupokoal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:19",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847275": [
        {
            "ioc_value": "excelxam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:17",
            "last_seen_utc": "2026-08-23 17:27:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847286": [
        {
            "ioc_value": "fleetrs.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:17",
            "last_seen_utc": "2026-08-14 08:57:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847264": [
        {
            "ioc_value": "elnathglobalaccess.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:16",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847249": [
        {
            "ioc_value": "divisible.solutions",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:15",
            "last_seen_utc": "2026-08-14 08:56:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847245": [
        {
            "ioc_value": "dermatologyinfo.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:14",
            "last_seen_utc": "2026-08-16 03:08:24",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847226": [
        {
            "ioc_value": "combutech.de",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:13",
            "last_seen_utc": "2026-08-26 17:47:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847228": [
        {
            "ioc_value": "competicionesfes.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:13",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847229": [
        {
            "ioc_value": "compocel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:13",
            "last_seen_utc": "2026-08-16 02:05:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847204": [
        {
            "ioc_value": "brich.co.th",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:12",
            "last_seen_utc": "2026-08-16 14:45:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847217": [
        {
            "ioc_value": "cgequipmentleasing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:12",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847190": [
        {
            "ioc_value": "bimworkshop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:11",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847194": [
        {
            "ioc_value": "blog.eticketing.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:11",
            "last_seen_utc": "2026-08-16 01:15:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847201": [
        {
            "ioc_value": "brazilwatercare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:11",
            "last_seen_utc": "2026-08-23 17:25:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847170": [
        {
            "ioc_value": "arthuratelier.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:10",
            "last_seen_utc": "2026-08-16 01:05:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847149": [
        {
            "ioc_value": "affordablelasercare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:08",
            "last_seen_utc": "2026-08-14 08:56:26",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847150": [
        {
            "ioc_value": "agrisomtrading.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:08",
            "last_seen_utc": "2026-08-14 22:40:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847151": [
        {
            "ioc_value": "aimedicalsupply.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 15:33:08",
            "last_seen_utc": "2026-08-14 06:20:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1847145": [
        {
            "ioc_value": "iqtpiyvx.rabonabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:24:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847144": [
        {
            "ioc_value": "ooycseqc.rabonabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:24:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847136": [
        {
            "ioc_value": "5rtckgb9.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:10:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847135": [
        {
            "ioc_value": "0ri1ior3.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:09:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847134": [
        {
            "ioc_value": "yxjzgcji.proje-negar.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:09:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847129": [
        {
            "ioc_value": "45.139.226.211:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 15:04:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2588fa78c47079efc8d83e9c5444827574c4f3b64d889455472f10c6ebde53b6/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847128": [
        {
            "ioc_value": "vkuauuum.proje-negar.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847125": [
        {
            "ioc_value": "b14xsab8.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 15:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847100": [
        {
            "ioc_value": "78.153.136.8:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 15:01:33",
            "last_seen_utc": "2026-07-09 14:13:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847101": [
        {
            "ioc_value": "165.232.169.49:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 15:01:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847112": [
        {
            "ioc_value": "159.65.133.214:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 15:01:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847115": [
        {
            "ioc_value": "https://hugocpa.net/1ed3c2fc-f870-5522-a6bd-71c0a4d78ddd",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "c2,clickfix,finger,lolbin",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847116": [
        {
            "ioc_value": "hugocpa.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "c2,clickfix,finger,lolbin",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847117": [
        {
            "ioc_value": "finger.claudettes.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "c2,clickfix,finger,lolbin",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847118": [
        {
            "ioc_value": "skipraid.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "clickfix,finger,ironpython,lolbin",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847119": [
        {
            "ioc_value": "claudettes.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "clickfix,finger,ironpython,lolbin",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847120": [
        {
            "ioc_value": "https://skipraid.com/dsVGmQTrzX/default3",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "clickfix,finger,ironpython,lolbin",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847121": [
        {
            "ioc_value": "eaf3838a6cf4e0e4310c2cc680197461cf072bff9dac2db2f76e1522a9f368f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "chacha20,clickfix,loader,python-rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847122": [
        {
            "ioc_value": "ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ccf042b5438e2e6168d70dca826aa65a4847fea1cfd062db5b238d7de167f8c3",
            "tags": "chacha20,clickfix,loader,python-rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847124": [
        {
            "ioc_value": "http://authorization-cdn-press-enter.info/api.php",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 15:01:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/authorization-cdn-press-enter.info",
            "tags": "ClearFake,ClickFix,compromised-wordpress,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1847123": [
        {
            "ioc_value": "rlio.catsandcarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 14:36:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847114": [
        {
            "ioc_value": "3b213f9c.lionsport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 14:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847109": [
        {
            "ioc_value": "mejpiuio.pokerprado.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 14:08:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847105": [
        {
            "ioc_value": "157.20.182.18:4442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 14:05:07",
            "last_seen_utc": "2026-08-16 18:43:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847102": [
        {
            "ioc_value": "147.124.222.192:4445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-09 13:53:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b60bf8c65bfee063e53cb392d5c8c62e63a5bd08cc4ea9494d35cafec918e372/",
            "tags": "QuimaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847098": [
        {
            "ioc_value": "89.19.223.170:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 13:42:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847099": [
        {
            "ioc_value": "todahkuy.podcastshop.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 13:42:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847097": [
        {
            "ioc_value": "ntlskcah.podcastshop.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 13:40:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847089": [
        {
            "ioc_value": "152.42.214.91:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 13:38:36",
            "last_seen_utc": "2026-07-10 12:20:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847092": [
        {
            "ioc_value": "159.65.133.214:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 13:38:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847094": [
        {
            "ioc_value": "red64.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 13:35:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4003ca6885cba04a837e4cd8954289aa19a8c9b857889c422bdc9ccaf66e0533/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847095": [
        {
            "ioc_value": "red64bk.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 13:35:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4003ca6885cba04a837e4cd8954289aa19a8c9b857889c422bdc9ccaf66e0533/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847093": [
        {
            "ioc_value": "hpwj.betawarz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 13:22:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847091": [
        {
            "ioc_value": "hzcsq855.taaghcheirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 13:02:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847088": [
        {
            "ioc_value": "lttazjwo.pishbini90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 12:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847087": [
        {
            "ioc_value": "geazhjch.pishbini90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 12:45:00",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847083": [
        {
            "ioc_value": "152.42.214.91:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 12:44:31",
            "last_seen_utc": "2026-07-10 13:14:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847085": [
        {
            "ioc_value": "165.232.169.49:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 12:44:30",
            "last_seen_utc": "2026-07-13 18:20:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847086": [
        {
            "ioc_value": "159.65.133.214:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 12:44:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847084": [
        {
            "ioc_value": "xczy.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 12:20:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847071": [
        {
            "ioc_value": "165.232.169.49:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 12:10:47",
            "last_seen_utc": "2026-07-14 11:37:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847072": [
        {
            "ioc_value": "89.19.220.48:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 12:10:45",
            "last_seen_utc": "2026-07-09 20:07:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847073": [
        {
            "ioc_value": "89.19.223.170:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 12:10:45",
            "last_seen_utc": "2026-07-09 19:19:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847070": [
        {
            "ioc_value": "vsdipcxs.persianeducation.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 11:50:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847069": [
        {
            "ioc_value": "pbgskytq.persianeducation.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 11:49:29",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847067": [
        {
            "ioc_value": "159.65.133.214:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:47:53",
            "last_seen_utc": "2026-07-09 14:33:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847068": [
        {
            "ioc_value": "203.91.75.89:5006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-09 11:47:21",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847066": [
        {
            "ioc_value": "eludftjk.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 11:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847065": [
        {
            "ioc_value": "165.232.169.49:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:38:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847063": [
        {
            "ioc_value": "188.166.211.172:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:32:56",
            "last_seen_utc": "2026-07-09 19:18:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847064": [
        {
            "ioc_value": "78.153.136.8:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:32:56",
            "last_seen_utc": "2026-07-09 20:03:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847057": [
        {
            "ioc_value": "139.59.224.173:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:54",
            "last_seen_utc": "2026-07-09 19:17:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847058": [
        {
            "ioc_value": "165.232.169.49:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:53",
            "last_seen_utc": "2026-07-16 18:18:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847059": [
        {
            "ioc_value": "89.19.220.48:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:53",
            "last_seen_utc": "2026-07-09 14:15:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847060": [
        {
            "ioc_value": "89.19.223.170:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:52",
            "last_seen_utc": "2026-07-09 19:53:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847061": [
        {
            "ioc_value": "157.245.203.193:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:51",
            "last_seen_utc": "2026-07-09 19:18:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847062": [
        {
            "ioc_value": "143.198.92.52:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:50",
            "last_seen_utc": "2026-07-09 19:18:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847050": [
        {
            "ioc_value": "143.198.223.45:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:05",
            "last_seen_utc": "2026-07-09 19:17:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847051": [
        {
            "ioc_value": "209.97.161.185:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:04",
            "last_seen_utc": "2026-07-09 19:18:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847052": [
        {
            "ioc_value": "178.128.52.254:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:02",
            "last_seen_utc": "2026-07-09 19:17:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847053": [
        {
            "ioc_value": "139.59.119.237:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:01",
            "last_seen_utc": "2026-07-09 19:19:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847054": [
        {
            "ioc_value": "167.99.72.99:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:28:01",
            "last_seen_utc": "2026-07-09 19:16:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847055": [
        {
            "ioc_value": "146.190.103.223:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:27:58",
            "last_seen_utc": "2026-07-09 19:17:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847056": [
        {
            "ioc_value": "132.243.199.3:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 11:27:57",
            "last_seen_utc": "2026-07-09 19:18:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1847049": [
        {
            "ioc_value": "bmmp.ace90betyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 11:20:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847048": [
        {
            "ioc_value": "abrmot.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 11:09:37",
            "last_seen_utc": "2026-07-09 16:38:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847043": [
        {
            "ioc_value": "xfcv55u8.iraniporn.video",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 11:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847018": [
        {
            "ioc_value": "https://shadowcape.online/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 11:03:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1847019": [
        {
            "ioc_value": "https://shadowcape.online/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 11:03:32",
            "last_seen_utc": "2026-07-09 10:21:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1847020": [
        {
            "ioc_value": "https://shadowcape.online/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-09 11:03:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1847037": [
        {
            "ioc_value": "huishuvish.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 11:03:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847036": [
        {
            "ioc_value": "pluhabovra.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 11:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847035": [
        {
            "ioc_value": "176.9.54.156:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 11:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847033": [
        {
            "ioc_value": "kuqetgql.shartebartar.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 11:03:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847027": [
        {
            "ioc_value": "hilacbatoriaaa.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 10:56:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847026": [
        {
            "ioc_value": "wfwwdsvv.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 10:53:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847025": [
        {
            "ioc_value": "lptgdpfh.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 10:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847024": [
        {
            "ioc_value": "104.164.46.36:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 10:46:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3758bbe67d3bb290e49a4317881084eb64e1e4228af281382059d4ad0e5c11c1/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847023": [
        {
            "ioc_value": "104.164.46.36:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 10:46:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3758bbe67d3bb290e49a4317881084eb64e1e4228af281382059d4ad0e5c11c1/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847022": [
        {
            "ioc_value": "103.67.196.151:57978",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 10:46:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/88ca388566f9466c996dd725340153e41f4f864550c958569b01063a4d434212/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847021": [
        {
            "ioc_value": "gloxntzt.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 10:42:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847017": [
        {
            "ioc_value": "pcue.elitesport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 10:21:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847009": [
        {
            "ioc_value": "wvew.elitesport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:56:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847008": [
        {
            "ioc_value": "oulkepos.nikansefile.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:48:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1847007": [
        {
            "ioc_value": "91.92.242.180:1880",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:46:37",
            "last_seen_utc": "2026-08-14 08:47:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847006": [
        {
            "ioc_value": "91.219.238.167:6745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 09:46:36",
            "last_seen_utc": "2026-08-08 18:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847005": [
        {
            "ioc_value": "88.151.72.143:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:46:32",
            "last_seen_utc": "2026-08-13 08:47:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847004": [
        {
            "ioc_value": "84.247.142.79:8877",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:46:28",
            "last_seen_utc": "2026-08-12 08:47:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847003": [
        {
            "ioc_value": "nzapybzk.nikansefile.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:46:26",
            "last_seen_utc": "2026-07-13 11:17:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1847002": [
        {
            "ioc_value": "68.183.36.161:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-09 09:46:19",
            "last_seen_utc": "2026-08-10 18:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847001": [
        {
            "ioc_value": "62.60.226.157:1664",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:46:14",
            "last_seen_utc": "2026-08-14 18:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1847000": [
        {
            "ioc_value": "5.230.201.242:1995",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:46:09",
            "last_seen_utc": "2026-09-01 02:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846998": [
        {
            "ioc_value": "45.74.7.194:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:45:58",
            "last_seen_utc": "2026-08-14 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846999": [
        {
            "ioc_value": "45.74.7.196:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:45:58",
            "last_seen_utc": "2026-08-14 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846997": [
        {
            "ioc_value": "45.150.36.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-09 09:45:52",
            "last_seen_utc": "2026-08-15 18:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846996": [
        {
            "ioc_value": "38.60.125.143:12599",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:45:48",
            "last_seen_utc": "2026-08-15 18:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846995": [
        {
            "ioc_value": "37.72.172.58:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 09:45:45",
            "last_seen_utc": "2026-09-01 02:45:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846992": [
        {
            "ioc_value": "31.57.216.62:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:45:41",
            "last_seen_utc": "2026-08-11 18:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846993": [
        {
            "ioc_value": "31.57.216.62:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:45:41",
            "last_seen_utc": "2026-08-14 08:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846994": [
        {
            "ioc_value": "31.57.216.62:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:45:41",
            "last_seen_utc": "2026-08-10 18:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846991": [
        {
            "ioc_value": "216.9.225.38:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:45:33",
            "last_seen_utc": "2026-08-11 18:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846990": [
        {
            "ioc_value": "202.1.31.83:2234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-09 09:44:39",
            "last_seen_utc": "2026-08-09 18:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846989": [
        {
            "ioc_value": "186.169.89.64:5471",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:44:21",
            "last_seen_utc": "2026-08-11 08:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846988": [
        {
            "ioc_value": "179.43.149.252:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 09:44:06",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846987": [
        {
            "ioc_value": "179.43.149.251:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 09:44:05",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846986": [
        {
            "ioc_value": "178.16.53.193:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:44:04",
            "last_seen_utc": "2026-08-24 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846985": [
        {
            "ioc_value": "178.16.53.19:5022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:44:03",
            "last_seen_utc": "2026-08-08 18:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846984": [
        {
            "ioc_value": "176.120.22.129:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.poshc2",
            "malware_alias": null,
            "malware_printable": "PoshC2",
            "first_seen_utc": "2026-07-09 09:44:00",
            "last_seen_utc": "2026-09-01 02:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PoshC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846983": [
        {
            "ioc_value": "173.249.22.152:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-09 09:43:59",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846982": [
        {
            "ioc_value": "172.94.44.154:7775",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:43:58",
            "last_seen_utc": "2026-08-11 18:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846981": [
        {
            "ioc_value": "158.94.209.117:5022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:43:47",
            "last_seen_utc": "2026-08-08 18:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846979": [
        {
            "ioc_value": "157.20.182.17:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 09:43:46",
            "last_seen_utc": "2026-08-09 18:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846980": [
        {
            "ioc_value": "157.20.182.18:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-09 09:43:46",
            "last_seen_utc": "2026-08-11 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846977": [
        {
            "ioc_value": "157.173.195.214:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-09 09:43:45",
            "last_seen_utc": "2026-09-01 02:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846978": [
        {
            "ioc_value": "157.173.195.214:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-09 09:43:45",
            "last_seen_utc": "2026-08-19 08:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846976": [
        {
            "ioc_value": "144.208.127.243:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 09:43:33",
            "last_seen_utc": "2026-08-20 08:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846975": [
        {
            "ioc_value": "144.208.127.243:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 09:43:32",
            "last_seen_utc": "2026-08-20 08:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846974": [
        {
            "ioc_value": "142.202.191.251:8624",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-09 09:43:30",
            "last_seen_utc": "2026-08-09 18:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846973": [
        {
            "ioc_value": "123.215.57.178:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-09 09:43:22",
            "last_seen_utc": "2026-08-08 18:43:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846972": [
        {
            "ioc_value": "103.11.41.19:55661",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 09:43:08",
            "last_seen_utc": "2026-08-08 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846971": [
        {
            "ioc_value": "jnfj.elitesport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:42:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846970": [
        {
            "ioc_value": "87.120.104.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-09 09:40:19",
            "last_seen_utc": "2026-07-13 14:00:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6011db9f85ccfd36f9ed3634c49a6f9a5c0e623506695aed7bcd1c3109d083e9/",
            "tags": "NetSupportRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846969": [
        {
            "ioc_value": "31.77.57.104:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-09 09:35:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/94c112e594335382aa7eb9ac80e39907cb3e6348b1fa59f30373208da188ebf1/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846968": [
        {
            "ioc_value": "120.205.80.152:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 09:34:47",
            "last_seen_utc": "2026-07-09 12:47:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846967": [
        {
            "ioc_value": "duqvs764.likesport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:21:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846966": [
        {
            "ioc_value": "173.231.53.193:4242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-09 09:20:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7daa05906e417d5925666a99773e845506a1527aaa03b9001c3efb8a68315032/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846964": [
        {
            "ioc_value": "ftp.altatsradgez.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 09:15:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13f51845c9a953bbe1611e3b633aac9e3e8e21c1c26fd64784638a98fca642fe/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846963": [
        {
            "ioc_value": "209.99.191.60:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 09:10:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3551ee95176fa92f07ee54a5f66d1f547765fc79e1fb9e98b75dad86b71a10e/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846959": [
        {
            "ioc_value": "q8nw6zme.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:01:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846958": [
        {
            "ioc_value": "uuh7n2c4.fileboroo.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 09:00:33",
            "last_seen_utc": "2026-07-15 01:25:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846957": [
        {
            "ioc_value": "178.173.244.189:62435",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-09 08:59:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab9ee9d66ea198f5c199d85f7f770817d7abf8346b559388e379c3d9f2f23332/",
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846956": [
        {
            "ioc_value": "morefunds.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-07-09 08:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab9ee9d66ea198f5c199d85f7f770817d7abf8346b559388e379c3d9f2f23332/",
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846955": [
        {
            "ioc_value": "fqsmqhyz.mosbatsms.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 08:51:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846954": [
        {
            "ioc_value": "iclcyezy.mosbatsms.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 08:50:52",
            "last_seen_utc": "2026-07-13 11:17:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846953": [
        {
            "ioc_value": "147.124.212.185:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 08:44:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f71da26874f86cea2cea3d3798ceb6b37bd3ee51511160828af9863fb8ff8fbf/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846952": [
        {
            "ioc_value": "aapt.betsher.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 08:41:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846951": [
        {
            "ioc_value": "216.250.250.88:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-09 08:41:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86d9e1862cedee24295c66b7fc5b3649380dbddc0039e7af047ef7501d8c2cd7/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846950": [
        {
            "ioc_value": "194.116.236.216:5005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-09 08:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/429db8441c18dc12f7c74262f4fe362e5c1f992008030f96896e8978e17a270e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846949": [
        {
            "ioc_value": "benbeloorg.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-07-09 08:40:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86d9e1862cedee24295c66b7fc5b3649380dbddc0039e7af047ef7501d8c2cd7/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846948": [
        {
            "ioc_value": "ftp.piovau.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 08:36:20",
            "last_seen_utc": "2026-07-21 06:17:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/285223e2763c02e8e43b6a78560d66c7d1305abee5bdd67aaf0764d2bb6a9dc2/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846947": [
        {
            "ioc_value": "133.18.165.80:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-09 08:35:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b578402eebfe063f3b62ffa7fae581831d3d6be08aebeba70de74aa6422dc40/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846945": [
        {
            "ioc_value": "julyblessed634.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 08:35:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8f858a49525603584e4ebbb9502d06199221b203a650c002b947499282e3a202/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846946": [
        {
            "ioc_value": "magicmike26.myddns.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-09 08:35:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f71da26874f86cea2cea3d3798ceb6b37bd3ee51511160828af9863fb8ff8fbf/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846944": [
        {
            "ioc_value": "ftp.duct-master.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 08:35:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dee7624eda362b657770a1b26ab5295ffa36dff0164e7e50caf1de20b0bf3016/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846942": [
        {
            "ioc_value": "159.203.1.105:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 08:31:26",
            "last_seen_utc": "2026-07-18 06:00:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846943": [
        {
            "ioc_value": "ftp.cantablew.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-09 08:30:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/821386b587ea4f3074cc1cffb972c24a3bed4e6efe67b9a64c9dfc06e8f0bf25/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846940": [
        {
            "ioc_value": "120.205.80.152:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 08:22:04",
            "last_seen_utc": "2026-07-09 14:25:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846941": [
        {
            "ioc_value": "46.151.182.85:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-09 08:18:10",
            "last_seen_utc": "2026-08-24 13:22:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7671112fe3d1b41611fa9506d89e21b6361434e04e01db01454e15441530fcda/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846931": [
        {
            "ioc_value": "lynxsecurity.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-09 08:15:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846933": [
        {
            "ioc_value": "43.164.0.74:2852",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-09 08:15:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846936": [
        {
            "ioc_value": "ncvhdwcq.medsalamat.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:57:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846935": [
        {
            "ioc_value": "xaqjwwmj.medsalamat.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:55:23",
            "last_seen_utc": "2026-07-13 11:20:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846934": [
        {
            "ioc_value": "trlcayaw.matalebeziba.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:48:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846930": [
        {
            "ioc_value": "sysvert7holz.dexispointnexus.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:45:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846928": [
        {
            "ioc_value": "akvy.20sport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:38:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846926": [
        {
            "ioc_value": "116.202.6.223:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:11:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846923": [
        {
            "ioc_value": "46.224.169.55:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:10:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846924": [
        {
            "ioc_value": "172.235.191.111:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:10:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846925": [
        {
            "ioc_value": "88.99.120.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:10:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846921": [
        {
            "ioc_value": "https://172.235.191.111/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:10:42",
            "last_seen_utc": "2026-08-11 04:49:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846922": [
        {
            "ioc_value": "https://116.202.6.223/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:10:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846920": [
        {
            "ioc_value": "https://46.224.169.55/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-09 07:10:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1846915": [
        {
            "ioc_value": "mdazhynx.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:02:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846914": [
        {
            "ioc_value": "dtka7mx6.btyek.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 07:00:11",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846912": [
        {
            "ioc_value": "139.199.89.128:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-09 06:51:11",
            "last_seen_utc": "2026-07-20 09:14:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846913": [
        {
            "ioc_value": "39.105.201.165:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-09 06:51:11",
            "last_seen_utc": "2026-08-21 12:47:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846911": [
        {
            "ioc_value": "cniqfzhe.riskybet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 06:38:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846910": [
        {
            "ioc_value": "cztv.betfa.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 06:36:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846909": [
        {
            "ioc_value": "178.16.52.221:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-09 06:22:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/62a19fbcb1737090da61d749ca8af9ec76d2ee6085cf41cd9e934e9438ec0827/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846908": [
        {
            "ioc_value": "51.79.170.115:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-09 06:20:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846907": [
        {
            "ioc_value": "brakepail.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-09 06:17:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846903": [
        {
            "ioc_value": "snbzg3fu.noscriptc11pills.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 06:04:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846902": [
        {
            "ioc_value": "217.60.241.14:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-09 06:02:52",
            "last_seen_utc": "2026-07-21 05:35:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846899": [
        {
            "ioc_value": "157.20.182.81:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-09 06:02:51",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846900": [
        {
            "ioc_value": "196.251.121.90:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-09 06:02:51",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846901": [
        {
            "ioc_value": "157.20.182.81:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-09 06:02:51",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846897": [
        {
            "ioc_value": "http://95.217.38.238/ws/agent",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:51:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0255ae1616eec19d9b97440779b34a01602bb933699816121d705c069974c7db/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846892": [
        {
            "ioc_value": "xqbhmyyk.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 05:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846891": [
        {
            "ioc_value": "zirq.bet24.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 05:37:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846796": [
        {
            "ioc_value": "https://joanpowerslaw.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/joanpowerslaw.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846797": [
        {
            "ioc_value": "https://tennistotal.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tennistotal.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846798": [
        {
            "ioc_value": "https://turuncukentmobilyalari.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/turuncukentmobilyalari.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846799": [
        {
            "ioc_value": "https://triangleadvocacia.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/triangleadvocacia.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846800": [
        {
            "ioc_value": "https://proroyalty.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/proroyalty.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846801": [
        {
            "ioc_value": "https://teknofestdronesampiyonasi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/teknofestdronesampiyonasi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846802": [
        {
            "ioc_value": "https://mediaintegra.co.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mediaintegra.co.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846803": [
        {
            "ioc_value": "https://www.tais-costruzioni.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.tais-costruzioni.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846804": [
        {
            "ioc_value": "https://populardentalcare.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/populardentalcare.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846807": [
        {
            "ioc_value": "https://notarymatrixinc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/notarymatrixinc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846808": [
        {
            "ioc_value": "https://ilovebeaver.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ilovebeaver.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846809": [
        {
            "ioc_value": "https://www.kilimanjarodreams.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.kilimanjarodreams.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846810": [
        {
            "ioc_value": "https://londonhomeguide.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/londonhomeguide.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846811": [
        {
            "ioc_value": "https://laguzmancontinta.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/laguzmancontinta.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846789": [
        {
            "ioc_value": "mercio.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-09 05:28:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1846790": [
        {
            "ioc_value": "https://www.mercio.org/wp-footerblog.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-09 05:28:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1846822": [
        {
            "ioc_value": "https://abbasheartwm.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/abbasheartwm.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846823": [
        {
            "ioc_value": "https://gotomariko.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gotomariko.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846824": [
        {
            "ioc_value": "https://finsightsconsulting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:28:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/finsightsconsulting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846825": [
        {
            "ioc_value": "https://danacgautreaux.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/danacgautreaux.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846826": [
        {
            "ioc_value": "https://www.sbss.org.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sbss.org.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846831": [
        {
            "ioc_value": "https://childrenhouseschool.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/childrenhouseschool.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846832": [
        {
            "ioc_value": "https://alessiachloeperu.com.pe/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alessiachloeperu.com.pe",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846833": [
        {
            "ioc_value": "https://boxywebtools.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/boxywebtools.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846834": [
        {
            "ioc_value": "https://adiapavj.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/adiapavj.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846835": [
        {
            "ioc_value": "https://bartonspecialistclinic.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bartonspecialistclinic.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846836": [
        {
            "ioc_value": "https://abrmot.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/abrmot.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846842": [
        {
            "ioc_value": "152.42.214.91:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-09 05:27:50",
            "last_seen_utc": "2026-07-09 12:24:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846843": [
        {
            "ioc_value": "https://healthfood.zone/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/healthfood.zone",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846851": [
        {
            "ioc_value": "secpopper.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846852": [
        {
            "ioc_value": "catalapnews.today",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846853": [
        {
            "ioc_value": "https://feng-shui.ua/b/in.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846854": [
        {
            "ioc_value": "https://feng-shui.ua/b/up.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846855": [
        {
            "ioc_value": "8f708114c42c3ee145d51b0e698f787d249ca86345e5916ac554e750d6eac0c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846856": [
        {
            "ioc_value": "d9228d6c7d4d2557202a251e3b7018788cdb7ac6f64440774d96b7fdc3d2bac3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846857": [
        {
            "ioc_value": "70bf89c7580c7195407735cc8fa8b48ab17741036ffcd85704d6d4b600d824c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-09 05:27:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/feng-shui",
            "tags": "feng-shui,pan-os,sliver",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1846858": [
        {
            "ioc_value": "https://www.terrerouge.mg/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.terrerouge.mg",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846871": [
        {
            "ioc_value": "https://anfconcepts.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/anfconcepts.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846864": [
        {
            "ioc_value": "https://northpalmstay.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 05:27:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/northpalmstay.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1846879": [
        {
            "ioc_value": "80.96.113.59:2004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-09 05:27:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846880": [
        {
            "ioc_value": "80.96.113.59:1002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-09 05:27:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846881": [
        {
            "ioc_value": "80.96.113.59:1003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-09 05:27:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846882": [
        {
            "ioc_value": "80.96.113.59:1004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-09 05:27:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846883": [
        {
            "ioc_value": "80.96.113.59:1005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-09 05:27:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846884": [
        {
            "ioc_value": "64.89.163.212:2001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-09 05:27:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846886": [
        {
            "ioc_value": "078ia1jh.ace90betyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 05:00:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846878": [
        {
            "ioc_value": "eznvrdxc.footbalpersian.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 04:45:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846877": [
        {
            "ioc_value": "glmo.bcgame90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 04:35:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846876": [
        {
            "ioc_value": "i0wrocb4.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 04:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846870": [
        {
            "ioc_value": "eiuphpvo.fiorentini.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 03:53:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846869": [
        {
            "ioc_value": "ojvh.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 03:35:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846863": [
        {
            "ioc_value": "fh6sil11.test-drive-iran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 03:00:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846862": [
        {
            "ioc_value": "test-drive-iran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 02:59:25",
            "last_seen_utc": "2026-07-09 02:59:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846861": [
        {
            "ioc_value": "jxfszcuc.megaparifarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 02:52:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846860": [
        {
            "ioc_value": "tsyf22nq.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 02:51:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846859": [
        {
            "ioc_value": "psqj.app888starz.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 02:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846849": [
        {
            "ioc_value": "193.29.13.44:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-09 02:05:05",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846846": [
        {
            "ioc_value": "omjsikzk.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 01:57:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846845": [
        {
            "ioc_value": "ftoa.healthvarzesh.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 01:35:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846838": [
        {
            "ioc_value": "7j6ew89s.melbetir.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 01:03:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846830": [
        {
            "ioc_value": "0mx8cbge.fa1xbet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 00:52:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846829": [
        {
            "ioc_value": "159.75.152.237:6654",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-09 00:46:41",
            "last_seen_utc": "2026-08-10 08:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846828": [
        {
            "ioc_value": "fhbd.golibet.page",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 00:37:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846817": [
        {
            "ioc_value": "ujxjvdku.catsandcarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-09 00:06:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846806": [
        {
            "ioc_value": "dumw.goaliran.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 23:34:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846795": [
        {
            "ioc_value": "13d3c8zt.kick1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 23:12:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846784": [
        {
            "ioc_value": "hwgi901o.cialispi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 22:50:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846783": [
        {
            "ioc_value": "6443bb59.cialispi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 22:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846782": [
        {
            "ioc_value": "37.1.213.59:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-08 22:36:02",
            "last_seen_utc": "2026-08-06 23:48:02",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=37.1.213.59",
            "tags": "Amadey,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846781": [
        {
            "ioc_value": "hljr.gamesport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 22:31:55",
            "last_seen_utc": "2026-07-08 22:32:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846780": [
        {
            "ioc_value": "bru.omni-signage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 22:26:54",
            "last_seen_utc": "2026-07-09 05:26:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846779": [
        {
            "ioc_value": "https://bru.omni-signage.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 22:26:53",
            "last_seen_utc": "2026-07-09 05:26:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846778": [
        {
            "ioc_value": "https://bru.kataksm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 22:26:42",
            "last_seen_utc": "2026-07-09 00:26:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846777": [
        {
            "ioc_value": "uyixzgec.betawarz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 22:10:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846776": [
        {
            "ioc_value": "ghccipia.fifa90bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 22:08:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846769": [
        {
            "ioc_value": "gclz.futboliran.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 21:36:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846766": [
        {
            "ioc_value": "smfnctms.fifa90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 21:15:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846764": [
        {
            "ioc_value": "http://37.1.213.59/y8jdGc5jS/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-07-08 21:05:22",
            "last_seen_utc": "2026-07-09 13:01:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846758": [
        {
            "ioc_value": "www.ikukuomalogistics.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 21:00:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/11c9e5f53f0f64c9633bb1a2179ffc990651b31b52c18a212f05c2efc3824404/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846759": [
        {
            "ioc_value": "www.ikukuomalogistics1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 21:00:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/11c9e5f53f0f64c9633bb1a2179ffc990651b31b52c18a212f05c2efc3824404/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846760": [
        {
            "ioc_value": "www.ikukuomalogistics2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 21:00:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/11c9e5f53f0f64c9633bb1a2179ffc990651b31b52c18a212f05c2efc3824404/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846757": [
        {
            "ioc_value": "abrmot.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:57:27",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846756": [
        {
            "ioc_value": "goldstar6port.dexispointnexus.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:52:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846755": [
        {
            "ioc_value": "4z0tdlyo.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:51:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846754": [
        {
            "ioc_value": "172.245.195.215:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 20:50:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846753": [
        {
            "ioc_value": "vfrsh9y6.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:40:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846752": [
        {
            "ioc_value": "ihnx.footbalpersian.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:31:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846750": [
        {
            "ioc_value": "jtemlhyz.enfej.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:17:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846744": [
        {
            "ioc_value": "dgl7533w.melbetir.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 20:04:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846742": [
        {
            "ioc_value": "st1-colud-google.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 19:46:05",
            "last_seen_utc": "2026-08-07 20:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846741": [
        {
            "ioc_value": "89.32.41.50:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-08 19:45:51",
            "last_seen_utc": "2026-08-16 18:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846740": [
        {
            "ioc_value": "89.106.83.84:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:45:50",
            "last_seen_utc": "2026-08-15 08:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846738": [
        {
            "ioc_value": "45.74.7.192:2428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:45:24",
            "last_seen_utc": "2026-08-14 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846739": [
        {
            "ioc_value": "45.74.7.193:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:45:24",
            "last_seen_utc": "2026-08-14 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846737": [
        {
            "ioc_value": "216.9.225.38:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:45:00",
            "last_seen_utc": "2026-08-10 08:45:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846736": [
        {
            "ioc_value": "213.209.159.91:4556",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-08 19:44:32",
            "last_seen_utc": "2026-09-01 02:44:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846735": [
        {
            "ioc_value": "202.61.130.106:8321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-08 19:44:24",
            "last_seen_utc": "2026-08-19 18:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846734": [
        {
            "ioc_value": "179.43.149.252:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 19:43:55",
            "last_seen_utc": "2026-09-01 02:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846733": [
        {
            "ioc_value": "164.68.123.50:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-08 19:43:45",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846732": [
        {
            "ioc_value": "155.103.71.115:13509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:43:38",
            "last_seen_utc": "2026-08-08 08:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846731": [
        {
            "ioc_value": "104.64.192.34:6933",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 19:43:14",
            "last_seen_utc": "2026-08-18 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846730": [
        {
            "ioc_value": "104.168.7.195:31897",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:43:13",
            "last_seen_utc": "2026-08-09 08:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846729": [
        {
            "ioc_value": "103.11.41.20:516",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:43:09",
            "last_seen_utc": "2026-08-07 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846728": [
        {
            "ioc_value": "103.11.41.10:51768",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 19:43:06",
            "last_seen_utc": "2026-08-08 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846727": [
        {
            "ioc_value": "qakm.fiorentini.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 19:35:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846720": [
        {
            "ioc_value": "abenegihugu.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-08 19:28:43",
            "last_seen_utc": "2026-08-28 11:44:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1846722": [
        {
            "ioc_value": "adalyametal.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-08 19:28:43",
            "last_seen_utc": "2026-08-28 11:41:53",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "etherhiding,Polygon,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1846725": [
        {
            "ioc_value": "zvulhavn.elitesport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 19:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846723": [
        {
            "ioc_value": "64.89.162.178:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-08 19:16:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/83ed44068b1fec44e77dded6511f9f308b2d818c78780a0cb6ded293bcf88e8e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846711": [
        {
            "ioc_value": "gtv6eszx.riskybet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 18:42:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846710": [
        {
            "ioc_value": "mouvwpcv.riskybet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 18:40:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846631": [
        {
            "ioc_value": "159.203.1.105:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 18:35:37",
            "last_seen_utc": "2026-07-18 03:27:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846639": [
        {
            "ioc_value": "152.42.214.91:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 18:35:36",
            "last_seen_utc": "2026-07-09 13:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846648": [
        {
            "ioc_value": "noveuam.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 18:35:36",
            "last_seen_utc": "2026-07-10 03:53:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "tags": "AutoIt,ClearFake,ClickFix,infostealer,steam-deaddrop",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846646": [
        {
            "ioc_value": "bantamoro.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 18:35:35",
            "last_seen_utc": "2026-07-10 03:53:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "tags": "AutoIt,ClearFake,ClickFix,infostealer,steam-deaddrop",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846647": [
        {
            "ioc_value": "abitarix.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 18:35:34",
            "last_seen_utc": "2026-07-10 03:53:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "tags": "AutoIt,ClearFake,ClickFix,infostealer,steam-deaddrop",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846649": [
        {
            "ioc_value": "e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 18:35:34",
            "last_seen_utc": "2026-07-10 03:53:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e0d1e9dbfb7ee326cc6152ac810d7835cb1f2cd2031e3d8ba83e3777e18bd755",
            "tags": "AutoIt,ClearFake,ClickFix,infostealer,WEXTRACT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846663": [
        {
            "ioc_value": "gtm-helper.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-08 18:35:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/a45ca82a-a3b8-40c4-b533-700cf48b8904",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1846664": [
        {
            "ioc_value": "recap-cha.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-08 18:35:31",
            "last_seen_utc": "2026-07-10 13:10:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/a45ca82a-a3b8-40c4-b533-700cf48b8904",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1846708": [
        {
            "ioc_value": "jrudq.ganj.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 18:34:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846707": [
        {
            "ioc_value": "blhs.20sport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 18:32:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846706": [
        {
            "ioc_value": "mbifcxdz.careeriran.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 18:31:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846700": [
        {
            "ioc_value": "9c8c0b26c1ac72688e0f1a5d43ddcf16cb2726e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-08 18:14:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846701": [
        {
            "ioc_value": "84e114db07c2fbe9225d08bc856ed52f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-08 18:14:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846697": [
        {
            "ioc_value": "a237210c342b24325ac4cae7977613a85966c8b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-08 18:14:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846698": [
        {
            "ioc_value": "16f2b00efb6012eddafdabaf21f7e7ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-08 18:14:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846699": [
        {
            "ioc_value": "fdf03609a12b2535488e008293cd89d596f967af96d7763b880ee1ffd8702630",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-08 18:14:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846695": [
        {
            "ioc_value": "7c0f9f1375d685ec9a30c2e1a5cf7817",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846696": [
        {
            "ioc_value": "07e019e4309cd2d20874488411df839728fbda0b580c6f09a72c99f4d873f931",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-08 18:14:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846692": [
        {
            "ioc_value": "b62119f0ae9ad41612f252dd703799d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846693": [
        {
            "ioc_value": "60c730addd2a15e4213a1d37f55186686976de73a106317b5a258fe0121cfd5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846694": [
        {
            "ioc_value": "4dd9e00b51b94a5c9dda104f9cc9d5887cfa6819",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846688": [
        {
            "ioc_value": "897a9a38ebc67beb0775184520c8ce3b0bec04e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846689": [
        {
            "ioc_value": "57d20ed65870aa249ca374142d763d13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846690": [
        {
            "ioc_value": "dc8b056dd6eb75df21e9721ac2e340f91bb5e94d5a6ff412d7d0c7539e0f06e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846691": [
        {
            "ioc_value": "a54e21752a34a4663cef87b75efe74be139a2c8e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846685": [
        {
            "ioc_value": "e2ffa36e0a8661af0695eb11fe11ae21aca77367",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 18:14:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846686": [
        {
            "ioc_value": "75f68d369e48fba33a4d53d45f32a6c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 18:14:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846687": [
        {
            "ioc_value": "433b61c29aefaa5b55fe78063e6ad8597d3835f36e1242d5402ab23e6dc61194",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-08 18:14:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846682": [
        {
            "ioc_value": "0b64e89c66e5f0f93b164967c738949d7521002f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-08 18:14:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846683": [
        {
            "ioc_value": "6e9cd29d317d6f0251aba016f04ea281",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-08 18:14:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846684": [
        {
            "ioc_value": "3f434324ac709227290512410977bca99eb164fc86cae6f22cd4844eb9eb9130",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 18:14:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846679": [
        {
            "ioc_value": "f5088b617e231c7ea495c78deb83813dd5f98ef6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-08 18:14:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846680": [
        {
            "ioc_value": "fe2226cdeb007a5b1f5aa13e042d9b11",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-08 18:14:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846681": [
        {
            "ioc_value": "ec8642b8f9d76743c3d9b65f2496f41ba136ff4f1ccfbe4069d494e6a3e579f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-08 18:14:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846675": [
        {
            "ioc_value": "f5d8c56c2b66818eba0bacd35be33b2d2069ff3e28befe67dd4ca17b675b7b27",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 18:14:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846676": [
        {
            "ioc_value": "04ed410e130bba2e28e7fc5e921ee6820547c31f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 18:14:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846677": [
        {
            "ioc_value": "97960cb546365a3a320fd26dac47d10e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 18:14:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846678": [
        {
            "ioc_value": "c4ce7dd05a3865b7d16a33adc9fa57d15a221abb83cb57fad43e947bc0a17eb1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-08 18:14:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846672": [
        {
            "ioc_value": "da483f0d56aabc55d45b170c4f605c97c722b3c2400cc6a5643a45f116121258",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-08 18:14:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846673": [
        {
            "ioc_value": "8c148fad9feaa0b196989b83eeaed9334083e221",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-08 18:14:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846674": [
        {
            "ioc_value": "55b80c0bb297e1cdbd85530c30c6d723",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-08 18:14:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846669": [
        {
            "ioc_value": "06f915bc056a74c1c9b6faa3098a700ef4e5f54b8b1e84f73c70dcc6f5096949",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-08 18:14:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846670": [
        {
            "ioc_value": "73a97de7a2edda2419f060567ecd07ecc6b9b89e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-08 18:14:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846671": [
        {
            "ioc_value": "32ba76496cf54bf0c9302e6ddab64cd9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-08 18:14:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846666": [
        {
            "ioc_value": "86f77feba22ad9641d9464ac07c0fc4c2657f62cf02b85bdb50a192980265ebf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 18:14:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846667": [
        {
            "ioc_value": "c43ca244dc9905ea3260dff1e7c9414dc3890b37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 18:14:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846668": [
        {
            "ioc_value": "c6da85645488cfbb1120310f837f7fc7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 18:14:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846665": [
        {
            "ioc_value": "lddwegnb.ketabworld.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 18:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846656": [
        {
            "ioc_value": "rcodtjdj.melbetiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 17:37:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846655": [
        {
            "ioc_value": "aafnojwq.megashart.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 17:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846645": [
        {
            "ioc_value": "etorvugt.betsher.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:55:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846644": [
        {
            "ioc_value": "wrov.betfa.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:47:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846643": [
        {
            "ioc_value": "4lbsgx9v.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:40:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846642": [
        {
            "ioc_value": "89g5nu0q.powershart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:39:40",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846641": [
        {
            "ioc_value": "drvepxdy.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846640": [
        {
            "ioc_value": "instnhvy.melbetiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:24:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846637": [
        {
            "ioc_value": "metabluefire.dexispointnexus.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 16:17:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846630": [
        {
            "ioc_value": "obds.betsher.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 15:49:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846629": [
        {
            "ioc_value": "dpbp.betsher.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 15:46:25",
            "last_seen_utc": "2026-07-09 08:36:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846628": [
        {
            "ioc_value": "xclparsl.megashart.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 15:25:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846616": [
        {
            "ioc_value": "159.203.1.105:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 15:18:37",
            "last_seen_utc": "2026-07-18 08:52:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846625": [
        {
            "ioc_value": "165.232.169.49:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 15:18:36",
            "last_seen_utc": "2026-07-18 07:43:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846619": [
        {
            "ioc_value": "9c8joror.melbetir.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 15:02:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846617": [
        {
            "ioc_value": "rmwj.betfa.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 14:52:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846614": [
        {
            "ioc_value": "120.205.80.152:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 14:51:15",
            "last_seen_utc": "2026-07-09 15:43:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846613": [
        {
            "ioc_value": "8n2r77nt.app888starz.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 14:37:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846611": [
        {
            "ioc_value": "zqjjyamd.megaparifarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 14:25:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846610": [
        {
            "ioc_value": "hostfastland.mivonflowsrv.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 14:22:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846600": [
        {
            "ioc_value": "158.160.75.185:43291",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 14:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846599": [
        {
            "ioc_value": "cabv.bet24.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 13:56:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846598": [
        {
            "ioc_value": "rieo.bet24.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 13:54:56",
            "last_seen_utc": "2026-07-09 05:35:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846597": [
        {
            "ioc_value": "217.60.195.113:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-08 13:34:06",
            "last_seen_utc": "2026-08-18 15:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1846595": [
        {
            "ioc_value": "sjgejs29.itsport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 13:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846593": [
        {
            "ioc_value": "13.204.46.27:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-07-08 13:07:19",
            "last_seen_utc": "2026-08-24 13:22:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f34ccaabd453d1a48109ea8f96b224c845ff03da08059db5ae5c63b3bf21bc15/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846583": [
        {
            "ioc_value": "120.205.80.152:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 13:03:32",
            "last_seen_utc": "2026-07-09 13:32:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846587": [
        {
            "ioc_value": "emtd.bcgame90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 13:01:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846586": [
        {
            "ioc_value": "agvw.bcgame90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:59:22",
            "last_seen_utc": "2026-07-09 04:34:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846584": [
        {
            "ioc_value": "hzfe.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846582": [
        {
            "ioc_value": "mpv5bjr9.yasbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:35:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846581": [
        {
            "ioc_value": "94fngygd.yasbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:33:52",
            "last_seen_utc": "2026-07-08 12:34:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846580": [
        {
            "ioc_value": "bleu2zeit8zone.mivonflowsrv.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:27:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846574": [
        {
            "ioc_value": "dcaxdwoo.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846573": [
        {
            "ioc_value": "ztop.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 12:10:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846558": [
        {
            "ioc_value": "1ca17239f5bec17ef244fc55357c6d0560337d7cadd1bb61574ab010f14a8d14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,DeviceManagerAgent,EtherHiding,InnoSetup,PyInstaller,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846559": [
        {
            "ioc_value": "830a22ea4eb2ebb8c60c7731fa5175d3a315d023a812aea40147326cc4c8a4dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,DeviceManagerAgent,EtherHiding,InnoSetup,PyInstaller,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846560": [
        {
            "ioc_value": "91.92.240.100:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,DeviceManagerAgent,DNS-C2,EtherHiding,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846565": [
        {
            "ioc_value": "https://pub-1f5a501a59d74a6a97e77126cf1fc526.r2.dev/dcaczhjitqazbalk.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,CloudflareR2,DeviceManagerAgent,EtherHiding,InnoSetup,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846566": [
        {
            "ioc_value": "https://qgypyyvvzeouq.mospoqkzvk.com/d/cani",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,CloudflareR2,DeviceManagerAgent,EtherHiding,InnoSetup,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846567": [
        {
            "ioc_value": "https://qgypyyvvzeouq.mospoqkzvk.com/s/psc2",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,CloudflareR2,DeviceManagerAgent,EtherHiding,InnoSetup,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846568": [
        {
            "ioc_value": "qgypyyvvzeouq.mospoqkzvk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 12:08:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/Lenny-3BO/BeepBopBoop/tree/master/hunts/c2-frameworks/etherhiding-python-c2",
            "tags": "ClickFix,CloudflareR2,DeviceManagerAgent,EtherHiding,InnoSetup,PythonC2",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846504": [
        {
            "ioc_value": "185.92.190.185:8898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 11:46:49",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846505": [
        {
            "ioc_value": "185.92.190.187:8898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 11:46:49",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846503": [
        {
            "ioc_value": "173.249.27.195:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 11:46:47",
            "last_seen_utc": "2026-08-09 08:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846502": [
        {
            "ioc_value": "43.157.212.233:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 11:46:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b2d18d22f1aff68fc7fc03c56afa5c1be8fbd93d2f4caad1bff7dfec761b50f5/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846501": [
        {
            "ioc_value": "toonhymp.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846500": [
        {
            "ioc_value": "eluk.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 11:17:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846499": [
        {
            "ioc_value": "kdmr.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 11:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846486": [
        {
            "ioc_value": "hvaujhmz.alhilal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 10:41:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846485": [
        {
            "ioc_value": "qee052b3.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 10:35:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846444": [
        {
            "ioc_value": "donutcash.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 10:33:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f40f2-c3a7-74af-ae4c-29b29d6376b6",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1846445": [
        {
            "ioc_value": "http://185.223.82.171/fd89ba886125940b747e.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-08 10:33:31",
            "last_seen_utc": "2026-07-09 18:08:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846477": [
        {
            "ioc_value": "104.248.81.151:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:31",
            "last_seen_utc": "2026-07-13 09:30:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846473": [
        {
            "ioc_value": "159.223.221.16:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:30",
            "last_seen_utc": "2026-07-13 09:30:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846474": [
        {
            "ioc_value": "178.62.249.180:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:30",
            "last_seen_utc": "2026-07-13 09:32:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846475": [
        {
            "ioc_value": "164.92.144.85:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:29",
            "last_seen_utc": "2026-07-13 09:32:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846476": [
        {
            "ioc_value": "104.248.193.244:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:28",
            "last_seen_utc": "2026-07-13 09:30:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846478": [
        {
            "ioc_value": "68.183.8.203:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:28",
            "last_seen_utc": "2026-07-13 09:30:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846479": [
        {
            "ioc_value": "159.223.14.22:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:27",
            "last_seen_utc": "2026-07-13 09:32:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846484": [
        {
            "ioc_value": "209.38.33.235:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:27",
            "last_seen_utc": "2026-07-13 09:59:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846481": [
        {
            "ioc_value": "188.166.114.27:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:26",
            "last_seen_utc": "2026-07-13 09:31:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846482": [
        {
            "ioc_value": "178.62.232.134:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-08 10:33:26",
            "last_seen_utc": "2026-07-13 09:30:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846483": [
        {
            "ioc_value": "194.116.236.94:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-08 10:31:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b222bbed4c43b8f1e9de9af148a29f49c66ae6fe2e49a8ad45669211f7b7c1d2/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846480": [
        {
            "ioc_value": "a5ozej0l.irantop.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 10:31:12",
            "last_seen_utc": "2026-07-10 09:01:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846472": [
        {
            "ioc_value": "bwup.catsandcarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 10:23:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846471": [
        {
            "ioc_value": "188.48.208.56:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 10:15:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846466": [
        {
            "ioc_value": "2766iljo.melbetiran.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 10:01:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846464": [
        {
            "ioc_value": "3w6k8hlt.pinbahis.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 09:50:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846462": [
        {
            "ioc_value": "89.106.83.75:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 09:46:12",
            "last_seen_utc": "2026-08-14 08:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846461": [
        {
            "ioc_value": "77.72.85.62:59821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 09:46:01",
            "last_seen_utc": "2026-08-07 08:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846460": [
        {
            "ioc_value": "45.64.246.163:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 09:45:40",
            "last_seen_utc": "2026-08-07 18:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846459": [
        {
            "ioc_value": "217.217.97.106:20908",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-07-08 09:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846458": [
        {
            "ioc_value": "202.61.130.170:8321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-08 09:44:32",
            "last_seen_utc": "2026-08-19 18:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846456": [
        {
            "ioc_value": "185.115.164.60:61102",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 09:44:08",
            "last_seen_utc": "2026-08-07 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846457": [
        {
            "ioc_value": "185.115.164.60:7572",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 09:44:08",
            "last_seen_utc": "2026-08-07 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846455": [
        {
            "ioc_value": "185.115.164.59:11322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-08 09:44:05",
            "last_seen_utc": "2026-08-07 18:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846454": [
        {
            "ioc_value": "162.248.102.130:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-08 09:43:47",
            "last_seen_utc": "2026-08-28 08:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846453": [
        {
            "ioc_value": "146.19.248.64:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-08 09:43:32",
            "last_seen_utc": "2026-08-07 18:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846452": [
        {
            "ioc_value": "phcwqqkr.1xgermany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 09:30:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846451": [
        {
            "ioc_value": "ykgl.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 09:26:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846442": [
        {
            "ioc_value": "152.42.214.91:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 08:37:38",
            "last_seen_utc": "2026-07-10 13:50:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846443": [
        {
            "ioc_value": "errxxcnl.gamee.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 08:37:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846441": [
        {
            "ioc_value": "vj7eaayr.fa1xbet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 08:33:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846439": [
        {
            "ioc_value": "kqbtsllu.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 08:31:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846437": [
        {
            "ioc_value": "obuf.betawarz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 08:30:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846427": [
        {
            "ioc_value": "5f319c7e83b8daa6836b8ae674c8e0e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:13",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846428": [
        {
            "ioc_value": "6add66a89721e2b7d817ba0d0f0d660e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:13",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846429": [
        {
            "ioc_value": "55adc1b1cd21895765d8aff36d894382",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:12",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846430": [
        {
            "ioc_value": "15ced19102f80a843c22480e362c8811",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:12",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846431": [
        {
            "ioc_value": "50d6a53992cb7d6eb09bc71294e5a68f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:11",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846432": [
        {
            "ioc_value": "71f152d84b2928c6163724de1cb6fae3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:11",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846433": [
        {
            "ioc_value": "4a9837dd830f8db27380836ef3a6adec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:10",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846434": [
        {
            "ioc_value": "f3c6ca1ba97b7f94ab52584dc62ea691",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-08 08:13:10",
            "last_seen_utc": "2026-08-06 13:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1846424": [
        {
            "ioc_value": "fezk.polbaz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 07:55:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846423": [
        {
            "ioc_value": "nqwr.polbaz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 07:52:58",
            "last_seen_utc": "2026-07-08 07:53:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846422": [
        {
            "ioc_value": "39.105.200.188:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 07:40:56",
            "last_seen_utc": "2026-07-09 06:50:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846420": [
        {
            "ioc_value": "49.234.198.180:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 07:40:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846421": [
        {
            "ioc_value": "39.106.113.249:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 07:40:55",
            "last_seen_utc": "2026-07-10 07:29:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846419": [
        {
            "ioc_value": "139.226.191.149:2082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-08 07:40:42",
            "last_seen_utc": "2026-09-01 02:46:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846418": [
        {
            "ioc_value": "https://88.99.120.224",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 07:39:08",
            "last_seen_utc": "2026-07-09 07:10:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/anthropics/claude-code/issues/75517#issuecomment-4912416725",
            "tags": "Arkei,dead-drop-resolver,GCleaner,Go-crypter,Vidar",
            "anonymous": 0,
            "reporter": "techjoe"
        }
    ],
    "1846410": [
        {
            "ioc_value": "ironhausflow.mivonflowsrv.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 07:22:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846409": [
        {
            "ioc_value": "desecq.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-08 07:22:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Remus",
            "anonymous": 0,
            "reporter": "JARMdNDangerous"
        }
    ],
    "1846408": [
        {
            "ioc_value": "tiduflxx.farsi1xbet.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 07:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846401": [
        {
            "ioc_value": "http://144.31.57.70/c0e070fa9435429c8ea5.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-08 07:03:49",
            "last_seen_utc": "2026-07-15 09:29:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "build,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846400": [
        {
            "ioc_value": "srgq.icebet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:59:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846399": [
        {
            "ioc_value": "kcyh.icebet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:57:26",
            "last_seen_utc": "2026-07-08 06:58:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846398": [
        {
            "ioc_value": "46.246.12.2:7046",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.houdini",
            "malware_alias": "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi",
            "malware_printable": "Houdini",
            "first_seen_utc": "2026-07-08 06:49:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/691e800651f742c78c4743e25874d341fd6343f4e1a5c6829ca3c70e221b3478/",
            "tags": "RAT,WSHRat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846143": [
        {
            "ioc_value": "http://45.137.201.81/devmarker.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/65a052908f79efc7878d6799fd3b7be1e30eba49fa05156d7e5239b2b9ddaf71",
            "tags": "browser-extension,CEB,go,meetione,ppn,proxyware,staging,T1090,T1176",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846142": [
        {
            "ioc_value": "api.meetione.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/65a052908f79efc7878d6799fd3b7be1e30eba49fa05156d7e5239b2b9ddaf71",
            "tags": "browser-extension,CEB,go,meetione,ppn,proxyware,T1090,T1176",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846144": [
        {
            "ioc_value": "45.137.201.81:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/65a052908f79efc7878d6799fd3b7be1e30eba49fa05156d7e5239b2b9ddaf71",
            "tags": "browser-extension,CEB,go,meetione,ppn,proxyware,staging,T1090,T1176",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846140": [
        {
            "ioc_value": "65a052908f79efc7878d6799fd3b7be1e30eba49fa05156d7e5239b2b9ddaf71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/65a052908f79efc7878d6799fd3b7be1e30eba49fa05156d7e5239b2b9ddaf71",
            "tags": "browser-extension,CEB,go,meetione,ppn,proxyware,T1090,T1176",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846141": [
        {
            "ioc_value": "meetione.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/65a052908f79efc7878d6799fd3b7be1e30eba49fa05156d7e5239b2b9ddaf71",
            "tags": "browser-extension,CEB,go,meetione,ppn,proxyware,T1090,T1176",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846131": [
        {
            "ioc_value": "159.203.1.105:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:31",
            "last_seen_utc": "2026-07-18 09:57:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846116": [
        {
            "ioc_value": "159.203.1.105:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:29",
            "last_seen_utc": "2026-07-18 09:10:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846117": [
        {
            "ioc_value": "159.65.133.214:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:29",
            "last_seen_utc": "2026-07-09 14:29:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846114": [
        {
            "ioc_value": "120.205.80.152:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:28",
            "last_seen_utc": "2026-07-09 13:44:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846115": [
        {
            "ioc_value": "165.232.169.49:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:28",
            "last_seen_utc": "2026-07-18 10:03:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846111": [
        {
            "ioc_value": "helptocheckc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f3d0d-cb90-77d9-becd-848a081b51ef/",
            "tags": "clickfix,iwr,loader,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846097": [
        {
            "ioc_value": "157.245.59.180:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846110": [
        {
            "ioc_value": "http://helptocheckc.com/get",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-08 06:48:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f3d0d-cb90-77d9-becd-848a081b51ef/",
            "tags": "clickfix,iwr,loader,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1846138": [
        {
            "ioc_value": "45.90.163.37:3778",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-08 06:48:23",
            "last_seen_utc": "2026-07-09 01:40:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846139": [
        {
            "ioc_value": "45.90.163.37:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-08 06:48:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,NFS",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846155": [
        {
            "ioc_value": "aeons-echo.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:20",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846156": [
        {
            "ioc_value": "artisan-advertising.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:20",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846157": [
        {
            "ioc_value": "brain-game.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:20",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846158": [
        {
            "ioc_value": "celebration-internet.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:19",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846159": [
        {
            "ioc_value": "ed-security-buff.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:19",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846160": [
        {
            "ioc_value": "fast-node.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:19",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846161": [
        {
            "ioc_value": "firewall-sentinel.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:18",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846162": [
        {
            "ioc_value": "flame-guard.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:18",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846163": [
        {
            "ioc_value": "islandepstain.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:18",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846164": [
        {
            "ioc_value": "lavande-rocket.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:17",
            "last_seen_utc": "2026-07-07 19:35:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846165": [
        {
            "ioc_value": "pkg.vogueatelier.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:17",
            "last_seen_utc": "2026-07-07 19:35:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846166": [
        {
            "ioc_value": "quartermaster-sec.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:17",
            "last_seen_utc": "2026-07-07 19:35:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846167": [
        {
            "ioc_value": "solid-manage.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:16",
            "last_seen_utc": "2026-07-07 19:35:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846168": [
        {
            "ioc_value": "tikcettoread.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:15",
            "last_seen_utc": "2026-07-07 19:35:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846169": [
        {
            "ioc_value": "cmicrosoft1.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:15",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846170": [
        {
            "ioc_value": "fd.gstats-api-contact.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:14",
            "last_seen_utc": "2026-07-07 19:35:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846171": [
        {
            "ioc_value": "mgo.gstats-api-contact.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:48:14",
            "last_seen_utc": "2026-07-07 19:35:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "blue_red"
        }
    ],
    "1846173": [
        {
            "ioc_value": "152.42.214.91:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:12",
            "last_seen_utc": "2026-07-10 12:31:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846201": [
        {
            "ioc_value": "165.232.169.49:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:11",
            "last_seen_utc": "2026-07-09 13:26:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846226": [
        {
            "ioc_value": "159.65.133.214:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:10",
            "last_seen_utc": "2026-07-09 12:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846230": [
        {
            "ioc_value": "159.203.1.105:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:48:09",
            "last_seen_utc": "2026-07-18 09:40:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846380": [
        {
            "ioc_value": "159.203.1.105:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-08 06:47:59",
            "last_seen_utc": "2026-07-18 00:15:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846397": [
        {
            "ioc_value": "a1ukh8ol.cialispi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:31:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846396": [
        {
            "ioc_value": "ecouvs23.cialispi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:30:18",
            "last_seen_utc": "2026-07-08 22:49:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846393": [
        {
            "ioc_value": "rbthbhfo.backlinkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:10:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846386": [
        {
            "ioc_value": "jrfl.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:02:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846385": [
        {
            "ioc_value": "mfrj.hazzaratbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 06:02:00",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846384": [
        {
            "ioc_value": "yhqm.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:59:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846383": [
        {
            "ioc_value": "petitwaldnet.mivonflowsrv.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:52:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846382": [
        {
            "ioc_value": "xota.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846381": [
        {
            "ioc_value": "158.160.75.185:43175",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 05:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846379": [
        {
            "ioc_value": "lams.catsandcarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:40:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846378": [
        {
            "ioc_value": "wclaheuy.akhbarirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846372": [
        {
            "ioc_value": "qcfonhxm.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:02:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846369": [
        {
            "ioc_value": "7eo6l6dj.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 05:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846367": [
        {
            "ioc_value": "jvjj.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:49:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846366": [
        {
            "ioc_value": "e1l3tn5m.bet1xyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846362": [
        {
            "ioc_value": "dcyfiemg.betzopoda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:31:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846360": [
        {
            "ioc_value": "g1cdqpil.betzopoda.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:29:56",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846359": [
        {
            "ioc_value": "faz.realmadridiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 04:26:55",
            "last_seen_utc": "2026-07-08 11:27:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846358": [
        {
            "ioc_value": "https://faz.realmadridiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 04:26:54",
            "last_seen_utc": "2026-07-08 11:27:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846356": [
        {
            "ioc_value": "https://faz.jurangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 04:26:44",
            "last_seen_utc": "2026-07-08 04:30:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846357": [
        {
            "ioc_value": "faz.jurangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-08 04:26:44",
            "last_seen_utc": "2026-07-08 04:30:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846355": [
        {
            "ioc_value": "indf.betawarz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:25:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846354": [
        {
            "ioc_value": "txyx.betawarz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:24:39",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846353": [
        {
            "ioc_value": "rougesoftapp.mivonflowsrv.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 04:12:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846347": [
        {
            "ioc_value": "smildilt.1xjet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 03:50:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846342": [
        {
            "ioc_value": "cpvt.bet120.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 03:32:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846338": [
        {
            "ioc_value": "209.99.185.115:2013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 03:30:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846325": [
        {
            "ioc_value": "ydanflbg.1xgermany.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 02:35:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846324": [
        {
            "ioc_value": "pzhj.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 02:35:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846322": [
        {
            "ioc_value": "odkw.barcelona11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 02:33:35",
            "last_seen_utc": "2026-07-09 21:37:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846321": [
        {
            "ioc_value": "eoy6mamg.bettrend.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 02:31:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846313": [
        {
            "ioc_value": "hljajzy.arsenal11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 01:39:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846311": [
        {
            "ioc_value": "wakvssup.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 01:35:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846305": [
        {
            "ioc_value": "vhkpyhz.alhilal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 01:03:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846304": [
        {
            "ioc_value": "avduwco.alhilal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 01:01:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846302": [
        {
            "ioc_value": "ascaf0yi.rollexbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 00:23:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846301": [
        {
            "ioc_value": "rollexbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 00:20:14",
            "last_seen_utc": "2026-07-08 00:20:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846300": [
        {
            "ioc_value": "pzaiotb.akhbarirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 00:07:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846299": [
        {
            "ioc_value": "yliqkmh.akhbarirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-08 00:05:22",
            "last_seen_utc": "2026-07-10 02:19:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846295": [
        {
            "ioc_value": "f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-08 00:01:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846296": [
        {
            "ioc_value": "936f5df6baefe57642eee138764dd2103d4d0849",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-08 00:01:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846297": [
        {
            "ioc_value": "2a8ce7e05836d21a6a31ca558ccd679f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-08 00:01:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846293": [
        {
            "ioc_value": "9e4ac69554eaa7e4f72161de849b0eeb285d6700",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-08 00:01:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846294": [
        {
            "ioc_value": "26a1127f0bac441d6a94709ddfdb9c5b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-08 00:01:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846291": [
        {
            "ioc_value": "0d529740e9cc8a9c5abd9af0a915b8ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 00:01:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846292": [
        {
            "ioc_value": "0625595cc9f373c417d09a8fadf6d62f4f678de169c80039c151e1db599e7747",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-08 00:01:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846288": [
        {
            "ioc_value": "9167ebf77d442c08692aff65cdbc99d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846289": [
        {
            "ioc_value": "ffa874d010db98be13b184074f4f857b151a6f22b95503899714804a24799620",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 00:01:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846290": [
        {
            "ioc_value": "020290a1276835c44fc0f4950171e08b85069dcb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 00:01:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846285": [
        {
            "ioc_value": "78617f90f7cdcbd54891c1db1ef15ccb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 00:01:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846286": [
        {
            "ioc_value": "047736a92aa5bbb3eb3f173d99effbd83e595e5d24064c2ac3a5b9fef5275ff2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846287": [
        {
            "ioc_value": "4b25c2dda4400b084eab7d73e6fb49eef2d3514c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846282": [
        {
            "ioc_value": "20d1adb10b96e85874d6dceab96918da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846283": [
        {
            "ioc_value": "307bf7df1df445947a15b7fc5374688b8b6940dd0f4584bae712b2b044c3372c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 00:01:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846284": [
        {
            "ioc_value": "e52dfd3d86947cd126ddea8fba61adcc91078bdc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-08 00:01:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846279": [
        {
            "ioc_value": "55bc609cf12b4db41c6f2adcc6496769",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846280": [
        {
            "ioc_value": "823b729ba0b96fd4d8c71db1e4a22fa0063eeca6cf6f711846b45f31af1f9ad4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846281": [
        {
            "ioc_value": "a93b0d561961bcb3f142d8c56c1951ce7d720dd6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846276": [
        {
            "ioc_value": "77ef3956571c199697945e44f76cd308",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846277": [
        {
            "ioc_value": "9031505a66d8e83a7d04cbb1054a8988731505ffed4a973d9e36fe0d634f0cd4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846278": [
        {
            "ioc_value": "f0fb02b95072529192e9999cfdf59fe54c652100",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846273": [
        {
            "ioc_value": "31c7a4892a28121cff9b4f98f97a507f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846274": [
        {
            "ioc_value": "bdc73b726aa57f248d2e79aed4e4130d6eb0a87b766bdb22b396911dc374105a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846275": [
        {
            "ioc_value": "c76e9b5f06dc08f7a800761d8f17bd82afe83edc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846269": [
        {
            "ioc_value": "51f25d3bb742483a9f90dc59dd7cd49b2e8dd768",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846270": [
        {
            "ioc_value": "1491af89583872f964267808da1128f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846271": [
        {
            "ioc_value": "a742591f7154ecab659896004a6827f7be16bb8d536446cb12af8ca1e07500fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846272": [
        {
            "ioc_value": "6572cf8d1bdb2a50c4a53aad3d897491d4a9bec4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846266": [
        {
            "ioc_value": "7a7723e299a5591b4a45d524a4cf23b096ad16fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-08 00:01:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846267": [
        {
            "ioc_value": "225117fe6244da7cdb75649909b78289",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-08 00:01:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846268": [
        {
            "ioc_value": "17573c0499be1c915e2391300211f8a36cdb6c237c2042e8592c4e46f02986a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-08 00:01:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846263": [
        {
            "ioc_value": "d906cde072f34edb752b66a097b8284300b88a3b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-08 00:01:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846264": [
        {
            "ioc_value": "17c783bb84f17edb43a538f0dfbeb1e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-08 00:01:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846265": [
        {
            "ioc_value": "78ffc2b5dd00a7bce12ea7bb87c97c94175b595e7ea2b35f9605f943a5dbcf3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-08 00:01:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846260": [
        {
            "ioc_value": "fd0a4317f389f68aaa65fce71109a470043bdbaa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-08 00:01:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846261": [
        {
            "ioc_value": "ecb499448f45703e58fb73775ae80825",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-08 00:01:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846262": [
        {
            "ioc_value": "79a00dc593777f03f4de27e234f44908a91d600766f34b40f59aa2100000dd09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.arkei_stealer",
            "malware_alias": "ArkeiStealer",
            "malware_printable": "Arkei Stealer",
            "first_seen_utc": "2026-07-08 00:01:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846257": [
        {
            "ioc_value": "56473ac5c1ea3203fcfd2fd18e7287d46ecab638",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-08 00:01:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846258": [
        {
            "ioc_value": "09765552f6adc879d572921e394723f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-08 00:01:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846259": [
        {
            "ioc_value": "cb46e59ba30a58775e80a51f23232e30b35c7eb11f8c5eb20015c2404e68ce88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-08 00:01:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846255": [
        {
            "ioc_value": "eceee0d92a65b8b01f7bfb352e3ea087",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-08 00:01:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846256": [
        {
            "ioc_value": "285af50a0e10e07d112f0abb8877a13cd20d29780690160d0040b5fc35a6cc71",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-08 00:01:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846252": [
        {
            "ioc_value": "4153a9d749c374ad789884e9144dde8e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 00:01:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846253": [
        {
            "ioc_value": "dbccfce8d0ebc5ea70b601130d6453cb31db779c002149c9f2a3c6b0236fe8af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-08 00:01:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846254": [
        {
            "ioc_value": "6b2b9b4788ec5ff23069329f28e10faf4518f7f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-08 00:01:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846249": [
        {
            "ioc_value": "32f90f34610520f8dbded26e5e7494c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 00:01:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846250": [
        {
            "ioc_value": "dbb4d3b8bec4b2fbe8aee5c5b76ed750ab81ea346e18c31da77f04874b1017ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 00:01:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846251": [
        {
            "ioc_value": "24e64cc44e52de3fa1ecd39b256a0f9671c60a30",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 00:01:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846246": [
        {
            "ioc_value": "379717f664cc19a3f295a11e189dd386",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-08 00:01:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846247": [
        {
            "ioc_value": "0fa2579031a74d6ac6477c036f2a53695ab92d907fd0220c48bba31dffa976da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 00:01:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846248": [
        {
            "ioc_value": "293e8c07c7a74d66703573907f0562600a782596",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-08 00:01:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846243": [
        {
            "ioc_value": "436d5a5d5c35f34cdb4f6be2c4ff30dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-08 00:01:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846244": [
        {
            "ioc_value": "aa4d642727be33ecd94acb8a24e546aeed325f08367333bb8974f5e54d99e715",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-08 00:01:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846245": [
        {
            "ioc_value": "12dec3f8af35e88e3cb377218572081cd619590f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-08 00:01:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846241": [
        {
            "ioc_value": "ed1427c973e2c1fecdf2536e270fec2af98e31e229fbdae6664b0e23af321f9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-08 00:01:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846242": [
        {
            "ioc_value": "d4dd068388524efa1d301f43ec2de47c7fe9a6f0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-08 00:01:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1846240": [
        {
            "ioc_value": "http://160.20.109.75/d19ca32cb5a444ac8b87.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-07 23:55:49",
            "last_seen_utc": "2026-07-14 12:32:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8b7537c6624998423c0dc5e63d133a4380df59ff64a623f35f2f669e63061c52/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846237": [
        {
            "ioc_value": "185.92.190.183:8898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 23:46:32",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846238": [
        {
            "ioc_value": "185.92.190.184:8898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 23:46:32",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846239": [
        {
            "ioc_value": "185.92.190.186:8898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 23:46:32",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846236": [
        {
            "ioc_value": "clkdnxzu.bet1yekbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 23:45:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846235": [
        {
            "ioc_value": "h1b2r6fo.oris303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 23:38:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846234": [
        {
            "ioc_value": "75rw2mk7.1xvip.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 23:35:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846233": [
        {
            "ioc_value": "sgnfvyd.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 23:14:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846232": [
        {
            "ioc_value": "wrvvxap.1pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 23:09:42",
            "last_seen_utc": "2026-07-10 11:23:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846229": [
        {
            "ioc_value": "172.111.169.69:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 22:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846228": [
        {
            "ioc_value": "mezqmtx.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:49:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846227": [
        {
            "ioc_value": "exwrvqwl.bet1yek1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846225": [
        {
            "ioc_value": "jqmqdeg.jet1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:39:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846224": [
        {
            "ioc_value": "nfrzbza.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:29:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846223": [
        {
            "ioc_value": "jswhrpk.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:22:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846222": [
        {
            "ioc_value": "pd9l19qk.milliardbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:20:14",
            "last_seen_utc": "2026-07-07 22:20:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846221": [
        {
            "ioc_value": "darkstar5core.mivonflowsrv.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:17:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846220": [
        {
            "ioc_value": "0u9ewjjw.milioner.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:09:41",
            "last_seen_utc": "2026-07-13 11:17:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846219": [
        {
            "ioc_value": "tmgyscx.jet1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 22:09:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846213": [
        {
            "ioc_value": "gbrdqbb.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:49:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846212": [
        {
            "ioc_value": "iwmdkxq.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:47:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846211": [
        {
            "ioc_value": "ookksol.zeebline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:42:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846210": [
        {
            "ioc_value": "yeduwgyh.backlinkyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:41:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846208": [
        {
            "ioc_value": "62.60.226.68:24042",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 21:35:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846207": [
        {
            "ioc_value": "hgkhvmh.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:19:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846206": [
        {
            "ioc_value": "gnbodqo.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:09:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846205": [
        {
            "ioc_value": "8.210.74.218:5868",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-07 21:09:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846204": [
        {
            "ioc_value": "kaloed.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 21:08:00",
            "last_seen_utc": "2026-07-08 12:58:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846203": [
        {
            "ioc_value": "qmcbnya.mellbeet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 21:07:20",
            "last_seen_utc": "2026-07-13 11:20:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846200": [
        {
            "ioc_value": "178.173.247.121:1982",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 20:31:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d6156646c286071b94fb2d75089974912c1eeb8b83457a24d346c397794043c/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846199": [
        {
            "ioc_value": "ajdixpjp.1xforward.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 20:31:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846198": [
        {
            "ioc_value": "npvnwrv.jetbet90iran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 20:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846197": [
        {
            "ioc_value": "jetbet90iran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 20:11:45",
            "last_seen_utc": "2026-07-07 20:12:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846196": [
        {
            "ioc_value": "safeimagehub.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 20:06:34",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846195": [
        {
            "ioc_value": "8djyx8g3.mellbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 20:05:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846193": [
        {
            "ioc_value": "89.106.83.80:1202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:45:56",
            "last_seen_utc": "2026-08-07 08:46:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846192": [
        {
            "ioc_value": "89.106.83.74:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:45:55",
            "last_seen_utc": "2026-08-07 08:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846191": [
        {
            "ioc_value": "8.133.197.201:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-07 19:45:48",
            "last_seen_utc": "2026-08-10 18:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846190": [
        {
            "ioc_value": "62.192.173.164:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-07 19:45:41",
            "last_seen_utc": "2026-08-15 18:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846189": [
        {
            "ioc_value": "213.165.42.57:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 19:44:33",
            "last_seen_utc": "2026-08-07 08:44:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846188": [
        {
            "ioc_value": "198.135.54.39:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:44:18",
            "last_seen_utc": "2026-08-07 08:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846187": [
        {
            "ioc_value": "185.115.164.60:9292",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:44:03",
            "last_seen_utc": "2026-08-07 08:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846185": [
        {
            "ioc_value": "185.115.164.59:60729",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:44:00",
            "last_seen_utc": "2026-08-06 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846186": [
        {
            "ioc_value": "185.115.164.59:62538",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:44:00",
            "last_seen_utc": "2026-08-06 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846184": [
        {
            "ioc_value": "185.115.164.59:11832",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:43:59",
            "last_seen_utc": "2026-08-06 18:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846183": [
        {
            "ioc_value": "178.73.192.3:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-07 19:43:55",
            "last_seen_utc": "2026-08-08 08:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846182": [
        {
            "ioc_value": "172.93.144.150:8580",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-07 19:43:50",
            "last_seen_utc": "2026-08-20 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846181": [
        {
            "ioc_value": "155.103.69.30:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:43:37",
            "last_seen_utc": "2026-08-07 18:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846180": [
        {
            "ioc_value": "154.82.93.89:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 19:43:36",
            "last_seen_utc": "2026-08-07 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846179": [
        {
            "ioc_value": "144.172.88.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-07-07 19:43:29",
            "last_seen_utc": "2026-08-13 18:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846178": [
        {
            "ioc_value": "135.181.182.96:8930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:43:24",
            "last_seen_utc": "2026-08-07 08:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846177": [
        {
            "ioc_value": "128.90.112.249:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:43:21",
            "last_seen_utc": "2026-08-07 08:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846176": [
        {
            "ioc_value": "103.11.41.20:64567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 19:43:09",
            "last_seen_utc": "2026-08-07 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846175": [
        {
            "ioc_value": "rmhtxvz.jet90betyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 19:17:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846174": [
        {
            "ioc_value": "jet90betyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 19:16:17",
            "last_seen_utc": "2026-07-07 19:17:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846154": [
        {
            "ioc_value": "mqp8iw5d.jetshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 18:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846152": [
        {
            "ioc_value": "h9qlti2y.marjaevakil.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 18:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846150": [
        {
            "ioc_value": "91.92.43.51:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-07 18:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NetSupport",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846149": [
        {
            "ioc_value": "oznubofc.backlinkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 18:31:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846148": [
        {
            "ioc_value": "192.229.87.194:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-07 18:25:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846147": [
        {
            "ioc_value": "scawwaq.jet90betiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 18:22:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846145": [
        {
            "ioc_value": "9qdbp5gv.bet90forward.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 18:02:24",
            "last_seen_utc": "2026-07-13 15:40:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846137": [
        {
            "ioc_value": "ffedpfb.jet90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 17:26:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846136": [
        {
            "ioc_value": "81.90.31.12:9438",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 17:26:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a75c6043cb8acb5d73ee6608373e56e376f158585643bad939f04e02bb096ab9/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846135": [
        {
            "ioc_value": "107.175.148.68:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 17:26:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b82f9e8db8498f52fe986a31acc6ec7ba2de38c4c7a1aa69f043f577497d87e0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846134": [
        {
            "ioc_value": "ywpwwxjc.ace90bet1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 17:25:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846132": [
        {
            "ioc_value": "107.173.143.20:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 17:21:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4e9a6d2c5130f2149fa5a957a23db083f2e864579f02bbe8a6a8fdee65a60894/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846130": [
        {
            "ioc_value": "46.183.217.106:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 17:06:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4e23244b490a4ca01892a76cb52f6caad68d117a9099c39f3959cdc1476eedd7/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846129": [
        {
            "ioc_value": "https://95.217.245.14",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 16:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1bb2771002bf8240e34e8284048bfc1db8dd7cdade7a7afb4a2cfbe02b1a9749/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846128": [
        {
            "ioc_value": "http://hatcae.xyz:4538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-07 16:41:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c0b9744e08479b9f613ddf34e88d6b57cc385c63ca242d192115b9ea93d0ec2e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846127": [
        {
            "ioc_value": "ezrqiew.jet90bet1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:33:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846126": [
        {
            "ioc_value": "jet90bet1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:29:31",
            "last_seen_utc": "2026-07-07 16:30:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846125": [
        {
            "ioc_value": "iixryzos.1xyekbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:23:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846124": [
        {
            "ioc_value": "zipyerx.jet303.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:20:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846120": [
        {
            "ioc_value": "fhwyunu.jet1bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:10:09",
            "last_seen_utc": "2026-07-07 22:39:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846119": [
        {
            "ioc_value": "3qian795.bet359.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:04:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846118": [
        {
            "ioc_value": "k78134om.bet359.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 16:01:14",
            "last_seen_utc": "2026-07-07 16:01:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846113": [
        {
            "ioc_value": "hcqkjox.zeebline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 15:16:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846108": [
        {
            "ioc_value": "vilhvypu.1xborobet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 15:06:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846106": [
        {
            "ioc_value": "bsobxnv.bunos.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 15:04:59",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846105": [
        {
            "ioc_value": "204.10.160.254:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 14:46:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/319b75ccfd07cc7aaed69cd1e1363846480ef7b8ee532f0cc13e7631c1bfae9a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846104": [
        {
            "ioc_value": "172.245.244.91:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 14:46:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cfbed85c7d61b9127e13610df2e9cf2c2502b137ea36c8c4b6a9497869d0310f/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846103": [
        {
            "ioc_value": "198.135.54.25:3650",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 14:40:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbf066004fdcede3002264aed5e3f1c2c64d9e8caf4392fbfbfb831c709066d2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846101": [
        {
            "ioc_value": "microsft-auth.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.coffee_loader",
            "malware_alias": null,
            "malware_printable": "CoffeeLoader",
            "first_seen_utc": "2026-07-07 14:21:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3715362196b8842d4413cd14a3ee6f7d2b1c1ce22adf17803c6af809a72a7d4d/",
            "tags": "CoffeeLoader,MSDuckStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846102": [
        {
            "ioc_value": "cdn-telemetry-relaynn.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.coffee_loader",
            "malware_alias": null,
            "malware_printable": "CoffeeLoader",
            "first_seen_utc": "2026-07-07 14:21:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3715362196b8842d4413cd14a3ee6f7d2b1c1ce22adf17803c6af809a72a7d4d/",
            "tags": "CoffeeLoader,MSDuckStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846100": [
        {
            "ioc_value": "https://microsft-auth.duckdns.org/api/v2/beacon",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.coffee_loader",
            "malware_alias": null,
            "malware_printable": "CoffeeLoader",
            "first_seen_utc": "2026-07-07 14:21:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3715362196b8842d4413cd14a3ee6f7d2b1c1ce22adf17803c6af809a72a7d4d/",
            "tags": "CoffeeLoader,MSDuckStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846099": [
        {
            "ioc_value": "currentpi021.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 14:20:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bf640194e6322cfca878433e2fd1bbf64c646367bbcdcbf2f13c3c495d061ff3/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846096": [
        {
            "ioc_value": "http://pounde.xyz:4190",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-07 14:16:06",
            "last_seen_utc": "2026-08-24 21:21:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a1c9ec4c4ed649c84c246f58b456e367cb4240746e48098c672dafbf7aaeb7bb/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846095": [
        {
            "ioc_value": "xdkynlm.bethouse.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 14:11:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846094": [
        {
            "ioc_value": "103.27.157.251:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-07 14:10:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2bc9d463d23351e64d26a329431c8de0077d4318f7d907c64d7122e207caab12/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846088": [
        {
            "ioc_value": "bethouse.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 14:09:26",
            "last_seen_utc": "2026-07-07 14:10:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846087": [
        {
            "ioc_value": "jpauxzfd.1xforward.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 14:06:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846083": [
        {
            "ioc_value": "c50tvp96.bet1yekbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 14:02:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846082": [
        {
            "ioc_value": "qcoggpa.betcrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 14:01:35",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846080": [
        {
            "ioc_value": "qqtldjhf.1xforward.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 13:58:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846078": [
        {
            "ioc_value": "vkgfakco.yan303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 13:47:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846077": [
        {
            "ioc_value": "opklh5i1.catsandcarp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 13:36:46",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846076": [
        {
            "ioc_value": "sourcingallproductsworldwide.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 13:35:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d397762082865418e899e1e3efb0d14b0d43e5b62fedf65427f3cfb830f842bb/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846075": [
        {
            "ioc_value": "az1cv6zs.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 13:35:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846073": [
        {
            "ioc_value": "https://tur.realmadridiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 13:26:57",
            "last_seen_utc": "2026-07-07 21:26:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846074": [
        {
            "ioc_value": "tur.realmadridiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 13:26:57",
            "last_seen_utc": "2026-07-07 21:26:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846071": [
        {
            "ioc_value": "https://tur.jurangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 13:26:46",
            "last_seen_utc": "2026-07-07 21:26:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846072": [
        {
            "ioc_value": "tur.jurangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 13:26:46",
            "last_seen_utc": "2026-07-07 21:26:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846070": [
        {
            "ioc_value": "oavxdiz.bet1xboro.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 13:08:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846065": [
        {
            "ioc_value": "reservphotoinstaynow.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 12:22:30",
            "last_seen_utc": "2026-08-12 10:16:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846062": [
        {
            "ioc_value": "hostreservation-reports.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 12:22:29",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846063": [
        {
            "ioc_value": "lonajkuvbng.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 12:22:29",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846064": [
        {
            "ioc_value": "reservinfoaboutreserv.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 12:22:29",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846061": [
        {
            "ioc_value": "ftp.orangesac.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 12:21:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a724beb4866c6b713df91a8a353980a36cfa81a122be186e4eb6043f07449e2e/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846060": [
        {
            "ioc_value": "194.116.236.223:1717",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 12:20:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/18e524fb9be61b8e8408eae149c3512584c3185bcc7d4ba77bcf591edf4b8612/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846059": [
        {
            "ioc_value": "31.40.204.237:3322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 12:20:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a724beb4866c6b713df91a8a353980a36cfa81a122be186e4eb6043f07449e2e/",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846058": [
        {
            "ioc_value": "tdyqptv.bet1betyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 12:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846039": [
        {
            "ioc_value": "138.197.155.246:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 12:01:57",
            "last_seen_utc": "2026-07-07 12:31:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846054": [
        {
            "ioc_value": "ipapoker.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 12:01:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Clickfix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846056": [
        {
            "ioc_value": "j0g2ia0g.bet1yek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 12:00:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846055": [
        {
            "ioc_value": "bet1yek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 12:00:26",
            "last_seen_utc": "2026-07-07 12:00:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846053": [
        {
            "ioc_value": "107.175.209.169:2022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 11:48:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3e1e1424b3ca38fb25c0b40dd361f3044c6b9e3f148121b79762a3048e71fb78/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846052": [
        {
            "ioc_value": "92.243.66.59:8448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 11:47:17",
            "last_seen_utc": "2026-08-07 18:47:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846051": [
        {
            "ioc_value": "68.64.178.130:1443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 11:47:12",
            "last_seen_utc": "2026-08-08 14:47:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846050": [
        {
            "ioc_value": "47.236.40.28:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 11:47:08",
            "last_seen_utc": "2026-08-07 18:47:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846049": [
        {
            "ioc_value": "348787241.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 11:43:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dac6dc63816b4c79f0f3544c01c635fea731bfa5d12bd1d143409a3b5968e28b/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846048": [
        {
            "ioc_value": "151.241.154.172:21942",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 11:43:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dac6dc63816b4c79f0f3544c01c635fea731bfa5d12bd1d143409a3b5968e28b/",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846047": [
        {
            "ioc_value": "cfimotpa.site-enfejar-pooyan-mokhtari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 11:42:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846045": [
        {
            "ioc_value": "spacaex.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vipkeylogger",
            "malware_alias": null,
            "malware_printable": "VIP Keylogger",
            "first_seen_utc": "2026-07-07 11:41:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/05b0c6e205850a67405800e0c060f3c15065c468c39df61e58d91475217100e4/",
            "tags": "VipKeyLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846044": [
        {
            "ioc_value": "5.230.201.63:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-07 11:34:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13ef5e06af68d64c5ffc00bf71e6f17543a997f40063095212ca7f20b7751ee9/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846043": [
        {
            "ioc_value": "lxrrxl.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-07 11:34:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13ef5e06af68d64c5ffc00bf71e6f17543a997f40063095212ca7f20b7751ee9/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846042": [
        {
            "ioc_value": "82.25.175.122:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-07 11:30:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b96de257d26532ce1a6b799ace74e9038d3c4011c28d6f65fc67f5ee07214296/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846041": [
        {
            "ioc_value": "mstscapps.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-07 11:30:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b96de257d26532ce1a6b799ace74e9038d3c4011c28d6f65fc67f5ee07214296/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846040": [
        {
            "ioc_value": "thrillermotion.4nmn.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 11:25:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3e1e1424b3ca38fb25c0b40dd361f3044c6b9e3f148121b79762a3048e71fb78/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846038": [
        {
            "ioc_value": "ftp.acellemez.hu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:24:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7aa6255603ca2d37d57047dece38cbd45238f68bbadbb8b7df6ea54d9b75a179/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846037": [
        {
            "ioc_value": "ftp.3dsportsgins.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:21:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c8b7e7e804ba2d898b57f696420da6f06b16555ab2a1b97813291733d6d223b6/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846035": [
        {
            "ioc_value": "207.180.29.85:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 11:20:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/58a9e5ec958affd7c982bbe97499f457241c53ad3aa087d32fc862f4c8c96dcb/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846036": [
        {
            "ioc_value": "46.151.182.209:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 11:20:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/11006d4f7a6b1d1dd64f3fdaeb7a79a34373cdb2dc99755e7a9dfafc048d31a8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846033": [
        {
            "ioc_value": "198.135.48.206:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 11:20:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/46cef6b081770915755e1e77f1070968fa1994aae307eefc519341a640f062b6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846034": [
        {
            "ioc_value": "207.180.29.217:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 11:20:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f3db3ac8ed48e43372d8fe7988a43b33b859dc324c882e1c74f0e070a7a82a13/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846032": [
        {
            "ioc_value": "ftp.dankely.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:20:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7ca82d62fb1dd26d19b61c9101229234d165dc22a513e0709d57afd7801dbfec/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846031": [
        {
            "ioc_value": "ftp.enogcaen-br.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:18:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/20234a467ae069dd628b17fb8eb07eedc56a6fc7f4912ba48350e582b5f03459/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846030": [
        {
            "ioc_value": "ftp.telewatte-pe.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:17:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/721ec5563732b2e597e045135bfa725d146ecda9ca01ef12a61e902eb7ce0121/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846029": [
        {
            "ioc_value": "ftp.hivimer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:16:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f300acb388f24f7a14a4303504490649ec3e1b66632671d08513aa10daea1bcf/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846028": [
        {
            "ioc_value": "ftp.avion.com.sg",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:16:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846027": [
        {
            "ioc_value": "ftp.vilimorin.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-07 11:15:55",
            "last_seen_utc": "2026-08-04 12:57:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d73c160b51f2066fe90dc21a149400093793a2d2226e8077bf97510dcc0a7a2/",
            "tags": "AgentTesla",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846026": [
        {
            "ioc_value": "utuyuea.backlinkyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 11:15:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846025": [
        {
            "ioc_value": "backlinkyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 11:15:03",
            "last_seen_utc": "2026-07-07 21:39:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846024": [
        {
            "ioc_value": "kaloed.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 11:12:17",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846020": [
        {
            "ioc_value": "vert-1k.vortex-sys.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 11:07:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846019": [
        {
            "ioc_value": "138.197.155.246:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 11:03:12",
            "last_seen_utc": "2026-07-07 13:10:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846016": [
        {
            "ioc_value": "fullcrypters.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-07 10:56:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/url/33043c329463da0349b65bf25abc948f7933b07fa5db5b119dedf7514344c3e9",
            "tags": "amatera,cracked-games,crypter,fullcrypters,renpy",
            "anonymous": 0,
            "reporter": "antimalwares"
        }
    ],
    "1846017": [
        {
            "ioc_value": "159.203.35.164:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 10:56:18",
            "last_seen_utc": "2026-07-07 11:03:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1846018": [
        {
            "ioc_value": "94.154.43.42:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-07 10:56:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1846014": [
        {
            "ioc_value": "https://hat.jurangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 10:28:00",
            "last_seen_utc": "2026-07-07 12:26:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846015": [
        {
            "ioc_value": "hat.jurangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-07 10:28:00",
            "last_seen_utc": "2026-07-07 12:26:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846013": [
        {
            "ioc_value": "qowlvqc.backlinkbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 10:25:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846012": [
        {
            "ioc_value": "rlmjgwi.appmegapari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 10:21:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1846010": [
        {
            "ioc_value": "185.149.24.6:2406",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 10:15:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846008": [
        {
            "ioc_value": "uaat6cni.bet1yek1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 10:01:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1846004": [
        {
            "ioc_value": "e365aac901114d3db00d42b59e56a037-cn-hangzhou.alicloudapi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 09:46:15",
            "last_seen_utc": "2026-07-07 18:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846003": [
        {
            "ioc_value": "93.152.224.44:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-07 09:46:09",
            "last_seen_utc": "2026-09-01 02:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846002": [
        {
            "ioc_value": "91.92.33.250:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-07 09:46:08",
            "last_seen_utc": "2026-09-01 02:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846001": [
        {
            "ioc_value": "89.106.83.79:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 09:46:04",
            "last_seen_utc": "2026-08-14 08:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1846000": [
        {
            "ioc_value": "69.166.206.151:7022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 09:45:52",
            "last_seen_utc": "2026-08-06 18:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845999": [
        {
            "ioc_value": "209.54.103.155:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 09:44:33",
            "last_seen_utc": "2026-08-10 18:44:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845998": [
        {
            "ioc_value": "188.191.96.216:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-07 09:44:13",
            "last_seen_utc": "2026-08-07 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845997": [
        {
            "ioc_value": "155.103.69.30:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 09:43:38",
            "last_seen_utc": "2026-08-06 08:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845996": [
        {
            "ioc_value": "103.11.41.10:7145",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 09:43:07",
            "last_seen_utc": "2026-08-06 18:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845995": [
        {
            "ioc_value": "nintvncm.rayegan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 09:42:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845979": [
        {
            "ioc_value": "94.154.43.12:2327",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-07 09:42:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,DDoSAgent",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1845985": [
        {
            "ioc_value": "157.245.59.180:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 09:42:02",
            "last_seen_utc": "2026-07-07 13:34:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845986": [
        {
            "ioc_value": "http://209.127.36.71:2938/juche/bongyeo/chongsang",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 09:42:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "chollima,hvnc,kyracs,naenara,rat,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845987": [
        {
            "ioc_value": "http://209.127.36.71:2938/juche/bongyeo/background/background.png",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 09:42:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "chollima,hvnc,kyracs,naenara,rat,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845988": [
        {
            "ioc_value": "159.203.35.164:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 09:42:00",
            "last_seen_utc": "2026-07-07 09:11:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845989": [
        {
            "ioc_value": "209.127.36.71:2938",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 09:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "chollima,hvnc,kyracs,naenara",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845990": [
        {
            "ioc_value": "https://mdsearch.xyz/plg",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 09:41:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845991": [
        {
            "ioc_value": "https://mdsearch.xyz/usa",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 09:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845994": [
        {
            "ioc_value": "rtzixna.site-shartbandi.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 09:18:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845993": [
        {
            "ioc_value": "site-shartbandi.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 09:17:55",
            "last_seen_utc": "2026-07-07 09:18:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845992": [
        {
            "ioc_value": "authorization-cdn-press-enter.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 09:12:34",
            "last_seen_utc": "2026-07-10 03:53:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845984": [
        {
            "ioc_value": "vgip5uas.1xgame.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 08:35:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845983": [
        {
            "ioc_value": "8omeu821.1xpin.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 08:34:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845981": [
        {
            "ioc_value": "dbfzqcjz.site-enfejar-hazarat.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 08:33:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845977": [
        {
            "ioc_value": "qnjanmb.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 08:27:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845976": [
        {
            "ioc_value": "107.175.89.136:9009",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-07 08:24:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "nc,XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1845975": [
        {
            "ioc_value": "wrnnouy.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 08:22:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845952": [
        {
            "ioc_value": "138.197.155.246:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 08:21:27",
            "last_seen_utc": "2026-07-07 10:42:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845954": [
        {
            "ioc_value": "159.203.35.164:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 08:21:27",
            "last_seen_utc": "2026-07-07 13:41:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845957": [
        {
            "ioc_value": "180.131.145.13:2020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.crimson",
            "malware_alias": "SEEDOOR,Scarimson",
            "malware_printable": "Crimson RAT",
            "first_seen_utc": "2026-07-07 08:21:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "APT36,C2,CrimsonRat",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1845963": [
        {
            "ioc_value": "leafot.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-07 08:21:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Remus",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845964": [
        {
            "ioc_value": "sweetvp.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-07 08:21:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Remus",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845973": [
        {
            "ioc_value": "3.29.91.108:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 08:21:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,CobaltStrike",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1845967": [
        {
            "ioc_value": "134.175.8.102:10050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 08:21:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,CobaltStrike",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1845972": [
        {
            "ioc_value": "118.99.3.219:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 08:21:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,CobaltStrike",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1845974": [
        {
            "ioc_value": "8.141.123.117:50001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-07 08:21:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,CobaltStrike",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1845969": [
        {
            "ioc_value": "118.24.77.38:10001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-07 08:05:08",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845966": [
        {
            "ioc_value": "bwvastni.bet1xyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 08:00:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845962": [
        {
            "ioc_value": "authorization-cdn-press-enter.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 07:57:16",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845959": [
        {
            "ioc_value": "tjv82ulc.bet1xindia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 07:49:23",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845956": [
        {
            "ioc_value": "qeiadax1.bet1xegypt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 07:42:22",
            "last_seen_utc": "2026-07-11 01:13:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845955": [
        {
            "ioc_value": "iemjjbmd.prozhe.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 07:41:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845953": [
        {
            "ioc_value": "bezwhhi.ac90bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 07:28:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845948": [
        {
            "ioc_value": "belxgvc.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 06:34:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845947": [
        {
            "ioc_value": "biesmanscars.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-07 06:30:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/882b0855a5b578a31bd03b6a47351d29ad9eb819d4c2c63408c3931a83254c7a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845946": [
        {
            "ioc_value": "64.95.10.37:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845934": [
        {
            "ioc_value": "1yiqsu0s4geu2xc.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845935": [
        {
            "ioc_value": "53bbwqsrdg3rxni.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845936": [
        {
            "ioc_value": "855e6v1la8ngbep.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845937": [
        {
            "ioc_value": "b9yzartkj9dd53v.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845938": [
        {
            "ioc_value": "fdskeoljs92b0t1.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845939": [
        {
            "ioc_value": "lkf9soncx2cx8ae.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845940": [
        {
            "ioc_value": "om8d1tx6uuvmm0m.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845941": [
        {
            "ioc_value": "q2e2f5xuir4qub8.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845942": [
        {
            "ioc_value": "sq1y5pp53vljhqs.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845943": [
        {
            "ioc_value": "vsv1ftyzzn48uhz.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": "2026-07-07 06:27:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845944": [
        {
            "ioc_value": "ywomjqqy8nu5p65.top1yiqsu0s4geu2xc.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845945": [
        {
            "ioc_value": "ywomjqqy8nu5p65.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-07-07 06:27:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a23a09bd0f85a2a356b0048f9cf192f4e04560186057e07b60c461465d56d932/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845932": [
        {
            "ioc_value": "runbattle.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 06:17:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845933": [
        {
            "ioc_value": "ironsize.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 06:17:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845931": [
        {
            "ioc_value": "5k9iblva.ace90bet1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 05:45:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845930": [
        {
            "ioc_value": "ace90bet1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 05:42:33",
            "last_seen_utc": "2026-07-07 17:20:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845929": [
        {
            "ioc_value": "tdyyhcqa.hi-lo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 05:40:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845928": [
        {
            "ioc_value": "bhmsnwx.sargarminovin.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 05:38:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845927": [
        {
            "ioc_value": "38.180.204.13:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 05:31:29",
            "last_seen_utc": "2026-07-07 20:17:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4f87b1d06d435b14a0cfa45cae09a78af86b52346bf0e056937aec16e4ff8c9e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845926": [
        {
            "ioc_value": "http://38.180.204.13/ryoheina/mort.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-07 05:31:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4f87b1d06d435b14a0cfa45cae09a78af86b52346bf0e056937aec16e4ff8c9e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845707": [
        {
            "ioc_value": "elxxvvx.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-07 05:23:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845713": [
        {
            "ioc_value": "peedprexz.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-07 05:23:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845714": [
        {
            "ioc_value": "multisavcx.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-07-07 05:23:07",
            "last_seen_utc": "2026-07-06 18:16:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845822": [
        {
            "ioc_value": "http://185.246.223.71/webdav",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.t_cmd",
            "malware_alias": "t_cmd",
            "malware_printable": "T-Cmd",
            "first_seen_utc": "2026-07-07 05:21:40",
            "last_seen_utc": "2026-07-28 16:59:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,FakeCF",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845824": [
        {
            "ioc_value": "https://drive.google.com/uc?export=download&id=1CjSD0JhJj42n2yygv_75tmpvl6Uqic4o",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 05:21:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845825": [
        {
            "ioc_value": "https://drive.google.com/uc?export=download&id=1V1G5Jk8mfKArijX1082xQoM4b7l-DF4x",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 05:21:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845830": [
        {
            "ioc_value": "https://activityof.com/datei",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 05:21:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,clickfix,FakeCaptcha,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845831": [
        {
            "ioc_value": "https://bnsbackend.mydevsystems.com/redirect",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 05:21:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,clickfix,FakeCaptcha,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845853": [
        {
            "ioc_value": "www.terrerouge.mg",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-07 05:21:17",
            "last_seen_utc": "2026-08-23 03:19:29",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,FakeCF",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845857": [
        {
            "ioc_value": "pace-draft.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-07 05:21:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845704": [
        {
            "ioc_value": "157.245.59.180:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-07 05:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845924": [
        {
            "ioc_value": "mouvlws.oxiidbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 04:42:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845919": [
        {
            "ioc_value": "aekwtnf.1xyekbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 03:47:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845917": [
        {
            "ioc_value": "b58jef3z.22beet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 03:43:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845915": [
        {
            "ioc_value": "nmsqiavn.enfejar-site.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 03:40:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845914": [
        {
            "ioc_value": "tmm18nfa.1xpin.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 03:34:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845913": [
        {
            "ioc_value": "ll96bzym.salamatyari.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 03:34:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845907": [
        {
            "ioc_value": "www.larmentybadup.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 02:55:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4fdd082603796a0bd9a765ca326fe643e8b4bc62e5fa9d472cadb221c509711/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845906": [
        {
            "ioc_value": "www.larmentybac2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 02:55:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4fdd082603796a0bd9a765ca326fe643e8b4bc62e5fa9d472cadb221c509711/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845905": [
        {
            "ioc_value": "ynteevb.1xvip.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 02:51:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845904": [
        {
            "ioc_value": "137.220.152.149:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-07 02:50:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b8979e31b0e18fd57d4e0a7512e9e0109d68312fd9a5837d62fcb11ace457c2f/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845903": [
        {
            "ioc_value": "wolrdcup2026202620262026.dynuddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-07 02:50:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f6e4a8d17a5d15cc001300ad8373515b8f548c0ab129fe67ef597a59467423f/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845901": [
        {
            "ioc_value": "http://103.80.135.33/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-07 02:45:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845900": [
        {
            "ioc_value": "http://95.40.215.140/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-07 02:45:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845899": [
        {
            "ioc_value": "158.160.75.185:43268",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-07 02:45:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845898": [
        {
            "ioc_value": "185.199.196.150:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-07 02:45:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845897": [
        {
            "ioc_value": "137.220.152.107:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-07 02:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845896": [
        {
            "ioc_value": "133.18.107.191:4440",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-07 02:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845895": [
        {
            "ioc_value": "2.100.178.45:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-07 02:45:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845894": [
        {
            "ioc_value": "194.156.79.16:55615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-07-07 02:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RedLineStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845893": [
        {
            "ioc_value": "216.126.227.38:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-07 02:45:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NetSupport",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845892": [
        {
            "ioc_value": "158.94.210.88:3009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-07 02:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845891": [
        {
            "ioc_value": "216.173.112.69:8833",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-07 02:45:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845890": [
        {
            "ioc_value": "podeayh.1xunitedkingdom.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 02:39:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845888": [
        {
            "ioc_value": "wkmbfrm.1xsaudi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 02:34:54",
            "last_seen_utc": "2026-07-10 22:19:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845887": [
        {
            "ioc_value": "jhq8hqlo.1xforward.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 01:45:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845886": [
        {
            "ioc_value": "1xforward.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 01:41:21",
            "last_seen_utc": "2026-07-07 01:41:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845885": [
        {
            "ioc_value": "oybvqan.1xrussia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 01:40:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845883": [
        {
            "ioc_value": "gexbskxk.beshnoinja.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 01:37:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845882": [
        {
            "ioc_value": "dznbvru.1xqatar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 01:36:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845879": [
        {
            "ioc_value": "hybnjif.1xpin.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 00:42:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845878": [
        {
            "ioc_value": "1xpin.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-07 00:40:03",
            "last_seen_utc": "2026-07-07 00:40:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845876": [
        {
            "ioc_value": "vqyjhmr.1xpin.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 23:47:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845875": [
        {
            "ioc_value": "1xpin.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 23:44:33",
            "last_seen_utc": "2026-07-06 23:44:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845874": [
        {
            "ioc_value": "rxt0h93a.1xforward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 23:42:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845872": [
        {
            "ioc_value": "rugcfdaz.marjaevakil.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 23:37:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845869": [
        {
            "ioc_value": "eqwbbhd.1xborobet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 22:52:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845867": [
        {
            "ioc_value": "ymy16goe.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 22:34:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845866": [
        {
            "ioc_value": "3tloufwg.oris303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 22:33:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845863": [
        {
            "ioc_value": "https://set.jurangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 22:26:44",
            "last_seen_utc": "2026-07-07 09:28:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845864": [
        {
            "ioc_value": "set.jurangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 22:26:44",
            "last_seen_utc": "2026-07-07 09:28:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845833": [
        {
            "ioc_value": "pwsljqp.1xbeet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 21:54:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845832": [
        {
            "ioc_value": "1xbeet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 21:53:41",
            "last_seen_utc": "2026-07-06 21:54:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845829": [
        {
            "ioc_value": "dwpxsmzy.1xforward.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 21:44:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845827": [
        {
            "ioc_value": "ogiforjk.iranmotorplus.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 21:39:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845823": [
        {
            "ioc_value": "217.217.97.75:4445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-06 21:21:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845821": [
        {
            "ioc_value": "http://utiliq.xyz:7673",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-06 21:16:42",
            "last_seen_utc": "2026-07-30 10:31:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78aa82ebfae6c6ea690fad27bda96e3de794a5d8b26cb0d25f51b2cf045cbcde/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845809": [
        {
            "ioc_value": "ryovgcz.1xbeet.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 20:59:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845808": [
        {
            "ioc_value": "1xbeet.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 20:58:16",
            "last_seen_utc": "2026-07-06 20:58:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845807": [
        {
            "ioc_value": "sfdvbdy.1xbeet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 20:07:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845803": [
        {
            "ioc_value": "217.60.97.2:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-06 19:45:03",
            "last_seen_utc": "2026-09-01 02:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845802": [
        {
            "ioc_value": "20.204.61.204:22001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:44:23",
            "last_seen_utc": "2026-08-08 18:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845801": [
        {
            "ioc_value": "199.119.137.129:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-06 19:44:19",
            "last_seen_utc": "2026-08-05 18:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845800": [
        {
            "ioc_value": "198.135.50.174:62025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 19:44:17",
            "last_seen_utc": "2026-08-06 08:44:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845799": [
        {
            "ioc_value": "185.115.164.60:56479",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:44:00",
            "last_seen_utc": "2026-08-06 08:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845798": [
        {
            "ioc_value": "185.115.164.59:10761",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:43:58",
            "last_seen_utc": "2026-08-06 08:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845797": [
        {
            "ioc_value": "138.226.236.193:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:43:25",
            "last_seen_utc": "2026-08-07 08:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845796": [
        {
            "ioc_value": "125.104.168.68:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 19:43:21",
            "last_seen_utc": "2026-08-06 08:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845795": [
        {
            "ioc_value": "103.11.41.20:52998",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:43:09",
            "last_seen_utc": "2026-08-06 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845794": [
        {
            "ioc_value": "103.11.41.10:62715",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:43:07",
            "last_seen_utc": "2026-08-05 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845793": [
        {
            "ioc_value": "103.11.41.10:16774",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 19:43:06",
            "last_seen_utc": "2026-08-05 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845792": [
        {
            "ioc_value": "x6ho2kp5.1xcart.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 19:41:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845791": [
        {
            "ioc_value": "voafww1e.1xcart.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 19:39:58",
            "last_seen_utc": "2026-07-06 19:40:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845790": [
        {
            "ioc_value": "efdnssea.honaribash.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 19:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845788": [
        {
            "ioc_value": "vykzqwol.gamefarma.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 19:19:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845786": [
        {
            "ioc_value": "ezqhmvl.1bonus.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 19:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845785": [
        {
            "ioc_value": "ecaqosz.1bonus.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 19:07:28",
            "last_seen_utc": "2026-07-06 19:07:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845783": [
        {
            "ioc_value": "45.225.135.94:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 18:31:09",
            "last_seen_utc": "2026-07-13 20:52:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/793e91eef011ce51c99af960c97490c091bb56b7b85720d4ba8ca420d1f27aec/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845782": [
        {
            "ioc_value": "agkzvfg.1bet1yek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 18:14:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845781": [
        {
            "ioc_value": "gxscmbb.1bet1yek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 18:09:27",
            "last_seen_utc": "2026-07-06 18:09:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845725": [
        {
            "ioc_value": "x41eexzh.1xcart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:41:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845724": [
        {
            "ioc_value": "9hxo1zmj.1xcart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:39:28",
            "last_seen_utc": "2026-07-06 17:39:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845723": [
        {
            "ioc_value": "1m4wielp.1xbtt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:38:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845721": [
        {
            "ioc_value": "1xkf6w16.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845720": [
        {
            "ioc_value": "lfk25ohk.win1bahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:33:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845717": [
        {
            "ioc_value": "https://dra.realmadridiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 17:26:59",
            "last_seen_utc": "2026-07-06 21:26:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845718": [
        {
            "ioc_value": "dra.realmadridiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 17:26:59",
            "last_seen_utc": "2026-07-06 21:26:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845715": [
        {
            "ioc_value": "https://dra.jurangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 17:26:47",
            "last_seen_utc": "2026-07-06 21:26:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845716": [
        {
            "ioc_value": "dra.jurangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 17:26:47",
            "last_seen_utc": "2026-07-06 21:26:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "mp44s1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845712": [
        {
            "ioc_value": "rhgxzyok.fotoiran.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:18:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845710": [
        {
            "ioc_value": "faqgkjb.testmobo.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 17:15:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845708": [
        {
            "ioc_value": "https://5.75.217.106",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 16:45:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/14d6cb9a29e993ce5d69c8ca67ea84a6d71c408c6bccc7f1a3610d4b6b95ae0a/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845706": [
        {
            "ioc_value": "qkwgkjx.seoprof.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 16:18:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845703": [
        {
            "ioc_value": "baxubfe4.1xborobetyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 15:37:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845702": [
        {
            "ioc_value": "uhnbn82p.1xborobetyek.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 15:36:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845700": [
        {
            "ioc_value": "jwngvds.sargarminovin.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 15:23:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845698": [
        {
            "ioc_value": "evzkqyyd.turkeybahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 15:19:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845630": [
        {
            "ioc_value": "106.74.21.237:60105",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-06 15:00:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot,ssh-dropper",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1845696": [
        {
            "ioc_value": "kalashnikovs-001-site1.jtempurl.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.blacknet_rat",
            "malware_alias": null,
            "malware_printable": "BlackNET RAT",
            "first_seen_utc": "2026-07-06 15:00:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b3ad1389f9962206c973c4acefbb32f3c26cbdb884c6f01445deeeb6f9f9f8e9/",
            "tags": "BlackNet,c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1845695": [
        {
            "ioc_value": "27.124.18.166:63016",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-06 14:36:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77e220b261fbfcc539ecab0d3567603ee3e261c02ad1a26c7ce19e513f240a4d/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845694": [
        {
            "ioc_value": "85fb231ecb3fb2c3880b29be30034b86",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845691": [
        {
            "ioc_value": "aded3c60373e26d7e9648cdb78c280de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845692": [
        {
            "ioc_value": "a670b03c1da00ee2c8622fd716085358d7e36ee98c4adafc9bda53eaadd59527",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845693": [
        {
            "ioc_value": "28fb34a8dc7b82c4820891134e6f19941e502dc7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845688": [
        {
            "ioc_value": "e96154e835a8655af64ae2d7ce1256cf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845689": [
        {
            "ioc_value": "25d34c70c29605a0a7ebeeb836e8fcf45ec0ddff29dd0745b844b8ea39d0d9cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845690": [
        {
            "ioc_value": "72ae58765ce3ef8777af4ca8bedeb725ccc4e55d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845685": [
        {
            "ioc_value": "f07826cd8101059cbab00ca5244d70d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845686": [
        {
            "ioc_value": "7c501632cd3830735040964b69d73a5dc315d0422fe3f1012c4b50db58dc0663",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845687": [
        {
            "ioc_value": "47790bec41fccb217b44e81713b0e51db89d4887",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845681": [
        {
            "ioc_value": "c80369f63f57eae5b7574c445093b2f5b1c90c5e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845682": [
        {
            "ioc_value": "1c7f26661343a771c692dee9c2233830",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845683": [
        {
            "ioc_value": "452a92a4ff9639259c0aae08fcb4fe30e93c8843a4cf301b9746e8e6b899bb74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845684": [
        {
            "ioc_value": "5c372345876f52e89d82daa10a778ea6674c7a61",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845678": [
        {
            "ioc_value": "59ac907b206d131077ec0dea4ab35b8c32adee52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845679": [
        {
            "ioc_value": "a6abfeb75c496d2cefb9061ddd992b71",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845680": [
        {
            "ioc_value": "3a69743c2e6248b3cfd9ed4b1f24d411aba3a5dc7cd2b787e23e0a77094bfc19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845675": [
        {
            "ioc_value": "dc45f63319b41252b02079c0d1cf70cb58153cfd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-06 14:30:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845676": [
        {
            "ioc_value": "2db9b397d98c55c8a7be695d747d251c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-06 14:30:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845677": [
        {
            "ioc_value": "9b51c77931a32be41eb1b4919951e063da93bd60dfefe103ba004e8c84c7e6ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845672": [
        {
            "ioc_value": "57cdc5b17c4bf3636d7be3aad05e3a22bbd50f6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845673": [
        {
            "ioc_value": "683852647171ca0de9a0b1f32833f4ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845674": [
        {
            "ioc_value": "7efb9e34f0829837d0b8b8ec33124b2e68c2ee15f1c222afc7c2d4ed985f96d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-06 14:30:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845669": [
        {
            "ioc_value": "c08a1f26daca525632ab3e33aa24b3dbd076ba33",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-06 14:30:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845670": [
        {
            "ioc_value": "9a0e23765cfcdfe7e28c9be6f458c620",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-06 14:30:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845671": [
        {
            "ioc_value": "fa23920dce139f976c8fe2cc7ce5001296429c259cc70f7f79777f69eff021be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845666": [
        {
            "ioc_value": "4babb4ab84d95205b34f869eb87378d9e2b4fc60",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 14:30:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845667": [
        {
            "ioc_value": "7f54e49addcff9e77e9f530287b61559",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 14:30:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845668": [
        {
            "ioc_value": "825aa515a905b7294efc080850e77d8962a1411c6f47468a2ce67a19770bc830",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-06 14:30:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845662": [
        {
            "ioc_value": "b3ad1389f9962206c973c4acefbb32f3c26cbdb884c6f01445deeeb6f9f9f8e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.backnet",
            "malware_alias": null,
            "malware_printable": "BackNet",
            "first_seen_utc": "2026-07-06 14:30:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845663": [
        {
            "ioc_value": "45e25f810c84427f1c778d42a6cd1f6d796917ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.backnet",
            "malware_alias": null,
            "malware_printable": "BackNet",
            "first_seen_utc": "2026-07-06 14:30:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845664": [
        {
            "ioc_value": "f612967f1314ebf94d636fb9dc20e84e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.backnet",
            "malware_alias": null,
            "malware_printable": "BackNet",
            "first_seen_utc": "2026-07-06 14:30:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845665": [
        {
            "ioc_value": "7675d23d748b0f2b60d9c074d6db1e843a69efd541bd96077065d04b5daa5637",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 14:30:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845661": [
        {
            "ioc_value": "67135468d9b43e9a87f9d2f33ef9e361",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 14:30:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845657": [
        {
            "ioc_value": "f63c54193c17199031d7826b5ad0660db4ffb6e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845658": [
        {
            "ioc_value": "5053320a66a5c4989c44a932a8720b7d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845659": [
        {
            "ioc_value": "11265b15cf310d8b0582883d1d0417891f8456f7ab620690fa0ddfd512ff494a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 14:30:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845660": [
        {
            "ioc_value": "2904768aeb8bec47852fe5b064e602dbb8bd90ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 14:30:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845654": [
        {
            "ioc_value": "15f77ec84529bac93e5e400113c146dc2b9a89ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845655": [
        {
            "ioc_value": "88136d0f1895e9e4788e43a3279d9cc3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845656": [
        {
            "ioc_value": "37f7127bcae8388c61432dc2d46b0df36cb33690ebbc5b725b28b33dfb145d4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845651": [
        {
            "ioc_value": "1475659b5d3002a0b49ee774046884d7f218693d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-06 14:30:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845652": [
        {
            "ioc_value": "227a39d09941ac183f45e7b7c0f3cdf4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-06 14:30:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845653": [
        {
            "ioc_value": "e438003e81399afda1a4801bdd3d347a757c2068c4dbbaa99d4f554972c546f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 14:30:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845648": [
        {
            "ioc_value": "00c223afd934049bbd23b9743b57bf4fff852f77",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-06 14:30:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845649": [
        {
            "ioc_value": "6cb178572fe453a83472a18a6b112a33",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-06 14:30:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845650": [
        {
            "ioc_value": "7b3aa1d7625cf510dd111f1d390415de1538dfc011ec79242b44badd6d32b120",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-06 14:30:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845644": [
        {
            "ioc_value": "739daec38ce1a857f5bbe3d199e6c129be79014006afd5da0f53ac84f9483afa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-06 14:30:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845645": [
        {
            "ioc_value": "ff1c77fafb8f58c31df9ea5118ded6091b0c2406",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-06 14:30:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845646": [
        {
            "ioc_value": "26c722dc53ea775a91e105569e6138c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-06 14:30:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845647": [
        {
            "ioc_value": "128f48d4dda439d084c90f283d3bd9293a8d22bd86b9b5e2c57afaf5e487243b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-06 14:30:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845641": [
        {
            "ioc_value": "651a82b426efa1053fd38f2d28617b4324a74787934780d88c64b1cf0638d9cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-06 14:30:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845642": [
        {
            "ioc_value": "bc673bbff3aa61ea4f719aa3630020f6033d9133",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-06 14:30:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845643": [
        {
            "ioc_value": "c2a26a388bbbf3ee700b938de066838b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-06 14:30:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845637": [
        {
            "ioc_value": "6789fbc0c9a2661904231147e500bce0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-06 14:30:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845638": [
        {
            "ioc_value": "56c1f7f57b3ede16315b84735bef589df8c00804d194f726489bb053af9dbf9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845639": [
        {
            "ioc_value": "0e9fcfc6c319439f6681749fa1d0a57023e736e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845640": [
        {
            "ioc_value": "1f349ad4656e91f8d62f497585365b9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 14:30:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845634": [
        {
            "ioc_value": "d1f41d50627a69e02d4f7464beb2f8b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845635": [
        {
            "ioc_value": "afe399f61054f5855796a884b38b4d0977c03a216920980e44d776173ddfea80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-06 14:30:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845636": [
        {
            "ioc_value": "39c5062263296d8a39f3220574b0dcf3d959046c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-06 14:30:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845632": [
        {
            "ioc_value": "80df68273b763bbd74207d708a49c4aae244a6cc85161e2efae0d73f373830a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845633": [
        {
            "ioc_value": "ad383fe7025e956bce4458cbb0106f958489bf9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-06 14:30:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845631": [
        {
            "ioc_value": "numvvvx.oxiidbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 14:28:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845629": [
        {
            "ioc_value": "kjdesss.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 14:14:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1845620": [
        {
            "ioc_value": "fpk81nyo.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 13:38:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845619": [
        {
            "ioc_value": "ntvyplg.jetshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 13:32:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845606": [
        {
            "ioc_value": "159.203.35.164:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-06 13:26:10",
            "last_seen_utc": "2026-07-07 09:41:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845616": [
        {
            "ioc_value": "b58bb405081d7085ce5c988d8a2dcd43565a53d13f67409c4142027230e75cc4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 13:26:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ransomware-loader,unknown",
            "anonymous": 0,
            "reporter": "375py"
        }
    ],
    "1845617": [
        {
            "ioc_value": "1c4afcdf66e9b184ad862e21675ac5280308efb0699b60ac4335e58d4c30ef3e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 13:26:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ransomware-loader,unknown",
            "anonymous": 0,
            "reporter": "375py"
        }
    ],
    "1845618": [
        {
            "ioc_value": "5c7e96390d91746354e55da5ef1517b001e116ff289ac984e9479b7efb04ae5e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 13:26:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ransomware-loader,unknown",
            "anonymous": 0,
            "reporter": "375py"
        }
    ],
    "1845615": [
        {
            "ioc_value": "mvukddsz.turkeybahis.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 13:10:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845607": [
        {
            "ioc_value": "107.175.148.88:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 12:55:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77fcdd4baf28b6e3ef7b47253576d14b36a119a801266b48171d7f7df54bd96e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845605": [
        {
            "ioc_value": "sjnszmy.hi-lo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 12:36:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845604": [
        {
            "ioc_value": "oh0vsizc.vipbahis.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 12:33:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845602": [
        {
            "ioc_value": "56nyefeb.ac90bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 12:32:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845601": [
        {
            "ioc_value": "185.254.96.128:1605",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-06 12:10:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/56c1f7f57b3ede16315b84735bef589df8c00804d194f726489bb053af9dbf9a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845600": [
        {
            "ioc_value": "bguhecd.beshnoinja.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 11:40:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845599": [
        {
            "ioc_value": "nzraw48i.rayegan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 11:37:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845590": [
        {
            "ioc_value": "kjftest.beshnoinja.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 11:03:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845588": [
        {
            "ioc_value": "38.46.218.34:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.vo1d",
            "malware_alias": null,
            "malware_printable": "vo1d",
            "first_seen_utc": "2026-07-06 10:58:18",
            "last_seen_utc": "2026-09-01 03:10:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "loader,Vo1d",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845586": [
        {
            "ioc_value": "nodtrbhz.poundbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 10:11:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845583": [
        {
            "ioc_value": "jshreqm.arayeshkhas.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 10:05:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845577": [
        {
            "ioc_value": "xml.alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845578": [
        {
            "ioc_value": "xml.emissaofiscal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845579": [
        {
            "ioc_value": "xml.nfe-online.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845580": [
        {
            "ioc_value": "xml.transalfa.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845581": [
        {
            "ioc_value": "zf-adobe.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845564": [
        {
            "ioc_value": "regularizaeuro.portal-nota.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845565": [
        {
            "ioc_value": "restricaofede.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845566": [
        {
            "ioc_value": "sarhartu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845567": [
        {
            "ioc_value": "significado.portal-nota.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845568": [
        {
            "ioc_value": "sistema.portal-nota.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845569": [
        {
            "ioc_value": "suanotafiscal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845570": [
        {
            "ioc_value": "sunat.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845571": [
        {
            "ioc_value": "teste.m-firma.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845572": [
        {
            "ioc_value": "teste.ste-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845573": [
        {
            "ioc_value": "teste.trusted-connection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845574": [
        {
            "ioc_value": "uptodate.wolterskluwer.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845575": [
        {
            "ioc_value": "verinfagora.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845576": [
        {
            "ioc_value": "vizualizardocumentopdf.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845554": [
        {
            "ioc_value": "notas.alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845555": [
        {
            "ioc_value": "notas.emissaofiscal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845556": [
        {
            "ioc_value": "notas.nfe-online.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845557": [
        {
            "ioc_value": "notas.transalfa.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845558": [
        {
            "ioc_value": "pdfcomprovanteacesso.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845559": [
        {
            "ioc_value": "planospag.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845560": [
        {
            "ioc_value": "plantcures.it.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845561": [
        {
            "ioc_value": "portal.nifatualiza.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845562": [
        {
            "ioc_value": "portaldasfinancas.portal-nota.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845563": [
        {
            "ioc_value": "premiosdavisacopa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845544": [
        {
            "ioc_value": "nfe-2via.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845545": [
        {
            "ioc_value": "nfe-reemitir.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845546": [
        {
            "ioc_value": "nfe-segundavia.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845547": [
        {
            "ioc_value": "nfe.alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845548": [
        {
            "ioc_value": "nfe.nfe-online.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845549": [
        {
            "ioc_value": "nfe.nfiscais.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845550": [
        {
            "ioc_value": "nfe.transalfa.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845551": [
        {
            "ioc_value": "nfedigitalonline.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845552": [
        {
            "ioc_value": "notafiscal202605.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845553": [
        {
            "ioc_value": "notaprincipalrf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845532": [
        {
            "ioc_value": "illiquidlabs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845533": [
        {
            "ioc_value": "invitesprincipal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845534": [
        {
            "ioc_value": "logisticanf.tjspbr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845535": [
        {
            "ioc_value": "m-firma.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845536": [
        {
            "ioc_value": "ma1-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845537": [
        {
            "ioc_value": "mettreajouredf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845538": [
        {
            "ioc_value": "mkt.alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845539": [
        {
            "ioc_value": "mrosy.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845540": [
        {
            "ioc_value": "nf-edigital.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845541": [
        {
            "ioc_value": "nf.alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845542": [
        {
            "ioc_value": "nf.transalfa.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845543": [
        {
            "ioc_value": "nfc.nfe-online.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:48:00",
            "last_seen_utc": "2026-07-06 09:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845517": [
        {
            "ioc_value": "br-adobe.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845518": [
        {
            "ioc_value": "canaisonline.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845519": [
        {
            "ioc_value": "consultenotafiscal.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845520": [
        {
            "ioc_value": "core-bit.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845521": [
        {
            "ioc_value": "d4-documentacion.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845522": [
        {
            "ioc_value": "documento.tjspbr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845523": [
        {
            "ioc_value": "documentos.alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845524": [
        {
            "ioc_value": "documentos.emissaofiscal.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": "2026-08-04 08:22:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845525": [
        {
            "ioc_value": "documentos.transalfa.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": "2026-07-06 09:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845526": [
        {
            "ioc_value": "docusingdoc.tjspbr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845527": [
        {
            "ioc_value": "edf-france.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845528": [
        {
            "ioc_value": "fatura.tjspbr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845529": [
        {
            "ioc_value": "faturaeletronicapt.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845530": [
        {
            "ioc_value": "g0vpt.nifatualiza.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": "2026-07-06 09:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845531": [
        {
            "ioc_value": "gerar-nfe.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845509": [
        {
            "ioc_value": "a3asesor.wolterskluwer.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": "2026-07-06 09:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845510": [
        {
            "ioc_value": "aceitarconvitevip.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845511": [
        {
            "ioc_value": "acessoprincipalconvite.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845512": [
        {
            "ioc_value": "adobeacrobat.portal-nota.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845513": [
        {
            "ioc_value": "alfatransportes.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845514": [
        {
            "ioc_value": "asoigdnonasfgds.it.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845515": [
        {
            "ioc_value": "atualizanonavegador.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845516": [
        {
            "ioc_value": "atualizaonavegador.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:47:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845508": [
        {
            "ioc_value": "101.34.235.198:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-06 09:46:41",
            "last_seen_utc": "2026-08-09 08:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845507": [
        {
            "ioc_value": "82.23.248.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-06 09:46:17",
            "last_seen_utc": "2026-08-20 08:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845506": [
        {
            "ioc_value": "5.231.70.95:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-06 09:46:01",
            "last_seen_utc": "2026-08-05 18:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845505": [
        {
            "ioc_value": "23.95.217.96:6745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 09:45:31",
            "last_seen_utc": "2026-09-01 02:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845504": [
        {
            "ioc_value": "222.167.211.55:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-06 09:45:29",
            "last_seen_utc": "2026-09-01 02:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845503": [
        {
            "ioc_value": "216.203.20.22:18190",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 09:45:27",
            "last_seen_utc": "2026-08-13 08:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845502": [
        {
            "ioc_value": "203.161.57.75:8234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 09:44:36",
            "last_seen_utc": "2026-09-01 02:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845500": [
        {
            "ioc_value": "2.27.62.201:62404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-06 09:44:34",
            "last_seen_utc": "2026-08-07 18:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845501": [
        {
            "ioc_value": "2.56.212.64:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-06 09:44:34",
            "last_seen_utc": "2026-08-15 18:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845499": [
        {
            "ioc_value": "2.27.122.16:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-07-06 09:44:33",
            "last_seen_utc": "2026-09-01 02:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845498": [
        {
            "ioc_value": "2.137.3.71:3085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-06 09:44:31",
            "last_seen_utc": "2026-08-12 08:45:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845497": [
        {
            "ioc_value": "173.249.41.141:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-06 09:43:59",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845496": [
        {
            "ioc_value": "157.245.54.75:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-07-06 09:43:45",
            "last_seen_utc": "2026-08-30 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845495": [
        {
            "ioc_value": "153.75.89.71:10414",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-06 09:43:39",
            "last_seen_utc": "2026-08-05 18:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845494": [
        {
            "ioc_value": "144.31.151.138:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-06 09:43:33",
            "last_seen_utc": "2026-08-05 18:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845493": [
        {
            "ioc_value": "143.198.120.167:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-06 09:43:32",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845492": [
        {
            "ioc_value": "foxo8ujn.prozhe.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 09:36:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845491": [
        {
            "ioc_value": "216.126.224.78:5050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-06 09:35:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/510306415765f307509191f72cb3e73d83e3fdcc17abe176159a2fde10fe6b06/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845490": [
        {
            "ioc_value": "217.60.195.172:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-06 09:15:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3a69743c2e6248b3cfd9ed4b1f24d411aba3a5dc7cd2b787e23e0a77094bfc19/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845481": [
        {
            "ioc_value": "m.adobepdf.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845482": [
        {
            "ioc_value": "ma-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": "2026-07-06 09:48:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845483": [
        {
            "ioc_value": "nfe-2viaeletronica.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845484": [
        {
            "ioc_value": "notafiscal-digital.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": "2026-07-06 09:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845485": [
        {
            "ioc_value": "notairs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845486": [
        {
            "ioc_value": "notaprincipalirs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": "2026-07-06 09:48:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845487": [
        {
            "ioc_value": "portaldasfinanca.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845488": [
        {
            "ioc_value": "ste-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": "2026-07-06 09:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845489": [
        {
            "ioc_value": "t-adobe.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:10",
            "last_seen_utc": "2026-07-06 09:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845470": [
        {
            "ioc_value": "d4.acrobatreader.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845471": [
        {
            "ioc_value": "doc.worldpress.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845472": [
        {
            "ioc_value": "documentacion.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": "2026-07-06 09:47:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845473": [
        {
            "ioc_value": "geo-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": "2026-07-06 09:47:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845474": [
        {
            "ioc_value": "irsnota.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845475": [
        {
            "ioc_value": "k-adobe.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": "2026-07-06 09:48:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845476": [
        {
            "ioc_value": "k-documentacion.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": "2026-07-06 09:48:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845477": [
        {
            "ioc_value": "k.adobepdf.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845478": [
        {
            "ioc_value": "k.upgrades.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845479": [
        {
            "ioc_value": "k.worldpress.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845480": [
        {
            "ioc_value": "logistic.tjspbr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:09",
            "last_seen_utc": "2026-07-06 09:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845459": [
        {
            "ioc_value": "acess.portal-nota.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": "2026-07-06 09:48:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845460": [
        {
            "ioc_value": "aglobaconvite.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": "2026-07-06 09:47:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845461": [
        {
            "ioc_value": "atualizanavegador.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": "2026-07-06 09:47:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845462": [
        {
            "ioc_value": "atualizanavegador.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845463": [
        {
            "ioc_value": "b.acrobatreader.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845464": [
        {
            "ioc_value": "b.adobepdf.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845465": [
        {
            "ioc_value": "b.worldpress.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845466": [
        {
            "ioc_value": "bo-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": "2026-07-06 09:47:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845467": [
        {
            "ioc_value": "bro-pdffiller.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": "2026-07-06 09:47:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845468": [
        {
            "ioc_value": "central-da-logistica.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": "2026-07-06 09:47:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845469": [
        {
            "ioc_value": "concludanotafiscal.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 09:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "smica83,tipoff",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1845458": [
        {
            "ioc_value": "dvjmeze.yan303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 09:08:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845457": [
        {
            "ioc_value": "btltgvt.yan303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 09:07:50",
            "last_seen_utc": "2026-07-07 14:04:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845451": [
        {
            "ioc_value": "wrccdbyk.90jet.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 08:31:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845447": [
        {
            "ioc_value": "safephotohub.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:07",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845448": [
        {
            "ioc_value": "thesamba-viewpicture.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:07",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845449": [
        {
            "ioc_value": "visadoc-vault.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:07",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845426": [
        {
            "ioc_value": "drivefolderphoto.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845427": [
        {
            "ioc_value": "vault-safepics.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845428": [
        {
            "ioc_value": "genehome.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845429": [
        {
            "ioc_value": "image-guard.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845430": [
        {
            "ioc_value": "photo-87561.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845431": [
        {
            "ioc_value": "photokaz13.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845432": [
        {
            "ioc_value": "photonhubsafe.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845433": [
        {
            "ioc_value": "docpic-safe.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845434": [
        {
            "ioc_value": "drive-photofolder.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845435": [
        {
            "ioc_value": "folderdrive.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845436": [
        {
            "ioc_value": "partner-folder.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845437": [
        {
            "ioc_value": "photo-276146.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845438": [
        {
            "ioc_value": "photo-766816.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-07 12:22:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845439": [
        {
            "ioc_value": "photo-for-drive.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845440": [
        {
            "ioc_value": "photo-id2281.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845441": [
        {
            "ioc_value": "photo-id4281.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845442": [
        {
            "ioc_value": "photo-id7737.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845443": [
        {
            "ioc_value": "photo-shield.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845444": [
        {
            "ioc_value": "photoimage-hub.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845445": [
        {
            "ioc_value": "photokaz14.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845446": [
        {
            "ioc_value": "photokaz15.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:06",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845414": [
        {
            "ioc_value": "photohotels-visit.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845415": [
        {
            "ioc_value": "photokaz1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845416": [
        {
            "ioc_value": "firecross.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845417": [
        {
            "ioc_value": "hafdsjak211sja.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845418": [
        {
            "ioc_value": "kashjsjdja829jas.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845419": [
        {
            "ioc_value": "photokaz5.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845420": [
        {
            "ioc_value": "photokaz4.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845421": [
        {
            "ioc_value": "guesimagehotel.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-07 12:22:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845422": [
        {
            "ioc_value": "photokaz10.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845423": [
        {
            "ioc_value": "reservphotoinstay.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845424": [
        {
            "ioc_value": "photokaz11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845425": [
        {
            "ioc_value": "photokaz12.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:28:05",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845413": [
        {
            "ioc_value": "hourpigs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:20:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845412": [
        {
            "ioc_value": "visitorwash.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:20:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845411": [
        {
            "ioc_value": "62.60.226.215:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-06 08:19:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77f2de0a837eb3b6891f5984a542af71f559afb3d9e9e4e9d0b6cbf1f19a3dad/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845410": [
        {
            "ioc_value": "juicejar.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 08:18:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845409": [
        {
            "ioc_value": "obx-stash.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rcs",
            "malware_alias": "Remote Control System,Crisis",
            "malware_printable": "RCS",
            "first_seen_utc": "2026-07-06 08:13:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/260f2d62bfecd03062c92e53d86b583d171e8f0153de3631cbfc5cc8bb3d10ce/",
            "tags": "RCSBotnet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845408": [
        {
            "ioc_value": "https://obx-stash.beer/api/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.rcs",
            "malware_alias": "Remote Control System,Crisis",
            "malware_printable": "RCS",
            "first_seen_utc": "2026-07-06 08:13:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/260f2d62bfecd03062c92e53d86b583d171e8f0153de3631cbfc5cc8bb3d10ce/",
            "tags": "RCSBotnet",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845407": [
        {
            "ioc_value": "cramjui.winx303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 08:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845406": [
        {
            "ioc_value": "pqzevvh.winx303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 08:12:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845404": [
        {
            "ioc_value": "fucksmartscreen.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-06 07:56:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f3e1e3c4397686ae17308f1f5376a76eaacfe018b834a7d3f5512739be7d19b3/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845403": [
        {
            "ioc_value": "193.24.123.38:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-07-06 07:45:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3d34a2ce97a2b85ac3788516071a25935adfd7f658f17876ce3833b22d3348b9/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845402": [
        {
            "ioc_value": "9nqbrnn7.farsibeenglish.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 07:39:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845400": [
        {
            "ioc_value": "3snpseyu.enfejar-site.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 07:33:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845399": [
        {
            "ioc_value": "5obrufj4.1bahis.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 07:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845029": [
        {
            "ioc_value": "AE0E536766788478263BF448A9381641",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845017": [
        {
            "ioc_value": "3B46A729DB7AE6AF8B19711C9452194D",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:05",
            "last_seen_utc": "2026-07-27 05:32:31",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845018": [
        {
            "ioc_value": "02944C8A5535CDB5B2CBB893DB2D5ACF",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845019": [
        {
            "ioc_value": "10CA9A4040001560D053B7E7885C1B95",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:04",
            "last_seen_utc": "2026-07-27 05:32:31",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845020": [
        {
            "ioc_value": "3C471EBC947CDF32240A90FFADF49B13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845021": [
        {
            "ioc_value": "4BE8BB62F0EBBCF4CE52C35AB6F794F5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845022": [
        {
            "ioc_value": "53C616677BC7E2A0A03127F19166D007",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845023": [
        {
            "ioc_value": "5C3B9821FC82A9028CB63B9671950919",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845024": [
        {
            "ioc_value": "5F0B2C6D9F442754258BF4DD841C8341",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845025": [
        {
            "ioc_value": "608FAF58353B65C45EF9833358AC3787",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845026": [
        {
            "ioc_value": "6AE7C9A7EA0B8C40A64225734F6BD01D",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:02",
            "last_seen_utc": "2026-07-27 05:32:31",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845027": [
        {
            "ioc_value": "846DC77C1246DB20D976346E0E359502",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845028": [
        {
            "ioc_value": "ADAC9984B3CC43D66A0D33079BBEC299",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845030": [
        {
            "ioc_value": "B3E418D30312C1B2C58A791286868F42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 07:20:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845244": [
        {
            "ioc_value": "157.245.59.180:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-06 07:20:00",
            "last_seen_utc": "2026-07-06 19:12:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845265": [
        {
            "ioc_value": "grant-member.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-06 07:19:56",
            "last_seen_utc": "2026-08-08 08:27:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845284": [
        {
            "ioc_value": "https://mekasa.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-06 07:19:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mekasa.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1845297": [
        {
            "ioc_value": "mekasa.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-06 07:19:52",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845298": [
        {
            "ioc_value": "https://mekasa.pro/3479ba86.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 07:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845301": [
        {
            "ioc_value": "datadock.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 07:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845303": [
        {
            "ioc_value": "https://olddenver.xyz/usa",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 07:19:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,payload-delivery",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845302": [
        {
            "ioc_value": "https://datadock.info/plg",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-06 07:19:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,payload-delivery",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1845307": [
        {
            "ioc_value": "5f22ec5c14dfd47c92850a5fb3bd8e3754d538b8021b6238238e4020336cfb5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zedhou",
            "malware_alias": null,
            "malware_printable": "Zedhou",
            "first_seen_utc": "2026-07-06 07:19:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/zohomurk-mustang-panda-analysis",
            "tags": "ctxmui,G0129,MustangPanda,ZohoMurk",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845308": [
        {
            "ioc_value": "f2bed071676feb831ed460489643fd57f6c6c1e0d024a1ea447820276fb13828",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zedhou",
            "malware_alias": null,
            "malware_printable": "Zedhou",
            "first_seen_utc": "2026-07-06 07:19:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/zohomurk-mustang-panda-analysis",
            "tags": "ctxmui,G0129,MustangPanda,ZohoMurk",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845310": [
        {
            "ioc_value": "https://couldinstallup.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.zebrocy",
            "malware_alias": "Zekapab",
            "malware_printable": "Zebrocy",
            "first_seen_utc": "2026-07-06 07:19:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/zohomurk-mustang-panda-analysis",
            "tags": "G0129,MINIRECON,MustangPanda,Toneshell,websocket-c2",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845309": [
        {
            "ioc_value": "a43084f5af861f44c75c5273c779cb26d506cab6b51c33746626da504148a4ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zedhou",
            "malware_alias": null,
            "malware_printable": "Zedhou",
            "first_seen_utc": "2026-07-06 07:19:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/zohomurk-mustang-panda-analysis",
            "tags": "ctxmui,G0129,MustangPanda,ZohoMurk",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845322": [
        {
            "ioc_value": "https://claudeai-mythos.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-06 07:19:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/claudeai-mythos.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1845328": [
        {
            "ioc_value": "https://saylror-strategy.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-06 07:19:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/saylror-strategy.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1845338": [
        {
            "ioc_value": "138.197.155.246:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-06 07:19:44",
            "last_seen_utc": "2026-07-07 12:11:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1845398": [
        {
            "ioc_value": "ofwyjhh.prda303.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 07:18:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845396": [
        {
            "ioc_value": "ozcocard.melbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 07:10:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845389": [
        {
            "ioc_value": "167.233.159.57:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845390": [
        {
            "ioc_value": "77.42.49.113:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845391": [
        {
            "ioc_value": "167.233.156.78:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845377": [
        {
            "ioc_value": "91.98.108.49:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845378": [
        {
            "ioc_value": "77.42.49.114:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845379": [
        {
            "ioc_value": "91.98.106.244:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845380": [
        {
            "ioc_value": "91.98.96.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845381": [
        {
            "ioc_value": "91.98.106.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845382": [
        {
            "ioc_value": "167.233.150.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845383": [
        {
            "ioc_value": "49.12.118.201:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845384": [
        {
            "ioc_value": "91.98.97.146:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845385": [
        {
            "ioc_value": "77.42.49.115:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845386": [
        {
            "ioc_value": "167.233.158.81:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845387": [
        {
            "ioc_value": "167.233.145.22:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845388": [
        {
            "ioc_value": "91.98.96.172:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:57:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845375": [
        {
            "ioc_value": "juj.jurangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:52:20",
            "last_seen_utc": "2026-07-06 08:26:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845376": [
        {
            "ioc_value": "juj.realmadridiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:52:20",
            "last_seen_utc": "2026-07-06 08:26:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845373": [
        {
            "ioc_value": "https://77.42.49.113/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845374": [
        {
            "ioc_value": "https://167.233.156.78/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:15",
            "last_seen_utc": "2026-08-11 04:49:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845368": [
        {
            "ioc_value": "https://77.42.49.115/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845369": [
        {
            "ioc_value": "https://167.233.158.81/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:14",
            "last_seen_utc": "2026-08-11 04:49:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845370": [
        {
            "ioc_value": "https://167.233.145.22/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845371": [
        {
            "ioc_value": "https://91.98.96.172/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845372": [
        {
            "ioc_value": "https://167.233.159.57/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:14",
            "last_seen_utc": "2026-08-11 04:48:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845365": [
        {
            "ioc_value": "https://167.233.150.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:13",
            "last_seen_utc": "2026-08-11 04:50:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845366": [
        {
            "ioc_value": "https://49.12.118.201/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845367": [
        {
            "ioc_value": "https://91.98.97.146/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845362": [
        {
            "ioc_value": "https://91.98.106.244/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845363": [
        {
            "ioc_value": "https://91.98.96.199/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:12",
            "last_seen_utc": "2026-08-11 04:49:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845364": [
        {
            "ioc_value": "https://91.98.106.156/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845359": [
        {
            "ioc_value": "https://juj.realmadridiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:11",
            "last_seen_utc": "2026-07-06 08:26:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845360": [
        {
            "ioc_value": "https://91.98.108.49/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845361": [
        {
            "ioc_value": "https://77.42.49.114/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845356": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198677476289",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:10",
            "last_seen_utc": "2026-08-24 13:24:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845357": [
        {
            "ioc_value": "https://telegram.me/w09ksp",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:10",
            "last_seen_utc": "2026-08-24 13:46:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845358": [
        {
            "ioc_value": "https://juj.jurangsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-06 06:50:10",
            "last_seen_utc": "2026-07-06 08:26:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1845031": [
        {
            "ioc_value": "C2764744DCB4B0E1DB79CA1E8BF65368",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 06:44:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845032": [
        {
            "ioc_value": "D12A5B36DD00586CC374A1CAE43EFED4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 06:44:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845033": [
        {
            "ioc_value": "D2F72897E8986303D5567EB2384932B8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 06:44:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845034": [
        {
            "ioc_value": "DE1522F9219497632F30F8A6E72F26B6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 06:44:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845035": [
        {
            "ioc_value": "FDAE2BEB813778B4540A997706862096",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gentlemen",
            "malware_alias": null,
            "malware_printable": "Gentlemen",
            "first_seen_utc": "2026-07-06 06:44:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Gentlemen%20Ransomware",
            "tags": "gentlemen,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1845355": [
        {
            "ioc_value": "49.234.14.253:89",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-06 06:35:23",
            "last_seen_utc": "2026-07-06 09:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845354": [
        {
            "ioc_value": "gaeilmx.prozhe.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 06:23:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845353": [
        {
            "ioc_value": "zsyahul.prozhe.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 06:20:59",
            "last_seen_utc": "2026-07-06 06:21:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845352": [
        {
            "ioc_value": "22prf6xs.eduprof.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 05:36:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845350": [
        {
            "ioc_value": "yvutfxz.pabloobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 05:27:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845348": [
        {
            "ioc_value": "35.239.131.165:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-06 05:05:04",
            "last_seen_utc": "2026-08-28 18:45:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845347": [
        {
            "ioc_value": "138.128.243.228:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-06 04:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845346": [
        {
            "ioc_value": "qyhgsea.jetshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 04:31:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845345": [
        {
            "ioc_value": "mnntzrbl.masterbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 04:09:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845343": [
        {
            "ioc_value": "134.209.41.160:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-06 04:05:04",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845342": [
        {
            "ioc_value": "45.151.91.20:20891",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-06 03:45:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845341": [
        {
            "ioc_value": "51.79.152.192:3060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-06 03:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845340": [
        {
            "ioc_value": "pczlsqy.hi-lo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 03:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845339": [
        {
            "ioc_value": "dhaafy3l.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 03:35:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845337": [
        {
            "ioc_value": "ourynlg.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 02:43:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845336": [
        {
            "ioc_value": "68v034mp.bet1xiraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 02:34:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845335": [
        {
            "ioc_value": "o8w2orhn.1bahis.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 02:33:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845334": [
        {
            "ioc_value": "aipmmwm.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 01:44:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845333": [
        {
            "ioc_value": "vzedvim.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 01:43:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845332": [
        {
            "ioc_value": "vh1oi5hz.rayegan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 01:37:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845331": [
        {
            "ioc_value": "vqincjko.jetbahis.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 01:07:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845329": [
        {
            "ioc_value": "vfchqur.bahiscash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-06 00:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845327": [
        {
            "ioc_value": "ntqpkct.bahiscart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 23:53:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845326": [
        {
            "ioc_value": "dnhvcls.bahiscart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 23:51:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845325": [
        {
            "ioc_value": "209.200.246.194:25885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 23:46:25",
            "last_seen_utc": "2026-08-05 08:47:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845324": [
        {
            "ioc_value": "115.190.225.63:53783",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 23:46:07",
            "last_seen_utc": "2026-08-08 14:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845323": [
        {
            "ioc_value": "u9gcj5sd.oxiidbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 23:33:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845321": [
        {
            "ioc_value": "nazemud.ac90bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 22:57:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845320": [
        {
            "ioc_value": "azxhmev.prozhe.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 22:21:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845319": [
        {
            "ioc_value": "zshaimrg.forwardbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 22:07:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845317": [
        {
            "ioc_value": "oemtklu.pabloobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 21:37:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845316": [
        {
            "ioc_value": "6l2yvway.fidoubet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 21:34:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845315": [
        {
            "ioc_value": "ojst23x0.site-enfejar-hotbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 21:32:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845314": [
        {
            "ioc_value": "8bmmubit.site-enfejar-ba-zarib-bala.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 21:32:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845305": [
        {
            "ioc_value": "njgpeig.onjabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 21:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845300": [
        {
            "ioc_value": "mospyqp.ninjafruiet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 20:16:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845296": [
        {
            "ioc_value": "88.216.73.83:9920",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-05 19:46:03",
            "last_seen_utc": "2026-08-05 08:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845295": [
        {
            "ioc_value": "77.105.169.126:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-05 19:45:53",
            "last_seen_utc": "2026-08-26 18:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845294": [
        {
            "ioc_value": "31.220.93.222:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-05 19:45:18",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845293": [
        {
            "ioc_value": "194.26.192.117:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 19:44:18",
            "last_seen_utc": "2026-09-01 02:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845292": [
        {
            "ioc_value": "144.172.88.128:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-05 19:43:30",
            "last_seen_utc": "2026-08-05 08:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845291": [
        {
            "ioc_value": "138.226.237.250:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-05 19:43:26",
            "last_seen_utc": "2026-08-06 18:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845290": [
        {
            "ioc_value": "109.123.239.180:52607",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-07-05 19:43:18",
            "last_seen_utc": "2026-08-04 18:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845289": [
        {
            "ioc_value": "103.11.41.20:12431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-05 19:43:08",
            "last_seen_utc": "2026-08-05 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845288": [
        {
            "ioc_value": "irf3md7c.casinobahis.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 19:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845287": [
        {
            "ioc_value": "qvmobjz.nextbahis.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 19:34:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845286": [
        {
            "ioc_value": "nextbahis.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 19:34:04",
            "last_seen_utc": "2026-07-05 19:34:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845285": [
        {
            "ioc_value": "casinobahis.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 19:32:03",
            "last_seen_utc": "2026-07-05 19:32:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845283": [
        {
            "ioc_value": "sfcrhzgd.btyek.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 19:07:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845277": [
        {
            "ioc_value": "cldppqm.jetshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 18:55:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845271": [
        {
            "ioc_value": "mekasa.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 18:39:32",
            "last_seen_utc": "2026-07-06 20:05:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845270": [
        {
            "ioc_value": "jpdgawf.enfejar-site.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 18:16:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845266": [
        {
            "ioc_value": "141.94.121.162:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-05 18:05:04",
            "last_seen_utc": "2026-08-31 08:43:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "dcrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845264": [
        {
            "ioc_value": "fbkhheg.bahisforward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 17:37:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845263": [
        {
            "ioc_value": "bahisforward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 17:36:15",
            "last_seen_utc": "2026-07-05 17:36:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845262": [
        {
            "ioc_value": "69gqzj0b.cartbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 17:32:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845261": [
        {
            "ioc_value": "vuhtxv7n.cartbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 17:31:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845259": [
        {
            "ioc_value": "http://94.26.83.155/312b423bf6dd463f8d15.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 17:30:49",
            "last_seen_utc": "2026-07-07 03:06:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dc25c03f61ca1ba41a1f6cccad97a8074c2c25158b3ed06e8725101e51e932b6/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845250": [
        {
            "ioc_value": "xcgifut.bahisdolar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 16:55:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845248": [
        {
            "ioc_value": "rbso1spv.hi-lo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 16:33:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845247": [
        {
            "ioc_value": "ufdopmc.bahiscash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 16:32:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845246": [
        {
            "ioc_value": "ibsovb64.bet1xiraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 16:32:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845245": [
        {
            "ioc_value": "bahiscash.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 16:27:19",
            "last_seen_utc": "2026-07-06 00:47:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845241": [
        {
            "ioc_value": "5bcd63edfe85569733cd75e76cb89fa3e9b3628694fa66e23e953a6724cb3ed9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845242": [
        {
            "ioc_value": "e8f545c21e8429c7f33158e1cbd25a665cf48916",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845243": [
        {
            "ioc_value": "d5f708b13d4b70dc6aac1d0a491780a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845238": [
        {
            "ioc_value": "fcd8643dff51723d1250496b2a8e10d69fb6e2eb4c01c30cbad32bbf54c9ce51",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845239": [
        {
            "ioc_value": "7c7e735265f2b25be141acac89f91f424387e093",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845240": [
        {
            "ioc_value": "871c3d3bc610e885318af5669948a07d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845235": [
        {
            "ioc_value": "741eea6f598af241e1337ad567b7c6d52e601309a381f934ab6ce245c7906469",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845236": [
        {
            "ioc_value": "9477e8ca9c28b45f506dd6c50f98c7d15e861afa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845237": [
        {
            "ioc_value": "cb0451aa69db2baa8973078965893b08",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845232": [
        {
            "ioc_value": "0c4ad7ea7fd1d24186efc73657dd5feed3f7c7243089e4d9eae0b1f63abeb69d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845233": [
        {
            "ioc_value": "c8781fb94d3f26d813bb5a55a703dca02121ae3d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845234": [
        {
            "ioc_value": "dcc568c8a51881d74be42b270ee0e38d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845229": [
        {
            "ioc_value": "c11aeec42a7f3c4e7895d37cf403b6900793226444dfc83ad2b85aab152e457c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845230": [
        {
            "ioc_value": "9c76c024469b7605f9ff575d7b5a9c68ebdfe57e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845231": [
        {
            "ioc_value": "d197145d9ca63ded215154bb64c9dc40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845225": [
        {
            "ioc_value": "eb0da5f19b4395355e77c8da57d7266a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845226": [
        {
            "ioc_value": "9eb3e292b091c691943b70fc0e9d6d2c5e5c55727518e40018ba72b27d71e0a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845227": [
        {
            "ioc_value": "3170e2e9076e6e7f27dafea941febfc1b994ce51",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845228": [
        {
            "ioc_value": "f0f29b04fcb7ca3303e900e189eb5549",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845222": [
        {
            "ioc_value": "d8c5e570415b946b7a157a91377ad6ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845223": [
        {
            "ioc_value": "4521f532bf22c3155a95a71c4797253680dc60618c74c18522506a603ef43a03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845224": [
        {
            "ioc_value": "ae22f19ee1036f18f42a9fb9cfd203d0f15d6766",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845219": [
        {
            "ioc_value": "b77d29650850f76aa139cbbf7453a206",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845220": [
        {
            "ioc_value": "ebdd2ac5c447807ff3218ae4fe747a681dc1097b64025452acbf7faa1fb17ca4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845221": [
        {
            "ioc_value": "d9c7eaaf67ce48be524c2ef9cb3f78fd19bf5b46",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845216": [
        {
            "ioc_value": "0007e1a20d9443cb815780c52ea1cdfb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845217": [
        {
            "ioc_value": "08be0ddd6e5d000404d4c5f27b7a1acf98c12ac4e4e715ae750f4d80f8e830e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845218": [
        {
            "ioc_value": "4cd613e3b2d94d777d30ecfcf62cd0befe0b4842",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845213": [
        {
            "ioc_value": "76095c93b9c8ec3655df1c6345f9437a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845214": [
        {
            "ioc_value": "3d776e8445933dee504ffe673a96480d5313c1e71979faebb74c3c9734b96b31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845215": [
        {
            "ioc_value": "5e949d52b9c2d4a35a70d800985818c9b2135d69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845210": [
        {
            "ioc_value": "834ee0b48222d8b99475dfd38d5283b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845211": [
        {
            "ioc_value": "0f1bcecd61092de0735dba542259b31c6566a1df62069a0a3287a0a12dcfa4f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845212": [
        {
            "ioc_value": "733cdd58fa430b86a2daeca2e1b795cdbb3511c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845207": [
        {
            "ioc_value": "2344b27221e13bd6fdae3cbf1d71dbd2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845208": [
        {
            "ioc_value": "b6fba18b6641eac47499735a0c872814b20bdc65ed491c04769d0e556d2ec40b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845209": [
        {
            "ioc_value": "2a6b75235df4ce03bc213a72cecfca0579998d69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845203": [
        {
            "ioc_value": "6995d6a1f44b8ba4f5c9971514e082816a8f0eae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845204": [
        {
            "ioc_value": "cb6189c15ec116abb50005041e178d74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845205": [
        {
            "ioc_value": "337463ea7d1ef14be117bf0461be4dd342794f5919c820173651b9d7a7269ae3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845206": [
        {
            "ioc_value": "a87f3e023cff230f8b4bdfa7945e4e43dcc2c0c9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845202": [
        {
            "ioc_value": "c2cfd3d5cc6db52356661d50b0374c494c96af73cb0fea33babb9616d4453098",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845199": [
        {
            "ioc_value": "9cd9c0a79450290b1ac0ea3235df6cd68332cc5a426991fa1d53eb7f19ec5a09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845200": [
        {
            "ioc_value": "fb2d549228df09be55ebc41b0d8d77f0c1d1a77b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845201": [
        {
            "ioc_value": "cb4da97b8dbf3dd30c9d32d2879c67a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845196": [
        {
            "ioc_value": "ec59758993501d25047672e4c46d33d7489012bf3936832af18896fb1bbef109",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845197": [
        {
            "ioc_value": "af7c9e5a99e1d7de22f316eb0ccd9c694ed26f90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845198": [
        {
            "ioc_value": "f853d193d83029352212ae5135589816",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845194": [
        {
            "ioc_value": "51c82d82b7e8e89521e4f3259524fbc2a4b8e595",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845195": [
        {
            "ioc_value": "2ae339b769bb7b5ec637d243e07a349e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845191": [
        {
            "ioc_value": "2fa9cf5acea1246a6bf71fffcbc7b3d823f3d9e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845192": [
        {
            "ioc_value": "776abc34a4ac6c2e3a93c809a39e1974",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845193": [
        {
            "ioc_value": "b19e9f8b8b5cefd798ffd7a3b428aa842798d697a049f32cf80c720ccb5602f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845187": [
        {
            "ioc_value": "33b317b7ffc3ea442add1da7aa7a7c444b670c62943e684c2ec2c5d6fa97904c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845188": [
        {
            "ioc_value": "47ecc87cb6b4effe354e194e6338886769157795",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845189": [
        {
            "ioc_value": "fe8e6273c6c4ce33dc5506a497c60a16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845190": [
        {
            "ioc_value": "62f16a144816655addc35fa23adb766203296c38b75452e6d30aa4a3a13df6b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845184": [
        {
            "ioc_value": "08510ddd7019a2fb09d4893c35ddbb3356cd8ce3fe6e43fa68f9f13e95287d46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845185": [
        {
            "ioc_value": "aa5e4452366f883dbb8a551b97a25e2739ca58a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845186": [
        {
            "ioc_value": "b703aacd3e943ffe9083c14779cd7cbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845181": [
        {
            "ioc_value": "5525784bfcc0c3340da0289ab8a5aed5565e73dc7246366b246ff000f7757ac5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845182": [
        {
            "ioc_value": "8ec145ca3051276ef9698916841d785067ecfccd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845183": [
        {
            "ioc_value": "d9a904c03fe2967cbb32211c28ef2da6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845178": [
        {
            "ioc_value": "16d67fa1f9e77c465e62a6a37f0c5bd54b8385215a5f40b1e5644dd3d84e0dad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845179": [
        {
            "ioc_value": "499850d03ccc25102d17584956bb01e53fd5aa6f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845180": [
        {
            "ioc_value": "9fdb32623242973019d8eb9dfc1c96af",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845175": [
        {
            "ioc_value": "eded86eb5c664d712b1393001d997338d122e53b15885adc4c89d2421a412f64",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845176": [
        {
            "ioc_value": "fe459ec940c0a2fecfa72ced9003c6be44af8865",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845177": [
        {
            "ioc_value": "e1a2c6e811791ad672f8f600257c5fe8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845172": [
        {
            "ioc_value": "31da18115d031c335b2b4f2b2d3a1277ace95a139e7293e469ee2f55d084d3a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845173": [
        {
            "ioc_value": "911ea308dddb874b517885a9909f029126a54aba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845174": [
        {
            "ioc_value": "9af17b2049b920cdc6729948eb7e625f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845169": [
        {
            "ioc_value": "360e3c6d428da649c77a426d3f0379a3a1eced35f0d7a68f5a925d4b300ccaf7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845170": [
        {
            "ioc_value": "4119957c3a2100afdc5eda40c89cdb2f426abf7f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845171": [
        {
            "ioc_value": "eaf137a95d93a9093efc6280adaf9326",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845166": [
        {
            "ioc_value": "d9d6fc3085dd822f258601164ecb21f318822a63ca0360aead9201bcee49ed04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-05 16:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845167": [
        {
            "ioc_value": "96f4bf9096686fcb2cd171034b9ea22cd4da2280",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-05 16:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845168": [
        {
            "ioc_value": "4b3c6ee4490da28af2ec40637384c400",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-05 16:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845163": [
        {
            "ioc_value": "e74cf40d9df390976e11bad98f81df248c14b6e5a45c889b05095fb66117a83b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845164": [
        {
            "ioc_value": "b8fa979c5b97fcdd3012fd6399a1bc75f22add36",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845165": [
        {
            "ioc_value": "14849cd2fbd1dc33147101bb7d028b61",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845160": [
        {
            "ioc_value": "8e3cf3dc6e5d8fdfbcc8575e9e97003f7f919c6ba2ea5889ec3ac658ceacc8a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845161": [
        {
            "ioc_value": "05842daee782946e80621abe836f235fcb919e76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845162": [
        {
            "ioc_value": "c1c7abb7d3e27a5a13788863449b0678",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845157": [
        {
            "ioc_value": "9462805f80c946c49bf44a3d567a682b666d1d0bd74e3819050339e6f3e93451",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845158": [
        {
            "ioc_value": "a2229b5da50d9f4c9fba066a7af5c23efbe22675",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845159": [
        {
            "ioc_value": "1f80fb7d02e567f3c92aed65acd83565",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845154": [
        {
            "ioc_value": "f23e6b705868c3d3a6615be240bfa23620b0b873fd17b12a9481f7580a18ec75",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845155": [
        {
            "ioc_value": "64c1b72294206007c43834fc70b3fa299ed6c3d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845156": [
        {
            "ioc_value": "3f765f2396c7f2df4753ef0b02b20f3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845150": [
        {
            "ioc_value": "43e647b9d685e1e5be276026df86d7e4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845151": [
        {
            "ioc_value": "716608d7e9a26e980f916e73792abcb86bbb21fb949436b7f359afcaf730b078",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 16:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845152": [
        {
            "ioc_value": "1dd66d9ee5902947bda7eb381fa256877a646879",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 16:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845153": [
        {
            "ioc_value": "dc903b2967c0c943084a0d5c0d131cf1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 16:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845147": [
        {
            "ioc_value": "69ac856f989a3dc0d8bff532c6f7f331",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845148": [
        {
            "ioc_value": "46880af4b7bbb74def06569aecda2d96702de4b8b7723b05af927674928ce327",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845149": [
        {
            "ioc_value": "3acbcfe403d42d59ce337403a39201cad1107ad4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845145": [
        {
            "ioc_value": "ccbf818a36523c19051d066f8e5edad655a478516afc916cd915aacca80dbcd2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845146": [
        {
            "ioc_value": "a6b87c3a216ef6e26d483fa69151174b27a7c6f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845142": [
        {
            "ioc_value": "422c55e0219b09d0262782b25420c601304f5d1b46a325f2b4859ef77244ff42",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845143": [
        {
            "ioc_value": "116af423f975819cd0668484d7e0fb7c83460fb8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845144": [
        {
            "ioc_value": "99755cc0b98e663e73aac9be9aa33c13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845139": [
        {
            "ioc_value": "f193b47f2739aaa35c0ecec5d2731dc7d343c200340015e4a2bff663c3041512",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845140": [
        {
            "ioc_value": "def05ff2de5bf7d550e6230c19480bae253d8043",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845141": [
        {
            "ioc_value": "4be39027f6e94c46bf4307f6762d8b98",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845136": [
        {
            "ioc_value": "d9f15a43821328bf482e2945ff9da40fa05f382777819d8e9fa3aaae8704862d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845137": [
        {
            "ioc_value": "612fb6725b2c4b8f2c0edf6a2de5b1e53c8b8a76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845138": [
        {
            "ioc_value": "ba3544437b369bbd4687a2ce30077a3f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845133": [
        {
            "ioc_value": "551aa018350fcf2b435b4d361dd4f117349a5136851f84ac10c02da1526e4e67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-05 16:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845134": [
        {
            "ioc_value": "c9970f57910e5e2bb746d838ab0f248bdfa1e15b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-05 16:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845135": [
        {
            "ioc_value": "2e3bb978d68490c99faac7f590933832",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-05 16:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845131": [
        {
            "ioc_value": "0b5439d135dc4d685e3fa346ac56dc89713b1a86",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redosdru",
            "malware_alias": null,
            "malware_printable": "Redosdru",
            "first_seen_utc": "2026-07-05 16:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845132": [
        {
            "ioc_value": "b2f641209efa51dda327fb48bafd0986",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redosdru",
            "malware_alias": null,
            "malware_printable": "Redosdru",
            "first_seen_utc": "2026-07-05 16:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845128": [
        {
            "ioc_value": "114777ca06522cfb98a8c9e93fed5330e78dff56",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845129": [
        {
            "ioc_value": "1d870228df077b8fe89d4ab2043743d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845130": [
        {
            "ioc_value": "f65a25e37c7abc88d641e13004c4e5523502b4568cfcf6713f4f50e34f23e770",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redosdru",
            "malware_alias": null,
            "malware_printable": "Redosdru",
            "first_seen_utc": "2026-07-05 16:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845125": [
        {
            "ioc_value": "a041d35efc838a8d88586c2ab38f3740b8f543d8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quirkyloader",
            "malware_alias": null,
            "malware_printable": "QuirkyLoader",
            "first_seen_utc": "2026-07-05 16:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845126": [
        {
            "ioc_value": "23938cf31c1fa4700341cab81b0f3243",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quirkyloader",
            "malware_alias": null,
            "malware_printable": "QuirkyLoader",
            "first_seen_utc": "2026-07-05 16:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845127": [
        {
            "ioc_value": "0c422e9fc527cc1d97a81606a42a6bea2c83295552ec3ebd49adcb41e50650c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845122": [
        {
            "ioc_value": "69e258ea6cb572bdb95f031ff22de0ccf5cfed05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845123": [
        {
            "ioc_value": "17cd659fb2b7797352e5c33ce77d6cdc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845124": [
        {
            "ioc_value": "9df5a7b74fadadc12c289fff3f5c7f58e3893e5a36df8a287b1f69e588a7e818",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quirkyloader",
            "malware_alias": null,
            "malware_printable": "QuirkyLoader",
            "first_seen_utc": "2026-07-05 16:22:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845119": [
        {
            "ioc_value": "fb1566a75cbb2034b53b31474ab4d21a7caea50e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-05 16:22:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845120": [
        {
            "ioc_value": "27af4194b3fb1179eca9bb2ebd511a12",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-05 16:22:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845121": [
        {
            "ioc_value": "ef8fb137711aba179550d97b4dacda5644d17482b64e142934f429306044ce6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845116": [
        {
            "ioc_value": "a6bb5b9f1835a0408ede5418fab2505702bc2f53",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845117": [
        {
            "ioc_value": "5744f69e672856a6879875f6118744f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845118": [
        {
            "ioc_value": "65736a4315b49718b68e1a72d24ff61e1b0537f2c2deb19f5bb339f2aa10e459",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-07-05 16:22:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845113": [
        {
            "ioc_value": "161a0dc51f1dd79421194ab79236159ae994f688",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-05 16:22:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845114": [
        {
            "ioc_value": "342f8fe9a988cbdb27f7756a2754549d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-05 16:22:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845115": [
        {
            "ioc_value": "1d3699b153b816e2e9129ecc2b5f7dcbe40d5aeee08bfa655d5f01b808d01906",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845110": [
        {
            "ioc_value": "9ab6ffc449a0de80e5af4e690ef361ac01f500e8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-05 16:22:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845111": [
        {
            "ioc_value": "592c091f5b8dc2d2445618dac9938a66",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-05 16:22:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845112": [
        {
            "ioc_value": "fc772ded09936960f85abe63e2162ac141d072eeb60d3f5a4c0e47f249c9b6a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-05 16:22:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845108": [
        {
            "ioc_value": "5e1208edaa128df0809ec8268be38ffc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-05 16:22:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845109": [
        {
            "ioc_value": "87cf4ad614dbe8696401992fb8dde991f921adce680d91057e8fdb7c88e1a8c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-05 16:22:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845105": [
        {
            "ioc_value": "d3f9acfa6119f28d666e25d7e078570a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 16:22:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845106": [
        {
            "ioc_value": "77f2de0a837eb3b6891f5984a542af71f559afb3d9e9e4e9d0b6cbf1f19a3dad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-05 16:22:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845107": [
        {
            "ioc_value": "355109aca5726acd442299528c0e1bb112771525",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-05 16:22:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845102": [
        {
            "ioc_value": "fafa05e543e97b4a881b864b5b4babb6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845103": [
        {
            "ioc_value": "1095cf2951bbc8b1ecd33798afad192449a102aa1b976fb60bf566a08d693587",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 16:22:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845104": [
        {
            "ioc_value": "53e0bf97e465842a9130aae1fcdf0968273f6d14",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 16:22:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845099": [
        {
            "ioc_value": "db5566d48b5cf91abdd36ec1c3a07612",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-05 16:22:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845100": [
        {
            "ioc_value": "aff0445b3068a5edbb0a827fe06bbd1153d8939c1709f997d8f583252ba71359",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845101": [
        {
            "ioc_value": "243c572dde1e2562bf66e526693a4ef53d83e185",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845096": [
        {
            "ioc_value": "22a485db3175a269c6f1b9895e3c7f53",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845097": [
        {
            "ioc_value": "42fa6071fd7cf7ac8ff6740d6c297f5b8527a93116f84146a515449070abf488",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-05 16:22:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845098": [
        {
            "ioc_value": "88980bcea3addd53f4a55369b7eff4a274dc2987",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-05 16:22:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845093": [
        {
            "ioc_value": "1597875cfe462a164c7f4e8af0c36601",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845094": [
        {
            "ioc_value": "fd834934b8de230554ae62d2c8607b1d5ada181d34140085ccf55560c4b92d18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845095": [
        {
            "ioc_value": "16a7e8cf3ff3ac1d3992036de4f16a3afd9ce177",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845090": [
        {
            "ioc_value": "1deb209a52e601fb9f0117d72fc7d0db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845091": [
        {
            "ioc_value": "c7195e19685ed252be9d105f817a31a475430e76c9beec4cc76d3377f784a21b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845092": [
        {
            "ioc_value": "ec86b17c5678a80c2aeef5cb4df4fa5fc66ff72b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845087": [
        {
            "ioc_value": "b21ab5fec4f4792fc543fe66ba7aca76",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845088": [
        {
            "ioc_value": "e957e67ed9787dc7941454ebba020699013e0a0cc00a99c36960a71bc6ab44f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845089": [
        {
            "ioc_value": "cb981cc97eb13f5948bd10ac3b63671d66841a7f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845084": [
        {
            "ioc_value": "67c643519fa0a156145729519285ad41",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845085": [
        {
            "ioc_value": "b4132ade3a61842f043b9bafc6aa6a874efd20c93b5266ab611f5d31dc783037",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845086": [
        {
            "ioc_value": "af021506ffd78a1d60cfac43e1e92d2d76fb3513",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845080": [
        {
            "ioc_value": "56f40e0bd2bcaeeaee7bd5f188a4ebfeeb92e3b9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845081": [
        {
            "ioc_value": "ab391ae53d7ebc072521ec9aec4efc42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845082": [
        {
            "ioc_value": "247402d2a3bec3e8590798efa1adaae98fde12c194939e1ed4f3d86867ac84a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845083": [
        {
            "ioc_value": "7345d262270e9bff19859718471b37232d424caf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845077": [
        {
            "ioc_value": "3c8b5cb8e6031bbc5a0ce5c6991b9fcab3133a5c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845078": [
        {
            "ioc_value": "4de734c2a865966c5c77569ea7377852",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845079": [
        {
            "ioc_value": "5f078709543c9f97fed54bdb60879c83ea00aa038cf25ab88a1a555a880b596e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845076": [
        {
            "ioc_value": "4ae932c3a530a58fbdaa8fe29fbf8ab9472ab8fcf3026b61446a5fad689120ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-05 16:22:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845073": [
        {
            "ioc_value": "28b6748f5efd251c5927c6ad092e3a0c9a0daa3d6b0fd3b5b353e56a551de93b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845074": [
        {
            "ioc_value": "5c6d63c715b8461e2c42199e0b26b67d3c6c38df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845075": [
        {
            "ioc_value": "eaa8df84423a213566d607532a7c8033",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845070": [
        {
            "ioc_value": "103f6414452ab0352953778d6478096710a619645c5bf5d274552ed5c478ccdb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845071": [
        {
            "ioc_value": "8a9ebdbf4f6d5ec8e7a14b74205affe666a4655c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845072": [
        {
            "ioc_value": "35fbf0e5ac62961db04cd6d549a5b6e1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-05 16:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845067": [
        {
            "ioc_value": "0350de7cdac919529ec58d085ae1eb7ece2bafba425593fbcedb7826a84ee713",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845068": [
        {
            "ioc_value": "dae33edb4229db54bab5a44da6a2e71c02f9fd48",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845069": [
        {
            "ioc_value": "8ff8509c63c8dcfb5349a7691c0d7363",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845064": [
        {
            "ioc_value": "7604fc93b4e521fd559dc4afd168d833f14ee63908cf733dfdfa8bab02a9d656",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845065": [
        {
            "ioc_value": "2c54ebcea5e2484e406a7708584b5454b1f29fe8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845066": [
        {
            "ioc_value": "dbf9477bf240f517e449c2121eb7a69f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-05 16:22:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845062": [
        {
            "ioc_value": "4944dbf320a5cdbb1bb39036928930491f4b51cf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-05 16:22:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845063": [
        {
            "ioc_value": "3a6c44540d1a164f8ec0f8fb3df901f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-05 16:22:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845060": [
        {
            "ioc_value": "4013ae1d401d214ccc6a391f48c65518",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-05 16:22:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845061": [
        {
            "ioc_value": "7b63ddaf3b217f9e7b08575ee6f80fff1d2d9e12522d862ccc192ef3d08a0dd3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-05 16:22:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845058": [
        {
            "ioc_value": "7aa50ba59b38494cc524dbd31519bd3a218133aed64d9037eef02d697b8e99d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-05 16:22:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845059": [
        {
            "ioc_value": "d6b243db1dbca54dace22f067d2e52938460410b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-05 16:22:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1845057": [
        {
            "ioc_value": "lcsywbam.btyek.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 16:07:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845049": [
        {
            "ioc_value": "nfpljmg.bahiscart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 15:46:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845048": [
        {
            "ioc_value": "rmyotbx.bahiscart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 15:41:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845046": [
        {
            "ioc_value": "0681dt20.bahisgame.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 15:32:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845041": [
        {
            "ioc_value": "sxedaqg.1bahis.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 15:01:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845037": [
        {
            "ioc_value": "ztlfqqk.1bahis.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 14:11:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845012": [
        {
            "ioc_value": "kwb3h55h.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 13:35:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845011": [
        {
            "ioc_value": "111.229.248.198:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 13:33:27",
            "last_seen_utc": "2026-09-01 02:46:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845010": [
        {
            "ioc_value": "152.136.38.231:5443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 13:33:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-93347",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845009": [
        {
            "ioc_value": "47.96.254.114:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 13:33:13",
            "last_seen_utc": "2026-08-20 05:38:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1845008": [
        {
            "ioc_value": "z02aheni.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 13:30:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844807": [
        {
            "ioc_value": "157.245.59.180:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-05 13:29:29",
            "last_seen_utc": "2026-07-07 07:07:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844515": [
        {
            "ioc_value": "gjs.whitepppplatform.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-05 13:29:26",
            "last_seen_utc": "2026-07-04 13:02:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,wp-inject",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844525": [
        {
            "ioc_value": "dockoo4kooname-i.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-05 13:29:26",
            "last_seen_utc": "2026-07-04 13:39:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844526": [
        {
            "ioc_value": "dockoo3kooname-i.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-05 13:29:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844787": [
        {
            "ioc_value": "94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 13:28:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "cowrie,honeypot,p2p,panchan,ssh,xmrig",
            "anonymous": 0,
            "reporter": "F_Paralax"
        }
    ],
    "1844859": [
        {
            "ioc_value": "138.197.155.246:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-05 13:28:31",
            "last_seen_utc": "2026-07-07 13:59:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844874": [
        {
            "ioc_value": "https://89eb-q5yd-ugg8.s-tucker-faroint-com-s-account.workers.dev/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 13:28:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019f183b-f877-7768-b8bf-1acb6c5958d3/",
            "tags": "eviltokens,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1844875": [
        {
            "ioc_value": "https://cholton.fr-par-1.linodeobjects.com/index.html",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 13:28:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019ef5dc-31fe-7505-85cd-90d52cbb065a/",
            "tags": "eviltokens,phishing",
            "anonymous": 0,
            "reporter": "PhishBoardJay"
        }
    ],
    "1844880": [
        {
            "ioc_value": "168.144.130.22:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-05 13:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844906": [
        {
            "ioc_value": "107.189.20.42:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 13:28:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlquery.net/queue/022fb0a7-bdd4-42f3-b833-3e18eb6042c4",
            "tags": "panel",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1844907": [
        {
            "ioc_value": "107.189.20.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 13:28:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlquery.net/queue/022fb0a7-bdd4-42f3-b833-3e18eb6042c4",
            "tags": "panel",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1844908": [
        {
            "ioc_value": "ws.cryptobwh.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 13:28:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "panel",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1844918": [
        {
            "ioc_value": "95.182.89.105:1004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-05 13:28:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1844937": [
        {
            "ioc_value": "159.203.35.164:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-05 13:28:22",
            "last_seen_utc": "2026-07-07 13:48:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844966": [
        {
            "ioc_value": "157.245.59.180:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-05 13:28:21",
            "last_seen_utc": "2026-07-07 12:05:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844973": [
        {
            "ioc_value": "authorization-code.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-05 13:28:21",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844975": [
        {
            "ioc_value": "whitelllshop.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-05 13:28:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844974": [
        {
            "ioc_value": "authorization-id-code.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-05 13:28:20",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844976": [
        {
            "ioc_value": "whitellllshop.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-05 13:28:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844977": [
        {
            "ioc_value": "blackkkkdate.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-05 13:28:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844984": [
        {
            "ioc_value": "194.238.26.34:8880",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-05 13:28:18",
            "last_seen_utc": "2026-07-25 09:09:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot,ssh-dropper",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1845007": [
        {
            "ioc_value": "joujfre.1bahis1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 13:27:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845006": [
        {
            "ioc_value": "jtrjohl.1bahis1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 13:25:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1845002": [
        {
            "ioc_value": "ugbobgyo.btyek.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 12:43:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845001": [
        {
            "ioc_value": "nawkvml.oxiidbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 12:40:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1845000": [
        {
            "ioc_value": "djtffqa.oxiidbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 12:39:37",
            "last_seen_utc": "2026-07-07 04:40:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844994": [
        {
            "ioc_value": "kwqienen.btyek.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 12:02:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844992": [
        {
            "ioc_value": "mehpuqa.ac90bet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 11:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844990": [
        {
            "ioc_value": "141.255.162.234:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 11:46:59",
            "last_seen_utc": "2026-08-23 14:47:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844989": [
        {
            "ioc_value": "107.173.85.194:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 11:46:46",
            "last_seen_utc": "2026-08-07 20:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844988": [
        {
            "ioc_value": "hrichina.dpdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-05 11:46:36",
            "last_seen_utc": "2026-07-08 18:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844987": [
        {
            "ioc_value": "jffl6ogj.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 11:39:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844986": [
        {
            "ioc_value": "tthbmmcd.fidoubet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 11:39:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844985": [
        {
            "ioc_value": "39cif89o.rayegan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 11:38:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844983": [
        {
            "ioc_value": "uvjkxyc.ac90bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 11:08:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844972": [
        {
            "ioc_value": "zb6u9568.pabloobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 10:39:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844969": [
        {
            "ioc_value": "wagxbxx.ac90bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 10:26:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844968": [
        {
            "ioc_value": "dnnzoov.ac90bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 10:25:34",
            "last_seen_utc": "2026-07-07 07:27:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844965": [
        {
            "ioc_value": "omkfbumi.prozhe.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 10:09:52",
            "last_seen_utc": "2026-07-07 07:41:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844960": [
        {
            "ioc_value": "http://91.202.233.134/4d95d68e3fc64f3bbbf5.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-05 09:50:45",
            "last_seen_utc": "2026-09-01 02:53:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1095cf2951bbc8b1ecd33798afad192449a102aa1b976fb60bf566a08d693587/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844959": [
        {
            "ioc_value": "66.29.145.236:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-05 09:46:26",
            "last_seen_utc": "2026-08-04 18:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844958": [
        {
            "ioc_value": "37.117.191.175:9002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-05 09:45:50",
            "last_seen_utc": "2026-08-04 18:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844956": [
        {
            "ioc_value": "188.191.96.216:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-05 09:44:25",
            "last_seen_utc": "2026-08-07 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844957": [
        {
            "ioc_value": "188.191.96.216:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-05 09:44:25",
            "last_seen_utc": "2026-08-07 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844955": [
        {
            "ioc_value": "185.221.196.71:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 09:44:21",
            "last_seen_utc": "2026-08-05 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844954": [
        {
            "ioc_value": "185.115.164.59:3917",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-05 09:44:14",
            "last_seen_utc": "2026-08-04 08:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844953": [
        {
            "ioc_value": "170.168.15.43:4322",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-05 09:43:57",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844952": [
        {
            "ioc_value": "155.103.69.30:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-05 09:43:44",
            "last_seen_utc": "2026-08-04 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844951": [
        {
            "ioc_value": "144.31.62.81:56123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-05 09:43:36",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844949": [
        {
            "ioc_value": "143.92.43.241:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-05 09:43:35",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844950": [
        {
            "ioc_value": "143.92.43.246:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-05 09:43:35",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844948": [
        {
            "ioc_value": "143.92.43.160:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-05 09:43:34",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844947": [
        {
            "ioc_value": "104.198.64.39:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-05 09:43:15",
            "last_seen_utc": "2026-08-05 08:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844946": [
        {
            "ioc_value": "xmevvdl.ac90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 09:43:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844945": [
        {
            "ioc_value": "yfhrnyh.ac90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 09:40:05",
            "last_seen_utc": "2026-07-05 09:40:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844944": [
        {
            "ioc_value": "ae97yns1.betiran.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 09:14:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844939": [
        {
            "ioc_value": "cyvvepo.90pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 08:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844938": [
        {
            "ioc_value": "hqzblmr.90pishbini.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 08:54:45",
            "last_seen_utc": "2026-07-05 11:24:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844936": [
        {
            "ioc_value": "vcrjfnwa.ketab.blog",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 08:31:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844934": [
        {
            "ioc_value": "pzioeui.bet303.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 08:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844929": [
        {
            "ioc_value": "cho4uj96.bet303iran.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 07:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844927": [
        {
            "ioc_value": "czpcvew.bet1xiraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 07:24:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844926": [
        {
            "ioc_value": "ifdj62v9.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 07:23:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844925": [
        {
            "ioc_value": "btqtgvs.bet1xiraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 07:23:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844924": [
        {
            "ioc_value": "us5fm2lg.ace90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 07:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844923": [
        {
            "ioc_value": "68ikx1c9.ace90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 07:11:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844917": [
        {
            "ioc_value": "yylcnvu.90jet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 06:39:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844910": [
        {
            "ioc_value": "tzpfztp.90bet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 05:53:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844900": [
        {
            "ioc_value": "9sltd81l.ace90.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 05:14:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844896": [
        {
            "ioc_value": "bzmkmgt.rayegan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 05:08:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844895": [
        {
            "ioc_value": "uosqpbq.rayegan.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 05:06:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844886": [
        {
            "ioc_value": "zjfzifr.psd.markets",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 04:24:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844881": [
        {
            "ioc_value": "edvdafc.prozhe.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 03:36:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844878": [
        {
            "ioc_value": "http://slugph.xyz:4190",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-05 03:20:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f193b47f2739aaa35c0ecec5d2731dc7d343c200340015e4a2bff663c3041512/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844877": [
        {
            "ioc_value": "6pyrumd5.ace90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 03:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844873": [
        {
            "ioc_value": "qsnvmsy.jetbet90.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 02:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844872": [
        {
            "ioc_value": "wgzgqfep.bingobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 02:44:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844871": [
        {
            "ioc_value": "man745va.takbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 02:25:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844870": [
        {
            "ioc_value": "flpquwu.enfejar-site.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 02:10:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844869": [
        {
            "ioc_value": "zxvzlnh.ketab.computer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 01:20:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844867": [
        {
            "ioc_value": "jyrighxw.prozhedownload.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 01:11:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844866": [
        {
            "ioc_value": "5msn60w6.prozhedownload.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 01:10:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844865": [
        {
            "ioc_value": "hmwrabs.btyek.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-05 00:36:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844863": [
        {
            "ioc_value": "jthevya.22beet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 23:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844861": [
        {
            "ioc_value": "110.40.147.249:60010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 23:45:52",
            "last_seen_utc": "2026-09-01 02:46:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844860": [
        {
            "ioc_value": "107.173.3.53:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 23:45:51",
            "last_seen_utc": "2026-08-05 08:47:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844858": [
        {
            "ioc_value": "hrjjo6as.prozhe.shopping",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 23:11:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844857": [
        {
            "ioc_value": "hgdiucl.iranwp.ai",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 23:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844855": [
        {
            "ioc_value": "dazayse.hi-lo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 22:19:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844854": [
        {
            "ioc_value": "uktcqdy.hi-lo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 22:17:25",
            "last_seen_utc": "2026-07-07 05:38:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844853": [
        {
            "ioc_value": "64.227.143.36:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 21:46:30",
            "last_seen_utc": "2026-08-07 18:47:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844852": [
        {
            "ioc_value": "2wij971l.betbazi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 21:44:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844851": [
        {
            "ioc_value": "vzqodjb.fidoubet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 21:34:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844850": [
        {
            "ioc_value": "rbqsvbo.fidoubet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 21:32:15",
            "last_seen_utc": "2026-07-05 21:33:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844849": [
        {
            "ioc_value": "1xhk4hau.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 21:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844848": [
        {
            "ioc_value": "8gqtj29a.jetshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 21:11:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844847": [
        {
            "ioc_value": "9lxp680a.jetshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 21:09:27",
            "last_seen_utc": "2026-07-07 18:34:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844845": [
        {
            "ioc_value": "czcymhx.enfejar-site.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 20:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844844": [
        {
            "ioc_value": "azbkptz.enfejar-site.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 20:46:32",
            "last_seen_utc": "2026-07-07 03:38:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844843": [
        {
            "ioc_value": "urqvdqc.dreambet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 20:06:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844840": [
        {
            "ioc_value": "92.4.65.88:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-04 19:45:47",
            "last_seen_utc": "2026-09-01 02:46:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844839": [
        {
            "ioc_value": "62.85.21.181:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 19:45:31",
            "last_seen_utc": "2026-08-08 08:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844838": [
        {
            "ioc_value": "45.77.108.53:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 19:45:18",
            "last_seen_utc": "2026-08-04 08:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844837": [
        {
            "ioc_value": "209.99.188.80:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 19:44:23",
            "last_seen_utc": "2026-08-05 08:44:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844836": [
        {
            "ioc_value": "185.115.164.60:9330",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 19:43:56",
            "last_seen_utc": "2026-08-04 08:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844835": [
        {
            "ioc_value": "179.43.149.250:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 19:43:50",
            "last_seen_utc": "2026-09-01 02:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844834": [
        {
            "ioc_value": "155.103.69.30:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 19:43:33",
            "last_seen_utc": "2026-08-14 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844833": [
        {
            "ioc_value": "138.226.236.101:1202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 19:43:23",
            "last_seen_utc": "2026-08-05 18:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844832": [
        {
            "ioc_value": "104.168.0.147:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 19:43:11",
            "last_seen_utc": "2026-08-05 08:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844831": [
        {
            "ioc_value": "103.11.41.20:64252",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 19:43:08",
            "last_seen_utc": "2026-08-04 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844830": [
        {
            "ioc_value": "102.220.160.94:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 19:43:04",
            "last_seen_utc": "2026-08-05 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844829": [
        {
            "ioc_value": "gobfmmh.casino888.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 19:17:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844826": [
        {
            "ioc_value": "hvid2q0h.bet24bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 19:09:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844825": [
        {
            "ioc_value": "bet24bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 19:07:55",
            "last_seen_utc": "2026-07-04 19:08:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844808": [
        {
            "ioc_value": "otlqkiy.betmiz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 18:34:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844801": [
        {
            "ioc_value": "zqtjqik.betiran.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 18:08:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844793": [
        {
            "ioc_value": "agnbpfw.arbetwinner.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 17:30:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844791": [
        {
            "ioc_value": "mpfmdjf.ace90.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 17:14:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844789": [
        {
            "ioc_value": "9vxg256z.bazikeno.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 17:09:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844788": [
        {
            "ioc_value": "bazikeno.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 17:07:59",
            "last_seen_utc": "2026-07-04 17:08:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844783": [
        {
            "ioc_value": "vhnp4ovl.1xcart.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 16:42:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844781": [
        {
            "ioc_value": "mz2qs1j6.1xforward.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 16:26:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844780": [
        {
            "ioc_value": "ovrrdtl.ace90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 16:23:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844772": [
        {
            "ioc_value": "f2bab102784860e65cd488387e42ca50",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844773": [
        {
            "ioc_value": "9a7af0a766f7717d478c94414b15d25e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844774": [
        {
            "ioc_value": "904613f59987b5ebbc3e7d94b1390420",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844775": [
        {
            "ioc_value": "9b3dce50e1056e6eca0faee733c33f35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844776": [
        {
            "ioc_value": "c12dde993b1954bb7a890e0d6a3c1314",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844777": [
        {
            "ioc_value": "cb3ac44312acae80a626ba1aa593f4de",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844765": [
        {
            "ioc_value": "266f33db148efc6ea7f978a246d36663",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844766": [
        {
            "ioc_value": "be6010d8bddef29ebbf3c8bb28f19517",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844767": [
        {
            "ioc_value": "1c302704a76e2effc99f2d5e339d7f64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844768": [
        {
            "ioc_value": "f1e9419110b9f316c070eca39bea63d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844769": [
        {
            "ioc_value": "69446d7192ce7e5737bd9f7cbc7ca74a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844770": [
        {
            "ioc_value": "7d31b4d8fa391abaf49bf2c36d33fea2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844771": [
        {
            "ioc_value": "251af0f2bea6c39064e162eac3b99ed6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844752": [
        {
            "ioc_value": "fe609cbd263e01a51c53ce0651ad0ade",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844753": [
        {
            "ioc_value": "432fdcf8fc43c3871c3346bb2aeb3de2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844754": [
        {
            "ioc_value": "0a52eca4d42889d0b3d21de101d4bea6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844755": [
        {
            "ioc_value": "1ff7de4a7b52e02a211e39831061916f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844756": [
        {
            "ioc_value": "335d1205e666a401cc9ae6525a66546d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844757": [
        {
            "ioc_value": "cf135dac1f6d5c72cb2f361aad02591f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844758": [
        {
            "ioc_value": "ba9e9d8577544204e544d91a4cfbed9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844759": [
        {
            "ioc_value": "64622cb996b115fac71477650db0bb90",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844760": [
        {
            "ioc_value": "561a13e7c71a8ebd4db51d04e61ba1ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844761": [
        {
            "ioc_value": "6b96b2e3cbd523607816524e67c36539",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844762": [
        {
            "ioc_value": "e48e6c4a26379e2cf4a8e8c9a59ef094",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844763": [
        {
            "ioc_value": "fe9b98bcd6fdab8766d8744e2ebda2c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844764": [
        {
            "ioc_value": "a61ecd4bce5b291686756e7f1cda5c7b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844739": [
        {
            "ioc_value": "0bf7db6f6f756c1ce4346ac88727d04c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844740": [
        {
            "ioc_value": "25f568d7838e70b4f8dafadd74a7d7fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844741": [
        {
            "ioc_value": "78d5bbac805b333ec066c1a407403077",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844742": [
        {
            "ioc_value": "d53974a4be8dc8fe98ca1bf1e8209b5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844743": [
        {
            "ioc_value": "c1497cc6759e5c9f0e3a86d40b601559",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844744": [
        {
            "ioc_value": "4e0e3ad31c0c52c1e171fd1ed6b857f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844745": [
        {
            "ioc_value": "39015f73ac1c8fcbf6bce413a22cfadb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844746": [
        {
            "ioc_value": "74ceeff02f9c10bd97b9d51b912d1907",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844747": [
        {
            "ioc_value": "510e518bbcae3b73aaece35b95cd25a8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844748": [
        {
            "ioc_value": "ba72eaf5f68103e43240c5b78711fb62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844749": [
        {
            "ioc_value": "a27c95793111ec5ad8be6d3d9728d94a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844750": [
        {
            "ioc_value": "493cf7c8d3ed22ce8990e6ef1c5bb1b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844751": [
        {
            "ioc_value": "1e3e29a85fc7fe89f3696facaa9db43c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844738": [
        {
            "ioc_value": "59521e38698120af1b5072b64894df68",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844731": [
        {
            "ioc_value": "d772282592444d6215d3a334c7cc338f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844732": [
        {
            "ioc_value": "ee11300d9a4fcec0e2172de5519049ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844733": [
        {
            "ioc_value": "9212fe6f148538c752ed95789c963e3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844734": [
        {
            "ioc_value": "8873d6ba9da18451ee95da046c7c6de7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844735": [
        {
            "ioc_value": "6d3b8d56916cd9b741d9a6639ad5044a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844736": [
        {
            "ioc_value": "4ef616fe7054594e771868ae860feee5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844737": [
        {
            "ioc_value": "6dd9bd329127ae9eb15cbbe715ca9da0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844723": [
        {
            "ioc_value": "d343a2faa7dcd81c8c45ca87c78a9531",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844724": [
        {
            "ioc_value": "691a2eac6ec1368ab1ebbf8e5827b41b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844725": [
        {
            "ioc_value": "f548df5972128c4fe852dfd221150738",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844726": [
        {
            "ioc_value": "2393affaacf65a5fe1755315d581cf0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844727": [
        {
            "ioc_value": "a82006f49debbb71c624429efed67e58",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844728": [
        {
            "ioc_value": "e218b8685c58080ff42dd0c8af154849",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844729": [
        {
            "ioc_value": "479a7ca02fe77c4465a3cf732eaa4791",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844730": [
        {
            "ioc_value": "13a208ad6b172ec37bfe5dacaf0b96fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844712": [
        {
            "ioc_value": "780a6443312a97c4c04955d21f767bd1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844713": [
        {
            "ioc_value": "540276ec9bc5944cb769956ad207288e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844714": [
        {
            "ioc_value": "5be0b456c1488e32b8d152087401cc20",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844715": [
        {
            "ioc_value": "d402ffe03674489bb2d5103c8ab3f60e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844716": [
        {
            "ioc_value": "f5f52b13178c96bc8e25d1b7e78d1497",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844717": [
        {
            "ioc_value": "5ee634e2b12edba1e2c403fb9ba3e3fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844718": [
        {
            "ioc_value": "29026cecfb181e3fcc00e2ee3685f451",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844719": [
        {
            "ioc_value": "ce8a61aa2ea8ba555e41d2cba59bf397",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844720": [
        {
            "ioc_value": "1a5c04fc48b962864b86682f54294031",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844721": [
        {
            "ioc_value": "0622a0674df6620c1e54a4180955fb63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844722": [
        {
            "ioc_value": "21317bd3996c39b8b4cb7361268a1b7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844702": [
        {
            "ioc_value": "63e36739580577e2e5d9677f03b1ebb1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844703": [
        {
            "ioc_value": "549bb011a726e68223260f0bb50f7920",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844704": [
        {
            "ioc_value": "1d0c30501bf776c01ceaa65f5691a506",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844705": [
        {
            "ioc_value": "4359fa960923f059edce5fcdc39c5e4c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844706": [
        {
            "ioc_value": "cacae2128226e58ba93a2c09b4caaa82",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844707": [
        {
            "ioc_value": "ee6376447ef8346bdd1fe625185fbfd0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844708": [
        {
            "ioc_value": "bdab673b0e619e58212c9e8820d37d51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844709": [
        {
            "ioc_value": "7c407c1bad69c37f2498b3efce43d9ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844710": [
        {
            "ioc_value": "725bf8595f4373bff566ab35a9a6c5d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844711": [
        {
            "ioc_value": "100f2629b705497eaf152730ac3b41bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844694": [
        {
            "ioc_value": "665597a2901fe9839725126b1884321b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844695": [
        {
            "ioc_value": "19c43bee02e049b2a6d25121e2be8782",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844696": [
        {
            "ioc_value": "3e27e51227c7d613c967afbff8e7e6af",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844697": [
        {
            "ioc_value": "ab94023e14dd50565704857b12952e54",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844698": [
        {
            "ioc_value": "85e816f6bd731a288f1be797a2531b0e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844699": [
        {
            "ioc_value": "106c26587eb27cdab973e320f4cc10f3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844700": [
        {
            "ioc_value": "715d011c170ae2246bc17e33de4fbb7d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844701": [
        {
            "ioc_value": "8c113b3aa82c81eee7c6b4ed0ba9a90f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844681": [
        {
            "ioc_value": "fa7a39d34106ef52741a56adb281da3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844682": [
        {
            "ioc_value": "adfbbaa06a48ff59d0a48672867da825",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844683": [
        {
            "ioc_value": "5ec7de7a4df5aadb52c317c05bd00cd0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844684": [
        {
            "ioc_value": "22958a7a7044a2ff42c64639d71af989",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844685": [
        {
            "ioc_value": "3d30d0eb3484b37f2dc2bf9a804b0156",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844686": [
        {
            "ioc_value": "70735b4870e7d8e52bf45548df922149",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844687": [
        {
            "ioc_value": "7c51a9bfc46e3efc5de5397938868954",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844688": [
        {
            "ioc_value": "ba37105a276d86e128bf737c1386e6cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844689": [
        {
            "ioc_value": "d882aad77e0395c3db221213ff0f1a4f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844690": [
        {
            "ioc_value": "4778be442a687b1a454a83b070c526a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844691": [
        {
            "ioc_value": "d907a8565b03664455b7eb68dae7a81c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844692": [
        {
            "ioc_value": "2863a98a0e08b4b13da0874ec6b7cf15",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844693": [
        {
            "ioc_value": "9765e16983b302d180471084929544eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844671": [
        {
            "ioc_value": "956f2e9ba3205c88d64d6e308662c690",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844672": [
        {
            "ioc_value": "152fbd62a872a4f80dafd9a2f0548d59",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844673": [
        {
            "ioc_value": "67e5faa2e8bdb1776ca9ba9614ed1573",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844674": [
        {
            "ioc_value": "ec20bdb75f0d4ddd40f559795b4cda74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844675": [
        {
            "ioc_value": "4e8ca5230752370c7137411362d884be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844676": [
        {
            "ioc_value": "ef1df6880f861de62d8b30cd3623f410",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844677": [
        {
            "ioc_value": "db1d42421e41141175b3d14de1b5421f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844678": [
        {
            "ioc_value": "ee238e2b2cf81300aed1ac5fc8c25bec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844679": [
        {
            "ioc_value": "416bc269b470acc180734ad891b0a453",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844680": [
        {
            "ioc_value": "30fe6c10974aeb31c1709732c2e60fdb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-07-04 16:17:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844666": [
        {
            "ioc_value": "great-fade.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 15:33:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844665": [
        {
            "ioc_value": "admiration-noble.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 15:33:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844664": [
        {
            "ioc_value": "qnfqfmh.ace90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 15:31:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844663": [
        {
            "ioc_value": "http://tallyr.shop:6584",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-04 15:31:11",
            "last_seen_utc": "2026-08-01 04:18:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0347bfabe6d27d89ada9a4ddf3209c4d9e713345067fb678d811ca685c89baa5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844662": [
        {
            "ioc_value": "http://envelzm.xyz:4538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-04 15:31:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795c58e3dbf18a4541913768eb4adc9d7645e2eadd29b69d8f93fa54d14897af/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844661": [
        {
            "ioc_value": "http://193.148.56.145/8e469217c34746588eec.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 15:31:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9717512548e83fa4eb12d4f7db442e8aabbda304293681986699c9a758ef6cba/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844659": [
        {
            "ioc_value": "2i2joe5h.aviatorfly.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 15:10:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844658": [
        {
            "ioc_value": "authorization-id-code.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 15:09:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844657": [
        {
            "ioc_value": "authorization-code.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 15:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844655": [
        {
            "ioc_value": "103.42.30.154:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 15:05:05",
            "last_seen_utc": "2026-08-15 22:46:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844652": [
        {
            "ioc_value": "c5ec7e2ad924e832e49fbac9d0c82719b570e080",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.mimikatz",
            "malware_alias": null,
            "malware_printable": "MimiKatz",
            "first_seen_utc": "2026-07-04 14:41:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844653": [
        {
            "ioc_value": "77c96f339974b65ae435313a8fcc3b35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.mimikatz",
            "malware_alias": null,
            "malware_printable": "MimiKatz",
            "first_seen_utc": "2026-07-04 14:41:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844651": [
        {
            "ioc_value": "889cc3e793cb39889c7acc8e73a84973e9a08fcd69451f7b546509c74ffdda90",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.mimikatz",
            "malware_alias": null,
            "malware_printable": "MimiKatz",
            "first_seen_utc": "2026-07-04 14:41:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844650": [
        {
            "ioc_value": "82db12c13a8c6695c43ae207fa358ebf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-04 14:41:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844647": [
        {
            "ioc_value": "21d7da7df67ca557739367e12f015061",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 14:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844648": [
        {
            "ioc_value": "ffa6334625c7613e5a3b8817c742e43a2e9447fcaae7305e3eeaf0be5eb4ea70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-04 14:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844649": [
        {
            "ioc_value": "8b686bac3a44ead6dee49ce4b5a1e5af4a2749d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-04 14:41:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844645": [
        {
            "ioc_value": "79a2ef6dd3056588d046746120a10ef1fceec80bf05e4221598101115d9215e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 14:41:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844646": [
        {
            "ioc_value": "4650900dca211c00a744bf0c331e6098081b33c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 14:41:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844643": [
        {
            "ioc_value": "860ab6cd532caaa50af2c42ff4deca346a1ee009",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-04 14:41:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844644": [
        {
            "ioc_value": "06ab1af35ab18f2b8e8777b397a2cd4b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-04 14:41:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844642": [
        {
            "ioc_value": "765bfb5d7829184a23f615b871baebf893563d911dddd1d1c1a34604e5456cce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-04 14:41:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844641": [
        {
            "ioc_value": "6c05ab37c2665353719dc535df55d6c4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 14:41:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844638": [
        {
            "ioc_value": "98006c884a359668964ba2fa91770f35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844639": [
        {
            "ioc_value": "6af02f9f08e5d6e9318ed302e4d74618148f7c600af1b394e05812b18b8ca040",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 14:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844640": [
        {
            "ioc_value": "2801386033834bede5f00d5442192cdfd6fe31ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 14:41:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844635": [
        {
            "ioc_value": "4393ba303809c3ce1e5edcf4fa73d2f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844636": [
        {
            "ioc_value": "27e3c9b676e96ef69a0043ebf547748ac7189207dc2100cc188ea024be596266",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844637": [
        {
            "ioc_value": "e373a6356acc578039a720e6a4ad0d9929424f64",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844632": [
        {
            "ioc_value": "8cd18949fe86667303cd19c683310d55",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844633": [
        {
            "ioc_value": "8cbe48fc14585b878bda6c568ae10e1c0f063034c86f868b3cc324354596d32f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844634": [
        {
            "ioc_value": "0f06d82432a719e0079783e595dcd3f8277d1bd7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844630": [
        {
            "ioc_value": "5a67fd7e1f3bd5d1bca01efa7bd91407635d0c69e4d8924b0c4c87296dc11d40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844631": [
        {
            "ioc_value": "6021e8847189f411d1a913228a0c73eb59c5ff25",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844627": [
        {
            "ioc_value": "3855f94e68b2b0353b8e318a2864b959631ecff88e90fddde4e5a77c69acac72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844628": [
        {
            "ioc_value": "e3abc5b9332579b9b99f490616d33ef7142e223a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844629": [
        {
            "ioc_value": "a23a1b44ccc709bcbbc23ee3cd6fb342",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-07-04 14:41:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844624": [
        {
            "ioc_value": "ce23b56615c9b0625799dca8c83558eb1016cce8aec1919dd52d31bf646eface",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zloader",
            "malware_alias": "DELoader,SILENTNIGHT,Terdot",
            "malware_printable": "Zloader",
            "first_seen_utc": "2026-07-04 14:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844625": [
        {
            "ioc_value": "34250e233be1f6dfc22212b556503c625df02075",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.zloader",
            "malware_alias": "DELoader,SILENTNIGHT,Terdot",
            "malware_printable": "Zloader",
            "first_seen_utc": "2026-07-04 14:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844626": [
        {
            "ioc_value": "dcfbe94f7ead20bb942b06ecb67937fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.zloader",
            "malware_alias": "DELoader,SILENTNIGHT,Terdot",
            "malware_printable": "Zloader",
            "first_seen_utc": "2026-07-04 14:41:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844621": [
        {
            "ioc_value": "4ae4d4f2faf96941187abdf2d292b4ce995ecc94dc68f8e7d4e0e49747caed6d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-04 14:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844622": [
        {
            "ioc_value": "fc778892bd31ad42e967890ca0d4e2a661897841",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-04 14:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844623": [
        {
            "ioc_value": "6bedd45f963b7f078071bb6eeb1edcae",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.kuiper",
            "malware_alias": null,
            "malware_printable": "Kuiper",
            "first_seen_utc": "2026-07-04 14:41:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844618": [
        {
            "ioc_value": "6f8075452b80f23418fd92e80429999ae270a6c4b88ce22cfb4223ba9853d6e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844619": [
        {
            "ioc_value": "39c94ed1e92f67fe524f62715530b14f27e2bbb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844620": [
        {
            "ioc_value": "f61219176469a9f98818c223a40ab36e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844615": [
        {
            "ioc_value": "be5b469852253e4c60925777c114b46e7fca797bd21dc39b2f3774589ce0909a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844616": [
        {
            "ioc_value": "5291f0767ba9c4b4810611aceb26bb594ee19779",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844617": [
        {
            "ioc_value": "7e81a8f28d5cd3b1a247c11b5ae64366",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844613": [
        {
            "ioc_value": "998bd82470d28954e1882c08a5b0cc22daa5112a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844614": [
        {
            "ioc_value": "1b6c6fd00fe08524cbb4cdd0ef1eeb9a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844610": [
        {
            "ioc_value": "b74eebc3f8f079f2f92df1292655a715ec0d3dff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844611": [
        {
            "ioc_value": "6bbf04841f5907661a1d85a386a256ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844612": [
        {
            "ioc_value": "1aa4445c35c8bfb52304fcd252451843ff671d115c9e75a123043dc79ae9cdc6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844607": [
        {
            "ioc_value": "bb3a7fd3b9cbaa214cd086dc6fb09b1cba35f3d8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844608": [
        {
            "ioc_value": "d0cc83bf01aa935bd8c0f6c274fbfcac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844609": [
        {
            "ioc_value": "def580734d7194d862e5dac7d48980c392ba93ce5bf85c37f664666b61f83899",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844605": [
        {
            "ioc_value": "e1b2d22e59ae44fc34f2120f1b86c7f8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quantloader",
            "malware_alias": null,
            "malware_printable": "QuantLoader",
            "first_seen_utc": "2026-07-04 14:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844606": [
        {
            "ioc_value": "c2a388115e47c2ffb0f65ec4ef28f8c961e9c37ade10b39dd920fa5909824e7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844602": [
        {
            "ioc_value": "a8e9db0011ac6886b75ddcd69bc503d8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844603": [
        {
            "ioc_value": "dcfd33a5ed6c86fde6216ee270884e6a977e0daed7db7077ae0b1c7fbe3af860",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quantloader",
            "malware_alias": null,
            "malware_printable": "QuantLoader",
            "first_seen_utc": "2026-07-04 14:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844604": [
        {
            "ioc_value": "e3faf16050daeefd8ef9a87105a9179e9b587b03",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quantloader",
            "malware_alias": null,
            "malware_printable": "QuantLoader",
            "first_seen_utc": "2026-07-04 14:41:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844599": [
        {
            "ioc_value": "0b88b880dccce959dd97041c5a816cf4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844600": [
        {
            "ioc_value": "3fc02d5534d74a38e1ef4b6121818ce3358bbe1e9a823f7e6c741e9d1911cc48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844601": [
        {
            "ioc_value": "36c34ad170bc6ab9e54bb55d1b9b1cf33387c436",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844596": [
        {
            "ioc_value": "0afa3d3d8b58319412921c9b85e0c336",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 14:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844597": [
        {
            "ioc_value": "20d47fa34fb6c5841bbebea4796b7b9fcc3f6920ef9d3be0530978f0cbc6e4d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844598": [
        {
            "ioc_value": "8602e5159f64ce434785e369050a06b2d856e958",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844594": [
        {
            "ioc_value": "d284841b717f1ced21ea84cd6a6b6b620daaf7c6f12f8b1f16525ada570f7d82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 14:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844595": [
        {
            "ioc_value": "fba9a25e345f2ea309398c8e6b7b4105f1143cd2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 14:41:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844591": [
        {
            "ioc_value": "62d519d2145d24a251dee3cf9b4b8cd72fb48bdb5697289e38a784e8fffe7003",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 14:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844592": [
        {
            "ioc_value": "4fae76071869d1d1d97f4abf410f2394eee1c434",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 14:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844593": [
        {
            "ioc_value": "3dec0c4966559f2471c4c03dad2b3d4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 14:41:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844588": [
        {
            "ioc_value": "b02174f08e5f467415dbd2a8e61404c8a370e2adcbfaa68bd8e3b52ad68097b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 14:41:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844589": [
        {
            "ioc_value": "5757ec1b749b551d3a5e59985327cb34b372bbba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 14:41:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844590": [
        {
            "ioc_value": "aa6160ad03a10f68a2069b8cb8ed567b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 14:41:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844584": [
        {
            "ioc_value": "6906e4395bc38d607d969c0699c73492",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844585": [
        {
            "ioc_value": "3a87b24c57f5a83bfadca1e83360618f89f8d53c1bfccb1a8c005547877feac2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844586": [
        {
            "ioc_value": "91bec80a496ade780dc7ad31b15a3bd41850abc1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844587": [
        {
            "ioc_value": "1d66a458777f3fc06bc4f412cf7f80ec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844581": [
        {
            "ioc_value": "9d4c5dc5e3e3fda1a041e655a539b8d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 14:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844582": [
        {
            "ioc_value": "8f718c4590f4b47e990071b4a139c08a8a130c35913106d3014360d87f18309f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844583": [
        {
            "ioc_value": "1054c11b6ab75a0d4477689a8100159620f116d7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844577": [
        {
            "ioc_value": "222d979c43fe54adb1a7479982a3fa30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844578": [
        {
            "ioc_value": "144cc3e02b7ef259abcb2d6eaf5f4f770630ad2c75dcfa48437df3b17f5094bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 14:41:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844579": [
        {
            "ioc_value": "cswnawh.accbartar.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 14:41:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844580": [
        {
            "ioc_value": "594cb94deece9a3b79b0cb1518a11843de8ace9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 14:41:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844574": [
        {
            "ioc_value": "bd950dd35df99a4cef5f7056f9338103",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.krasue_rat",
            "malware_alias": null,
            "malware_printable": "Krasue RAT",
            "first_seen_utc": "2026-07-04 14:41:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844575": [
        {
            "ioc_value": "24a86b9e58a4369e6c58d9b8185881a0a67987465ae18af1b7bbc7577cce724e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844576": [
        {
            "ioc_value": "dc182edfa40394392a1ada4925989e994a3db462",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844572": [
        {
            "ioc_value": "1ce5558cc258c2882174c3bba8de331ade2a393592d7bf90c3855131be550e72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.krasue_rat",
            "malware_alias": null,
            "malware_printable": "Krasue RAT",
            "first_seen_utc": "2026-07-04 14:41:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844573": [
        {
            "ioc_value": "5902eb92511925382558e82d5eb853098fa70a23",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.krasue_rat",
            "malware_alias": null,
            "malware_printable": "Krasue RAT",
            "first_seen_utc": "2026-07-04 14:41:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844569": [
        {
            "ioc_value": "a2f9b36903b3f2bb82cff00b8b916db81dcf33a9764b9a94d429c92bc0120b1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844570": [
        {
            "ioc_value": "cd652f170425e6565b566d2e54e5ac743ac95548",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844571": [
        {
            "ioc_value": "1e07711bb5efbdfcf3565f86fee55095",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844567": [
        {
            "ioc_value": "f30db4c7e2a0d696528d3a193a8ab6aac2911bf8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844568": [
        {
            "ioc_value": "015ca6dc0327be60d7ee89b2c92fd1fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844564": [
        {
            "ioc_value": "52281ece57d7d80d48fc477441c28da6facd6809",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844565": [
        {
            "ioc_value": "daebfec55301e8ae10bbee72084c6f0b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844566": [
        {
            "ioc_value": "c82df76eec8d28b99a294bc174433851aad21df208a7f27038bc3fd5af91db3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844562": [
        {
            "ioc_value": "51242d1f06d41c80ea8c6fa541be3d6e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-04 14:41:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844563": [
        {
            "ioc_value": "6c419d26fdf99bc352570d32094e9e78b06e5b3e3b5fb64989292593e58048b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844560": [
        {
            "ioc_value": "eb4c2dc7db21d6a8a889c74c7b90eaac0e095205063ae3e348a400e253c6bdd8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-04 14:41:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844561": [
        {
            "ioc_value": "a01f91e44b2a59f24b9e9c72e46e2207b6f86526",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-04 14:41:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844557": [
        {
            "ioc_value": "95ebb02315da2e1b32a56df3613778de16ed4f0c55b6cb5d5e786de23cc45df8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844558": [
        {
            "ioc_value": "f18e3750dada850f5d3ff9be639fa55825ee0284",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844559": [
        {
            "ioc_value": "acd8bb66be0920b8bfacaeb22d10ba31",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844554": [
        {
            "ioc_value": "094c4eb7f5480fb893aa6bb24d40b1b36534c0c85ea5e3f8c485146c45328ad6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844555": [
        {
            "ioc_value": "1b38f737003d988290cff328e42fded7249ed6bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844556": [
        {
            "ioc_value": "125eacdebdfc926549fb90c2a655cafc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844551": [
        {
            "ioc_value": "b7ec650df72dc36580fdf68d9ccbbbc4e91286c9389064570c9e61d6b1dd8bca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844552": [
        {
            "ioc_value": "dd30d0da838bae65d299c3ea9c8fee36edc34837",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844553": [
        {
            "ioc_value": "b8b049aa3105e673e702c73b3698ffb5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844548": [
        {
            "ioc_value": "63737ab4e5b5310e0468b3707e749c53609e9962ed0e4a19ab1ce2a358dcd3a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 14:41:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844549": [
        {
            "ioc_value": "85e68fadc18ecc8b9910f074b2eb5b10eb9ff3d3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 14:41:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844550": [
        {
            "ioc_value": "8de53e5218a9fb8e332209778920471c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 14:41:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844546": [
        {
            "ioc_value": "5f5c56a6195e2e15167660416f442d3b10b8eff1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-04 14:41:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844547": [
        {
            "ioc_value": "4a47fe8302615af0e44cb9340b497562",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-04 14:41:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844545": [
        {
            "ioc_value": "a422649564f3069ed4fcd02f25796ca99ed25cdaa0192652a11688005182a3fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-04 14:41:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844544": [
        {
            "ioc_value": "d452e6814073eff62f07b56d290da680",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844540": [
        {
            "ioc_value": "4e42e7ab43f9d868b899961aff67c804",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844541": [
        {
            "ioc_value": "2603246549cd0da58081690c184ebac031b17d034552019089eedcbbfdf1db3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844542": [
        {
            "ioc_value": "335524cd9417303a9f95041c9dd8e2531e5b82c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 14:41:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844537": [
        {
            "ioc_value": "6bfcd5ae2d0c24563fe755a56b5c8bb0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-04 14:41:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844538": [
        {
            "ioc_value": "8ee45671a9bfc0c4f45c228cdb8a0bbb70898303739a2b787a1ec47ecffb9805",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844539": [
        {
            "ioc_value": "875e7a2366d8cf744bc6abf869a5c873f88eade0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 14:41:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844534": [
        {
            "ioc_value": "bab942641669db23c43e76e650b83daf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 14:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844535": [
        {
            "ioc_value": "1a4b2bb9352969a3913db57f776dbaa48b03dfb96ce3addfa346e92687b8cf20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-04 14:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844536": [
        {
            "ioc_value": "6b45cf0473f25fbb8236e6a96d999f088aa78f60",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-07-04 14:40:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844532": [
        {
            "ioc_value": "26c54b1a0cb5d8636966e6f27505035b2521c7733ee8827b21a9a76f934665e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 14:40:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844533": [
        {
            "ioc_value": "c8e7f905c57e0b4fc0d860ea997727f5cc2d00a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 14:40:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844531": [
        {
            "ioc_value": "rucuxpv.acbet.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 14:05:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844524": [
        {
            "ioc_value": "www.dservices.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.bahamut",
            "malware_alias": null,
            "malware_printable": "Bahamut",
            "first_seen_utc": "2026-07-04 13:24:02",
            "last_seen_utc": "2026-08-02 23:48:02",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=www.dservices.space",
            "tags": "Bahamut,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844523": [
        {
            "ioc_value": "ayoddsw.acbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 13:14:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844521": [
        {
            "ioc_value": "0pkit2tt.prozhedownload.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 13:08:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844520": [
        {
            "ioc_value": "prozhedownload.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 13:06:26",
            "last_seen_utc": "2026-07-05 01:10:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844516": [
        {
            "ioc_value": "pzczhnl.yek.autos",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 13:03:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844514": [
        {
            "ioc_value": "evypenr.winnerbahis-tr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 12:07:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844513": [
        {
            "ioc_value": "151.242.188.114:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-04 12:05:06",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844508": [
        {
            "ioc_value": "zozhhgic.btyek.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 12:01:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844505": [
        {
            "ioc_value": "209.200.246.194:47196",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 11:47:19",
            "last_seen_utc": "2026-08-05 08:47:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844506": [
        {
            "ioc_value": "209.200.246.194:53221",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 11:47:19",
            "last_seen_utc": "2026-08-05 08:47:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844504": [
        {
            "ioc_value": "134.122.135.66:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 11:47:06",
            "last_seen_utc": "2026-08-04 18:47:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844503": [
        {
            "ioc_value": "ms9amh2h.1xcart.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 11:41:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844500": [
        {
            "ioc_value": "rxyvhv1x.1xforward.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 11:23:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844498": [
        {
            "ioc_value": "gakvmew.tinybet.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 11:14:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844497": [
        {
            "ioc_value": "1v2w5ogt.prozhe.shopping",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 11:09:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844491": [
        {
            "ioc_value": "https://imgbb.media/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 10:40:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/imgbb.media",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1844490": [
        {
            "ioc_value": "cgoucbv.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 10:27:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844466": [
        {
            "ioc_value": "three.followfromapps.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 10:08:52",
            "last_seen_utc": "2026-07-04 09:26:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844467": [
        {
            "ioc_value": "goto.followfromapps.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 10:08:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844478": [
        {
            "ioc_value": "midpfv.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-04 10:08:51",
            "last_seen_utc": "2026-07-27 15:54:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab5d1a42babf7a6ff6ea6bf2f661fe419ed3c6b59ba59097a0dcd31f2798b577/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1844481": [
        {
            "ioc_value": "159.203.35.164:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 10:08:50",
            "last_seen_utc": "2026-07-07 11:58:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844486": [
        {
            "ioc_value": "35.79.190.98:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-04 10:08:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.shodan.io/search?query=product%3A%22Brute+Ratel+C4%22",
            "tags": "Brute Ratel C4,BrutelRatel",
            "anonymous": 0,
            "reporter": "abdelrahman816"
        }
    ],
    "1844487": [
        {
            "ioc_value": "13.196.44.85:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-04 10:08:48",
            "last_seen_utc": "2026-08-07 18:43:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.shodan.io/search?query=product%3A%22Brute+Ratel+C4%22",
            "tags": "Brute Ratel C4,BrutelRatel",
            "anonymous": 0,
            "reporter": "abdelrahman816"
        }
    ],
    "1844488": [
        {
            "ioc_value": "52.196.76.29:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-04 10:08:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.shodan.io/search?query=product%3A%22Brute+Ratel+C4%22",
            "tags": "Brute Ratel C4,BrutelRatel",
            "anonymous": 0,
            "reporter": "abdelrahman816"
        }
    ],
    "1844489": [
        {
            "ioc_value": "54.248.149.54:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-04 10:08:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.shodan.io/search?query=product%3A%22Brute+Ratel+C4%22",
            "tags": "Brute Ratel C4,BrutelRatel",
            "anonymous": 0,
            "reporter": "abdelrahman816"
        }
    ],
    "1844477": [
        {
            "ioc_value": "46.246.4.7:2003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-04 09:46:01",
            "last_seen_utc": "2026-08-04 18:46:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844476": [
        {
            "ioc_value": "46.151.182.138:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 09:46:00",
            "last_seen_utc": "2026-08-14 18:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844475": [
        {
            "ioc_value": "211.159.223.14:21891",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 09:44:47",
            "last_seen_utc": "2026-08-03 18:44:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844474": [
        {
            "ioc_value": "207.174.1.243:7203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-04 09:44:42",
            "last_seen_utc": "2026-08-03 18:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844473": [
        {
            "ioc_value": "185.115.164.60:59802",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 09:44:11",
            "last_seen_utc": "2026-08-03 18:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844472": [
        {
            "ioc_value": "185.115.164.59:61737",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 09:44:10",
            "last_seen_utc": "2026-08-03 18:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844471": [
        {
            "ioc_value": "130.12.182.95:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 09:43:25",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844469": [
        {
            "ioc_value": "103.11.41.19:4155",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 09:43:09",
            "last_seen_utc": "2026-08-03 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844470": [
        {
            "ioc_value": "103.11.41.19:52462",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-04 09:43:09",
            "last_seen_utc": "2026-08-03 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844468": [
        {
            "ioc_value": "xxjbypq.takbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 09:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844465": [
        {
            "ioc_value": "wji9u2ff.fileecell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 09:09:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844464": [
        {
            "ioc_value": "fileecell.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 09:05:21",
            "last_seen_utc": "2026-07-04 09:06:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844459": [
        {
            "ioc_value": "blackkkkkdate.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 08:50:37",
            "last_seen_utc": "2026-07-05 11:00:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844460": [
        {
            "ioc_value": "ps.blackkkkkdate.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 08:50:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,js-injector,sign1",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844458": [
        {
            "ioc_value": "oxepqya.btyek.autos",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 08:42:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844457": [
        {
            "ioc_value": "sevffjdu.jozveyek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 08:34:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844455": [
        {
            "ioc_value": "47.116.57.211:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 08:19:14",
            "last_seen_utc": "2026-07-09 06:50:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844454": [
        {
            "ioc_value": "176.121.49.1:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 08:19:12",
            "last_seen_utc": "2026-08-02 07:50:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844453": [
        {
            "ioc_value": "119.29.91.172:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-04 08:18:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844449": [
        {
            "ioc_value": "frfjuzh.btyek.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 07:50:46",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844448": [
        {
            "ioc_value": "https://eyuboglutv.com/nfront.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-07-04 07:18:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ce23b56615c9b0625799dca8c83558eb1016cce8aec1919dd52d31bf646eface/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844447": [
        {
            "ioc_value": "eyuboglutv.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-07-04 07:18:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ce23b56615c9b0625799dca8c83558eb1016cce8aec1919dd52d31bf646eface/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844446": [
        {
            "ioc_value": "154.194.99.166:63973",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 07:15:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dcfd33a5ed6c86fde6216ee270884e6a977e0daed7db7077ae0b1c7fbe3af860/",
            "tags": "DonutLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844138": [
        {
            "ioc_value": "archouse.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.strelastealer",
            "malware_alias": null,
            "malware_printable": "StrelaStealer",
            "first_seen_utc": "2026-07-04 07:11:37",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "StrelaStealer,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844037": [
        {
            "ioc_value": "165.22.109.43:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844042": [
        {
            "ioc_value": "123.99.198.201:21256",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.hupigon",
            "malware_alias": null,
            "malware_printable": "Hupigon",
            "first_seen_utc": "2026-07-04 07:10:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "gh0strat,purplefox",
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1844085": [
        {
            "ioc_value": "186.169.89.64:5010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 07:10:33",
            "last_seen_utc": "2026-08-12 08:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRat,DDNS",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1844087": [
        {
            "ioc_value": "186.169.89.64:9140",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 07:10:33",
            "last_seen_utc": "2026-08-12 18:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRat,DDNS",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1844089": [
        {
            "ioc_value": "botstart7.skillface.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 07:10:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRat,DDNS",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1844093": [
        {
            "ioc_value": "survivaltraits.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-04 07:10:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/82421bf7-5be8-4e92-ac64-2b16652162f3",
            "tags": "etherhiding,meshagent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1844094": [
        {
            "ioc_value": "mesh.sentra.cx",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-04 07:10:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260703-vcnwnscz4t/behavioral1",
            "tags": "etherhiding,meshagent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1844100": [
        {
            "ioc_value": "149.202.64.184:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:30",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844101": [
        {
            "ioc_value": "192.162.199.70:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:30",
            "last_seen_utc": "2026-07-11 18:04:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844102": [
        {
            "ioc_value": "144.31.221.215:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:30",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844103": [
        {
            "ioc_value": "178.16.54.25:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844104": [
        {
            "ioc_value": "178.16.55.83:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844105": [
        {
            "ioc_value": "77.90.185.107:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:29",
            "last_seen_utc": "2026-07-03 17:34:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844106": [
        {
            "ioc_value": "157.254.194.130:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:28",
            "last_seen_utc": "2026-07-03 17:47:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844107": [
        {
            "ioc_value": "64.224.17.118:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:28",
            "last_seen_utc": "2026-07-04 11:05:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844109": [
        {
            "ioc_value": "34.68.103.127:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:27",
            "last_seen_utc": "2026-08-01 17:40:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844092": [
        {
            "ioc_value": "sentrydb.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-04 07:10:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/82421bf7-5be8-4e92-ac64-2b16652162f3",
            "tags": "etherhiding,meshagent",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1844091": [
        {
            "ioc_value": "168.144.130.22:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844108": [
        {
            "ioc_value": "23.94.145.29:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:23",
            "last_seen_utc": "2026-07-03 17:47:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844111": [
        {
            "ioc_value": "91.92.33.183:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.craxs_rat",
            "malware_alias": null,
            "malware_printable": "CraxsRAT",
            "first_seen_utc": "2026-07-04 07:10:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,banker,CraxsRAT,dropper,HVNC,RAT,SafeRussia",
            "anonymous": 0,
            "reporter": "BadCoder1337"
        }
    ],
    "1844112": [
        {
            "ioc_value": "5f94e59c132a7ed0e35b60146d973a728ab9f390c8291f9547cee26c56427738",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.craxs_rat",
            "malware_alias": null,
            "malware_printable": "CraxsRAT",
            "first_seen_utc": "2026-07-04 07:10:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,CraxsRAT,dropper,SafeRussia",
            "anonymous": 0,
            "reporter": "BadCoder1337"
        }
    ],
    "1844113": [
        {
            "ioc_value": "fc99609172910a8fad9522b374f8bae21e5805abdf052a49029edb53620a8e8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.craxs_rat",
            "malware_alias": null,
            "malware_printable": "CraxsRAT",
            "first_seen_utc": "2026-07-04 07:10:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Android,apk,CraxsRAT,dropper,SafeRussia",
            "anonymous": 0,
            "reporter": "BadCoder1337"
        }
    ],
    "1844114": [
        {
            "ioc_value": "171.22.108.162:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 07:10:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Ip,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1844115": [
        {
            "ioc_value": "165.232.172.200:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:20",
            "last_seen_utc": "2026-07-04 09:16:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844118": [
        {
            "ioc_value": "104.249.10.71:2555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-07-04 07:10:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@james_inthe_box/116850467942889374",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1844123": [
        {
            "ioc_value": "lot.terangsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-04 07:10:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@netresec/116857590389290141",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1844180": [
        {
            "ioc_value": "159.203.35.164:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844186": [
        {
            "ioc_value": "165.22.109.43:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:12",
            "last_seen_utc": "2026-07-05 02:18:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844205": [
        {
            "ioc_value": "gtm-tracker.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 07:10:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/8ca790d8-723f-44eb-a0e1-e68e87186fc6",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1844206": [
        {
            "ioc_value": "tag-manager.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-04 07:10:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/8ca790d8-723f-44eb-a0e1-e68e87186fc6",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1844378": [
        {
            "ioc_value": "94.154.43.12:92",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-04 07:10:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1844215": [
        {
            "ioc_value": "138.197.155.246:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:08",
            "last_seen_utc": "2026-07-07 12:25:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844217": [
        {
            "ioc_value": "138.197.155.246:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:07",
            "last_seen_utc": "2026-07-07 07:37:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844382": [
        {
            "ioc_value": "168.144.130.22:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844402": [
        {
            "ioc_value": "103.253.212.175:6621",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-04 07:10:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1844413": [
        {
            "ioc_value": "165.22.109.43:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:10:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844416": [
        {
            "ioc_value": "eraleignews.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844417": [
        {
            "ioc_value": "wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844418": [
        {
            "ioc_value": "basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844419": [
        {
            "ioc_value": "bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:04",
            "last_seen_utc": "2026-07-04 06:08:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844420": [
        {
            "ioc_value": "basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844421": [
        {
            "ioc_value": "basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844422": [
        {
            "ioc_value": "bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844423": [
        {
            "ioc_value": "bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:02",
            "last_seen_utc": "2026-07-04 06:08:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844424": [
        {
            "ioc_value": "7bbqrijcds5sgji3kiwo5o5qgxfgoyufykhzfdo6xl3qbdes2e7tdyad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844425": [
        {
            "ioc_value": "bashed52orwi7qoyvmcfkdnuaogta4inpojfd6cthzkp4qpsq64ux4ad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:01",
            "last_seen_utc": "2026-07-04 06:08:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844426": [
        {
            "ioc_value": "bashedl53memptddxzb4kr5mnkzse4fmhpqeq7jb4srndswar46nofid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:01",
            "last_seen_utc": "2026-07-04 06:08:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844427": [
        {
            "ioc_value": "bashefe5uezp2jtxpk24b2pyfnnfyguicgrgqufgu57mfluegotbeayd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:00",
            "last_seen_utc": "2026-07-04 06:08:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844429": [
        {
            "ioc_value": "qku4reiyfcs2vqq5tow2uprhyqhweo56lrgs6457svr3ej4ton5frkad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:10:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844428": [
        {
            "ioc_value": "bashei5oy4zvmf2letnupwhgprdkjyssm3zxj2oyr6wfezkf3elehzqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:09:59",
            "last_seen_utc": "2026-07-04 06:08:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844430": [
        {
            "ioc_value": "fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:09:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844431": [
        {
            "ioc_value": "apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:09:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/APT73%20-%20Eraleig%20-%20Bashe%20Ransomware",
            "tags": "apt73,bashe,eraleig,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1844433": [
        {
            "ioc_value": "159.203.35.164:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:09:57",
            "last_seen_utc": "2026-07-07 13:19:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844438": [
        {
            "ioc_value": "165.22.109.43:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-04 07:09:57",
            "last_seen_utc": "2026-07-04 14:11:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844439": [
        {
            "ioc_value": "https://openeii.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-04 07:09:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/openeii.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1844445": [
        {
            "ioc_value": "ms9datqz.953.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 07:07:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844441": [
        {
            "ioc_value": "kwsgmru.btyek.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 07:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844437": [
        {
            "ioc_value": "91qdl1ty.1xcart.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 06:40:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844435": [
        {
            "ioc_value": "iu41zeaj.1xgame.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 06:22:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844432": [
        {
            "ioc_value": "ceohdvj.bonos.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 06:09:42",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844412": [
        {
            "ioc_value": "vchbhqa.betbazi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 05:20:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844405": [
        {
            "ioc_value": "q3g84ost.22beet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 05:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844403": [
        {
            "ioc_value": "gefpeqd.bet1xiraq.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 05:03:28",
            "last_seen_utc": "2026-07-06 02:31:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844401": [
        {
            "ioc_value": "feeykse.betbacklink.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 04:40:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844400": [
        {
            "ioc_value": "http://tolail.xyz:7538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-04 04:21:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/be5b469852253e4c60925777c114b46e7fca797bd21dc39b2f3774589ce0909a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844395": [
        {
            "ioc_value": "fituwzg.yek.autos",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 03:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844393": [
        {
            "ioc_value": "cxs9e097.vip1xbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 03:05:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844389": [
        {
            "ioc_value": "kmkyfcu.winnerbahis-tr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 02:57:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844387": [
        {
            "ioc_value": "lcizmbo.tinybet.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 02:05:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844381": [
        {
            "ioc_value": "7v8ver7f.1xgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 01:40:09",
            "last_seen_utc": "2026-07-10 22:10:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844380": [
        {
            "ioc_value": "ob0fix15.1xgame.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 01:21:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844377": [
        {
            "ioc_value": "erngvel.takbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 01:15:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844376": [
        {
            "ioc_value": "dqr7yibh.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 01:07:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844370": [
        {
            "ioc_value": "1f9fc655026196029f316ccec34b19f63ffdd391",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:44:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844371": [
        {
            "ioc_value": "6cb55456e3e5c099a85a7314076bb741",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:44:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844367": [
        {
            "ioc_value": "6d2c4dec7124013ede8472a8cc4af34dff96f2f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:44:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844368": [
        {
            "ioc_value": "c2c4fcaa0b2a62e71056e0d4f7411f9d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:44:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844369": [
        {
            "ioc_value": "4f0925945aedb397ad3cbdd0e9b9a3ebf96d64c242699a971c2c016636383569",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:44:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844364": [
        {
            "ioc_value": "bfee79725d2e6d9abc05d5832d401da8ca61b2dd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:44:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844365": [
        {
            "ioc_value": "9e4329504365602cb6ca0c6d4c1dd66b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:44:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844366": [
        {
            "ioc_value": "f37d19918ca9a92945198b23ab4e10be7d681e4aa1f8dfd1b0905482a006e7dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:44:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844361": [
        {
            "ioc_value": "22e7e6a72ef6ee81ae57cabc8da056e36a8ab7ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:44:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844362": [
        {
            "ioc_value": "d3d588d890278dd2318b41ea30ae7b40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:44:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844363": [
        {
            "ioc_value": "a65205ca49ac9a4308981ef7de0d1e5f834741ecfb6f5f2196f2ede18fc0a1cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:44:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844358": [
        {
            "ioc_value": "d612db0abb8aed772564df401b18a04dbdb2af1c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 00:44:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844359": [
        {
            "ioc_value": "4d3ed418cb63b8f513d97835a761e391",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 00:44:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844360": [
        {
            "ioc_value": "2599fc6c97a60c08520c557b1cc551cdd543293291e60c81dc010d6dcb8a8b03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:44:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844355": [
        {
            "ioc_value": "f680fbbf487f61c9bd231e48f83a9e1c092ceb6a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-04 00:44:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844356": [
        {
            "ioc_value": "b07f16a3b524017d20d360823c09b956",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-04 00:44:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844357": [
        {
            "ioc_value": "91e7539be877509b04b7425e35185615e76cabd3e9cb9e9ca4bfad36ad9096b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-04 00:44:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844352": [
        {
            "ioc_value": "3b1d7de6e3706bff6ace385a4d7f528133092431",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 00:44:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844353": [
        {
            "ioc_value": "4f8d6901a24803c4f90aa766de0005d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 00:44:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844354": [
        {
            "ioc_value": "4e5b2ae91379b8069c04c6639bb0bca5ddea0dde567bea8cb9bc9822b9cdda0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-07-04 00:44:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844349": [
        {
            "ioc_value": "430f0dd17036586215830f08b5cdbb2b23b1e1c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-04 00:44:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844350": [
        {
            "ioc_value": "3eed6feda84d42e38d4c0c9406460af6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-04 00:44:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844351": [
        {
            "ioc_value": "b66119ad548007e383d58987d81a200a42a89f021d0fc3b57022b91ea267bd2c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 00:44:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844346": [
        {
            "ioc_value": "8a3a3cc15f5035a772abcb15c01980c16df34d38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-04 00:44:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844347": [
        {
            "ioc_value": "0c78720e1c3df66ab5a7c60a9e0c8502",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-04 00:44:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844348": [
        {
            "ioc_value": "d365700f7b92b99111394dc199b782a237e5aeaf9f0544875b5071a9b3cb9a34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-07-04 00:44:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844343": [
        {
            "ioc_value": "7fe5367b3573ae5f1b1f61d288777438a717c740",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:44:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844344": [
        {
            "ioc_value": "64be9719cd0cf6fa1d33d27953aab23b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:44:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844345": [
        {
            "ioc_value": "4694ccf2399010c0e069f481e3471745dfe0a4f72003ed476ecf86b7b6b4ef7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-04 00:44:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844340": [
        {
            "ioc_value": "242191dbed6393d77c73d5f289512ffbaecc4521",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-07-04 00:44:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844341": [
        {
            "ioc_value": "0697eae9deae7c2d4039d83539811f17",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-07-04 00:44:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844342": [
        {
            "ioc_value": "6eaa4e25359d0b61c37a9884fbdb8c53bf00e8e9a5478e325e63338d0d2ad51b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:44:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844336": [
        {
            "ioc_value": "58a919673d1c3d581fe9e14a437a94297a77cce098191c286d5021a2211d6130",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-04 00:44:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844337": [
        {
            "ioc_value": "aca1078490d18009171b614edaf5ba314d32ab77",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-04 00:44:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844338": [
        {
            "ioc_value": "a95c4a4d11d588a6690fd1e95e4c3520",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-04 00:44:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844339": [
        {
            "ioc_value": "eacea4983eb01cabe9f621d7b28ae37cbc3e801106575272795e025de1064a29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-07-04 00:44:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844333": [
        {
            "ioc_value": "f770e3955872fbb611e7a8bc154efc34b2e363493847c3f211da72214fb2c4e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-04 00:44:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844334": [
        {
            "ioc_value": "f65c490de79558b3b29076e026783a9c408824c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-04 00:44:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844335": [
        {
            "ioc_value": "2de32f09e2ee68bb35d0bf164e6cf4b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-04 00:44:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844330": [
        {
            "ioc_value": "48ed2a2fc7652fc12c6edfc2efbef6d65a9f85bf5874dbaf275301775265e136",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844331": [
        {
            "ioc_value": "c5accdecde3ffd7f036e5b96e10ee132cb657644",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844332": [
        {
            "ioc_value": "faabc72c2848caf771c29c6cddfd5254",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844327": [
        {
            "ioc_value": "015a389e5c97ec1e545978359e19c08050ce2b3d23c88557ec9f4a540a4c6c51",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-04 00:44:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844328": [
        {
            "ioc_value": "ec8d4c78813660130325eb681bee334e54b28452",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-04 00:44:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844329": [
        {
            "ioc_value": "3542f2e27fa10e348e726fdc3a743b47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-04 00:44:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844324": [
        {
            "ioc_value": "275035f44dc9cf992964e3954ba0af5d09e0df6b5c1009befaaeb21408cc0bba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:44:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844325": [
        {
            "ioc_value": "f697275f6cb26ad58e4d8debf8cec6e4f2b21671",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:44:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844326": [
        {
            "ioc_value": "3aa8ec7fb0c2f9ecf0553bfcbd6aad64",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:44:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844321": [
        {
            "ioc_value": "ff825f043105b50df62b498b65c6c7632f2e7aab5efff1cdca49400e38bd2943",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-04 00:44:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844322": [
        {
            "ioc_value": "0641dfbd351174bd8c5ead8962ec24ab50b5d3a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-04 00:44:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844323": [
        {
            "ioc_value": "d32a6f12ae3234ebab9b240102730f38",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-07-04 00:44:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844318": [
        {
            "ioc_value": "eeb2d44d0f86670ac2ee5e0b7aa44ec41b7be9962359f59ac21f736d7b0e7889",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:44:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844319": [
        {
            "ioc_value": "16930eeb661537d9c34578174dfa6a0f2f00cece",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:44:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844320": [
        {
            "ioc_value": "27d3039a8ca9acbcbc985b88f27720a8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:44:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844315": [
        {
            "ioc_value": "7c4d1e3bff4c3d62adb8352b78e586b01eeba9e6d4b96715df89da84bae79c92",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844316": [
        {
            "ioc_value": "ef763b740a730abd79ca5c97a69933bd887fc207",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844317": [
        {
            "ioc_value": "01498deabb5500164c89021f8ff6d330",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844312": [
        {
            "ioc_value": "85ec743443fe4830daddd95a454fc05b6434adf486a6889134b5d50c29570c9d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 00:44:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844313": [
        {
            "ioc_value": "f57b0b8dbde00c34f3b89fcebb10a3631caa2a5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 00:44:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844314": [
        {
            "ioc_value": "659981348eab7fcf5fc2f0ead01628bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-04 00:44:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844308": [
        {
            "ioc_value": "094cdc3550ebb0d6a7ad470eae50b506",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844309": [
        {
            "ioc_value": "16e34d5b3836f196864a8efe804d8dcb5938801d29bed451a3b67dca6f7b0929",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-04 00:44:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844310": [
        {
            "ioc_value": "8e36e4e662812bec78ba97cdb43960743efc2bad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-04 00:44:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844311": [
        {
            "ioc_value": "a4cd834ba9819b28bb0a45a90f34f45b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-04 00:44:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844306": [
        {
            "ioc_value": "94faff7500a2f959889a3fff9bed01cb30fdb6ab5dbcbe984f592a3891333f36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844307": [
        {
            "ioc_value": "2135c244eea8e44b66050079b144a675ffbe118f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:44:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844303": [
        {
            "ioc_value": "a6264afd465d3a04bc0594251771ca50e372a8d40068707a67830be581bb2c2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:44:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844304": [
        {
            "ioc_value": "b8d2f8ead2d58c5ebf2d58e9fb29fa9f35f09217",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:44:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844305": [
        {
            "ioc_value": "0b131788c78be101415eb77a32a97866",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:44:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844299": [
        {
            "ioc_value": "c1cc183b4feb7f01efb4e39d1465c323",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-04 00:44:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844300": [
        {
            "ioc_value": "3d4d751665fc9f5247f34d7c3db5381d83c55cd1d49311b3570f2c002b36cb1e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 00:44:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844301": [
        {
            "ioc_value": "39d84147173f4274b80a3a730d1ccf12ee91fdbc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 00:44:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844302": [
        {
            "ioc_value": "3dcad3fff390dcb7acbb7a379e3cdbcf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 00:44:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844296": [
        {
            "ioc_value": "3de9cb6da3cc57f662e02e9545621ed5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 00:44:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844297": [
        {
            "ioc_value": "0275c6cf588a7e26e97cbd3a8d301370ebeb18470e86b21d295c8d93ca778d86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-04 00:44:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844298": [
        {
            "ioc_value": "3e49d1d2f401a5bbfc33926fee77b30f0c5f8f67",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-04 00:44:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844293": [
        {
            "ioc_value": "0433de72013e991a30c62cca38146e55",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 00:44:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844294": [
        {
            "ioc_value": "78ce14986dcd70c0fcf65e9a3dea518a6a66c17589dca2149134406d3e95c414",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 00:44:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844295": [
        {
            "ioc_value": "59f1de081d64450e1eff0b060b17098646eb9335",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-04 00:44:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844292": [
        {
            "ioc_value": "01f05c75fff57b225b9e8cbe749e1c41b48b2024",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 00:44:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844290": [
        {
            "ioc_value": "dfcc75c15d845541948899841cbf0114",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-04 00:44:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844291": [
        {
            "ioc_value": "cadea6f17dbee66cfb2d7aa1ed49f168f9fc201dcdd8d5b30d4e2cfdb7e069ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-04 00:44:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844287": [
        {
            "ioc_value": "fbfe4c2ffe4f4eba18c3c784bcd27528",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-04 00:44:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844288": [
        {
            "ioc_value": "ed3171b8abf77dcc65bb6801c784a3a5adf671332fa0ad38b81c5fd87005bcf3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-04 00:44:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844289": [
        {
            "ioc_value": "4996523f783856f5f964914c65401c3e6374c6f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-04 00:44:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844284": [
        {
            "ioc_value": "94e7502ee1d0fb12fa17acaa5588edb5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:43:59",
            "last_seen_utc": "2026-07-04 14:42:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844285": [
        {
            "ioc_value": "57d26f045da134f570eb745cee88057c0c3872d6aeab9477fc17ae46853e93c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-04 00:43:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844286": [
        {
            "ioc_value": "3efb2084f2eb98eff1ae58e497c27527d89192f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-07-04 00:43:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844282": [
        {
            "ioc_value": "bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:43:58",
            "last_seen_utc": "2026-07-04 14:42:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844283": [
        {
            "ioc_value": "8591a11d052e3f71a45c6a35aabd51f53e3d6358",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:43:58",
            "last_seen_utc": "2026-07-04 14:42:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844279": [
        {
            "ioc_value": "7bb8ff1a5d1262d63167c0db64c00ae1965671c5168720fda081ca62d41d57d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:43:57",
            "last_seen_utc": "2026-07-04 14:42:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844280": [
        {
            "ioc_value": "3f033e89ee8e868c4ca228c45225428c9a89b6b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:43:57",
            "last_seen_utc": "2026-07-04 14:42:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844281": [
        {
            "ioc_value": "608646f448c0a5c26a34c79fcec2257a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:43:57",
            "last_seen_utc": "2026-07-04 14:42:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844276": [
        {
            "ioc_value": "27ef8e01f2cc70843dfc973156abacf1f2abf601d3055476084ca8991a2f02c5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:43:56",
            "last_seen_utc": "2026-07-04 14:41:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844277": [
        {
            "ioc_value": "b3d8eaa541259bc78a1f11b304e55a3dc06c59a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:43:56",
            "last_seen_utc": "2026-07-04 14:41:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844278": [
        {
            "ioc_value": "dfa94b0185b88f097d6eb93b215ebd1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-04 00:43:56",
            "last_seen_utc": "2026-07-04 14:42:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844272": [
        {
            "ioc_value": "0214ece62b99fe55834a76ea2d928583",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.venon",
            "malware_alias": null,
            "malware_printable": "VENON",
            "first_seen_utc": "2026-07-04 00:43:55",
            "last_seen_utc": "2026-07-04 14:41:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844273": [
        {
            "ioc_value": "dd0bebc17d103b682c00e5cc6f92ae28432a357cc9f9fc49f1747d28931c6402",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:43:55",
            "last_seen_utc": "2026-07-04 14:41:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844274": [
        {
            "ioc_value": "f1a125525920011ef6658b2ab21aeb03ef107fc3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:43:55",
            "last_seen_utc": "2026-07-04 14:41:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844275": [
        {
            "ioc_value": "e1b807c2d7b670f8b7ba75df1fc4dbdd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:43:55",
            "last_seen_utc": "2026-07-04 14:41:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844269": [
        {
            "ioc_value": "7751792eebb0d401d0a580f5e142756a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:43:54",
            "last_seen_utc": "2026-07-04 14:41:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844270": [
        {
            "ioc_value": "ee0e3b3489ea0dd06f2af0b969e480c4fc6f2755cf4016dcba5d1299ac74f84e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.venon",
            "malware_alias": null,
            "malware_printable": "VENON",
            "first_seen_utc": "2026-07-04 00:43:54",
            "last_seen_utc": "2026-07-04 14:41:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844271": [
        {
            "ioc_value": "75d6c6cc7d453f0a8a8dcc1ec5baf72b00d9fa90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.venon",
            "malware_alias": null,
            "malware_printable": "VENON",
            "first_seen_utc": "2026-07-04 00:43:54",
            "last_seen_utc": "2026-07-04 14:41:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844266": [
        {
            "ioc_value": "e634daa853d4d5a55ad3ee5d20d336a9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-04 00:43:53",
            "last_seen_utc": "2026-07-04 14:41:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844267": [
        {
            "ioc_value": "fd2d5ada1da9e1088e3ad645543dcdf407a1996be32041c4fd64e15591962577",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:43:53",
            "last_seen_utc": "2026-07-04 14:41:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844268": [
        {
            "ioc_value": "e6c76b55c330ab9f6a9012c3b84a0a953387c2d1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-04 00:43:53",
            "last_seen_utc": "2026-07-04 14:41:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844263": [
        {
            "ioc_value": "a20ea51a49e18c2d2dc9d385fc4e2424",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:52",
            "last_seen_utc": "2026-07-04 14:41:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844264": [
        {
            "ioc_value": "31d293ffa5e55ff2df504ab951b785e902b335974826a9bfbcd4dfb29ab59068",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-04 00:43:52",
            "last_seen_utc": "2026-07-04 14:41:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844265": [
        {
            "ioc_value": "8478c8424b0ba031bd8b911e2ecddd344ce65a1c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-04 00:43:52",
            "last_seen_utc": "2026-07-04 14:41:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844259": [
        {
            "ioc_value": "8b8355ebf5be22e6eeeb9053919eae7dc42af9ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-04 00:43:51",
            "last_seen_utc": "2026-07-04 14:41:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844260": [
        {
            "ioc_value": "c189e3cd9342923a743770f191bd70cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-04 00:43:51",
            "last_seen_utc": "2026-07-04 14:41:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844261": [
        {
            "ioc_value": "62f1532516f3008ca2e15699e9862cd1c72eb84c7fb42289e81259d64c89b4f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:51",
            "last_seen_utc": "2026-07-04 14:41:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844262": [
        {
            "ioc_value": "2e3d92b2b654ad638e238fc3824cf870a617b613",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:51",
            "last_seen_utc": "2026-07-04 14:41:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844256": [
        {
            "ioc_value": "9582e63fead023ffbd4e1b14e92db89e7e563ef3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:50",
            "last_seen_utc": "2026-07-04 14:41:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844257": [
        {
            "ioc_value": "bbd5dd6263af978ebe7ddc57537204a4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:50",
            "last_seen_utc": "2026-07-04 14:41:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844258": [
        {
            "ioc_value": "7dd595347aea3817cde5da19e3a6b76adf2f0baef0ecbd67ff3d80be1d5930a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-04 00:43:50",
            "last_seen_utc": "2026-07-04 14:41:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844253": [
        {
            "ioc_value": "d64b237b02880d09515312c7d52769a6d2c8d813",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:43:49",
            "last_seen_utc": "2026-07-04 14:41:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844254": [
        {
            "ioc_value": "3e344a746bd85356e818872c40cc2407",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:43:49",
            "last_seen_utc": "2026-07-04 14:41:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844255": [
        {
            "ioc_value": "5971c4311611d94ae809f00b0ac2142e3e2db8b9a7ee5851ccd6321274c20c73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:49",
            "last_seen_utc": "2026-07-04 14:41:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844250": [
        {
            "ioc_value": "1c8566c440c63bff2898a25b74f3fa8debc73e68",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:48",
            "last_seen_utc": "2026-07-04 14:41:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844251": [
        {
            "ioc_value": "91b84b14b1e6d72dc63caf997a338c87",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:48",
            "last_seen_utc": "2026-07-04 14:41:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844252": [
        {
            "ioc_value": "e6b15512909dad441e5da10f301d6369f333a5b51ad94f3504e9e6ef12dade3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-04 00:43:48",
            "last_seen_utc": "2026-07-04 14:41:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844247": [
        {
            "ioc_value": "758e11b9932676a5a10638f98be05886f935fd3b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:47",
            "last_seen_utc": "2026-07-04 14:41:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844248": [
        {
            "ioc_value": "4da40a378b91a1231d9e3a105d61fe9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:47",
            "last_seen_utc": "2026-07-04 14:41:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844249": [
        {
            "ioc_value": "a73cd72f82f334e31d4669d43ec819a033c3f088dc96f5fc21002941ace6b61e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:47",
            "last_seen_utc": "2026-07-04 14:41:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844244": [
        {
            "ioc_value": "8e94e9a609f18047c3db3df4c16dc19cd126aced",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.xagent",
            "malware_alias": null,
            "malware_printable": "X-Agent",
            "first_seen_utc": "2026-07-04 00:43:46",
            "last_seen_utc": "2026-07-04 14:41:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844245": [
        {
            "ioc_value": "e0253c7bbc5b4e8dbc6ea231f51ea800",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.xagent",
            "malware_alias": null,
            "malware_printable": "X-Agent",
            "first_seen_utc": "2026-07-04 00:43:46",
            "last_seen_utc": "2026-07-04 14:41:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844246": [
        {
            "ioc_value": "6ebd94209f4a45ea9919b17f13d6c07a6db2be45a399e9f8db989d7e961e0d83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:46",
            "last_seen_utc": "2026-07-04 14:41:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844241": [
        {
            "ioc_value": "275dc4dc7584d05ccd76d90f992af8c66dab34dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:45",
            "last_seen_utc": "2026-07-04 14:41:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844242": [
        {
            "ioc_value": "f4b19ddac26cc4add956fb01856469d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:45",
            "last_seen_utc": "2026-07-04 14:41:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844243": [
        {
            "ioc_value": "e061a76a42aead05e3cf7161b65a73fb8e6f074a0a2aba1b3817eae9ef659491",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.xagent",
            "malware_alias": null,
            "malware_printable": "X-Agent",
            "first_seen_utc": "2026-07-04 00:43:45",
            "last_seen_utc": "2026-07-04 14:41:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844237": [
        {
            "ioc_value": "bac16a48407ea22b8905e476bbb93fc0b5ecda8bb70364094479700e33cb15d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:44",
            "last_seen_utc": "2026-07-04 14:41:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844238": [
        {
            "ioc_value": "01f5a80ad6ad4bac09728218fb610f49d55c7ad9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:44",
            "last_seen_utc": "2026-07-04 14:41:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844239": [
        {
            "ioc_value": "0d1d9fb7cbc129aaf5dfb93869f58d40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:44",
            "last_seen_utc": "2026-07-04 14:41:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844240": [
        {
            "ioc_value": "fbbb5b74e9d1d24d79f9ca7f8dc44dac9ea7663d666ee829bc5e2d2cbcec3174",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-04 00:43:44",
            "last_seen_utc": "2026-07-04 14:41:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844234": [
        {
            "ioc_value": "b9783c0434065058751b59f89948498ed8d08f93f6c5780cc0ce3a6d02bdf77e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:43",
            "last_seen_utc": "2026-07-04 14:41:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844235": [
        {
            "ioc_value": "3c4e3332a3c1c355884437537908b41bfc7850df",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:43",
            "last_seen_utc": "2026-07-04 14:41:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844236": [
        {
            "ioc_value": "7c766f29e987f4acf421154bb35193f2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:43",
            "last_seen_utc": "2026-07-04 14:41:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844231": [
        {
            "ioc_value": "b46f58cd9bbdcfdec0908e67229b484c6f8482523092dd627e0e97fec62e53a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-04 00:43:42",
            "last_seen_utc": "2026-07-04 14:41:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844232": [
        {
            "ioc_value": "dbf6a7ae14570ea721b3dd05aa4569ddade1ffce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-04 00:43:42",
            "last_seen_utc": "2026-07-04 14:41:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844233": [
        {
            "ioc_value": "080e5a2094def756472bef0647b24c7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-04 00:43:42",
            "last_seen_utc": "2026-07-04 14:41:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844228": [
        {
            "ioc_value": "f5b43a3803a8149dda677d208ba7ef5e0aa33640bcd3dd58924355f4fc54be99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:41",
            "last_seen_utc": "2026-07-04 14:41:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844229": [
        {
            "ioc_value": "b59e3977a75660c858475e89536b7920ab1f1a10",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:41",
            "last_seen_utc": "2026-07-04 14:41:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844230": [
        {
            "ioc_value": "1ec808d23dc8b2775c37db0dabe09573",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:41",
            "last_seen_utc": "2026-07-04 14:41:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844226": [
        {
            "ioc_value": "b145c4d4f24999d82b5fef79a79fb008791d11f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:40",
            "last_seen_utc": "2026-07-04 14:41:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844227": [
        {
            "ioc_value": "58a7e2f088cb22dba94ec1ebf9aad4ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:40",
            "last_seen_utc": "2026-07-04 14:41:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844225": [
        {
            "ioc_value": "b15fabb4f73fff2dd8dbb1a58e46423e9d33d985af34880d17e410b9ecd6bc47",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-07-04 00:43:39",
            "last_seen_utc": "2026-07-04 14:41:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1844224": [
        {
            "ioc_value": "jwyclcz.shartbandi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844218": [
        {
            "ioc_value": "zgfnygu.prozhe.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-04 00:01:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844216": [
        {
            "ioc_value": "45.207.199.148:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 23:46:54",
            "last_seen_utc": "2026-08-05 08:47:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844210": [
        {
            "ioc_value": "tfxeoexc.betfakade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 23:03:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844208": [
        {
            "ioc_value": "vzwkcrp.megashart.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 22:59:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844190": [
        {
            "ioc_value": "kdoyvze.megaparii.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 21:58:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844189": [
        {
            "ioc_value": "vwvlxxx.megaparii.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 21:56:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844188": [
        {
            "ioc_value": "lqqpunt.megaparii.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 21:46:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844187": [
        {
            "ioc_value": "lofybdv.megaparii.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 21:07:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844178": [
        {
            "ioc_value": "5732ru8p.1x303.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 20:31:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844177": [
        {
            "ioc_value": "pg1mu94o.yek.baby",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 20:24:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844175": [
        {
            "ioc_value": "j29oqmyl.1xgame.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 20:22:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844173": [
        {
            "ioc_value": "sfsgldq.1xx.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 20:07:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844172": [
        {
            "ioc_value": "pokese.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 20:06:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844166": [
        {
            "ioc_value": "86.109.75.177:17635",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-03 19:46:03",
            "last_seen_utc": "2026-08-29 08:47:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844165": [
        {
            "ioc_value": "46.246.6.3:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-03 19:45:39",
            "last_seen_utc": "2026-08-25 08:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844164": [
        {
            "ioc_value": "37.244.255.240:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-07-03 19:45:22",
            "last_seen_utc": "2026-08-14 08:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844162": [
        {
            "ioc_value": "212.193.23.223:50555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-07-03 19:44:34",
            "last_seen_utc": "2026-08-03 08:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844163": [
        {
            "ioc_value": "212.193.23.223:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-07-03 19:44:34",
            "last_seen_utc": "2026-08-14 08:44:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844161": [
        {
            "ioc_value": "185.115.164.60:51500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 19:44:03",
            "last_seen_utc": "2026-08-03 08:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844160": [
        {
            "ioc_value": "185.115.164.59:57459",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 19:44:01",
            "last_seen_utc": "2026-08-03 08:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844159": [
        {
            "ioc_value": "155.103.71.115:14657",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 19:43:38",
            "last_seen_utc": "2026-08-03 08:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844154": [
        {
            "ioc_value": "144.172.107.251:9920",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 19:43:29",
            "last_seen_utc": "2026-08-04 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844153": [
        {
            "ioc_value": "103.11.41.20:9950",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 19:43:09",
            "last_seen_utc": "2026-08-03 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844128": [
        {
            "ioc_value": "kztxtnj.pastiadajalan.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 19:30:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844122": [
        {
            "ioc_value": "dwyxchu.megashart.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 18:33:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844120": [
        {
            "ioc_value": "lwunxeob.1xjet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 18:24:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844110": [
        {
            "ioc_value": "etddhyf.takbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 17:32:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844099": [
        {
            "ioc_value": "sscibrc.pinprobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 17:27:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844090": [
        {
            "ioc_value": "c557zanx.1xhot.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 16:24:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844088": [
        {
            "ioc_value": "jrfuwpw.megaparii.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 16:22:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844086": [
        {
            "ioc_value": "1xhot.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 16:20:56",
            "last_seen_utc": "2026-07-03 16:21:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1844079": [
        {
            "ioc_value": "223.166.30.24:2082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 15:46:32",
            "last_seen_utc": "2026-08-06 08:48:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844078": [
        {
            "ioc_value": "172.245.226.120:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 15:46:27",
            "last_seen_utc": "2026-08-09 08:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844077": [
        {
            "ioc_value": "1.14.217.176:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 15:46:06",
            "last_seen_utc": "2026-08-09 08:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844076": [
        {
            "ioc_value": "1425733911-caaaf5vnxv.ap-guangzhou.tencentscf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 15:45:56",
            "last_seen_utc": "2026-07-04 08:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844075": [
        {
            "ioc_value": "lyjbjin.1xforward.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 15:44:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844073": [
        {
            "ioc_value": "vps2v21x.1xgame.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 15:30:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844070": [
        {
            "ioc_value": "https://juj.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 15:25:45",
            "last_seen_utc": "2026-07-12 09:26:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844071": [
        {
            "ioc_value": "juj.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 15:25:45",
            "last_seen_utc": "2026-07-12 09:26:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844068": [
        {
            "ioc_value": "https://juj.jokimecat88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 15:25:33",
            "last_seen_utc": "2026-07-08 19:26:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844069": [
        {
            "ioc_value": "juj.jokimecat88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 15:25:33",
            "last_seen_utc": "2026-07-08 19:26:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844067": [
        {
            "ioc_value": "8oes4jec.betfakade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 15:21:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844056": [
        {
            "ioc_value": "wadbrnz.1xx.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 14:40:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844051": [
        {
            "ioc_value": "1cqslawq.1xhot.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 14:22:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844044": [
        {
            "ioc_value": "yhcawcq.1xx.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 13:38:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844036": [
        {
            "ioc_value": "aawzmuz.1xvip.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 12:39:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844034": [
        {
            "ioc_value": "zrdxgajy.thevallartasrestaurants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 12:24:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844033": [
        {
            "ioc_value": "202.61.160.145:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 12:23:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ef6efaa86cc34c9d4d390575c42179b5f680daa0945ac850d62fa8fdbbeaa97c/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844032": [
        {
            "ioc_value": "cayif.hellokism.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 12:22:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ef6efaa86cc34c9d4d390575c42179b5f680daa0945ac850d62fa8fdbbeaa97c/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844028": [
        {
            "ioc_value": "165.232.172.200:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 12:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844017": [
        {
            "ioc_value": "159.203.35.164:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 12:07:40",
            "last_seen_utc": "2026-07-07 07:29:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844022": [
        {
            "ioc_value": "http://64.224.17.118/b98b577ad87f42dbbf91.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-03 12:07:38",
            "last_seen_utc": "2026-07-06 20:10:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,loader,StealC,stealer,v1",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844023": [
        {
            "ioc_value": "havgbelc.bingobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 12:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844020": [
        {
            "ioc_value": "27.124.18.170:63036",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-03 11:55:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/27ef8e01f2cc70843dfc973156abacf1f2abf601d3055476084ca8991a2f02c5/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844018": [
        {
            "ioc_value": "27.124.18.164:63016",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-03 11:55:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/27ef8e01f2cc70843dfc973156abacf1f2abf601d3055476084ca8991a2f02c5/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844019": [
        {
            "ioc_value": "27.124.18.166:63026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-03 11:55:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/27ef8e01f2cc70843dfc973156abacf1f2abf601d3055476084ca8991a2f02c5/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844008": [
        {
            "ioc_value": "https://pokese.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 11:51:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pokese.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1844009": [
        {
            "ioc_value": "simpleoo3pooline-i.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-03 11:51:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,stage2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1844011": [
        {
            "ioc_value": "168.144.130.22:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 11:51:17",
            "last_seen_utc": "2026-07-05 03:25:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844015": [
        {
            "ioc_value": "138.197.155.246:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 11:51:17",
            "last_seen_utc": "2026-07-07 11:00:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844012": [
        {
            "ioc_value": "157.245.59.180:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 11:51:16",
            "last_seen_utc": "2026-07-07 09:27:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844014": [
        {
            "ioc_value": "165.22.109.43:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 11:51:15",
            "last_seen_utc": "2026-07-05 03:32:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844016": [
        {
            "ioc_value": "165.232.172.200:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 11:51:15",
            "last_seen_utc": "2026-07-05 03:34:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844013": [
        {
            "ioc_value": "frhphph.1xsomalia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 11:43:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1844006": [
        {
            "ioc_value": "43.248.172.115:16443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-03 11:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1380d7a41d3a9719116d41942ef92b0fcf1cdc00e12066a9796ac0a5e4552a2d/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1844007": [
        {
            "ioc_value": "43.248.172.115:5443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-03 11:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1380d7a41d3a9719116d41942ef92b0fcf1cdc00e12066a9796ac0a5e4552a2d/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843989": [
        {
            "ioc_value": "188.166.63.49:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:52",
            "last_seen_utc": "2026-07-08 09:28:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843993": [
        {
            "ioc_value": "167.71.1.193:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:51",
            "last_seen_utc": "2026-07-08 09:30:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843991": [
        {
            "ioc_value": "134.122.62.67:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:50",
            "last_seen_utc": "2026-07-08 09:28:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843994": [
        {
            "ioc_value": "164.92.146.175:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:48",
            "last_seen_utc": "2026-07-08 09:28:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843995": [
        {
            "ioc_value": "146.190.226.132:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:47",
            "last_seen_utc": "2026-07-08 09:28:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843996": [
        {
            "ioc_value": "68.183.8.190:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:47",
            "last_seen_utc": "2026-07-08 09:29:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843997": [
        {
            "ioc_value": "188.166.34.177:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:46",
            "last_seen_utc": "2026-07-08 09:29:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843998": [
        {
            "ioc_value": "64.227.70.229:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:45",
            "last_seen_utc": "2026-07-08 09:29:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843999": [
        {
            "ioc_value": "167.71.69.84:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:43",
            "last_seen_utc": "2026-07-08 09:29:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1844000": [
        {
            "ioc_value": "161.35.155.56:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-07-03 11:01:41",
            "last_seen_utc": "2026-07-08 09:45:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843992": [
        {
            "ioc_value": "oxqniwv.1xpin.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:41:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843988": [
        {
            "ioc_value": "qxguiws.1xpin.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:26:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843986": [
        {
            "ioc_value": "https://vcf.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 10:25:44",
            "last_seen_utc": "2026-07-03 14:25:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843987": [
        {
            "ioc_value": "vcf.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 10:25:44",
            "last_seen_utc": "2026-07-03 14:25:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843984": [
        {
            "ioc_value": "https://vcf.jokimecat88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 10:25:32",
            "last_seen_utc": "2026-07-03 14:25:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843985": [
        {
            "ioc_value": "vcf.jokimecat88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 10:25:32",
            "last_seen_utc": "2026-07-03 14:25:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843982": [
        {
            "ioc_value": "w9x1nvom.sizzleasianfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:22:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843981": [
        {
            "ioc_value": "jds4p0yc.betbacklink.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:22:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843980": [
        {
            "ioc_value": "dhur9q3h.1x303.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:21:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843979": [
        {
            "ioc_value": "sizzleasianfood.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:19:27",
            "last_seen_utc": "2026-07-03 10:20:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843978": [
        {
            "ioc_value": "pastiadajalan.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 10:09:45",
            "last_seen_utc": "2026-07-03 19:29:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843967": [
        {
            "ioc_value": "ao046xe5.1xbeet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 09:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843962": [
        {
            "ioc_value": "vlmtl3yv.jozvedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 09:46:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843961": [
        {
            "ioc_value": "94.156.179.168:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 09:46:03",
            "last_seen_utc": "2026-08-14 18:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843960": [
        {
            "ioc_value": "202.1.31.83:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-03 09:44:25",
            "last_seen_utc": "2026-08-05 18:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843959": [
        {
            "ioc_value": "198.23.185.221:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-03 09:44:20",
            "last_seen_utc": "2026-08-08 18:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843958": [
        {
            "ioc_value": "155.103.69.30:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 09:43:35",
            "last_seen_utc": "2026-08-15 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843956": [
        {
            "ioc_value": "113.31.102.219:21915",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 09:43:18",
            "last_seen_utc": "2026-08-14 18:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843955": [
        {
            "ioc_value": "103.11.41.20:7805",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 09:43:08",
            "last_seen_utc": "2026-08-02 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843954": [
        {
            "ioc_value": "103.11.41.10:54976",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 09:43:06",
            "last_seen_utc": "2026-08-02 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843953": [
        {
            "ioc_value": "102.220.160.222:2700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-03 09:43:03",
            "last_seen_utc": "2026-08-03 08:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843901": [
        {
            "ioc_value": "143.244.175.246:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 09:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843936": [
        {
            "ioc_value": "1fb0b008bc63f128227ddaaa8bc77542c0caa198825f9c514c15cec26f1660f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 09:21:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260703-kh4h7sdy8s",
            "tags": "HadesStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1843948": [
        {
            "ioc_value": "165.227.194.213:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 09:21:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843937": [
        {
            "ioc_value": "147.182.177.164:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 09:21:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843949": [
        {
            "ioc_value": "pokese.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-03 09:21:23",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843946": [
        {
            "ioc_value": "fnd9555t.ligabfa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 09:05:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843940": [
        {
            "ioc_value": "ligabfa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 09:04:32",
            "last_seen_utc": "2026-07-03 09:04:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843931": [
        {
            "ioc_value": "vcd.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 08:25:39",
            "last_seen_utc": "2026-07-03 09:26:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843930": [
        {
            "ioc_value": "https://vcd.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 08:25:38",
            "last_seen_utc": "2026-07-03 09:26:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843929": [
        {
            "ioc_value": "196.251.121.165:14869",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843925": [
        {
            "ioc_value": "196.251.121.165:14865",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843926": [
        {
            "ioc_value": "196.251.121.165:14866",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843927": [
        {
            "ioc_value": "196.251.121.165:14867",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843928": [
        {
            "ioc_value": "196.251.121.165:14868",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843924": [
        {
            "ioc_value": "196.251.121.165:14864",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843922": [
        {
            "ioc_value": "196.251.121.165:14862",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843923": [
        {
            "ioc_value": "196.251.121.165:14863",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843919": [
        {
            "ioc_value": "196.251.121.165:14859",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843920": [
        {
            "ioc_value": "196.251.121.165:14860",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843921": [
        {
            "ioc_value": "196.251.121.165:14861",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:21:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843915": [
        {
            "ioc_value": "196.251.121.165:14855",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:20:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843916": [
        {
            "ioc_value": "196.251.121.165:14856",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:20:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843917": [
        {
            "ioc_value": "196.251.121.165:14857",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:20:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843918": [
        {
            "ioc_value": "196.251.121.165:14858",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:20:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843913": [
        {
            "ioc_value": "196.251.121.165:14634",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:20:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843914": [
        {
            "ioc_value": "196.251.121.165:14854",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 08:20:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843894": [
        {
            "ioc_value": "icicleexpansion.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-03 07:17:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843893": [
        {
            "ioc_value": "underwearbrick.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-03 07:16:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843892": [
        {
            "ioc_value": "evhg599x.lemongrassasiangrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 07:06:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843886": [
        {
            "ioc_value": "adoswjr.calvaryhospice.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 07:04:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843885": [
        {
            "ioc_value": "lemongrassasiangrill.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 07:03:59",
            "last_seen_utc": "2026-07-03 07:04:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843883": [
        {
            "ioc_value": "139.226.191.215:2082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 06:46:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843884": [
        {
            "ioc_value": "208.87.207.196:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-03 06:46:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843879": [
        {
            "ioc_value": "120.205.80.107:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:42:04",
            "last_seen_utc": "2026-07-03 11:25:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843882": [
        {
            "ioc_value": "107.172.13.198:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 06:41:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7c055f06c245ba0cc6afd6f7d0edf0dbc7934e53424c92e4174519726559dcec/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843880": [
        {
            "ioc_value": "www.ikukuomagloballimited1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 06:41:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7c055f06c245ba0cc6afd6f7d0edf0dbc7934e53424c92e4174519726559dcec/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843881": [
        {
            "ioc_value": "www.ikukuomagloballimited2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-03 06:41:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7c055f06c245ba0cc6afd6f7d0edf0dbc7934e53424c92e4174519726559dcec/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843584": [
        {
            "ioc_value": "31.57.63.78:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-03 06:32:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843585": [
        {
            "ioc_value": "94.183.182.171:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-03 06:32:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843586": [
        {
            "ioc_value": "156.229.165.166:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-03 06:32:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843587": [
        {
            "ioc_value": "107.175.114.96:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-03 06:32:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843588": [
        {
            "ioc_value": "165.227.194.213:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:32:08",
            "last_seen_utc": "2026-07-03 11:18:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843589": [
        {
            "ioc_value": "anakkontolmemek.my.id",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-03 06:32:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843590": [
        {
            "ioc_value": "167.99.95.139:69",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-03 06:32:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843593": [
        {
            "ioc_value": "143.244.175.246:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:32:03",
            "last_seen_utc": "2026-07-03 06:15:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843594": [
        {
            "ioc_value": "159.223.170.92:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:32:02",
            "last_seen_utc": "2026-07-03 07:42:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843595": [
        {
            "ioc_value": "159.223.170.92:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:32:02",
            "last_seen_utc": "2026-07-03 07:18:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843596": [
        {
            "ioc_value": "143.244.175.246:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:32:01",
            "last_seen_utc": "2026-07-03 03:25:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843598": [
        {
            "ioc_value": "https://openaaii.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 06:31:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/openaaii.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843601": [
        {
            "ioc_value": "165.227.194.213:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:58",
            "last_seen_utc": "2026-07-03 07:24:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843687": [
        {
            "ioc_value": "http://130.61.68.232:7317/api/screenshot",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-03 06:31:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/7d9764ea-72d0-46d7-a209-47c45e2c13e3",
            "tags": "317Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843686": [
        {
            "ioc_value": "130.61.68.232:7317",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-03 06:31:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/7d9764ea-72d0-46d7-a209-47c45e2c13e3",
            "tags": "317Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843688": [
        {
            "ioc_value": "http://130.61.68.232:7317/api/hvnc/register",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-03 06:31:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/7d9764ea-72d0-46d7-a209-47c45e2c13e3",
            "tags": "317Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843689": [
        {
            "ioc_value": "http://130.61.68.232:7317/api/hvnc/screenshot",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-03 06:31:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/7d9764ea-72d0-46d7-a209-47c45e2c13e3",
            "tags": "317Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843696": [
        {
            "ioc_value": "143.244.175.246:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:51",
            "last_seen_utc": "2026-07-03 10:56:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843699": [
        {
            "ioc_value": "165.227.194.213:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:51",
            "last_seen_utc": "2026-07-03 02:29:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843700": [
        {
            "ioc_value": "139.59.247.238:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:50",
            "last_seen_utc": "2026-07-03 09:30:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843701": [
        {
            "ioc_value": "143.244.175.246:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:49",
            "last_seen_utc": "2026-07-03 10:26:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843719": [
        {
            "ioc_value": "165.227.194.213:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:49",
            "last_seen_utc": "2026-07-03 06:20:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843722": [
        {
            "ioc_value": "137.184.74.12:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843723": [
        {
            "ioc_value": "139.59.247.238:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843724": [
        {
            "ioc_value": "139.59.247.238:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:47",
            "last_seen_utc": "2026-07-03 11:09:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843725": [
        {
            "ioc_value": "https://skypeforwindows.com",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 06:31:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ransomware,unknown",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843726": [
        {
            "ioc_value": "178.128.209.167:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843733": [
        {
            "ioc_value": "103.27.78.161:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:43",
            "last_seen_utc": "2026-07-02 19:27:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843740": [
        {
            "ioc_value": "165.22.58.47:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843741": [
        {
            "ioc_value": "great-fade.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-03 06:31:41",
            "last_seen_utc": "2026-08-08 08:27:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843742": [
        {
            "ioc_value": "165.22.58.47:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843744": [
        {
            "ioc_value": "137.184.74.12:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:39",
            "last_seen_utc": "2026-07-03 08:26:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843746": [
        {
            "ioc_value": "framesavecloudjs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-03 06:31:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843768": [
        {
            "ioc_value": "137.184.74.12:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843770": [
        {
            "ioc_value": "178.128.209.167:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843773": [
        {
            "ioc_value": "139.59.247.238:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:35",
            "last_seen_utc": "2026-07-03 10:31:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843775": [
        {
            "ioc_value": "137.184.74.12:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:33",
            "last_seen_utc": "2026-07-03 10:48:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843777": [
        {
            "ioc_value": "143.244.175.246:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:33",
            "last_seen_utc": "2026-07-03 04:50:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843778": [
        {
            "ioc_value": "bkscndcloud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-03 06:31:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843779": [
        {
            "ioc_value": "139.59.247.238:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:31",
            "last_seen_utc": "2026-07-03 10:43:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843792": [
        {
            "ioc_value": "cashorix.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-03 06:31:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843793": [
        {
            "ioc_value": "165.227.194.213:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:30",
            "last_seen_utc": "2026-07-03 04:58:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843799": [
        {
            "ioc_value": "firmwareupdatechecksdoidv2627.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-03 06:31:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843805": [
        {
            "ioc_value": "158.160.75.185:43082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-03 06:31:28",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1843806": [
        {
            "ioc_value": "185.192.124.218:4291",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-07-03 06:31:28",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1843807": [
        {
            "ioc_value": "165.227.194.213:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:27",
            "last_seen_utc": "2026-07-02 22:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843813": [
        {
            "ioc_value": "https://mil.loj.mybluehost.me/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-03 06:31:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mil.loj.mybluehost.me",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843820": [
        {
            "ioc_value": "143.244.175.246:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:26",
            "last_seen_utc": "2026-07-03 03:08:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843825": [
        {
            "ioc_value": "165.227.194.213:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843827": [
        {
            "ioc_value": "139.59.247.238:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:22",
            "last_seen_utc": "2026-07-03 01:43:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843830": [
        {
            "ioc_value": "147.182.177.164:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843833": [
        {
            "ioc_value": "159.223.170.92:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:21",
            "last_seen_utc": "2026-07-03 11:20:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843834": [
        {
            "ioc_value": "159.223.170.92:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:19",
            "last_seen_utc": "2026-07-03 09:03:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843835": [
        {
            "ioc_value": "137.184.74.12:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:18",
            "last_seen_utc": "2026-07-03 11:03:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843845": [
        {
            "ioc_value": "159.223.170.92:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:17",
            "last_seen_utc": "2026-07-03 10:46:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843847": [
        {
            "ioc_value": "137.184.74.12:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:15",
            "last_seen_utc": "2026-07-03 06:49:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843848": [
        {
            "ioc_value": "159.223.170.92:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:14",
            "last_seen_utc": "2026-07-03 09:54:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843849": [
        {
            "ioc_value": "143.244.175.246:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:13",
            "last_seen_utc": "2026-07-03 07:01:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843872": [
        {
            "ioc_value": "120.205.80.107:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-03 06:31:12",
            "last_seen_utc": "2026-07-03 11:05:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843873": [
        {
            "ioc_value": "jkltnrm.alohawatersports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 06:00:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843871": [
        {
            "ioc_value": "edvekzo.alohawatersports.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 05:53:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843868": [
        {
            "ioc_value": "xwlctmz.yek90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 05:11:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843862": [
        {
            "ioc_value": "tfd2ceqg.bet365persian.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 05:04:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843861": [
        {
            "ioc_value": "bet365persian.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 05:03:27",
            "last_seen_utc": "2026-07-03 05:04:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843860": [
        {
            "ioc_value": "7lm2xwqz.1x1bet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 04:56:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843858": [
        {
            "ioc_value": "07vh2ie1.jozve.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 04:46:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843856": [
        {
            "ioc_value": "oymbwsa.yek90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 04:25:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843846": [
        {
            "ioc_value": "vasecle.pinprobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 03:21:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843842": [
        {
            "ioc_value": "5z9j5y93.akhlagvaahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 03:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843837": [
        {
            "ioc_value": "lakjctx.megaparii.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 02:20:05",
            "last_seen_utc": "2026-07-03 21:58:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843832": [
        {
            "ioc_value": "vgqntzu.betmilliard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 01:22:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843828": [
        {
            "ioc_value": "qv3dp7rx.ahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 01:03:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843826": [
        {
            "ioc_value": "sctawfw.1xgame.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-03 00:19:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843818": [
        {
            "ioc_value": "hlhfm0v8.1x1bet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 23:55:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843816": [
        {
            "ioc_value": "106.13.78.105:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-02 23:45:57",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843815": [
        {
            "ioc_value": "12xb1qlu.jet-theme.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 23:42:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843812": [
        {
            "ioc_value": "gbbzsnq.1xgame.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 23:17:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843809": [
        {
            "ioc_value": "198.37.105.48:2233",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-02 23:05:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9c0eb19d1579fbc93030d42465b90e092889b930733ffda60b5acb137a346dac/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843808": [
        {
            "ioc_value": "ejjfjm2l.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 23:04:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843804": [
        {
            "ioc_value": "pmaumei.1xgame.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 22:14:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843802": [
        {
            "ioc_value": "tearmbdo.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 22:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843801": [
        {
            "ioc_value": "qlrjloxh.jozve.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 22:11:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843798": [
        {
            "ioc_value": "gold-land-8.vortex-sys.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 22:05:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843795": [
        {
            "ioc_value": "clickhitriver.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 22:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843787": [
        {
            "ioc_value": "flhrpdn.yekbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 21:15:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843780": [
        {
            "ioc_value": "rfedpuuc.falsafekonkour.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 21:03:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843776": [
        {
            "ioc_value": "noir-5.vortex-sys.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 20:40:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843774": [
        {
            "ioc_value": "lbftpzh.takbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 20:14:18",
            "last_seen_utc": "2026-07-05 02:23:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843769": [
        {
            "ioc_value": "mlvgwjn.1xforward.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 19:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843766": [
        {
            "ioc_value": "45.155.69.97:1202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:45:44",
            "last_seen_utc": "2026-08-02 08:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843765": [
        {
            "ioc_value": "23.27.201.213:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-02 19:45:26",
            "last_seen_utc": "2026-08-02 08:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843764": [
        {
            "ioc_value": "185.122.171.65:5691",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:44:10",
            "last_seen_utc": "2026-08-02 08:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843763": [
        {
            "ioc_value": "185.122.171.124:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:44:09",
            "last_seen_utc": "2026-08-02 08:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843762": [
        {
            "ioc_value": "177.22.119.174:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-07-02 19:43:58",
            "last_seen_utc": "2026-08-16 18:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843761": [
        {
            "ioc_value": "173.249.24.135:3279",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-02 19:43:57",
            "last_seen_utc": "2026-08-03 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843760": [
        {
            "ioc_value": "172.94.18.103:70",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 19:43:55",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843757": [
        {
            "ioc_value": "155.103.69.30:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:43:39",
            "last_seen_utc": "2026-08-11 18:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843758": [
        {
            "ioc_value": "155.103.69.30:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:43:39",
            "last_seen_utc": "2026-08-02 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843759": [
        {
            "ioc_value": "155.103.69.30:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:43:39",
            "last_seen_utc": "2026-08-02 18:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843754": [
        {
            "ioc_value": "143.92.43.160:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-02 19:43:31",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843755": [
        {
            "ioc_value": "143.92.43.241:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-02 19:43:31",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843756": [
        {
            "ioc_value": "143.92.43.246:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-02 19:43:31",
            "last_seen_utc": "2026-09-01 02:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843753": [
        {
            "ioc_value": "103.11.41.20:4734",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:43:09",
            "last_seen_utc": "2026-08-01 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843752": [
        {
            "ioc_value": "103.11.41.19:61502",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:43:08",
            "last_seen_utc": "2026-08-02 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843751": [
        {
            "ioc_value": "103.11.41.10:62534",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 19:43:07",
            "last_seen_utc": "2026-08-01 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843750": [
        {
            "ioc_value": "102.117.171.174:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 19:43:03",
            "last_seen_utc": "2026-08-02 08:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843749": [
        {
            "ioc_value": "waysmakeyourlifebetter.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 19:16:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843748": [
        {
            "ioc_value": "goodpersonofourcentury.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 19:16:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843747": [
        {
            "ioc_value": "besthappyfamily.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 19:16:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843745": [
        {
            "ioc_value": "authorization-code.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 19:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843743": [
        {
            "ioc_value": "fesold.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 19:11:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843734": [
        {
            "ioc_value": "926ikjry.euroyek.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 19:02:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843732": [
        {
            "ioc_value": "id10ixg6.1x1bet.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 18:52:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843730": [
        {
            "ioc_value": "aqjyrpm.1xforward.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 18:50:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843728": [
        {
            "ioc_value": "fsaxdfy0.hit4.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 18:42:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843721": [
        {
            "ioc_value": "indiagov.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-02 18:10:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4694ccf2399010c0e069f481e3471745dfe0a4f72003ed476ecf86b7b6b4ef7f/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843720": [
        {
            "ioc_value": "yom.mefound.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 18:05:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/67aa3033ac68dadc36096277895080e9de3191d75541a884d761f4d38bd4a770/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843718": [
        {
            "ioc_value": "158.160.75.185:43098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-02 18:00:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843717": [
        {
            "ioc_value": "89.125.120.77:20117",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-02 18:00:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843716": [
        {
            "ioc_value": "87.58.204.146:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-02 18:00:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843715": [
        {
            "ioc_value": "47.239.19.194:10087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 18:00:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843714": [
        {
            "ioc_value": "96.245.7.21:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xenorat",
            "malware_alias": null,
            "malware_printable": "XenoRAT",
            "first_seen_utc": "2026-07-02 18:00:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "XenoRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843713": [
        {
            "ioc_value": "198.135.55.140:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 18:00:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843708": [
        {
            "ioc_value": "185.149.24.6:2444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 18:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843707": [
        {
            "ioc_value": "188.174.38.243:9215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-02 18:00:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843706": [
        {
            "ioc_value": "fast-zeit-2.vortex-sys.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 18:00:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843705": [
        {
            "ioc_value": "198.147.28.34:5655",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.rms",
            "malware_alias": "Gussdoor,Remote Manipulator System,RuRAT",
            "malware_printable": "RMS",
            "first_seen_utc": "2026-07-02 18:00:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RemoteManipulator",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843703": [
        {
            "ioc_value": "uusqctu.eurojet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 17:53:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843691": [
        {
            "ioc_value": "http://176.65.144.127/312b423bf6dd463f8d15.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-07-02 17:10:43",
            "last_seen_utc": "2026-07-05 00:07:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2599fc6c97a60c08520c557b1cc551cdd543293291e60c81dc010d6dcb8a8b03/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843690": [
        {
            "ioc_value": "v1rsowak.xbetone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 17:01:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843685": [
        {
            "ioc_value": "dedzwcx.enfejarbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 16:49:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843684": [
        {
            "ioc_value": "lsyhgfl.enfejarbahis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 16:39:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843679": [
        {
            "ioc_value": "1961ed753ca8e8eb1e7e450aaa8bfc65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-02 16:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843680": [
        {
            "ioc_value": "b177b510a76386fddb69800592dbb85ccf5d1aada1059b721a061189c92300e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843681": [
        {
            "ioc_value": "501efd44aeb1f6827dbc83c2d84eb6be1171a41e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843682": [
        {
            "ioc_value": "d8249352b400ff101c4598cd08d2d9e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843676": [
        {
            "ioc_value": "4e9def021931e28ae897bcb608b537db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843677": [
        {
            "ioc_value": "97c5aed61b4b0a2d143311922cd07ac720e452781a98ed03a9e7002e315e2b8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-02 16:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843678": [
        {
            "ioc_value": "976231882b659eb065029bb587605279922ea68f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.lalala_stealer",
            "malware_alias": null,
            "malware_printable": "LALALA Stealer",
            "first_seen_utc": "2026-07-02 16:26:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843673": [
        {
            "ioc_value": "6b98948154e2e58689c535cbed1cb0e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843674": [
        {
            "ioc_value": "7e7ef5b1cc82799cff8ac357bc6f7b3e5c1bfc4275b0c93da61db7e458d611e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843675": [
        {
            "ioc_value": "ae588dce549e626c8e4f48a59a774d6340f6d9e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843670": [
        {
            "ioc_value": "e63bc44fbf3dd02c91262e309fb4d0eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-02 16:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843671": [
        {
            "ioc_value": "1c4948cac8289b0f94ce49f76bc5aec8024c9a7b1d609bc1f2fc6ae0b52c2456",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843672": [
        {
            "ioc_value": "c1fde6836c51f4a23cd636c571f4124ab506d309",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843666": [
        {
            "ioc_value": "0c8b6a85b4bcf12fbe3e274a0436000a76d6ca78",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843667": [
        {
            "ioc_value": "5ff9c0b47ad7adbba95955ad266ecbc5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843668": [
        {
            "ioc_value": "51e3e006da49bddcdfaeceb3ada3b0401abc6e1536098caf85d3897a9e3e48e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-02 16:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843669": [
        {
            "ioc_value": "11758c6808e531b111b91997c67cb15a1e443032",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-07-02 16:26:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843663": [
        {
            "ioc_value": "342c4be8c2e13195aa0306abbd3f4f95937e8423",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-02 16:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843664": [
        {
            "ioc_value": "7abe81a4699823626728990671b4038f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-02 16:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843665": [
        {
            "ioc_value": "0b3236531c608af3cdb33b3f09ab0d5bbd61f67cc341faa92c1c2cb2258bd409",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843660": [
        {
            "ioc_value": "c9699aab5b60601b25da974dc06708b0c3b78b4c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-02 16:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843661": [
        {
            "ioc_value": "d8ff995ca4b9a9a2018b852331c1d0f6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-02 16:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843662": [
        {
            "ioc_value": "51496979cca2c2e036b2993e9fd5b583175b6aeb37df0a635bf4453abd3cc573",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-02 16:26:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843657": [
        {
            "ioc_value": "8359d76b9578d5861822218077e167c31da9eb83",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 16:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843658": [
        {
            "ioc_value": "1cf8d51ca815ee4fac497e15c6a5d9e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 16:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843659": [
        {
            "ioc_value": "e131a1db2de30ed970ca887afe7153f0611215f663019c9296ae1a075cfd3245",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-07-02 16:26:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843654": [
        {
            "ioc_value": "401d2e17be9c43c3e63af409ee1e3758180b477c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 16:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843655": [
        {
            "ioc_value": "3a7a359c92ebc3cb971f278c538b9ed5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 16:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843656": [
        {
            "ioc_value": "ca66840e7c8c30a572c0489618a57d25474039bc0b44b0955ca4edc9c5d81706",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 16:26:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843652": [
        {
            "ioc_value": "a1cdb3fea0437aab03b9fbd4dcce6416",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-02 16:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843653": [
        {
            "ioc_value": "75ccc97b9fefe904ad711e32f29fd337d78b7560dfb96252e421a643a1796c9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-02 16:26:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843649": [
        {
            "ioc_value": "9eeb5e790993b3227f7a147a167e30c4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-02 16:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843650": [
        {
            "ioc_value": "fddc9cca767ef639b17d70374bb9ca9d5c6516f58b9b63cae86f593ced0f3b6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-02 16:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843651": [
        {
            "ioc_value": "15c68e17d1f3905e527bbf217bf2614f82dc552f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-07-02 16:26:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843646": [
        {
            "ioc_value": "179e5c88bbd34e45830e7ee3610d5216",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 16:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843647": [
        {
            "ioc_value": "03a5770f345ad88c9628354cff3ced7cfd2c92ff187182881550ca9a8da3866c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-02 16:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843648": [
        {
            "ioc_value": "cdc4a23302b677d374ce2910fa923a04dbec4282",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-02 16:26:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843643": [
        {
            "ioc_value": "6b5dc025587cfb9fb6d155f466dd1507",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-07-02 16:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843644": [
        {
            "ioc_value": "0aac658075b7d9e81419d0beaa3db796569bc14fd57512f4479fb36e9cc4c1a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 16:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843645": [
        {
            "ioc_value": "e6fa8fda487392419be240e2911e7c9c346b750c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 16:26:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843640": [
        {
            "ioc_value": "2c9cbf61771160a3644e4a4fcbe98dd7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-02 16:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843641": [
        {
            "ioc_value": "de42b33110544bcc3b2251d6aae89643954eba9dd697c1fb4b2316b33081d0f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-07-02 16:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843642": [
        {
            "ioc_value": "641dd2937fe2a05ac0f3c9c5d1358a9963023359",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-07-02 16:26:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843637": [
        {
            "ioc_value": "538860d455edc8108e667b8498a41fe3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 16:26:36",
            "last_seen_utc": "2026-07-04 00:44:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843638": [
        {
            "ioc_value": "85e1086d548cfd37e2550a0e74e6540394c555612a79f6afad183a8d7bf3eff4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-02 16:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843639": [
        {
            "ioc_value": "eb54c551fb56feff3054a01af9877eb16f6ac09b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-02 16:26:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843634": [
        {
            "ioc_value": "370ed8646f719d4e9c06a078f6515fe3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:35",
            "last_seen_utc": "2026-07-04 00:44:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843635": [
        {
            "ioc_value": "fe126b87922ff8049c4b19d6588324a3bb4874020b943e86de176445ebe7c7b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 16:26:35",
            "last_seen_utc": "2026-07-04 00:44:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843636": [
        {
            "ioc_value": "6bbb36dc96230667e363d62881a6166ec67b8a89",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 16:26:35",
            "last_seen_utc": "2026-07-04 00:44:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843630": [
        {
            "ioc_value": "093ac47b4dcac8fa8d3487b73be98fea003513bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:34",
            "last_seen_utc": "2026-07-04 00:44:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843631": [
        {
            "ioc_value": "668012498421c76b8a9d344ce6acfc67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:34",
            "last_seen_utc": "2026-07-04 00:44:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843632": [
        {
            "ioc_value": "0220916d9e01ad27a30af87ce47a792d11b0e2f64a189390fe72b330ace56ad6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:34",
            "last_seen_utc": "2026-07-04 00:44:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843633": [
        {
            "ioc_value": "4694cec3f12a68e0a09731bb05ecfd17e5c52753",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:34",
            "last_seen_utc": "2026-07-04 00:44:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843627": [
        {
            "ioc_value": "d307f448f00cb89fee296eb1144ef414905902f3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:33",
            "last_seen_utc": "2026-07-04 00:44:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843628": [
        {
            "ioc_value": "f9158f928bff45d130cc27d4ae20aee8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:33",
            "last_seen_utc": "2026-07-04 00:44:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843629": [
        {
            "ioc_value": "9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:33",
            "last_seen_utc": "2026-07-04 00:44:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843625": [
        {
            "ioc_value": "075eb78eeae6f23401e6f41a024dc50a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:32",
            "last_seen_utc": "2026-07-04 00:44:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843626": [
        {
            "ioc_value": "193863103749d8b2f536cef7bbac7e9691f96742962c5aea4e9f6604db0c4aa7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:32",
            "last_seen_utc": "2026-07-04 00:44:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843621": [
        {
            "ioc_value": "65495e2dc520a54bd2970ef7fb4323e40860ad73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:31",
            "last_seen_utc": "2026-07-04 00:44:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843622": [
        {
            "ioc_value": "f455803cf736015a73d4f03f165963df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:31",
            "last_seen_utc": "2026-07-04 00:44:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843623": [
        {
            "ioc_value": "7212a9cb63a6703ad235ebb4db18d5c7eab2d5a3e13dfced075daf4c440f0900",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:31",
            "last_seen_utc": "2026-07-04 00:44:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843624": [
        {
            "ioc_value": "6fe4d55cb024c87c9196d7f9f138cb5d61e2a8cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:31",
            "last_seen_utc": "2026-07-04 00:44:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843618": [
        {
            "ioc_value": "e875004990f5df84d12aee0e17b4dc2ee91b925f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-02 16:26:30",
            "last_seen_utc": "2026-07-04 00:44:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843619": [
        {
            "ioc_value": "52fa117b71c087d3b0bad27cdafd803a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-02 16:26:30",
            "last_seen_utc": "2026-07-04 00:44:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843620": [
        {
            "ioc_value": "c60cbde6033fe5a3bd5f127248959e1742e48aeae539ece6e137dd5179df34e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-02 16:26:30",
            "last_seen_utc": "2026-07-04 00:44:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843616": [
        {
            "ioc_value": "0b400372039ffa4412f76ec1fa7a4486",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-02 16:26:29",
            "last_seen_utc": "2026-07-04 00:44:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843617": [
        {
            "ioc_value": "f0f153962115ea9c51c8591360d45d483ea4700475a66ec09213eb7832d6410d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-02 16:26:29",
            "last_seen_utc": "2026-07-04 00:44:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843613": [
        {
            "ioc_value": "6a26cc31650fd8ca3d62532cd1106899",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-02 16:26:28",
            "last_seen_utc": "2026-07-04 00:44:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843614": [
        {
            "ioc_value": "eac05791af7cd178ae0c017b225dcefbbf860b4e927fe8045ba7f57636bb91b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-02 16:26:28",
            "last_seen_utc": "2026-07-04 00:44:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843615": [
        {
            "ioc_value": "3d3558bb8c02dee4f8447d7dbc560183b9dc4bc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-07-02 16:26:28",
            "last_seen_utc": "2026-07-04 00:44:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843610": [
        {
            "ioc_value": "1204670b07905cd586d001137e3c690f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:27",
            "last_seen_utc": "2026-07-04 00:44:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843611": [
        {
            "ioc_value": "7776706d26fb2dfd7cb96910810bb4c3a02b343a228035a0ca4db3ccf8e4d26a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-02 16:26:27",
            "last_seen_utc": "2026-07-04 00:44:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843612": [
        {
            "ioc_value": "f04c0953e5169beb168fd9ebcba96ce5d2d38a92",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-02 16:26:27",
            "last_seen_utc": "2026-07-04 00:44:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843607": [
        {
            "ioc_value": "9992290015ca21f58eab64953830a94d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:26",
            "last_seen_utc": "2026-07-04 00:44:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843608": [
        {
            "ioc_value": "78695b566b8aff8f42cccc5e264693a64582fb29d814650830a16a8a210e82ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:26",
            "last_seen_utc": "2026-07-04 00:44:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843609": [
        {
            "ioc_value": "df112662c9613fc8a7459bc31708d9d96278d4dc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:26",
            "last_seen_utc": "2026-07-04 00:44:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843605": [
        {
            "ioc_value": "eee97b264c2b0b6488dcf397800e16ac196ec495a6abd3c2623a020c36acdfd2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:25",
            "last_seen_utc": "2026-07-04 00:44:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843606": [
        {
            "ioc_value": "26dc16413bce56a9da5deae93a6fcf1e53dcec7d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-02 16:26:25",
            "last_seen_utc": "2026-07-04 00:44:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843602": [
        {
            "ioc_value": "02727498170edcb29c041a632172eda8b43c89f7235346b03b174b3e5985bb38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:24",
            "last_seen_utc": "2026-07-04 00:44:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843603": [
        {
            "ioc_value": "e8a104ec01ee0fa1c25022eb13ae28150485f212",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:24",
            "last_seen_utc": "2026-07-04 00:44:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843604": [
        {
            "ioc_value": "683c7276bbdc7df8740788e245a461d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-02 16:26:24",
            "last_seen_utc": "2026-07-04 00:44:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1843600": [
        {
            "ioc_value": "fmpdxnv.enfejar.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 16:18:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843599": [
        {
            "ioc_value": "lseczri.enfejar.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 16:14:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843597": [
        {
            "ioc_value": "gejrdcu.enfejar.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 15:54:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843576": [
        {
            "ioc_value": "14.225.19.28:1632",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:10:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843578": [
        {
            "ioc_value": "103.226.250.88:1632",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:10:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843577": [
        {
            "ioc_value": "game.dualuoilocphu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:10:07",
            "last_seen_utc": "2026-07-03 02:05:27",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843579": [
        {
            "ioc_value": "94.183.232.247:6225",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:10:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843580": [
        {
            "ioc_value": "178.105.112.210:18129",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:10:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843565": [
        {
            "ioc_value": "103.27.78.161:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 15:06:02",
            "last_seen_utc": "2026-07-03 11:00:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843566": [
        {
            "ioc_value": "api.vypidvdstatx.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:06:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843570": [
        {
            "ioc_value": "103.30.11.116:1632",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:06:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843575": [
        {
            "ioc_value": "play.canvasviet.vn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:06:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843574": [
        {
            "ioc_value": "www.larmentybackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 15:05:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85564a1a23b7e97d0cc205cca6783aa5e67a8c22b63f360b069ea8ed5462ac1d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843571": [
        {
            "ioc_value": "www.larmenty.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 15:05:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85564a1a23b7e97d0cc205cca6783aa5e67a8c22b63f360b069ea8ed5462ac1d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843572": [
        {
            "ioc_value": "www.larmentyback2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 15:05:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85564a1a23b7e97d0cc205cca6783aa5e67a8c22b63f360b069ea8ed5462ac1d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843573": [
        {
            "ioc_value": "www.larmentybackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 15:05:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85564a1a23b7e97d0cc205cca6783aa5e67a8c22b63f360b069ea8ed5462ac1d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843558": [
        {
            "ioc_value": "hjcddajltcsdas.hopto.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:03:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843559": [
        {
            "ioc_value": "41.216.189.157:69",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:03:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843560": [
        {
            "ioc_value": "91.92.42.232:9111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:03:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843562": [
        {
            "ioc_value": "ten.devurek.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:03:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843563": [
        {
            "ioc_value": "176.65.139.195:6621",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 15:03:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843564": [
        {
            "ioc_value": "pnz8cbiq.vip1xbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 15:01:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843561": [
        {
            "ioc_value": "gold-star-4m.public-shoot.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 15:00:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843535": [
        {
            "ioc_value": "139.59.247.238:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:56:41",
            "last_seen_utc": "2026-07-03 08:52:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843556": [
        {
            "ioc_value": "137.184.74.12:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:56:40",
            "last_seen_utc": "2026-07-03 07:54:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843557": [
        {
            "ioc_value": "165.227.194.213:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:56:39",
            "last_seen_utc": "2026-07-03 10:09:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843554": [
        {
            "ioc_value": "196.251.121.163:1368",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843555": [
        {
            "ioc_value": "196.251.121.163:1369",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843551": [
        {
            "ioc_value": "196.251.121.163:1365",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843552": [
        {
            "ioc_value": "196.251.121.163:1366",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843553": [
        {
            "ioc_value": "196.251.121.163:1367",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843549": [
        {
            "ioc_value": "196.251.121.163:1363",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843550": [
        {
            "ioc_value": "196.251.121.163:1364",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843546": [
        {
            "ioc_value": "196.251.121.163:1360",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843547": [
        {
            "ioc_value": "196.251.121.163:1361",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843548": [
        {
            "ioc_value": "196.251.121.163:1362",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843544": [
        {
            "ioc_value": "196.251.121.163:1358",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843545": [
        {
            "ioc_value": "196.251.121.163:1359",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843541": [
        {
            "ioc_value": "196.251.121.163:1355",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843542": [
        {
            "ioc_value": "196.251.121.163:1356",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843543": [
        {
            "ioc_value": "196.251.121.163:1357",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843539": [
        {
            "ioc_value": "196.251.121.163:1353",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843540": [
        {
            "ioc_value": "196.251.121.163:1354",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843536": [
        {
            "ioc_value": "196.251.121.163:1350",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843537": [
        {
            "ioc_value": "196.251.121.163:1351",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843538": [
        {
            "ioc_value": "196.251.121.163:1352",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 14:50:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a6475f5c793000640b312a5d5a9b18edf9d570cb2b86204dc9b7101ce5b4fdb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843529": [
        {
            "ioc_value": "141.11.88.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 14:48:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/768f55d013d50dfe4f4de722243bb68774dc26117c3f133549a61fbd1bbec257/",
            "tags": "honeypot,iot,sentinel",
            "anonymous": 0,
            "reporter": "abuserobot66609"
        }
    ],
    "1843530": [
        {
            "ioc_value": "159.223.170.92:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:48:10",
            "last_seen_utc": "2026-07-02 16:50:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843531": [
        {
            "ioc_value": "143.244.175.246:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:48:10",
            "last_seen_utc": "2026-07-03 06:34:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843534": [
        {
            "ioc_value": "kqlnrvh.enfejar.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 14:48:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843532": [
        {
            "ioc_value": "147.182.177.164:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:48:09",
            "last_seen_utc": "2026-07-03 11:23:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843533": [
        {
            "ioc_value": "178.128.209.167:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:48:08",
            "last_seen_utc": "2026-07-03 11:13:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843528": [
        {
            "ioc_value": "165.22.58.47:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 14:37:16",
            "last_seen_utc": "2026-07-03 11:15:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843526": [
        {
            "ioc_value": "klqxthu.enfejar.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 14:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843516": [
        {
            "ioc_value": "https://fesold.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 14:11:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fesold.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843515": [
        {
            "ioc_value": "86uweryp.zarib.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 13:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843513": [
        {
            "ioc_value": "s6adoo5q.filetak.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 13:41:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843511": [
        {
            "ioc_value": "fast-zeit-5.ren4tavil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 13:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843507": [
        {
            "ioc_value": "wihernc9.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 13:00:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843506": [
        {
            "ioc_value": "tvdmydv.yek.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 12:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843500": [
        {
            "ioc_value": "82.157.78.201:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-02 12:05:06",
            "last_seen_utc": "2026-09-01 02:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843498": [
        {
            "ioc_value": "fesold.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 12:03:51",
            "last_seen_utc": "2026-07-05 14:52:38",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843497": [
        {
            "ioc_value": "mamavic.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-02 12:00:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843496": [
        {
            "ioc_value": "157.20.182.81:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:56",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843494": [
        {
            "ioc_value": "157.20.182.81:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:55",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843495": [
        {
            "ioc_value": "157.20.182.81:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:55",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843488": [
        {
            "ioc_value": "157.20.182.81:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:54",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843489": [
        {
            "ioc_value": "217.60.241.39:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843490": [
        {
            "ioc_value": "196.251.121.90:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:54",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843491": [
        {
            "ioc_value": "217.60.241.17:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:54",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843492": [
        {
            "ioc_value": "51.195.111.212:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843493": [
        {
            "ioc_value": "217.60.241.14:423",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-07-02 11:59:54",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843418": [
        {
            "ioc_value": "220.154.3.197:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 11:44:21",
            "last_seen_utc": "2026-09-01 02:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Mythic,MythicC2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1843425": [
        {
            "ioc_value": "157.230.237.88:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 11:44:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843426": [
        {
            "ioc_value": "167.99.166.159:8686",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 11:44:19",
            "last_seen_utc": "2026-09-01 02:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Mythic,MythicC2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1843435": [
        {
            "ioc_value": "globe-media.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 11:44:17",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "ClickFixer"
        }
    ],
    "1843483": [
        {
            "ioc_value": "https://irahook.org/mods/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-02 11:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1843484": [
        {
            "ioc_value": "https://irahook.org/mods/api/log-download",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-02 11:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1843485": [
        {
            "ioc_value": "https://irahook.org/babayla/zor/yarisirlar/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-02 11:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1843486": [
        {
            "ioc_value": "https://irahook.org/?p=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-02 11:44:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1843487": [
        {
            "ioc_value": "irahook.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-02 11:44:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "IRAHook",
            "anonymous": 0,
            "reporter": "lucibee"
        }
    ],
    "1843482": [
        {
            "ioc_value": "99iud2c2.falsafekonkour.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 10:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843481": [
        {
            "ioc_value": "falsafekonkour.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 10:54:03",
            "last_seen_utc": "2026-07-02 21:02:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843480": [
        {
            "ioc_value": "iak4jg2m.gembet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 10:52:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843479": [
        {
            "ioc_value": "w6fq6ja8.gembet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 10:51:15",
            "last_seen_utc": "2026-07-02 10:51:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843476": [
        {
            "ioc_value": "iron-6.vok7laren.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 10:28:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843477": [
        {
            "ioc_value": "authorization-code.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 10:28:51",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843475": [
        {
            "ioc_value": "39.106.80.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-02 10:05:08",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843465": [
        {
            "ioc_value": "82.165.79.60:12001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-02 09:45:46",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843466": [
        {
            "ioc_value": "82.165.79.60:12002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-07-02 09:45:46",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843464": [
        {
            "ioc_value": "77.110.109.120:32404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 09:45:43",
            "last_seen_utc": "2026-08-04 18:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843463": [
        {
            "ioc_value": "70.34.251.19:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-07-02 09:45:42",
            "last_seen_utc": "2026-09-01 02:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843462": [
        {
            "ioc_value": "217.60.195.151:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-02 09:44:58",
            "last_seen_utc": "2026-08-02 18:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843461": [
        {
            "ioc_value": "209.54.103.155:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 09:44:25",
            "last_seen_utc": "2026-08-12 18:44:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843460": [
        {
            "ioc_value": "192.162.242.202:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-07-02 09:44:08",
            "last_seen_utc": "2026-08-14 18:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843458": [
        {
            "ioc_value": "185.115.164.60:16203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 09:43:57",
            "last_seen_utc": "2026-08-01 18:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843459": [
        {
            "ioc_value": "185.115.164.60:4847",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 09:43:57",
            "last_seen_utc": "2026-08-01 18:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843457": [
        {
            "ioc_value": "178.208.168.159:6161",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 09:43:50",
            "last_seen_utc": "2026-08-01 18:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843456": [
        {
            "ioc_value": "162.243.54.45:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-02 09:43:39",
            "last_seen_utc": "2026-08-10 08:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843455": [
        {
            "ioc_value": "159.65.42.43:60560",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-07-02 09:43:38",
            "last_seen_utc": "2026-09-01 02:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843454": [
        {
            "ioc_value": "147.93.191.75:1003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 09:43:28",
            "last_seen_utc": "2026-08-01 18:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843453": [
        {
            "ioc_value": "141.94.121.162:6060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-07-02 09:43:24",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843452": [
        {
            "ioc_value": "136.111.38.101:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-02 09:43:21",
            "last_seen_utc": "2026-08-14 18:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843451": [
        {
            "ioc_value": "103.11.41.19:54766",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-02 09:43:06",
            "last_seen_utc": "2026-08-01 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843450": [
        {
            "ioc_value": "heifdda.yek.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 09:27:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843443": [
        {
            "ioc_value": "ke9j9z10.interwettenbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 08:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843442": [
        {
            "ioc_value": "fuotcd3b.futshart.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 08:52:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843441": [
        {
            "ioc_value": "dcgip3x8.futshart.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 08:50:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843438": [
        {
            "ioc_value": "fzkx5dg3.estekhdam.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 08:41:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843436": [
        {
            "ioc_value": "laohen1.myvnc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-02 08:20:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bbd9b8056f45e78c75028f31179a89b92e5d75e179ee2fcde1e3d57ee2264538/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843432": [
        {
            "ioc_value": "121.43.181.37:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-02 08:15:52",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843431": [
        {
            "ioc_value": "115.190.178.249:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-02 08:15:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843430": [
        {
            "ioc_value": "140.228.29.111:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 08:14:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a19229094e824540c3a4b1355ab235fac1c84acedcda0f249a2b645f84616360/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843428": [
        {
            "ioc_value": "153.80.249.218:6183",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 08:13:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843429": [
        {
            "ioc_value": "157.180.85.230:2104",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 08:13:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843427": [
        {
            "ioc_value": "147.45.39.81:8670",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 08:10:56",
            "last_seen_utc": "2026-07-02 08:13:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8da466b43acd48b67e37d1acb3944d966f45bef9658c835d983d2d2017ee7921/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843417": [
        {
            "ioc_value": "social9-reach.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 07:18:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843413": [
        {
            "ioc_value": "5werloog.funxbet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 06:50:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843412": [
        {
            "ioc_value": "iruj70rd.funxbet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 06:49:36",
            "last_seen_utc": "2026-07-02 06:50:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843406": [
        {
            "ioc_value": "185.242.3.8:51515",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:41:14",
            "last_seen_utc": "2026-07-02 14:40:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843407": [
        {
            "ioc_value": "dynabot.monster",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:41:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843408": [
        {
            "ioc_value": "headlock.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:41:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843410": [
        {
            "ioc_value": "rfdatuh.yek.boats",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 06:27:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843404": [
        {
            "ioc_value": "94.154.43.10:18129",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:16:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843405": [
        {
            "ioc_value": "5.175.217.137:671",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:16:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843402": [
        {
            "ioc_value": "141.11.88.129:1995",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:11:50",
            "last_seen_utc": "2026-07-02 19:00:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843403": [
        {
            "ioc_value": "zeero.skin",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 06:11:49",
            "last_seen_utc": "2026-07-02 19:00:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843397": [
        {
            "ioc_value": "https://www.abenegihugu.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:52:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.abenegihugu.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843284": [
        {
            "ioc_value": "simultaneouslypower.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-02 05:00:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1843285": [
        {
            "ioc_value": "wiselystarting.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-02 05:00:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1843286": [
        {
            "ioc_value": "itemrange.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-07-02 05:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1843309": [
        {
            "ioc_value": "https://schnicksch-tiernahrung.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/schnicksch-tiernahrung.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843315": [
        {
            "ioc_value": "https://churchforsale.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/churchforsale.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843321": [
        {
            "ioc_value": "https://alwadannews24.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alwadannews24.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843322": [
        {
            "ioc_value": "https://bleuhaven.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bleuhaven.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843323": [
        {
            "ioc_value": "https://cashforcars-pittsburgh.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cashforcars-pittsburgh.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843324": [
        {
            "ioc_value": "https://sunpermit.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sunpermit.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843325": [
        {
            "ioc_value": "https://atrafen.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/atrafen.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843326": [
        {
            "ioc_value": "https://ikinogo.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ikinogo.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843332": [
        {
            "ioc_value": "https://dirtbgone.ie/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dirtbgone.ie",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843333": [
        {
            "ioc_value": "https://www.tuttoinriviera.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.tuttoinriviera.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843348": [
        {
            "ioc_value": "https://www.amazonia-navigators.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 05:00:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.amazonia-navigators.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1843354": [
        {
            "ioc_value": "157.230.237.88:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 05:00:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843356": [
        {
            "ioc_value": "23.132.164.13:44444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-02 05:00:09",
            "last_seen_utc": "2026-08-27 10:48:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "60223,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1843383": [
        {
            "ioc_value": "157.230.237.88:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-02 05:00:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1843384": [
        {
            "ioc_value": "mail.catsec.ink",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 05:00:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843385": [
        {
            "ioc_value": "smtp.catsec.ink",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 05:00:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843386": [
        {
            "ioc_value": "46.247.108.74:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-07-02 05:00:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1843388": [
        {
            "ioc_value": "p5tnetyi.footb.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 04:42:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843387": [
        {
            "ioc_value": "rf9s1gc5.footb.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 04:41:46",
            "last_seen_utc": "2026-07-02 04:41:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843382": [
        {
            "ioc_value": "mrjeehw.yek.beauty",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 04:25:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843375": [
        {
            "ioc_value": "eayuhgu.xbetone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 04:02:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843374": [
        {
            "ioc_value": "jjtsc3t1.homabet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 03:52:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843372": [
        {
            "ioc_value": "egzbf2a5.estekhdam.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 03:41:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843364": [
        {
            "ioc_value": "158.160.191.88:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-02 03:05:05",
            "last_seen_utc": "2026-08-11 08:44:00",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "mythic",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843363": [
        {
            "ioc_value": "198.23.177.200:4445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-02 02:55:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/40f84ae721a13a383e13d18ba0d4cd120db5fe61fae4eefc117347fa6d1a4352/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843362": [
        {
            "ioc_value": "pkdac095.euroyek.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 02:43:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843360": [
        {
            "ioc_value": "bia2.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 02:36:55",
            "last_seen_utc": "2026-07-02 02:37:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1843355": [
        {
            "ioc_value": "sowmwvh.vip1xbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 01:03:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843353": [
        {
            "ioc_value": "clysselw.betkaka.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-02 00:39:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843349": [
        {
            "ioc_value": "209.200.246.194:19989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 23:46:22",
            "last_seen_utc": "2026-08-05 08:47:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843350": [
        {
            "ioc_value": "209.200.246.194:37865",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 23:46:22",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843346": [
        {
            "ioc_value": "8pxyyjso.doobix.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 22:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843344": [
        {
            "ioc_value": "zthayuyp.1x303.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 22:40:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843343": [
        {
            "ioc_value": "i0gxyl9q.betaffiliate.marketing",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 22:36:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843336": [
        {
            "ioc_value": "phcbmap.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 22:03:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843335": [
        {
            "ioc_value": "uamhqvjx.abresanishahri.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 22:03:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x0cd5,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843334": [
        {
            "ioc_value": "lwflkiar.betsoor.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 22:02:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0xa770,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843327": [
        {
            "ioc_value": "jpopdwg.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 21:49:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843312": [
        {
            "ioc_value": "7ipg23zj.bet808.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 20:38:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843300": [
        {
            "ioc_value": "94.156.179.168:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 19:46:10",
            "last_seen_utc": "2026-08-14 18:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843299": [
        {
            "ioc_value": "66.163.114.54:1664",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:45:54",
            "last_seen_utc": "2026-08-03 18:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843298": [
        {
            "ioc_value": "62.4.0.66:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-01 19:45:50",
            "last_seen_utc": "2026-08-29 08:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843297": [
        {
            "ioc_value": "27.102.118.100:7253",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:45:17",
            "last_seen_utc": "2026-08-03 08:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843295": [
        {
            "ioc_value": "209.54.103.155:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:44:35",
            "last_seen_utc": "2026-08-08 08:44:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843296": [
        {
            "ioc_value": "209.54.103.155:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:44:35",
            "last_seen_utc": "2026-08-09 08:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843294": [
        {
            "ioc_value": "209.54.103.155:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:44:34",
            "last_seen_utc": "2026-08-11 18:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843293": [
        {
            "ioc_value": "185.46.10.210:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 19:44:12",
            "last_seen_utc": "2026-08-01 08:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843292": [
        {
            "ioc_value": "185.235.138.19:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-01 19:44:11",
            "last_seen_utc": "2026-08-30 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843291": [
        {
            "ioc_value": "185.115.164.60:63283",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:44:05",
            "last_seen_utc": "2026-08-01 08:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843290": [
        {
            "ioc_value": "181.225.233.172:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 19:43:58",
            "last_seen_utc": "2026-08-24 18:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843289": [
        {
            "ioc_value": "178.105.68.110:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 19:43:56",
            "last_seen_utc": "2026-08-01 08:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843288": [
        {
            "ioc_value": "103.11.41.20:61073",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:43:09",
            "last_seen_utc": "2026-07-31 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843287": [
        {
            "ioc_value": "103.11.41.10:5007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 19:43:06",
            "last_seen_utc": "2026-08-01 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1843187": [
        {
            "ioc_value": "104.207.59.23:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843188": [
        {
            "ioc_value": "109.24.152.219:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843189": [
        {
            "ioc_value": "109.9.42.77:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843190": [
        {
            "ioc_value": "115.84.114.228:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843191": [
        {
            "ioc_value": "120.79.220.198:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843193": [
        {
            "ioc_value": "135.181.34.178:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843192": [
        {
            "ioc_value": "128.79.9.232:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843194": [
        {
            "ioc_value": "140.238.153.39:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843195": [
        {
            "ioc_value": "157.245.241.172:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843197": [
        {
            "ioc_value": "159.65.143.47:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843196": [
        {
            "ioc_value": "159.148.58.10:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:41",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843198": [
        {
            "ioc_value": "159.65.91.36:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843199": [
        {
            "ioc_value": "172.86.90.30:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843200": [
        {
            "ioc_value": "178.128.215.119:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843201": [
        {
            "ioc_value": "18.97.26.66:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843202": [
        {
            "ioc_value": "180.232.31.158:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843203": [
        {
            "ioc_value": "184.105.247.195:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843204": [
        {
            "ioc_value": "185.214.96.148:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843205": [
        {
            "ioc_value": "185.214.96.151:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843206": [
        {
            "ioc_value": "185.214.96.157:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843207": [
        {
            "ioc_value": "185.231.252.243:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:35",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843208": [
        {
            "ioc_value": "185.247.137.143:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:35",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843209": [
        {
            "ioc_value": "185.247.137.193:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:35",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843210": [
        {
            "ioc_value": "185.247.137.210:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:34",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843211": [
        {
            "ioc_value": "185.9.251.81:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:34",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843212": [
        {
            "ioc_value": "195.184.76.170:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:34",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843213": [
        {
            "ioc_value": "195.96.139.54:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:33",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843214": [
        {
            "ioc_value": "20.163.61.13:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:33",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843215": [
        {
            "ioc_value": "20.169.105.51:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:32",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843216": [
        {
            "ioc_value": "20.64.105.155:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:32",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843218": [
        {
            "ioc_value": "209.50.169.46:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:32",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843217": [
        {
            "ioc_value": "209.50.166.85:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:31",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843219": [
        {
            "ioc_value": "209.50.179.215:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:30",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843220": [
        {
            "ioc_value": "209.50.185.18:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:30",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843221": [
        {
            "ioc_value": "209.99.188.240:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:30",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843222": [
        {
            "ioc_value": "213.244.62.236:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:29",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843223": [
        {
            "ioc_value": "216.26.241.217:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:29",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843224": [
        {
            "ioc_value": "216.26.242.169:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:28",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843225": [
        {
            "ioc_value": "31.16.230.158:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:28",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843226": [
        {
            "ioc_value": "31.35.250.56:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:27",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843227": [
        {
            "ioc_value": "37.24.77.70:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:27",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843228": [
        {
            "ioc_value": "37.27.199.35:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:26",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843229": [
        {
            "ioc_value": "37.65.162.60:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:26",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843230": [
        {
            "ioc_value": "37.65.58.154:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843231": [
        {
            "ioc_value": "37.66.147.5:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843232": [
        {
            "ioc_value": "45.148.10.119:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843233": [
        {
            "ioc_value": "45.3.39.26:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843234": [
        {
            "ioc_value": "45.3.54.189:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843236": [
        {
            "ioc_value": "46.193.64.99:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:23",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843235": [
        {
            "ioc_value": "45.79.192.108:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:22",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843237": [
        {
            "ioc_value": "47.238.136.107:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843238": [
        {
            "ioc_value": "5.161.195.145:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843239": [
        {
            "ioc_value": "5.49.168.239:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843240": [
        {
            "ioc_value": "52.165.81.253:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-07-01 19:02:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843179": [
        {
            "ioc_value": "116.62.220.96:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843181": [
        {
            "ioc_value": "172.86.90.30:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843180": [
        {
            "ioc_value": "120.77.79.42:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843182": [
        {
            "ioc_value": "34.140.219.200:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843183": [
        {
            "ioc_value": "34.38.119.76:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843184": [
        {
            "ioc_value": "8.137.157.150:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843185": [
        {
            "ioc_value": "193.32.126.228:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843186": [
        {
            "ioc_value": "141.98.100.14:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-07-01 19:00:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1843119": [
        {
            "ioc_value": "https://merabs.pro/234097cf.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:29",
            "last_seen_utc": "2026-07-01 18:00:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,loader",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843149": [
        {
            "ioc_value": "https://merabs.pro/fef5dad8.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843150": [
        {
            "ioc_value": "https://merabs.pro/4763f422.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843151": [
        {
            "ioc_value": "https://merabs.pro/f55c88c3.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843155": [
        {
            "ioc_value": "https://merabs.pro/e95bb15f.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843152": [
        {
            "ioc_value": "https://merabs.pro/0f186364.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843153": [
        {
            "ioc_value": "https://merabs.pro/5f2f9b06.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843154": [
        {
            "ioc_value": "https://merabs.pro/33fc733a.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843156": [
        {
            "ioc_value": "https://merabs.pro/a4ab25da.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843157": [
        {
            "ioc_value": "https://merabs.pro/62706817.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843159": [
        {
            "ioc_value": "https://merabs.pro/3c199c55.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843158": [
        {
            "ioc_value": "https://merabs.pro/6a94e8ad.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843160": [
        {
            "ioc_value": "https://merabs.pro/8dd99b31.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843161": [
        {
            "ioc_value": "https://merabs.pro/c8787734.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843162": [
        {
            "ioc_value": "https://merabs.pro/3b006736.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843163": [
        {
            "ioc_value": "https://merabs.pro/703520a5.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843164": [
        {
            "ioc_value": "https://merabs.pro/fb5fff92.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-07-01 18:59:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,payload",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1843174": [
        {
            "ioc_value": "69x4o4j5.bet808.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 18:36:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843125": [
        {
            "ioc_value": "nordra4ex.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 17:45:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843123": [
        {
            "ioc_value": "xwnfpj7t.betrein.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 17:43:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843118": [
        {
            "ioc_value": "esjvtzn6.aloo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 17:31:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1843107": [
        {
            "ioc_value": "129.212.233.8:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-01 17:24:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840876": [
        {
            "ioc_value": "204.10.160.215:3608",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-07-01 16:50:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840875": [
        {
            "ioc_value": "91vkuxv1.enf90.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 16:35:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840866": [
        {
            "ioc_value": "waysmakeyourlifebetter.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-01 16:13:14",
            "last_seen_utc": "2026-07-02 10:35:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840867": [
        {
            "ioc_value": "goodpersonofourcentury.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-01 16:13:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840868": [
        {
            "ioc_value": "besthappyfamily.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-01 16:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840862": [
        {
            "ioc_value": "https://merabs.pro/473f5c82.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 15:43:22",
            "last_seen_utc": "2026-07-01 15:30:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/9fd59b56ea2c757ee6f2b8fddc45f7d36efeca135cee1c92511799c85351ebf3",
            "tags": "ClickFix,garble,golang,loader,sm188",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1840864": [
        {
            "ioc_value": "pop.topsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 15:43:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/9fd59b56ea2c757ee6f2b8fddc45f7d36efeca135cee1c92511799c85351ebf3",
            "tags": "C2,ClickFix,garble,golang,sm188",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1840865": [
        {
            "ioc_value": "https://ardotcharleybuking.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 15:43:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ardotcharleybuking.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840857": [
        {
            "ioc_value": "206.189.94.70:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-01 15:17:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840860": [
        {
            "ioc_value": "147.182.140.2:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-01 15:17:57",
            "last_seen_utc": "2026-07-02 09:22:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840856": [
        {
            "ioc_value": "merabs.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 14:37:55",
            "last_seen_utc": "2026-07-01 15:22:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840854": [
        {
            "ioc_value": "j2rfzlmu.enf90.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 14:23:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840853": [
        {
            "ioc_value": "enf90.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 14:20:27",
            "last_seen_utc": "2026-07-01 16:35:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840851": [
        {
            "ioc_value": "119.45.12.116:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-01 14:15:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32eca1b0ebd4e86eb6f1ecad158da1651b62a1882a694cfc835104f68305be03/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840852": [
        {
            "ioc_value": "119.45.12.116:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-01 14:15:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32eca1b0ebd4e86eb6f1ecad158da1651b62a1882a694cfc835104f68305be03/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840848": [
        {
            "ioc_value": "104.143.33.78:10201",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-01 14:15:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65595e95944bd382a225d967e3236f27c93aa8a0d9d84f9bdccae8328aca8256/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840849": [
        {
            "ioc_value": "104.143.33.78:10202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-01 14:15:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65595e95944bd382a225d967e3236f27c93aa8a0d9d84f9bdccae8328aca8256/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840850": [
        {
            "ioc_value": "119.45.12.116:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-07-01 14:15:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/32eca1b0ebd4e86eb6f1ecad158da1651b62a1882a694cfc835104f68305be03/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840847": [
        {
            "ioc_value": "http://192.168.88.143:80/9x5w",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 14:15:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e339bc887091bd92c4da113b0a80e854309dd86b9fe67e17b1434f83cf6efdfd/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840842": [
        {
            "ioc_value": "24b670caf5090f91fff6ad82ffcfe21b61f1e14c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-01 14:02:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840843": [
        {
            "ioc_value": "37daa89551604908ec63096ec5a87504",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-01 14:02:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840839": [
        {
            "ioc_value": "277d9e29eeb265c47652166ef7fe7060d9d0af4e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840840": [
        {
            "ioc_value": "e11bb364c56bf0880c2402744dbb4d83",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840841": [
        {
            "ioc_value": "f682942cb2b55e88b3dc13b228c35765ad624434cf472490078a29566c7bfa03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-01 14:02:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840837": [
        {
            "ioc_value": "83383615883396568ca7d3e26a3f52b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-01 14:02:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840838": [
        {
            "ioc_value": "c322fa3e02a79ecead674bc4a8e67b71d14632427f8dc9a380b0f588941bbf1a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840834": [
        {
            "ioc_value": "a55f7b2226c1d9dbd94fe0a9d385473c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 14:02:39",
            "last_seen_utc": "2026-07-01 15:22:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840835": [
        {
            "ioc_value": "a9b2a1d2cc97c1a621c729d2a7b706b202280e446a0300da493156e685c4dde9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-01 14:02:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840836": [
        {
            "ioc_value": "f4f3450d5e13bb3e8a1809bf7d0528cf2387df80",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-07-01 14:02:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840831": [
        {
            "ioc_value": "f370ff620a0d83b45b133cfcb4a4c3fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-01 14:02:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840832": [
        {
            "ioc_value": "9fd59b56ea2c757ee6f2b8fddc45f7d36efeca135cee1c92511799c85351ebf3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 14:02:38",
            "last_seen_utc": "2026-07-01 15:22:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840833": [
        {
            "ioc_value": "4b0fe8285d999cea08709495d598ca7c9d7a656e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 14:02:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840827": [
        {
            "ioc_value": "05fe6a71add6db59c0457698f4bc7a56287ab43b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840828": [
        {
            "ioc_value": "133517cc137dba1e885871e6d461717b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840829": [
        {
            "ioc_value": "58212fa6f29ef32418c801bbf37319c24f726a6fa155b3b7c4f7f6caf01935d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-01 14:02:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840830": [
        {
            "ioc_value": "4e1f10683b503bdc0e3003406775b45fa93ce372",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-07-01 14:02:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840824": [
        {
            "ioc_value": "5377fbbbb068fc5119a04bbf4e73c835ef46604a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-01 14:02:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840825": [
        {
            "ioc_value": "5d682fcbc666cd2426c45b11fa94f16b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-01 14:02:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840826": [
        {
            "ioc_value": "6f237ca43382d389421a084b18e0e32b522d60a10727d4742c9822ad64c9d999",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840821": [
        {
            "ioc_value": "b6e04175797eadb9a9b9e07bd4b9066b1ec1aebb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-01 14:02:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840822": [
        {
            "ioc_value": "2adb404eb99fe1b130e326ed36343411",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-01 14:02:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840823": [
        {
            "ioc_value": "fc4686a72c0387bd51e28916a20ab713eb0edac589dc8d7be28c0b1bef49694e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-01 14:02:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840818": [
        {
            "ioc_value": "25968d28095d12ae3084b9675223d6785506f318",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-01 14:02:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840819": [
        {
            "ioc_value": "2c768932e125bd22ea8b71a773053082",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-01 14:02:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840820": [
        {
            "ioc_value": "20c993a491b065c511467b7e4af628781c4ef0a417d15cf5863f82f22d43e484",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-07-01 14:02:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840816": [
        {
            "ioc_value": "b4383d1cea47e89e1ff12432b38abb74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-01 14:02:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840817": [
        {
            "ioc_value": "3d195ba1802309316a5a54031e76cc666136cc21e01b97daf4a21a176ea5b3d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-07-01 14:02:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840812": [
        {
            "ioc_value": "4ba5bfaeb2c62e2a884d478f15fb5bb4b57ab1ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840813": [
        {
            "ioc_value": "a23dfc3a4258c050790c5f02d50618b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840814": [
        {
            "ioc_value": "c972dd09d07972230bfc3282a82494c8a9ca29b48532038af8966f9c3d98564d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-01 14:02:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840815": [
        {
            "ioc_value": "873522d113b0a23fe25ed2b723e1c7274d93c87e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-07-01 14:02:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840809": [
        {
            "ioc_value": "f6ab265558714a362dcee763dc3a61ebbc02aab7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-01 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840810": [
        {
            "ioc_value": "7c72f6d08c1165bd5bf9ef8ffadf1705",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-01 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840811": [
        {
            "ioc_value": "301e2aa14956cf815b865c0c2ac7de438bad6072720d180118ca777779cb0a65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840807": [
        {
            "ioc_value": "c31217109ba50059d7c081a7e832d0cf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-01 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840808": [
        {
            "ioc_value": "cb998078ed0aedf3de3ee34aff231339d701b14982809df14f6b382610a835eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-07-01 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840803": [
        {
            "ioc_value": "adbb968603eedbf8d203fb4b30ceb38303945e1f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840804": [
        {
            "ioc_value": "944f7a8303225eb154dda8eaf754e7e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840805": [
        {
            "ioc_value": "9c0a88ea53c4e0324157542385a1d342101feb51cf7b8cf76e9441376f1f522a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-01 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840806": [
        {
            "ioc_value": "36852534338ae1d12fee8567c96636bbe1fe6d38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-07-01 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840800": [
        {
            "ioc_value": "e64428142676e50e4d1df72e11a785e68c953f55",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840801": [
        {
            "ioc_value": "3e5e4f01d4ff326c79ddbe3a96353821",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840802": [
        {
            "ioc_value": "f8b3342addb666e359ef5852a4034e4ccb2612d0004d4a3ae620979955f34a2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-07-01 14:02:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840796": [
        {
            "ioc_value": "b8526300bca3da80a92fd8c5f668d0210738e3130c84d5e88250a1cc8dd8ce4f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840797": [
        {
            "ioc_value": "ca4b387b37fe48b703fd32076929822d6b4b8271",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840798": [
        {
            "ioc_value": "3f264a65feeeea6e03914ff97896b134",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840799": [
        {
            "ioc_value": "d26bc055f0cfdef6b5e80e6e35a0b9512bd7d233579119a0a874228915fe4ed7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840794": [
        {
            "ioc_value": "17c09eea41699746d301191c6a2e984d10c2f8b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840795": [
        {
            "ioc_value": "2c43b32d0c017a335ad3e5f5aa33fbf7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840790": [
        {
            "ioc_value": "902f94d7819fa6a65e9ba1d491e8fc7cb3d2bcb15ae1e4a89a065223d815f9f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-01 14:02:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840791": [
        {
            "ioc_value": "e72df84ddba88ad37b79af285a619b7698914cfa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-01 14:02:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840792": [
        {
            "ioc_value": "7226fb1c7386c342d188c0b9467f7bc5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-07-01 14:02:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840793": [
        {
            "ioc_value": "4c9e9d28c5bd78e82cd874856549b18c1cfd5d0fa4b2dd63f779de90cdd27ed8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-07-01 14:02:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840788": [
        {
            "ioc_value": "cbdc70114cac319dbe3d7455b65dbfe7eebe568d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-01 14:02:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840789": [
        {
            "ioc_value": "9907606ebe6ce1fdf54180373b03ad77",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-01 14:02:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840787": [
        {
            "ioc_value": "bc03887e61e014c17deacc56b7842d47391cecfa3244e7b9cd6d45b4faff1f5f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-07-01 14:02:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840782": [
        {
            "ioc_value": "ardotcharleybuking.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 14:00:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840754": [
        {
            "ioc_value": "192.210.226.224:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-01 13:58:11",
            "last_seen_utc": "2026-07-09 20:14:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Havoc,havoc-webclient,HavocC2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1840756": [
        {
            "ioc_value": "64.188.26.121:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-01 13:58:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Havoc,havoc-webclient,HavocC2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1840755": [
        {
            "ioc_value": "192.236.148.154:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-01 13:58:10",
            "last_seen_utc": "2026-07-09 20:16:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Havoc,havoc-webclient,HavocC2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1840760": [
        {
            "ioc_value": "162.55.1.86:3005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 13:58:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260701-lh4pmscz2s/behavioral1",
            "tags": "c2,HadesStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1840757": [
        {
            "ioc_value": "107.173.52.214:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-07-01 13:58:09",
            "last_seen_utc": "2026-07-09 20:21:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Havoc,havoc-webclient,HavocC2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1840761": [
        {
            "ioc_value": "http://162.55.1.86:3005/log",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 13:58:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260701-lh4pmscz2s/behavioral1",
            "tags": "c2,HadesStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1840762": [
        {
            "ioc_value": "http://162.55.1.86:3005/browser",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 13:58:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260701-lh4pmscz2s/behavioral1",
            "tags": "c2,HadesStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1840763": [
        {
            "ioc_value": "http://162.55.1.86:3005/capture",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 13:58:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260701-lh4pmscz2s/behavioral1",
            "tags": "c2,HadesStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1840764": [
        {
            "ioc_value": "11b50a6143f0a10495f509cc7582a141e644b7322a481e02ea8e9a6db7edbbc0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 13:58:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260701-lh4pmscz2s/",
            "tags": "HadesStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1840766": [
        {
            "ioc_value": "http://124.29.214.186:54586/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 13:58:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.214.186",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840767": [
        {
            "ioc_value": "http://103.26.82.194:51844/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 13:58:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.82.194",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840781": [
        {
            "ioc_value": "http://midpfv.xyz:9549",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-01 13:55:43",
            "last_seen_utc": "2026-08-09 11:30:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3eccd5e0b9da7735102c0e57c5c98668189c9ba964bf18508eabd9116aab6947/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840776": [
        {
            "ioc_value": "3gk1o3xg.betoshart.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 12:41:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840773": [
        {
            "ioc_value": "codeverificatrorcl.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 12:29:58",
            "last_seen_utc": "2026-08-24 00:37:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840772": [
        {
            "ioc_value": "4l988hfr.1fabet.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 12:28:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840770": [
        {
            "ioc_value": "bfhxci6n.dancebet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 12:21:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840769": [
        {
            "ioc_value": "dancebet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 12:19:42",
            "last_seen_utc": "2026-07-01 12:20:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840768": [
        {
            "ioc_value": "chhtni23.dancebet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 12:19:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840759": [
        {
            "ioc_value": "82.156.235.177:13321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 11:47:08",
            "last_seen_utc": "2026-08-16 20:48:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840758": [
        {
            "ioc_value": "http://axoshealthcare.com:4959",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-07-01 11:45:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f8b3342addb666e359ef5852a4034e4ccb2612d0004d4a3ae620979955f34a2a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840734": [
        {
            "ioc_value": "85.204.125.67:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-07-01 10:35:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1840753": [
        {
            "ioc_value": "admiration-noble.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-01 10:35:27",
            "last_seen_utc": "2026-08-08 08:27:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840752": [
        {
            "ioc_value": "jrfrggyb.crash.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 10:19:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840749": [
        {
            "ioc_value": "42.240.167.114:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 09:45:20",
            "last_seen_utc": "2026-08-04 08:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840748": [
        {
            "ioc_value": "41.234.38.59:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-01 09:45:19",
            "last_seen_utc": "2026-07-31 18:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840747": [
        {
            "ioc_value": "36.248.232.173:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 09:45:16",
            "last_seen_utc": "2026-08-04 18:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840746": [
        {
            "ioc_value": "34.41.69.140:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-01 09:45:14",
            "last_seen_utc": "2026-07-31 18:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840745": [
        {
            "ioc_value": "195.242.118.161:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-01 09:44:17",
            "last_seen_utc": "2026-08-28 18:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840744": [
        {
            "ioc_value": "185.122.171.157:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 09:44:00",
            "last_seen_utc": "2026-08-02 18:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840743": [
        {
            "ioc_value": "178.16.54.157:3009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-01 09:43:52",
            "last_seen_utc": "2026-07-31 18:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840742": [
        {
            "ioc_value": "16.163.186.117:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-07-01 09:43:40",
            "last_seen_utc": "2026-07-31 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840741": [
        {
            "ioc_value": "137.184.216.236:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-07-01 09:43:24",
            "last_seen_utc": "2026-08-20 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840740": [
        {
            "ioc_value": "130.12.182.95:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-01 09:43:22",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840739": [
        {
            "ioc_value": "109.237.64.48:44704",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-07-01 09:43:17",
            "last_seen_utc": "2026-09-01 02:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840738": [
        {
            "ioc_value": "107.172.255.49:62722",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-01 09:43:14",
            "last_seen_utc": "2026-07-31 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840737": [
        {
            "ioc_value": "103.11.41.20:61557",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 09:43:08",
            "last_seen_utc": "2026-07-31 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840736": [
        {
            "ioc_value": "103.11.41.10:61105",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 09:43:07",
            "last_seen_utc": "2026-07-31 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840735": [
        {
            "ioc_value": "103.11.41.10:16529",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 09:43:06",
            "last_seen_utc": "2026-07-31 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840732": [
        {
            "ioc_value": "https://jjl.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 08:25:45",
            "last_seen_utc": "2026-07-01 13:25:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840733": [
        {
            "ioc_value": "jjl.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 08:25:45",
            "last_seen_utc": "2026-07-01 13:25:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840731": [
        {
            "ioc_value": "jjl.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 08:25:33",
            "last_seen_utc": "2026-07-01 13:25:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840730": [
        {
            "ioc_value": "https://jjl.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 08:25:32",
            "last_seen_utc": "2026-07-01 13:25:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840729": [
        {
            "ioc_value": "mdftw8lo.btyek.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 08:18:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840728": [
        {
            "ioc_value": "btyek.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 08:16:41",
            "last_seen_utc": "2026-07-01 08:17:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840727": [
        {
            "ioc_value": "codeverificatrorcl.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 08:10:42",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840722": [
        {
            "ioc_value": "119.91.243.238:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 08:05:06",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840699": [
        {
            "ioc_value": "http://202.70.139.110:44351/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 07:42:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.70.139.110",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840700": [
        {
            "ioc_value": "http://103.248.94.9:51949/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 07:42:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.248.94.9",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840705": [
        {
            "ioc_value": "206.189.94.70:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-01 07:42:36",
            "last_seen_utc": "2026-07-02 10:08:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840721": [
        {
            "ioc_value": "djaczx9h.btyek.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 07:37:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840720": [
        {
            "ioc_value": "113.45.185.225:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 07:35:12",
            "last_seen_utc": "2026-07-01 10:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840718": [
        {
            "ioc_value": "squvbf6p.btyek.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 07:28:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840712": [
        {
            "ioc_value": "195.201.58.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840714": [
        {
            "ioc_value": "159.69.77.223:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840716": [
        {
            "ioc_value": "94.130.120.240:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840708": [
        {
            "ioc_value": "https://88.99.235.235/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840709": [
        {
            "ioc_value": "https://159.69.77.223/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:28",
            "last_seen_utc": "2026-08-11 04:50:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840710": [
        {
            "ioc_value": "https://94.130.41.8/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840711": [
        {
            "ioc_value": "https://94.130.120.240/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840707": [
        {
            "ioc_value": "https://195.201.58.116/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 07:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1840706": [
        {
            "ioc_value": "lvt.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 07:17:19",
            "last_seen_utc": "2026-07-01 17:51:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840704": [
        {
            "ioc_value": "43.144.19.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-07-01 07:05:06",
            "last_seen_utc": "2026-09-01 02:47:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840703": [
        {
            "ioc_value": "104.239.66.42:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-07-01 07:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ddfbf3db2b7e15b8202b71e1e97a180a54a3b248cbc9347d044b338862086d09/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840702": [
        {
            "ioc_value": "193.142.58.100:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-07-01 06:45:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4046c330d1ea386ed205ae05914d9f5ef7257ffdcb2f435e487dd3dd6657f8b2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840701": [
        {
            "ioc_value": "x4ii4c50.btyek.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 06:19:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840698": [
        {
            "ioc_value": "btyek.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 06:16:03",
            "last_seen_utc": "2026-07-01 06:16:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840396": [
        {
            "ioc_value": "63.250.57.91:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-07-01 05:50:04",
            "last_seen_utc": "2026-08-09 08:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "1472D1643B294C63AF66357816F6E5E66B427EBD,AsyncRAT,c2",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1840400": [
        {
            "ioc_value": "91.92.137.12:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-01 05:50:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,QuasarRat",
            "anonymous": 0,
            "reporter": "navneeet"
        }
    ],
    "1840401": [
        {
            "ioc_value": "zaserz.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:50:02",
            "last_seen_utc": "2026-07-16 14:49:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840408": [
        {
            "ioc_value": "exclusivecloudprotection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 05:50:02",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840405": [
        {
            "ioc_value": "https://zaserz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 05:50:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/zaserz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840407": [
        {
            "ioc_value": "superwebprotection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 05:50:00",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840409": [
        {
            "ioc_value": "extrafireprotection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 05:49:59",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840410": [
        {
            "ioc_value": "photo-download-drive.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-01 05:49:59",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "tonresolver",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840411": [
        {
            "ioc_value": "arigatodomen.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840412": [
        {
            "ioc_value": "barmaleieba.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840413": [
        {
            "ioc_value": "bibliorock.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840414": [
        {
            "ioc_value": "gasshopper.sale",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840415": [
        {
            "ioc_value": "mebanebols.trade",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840416": [
        {
            "ioc_value": "memshowblob.forum",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840417": [
        {
            "ioc_value": "merkantalolol.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:55",
            "last_seen_utc": "2026-08-14 08:57:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840418": [
        {
            "ioc_value": "mexicodreams.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840419": [
        {
            "ioc_value": "mob.lanjut.in",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840420": [
        {
            "ioc_value": "peachbro.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840421": [
        {
            "ioc_value": "pilotkadomen.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840422": [
        {
            "ioc_value": "pinokros.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840423": [
        {
            "ioc_value": "pringlesbob.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:43",
            "last_seen_utc": "2026-08-14 08:58:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840424": [
        {
            "ioc_value": "superboomer.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-07-01 05:49:41",
            "last_seen_utc": "2026-08-14 08:58:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840427": [
        {
            "ioc_value": "unlimitsquid.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-07-01 05:49:40",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "tonresolver",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840428": [
        {
            "ioc_value": "cloudsflere.agency",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-07-01 05:49:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1840555": [
        {
            "ioc_value": "http://112.27.10.150:34339/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 05:49:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/112.27.10.150",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840433": [
        {
            "ioc_value": "147.182.140.2:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-01 05:49:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840553": [
        {
            "ioc_value": "http://103.146.110.206:60051/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 05:49:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.146.110.206",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840554": [
        {
            "ioc_value": "http://115.50.231.205:58069/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-07-01 05:49:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.50.231.205",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840618": [
        {
            "ioc_value": "54415e8a8d8e1ad25fdb246d9dfd50c76dce805a47b92d84539f23d14f6ee31b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-07-01 05:49:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/54415e8a8d8e1ad25fdb246d9dfd50c76dce805a47b92d84539f23d14f6ee31b",
            "tags": "Blank-c,BlankGrabber,grabber,python,stealer",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1840622": [
        {
            "ioc_value": "82.17.235.66:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-07-01 05:49:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "5089,c2,censys,quasar",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1840624": [
        {
            "ioc_value": "168.245.203.156:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-07-01 05:49:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1840691": [
        {
            "ioc_value": "129.212.233.8:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-07-01 05:49:22",
            "last_seen_utc": "2026-07-01 22:56:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840688": [
        {
            "ioc_value": "117.72.158.44:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-01 04:05:06",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840687": [
        {
            "ioc_value": "101.43.128.56:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-07-01 04:05:05",
            "last_seen_utc": "2026-08-22 00:03:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840686": [
        {
            "ioc_value": "njb2hl8n.betobord.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 02:33:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840684": [
        {
            "ioc_value": "cxsbf6om.betmajickade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 02:26:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840682": [
        {
            "ioc_value": "q08rvd2u.btyek.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 02:11:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840679": [
        {
            "ioc_value": "podcas-watch.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:59:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840680": [
        {
            "ioc_value": "publ1-wave.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:59:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840677": [
        {
            "ioc_value": "lette-logic.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:59:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840678": [
        {
            "ioc_value": "it5ut2.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:59:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840675": [
        {
            "ioc_value": "sabad724.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:54:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840676": [
        {
            "ioc_value": "btyek.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:54:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840674": [
        {
            "ioc_value": "onebet1x.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840668": [
        {
            "ioc_value": "rlhk5nxo.ra7ximor.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840669": [
        {
            "ioc_value": "darklistener.ra7ximor.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840670": [
        {
            "ioc_value": "ser-spireal.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840671": [
        {
            "ioc_value": "ipynzqk.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840672": [
        {
            "ioc_value": "1xfa.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840673": [
        {
            "ioc_value": "repairwoo.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:44:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840667": [
        {
            "ioc_value": "fernvalidator.ra7ximor.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840662": [
        {
            "ioc_value": "gre-enleaf2.4zorexil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840663": [
        {
            "ioc_value": "plinko.mobi",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840664": [
        {
            "ioc_value": "dr1v-cache.4zorexil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840665": [
        {
            "ioc_value": "nysaaol7.4zorexil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840666": [
        {
            "ioc_value": "clientlab.4zorexil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840661": [
        {
            "ioc_value": "daf.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:39:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840657": [
        {
            "ioc_value": "sweetpear2.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:34:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840658": [
        {
            "ioc_value": "tasty-apple1.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:34:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840659": [
        {
            "ioc_value": "newpage6.ra7ximor.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:34:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840660": [
        {
            "ioc_value": "blue-sky1.4zorexil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:34:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840656": [
        {
            "ioc_value": "freshm-ilk3.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:29:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840653": [
        {
            "ioc_value": "coolstone6.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:28:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840654": [
        {
            "ioc_value": "warmbr-ead5.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:28:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840655": [
        {
            "ioc_value": "hottea4.sylov2en.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:28:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840651": [
        {
            "ioc_value": "darknight2.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:23:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840652": [
        {
            "ioc_value": "bright-sk-y1.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:23:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840650": [
        {
            "ioc_value": "deep-ocean3.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840642": [
        {
            "ioc_value": "whitecl-oud5.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840643": [
        {
            "ioc_value": "1x1.cash",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840644": [
        {
            "ioc_value": "abresanishahri.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840645": [
        {
            "ioc_value": "activeintro.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840646": [
        {
            "ioc_value": "ace90bet.cash",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840647": [
        {
            "ioc_value": "wald10k.fixt-turbine.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840648": [
        {
            "ioc_value": "akhlagkarbordi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840649": [
        {
            "ioc_value": "gold-fish4.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840636": [
        {
            "ioc_value": "backy-ard5.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840637": [
        {
            "ioc_value": "full-room4.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840638": [
        {
            "ioc_value": "nextdoor3.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840639": [
        {
            "ioc_value": "city-wa-lk2.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840640": [
        {
            "ioc_value": "top-floor1.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840641": [
        {
            "ioc_value": "silverrain6.to6varil.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:18:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840635": [
        {
            "ioc_value": "sideview6.kymle5rax.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:13:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840628": [
        {
            "ioc_value": "pi4x.qi3mavel.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:08:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840629": [
        {
            "ioc_value": "alt-1mpo.qi3mavel.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:08:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840619": [
        {
            "ioc_value": "norvenor5.qi3mavel.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:03:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840620": [
        {
            "ioc_value": "ledgerbirc.qi3mavel.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:03:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840621": [
        {
            "ioc_value": "fundfall.qi3mavel.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 01:03:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840610": [
        {
            "ioc_value": "loaddri.zom7lirex.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840611": [
        {
            "ioc_value": "environments.gr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840612": [
        {
            "ioc_value": "aktinovolia.gr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840613": [
        {
            "ioc_value": "qnaru.zom7lirex.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840614": [
        {
            "ioc_value": "is1e-leaf.zom7lirex.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840615": [
        {
            "ioc_value": "smar-ric.zom7lirex.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840616": [
        {
            "ioc_value": "stream-route.zom7lirex.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840617": [
        {
            "ioc_value": "bnia8u.qi3mavel.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840609": [
        {
            "ioc_value": "twtd.zom7lirex.in.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:58:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840604": [
        {
            "ioc_value": "draftfun.mixruby.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840605": [
        {
            "ioc_value": "data.webdatapoint.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840606": [
        {
            "ioc_value": "logmanagementsys.global-net-admin-service.wiki",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840607": [
        {
            "ioc_value": "logicnode.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840608": [
        {
            "ioc_value": "cybergrid.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840597": [
        {
            "ioc_value": "pulse.nexo5mir.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840598": [
        {
            "ioc_value": "proxy.xori3mav.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840599": [
        {
            "ioc_value": "vibe.cryptonodex.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840600": [
        {
            "ioc_value": "mass.solidtechcore.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840601": [
        {
            "ioc_value": "area.lapatom.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840602": [
        {
            "ioc_value": "alpha.ratbasic.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840603": [
        {
            "ioc_value": "view.rapidreef.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840596": [
        {
            "ioc_value": "grid.sena9vix.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:28:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840589": [
        {
            "ioc_value": "klitr41.despot-unfolded.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840590": [
        {
            "ioc_value": "xqmvu.ann0uncedwhiner.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840591": [
        {
            "ioc_value": "zan9uav.snort-uharsky.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840592": [
        {
            "ioc_value": "a9inxxpk.serious-substance.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840593": [
        {
            "ioc_value": "tkrpksb.strangle-snup.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840594": [
        {
            "ioc_value": "pixel.vori7nex.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840595": [
        {
            "ioc_value": "node.lami4qor.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840581": [
        {
            "ioc_value": "rn0ss-index.doe-negotation.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840582": [
        {
            "ioc_value": "stage-cat.dev-process.work",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840583": [
        {
            "ioc_value": "user.bury2tsfinger.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840584": [
        {
            "ioc_value": "temp.skewed-pronoun.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840585": [
        {
            "ioc_value": "fast.desire-veratrum.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840586": [
        {
            "ioc_value": "etarun-02p3zmn.westrock.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840587": [
        {
            "ioc_value": "etatext750azrx.nordfreak.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840588": [
        {
            "ioc_value": "zetaold-wahipq.nordfreak.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840576": [
        {
            "ioc_value": "datahostunit.flex2node.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840577": [
        {
            "ioc_value": "read7siteview.open2byte.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840578": [
        {
            "ioc_value": "uxlmnbb.lafaofn0thes.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840579": [
        {
            "ioc_value": "hj263krt.daro7vex.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840580": [
        {
            "ioc_value": "solcoreos3.demon5tratpripek.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:23:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840574": [
        {
            "ioc_value": "safe8siteview.verdi7rax.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840575": [
        {
            "ioc_value": "pure7siteview.po5ehuweather.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840567": [
        {
            "ioc_value": "gear2meshhub.thari9xel.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840568": [
        {
            "ioc_value": "sync4logicway.nexo2ran.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840569": [
        {
            "ioc_value": "push7pathgate.pavi1rix.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840570": [
        {
            "ioc_value": "lasthostunit.voidsphere.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840571": [
        {
            "ioc_value": "c0de-line.pavi1xen.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840572": [
        {
            "ioc_value": "mixhostunit.mira4then.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840573": [
        {
            "ioc_value": "link6logicnet.zori9vax.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840559": [
        {
            "ioc_value": "5tric-track.deckico.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840560": [
        {
            "ioc_value": "884undo.braveclo.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840561": [
        {
            "ioc_value": "pinnarro.glen7vara.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840562": [
        {
            "ioc_value": "moraldusk.ve4lenth.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840563": [
        {
            "ioc_value": "mesh0-sheet.thorni9ra.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840564": [
        {
            "ioc_value": "can0py-dock.luna2veth.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840565": [
        {
            "ioc_value": "shapepalette.mist6lora.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840566": [
        {
            "ioc_value": "hiddenalpha.so1verin.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840556": [
        {
            "ioc_value": "wincell.reptbot.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840557": [
        {
            "ioc_value": "jbt0qmm.reptbot.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840558": [
        {
            "ioc_value": "r0ot-vault.sendrat.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:18:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840549": [
        {
            "ioc_value": "stackanc.trave1.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840550": [
        {
            "ioc_value": "trailminor.trave1.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840551": [
        {
            "ioc_value": "quor-fluxen.oppo5it.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840552": [
        {
            "ioc_value": "flux45r.lunave5.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840541": [
        {
            "ioc_value": "wild4pathgate.stigmaflowlink.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840542": [
        {
            "ioc_value": "skinmeshway.velumpulsebox.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840543": [
        {
            "ioc_value": "shifthostunit.axonetworkhub.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840544": [
        {
            "ioc_value": "base5siteview.axonetworkhub.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840545": [
        {
            "ioc_value": "cold4pathgate.nimbusviewgate.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840546": [
        {
            "ioc_value": "vastmeshway.nimbusviewgate.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840547": [
        {
            "ioc_value": "past4pathgate.sporesyncnode.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840548": [
        {
            "ioc_value": "tinymeshway.sporesyncnode.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840533": [
        {
            "ioc_value": "neonlogicgate4.verdalya.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840534": [
        {
            "ioc_value": "stem7meshnode.biomasselement.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840535": [
        {
            "ioc_value": "grow6siteview.biomasselement.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840536": [
        {
            "ioc_value": "flash8hostnet.xenonraypoint.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840537": [
        {
            "ioc_value": "shinenodeview.xenonraypoint.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840538": [
        {
            "ioc_value": "clear8siteview.focallensview.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840539": [
        {
            "ioc_value": "palehostunit5.chromacorebit.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840540": [
        {
            "ioc_value": "fernmenshway.stigmaflowlink.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:13:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840532": [
        {
            "ioc_value": "x089w0f5.btyek.boats",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840524": [
        {
            "ioc_value": "wildpathbase.solavern.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840525": [
        {
            "ioc_value": "coolmeshbit.petalune.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840526": [
        {
            "ioc_value": "radiant7path.petalune.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840527": [
        {
            "ioc_value": "bluezonepath6.grovessa.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840528": [
        {
            "ioc_value": "solarpoint4net.grovessa.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840529": [
        {
            "ioc_value": "tempohostlink9.grovessa.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840530": [
        {
            "ioc_value": "frosttask8unit.florenth.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840531": [
        {
            "ioc_value": "puresyncbase.florenth.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840516": [
        {
            "ioc_value": "orbitmeshpath.glenmora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840517": [
        {
            "ioc_value": "pixelstormsys.glenmora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840518": [
        {
            "ioc_value": "quantum3wave.veloria.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840519": [
        {
            "ioc_value": "tundraflow6net.veloria.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840520": [
        {
            "ioc_value": "fossil8crypto.lunavera.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840521": [
        {
            "ioc_value": "shieldpure3link.lunavera.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840522": [
        {
            "ioc_value": "deepcloudbase5.mistbriar.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840523": [
        {
            "ioc_value": "clearpointdata.mistbriar.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840512": [
        {
            "ioc_value": "dusk1-vector.fashina5pread.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840513": [
        {
            "ioc_value": "vivgla.fashina5pread.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840514": [
        {
            "ioc_value": "sp1i3-crest.immer-weeping.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840515": [
        {
            "ioc_value": "cryptoview7node.glenmora.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:08:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840508": [
        {
            "ioc_value": "audio-runw.eightyen1arge.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840509": [
        {
            "ioc_value": "merline2en.old-ground.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840510": [
        {
            "ioc_value": "hyper-p4rt.old-ground.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840500": [
        {
            "ioc_value": "partnertok.closer1ook.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840501": [
        {
            "ioc_value": "l04de9-span.closer1ook.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840502": [
        {
            "ioc_value": "nor-valeet.simpres-solst.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840503": [
        {
            "ioc_value": "fre1g-logic.interfe7ewith.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840504": [
        {
            "ioc_value": "petalposter.veget-growing.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840505": [
        {
            "ioc_value": "chkoi.veget-growing.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840506": [
        {
            "ioc_value": "gl792ahc.ima8invika.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840507": [
        {
            "ioc_value": "trusteddecod.deryuga-sablist.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840492": [
        {
            "ioc_value": "packnoirland2.zexorcloudsync.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840493": [
        {
            "ioc_value": "gategoldberg.zexorcloudsync.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840494": [
        {
            "ioc_value": "fastzeit1mond.exmeshlogic.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840495": [
        {
            "ioc_value": "noirgoldland.exmeshlogic.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840496": [
        {
            "ioc_value": "vertbaum9view.exmeshlogic.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840497": [
        {
            "ioc_value": "holz4unitlink.exmeshlogic.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840498": [
        {
            "ioc_value": "openmondkalt.exmeshlogic.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840499": [
        {
            "ioc_value": "sync8bergzeit.exmeshlogic.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840491": [
        {
            "ioc_value": "globfastfire.zexorcloudsync.garden",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-07-01 00:03:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840488": [
        {
            "ioc_value": "283cfc119905c3e5db6fb6746aa4000cab290013157cbe61cfe6dfb650e19548",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-30 23:55:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840489": [
        {
            "ioc_value": "e3a0ae83bfa4900c0219f0bf13a233904dfa17ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-30 23:55:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840490": [
        {
            "ioc_value": "b818f530a0a9a6247f9943fe3eb32bf3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-30 23:55:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840484": [
        {
            "ioc_value": "94da43172f8eb345594617df0937f4fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840485": [
        {
            "ioc_value": "c32590372184842001ba5ae8f4f569352a1b65ece5ec31e4974b717b821362b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-30 23:55:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840486": [
        {
            "ioc_value": "1c05f7f522ab4e14be373af79877d6e606af308e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-30 23:55:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840487": [
        {
            "ioc_value": "bde92ec067ba1011d451ae676aa2bcca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-30 23:55:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840482": [
        {
            "ioc_value": "2271d88227772b5b7f34958e611b74397fac5ee8c77e48aa2068fff2e1a69a0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840483": [
        {
            "ioc_value": "f6fb419f0d2138554d2127d9d0693fe0885c4fc0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840478": [
        {
            "ioc_value": "8d5944e69ec9d5578cc17348f5eb97e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840479": [
        {
            "ioc_value": "4d7800a3be568df4c44d375e24434b000e724f689af92ccfedadf9986138b601",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840480": [
        {
            "ioc_value": "8b0b5193d5a5ce5b6933275800c6e8d598276a52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840481": [
        {
            "ioc_value": "f1275a25ae3f83f91099e280a52da8be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840475": [
        {
            "ioc_value": "3db3678944d709bc08530b411c83ed5e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840476": [
        {
            "ioc_value": "5e1bc0c513824834b48ccd088bf1b9e112a0c650f930fe042a582f6aab1ab421",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840477": [
        {
            "ioc_value": "d7134364bc57683ada0e4e8c07abe71db61a673b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840471": [
        {
            "ioc_value": "a15b217f03c05e56026971ca47f373108f0aa6b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840472": [
        {
            "ioc_value": "5baca90a1f5e596203c47a01f7a219bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840473": [
        {
            "ioc_value": "7d1f7c47c75e49e0aa4f759acc4fca6857df7e0415dfec7daab69ef4623bf951",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840474": [
        {
            "ioc_value": "41aec045d5eb465aa999b076698b3b9c352f952f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840468": [
        {
            "ioc_value": "520b7408c605636e4906d83850a5f7d24befa69f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.easystealer",
            "malware_alias": null,
            "malware_printable": "Easy Stealer",
            "first_seen_utc": "2026-06-30 23:55:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840469": [
        {
            "ioc_value": "3f0352cbeaaec5e6bb9cad551a9b7007",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.easystealer",
            "malware_alias": null,
            "malware_printable": "Easy Stealer",
            "first_seen_utc": "2026-06-30 23:55:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840470": [
        {
            "ioc_value": "2a9694c32d34d59d624b20b53cadf053220630cc628626c5e323d22a079f9e1f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840465": [
        {
            "ioc_value": "85255f5f6eb8f9c061173d3347b0f6f43f6159b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xoriumstealer",
            "malware_alias": null,
            "malware_printable": "XoriumStealer",
            "first_seen_utc": "2026-06-30 23:55:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840466": [
        {
            "ioc_value": "86eef43c56ef3a426f5e282c2f2afbf8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xoriumstealer",
            "malware_alias": null,
            "malware_printable": "XoriumStealer",
            "first_seen_utc": "2026-06-30 23:55:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840467": [
        {
            "ioc_value": "7d2370b8831dd07db1346424e487534db6079ffc9472a4a1710f8b9fcd78c182",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.easystealer",
            "malware_alias": null,
            "malware_printable": "Easy Stealer",
            "first_seen_utc": "2026-06-30 23:55:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840461": [
        {
            "ioc_value": "51c6b54a5b498e78765d8a95c065ede84380ec1f0438462baefb82b7e3967bbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.voltstealer",
            "malware_alias": null,
            "malware_printable": "VoltStealer",
            "first_seen_utc": "2026-06-30 23:55:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840462": [
        {
            "ioc_value": "e9ff8c25cefa6e137606f64cfdc2a4637b834ce9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.voltstealer",
            "malware_alias": null,
            "malware_printable": "VoltStealer",
            "first_seen_utc": "2026-06-30 23:55:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840463": [
        {
            "ioc_value": "958f3ce99157d6e0c1396d30f4d82e38",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.voltstealer",
            "malware_alias": null,
            "malware_printable": "VoltStealer",
            "first_seen_utc": "2026-06-30 23:55:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840464": [
        {
            "ioc_value": "67643a051e8cda3cddb10e20281dd42961ea4fe754c316201670446748819718",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xoriumstealer",
            "malware_alias": null,
            "malware_printable": "XoriumStealer",
            "first_seen_utc": "2026-06-30 23:55:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840458": [
        {
            "ioc_value": "65550f6d0ffec8421f703cdc7273d9c0563b3d480fe6702bad294a18afe72143",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.metaencryptor",
            "malware_alias": null,
            "malware_printable": "Metaencryptor",
            "first_seen_utc": "2026-06-30 23:55:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840459": [
        {
            "ioc_value": "c8f4474d91fe1a957887a51f212a8fd0d158c282",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.metaencryptor",
            "malware_alias": null,
            "malware_printable": "Metaencryptor",
            "first_seen_utc": "2026-06-30 23:55:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840460": [
        {
            "ioc_value": "6f8647bbb9fb933a367abf32a6c6821d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.metaencryptor",
            "malware_alias": null,
            "malware_printable": "Metaencryptor",
            "first_seen_utc": "2026-06-30 23:55:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840455": [
        {
            "ioc_value": "49a58699c0421dc0f5769ec37936b3ae01b7dd5e715a7075e5e39ea78715120e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-30 23:55:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840456": [
        {
            "ioc_value": "05491d34e27818fd94c1baf2c3d630600adaee10",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-30 23:55:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840457": [
        {
            "ioc_value": "c9be244f13bff51377899f5f50ad7db8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-30 23:55:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840452": [
        {
            "ioc_value": "a9eb130cb57881807b7ef072265af0f6ec84e73c728f11ecce8cc01a7b6a1567",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 23:55:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840453": [
        {
            "ioc_value": "4046c6f6becde038870874c2eb82964e730e13f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 23:55:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840454": [
        {
            "ioc_value": "e009d13962fd200cf6259ac69ca86a40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 23:55:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840449": [
        {
            "ioc_value": "13ba8af75fb5088dc269b4a5ee3dcafc8dd397775a1258643eb350871851c1dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-30 23:55:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840450": [
        {
            "ioc_value": "4223d1a6799967223cf737539863d15dabd7efaa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-30 23:55:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840451": [
        {
            "ioc_value": "4a179cad39a87c82efa611adaa33c40b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-30 23:55:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840446": [
        {
            "ioc_value": "c3635ad319d02c61c07dd3095b4998cf81c6d1e361284fcb67d00fe8b01d1e38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-30 23:55:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840447": [
        {
            "ioc_value": "42cd95b4bd1f9aedfbf2d5f827a053dc9ed7a49f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-30 23:55:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840448": [
        {
            "ioc_value": "55a77ff1a1fca2d0a2bbf1c5b6d9b6db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-30 23:55:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840443": [
        {
            "ioc_value": "dec98a1ef5d1d1b5a6aa886345de1ac4adcea5829509e375b7cf87b7a22fb91d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.supper",
            "malware_alias": "SocksShell,ZAPCAT",
            "malware_printable": "Supper",
            "first_seen_utc": "2026-06-30 23:55:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840444": [
        {
            "ioc_value": "6d17dca898d657f7719d2c021988471061aff173",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.supper",
            "malware_alias": "SocksShell,ZAPCAT",
            "malware_printable": "Supper",
            "first_seen_utc": "2026-06-30 23:55:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840445": [
        {
            "ioc_value": "caf61d5d2d0449eba635f900da57c26c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.supper",
            "malware_alias": "SocksShell,ZAPCAT",
            "malware_printable": "Supper",
            "first_seen_utc": "2026-06-30 23:55:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840439": [
        {
            "ioc_value": "43f1a9accf541df4ce951ae76a058597",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840440": [
        {
            "ioc_value": "f17cb686d2371074b25d8a992014dbd75a454d06d436324001eac3f9f0ecef5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-30 23:55:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840441": [
        {
            "ioc_value": "791057f377abe9f522029fabb8eaf0837d75fe2c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-30 23:55:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840442": [
        {
            "ioc_value": "23ac423d9a6adec92d74a8c35cc153b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-30 23:55:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840436": [
        {
            "ioc_value": "2dfe7a647bfd6602e54d8803a9326207",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-30 23:55:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840437": [
        {
            "ioc_value": "5835f5b27cd6f62d186fa92210f0cae7238e2aa2e030d0f223e1d2adc7016c4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840438": [
        {
            "ioc_value": "00991fc23b055982b5064518fa7ccf2aadeb841e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 23:55:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840434": [
        {
            "ioc_value": "5550e9b063aa3dbf466593011bc7c1b6c01e54ff2ffeeaad74814a7726c35804",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-30 23:55:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840435": [
        {
            "ioc_value": "d8d4de8f8a3a4ed9bc97d1423134ec13112bbfaa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-30 23:55:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840432": [
        {
            "ioc_value": "107.173.42.123:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 23:45:49",
            "last_seen_utc": "2026-08-15 22:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840431": [
        {
            "ioc_value": "cdn.soft-update.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 23:45:40",
            "last_seen_utc": "2026-08-15 22:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840426": [
        {
            "ioc_value": "zi6uvzi9.btyek.beauty",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 22:10:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840406": [
        {
            "ioc_value": "0oj9pa7x.1xbetlogin.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 21:33:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840403": [
        {
            "ioc_value": "c28vzpro.bet808.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 21:27:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840399": [
        {
            "ioc_value": "superwebprotection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 20:39:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840398": [
        {
            "ioc_value": "exclusivecloudprotection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 20:38:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840397": [
        {
            "ioc_value": "extrafireprotection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 20:38:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840395": [
        {
            "ioc_value": "zaserz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 20:35:07",
            "last_seen_utc": "2026-07-02 08:17:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840394": [
        {
            "ioc_value": "cess.digishart.news",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 20:16:31",
            "last_seen_utc": "2026-06-30 23:31:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840392": [
        {
            "ioc_value": "vxg18bmc.btyek.baby",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 20:08:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840371": [
        {
            "ioc_value": "206.189.94.70:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-30 20:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840388": [
        {
            "ioc_value": "91.92.43.194:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:46:09",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840389": [
        {
            "ioc_value": "91.92.43.195:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:46:09",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840390": [
        {
            "ioc_value": "91.92.43.196:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:46:09",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840387": [
        {
            "ioc_value": "91.92.43.193:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:46:08",
            "last_seen_utc": "2026-09-01 02:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840386": [
        {
            "ioc_value": "89.125.153.29:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:46:05",
            "last_seen_utc": "2026-08-27 18:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840384": [
        {
            "ioc_value": "82.25.63.124:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:45:59",
            "last_seen_utc": "2026-07-31 08:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840385": [
        {
            "ioc_value": "82.25.63.130:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:45:59",
            "last_seen_utc": "2026-07-31 18:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840383": [
        {
            "ioc_value": "23.27.201.213:9898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-30 19:45:16",
            "last_seen_utc": "2026-08-02 18:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840381": [
        {
            "ioc_value": "199.217.99.189:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:44:27",
            "last_seen_utc": "2026-08-03 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840382": [
        {
            "ioc_value": "199.91.220.216:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:44:27",
            "last_seen_utc": "2026-08-02 18:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840380": [
        {
            "ioc_value": "193.58.122.50:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 19:44:22",
            "last_seen_utc": "2026-08-18 18:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840379": [
        {
            "ioc_value": "193.24.123.25:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:44:21",
            "last_seen_utc": "2026-09-01 02:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840378": [
        {
            "ioc_value": "185.45.193.84:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:44:14",
            "last_seen_utc": "2026-08-14 18:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840375": [
        {
            "ioc_value": "138.124.240.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840376": [
        {
            "ioc_value": "138.124.240.76:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840377": [
        {
            "ioc_value": "138.124.240.77:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.tsundere",
            "malware_alias": "DinDoor",
            "malware_printable": "Tsundere",
            "first_seen_utc": "2026-06-30 19:43:26",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DinDoor,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840374": [
        {
            "ioc_value": "128.90.112.175:7203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-30 19:43:22",
            "last_seen_utc": "2026-07-31 08:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840372": [
        {
            "ioc_value": "107.172.22.3:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-30 19:43:15",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840373": [
        {
            "ioc_value": "107.172.255.49:62721",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-30 19:43:15",
            "last_seen_utc": "2026-07-31 08:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840337": [
        {
            "ioc_value": "https://dows.sabad724.bio/95460196-1102-499d-9e6e-cd30b5a0cd4f/pf.ch",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 18:48:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/05309ac80a2b5ed3579b36a831963e674a598365fc119a9094952df0b7e37c00",
            "tags": "ClearFake,ClickFix,jsDelivr,rundll32,WebDAV",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1840338": [
        {
            "ioc_value": "05309ac80a2b5ed3579b36a831963e674a598365fc119a9094952df0b7e37c00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 18:48:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/05309ac80a2b5ed3579b36a831963e674a598365fc119a9094952df0b7e37c00",
            "tags": "ClearFake,ClickFix,jsDelivr,rundll32,WebDAV",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1840339": [
        {
            "ioc_value": "29fcf145fb2958e113b59fc50d0a54f8ca26b10fe22ec96f2222b6d560d17f0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 18:48:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/05309ac80a2b5ed3579b36a831963e674a598365fc119a9094952df0b7e37c00",
            "tags": "ClearFake,ClickFix,jsDelivr,rundll32,WebDAV",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1840366": [
        {
            "ioc_value": "chatgpt-backup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 18:48:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840365": [
        {
            "ioc_value": "http://124.29.224.65:60281/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-30 18:48:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.224.65",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840367": [
        {
            "ioc_value": "idverification-cdn.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 18:48:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "flomo",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840368": [
        {
            "ioc_value": "devltd.us",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 18:48:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "flomo",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840359": [
        {
            "ioc_value": "fpqatzfu.btyek.autos",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 18:07:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840357": [
        {
            "ioc_value": "89.110.90.71:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-30 17:45:50",
            "last_seen_utc": "2026-09-01 02:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840356": [
        {
            "ioc_value": "83.136.210.50:7077",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-30 17:45:46",
            "last_seen_utc": "2026-07-31 08:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840354": [
        {
            "ioc_value": "5.8.19.157:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:45:33",
            "last_seen_utc": "2026-07-31 08:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840355": [
        {
            "ioc_value": "5.8.19.158:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:45:33",
            "last_seen_utc": "2026-07-31 08:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840353": [
        {
            "ioc_value": "45.74.7.172:1488",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:45:21",
            "last_seen_utc": "2026-08-14 08:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840352": [
        {
            "ioc_value": "41.216.189.153:2096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-30 17:45:13",
            "last_seen_utc": "2026-08-19 18:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840351": [
        {
            "ioc_value": "2.26.1.177:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-30 17:44:15",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840349": [
        {
            "ioc_value": "185.115.164.60:64224",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:43:56",
            "last_seen_utc": "2026-07-31 08:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840350": [
        {
            "ioc_value": "185.117.90.47:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-30 17:43:56",
            "last_seen_utc": "2026-08-29 18:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840348": [
        {
            "ioc_value": "173.249.41.192:773",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:43:47",
            "last_seen_utc": "2026-08-13 08:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840347": [
        {
            "ioc_value": "172.94.18.103:69",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-30 17:43:45",
            "last_seen_utc": "2026-09-01 02:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840346": [
        {
            "ioc_value": "147.182.176.38:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-30 17:43:27",
            "last_seen_utc": "2026-08-08 08:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840345": [
        {
            "ioc_value": "107.172.90.117:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-30 17:43:13",
            "last_seen_utc": "2026-07-31 08:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840344": [
        {
            "ioc_value": "107.172.238.14:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:43:12",
            "last_seen_utc": "2026-07-31 08:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840341": [
        {
            "ioc_value": "103.11.41.20:10651",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:43:07",
            "last_seen_utc": "2026-07-31 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840342": [
        {
            "ioc_value": "103.11.41.20:51997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:43:07",
            "last_seen_utc": "2026-07-31 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840343": [
        {
            "ioc_value": "103.11.41.20:55721",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 17:43:07",
            "last_seen_utc": "2026-07-31 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840340": [
        {
            "ioc_value": "102.220.160.222:2500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-30 17:43:03",
            "last_seen_utc": "2026-08-04 08:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840335": [
        {
            "ioc_value": "https://lot.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 17:25:50",
            "last_seen_utc": "2026-07-01 07:26:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840336": [
        {
            "ioc_value": "lot.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 17:25:50",
            "last_seen_utc": "2026-07-01 07:26:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840334": [
        {
            "ioc_value": "lot.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 17:25:38",
            "last_seen_utc": "2026-07-01 07:25:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840333": [
        {
            "ioc_value": "https://lot.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 17:25:37",
            "last_seen_utc": "2026-07-01 07:25:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840332": [
        {
            "ioc_value": "http://1printers.com:4959",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-30 17:25:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13ba8af75fb5088dc269b4a5ee3dcafc8dd397775a1258643eb350871851c1dc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840315": [
        {
            "ioc_value": "https://mebanebols.trade/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 16:40:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mebanebols.trade",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840317": [
        {
            "ioc_value": "https://t.me/af97ri",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 16:40:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "b686353b7cd87ef4315b344a17caa3cc,ClickFix,psgiran,Vidar,we",
            "anonymous": 0,
            "reporter": "trustinveritas"
        }
    ],
    "1840318": [
        {
            "ioc_value": "grabbrunch.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 16:40:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "b686353b7cd87ef4315b344a17caa3cc,ClickFix,psgiran,Vidar,we",
            "anonymous": 0,
            "reporter": "trustinveritas"
        }
    ],
    "1840319": [
        {
            "ioc_value": "http://86.107.168.126/verification.vrf",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 16:40:25",
            "last_seen_utc": "2026-07-16 13:26:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": "b686353b7cd87ef4315b344a17caa3cc,ClickFix,psgiran,Vidar,we",
            "anonymous": 0,
            "reporter": "trustinveritas"
        }
    ],
    "1840320": [
        {
            "ioc_value": "86.107.168.126:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 16:40:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "b686353b7cd87ef4315b344a17caa3cc,ClickFix,psgiran,Vidar,we",
            "anonymous": 0,
            "reporter": "trustinveritas"
        }
    ],
    "1840321": [
        {
            "ioc_value": "267f2c6578ec3efa95af78d36493219b5b7d1d9801e9f7ebc0559298e173e091",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 16:40:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "b686353b7cd87ef4315b344a17caa3cc,ClickFix,psgiran,Vidar,we",
            "anonymous": 0,
            "reporter": "trustinveritas"
        }
    ],
    "1840322": [
        {
            "ioc_value": "4b9466b03553cbaf4b67efd3ef100a8f198c2463bf26ae5bf825dfd7a6742984",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-30 16:40:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "b686353b7cd87ef4315b344a17caa3cc,ClickFix,psgiran,Vidar,we",
            "anonymous": 0,
            "reporter": "trustinveritas"
        }
    ],
    "1840328": [
        {
            "ioc_value": "1ozso11s.blackjackonlineplay83.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 16:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840327": [
        {
            "ioc_value": "35iozqs1.bet1bonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 16:26:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840324": [
        {
            "ioc_value": "j1yidzep.boombasket.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 16:08:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840323": [
        {
            "ioc_value": "boombasket.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 16:05:10",
            "last_seen_utc": "2026-06-30 16:05:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840316": [
        {
            "ioc_value": "154.82.93.76:6296",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 15:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2271d88227772b5b7f34958e611b74397fac5ee8c77e48aa2068fff2e1a69a0f/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840300": [
        {
            "ioc_value": "lancer.shartboro.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 14:42:54",
            "last_seen_utc": "2026-06-30 19:47:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,win-0x4679,windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840297": [
        {
            "ioc_value": "wt51peii.boomball.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 14:08:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840296": [
        {
            "ioc_value": "boomball.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 14:04:34",
            "last_seen_utc": "2026-06-30 14:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840293": [
        {
            "ioc_value": "e43580fc868229155276b47518770c3d27bcf34c66020d34413be5cfd896e7a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840294": [
        {
            "ioc_value": "757b20354a901501b2d8e99294940d1256d2d9140d336aded8307d95fdf479f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840295": [
        {
            "ioc_value": "mebanebols.trade",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:41",
            "last_seen_utc": "2026-06-30 21:16:28",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840289": [
        {
            "ioc_value": "chillbazi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840290": [
        {
            "ioc_value": "tinybetkade.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840291": [
        {
            "ioc_value": "enfejarland.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840292": [
        {
            "ioc_value": "biagameskade.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 13:58:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840288": [
        {
            "ioc_value": "147.182.217.141:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-30 13:37:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840286": [
        {
            "ioc_value": "http://172.168.177.48:39138/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-30 13:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/172.168.177.48",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840285": [
        {
            "ioc_value": "http://124.11.64.11:34008/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-30 13:00:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.11.64.11",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840279": [
        {
            "ioc_value": "wk00z1ey.vip1xbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 12:05:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840278": [
        {
            "ioc_value": "115.190.149.214:58004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 11:46:50",
            "last_seen_utc": "2026-07-31 14:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840277": [
        {
            "ioc_value": "3fbkahzk.coinsgame.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 11:26:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x76c7,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840275": [
        {
            "ioc_value": "bjsiw6ik.casinoiran.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 11:25:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0xfb64,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840273": [
        {
            "ioc_value": "6oekxs4k.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 11:07:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,mac-0x68dc,macos",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840225": [
        {
            "ioc_value": "http://153.117.41.127:47793/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-30 09:56:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.41.127",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840226": [
        {
            "ioc_value": "http://110.37.35.79:33903/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-30 09:56:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.35.79",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840227": [
        {
            "ioc_value": "https://backupper.pro",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-30 09:56:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "magecart",
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840234": [
        {
            "ioc_value": "https://www.einvoicesolutions.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 09:56:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.einvoicesolutions.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840235": [
        {
            "ioc_value": "https://www.m-und-c-partners.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 09:56:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.m-und-c-partners.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840236": [
        {
            "ioc_value": "129.212.233.8:37215",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-30 09:56:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840271": [
        {
            "ioc_value": "152.32.132.177:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 09:54:11",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840270": [
        {
            "ioc_value": "39.97.246.75:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 09:54:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840269": [
        {
            "ioc_value": "179.43.190.13:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 09:54:09",
            "last_seen_utc": "2026-07-15 07:41:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840268": [
        {
            "ioc_value": "94.250.201.212:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-30 09:46:23",
            "last_seen_utc": "2026-08-07 08:46:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840267": [
        {
            "ioc_value": "198.135.54.39:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 09:44:26",
            "last_seen_utc": "2026-07-30 18:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840266": [
        {
            "ioc_value": "192.162.199.149:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-30 09:44:18",
            "last_seen_utc": "2026-08-08 08:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840265": [
        {
            "ioc_value": "170.64.130.99:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 09:43:50",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840264": [
        {
            "ioc_value": "155.103.71.115:14656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 09:43:39",
            "last_seen_utc": "2026-08-04 18:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840263": [
        {
            "ioc_value": "152.42.164.27:65531",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-30 09:43:36",
            "last_seen_utc": "2026-08-01 18:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840262": [
        {
            "ioc_value": "141.94.121.162:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-30 09:43:27",
            "last_seen_utc": "2026-09-01 02:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840261": [
        {
            "ioc_value": "136.113.49.8:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 09:43:24",
            "last_seen_utc": "2026-09-01 02:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840260": [
        {
            "ioc_value": "103.11.41.10:2120",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-30 09:43:06",
            "last_seen_utc": "2026-07-30 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840237": [
        {
            "ioc_value": "kdf.betbacklink.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 09:00:49",
            "last_seen_utc": "2026-07-04 04:40:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840224": [
        {
            "ioc_value": "i5sofk6r.xbetone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 06:04:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840204": [
        {
            "ioc_value": "ce29b8c2576712a33aae06aee02486440c9268fcc19da1496a074feeee0a5178",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 05:54:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840203": [
        {
            "ioc_value": "130.12.182.95:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-30 05:05:05",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839848": [
        {
            "ioc_value": "php-panel.letsgoautomotive.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-30 04:50:38",
            "last_seen_utc": "2026-07-06 14:39:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1839852": [
        {
            "ioc_value": "http://31.56.48.179:666/w",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:38",
            "last_seen_utc": "2026-06-29 16:03:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/scattershell-teampcp-v21",
            "tags": "container-escape,credential-harvest,cryptojacking,cve-2026-31431,docker,teampcp,teamtnt",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1839853": [
        {
            "ioc_value": "http://31.56.48.179:666/.real_mnd",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:37",
            "last_seen_utc": "2026-06-29 16:03:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/scattershell-teampcp-v21",
            "tags": "container-escape,credential-harvest,cryptojacking,cve-2026-31431,docker,teampcp,teamtnt",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1839854": [
        {
            "ioc_value": "http://31.56.48.179:666/.mconf",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:36",
            "last_seen_utc": "2026-06-29 16:03:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/scattershell-teampcp-v21",
            "tags": "container-escape,credential-harvest,cryptojacking,cve-2026-31431,docker,teampcp,teamtnt",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1839856": [
        {
            "ioc_value": "27cc6cf232ba7ed8dc92dcb0795bdb7185197928ec3061a8d6de097f9efc5440",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/scattershell-teampcp-v21",
            "tags": "container-escape,credential-harvest,cryptojacking,cve-2026-31431,docker,teampcp,teamtnt",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1839892": [
        {
            "ioc_value": "fee27090c90ed20350a65616c658f158bef9443ada21279c11cc9dbd125d363e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.bumblebee",
            "malware_alias": "COLDTRAIN,SHELLSTING,Shindig",
            "malware_printable": "BumbleBee",
            "first_seen_utc": "2026-06-30 04:50:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839855": [
        {
            "ioc_value": "0f63bea320d768fb12bb53a287f210b8b9ccec563ac66dc80b7967628e455566",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:34",
            "last_seen_utc": "2026-07-15 10:54:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/scattershell-teampcp-v21",
            "tags": "container-escape,credential-harvest,cryptojacking,cve-2026-31431,docker,teampcp,teamtnt",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1839891": [
        {
            "ioc_value": "dff350f69d90cf8e6055054475b0c892b77610c734111c381dfbad8bb72b2b3d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.bumblebee",
            "malware_alias": "COLDTRAIN,SHELLSTING,Shindig",
            "malware_printable": "BumbleBee",
            "first_seen_utc": "2026-06-30 04:50:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839894": [
        {
            "ioc_value": "172.86.123.37:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1839893": [
        {
            "ioc_value": "7c71f81b6e981eb71d442a7e26df9ebf199665e5460da3b35b43496b380840a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.bumblebee",
            "malware_alias": "COLDTRAIN,SHELLSTING,Shindig",
            "malware_printable": "BumbleBee",
            "first_seen_utc": "2026-06-30 04:50:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839895": [
        {
            "ioc_value": "172.86.123.37:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1839896": [
        {
            "ioc_value": "code-beautify.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1839897": [
        {
            "ioc_value": "ipregionchecker.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1839898": [
        {
            "ioc_value": "74009ad71c2f41ebfe6b76358f0224f814f8dca1167a858538b5e8df8a76b881",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1839900": [
        {
            "ioc_value": "017cb09cabd9c909e4fb06e8c668d2f89e472e103eda5230d98761a9f998bdb5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1839899": [
        {
            "ioc_value": "0e1ae44c555c13b03bdbd72f66c456aaffcdd13887ebe9859d302a63e409c462",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.beavertail",
            "malware_alias": null,
            "malware_printable": "BeaverTail",
            "first_seen_utc": "2026-06-30 04:50:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "BeaverTail,chainvisitalabs,ContagiousInterview,DPRK",
            "anonymous": 0,
            "reporter": "fedfranz"
        }
    ],
    "1840070": [
        {
            "ioc_value": "https://isabeladandaro.com.br/diagnostico-de-honorarios-convite/?src=Org_Site&utm_source=Org&utm_medium=Site&utm_content=&utm_campaign=&utm_term=",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/isabeladandaro.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840071": [
        {
            "ioc_value": "https://www.ibogainerapiddetox.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.ibogainerapiddetox.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840077": [
        {
            "ioc_value": "cleardig477.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-30 04:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/3e1f08ea-8329-4469-8f06-8088b5c67c7b",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1840079": [
        {
            "ioc_value": "superfirewallprotection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-30 04:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/5c762349-e152-4fde-82d1-60b62d0f0e48",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1840080": [
        {
            "ioc_value": "moderncloudprotection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-30 04:50:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/5c762349-e152-4fde-82d1-60b62d0f0e48",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1840081": [
        {
            "ioc_value": "publicwebprotection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-30 04:50:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/5c762349-e152-4fde-82d1-60b62d0f0e48",
            "tags": "clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1840146": [
        {
            "ioc_value": "https://eb0ca005.verifying-your-identity-proceedv1.pages.dev/?x=j7b5cr22&y=1782755817438&z=425693",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 04:50:17",
            "last_seen_utc": "2026-06-30 06:31:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840161": [
        {
            "ioc_value": "178.128.253.253:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:16",
            "last_seen_utc": "2026-07-03 10:16:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840162": [
        {
            "ioc_value": "157.245.65.67:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:16",
            "last_seen_utc": "2026-07-03 10:15:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840163": [
        {
            "ioc_value": "159.223.5.30:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:15",
            "last_seen_utc": "2026-07-03 10:16:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840164": [
        {
            "ioc_value": "206.189.7.4:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:15",
            "last_seen_utc": "2026-07-03 10:16:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840165": [
        {
            "ioc_value": "167.71.7.92:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:15",
            "last_seen_utc": "2026-07-03 10:15:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840166": [
        {
            "ioc_value": "178.128.243.177:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:14",
            "last_seen_utc": "2026-07-03 10:17:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840167": [
        {
            "ioc_value": "188.166.24.139:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:14",
            "last_seen_utc": "2026-07-03 10:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840169": [
        {
            "ioc_value": "206.189.101.38:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:13",
            "last_seen_utc": "2026-07-03 10:16:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840168": [
        {
            "ioc_value": "152.42.129.15:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:11",
            "last_seen_utc": "2026-07-03 10:18:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840170": [
        {
            "ioc_value": "209.38.35.163:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-30 04:50:10",
            "last_seen_utc": "2026-07-03 10:17:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1840186": [
        {
            "ioc_value": "https://scanbot.me/scanbot.sh",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.sshdoor",
            "malware_alias": null,
            "malware_printable": "SSHDoor",
            "first_seen_utc": "2026-06-30 04:50:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "ClearlyNotB"
        }
    ],
    "1840173": [
        {
            "ioc_value": "https://ottixpimobiliaria.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ottixpimobiliaria.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840180": [
        {
            "ioc_value": "cloud.api-middle-connect.com",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-30 04:50:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Localhost123"
        }
    ],
    "1840182": [
        {
            "ioc_value": "https://patrickfarrellbooks.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/patrickfarrellbooks.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840183": [
        {
            "ioc_value": "https://portalpsicosocial.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/portalpsicosocial.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840188": [
        {
            "ioc_value": "http://94.154.43.5/mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-30 04:50:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/94.154.43.5",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840189": [
        {
            "ioc_value": "a5b42be0041bff5a4e521412014c2e7029ff08df7e9746fb4d923d40cee0e7d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-30 04:50:01",
            "last_seen_utc": "2026-08-25 00:20:28",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/94.154.43.5",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1840190": [
        {
            "ioc_value": "https://romayahomes.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:50:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/romayahomes.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840194": [
        {
            "ioc_value": "162.243.103.246:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-30 04:49:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1059_003,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1840195": [
        {
            "ioc_value": "https://seniorcitizenjournal.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:49:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/seniorcitizenjournal.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840196": [
        {
            "ioc_value": "https://leinstermetalrecycling.ie/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:49:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/leinstermetalrecycling.ie",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840198": [
        {
            "ioc_value": "https://itsrealmedia.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-30 04:49:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/itsrealmedia.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1840197": [
        {
            "ioc_value": "46imdg6k.blackjackonlineplay83.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 02:03:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840192": [
        {
            "ioc_value": "328bpzpg.313betapk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 01:02:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840191": [
        {
            "ioc_value": "http://149.30.222.4/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-30 00:40:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840187": [
        {
            "ioc_value": "uhv95fx8.betbuf.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-30 00:01:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1840185": [
        {
            "ioc_value": "150.109.186.36:64401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 23:46:01",
            "last_seen_utc": "2026-07-31 10:47:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840184": [
        {
            "ioc_value": "47.243.127.117:889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 23:05:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a81dd7a5c94f3f82fe489a5e9ccb5e8618f22d3846d1d74388e88e399a8de2e7/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840181": [
        {
            "ioc_value": "47.243.127.117:887",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 22:55:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840178": [
        {
            "ioc_value": "0dahrppq.taktikbet.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 22:01:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840160": [
        {
            "ioc_value": "http://176.65.144.73/312b423bf6dd463f8d15.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-29 20:20:32",
            "last_seen_utc": "2026-07-02 02:27:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/25572b53676f1041dfec6ddd3ac1b47c5db8c384c98aac6238c463ada08ad523/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840159": [
        {
            "ioc_value": "158.160.75.185:40644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-29 20:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840157": [
        {
            "ioc_value": "45.141.27.68:4959",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-29 19:50:54",
            "last_seen_utc": "2026-07-23 13:31:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64f5d668ffdd18dc9dac0da41d409727b2521d920266f79b914483c9d3a76972/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840156": [
        {
            "ioc_value": "http://miedorama.com:4959",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-29 19:50:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64f5d668ffdd18dc9dac0da41d409727b2521d920266f79b914483c9d3a76972/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840155": [
        {
            "ioc_value": "72.60.121.225:7838",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-29 19:50:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64f5d668ffdd18dc9dac0da41d409727b2521d920266f79b914483c9d3a76972/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840154": [
        {
            "ioc_value": "http://angect.xyz:7838",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-29 19:50:50",
            "last_seen_utc": "2026-08-03 08:52:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64f5d668ffdd18dc9dac0da41d409727b2521d920266f79b914483c9d3a76972/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840153": [
        {
            "ioc_value": "81.90.31.253:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-29 19:45:30",
            "last_seen_utc": "2026-08-26 18:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840152": [
        {
            "ioc_value": "193.169.194.63:32333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-29 19:44:01",
            "last_seen_utc": "2026-07-31 08:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840151": [
        {
            "ioc_value": "185.115.164.60:9486",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 19:43:50",
            "last_seen_utc": "2026-07-30 08:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840150": [
        {
            "ioc_value": "155.138.218.137:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 19:43:30",
            "last_seen_utc": "2026-07-30 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840149": [
        {
            "ioc_value": "128.90.141.238:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-29 19:43:17",
            "last_seen_utc": "2026-07-30 08:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840148": [
        {
            "ioc_value": "128.90.112.249:5202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-29 19:43:16",
            "last_seen_utc": "2026-08-07 18:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840147": [
        {
            "ioc_value": "103.11.41.10:52046",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 19:43:05",
            "last_seen_utc": "2026-07-30 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840145": [
        {
            "ioc_value": "a8480f1bd4fc75a68930f3c60df63955",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840142": [
        {
            "ioc_value": "63844cd3d2578789f0e5ca58cfddf9d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840143": [
        {
            "ioc_value": "ffe98374173d7c2084a1a6953b308c13a8b9493294af831c23542b0d88654036",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840144": [
        {
            "ioc_value": "ce609cfde7d81bc7311a83e0f008a2f756912ea9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840139": [
        {
            "ioc_value": "1ccf41cfd9d85a0e6c49854e25d76ab5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-29 19:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840140": [
        {
            "ioc_value": "d6ca3c85df784f0b7751f67bc0b23f44f173b7be7f6344d02f26c8e28e0abad8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840141": [
        {
            "ioc_value": "ab84b6726d46e9cdc1349d2c8cfb9777dac57101",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840136": [
        {
            "ioc_value": "04f340ede96f607f310a9ca67370a5e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840137": [
        {
            "ioc_value": "3f076a3e4a0733c630d58f790dc8b6422c5ee6344695f88987b14a060d721d4f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-29 19:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840138": [
        {
            "ioc_value": "f2a03400898271b8fb6310151c56edf1120b736c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-29 19:10:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840133": [
        {
            "ioc_value": "d11ea15f2c690f46bfc282f300f692c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840134": [
        {
            "ioc_value": "1d805377c6dc2c4321897789d82add4d2e83e947c5fe2a182061484db840d7bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840135": [
        {
            "ioc_value": "e7feba95e7553a8d070623a279def1fabebe1ca8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840129": [
        {
            "ioc_value": "b6c0e1b9da3c8f21bffbe878f58f3513848f3748",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840130": [
        {
            "ioc_value": "5fea3f930de097794a95ced9dbae500c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840131": [
        {
            "ioc_value": "cfa1674a075c651c7bf0278f5fffc2ed2d268f4317eb41faf1d1eb03c14bdb04",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840132": [
        {
            "ioc_value": "999dbc13a581e26dd6e2931db152b01087d13c92",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840126": [
        {
            "ioc_value": "1a46239db708d9eb82152b45392433be8f182b22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840127": [
        {
            "ioc_value": "1615ac4b69265a70f17a0eb37df82065",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840128": [
        {
            "ioc_value": "af154a4bb20730e0d8f7e88179b1797d8e67b23302ee2a0fa152dbd23a39a9dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840123": [
        {
            "ioc_value": "2f299b8f3839e4259a27f4b1d8af0d2473cfe7e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840124": [
        {
            "ioc_value": "1e3fd12fee9d2fd27642ed24cff01338",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840125": [
        {
            "ioc_value": "604a502f34aa28773356a131d2ce537866cdd973e464a7144b0d626fd65f5937",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 19:10:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840119": [
        {
            "ioc_value": "f59b521321526c8e255c6e5a9ed71d063349cab55a4a0b7207c6aa0039fb32be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-29 19:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840120": [
        {
            "ioc_value": "58be67baa9a3323e8f0554ff45147668d5abf8ba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-29 19:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840121": [
        {
            "ioc_value": "5563f909b93845410a8014ddffa5adf6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-29 19:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840122": [
        {
            "ioc_value": "a834cec6b236453ee671c23326b60763880a47c93ccc595d6e566ec5f81ade88",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840116": [
        {
            "ioc_value": "9977df7ffd04173d38e0aefe3d028052e164aaa69c1facfe63af55b473dd9e24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-29 19:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840117": [
        {
            "ioc_value": "1ceb390d2b85599cc738bfadcdddceaa01083940",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-29 19:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840118": [
        {
            "ioc_value": "7f79817eb5e3579ce8957a42c31c65fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-29 19:10:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840113": [
        {
            "ioc_value": "1086e2ec8e9274e1639f14084f27d3b47e606c37ccc2a1e4976db6633ef797d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840114": [
        {
            "ioc_value": "5bc1696dec9c0d82be4ff8910a7ae7c217e9e40e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840115": [
        {
            "ioc_value": "2f61cb4b14e0cf839a4a823eceea88e9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840109": [
        {
            "ioc_value": "b1341da78ca16f4d04cb56d05c63a821",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 19:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840110": [
        {
            "ioc_value": "31c37ff61aa322192236c9672f09e3d97b6e6e09c5019077df7d0567d4c0b48b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840111": [
        {
            "ioc_value": "33e85ae9412fa870e5d6de31502e7d48c64ce224",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840112": [
        {
            "ioc_value": "744e1221f6467d0b7e73a10f52e6cd6c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 19:10:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840106": [
        {
            "ioc_value": "14b7d8e98b8cd97f8f302bab2b4dea27",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 19:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840107": [
        {
            "ioc_value": "0911748a95f6a362d1ed8d6fcd1a7889167520cdd506522658d84a69c9a088ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 19:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840108": [
        {
            "ioc_value": "2a43e2b7dea9979a803c300b5b9638f5d4ae2f64",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 19:10:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840103": [
        {
            "ioc_value": "91ca6805aabe73cabd12644fccf91ec5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840104": [
        {
            "ioc_value": "83a2d5361b91b0ac26ff7c5f161dd3008de6922c5df7f8c0af80b1dea105480d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 19:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840105": [
        {
            "ioc_value": "af09bf91db9bb8dfaa56f1d2e3d4fab97e6fdf72",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 19:10:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840100": [
        {
            "ioc_value": "4db7b73a3650b98b99aa282bf1e16cc1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-29 19:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840101": [
        {
            "ioc_value": "ab168b5a63520e7cabe5d2d3917e1b9b1b388db0b3f27354bc7cd075e63cc7dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840102": [
        {
            "ioc_value": "a29d766799b35f8c9a4fbc3950295aedc17c7e9a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 19:10:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840098": [
        {
            "ioc_value": "16aa5e9cd33302fb4bba5f5fe61b9dcef4e6e1a777098985eca17e5a6f075234",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-29 19:10:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840099": [
        {
            "ioc_value": "3f762a0e0d991b182032fcf13cb94c75a61fe47b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-29 19:10:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1840094": [
        {
            "ioc_value": "104.251.181.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-29 19:05:06",
            "last_seen_utc": "2026-08-15 18:43:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840092": [
        {
            "ioc_value": "r32rtlhu.1xbetpartnersiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 19:00:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840091": [
        {
            "ioc_value": "pageimagebook.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-29 18:56:42",
            "last_seen_utc": "2026-07-27 08:42:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840090": [
        {
            "ioc_value": "81.177.49.127:24378",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-29 18:45:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840089": [
        {
            "ioc_value": "134.122.128.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 18:45:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840088": [
        {
            "ioc_value": "217.60.195.56:5201",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ave_maria",
            "malware_alias": "AVE_MARIA,AveMariaRAT,Warzone RAT,WarzoneRAT,avemaria",
            "malware_printable": "Ave Maria",
            "first_seen_utc": "2026-06-29 18:45:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AveMariaRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840087": [
        {
            "ioc_value": "191.101.51.10:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 18:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840086": [
        {
            "ioc_value": "3.127.181.115:19587",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 18:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840085": [
        {
            "ioc_value": "155.117.183.181:2017",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 18:45:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1840084": [
        {
            "ioc_value": "moderncloudprotection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 18:33:31",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840083": [
        {
            "ioc_value": "publicwebprotection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 18:33:30",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840082": [
        {
            "ioc_value": "superfirewallprotection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 18:33:29",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840078": [
        {
            "ioc_value": "r4zhwkgz.betbuf.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 18:01:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840069": [
        {
            "ioc_value": "193.233.82.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840068": [
        {
            "ioc_value": "zenithharbinger.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840067": [
        {
            "ioc_value": "radiantprospera.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840066": [
        {
            "ioc_value": "latticepatronage.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840065": [
        {
            "ioc_value": "covenantventure.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840064": [
        {
            "ioc_value": "apexharvestor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840063": [
        {
            "ioc_value": "momentumbloomera.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840062": [
        {
            "ioc_value": "vectorprospera.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840061": [
        {
            "ioc_value": "nexuspatronage.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840060": [
        {
            "ioc_value": "quantumharbinger.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840059": [
        {
            "ioc_value": "paragonbloomera.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840058": [
        {
            "ioc_value": "amb1ing-farm.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840057": [
        {
            "ioc_value": "borschokf2dd.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840056": [
        {
            "ioc_value": "latat-long.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840055": [
        {
            "ioc_value": "plaque5tucco.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840054": [
        {
            "ioc_value": "ebensen-timent.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840053": [
        {
            "ioc_value": "chernichco5t.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840052": [
        {
            "ioc_value": "degassing-mould.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840051": [
        {
            "ioc_value": "souf1atwindow.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840050": [
        {
            "ioc_value": "betav2ryazhsky.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840049": [
        {
            "ioc_value": "seering5outh.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840048": [
        {
            "ioc_value": "archive-shlyah.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:30:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840047": [
        {
            "ioc_value": "acce1eratpacify.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840046": [
        {
            "ioc_value": "ass-ecuadorian.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840045": [
        {
            "ioc_value": "repu1sivebrazen.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840044": [
        {
            "ioc_value": "doha-neutral.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840043": [
        {
            "ioc_value": "izyob7rickets.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840042": [
        {
            "ioc_value": "shim-windless.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840041": [
        {
            "ioc_value": "solid5lowly.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840040": [
        {
            "ioc_value": "die-reformer.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840039": [
        {
            "ioc_value": "dunkpo1ytechnic.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840038": [
        {
            "ioc_value": "ethen0shypnotist.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840037": [
        {
            "ioc_value": "peddler-wasting.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840036": [
        {
            "ioc_value": "overreactuntr2ve.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840035": [
        {
            "ioc_value": "ama1gamb1ast.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840034": [
        {
            "ioc_value": "radio-legitdown.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840033": [
        {
            "ioc_value": "encryption5hadow.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840032": [
        {
            "ioc_value": "hor1inka-lonely.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840031": [
        {
            "ioc_value": "greyhounds1uidor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840030": [
        {
            "ioc_value": "chronicle5-diachiha.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840029": [
        {
            "ioc_value": "unp2idvalk.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840028": [
        {
            "ioc_value": "estradaannivers.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840027": [
        {
            "ioc_value": "unseen-zorenka.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840026": [
        {
            "ioc_value": "carving-paral.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840025": [
        {
            "ioc_value": "exhaustoverwint.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840024": [
        {
            "ioc_value": "poles-wrinkle.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840023": [
        {
            "ioc_value": "chequecholeric.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840022": [
        {
            "ioc_value": "monotheism-sled.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840021": [
        {
            "ioc_value": "disorientbreak.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840020": [
        {
            "ioc_value": "estat-goldilock.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840019": [
        {
            "ioc_value": "after-diacritic.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840018": [
        {
            "ioc_value": "sue-intentioned.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840017": [
        {
            "ioc_value": "champag-mannered.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840016": [
        {
            "ioc_value": "limous-nitout.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840015": [
        {
            "ioc_value": "flos-strip.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840014": [
        {
            "ioc_value": "bitter-salty.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840013": [
        {
            "ioc_value": "ripples-shark.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840012": [
        {
            "ioc_value": "sniffingviableoffice.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840011": [
        {
            "ioc_value": "binary-dock.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840010": [
        {
            "ioc_value": "pashtuns-study-rose-hip.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840009": [
        {
            "ioc_value": "neural-routing.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840008": [
        {
            "ioc_value": "polestennisplayer.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840007": [
        {
            "ioc_value": "stack-forge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840006": [
        {
            "ioc_value": "animalspintroll-xerography.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840005": [
        {
            "ioc_value": "packet-lattice.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840004": [
        {
            "ioc_value": "icewounded.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840003": [
        {
            "ioc_value": "runtime-atlas.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840002": [
        {
            "ioc_value": "khudrukrantingmanic.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840001": [
        {
            "ioc_value": "bellow-norushka-pianissimo.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1840000": [
        {
            "ioc_value": "biennial-polovauniverse.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839999": [
        {
            "ioc_value": "bibliosmirk.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839998": [
        {
            "ioc_value": "steel-evar-yes-valence.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839997": [
        {
            "ioc_value": "clamshellkarakulchaalumina.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839996": [
        {
            "ioc_value": "downplaying-sevenleague.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839995": [
        {
            "ioc_value": "hundred-years-old.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839994": [
        {
            "ioc_value": "kabardinskymonasticismradicalism.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839993": [
        {
            "ioc_value": "culling-posture-schnitzel.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839992": [
        {
            "ioc_value": "signal-harbor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839991": [
        {
            "ioc_value": "kernel-lattice.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839990": [
        {
            "ioc_value": "proxy-horizon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839989": [
        {
            "ioc_value": "byte-forge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:29:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839988": [
        {
            "ioc_value": "cloud-atlas.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839987": [
        {
            "ioc_value": "script-vault.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839986": [
        {
            "ioc_value": "network-pulse.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839985": [
        {
            "ioc_value": "cyber-relay.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839984": [
        {
            "ioc_value": "node-matrix.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839983": [
        {
            "ioc_value": "logic-sphere.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839982": [
        {
            "ioc_value": "cloud-forge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839981": [
        {
            "ioc_value": "script-matrix.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839980": [
        {
            "ioc_value": "network-horizon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839979": [
        {
            "ioc_value": "cyber-lattice.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839978": [
        {
            "ioc_value": "node-pulse.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839977": [
        {
            "ioc_value": "container-vector.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839976": [
        {
            "ioc_value": "script-horizon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839975": [
        {
            "ioc_value": "cloud-sphere.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839974": [
        {
            "ioc_value": "runtime-forge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839973": [
        {
            "ioc_value": "telemetry-vault.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839972": [
        {
            "ioc_value": "microservice-pulse.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839971": [
        {
            "ioc_value": "network-harbor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839970": [
        {
            "ioc_value": "observability-matrix.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839969": [
        {
            "ioc_value": "runtime-sphere.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839968": [
        {
            "ioc_value": "packet-vector.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839967": [
        {
            "ioc_value": "signal-vault.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839966": [
        {
            "ioc_value": "network-forge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839965": [
        {
            "ioc_value": "byte-lattice.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839964": [
        {
            "ioc_value": "cyber-harbor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839963": [
        {
            "ioc_value": "logic-pulse.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839962": [
        {
            "ioc_value": "stack-matrix.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839961": [
        {
            "ioc_value": "siciliandefensetheory.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839960": [
        {
            "ioc_value": "audioattenuatorschematic.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839959": [
        {
            "ioc_value": "badabingsopranoslounge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839958": [
        {
            "ioc_value": "orbitaldockingmodule.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839957": [
        {
            "ioc_value": "crispychickencutlets.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839956": [
        {
            "ioc_value": "subfossiloakchronology.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839955": [
        {
            "ioc_value": "cyberneticprostheticlab.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839954": [
        {
            "ioc_value": "magneticlevitationtrain.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839953": [
        {
            "ioc_value": "gothiccathedralblueprint.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839952": [
        {
            "ioc_value": "deepseahydrothermalvent.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839951": [
        {
            "ioc_value": "holographicprojectiongrid.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839950": [
        {
            "ioc_value": "stratosphericweatherballoon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839949": [
        {
            "ioc_value": "renaissancefrescorestoration.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839948": [
        {
            "ioc_value": "subdermalbiometricchip.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839947": [
        {
            "ioc_value": "primordialsoupevolution.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839946": [
        {
            "ioc_value": "telemetry-orbit.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839945": [
        {
            "ioc_value": "container-beacon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839944": [
        {
            "ioc_value": "runtime-nexus.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839943": [
        {
            "ioc_value": "packet-cascade.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839942": [
        {
            "ioc_value": "kernel-vertex.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839941": [
        {
            "ioc_value": "signal-bridge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839940": [
        {
            "ioc_value": "cloud-meridian.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839939": [
        {
            "ioc_value": "proxy-frontier.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839938": [
        {
            "ioc_value": "network-foundry.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839937": [
        {
            "ioc_value": "runtime-cascade.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839936": [
        {
            "ioc_value": "packet-frontier.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839935": [
        {
            "ioc_value": "kernel-beacon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839934": [
        {
            "ioc_value": "signal-meridian.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839933": [
        {
            "ioc_value": "cloud-orbit.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839932": [
        {
            "ioc_value": "proxy-compass.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839931": [
        {
            "ioc_value": "telemetry-nexus.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839930": [
        {
            "ioc_value": "container-bridge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839929": [
        {
            "ioc_value": "proxy-orbit.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:28:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839928": [
        {
            "ioc_value": "stack-frontier.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839927": [
        {
            "ioc_value": "telemetry-sphere.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839926": [
        {
            "ioc_value": "system-forge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839925": [
        {
            "ioc_value": "stack-orbit.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839924": [
        {
            "ioc_value": "script-nexus.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839923": [
        {
            "ioc_value": "proxy-harbor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839922": [
        {
            "ioc_value": "network-vector.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839921": [
        {
            "ioc_value": "microservice-compass.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839920": [
        {
            "ioc_value": "logic-compass.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839919": [
        {
            "ioc_value": "cloud-lattice.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839918": [
        {
            "ioc_value": "byte-frontier.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839917": [
        {
            "ioc_value": "container-pulse.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839916": [
        {
            "ioc_value": "packet-orbit.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839915": [
        {
            "ioc_value": "kernel-compass.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839914": [
        {
            "ioc_value": "signal-frontier.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839913": [
        {
            "ioc_value": "cloud-beacon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839912": [
        {
            "ioc_value": "proxy-cascade.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839911": [
        {
            "ioc_value": "telemetry-harbor.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839910": [
        {
            "ioc_value": "byte-foundry.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839909": [
        {
            "ioc_value": "stack-sphere.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839908": [
        {
            "ioc_value": "script-bridge.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839907": [
        {
            "ioc_value": "system-horizon.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839906": [
        {
            "ioc_value": "elbowfrisk.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839905": [
        {
            "ioc_value": "karo7drix.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:27:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839903": [
        {
            "ioc_value": "https://bom.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 16:25:47",
            "last_seen_utc": "2026-06-29 21:25:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839904": [
        {
            "ioc_value": "bom.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 16:25:47",
            "last_seen_utc": "2026-06-29 21:25:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839901": [
        {
            "ioc_value": "https://bom.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 16:25:35",
            "last_seen_utc": "2026-06-29 21:25:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839902": [
        {
            "ioc_value": "bom.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 16:25:35",
            "last_seen_utc": "2026-06-29 21:25:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839890": [
        {
            "ioc_value": "freeshareyourimage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839889": [
        {
            "ioc_value": "freecatimages.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839888": [
        {
            "ioc_value": "placebetweenphotos.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839887": [
        {
            "ioc_value": "thedocumentsthe.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839886": [
        {
            "ioc_value": "openimagesworld.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839885": [
        {
            "ioc_value": "lovefreephotos.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839884": [
        {
            "ioc_value": "imageuploaderfree.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839883": [
        {
            "ioc_value": "e2becd3fbfd8a2bc16f517ddf3702bc03ce25718495e7e67ef8517d2d91be6f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839882": [
        {
            "ioc_value": "1a22a2b2b0118fbd8e607a1fd303e69fb61b95837372e57d508908de1a446195",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839881": [
        {
            "ioc_value": "e1f8ac8514b45b51abc91b135e4964290a8e6bb5fb4893535fce8da974a8da5b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839880": [
        {
            "ioc_value": "2b3681feecfb6e9a9f762fbf0e0421d69f6bd66f925f4d79be39cde5616256d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839879": [
        {
            "ioc_value": "65822e4396d854529e895ce37a87c11f660b0f5fd826660a97e9d62b24e57082",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839878": [
        {
            "ioc_value": "8765c89afc71a53077f2221ddf68625d971f41e8446b4c2b2f8c0835910d7306",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839877": [
        {
            "ioc_value": "8a712dc3e7b657d198b7532dd8c7f117c882ed0ec3acc4fb5bcb62ccae9e450c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839876": [
        {
            "ioc_value": "andopening.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839875": [
        {
            "ioc_value": "documentsphotos.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839874": [
        {
            "ioc_value": "76bf6dc77dd65a17f8525db19ed152117272bf777cd49d0284dbb398f90d945c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839873": [
        {
            "ioc_value": "e3b293066d3fc76c2fb149af1492afce98e4bba9a699713b0d5e8ef2c558ac92",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:02:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839872": [
        {
            "ioc_value": "cdn.wp-station.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839871": [
        {
            "ioc_value": "api.wp-station.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839870": [
        {
            "ioc_value": "cloud.api-middle-connect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839869": [
        {
            "ioc_value": "record-tracker.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839868": [
        {
            "ioc_value": "hilo-cdn.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839867": [
        {
            "ioc_value": "stats.wp-station.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839866": [
        {
            "ioc_value": "178.16.53.243:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839865": [
        {
            "ioc_value": "178.16.53.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839864": [
        {
            "ioc_value": "178.16.55.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839863": [
        {
            "ioc_value": "45.94.47.129:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839862": [
        {
            "ioc_value": "80049a2ef7ebc587d0a1b68cb51f79f710950670fc693f7f666233b2bb8c11a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839861": [
        {
            "ioc_value": "67af4ba680d2acadbc7c96852a296c515da5eb93095056b8028f5d16dc8271a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839860": [
        {
            "ioc_value": "103.141.13.26:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839859": [
        {
            "ioc_value": "e127aef41aaa4e0c28becb09df8415df35f7ca23724e07e2dbab0abb5f72fb85",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839858": [
        {
            "ioc_value": "54b57a524cb975f381dbc1dacccd77924d7ce331fe6b156c5b62419d86e7d18a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839857": [
        {
            "ioc_value": "gushchina-kriz.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 16:01:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839851": [
        {
            "ioc_value": "112.124.71.123:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 15:46:19",
            "last_seen_utc": "2026-08-06 08:48:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839850": [
        {
            "ioc_value": "answers.microsofl.ip-ddns.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 15:46:07",
            "last_seen_utc": "2026-08-06 08:47:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839849": [
        {
            "ioc_value": "113.30.189.164:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 15:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839846": [
        {
            "ioc_value": "https://ghoster.com.br/vendas-ghoster/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 15:17:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ghoster.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839847": [
        {
            "ioc_value": "hi4ztw3j.vip1xbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 15:01:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839845": [
        {
            "ioc_value": "c1d.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 14:25:52",
            "last_seen_utc": "2026-06-29 15:25:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839844": [
        {
            "ioc_value": "https://c1d.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 14:25:51",
            "last_seen_utc": "2026-06-29 15:25:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839842": [
        {
            "ioc_value": "https://c1d.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 14:25:39",
            "last_seen_utc": "2026-06-29 15:25:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839843": [
        {
            "ioc_value": "c1d.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 14:25:39",
            "last_seen_utc": "2026-06-29 15:25:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gw3n9,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839254": [
        {
            "ioc_value": "telehex1921.lol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839255": [
        {
            "ioc_value": "opskey2005.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839256": [
        {
            "ioc_value": "datacrypt5840.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839258": [
        {
            "ioc_value": "aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839259": [
        {
            "ioc_value": "7cf705c6a891860f44ec7f8f6a1fa8b461be9fdae040c729720cfffc85cdffd9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839260": [
        {
            "ioc_value": "72e532597a0255c83c41ea5d3b239027827ec9c24e4e6620dc49da6484f18b4a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839261": [
        {
            "ioc_value": "d656d9afc72bb96781f831f619a88ccc7713cad6ea8e73572e07b9a2e8c4a16f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 14:02:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/aa14e0739cc231f5bbc34d22440d1600c72cfed1f1c1be6f7bef6f57a8deb05f",
            "tags": "ClickFix,DLL-sideload,FakeUpdate,Firefox,plugin-container",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1839839": [
        {
            "ioc_value": "7ay17187.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:57:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839838": [
        {
            "ioc_value": "8eb65c7e227d022ab55a5fcd0df2108cf63fcd1b0f223dae807fd91f4c07da63",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839837": [
        {
            "ioc_value": "57383f826f13db899c12e257b8b4fb331cb67665427ab89bfa512ff94b136a38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839836": [
        {
            "ioc_value": "878b1280993dfd05177c1ddcb1db0d5dfaaeab3688ac008fae08dcbbdc9c6165",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839835": [
        {
            "ioc_value": "81b432422313fee435ad45d1d56fc2b82092b87a216930ff376711fae1c5c589",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839834": [
        {
            "ioc_value": "f0210f448c8f446a0553ebc96217b69204635ab9c8afd3dbad4551cd15b04ed6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839833": [
        {
            "ioc_value": "124943f53d7e25e6b0d5fc5f0166887bd455928c197a83d7912ca836842b7a49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839832": [
        {
            "ioc_value": "081ff763229d78c25ee98ad187721c67f90f7c21c179316ac15294bd306a9bf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839831": [
        {
            "ioc_value": "f2b25a2b02c06cfd322ab35e46aa996e093f60c6d4533ff1c9488a4fd4731bc2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839830": [
        {
            "ioc_value": "4ab0c6d772182dd989d5f486b3786d9652e096f3a7de2fe9318ba91160a29e54",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839829": [
        {
            "ioc_value": "99dae889c2513af1184536be9113f9090156e005ec8f4e7d70fe85a2385d6b40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839828": [
        {
            "ioc_value": "1xkade.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839827": [
        {
            "ioc_value": "2b7a158ba21d29ff705f007404100f4be18f57c8add18be4367274313a525702",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839826": [
        {
            "ioc_value": "dab38d21b56589329253f3945077257015c38f0a3be8d4b23dbec6614df4cd6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839825": [
        {
            "ioc_value": "a7c115fa0d7e766e8cca83357f820fbc30bacf87eb8e034e626745fbcbedf4dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:51:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839824": [
        {
            "ioc_value": "5ddcc0e2b411639e9f0b956207a0f79220a5d63a91f989a33dfdb5e84d054375",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839823": [
        {
            "ioc_value": "cbec366f46e2ada3a4ba03110a6bf07cd773758f9647d6177aa2b3a824725a40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839822": [
        {
            "ioc_value": "cda3bad36970a93cf320e99fa8f79ebef44a9d363984caa8d3ade57302d685d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839821": [
        {
            "ioc_value": "c29c5524132d533b368fdb4ebf25005b8ba16c87f47ff43cc8ffcf3afd951ef0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839820": [
        {
            "ioc_value": "d9521891b05f22fb738d33a351630174ce3612472585616b5a0d0339f5ef7bc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839819": [
        {
            "ioc_value": "cf5875da311ed8b387c1c2e1980ae092b8c626983b052f8209b3cfd7092f37f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839818": [
        {
            "ioc_value": "477d0034cb086f7f243a7d5dfa9cd3bc4b4897bbdbbf3579e57696b4a0367eea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839817": [
        {
            "ioc_value": "1f8714501e5a305f0ac811fe072adab863121a505c58ba8f2063b80cc4c53fde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839816": [
        {
            "ioc_value": "cb6136edadf2e978a6a7a824a04c4868c3d5388e5a6348af138ccf0ad65281cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839815": [
        {
            "ioc_value": "b4e82c910ee8b571485fed72ab6bcc2fac4bc56165486fe0da3548372c061722",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839814": [
        {
            "ioc_value": "7aba322a380e1677dd6d330776f68ee1c9fcd03bc95d441848ff24dfe9c6d724",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839813": [
        {
            "ioc_value": "81eb6e18c2b2ccdf7b0eca605398a98628627a9a97ac27a2868dd2b8cb930386",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839812": [
        {
            "ioc_value": "889e30fe3f83f5760f2ff19a077d59efaa07e9cf01cfe46dc94ce009f14d9eb0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839811": [
        {
            "ioc_value": "b67a31e76c3574f6703a4113083de1a2f7fa3162ca7873510e7df4da1f78156f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839810": [
        {
            "ioc_value": "5fda909ff3cef21c73af1756533f0a5a1fda0f0169b538dc9b8d34889ad926ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839809": [
        {
            "ioc_value": "a8e53406599d6e8c59847e3bc3170202c52eae122053d2fbb9c4233ab7f0d3ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839808": [
        {
            "ioc_value": "426ddfb1bb7b5f84c6676b9c796093585a9c0ad52d72cba56eae4cf47b10b742",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839807": [
        {
            "ioc_value": "b197a5e6403eea1910b4f50719ecdf58945e3a1c727dd81f3fc57a85ceb6f620",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839806": [
        {
            "ioc_value": "31a3401c2f9bfe8a85849d08036cc52458c8bce4e68655b981878017780e3bbf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839805": [
        {
            "ioc_value": "9ffef12b7a1aa5844659994c2c3a83c9ab432e03f965ec8a19638516ed7e15e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839804": [
        {
            "ioc_value": "f9325158ffb4030c5afbc19c113fee7e6ce8b269a5a33abcf571c04887048e57",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839803": [
        {
            "ioc_value": "d4e920866a336e9210499e9f0a4c7e8d26deb886c1dba1cd6ae4614084d181ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839802": [
        {
            "ioc_value": "b3a3f1ee7ba473939b8c1d308e3b051a393c282a5ed4c2427cae3835c3f90f3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839801": [
        {
            "ioc_value": "a082217a6db8177fb320a99750f4540a671fe33f1b08d21cdd9e918f41bba8ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839800": [
        {
            "ioc_value": "92f9ed3459ca697bc70ecf6e9ed5432f508ff194c67a9a723d3f9791453b1c5b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839799": [
        {
            "ioc_value": "5a724c4ec2981e29380eba58bf5aacda7dd7326117537759ed28779e326f7ea6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839798": [
        {
            "ioc_value": "6bf6d1965b3a4ef77868cea0e1fa9a74454a5907e753bcfe67f7d7939f04febe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839797": [
        {
            "ioc_value": "riverpoker.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839796": [
        {
            "ioc_value": "d8da9785a0e4843c2e4e0dc187392d4ad4ddf7a2f65ba88daf60bee76e416a07",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839795": [
        {
            "ioc_value": "fe72b8995c8837aef8e7e4302fe630f72f93748a7bf37838b7d261ab2cea6f03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839794": [
        {
            "ioc_value": "791a41337602eecb913c8ebb0725f2f4f3dd2bad52bdd39c44a799ab3f6ae556",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839793": [
        {
            "ioc_value": "4347c748a3fe26288b92f165b5f1f8b62f42053db896331512916d1b813cf30a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:50:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839792": [
        {
            "ioc_value": "42deaf9d9680d818a640958fbc33ce6ed2c75bea7293495e121a2287f3c16470",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839791": [
        {
            "ioc_value": "a11a262fa4c433630376c7bd6172482a37b87e2f9fefdd1c219acc9775195db7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839790": [
        {
            "ioc_value": "09af99cc0116a5e64ccff2cf62e00423baca98b6a61ec4f5ffbf357ace24cdaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839789": [
        {
            "ioc_value": "shartcart.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839788": [
        {
            "ioc_value": "efc89c8ce4a47037d02203cec9f63cfcb55a85ea6ec724ac39a614a78c74e280",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839787": [
        {
            "ioc_value": "eea4226faa5385e43944513bc6c5e0aba5c5fe2233ab9ddc4db89dbed87139c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839786": [
        {
            "ioc_value": "d5184af6a18beba8da3c5679cb97627150e2289119a0813e5f038cea69d76aff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839785": [
        {
            "ioc_value": "taktikbet.bio",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839784": [
        {
            "ioc_value": "f2e1a2e8fd3895de2116b985ee9e42adb083da7dcbe5618f3b94b9bdbdbc783c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839783": [
        {
            "ioc_value": "tinyshart.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839782": [
        {
            "ioc_value": "520e384b23a7fdf452b5134da72dd74b7c7ea6bcb9099aae631f6b12930c85dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839781": [
        {
            "ioc_value": "a75ac0799920ebf7491b9268c702dca5d9747796a89cf351ad66d10a2d5b27a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839780": [
        {
            "ioc_value": "fa1238f691e56bcc0022608721faa7153c3d99b8b117701599d21fa42eed59fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839779": [
        {
            "ioc_value": "fae06d3527460702a36bf3f503c942a35cabd04ba78d144ad0347de1a06adedc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839778": [
        {
            "ioc_value": "add88dcfc5ef426a51c348b69e2a7b7416499ed91f5a2344006e3fd537767fd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839777": [
        {
            "ioc_value": "cd2a2ee649f83c5e3c897edaa9827d0e2aa64ceacac65f4b1cc72fbe9062696a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839776": [
        {
            "ioc_value": "05ce12e867f403ca55729c8c511fa0f8b881bb4700a2bda45b63ebb452592fed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839775": [
        {
            "ioc_value": "f6a79304d223a2df752e32e51c8099e56d6867bbc092baaf8da823cf660e0870",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839774": [
        {
            "ioc_value": "a2df2915aa26a1e32aa60d9d2e38d9bc292e0c256c67521f5ab4917b5d7ad941",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839773": [
        {
            "ioc_value": "16fff1a5fc06424acc5a5b9e9cc07ed0321f48c4254ff367925c7f5de14e5d62",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839772": [
        {
            "ioc_value": "13bdaf4471806639e3fc8d650b8039f52e59de138e482a506b2ba8b9b39901b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839771": [
        {
            "ioc_value": "226e7b5c5172d05784cfa2ae145aed749d08ad2c76ccc2152f286fdb86698809",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839770": [
        {
            "ioc_value": "yekshart.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839769": [
        {
            "ioc_value": "bd5b89ca5457fcb0e67821d8b9a97c86cfdeb9af22d15d694b946bbdf52a5070",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839768": [
        {
            "ioc_value": "e4755a251e140ffb3a7405ff6d744b968fac98fd6b163b3575c17224275e9e76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839767": [
        {
            "ioc_value": "014ae4a90dc0d2c605f82e928004ef5921eb3c8793d477011889730225c1527d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839766": [
        {
            "ioc_value": "31f1300cd96515097d540e513e28ac2c581754a743301199f3d5e4a1231c1fa0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839765": [
        {
            "ioc_value": "71eca2a2a4427c3dc110f3516d2e99e4a4af9f5e5394d3d52debd707110b1094",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839764": [
        {
            "ioc_value": "2435a4e8428a82a301a87197866ddfac9d2100d8f920f187a823c88ce806675e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839763": [
        {
            "ioc_value": "c959e7a155d1da4bf450cfda3bd0f84bf8028bc5e14b60cb9a1753b9d8efe16d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839762": [
        {
            "ioc_value": "96276d59f865049ec4c5cca4801a65fb85e233fe6625975625ab9a2fd41e8100",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839761": [
        {
            "ioc_value": "f17cab00a92cda8acdcc84847508a54585bc054a77bf7dee0b89598359a585ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:49:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839760": [
        {
            "ioc_value": "ace4dcfc2795a6ae19e927f9ef1a00d6780d517c1f0ef82ac11797eacf0ab185",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839759": [
        {
            "ioc_value": "a86e693136de83b7a64e00c29a487b23e30c4fcdacf676fe1a338c0b307807b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839758": [
        {
            "ioc_value": "05bd30504df9f0d7b523cb34a3edf6374a4642eb0531500950f0191e0c7df852",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839757": [
        {
            "ioc_value": "sabad724.bio",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839756": [
        {
            "ioc_value": "fc0893d0b60b943cd327acd6037538318d87208ba7626a2f42a05da7a7a218bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839755": [
        {
            "ioc_value": "313betios.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839754": [
        {
            "ioc_value": "c9181856c3fed45a7bb1808c3a2dfedc8345e306fb22ef106d202e706f643fb0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839753": [
        {
            "ioc_value": "1xbetpartnersiran.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839752": [
        {
            "ioc_value": "310d42379ca3c51699740fa991473eebefe7aa5ceba515899bc7f0466e88e685",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839751": [
        {
            "ioc_value": "1xprobet.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839750": [
        {
            "ioc_value": "f0dd6c57946342bb6fc8827153e0895dba4b7922e842597afe009943067cf196",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839749": [
        {
            "ioc_value": "9c549c9f571c14f56d0fd2476060cc7c148a50c5da418c7faa9081b522621d83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839748": [
        {
            "ioc_value": "6a949b52db2fb8d659a783b1e7c6d7c46b8664f5e5af76784f5dcda0c6e45832",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839747": [
        {
            "ioc_value": "f396b4c20c493feb3843abeb2b347ae7e320ee0f7ea03522fff1742f7437d8df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839746": [
        {
            "ioc_value": "19cec3279b4819bd518fef23cb1a2af9ebce9247531611148f5ef0d106562939",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839745": [
        {
            "ioc_value": "313betiran.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839744": [
        {
            "ioc_value": "44317aaf2ac9a743b22b069690ea33d8e067b3277050d72448db7e465ab52bf7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839743": [
        {
            "ioc_value": "611f175b6573a9d44f895dcef94bd9252aa332ebaf36e1ac5eb0ff179b997d74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839742": [
        {
            "ioc_value": "e132bc63f9768a85ca4472e7b27280f26f387e8d2a7f0302555c34c8386cab8a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839741": [
        {
            "ioc_value": "79246207c4dc41f58e28e6c5b104b4c644d2780d6fca5a6df9d2eeaa78a590f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839740": [
        {
            "ioc_value": "515933678082aff2b0196c0601f04473585b418c285e8b9e7040eb724b4f9aed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839739": [
        {
            "ioc_value": "d5f73374aa77a2f99385d6cd68da2521b80d8c48e013aa63d6418b8ccb818120",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839738": [
        {
            "ioc_value": "315643e6029ae7a70b9a173526a184ffc8a66dcc111f3ffcebd5fd473026fc6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839737": [
        {
            "ioc_value": "412888487a94f8b94d87fd5fdc8932f6fde85f4157c53806a888a8b510f85c4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839736": [
        {
            "ioc_value": "betbuf.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839735": [
        {
            "ioc_value": "57b5ef46bdb6bc7cae68b719503e2de2cb9173712dc8f978850801fa6eca4ff0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839734": [
        {
            "ioc_value": "d6f3516dd5b9c909a05ae87f7f7834d2d5db5e6d7e153974a8e1f1f725017e53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839733": [
        {
            "ioc_value": "232fd2611fc1f46ad1b5a280c33f0fc306ff9b6d35e95260930bb27ec051e788",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839732": [
        {
            "ioc_value": "38b2e12d1560279206a17395fa9a1b38ef937e3383233f72b35dbaa8c06a46f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839731": [
        {
            "ioc_value": "3d4e22b0dc83b1888baaef20ba791e3174bd61acd88efac3c92e77c8269e9653",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839730": [
        {
            "ioc_value": "0692c83afd512df18332b22dbe14679de671d4c08d46a513a877b40873fe436c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839729": [
        {
            "ioc_value": "96b8c4b86d79991b8f8a539bbbb3055181f7235f473e9074d01389da38b7207d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839728": [
        {
            "ioc_value": "b2030c42ae9a930705cf98062ae00d5bd2e06db3b5fb7bbb0c0285fe248cfadb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839727": [
        {
            "ioc_value": "1b04c028b90b247f783357a822c1aa63ff4a9ac12692fe483711fb5a06787e14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:48:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839726": [
        {
            "ioc_value": "313betsingup.casino",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839725": [
        {
            "ioc_value": "6d35efea5fac72d6ee3433add8827f953dca37e1309e36ed46d0682e7a09c434",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839724": [
        {
            "ioc_value": "1xboropartners.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839723": [
        {
            "ioc_value": "9fd0961f180a2a6c0dcc447f89c97ea581debed2ea33c9ad56b5446690454df6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839722": [
        {
            "ioc_value": "1xsignupbet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839721": [
        {
            "ioc_value": "298ece3b3060cbae13808d96c74ac49bd844623e4a211bac9f4362a6502d2863",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839720": [
        {
            "ioc_value": "733cbd9fd76b7842be57912ceb2f77b55ef32fffb79d320c765dfdf2e0ab5184",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839719": [
        {
            "ioc_value": "64f5c1cdd6d6761faa86e205043d1f8d9200b9bc31b782fc3089797ebbb1df6b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839718": [
        {
            "ioc_value": "113bac6449e7c49c736e8e8240771a0d76793e4cc52c1a37fdab1608c374ce19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839717": [
        {
            "ioc_value": "abt90kade.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839716": [
        {
            "ioc_value": "f78ac0dab61c5f45a351be05cf728cfa0703798323c52879a7a4bc15406c54cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839715": [
        {
            "ioc_value": "22bahis-tr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839714": [
        {
            "ioc_value": "f5c7f49eb7a2dc7acc76a941b058aac5a307cf6130c18e9ab20589aa1933f4ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839713": [
        {
            "ioc_value": "3cec1d52d95d9fb728928132fb4608ab469a3e71c497da1769325135caf0269c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839712": [
        {
            "ioc_value": "9838f78d5ef2b226912f0c72a38d5863637f843d062f4a4d0acc2569ac40ebdc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839711": [
        {
            "ioc_value": "9fb07537a7e16acb1ef4241240ee3f80aab3e2cd1f1cae9570d659f42ffc0cc9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839710": [
        {
            "ioc_value": "cc80852da3ced9c67c0be54a3a06a991873e48a6443b6d2c482505ce81ad17e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839709": [
        {
            "ioc_value": "c712cb217003bcdc3d4087c350d28c66ecf90af49f5ad8e7203daba8a7e8e7b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839708": [
        {
            "ioc_value": "46f8f5a30da314d478e265e28da4419d5ef19adc670ccb7deb57d15bae9f21ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839707": [
        {
            "ioc_value": "1xdownload2023.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839706": [
        {
            "ioc_value": "4b4102a2e28805d12b572323bc37f5a05e6d36fc731a33a9f165350a6717d040",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839705": [
        {
            "ioc_value": "b9e4ad9faee52e8866ad1f38a425c1314fdc6f44c6f4665010f7dbe303da1ca8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839704": [
        {
            "ioc_value": "f1409a92e6aa3b890f6372414d34e7e93e8120d9da83b5b0b58030b98729dd3d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839703": [
        {
            "ioc_value": "1fdcdc0733dc0616ba21f2cf4a56fbde588d989cf71e26925dda48931c551f6c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839702": [
        {
            "ioc_value": "50a171ac23bb575bb12840446683b7cc39400047875ad318aecb9d40036eea9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839701": [
        {
            "ioc_value": "a4b2e6b19516b1ff469e093656629cac8d0a47922a14e0e50a0cd6584ad76504",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839700": [
        {
            "ioc_value": "e9f3c930335311d0fe8e726b372fcf06e2538942a6fc6d88da9edc3faa59b7c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839699": [
        {
            "ioc_value": "5b0b45fea76ccd6900de05d162076b9c48b78f3297668ad65d3e3e92bda6c6fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839698": [
        {
            "ioc_value": "a6bc6bb72b3ed7e241031aac6f8130b68bf4702be130760a8c39c266b9fbdc52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839697": [
        {
            "ioc_value": "ffa65efae452cbf4baa955789735895353f3268c87873f1334d764605a4cc499",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839696": [
        {
            "ioc_value": "bdf46c4dbe512fa0ae26bebe27a68bc933f511f9bd918cd7efcaf441821f155c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839695": [
        {
            "ioc_value": "005d23162e74aaa950fa609b1eb8cc37d3f28396540182604730b930e61f914c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839694": [
        {
            "ioc_value": "b4e4603cfb751ac2c595f129b0e28287a87889938f55fc94e0c297b0a4a005ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:47:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839693": [
        {
            "ioc_value": "19c80a7da57c32c9dcaae13c7f2a082b9722ecfe230fb152e10ea0537bd30567",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839692": [
        {
            "ioc_value": "a9e01df4d1039b5ecbb26149f7d331d3bf95aca4d7977ef0a9390aee3906b687",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839691": [
        {
            "ioc_value": "honarrang.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839690": [
        {
            "ioc_value": "6ab6757326c4cf67c5488eb1c7e90b34002030a1968e06f5d0a8f942c52fcbc2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839689": [
        {
            "ioc_value": "24b584844e5c1fa20bf0a68517420e7162d3f7462833d6bd0a296750917dd507",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839688": [
        {
            "ioc_value": "1ae8f2f2fed85d8e68479f04cb0b9209e855792f87002b523651eadcd467ef23",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839687": [
        {
            "ioc_value": "1ab28c7288a670a34392f3652280e4167bff3bf5e316e5e355e5906a481b3c17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839686": [
        {
            "ioc_value": "c0c575a5275d27a2fa47bc5f8ca081ed689dcd0b9a84f619a504ec682a990643",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839685": [
        {
            "ioc_value": "04fea1d0c45f6bcc408fbb7275cbe918ea498c1de7341ed0e79993c6ae51b0e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839684": [
        {
            "ioc_value": "4be1501792cb564f615240a1b4a649367e710fd78f494709a401b067ebec4fca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839683": [
        {
            "ioc_value": "298f14d3cd6cc0fbe90e846e870391aa376ece9d212a969d6c702827185d08fd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839682": [
        {
            "ioc_value": "ad0ea952e3c6a81a5471ef73eef47ae84accfacfda9868bcd4304f25d929f92e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839681": [
        {
            "ioc_value": "9ccdaa742177212ebb29eb4ed68a901ecb35cfb24836dda942bbb59ef825bc1a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839680": [
        {
            "ioc_value": "313betapk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839679": [
        {
            "ioc_value": "690e7b24e0a9e110f34d848ef0fdea286145e19e709e77b5eeda50d50ace8408",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839678": [
        {
            "ioc_value": "347d0adf9d9085952c435e0014aa603c828bf1864d17038e1790fb0731b7c008",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839677": [
        {
            "ioc_value": "224d47f45d43fab7e1247f2ec457bd8cd5ecc9c9fd192c6fbfca2ac34141a40e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839676": [
        {
            "ioc_value": "10f0eefe55ed04c78b95e36e4b83e49d19ef431d8fa27f7e9c62751e3767bda6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839675": [
        {
            "ioc_value": "f1c1e4912ba8cba7cbbab68e2ea2d5bdbdcfd769a19ed420427d5187905b9312",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839674": [
        {
            "ioc_value": "29c1b45b863aecf87178805b62399f99629b8bc398b0cf2be4f245b9a15ecce8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839673": [
        {
            "ioc_value": "1xdownloadbet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839672": [
        {
            "ioc_value": "49cb71bf1e8cf8a7bec155b3c60897edd1cc74860a4ff955290aaaa56a30585a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839671": [
        {
            "ioc_value": "ae29e79b641e6ad1a204d275d1233553bf7cf7ffacc5705b7779dfeff86da18b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839670": [
        {
            "ioc_value": "8eec96aa05f75e86a6508e349ec2979c7ee4bcd55afaf2fa52b3e0175f385d79",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839669": [
        {
            "ioc_value": "8b603a8efac1630470cb8313b47289bd472e249a8f77b057c7ce4dec9787b14a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839668": [
        {
            "ioc_value": "af8312bcc2d968c24ae8942be15d43421363aa326685370852468d7cd9a5a39b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839667": [
        {
            "ioc_value": "2157a11050dd3813771aa70d090e16b02733f659b9d6d5ddce3ec2fe2b59c7e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839666": [
        {
            "ioc_value": "d226eb2de39a752bb8184350301b90b8f8ca992eca59fe29ebb3361c7084a05e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839665": [
        {
            "ioc_value": "alobet.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839664": [
        {
            "ioc_value": "6f70383fce624b1d23bbc2faacaa107f9ddb791a9636b9b552dc1fbafed1c588",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839663": [
        {
            "ioc_value": "37075e36950eaec07d207870fdb8e89ba6635222769f298d6a324de341cd0ccf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839662": [
        {
            "ioc_value": "7edf28fd45f03213328265875e3d2c52b96e3a11c0e794b4d4c6d10f21be1249",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839661": [
        {
            "ioc_value": "603836c3723118b10c98962a2a1f2ffe2591dd50d0c6ddbf0109a70765c367a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839660": [
        {
            "ioc_value": "73cc918e200d1816f0fb0437f3d7c68c8d09296e942e3eab29c775b19c8667e6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:46:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839659": [
        {
            "ioc_value": "5be4a77129c44dd8db0b12ce5ce97423a9420b85ecdeb1afb005a999aa8049a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839658": [
        {
            "ioc_value": "79ae4c51a7dc322598a9bdc428b04b0e649e82a5530308ca22fe920955227824",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839657": [
        {
            "ioc_value": "b187458423a6bcfb33ff615b47cabe42c2fd1408f77d4d70efef9eb936ecc72a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839656": [
        {
            "ioc_value": "be5bf9fae90a88dcbc764ffddecb34bf0cbdfc9a90ab08f8666473b7f2214cba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839655": [
        {
            "ioc_value": "2dc79e549f60bc02c43210823741ca69a9efb71b5a44243768f4f2452b669a68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839654": [
        {
            "ioc_value": "bb9a388134d418a2e362f1cbe11fbe5545e17af925c43a2cf69779950cb6031b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839653": [
        {
            "ioc_value": "2a7fb245ffdd65a62b4c29a5af8eb0e7df37b3fd1f39097905f863a237b296fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839652": [
        {
            "ioc_value": "2c42c449a84a7b23d3d91a5f7e382b1718ecb39d0d84cc8407b22d2464f67e2c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839651": [
        {
            "ioc_value": "323d5ae5950450365e8d908e190d7d4ae4f08e9a420683fcaaa54fe50465c4cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839650": [
        {
            "ioc_value": "58a5edafe9913698b4deae999ad59df1b6191d6a622b7f3844a08fb537868101",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839649": [
        {
            "ioc_value": "c733f78c80d027d037c8ebc6f21117df63acab83897d2342a9c305f986d78aca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839648": [
        {
            "ioc_value": "192d2ce20ca06398b5de1df16f94af68a27d89595c58e749c53c6dcadf63662c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839647": [
        {
            "ioc_value": "86a28961d0301706c09ec74ccf9d4c15404a3adc9235306333577c147edb3afa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839646": [
        {
            "ioc_value": "2fffe49dc379b3d525b69b792dabdced5d95a133da59c2e5d9db605c5f1e1cd8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839645": [
        {
            "ioc_value": "ac56862ba982309ae1e4b46df7af4cb16364c55d2e2485a106631f1888aa5840",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839644": [
        {
            "ioc_value": "7e5ba27700f835afed4b04390f935e15bc9b7eef1979e28ba1e2118614132e34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839643": [
        {
            "ioc_value": "98c084f01044b8174d6ace1f512da6a06933c4fdc6f858d32ce9b07279dc82a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839642": [
        {
            "ioc_value": "4d256667bb0ecaad1d2c6704598570301b8eb7694612487bd9ddc7f635f8b1b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839641": [
        {
            "ioc_value": "66e15854ca2d96814302477e2d596d96285c43de93514467e1c0e04b942844d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839640": [
        {
            "ioc_value": "342609843717ec79a3eb53a381ab0743c57c70e4e86a1ae20ec85008f6a5554b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839639": [
        {
            "ioc_value": "e4bd493473fb2f71a83674b3d44865740657438ab22510f37121583f83225c5b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839638": [
        {
            "ioc_value": "a55657bee94a9748f0c21e859e7371ed6e46aef296cd0e3d89f90ff8c79d553f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839637": [
        {
            "ioc_value": "329a446d1cacfa1615f000937907d600ae4dff63e60d2b0f5b4809f0d56a9b7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839636": [
        {
            "ioc_value": "925d2ab18be0e8b3e85bb9968e5c999c32dbfeaec8faf617ccf2e619088ce63c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839635": [
        {
            "ioc_value": "c1dc31974713b63ad513f65dcebf049333d280930493ee663181570b2182c7e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839634": [
        {
            "ioc_value": "2c5554fc01f652daad55bc308d077b8d49eccbdb9f0d4c2a0061ca1e08f96771",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839633": [
        {
            "ioc_value": "0e5d483b1173972ea86da6384547d600d7bae9e9204007b683fb45703f2ba9cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839632": [
        {
            "ioc_value": "8a51e06878717602cb4cc3982cb983922c2acd9f7b869125bf0e5dbe8c6b92d0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839631": [
        {
            "ioc_value": "3b7756cdad3fc20f3d5273f5f4cec4404ab7f2c134252c2619cbf485c65a7dcc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839630": [
        {
            "ioc_value": "e78ae391dbcc509d67031b8eacc8809027776c049a005d9d4a0ca6ae31f878f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839629": [
        {
            "ioc_value": "93fb152bb0c07db4463c881b4daf17bd5c007e2fe097f096297499253efa18f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839628": [
        {
            "ioc_value": "e79b655671ec492d625e66f1537dceb45a4ef7d2517c58af2e16ad3b224d099e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839627": [
        {
            "ioc_value": "095aeb362e5b8fe2c095b47cedfeab7fbea9bb866dc759aa5bcb44bc9123b49a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:45:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839626": [
        {
            "ioc_value": "0bcf5f10b1d7a7db764b3b562bad683e2d5e6e863e63a6766b62569a3e4d16bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839625": [
        {
            "ioc_value": "84a62ab8aa23344c15ed50c3e6d78886f54dc1c4ab001374963ad6f92f02ed0b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839624": [
        {
            "ioc_value": "1de1be23bb05a54e155a141e898a0c8aaf09cbc1285c5e6a71c10b058ac3acf6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839623": [
        {
            "ioc_value": "08de7eacd549a59b6d3d7afbe40064ad981cfedf192fb850178570c945b6f238",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839622": [
        {
            "ioc_value": "bd8ec086cc4df4a53fbd41c4490656f962cf4b41d88a4a54539cb166fd06a625",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839621": [
        {
            "ioc_value": "0c6478d0fd592b465f98d1887a671b80fcaad145357d1bc698b827424bd2ccae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839620": [
        {
            "ioc_value": "b0ae4e445adc5c3a1e3c987dba4948bc4651efd45b517f9fbdc8a9f65dbd1522",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839619": [
        {
            "ioc_value": "685828afaffa37efe8aabb8f09222c33a5325d73d8ba8e1ceb4761e94dfce105",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839618": [
        {
            "ioc_value": "1281bbddcebead31850b639a69496a410c6fe32aa3a3de73ba4c7a4ff87013db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839617": [
        {
            "ioc_value": "3aa3df054514f530fee7bb78a012ce6a02c2bef45e988424fba534b9408c8d05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839616": [
        {
            "ioc_value": "790f77de5c970f22a373fc1fc3a9c492229fc9ede18225d0dbc4740643b2864f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839615": [
        {
            "ioc_value": "persiana.bet",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839614": [
        {
            "ioc_value": "cc7eb9c8d37e29497ae2c4faff7ac9ac2f0a491ea5499bd0d3eac675de529ab5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839613": [
        {
            "ioc_value": "28b9b79d18af17fc53d21c0c58bf41bd6697f044d7c0dcf806e00a19ae7d7da2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839612": [
        {
            "ioc_value": "0afce4a5acf139726bf479dcc41877b4fcd4138b9f395bdc70b219ba81983311",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839611": [
        {
            "ioc_value": "445dd498114c523c0b6a1d69f9860ea64a0a01f381e6935d071e1088609e8c30",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839610": [
        {
            "ioc_value": "41af7b9c1d3b467cda30cb48c6a37cf6805894aa18ec30b5f80000e1b8f9714c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839609": [
        {
            "ioc_value": "14f689c52602325c71ec5d13eaf29a890f4f1cf86a95eb8fec0cae1af91d5e2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839608": [
        {
            "ioc_value": "226abb00d0d942c40b12022d86b1f73b81756fd9f9588b436ac5a87b428211df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839607": [
        {
            "ioc_value": "08f440ee1659991acee984e6a266d53cfc56a409d030bf99b58ea54b268fb8e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839606": [
        {
            "ioc_value": "34061315cdb26d64d2eb58b85adbf72ebc535fe217739738af27f5bddb612483",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839605": [
        {
            "ioc_value": "ffbd3d22a61a837418d3065686d401f439f31a00a5d57b24cf9de86c3b44caf2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839604": [
        {
            "ioc_value": "a3ef4bb67f92383fd6573d950c0da828992ae081ffe78d15b978575aab3b59e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839603": [
        {
            "ioc_value": "3fcee4743da0b69f5d036a545cbe2f89bf5666949b9ad667ffe29dc48a0e3d9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839602": [
        {
            "ioc_value": "da4944e4384d42da5fe60a527d530380248f0a64e3f13d185e262a130e08ee9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839601": [
        {
            "ioc_value": "119819df010ab85678ee4b98e6e072d2d89bc1694ce6a44da05ac8a263ba8242",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839600": [
        {
            "ioc_value": "7f549f9ced4340acd00c91af78f5ad8f18a31a401bc3605705468aabb5830389",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839599": [
        {
            "ioc_value": "b47d96527c1a0093553b19e86689c4d00d016dfb745e8a6bf473c4a6d2c142f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839598": [
        {
            "ioc_value": "318334eb727c1e2dc3b55e375a02c3dab34623b00da0599a3fec5a23d33d1eb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839597": [
        {
            "ioc_value": "34599e347fe26274530c72837dde3e0863f4580183c810ede147451c2ce09296",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839596": [
        {
            "ioc_value": "5bf1e723ddb4b40a06f219c54744e320203470552d3dff10faf5cad5b5bd0594",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839595": [
        {
            "ioc_value": "b5ec3792db03894b0d53b5b622d65b240f91e9719be10e26e2ae54e4787c7b35",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839594": [
        {
            "ioc_value": "e6eb81ceffe4d2da7f5abb14935949a8a8fb532d728bde9a0619d4844c1379df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:44:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839593": [
        {
            "ioc_value": "af407cdca6cca6f89eb724570043c397e7e80f571bae1a9ffdcafb96581bf184",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839592": [
        {
            "ioc_value": "841fa9387b613794a777a69ca981a68cc7e6759e75413d39b0efae1650bfd765",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839591": [
        {
            "ioc_value": "4daff2f890ba8ee9f81acb6990cc8176eaf13c9837dc19ca91022e8d2b0430d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839590": [
        {
            "ioc_value": "4df6389bca569490a69b1767f6fea270aa75f5fd228c3df57c5671709957f61c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839589": [
        {
            "ioc_value": "f1fdd609cd195d741589de152285f3e0d8ff3ae2e8a3b347613816f3972fce5e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839588": [
        {
            "ioc_value": "809600841a77234d48f4673c3d1483e71181ca6211e28d74d000204830753b9f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839587": [
        {
            "ioc_value": "5b109aed6bd06b368dc575b29d5521bbcb32da942677ba4454704a941dc362fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839586": [
        {
            "ioc_value": "6e9a1942ff912a8d8a01b498f5365e06d1e64379d900b0f6f0a5a589ece76746",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839585": [
        {
            "ioc_value": "perspolis.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839584": [
        {
            "ioc_value": "68436ac984740ab03ff5f0c198d3622150fec050989c54df036190a7a4349d05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839583": [
        {
            "ioc_value": "b0e405b7969d79c95e85cdbf48ec8db4bfe5222b3d6ef116777c14d0524bbc76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839582": [
        {
            "ioc_value": "1xdlbet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839581": [
        {
            "ioc_value": "26e27313a713e26b71566d81e8b506831bb35cdf6901a7884b1078daaaad256e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839580": [
        {
            "ioc_value": "90be7b9a7efaee3ee835fa37fcc7e26cecf316a0f0d03cf5f96cd85c6b81530d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839579": [
        {
            "ioc_value": "60b0adc84b36b5370ca63eb7101bd2d342b1dfada35903ca1efc563d9640afa5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839578": [
        {
            "ioc_value": "12a625b3b98a1ae59b3fa7dddbcd2fdb489dd5f1876f21bb69642f13cd1c6d19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839577": [
        {
            "ioc_value": "027c4491da7279ef0c28f0e7b5bf4c103a2df1a3eab895ab3f46617fe2d7f396",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839576": [
        {
            "ioc_value": "6d31d8c7017bc3fc7b8589e03e90effcd5a9b64950a2ea6c2eaebdfcbc5087bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839575": [
        {
            "ioc_value": "31784b99a423d7d1c292bb673ff136f62125f030ad1887127ed06a0080b69eac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839574": [
        {
            "ioc_value": "c00335daffc6d8dda56d6dafe6551d1f7ca26afa8f929c24db9d0431b81218a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839573": [
        {
            "ioc_value": "af8127cc83b6b7da5ae28ad3eea96174200edfcc5aa45b2ab7925187dac2d36a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839572": [
        {
            "ioc_value": "d43205e1ca5f39e2d38d02ba0b222a0d20411626fee0590459a346c67c119dd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839571": [
        {
            "ioc_value": "8de1757b00b31e1c26229768be740f3e9493145261245b057ee98229970faa75",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839570": [
        {
            "ioc_value": "b07d7eaef7316e9866faa602c360c46c6cfdc3cbee145de77fbcacd63f640214",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839569": [
        {
            "ioc_value": "42e4659714519f1f7a12695b5f7df203440bb08954f5f6f84bb1491cdf74e4f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839568": [
        {
            "ioc_value": "a5fb0f40715d9c4524d9c1c334719e36668ac48bb9ad8be8f503e1a6f1f04d7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839567": [
        {
            "ioc_value": "9c4e285c0e35294e5f1336cdf48104e505b960bcf99532992cb54f8f5ca2c5f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839566": [
        {
            "ioc_value": "48ca7d574ff68e03deea2a4858dd7b1ca66779fdca1f454054efcd31787f7937",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839565": [
        {
            "ioc_value": "b6bc8273370510fffea71ae09b9f560de201c6aeb28c4ed654ddc3757795f5fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839564": [
        {
            "ioc_value": "f4d64d73113d5ec2bbacaa6e2c0ccd8ede0a1ff7edf82724b654d367d7c32695",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839563": [
        {
            "ioc_value": "8f0bb1285c7e74d5cf735ea3e1b81f19af7bb66ce0fbc20ef0ee3d0cc2af81eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839562": [
        {
            "ioc_value": "b24acb0323702ab6211d419f31461b439ee26bdc0e30f25ccda2c8fd0f9b0d77",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839561": [
        {
            "ioc_value": "8c9c44d251459cdd066bea683a01af4633eec6c86e719172045e72dd2614fe02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839560": [
        {
            "ioc_value": "bbf309009e1fb66866589176949d9e6a3c6ba13d6e6727f91c255730bcd1f7cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:43:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839559": [
        {
            "ioc_value": "2b639ad209bc9363dbce8cd57dd6270c65740ca44375a8571b91de09e165a765",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839558": [
        {
            "ioc_value": "3247c537d03122555bd73b70ef56fd898064a87231ae5f9a3abb8dd83984225d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839557": [
        {
            "ioc_value": "de3ad35d58bce028653189234464f208af3eab813c00d2239dbd3e4aaee04823",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839556": [
        {
            "ioc_value": "c04f175ff36ec2876115428b24a12163c6a217dcabb53b5323cc8c02b7f0782e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839555": [
        {
            "ioc_value": "fe3278cc70a425a9828203206901d669263714b22bce0c64462a044b2426ed7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839554": [
        {
            "ioc_value": "61ac3e1e2c1a0454b798ed0fbc828b546423a8dc9fbc8237de82372b5381da5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839553": [
        {
            "ioc_value": "0ca79a99e57a7e4a45d489d679cc36e5e8771eb5a5af52fb1353b827ffc224c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839552": [
        {
            "ioc_value": "1d092d05264c92d0a9b1eae7150c074ff71fe3a463476efcfa1c60276829865e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839551": [
        {
            "ioc_value": "4e3cc984819d56ad857cc4f93d86057a639f812aa20d48451c31c0b6894eb62b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839550": [
        {
            "ioc_value": "95970cdc48e9404ecb9b3a0368b1f31e047bb586b31086d8e45baeccd84febca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839549": [
        {
            "ioc_value": "78b97b069a00375c63a70cb9954578c3cf9bc3f6f139094bb45054a350392d73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839548": [
        {
            "ioc_value": "0a47701df259fdd10cfc0135819223158ce2b69f8e96c168576067fa2bff6448",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839547": [
        {
            "ioc_value": "fab3dfd516c69911e1695772c47a4affd6c199a9de8755ecf58f4cd268853e0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839546": [
        {
            "ioc_value": "a70a678ea4e494560339a21c449334fbb66860de6edd144bc4901b44b1bf4b4c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839545": [
        {
            "ioc_value": "37d2aba18a98d7fb8b871286632d5ed14df199ff5a9aa8f1fb0494060c41cd45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839544": [
        {
            "ioc_value": "1d5f9df365648f47db3db692f3bceb69abf534da058d88dbf7108d7ad45f12a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839543": [
        {
            "ioc_value": "8f4aaee9a0badd34cfde16ccbb6c31ef7bef714ddb8867e620e760f721b7e2a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839542": [
        {
            "ioc_value": "4c77c9f363c981a01a4f158b734bd4b7a0f560e1fefbaf79b9118ded34cc85ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839541": [
        {
            "ioc_value": "838e73a12345f9238ed8028213ed1a066e66a44518f76629bfbd47cf62047dab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839540": [
        {
            "ioc_value": "f3cf50681b9a2c9c52aa149e0f4a8480c51f55e1a33894e3197b8f97b68b9eb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839539": [
        {
            "ioc_value": "66406130c77059a3ec991a0d4589a9a012647441f960393709d8f5b4e713d504",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839538": [
        {
            "ioc_value": "bee512e41ca7059ea138ccfd935821c50268dd46dd068fbdb43d9391149d2010",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839537": [
        {
            "ioc_value": "1f1e9e894034cc42e5763302c29651009b60b6fc6264ed3417164d70b8f001ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839536": [
        {
            "ioc_value": "fb8d0e1a1cff22efe0bf453262120ca73fc163e1e7e0b00b29f8c8b2da66799a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839535": [
        {
            "ioc_value": "71a699c8f9baf9f3edc0552449ef67e75d24945c7f927d9e4160daaad5e3e2d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839534": [
        {
            "ioc_value": "6115e0c365f3cc55930a66072e94652288d9b7ea1e43058dcd9d59c154fe070c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839533": [
        {
            "ioc_value": "baea8fc383ea6a60053c5f3e818c8b2cebfca06620c50f77395aff119606163d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839532": [
        {
            "ioc_value": "f995250dae5d395a2773c89f45811438a7ddeef81bfc507cc27efd9b2f9747cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839531": [
        {
            "ioc_value": "25ff351860f87bc46f51b057cc477e5c9b3ccffffe580722503c31d909a0928d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839530": [
        {
            "ioc_value": "fcbca46952dfcaa8e2168c9af88c63868485e0fcb1268eba50ca525a60a324f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839529": [
        {
            "ioc_value": "5689cf5549ee44dd64ff1a5cb5ec991f5969faf9da3e296071e888963d1bfa61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839528": [
        {
            "ioc_value": "b1fc61b373e74d936f76dc0094b6be9b8acb25bbf4e44a9beadbd730d237c703",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839527": [
        {
            "ioc_value": "70e3b0ee50ef4c2fd7fa66e7ec4804d675f160066e252c9aeafc65815aedb222",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:42:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839526": [
        {
            "ioc_value": "00714edd01306c6528d6d31e9aaf3b9ae0e7ef23102d99e892c705d49da260ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839525": [
        {
            "ioc_value": "a51f8c071270354e6aee544de2ad3dd8dcc3fc4424226d5599e00916ad81be99",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839524": [
        {
            "ioc_value": "6d8bfcffcb19e21cefda5f1a79fa332e4273cb0282f7741e69707c809b8396de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839523": [
        {
            "ioc_value": "324d7d52c708c0b6b1f45a19b4c1a42d6e6affb79053c8ab9470454ee3ad4296",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839522": [
        {
            "ioc_value": "e947300b142e4a3ad1a4a9879a4b835277bce783ca3176e9b42b0cd46a035557",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839521": [
        {
            "ioc_value": "65c64c33f378b0e81a073cf918b1b72a3e6259f811aec8d5cd007171a15ccf78",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839520": [
        {
            "ioc_value": "6264a5ea18a9e322091f97896f45f3da6d5ca8a788e01d3c74d12ef524361744",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839519": [
        {
            "ioc_value": "da180ca961b9acc2dccbfccb68f0bd5acddd2658fb77bd1495b826c71a5a12df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839518": [
        {
            "ioc_value": "8186041eef61d4e4fe4816aec2176399ed26242bd171c9792ef009f2f3a19460",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839517": [
        {
            "ioc_value": "9e1a0efff2255bc8f7935374b962147c30b2ceffb25ec7211886ac375778e872",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839516": [
        {
            "ioc_value": "7ac1baedbfedac58a53fa8f0797fa5fda1569dfa3ac892076d53ced667ec0006",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839515": [
        {
            "ioc_value": "78d0a38af1400fe5420e13b7a19bf1fc4e8e89f81a786b339132cdd10780676e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839514": [
        {
            "ioc_value": "34f190408932922582014839d495222b25a96c54bbf761429ee2dfbd96f7884b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839513": [
        {
            "ioc_value": "b4d92af2eaf8e863909cb1224048987406ebb850f88b9db1d19e2ab2ec63bd36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839512": [
        {
            "ioc_value": "7388844112b97c2915f15a2b52ea169fce9d42dfa9b77235060328a6bf9aff65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839511": [
        {
            "ioc_value": "42f3770fe595e84b5c5ef2ae07fd1ca822678d1fe65c2cae6cb345ba8db86b48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839510": [
        {
            "ioc_value": "cc429884cb3742aae383942530592ef8a4964e484f51d9467f7b8ec8352ab4f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839509": [
        {
            "ioc_value": "0116d85f1d356ede1353a834d543b0b72bdadc557e475292cc146b4b2dc1ba75",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839508": [
        {
            "ioc_value": "2a6528347432f410bf4a961fbb50571b65f5998e6390ee38eaa8960830fc6f82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839507": [
        {
            "ioc_value": "e7d14cfd4f8b45cad80901f57d582c2841df729847cb794ea465e6ba34efe999",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839506": [
        {
            "ioc_value": "13f925f0219f5309f49dc851ec39c26565f89b5405fda42c2ee142b0f1048d4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839505": [
        {
            "ioc_value": "48eb97efd3e3e211b425292e939e99a1d06d142cb9a53b13065641ff92431118",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839504": [
        {
            "ioc_value": "8343e254b3a9e9d7f64eab23fc5ba9def80702993e00de22c34df6efa2f4763e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839503": [
        {
            "ioc_value": "724b129fa7ff06e95349d7d63b9b5bf109d1ac30d457dd53c1408becf20f4e29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839502": [
        {
            "ioc_value": "671bd644e938f22c30ba8a90a244f0d2169b3e6d88d3ecc5f1f6631d0fc720a1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839501": [
        {
            "ioc_value": "4c7a76f7163dda816593eecfff94da7074eaffd617d06a6d96d63c01aa5f04dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839500": [
        {
            "ioc_value": "667e19d7c08f44ab9f3a80916120d153a8a0bbc32b187e547b8eff3d7236c639",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839499": [
        {
            "ioc_value": "ddfefdfd08832a727ed070b3edd3d688787fac6396ec31c99215b4a41f166fa7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839498": [
        {
            "ioc_value": "8c825cbe0e7ed81c4b03a88c5dff945bcd6e13a03f8f53a40410c5b6fa269b86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839497": [
        {
            "ioc_value": "86c6f49546cc30759ee2e8d61aab50fb4224dc6ed95a4ae57ad21e36610dfb48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839496": [
        {
            "ioc_value": "b3c918289700c93eb750019d8be29bec1d37b7b81fb1ef07a519024d8b0f09e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839495": [
        {
            "ioc_value": "fagaheestedlali.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839494": [
        {
            "ioc_value": "79df00e83284bb595b4cac69469a13eb0bca11fc372d922ec4ae4bf71b984fd9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:41:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839493": [
        {
            "ioc_value": "813ec0783de84f38dd7068da62fa4447c70ae0a06f4635adcffe22e3b76a3b8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839492": [
        {
            "ioc_value": "245563c4bb30f6c72616fa4c72d3d81375a1414443e8c6eb534dcad52161aae7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839491": [
        {
            "ioc_value": "5625f657d305c8447f4a7f672ac93aa505ced15d64a7e59db75798f85d37603b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839490": [
        {
            "ioc_value": "44dc5e00cc396fbbc96f6a806c086c17aa053ad68fcc78cb0e9927ea77be5362",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839489": [
        {
            "ioc_value": "10d07eba8bc5f480f10cbc3760be001f99310905be8ce570b949d50d49f20368",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839488": [
        {
            "ioc_value": "3394b6df051021f4dfe524b79e6f9dc89f3af1cae34ba05c865239238bcae9a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839487": [
        {
            "ioc_value": "cc4a10d8c63e14b84e159db36c46f19f26a75bb3aee7ef753e0aa3e090d1039a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839486": [
        {
            "ioc_value": "fce543be52c93a9dcf579ecaa762e6cbaa441294689b6030b693c23478b5f793",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839485": [
        {
            "ioc_value": "be655712b59af79f0f654eeaef22e66fa30da6ee635fcf5627caf5caf3a9eae4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839484": [
        {
            "ioc_value": "6e3653a3e9a72753b8945a8f735fc04502703b05967a407846908863576681e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839483": [
        {
            "ioc_value": "iranfitness.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839482": [
        {
            "ioc_value": "a1e3eb31cbb58f41a30293286b0393d7b24deacea24881248c8acfe615e22278",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839481": [
        {
            "ioc_value": "jarayemaleyhamval.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839480": [
        {
            "ioc_value": "6fd543bd45878c56418593990fd798629098f9fbe277214875445e5ed9129b65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839479": [
        {
            "ioc_value": "mokatebatedari.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:40:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839478": [
        {
            "ioc_value": "antigravity.study",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839477": [
        {
            "ioc_value": "chatgpt-web.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839476": [
        {
            "ioc_value": "defi-xstocks.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839475": [
        {
            "ioc_value": "clacndjsvulnarbi.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839474": [
        {
            "ioc_value": "194.76.227.172:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839473": [
        {
            "ioc_value": "2.27.5.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839472": [
        {
            "ioc_value": "https://devltd.top/flomowk2.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839471": [
        {
            "ioc_value": "83264e9216fb747d9e0048c6559d66dfca05cf50a1d415ecf212c879d08741ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839470": [
        {
            "ioc_value": "nero-ns-cdns.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839469": [
        {
            "ioc_value": "cash-js-server.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839468": [
        {
            "ioc_value": "ns-server-isdjs-icons.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839467": [
        {
            "ioc_value": "ns-cyber-server.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839466": [
        {
            "ioc_value": "lcates-vs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839465": [
        {
            "ioc_value": "cloud-save-image.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839464": [
        {
            "ioc_value": "verification-cdn-cloud.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839463": [
        {
            "ioc_value": "ssg-cdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839462": [
        {
            "ioc_value": "stabcdnvlc.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839461": [
        {
            "ioc_value": "lckcdnjs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839460": [
        {
            "ioc_value": "teamcss.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839459": [
        {
            "ioc_value": "vsbnsbootstrup.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839458": [
        {
            "ioc_value": "dncloteam.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:39:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839457": [
        {
            "ioc_value": "exdanteam.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839456": [
        {
            "ioc_value": "neiwteamcdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839455": [
        {
            "ioc_value": "vnmstokns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839454": [
        {
            "ioc_value": "bnsclod.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839453": [
        {
            "ioc_value": "mnoskemp.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839452": [
        {
            "ioc_value": "bnnsbdsdn-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839451": [
        {
            "ioc_value": "bilfojsclod.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839450": [
        {
            "ioc_value": "fijscdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839449": [
        {
            "ioc_value": "77.239.114.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839448": [
        {
            "ioc_value": "94.154.35.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839447": [
        {
            "ioc_value": "94.154.35.157:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839446": [
        {
            "ioc_value": "94.154.35.164:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839445": [
        {
            "ioc_value": "anlytic-js-cloud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839444": [
        {
            "ioc_value": "api-server-cdn.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839443": [
        {
            "ioc_value": "awesomeisojs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839442": [
        {
            "ioc_value": "bkscndclou.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839441": [
        {
            "ioc_value": "bootstrap-maxcdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839440": [
        {
            "ioc_value": "bootstrup-cdnmaper.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839439": [
        {
            "ioc_value": "bootstrup-framework-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839438": [
        {
            "ioc_value": "buck-cdns-server.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:38:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839437": [
        {
            "ioc_value": "capcha-cdn-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839436": [
        {
            "ioc_value": "cdn-compress-image.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839435": [
        {
            "ioc_value": "cdn-plugin-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839434": [
        {
            "ioc_value": "0150605913e5cc05dbe79ed8f488d58140ac7c2853ca7853a7a78e9885628b9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839433": [
        {
            "ioc_value": "ldt.sequareeus.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839432": [
        {
            "ioc_value": "https://telegram.me/nwwfh8",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839431": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198719385745",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839430": [
        {
            "ioc_value": "18ac4062d773325076eaea0844bebb295b18100bbb669c351b02ed79354da157",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839429": [
        {
            "ioc_value": "www.robinamedicalcentre.com.au",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839428": [
        {
            "ioc_value": "www.mcttt.gov.fj",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839427": [
        {
            "ioc_value": "www.woodwardlg.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839426": [
        {
            "ioc_value": "www.hotelmontenegro.cz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:37:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839425": [
        {
            "ioc_value": "insta360.co.id",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839424": [
        {
            "ioc_value": "bca.edu.pk",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839423": [
        {
            "ioc_value": "opportunitiesforeveryone.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839422": [
        {
            "ioc_value": "6bfb75b0f69099db4778abbdad7bb65f3661d2d23cba6552cced9002f1440ae7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839421": [
        {
            "ioc_value": "gustoantico.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839420": [
        {
            "ioc_value": "lastoriadelcaffe.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839419": [
        {
            "ioc_value": "meierhealthcare.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839418": [
        {
            "ioc_value": "sparkleup.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839417": [
        {
            "ioc_value": "650ded564d3297b2c4dd55fb9e85e67355a43923c17767788fa6f441a59391c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839414": [
        {
            "ioc_value": "ae77b39f852383ae85c438497d7b528b9e60d082e9c6abc80962d914736f8174",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839415": [
        {
            "ioc_value": "890193eca05d38dffc646205959a67d0dd6e9b4d0a537f68d515b69646caf17c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839413": [
        {
            "ioc_value": "435774098eaebc446f24f977b26cfc432a8b04d4bc9c10c96f802214707d32bd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839412": [
        {
            "ioc_value": "deae4e644e8025371cee37a3562975c46de03ab742aa3b74c026812a747efcf9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839411": [
        {
            "ioc_value": "4162dfc409dd2855deb33cdc2828e9aa866985d187b1463550feb359f3cbd954",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839410": [
        {
            "ioc_value": "e5be3d8543f00a59e9694d68bd1ea3b085b654a24a6113444bbc0ef8640343e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839409": [
        {
            "ioc_value": "50482c70750d30c2d8ad24c5f6ee46ecb6cd28162de7a6d2d23876ca17d4ed89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839408": [
        {
            "ioc_value": "994a5f1d261229dcb3b89233d540b9edb5015c62780171ad1fcf40646d206f61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:36:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839407": [
        {
            "ioc_value": "f6468f29494501aaaee6df60e848aca18774611c9fa3a76e659e686c8c25954b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839406": [
        {
            "ioc_value": "ad63118ec4e540d2f4c0419d4d6f253fc378611aa82c78677a9eabe3489cbc7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839405": [
        {
            "ioc_value": "d6c7108abcfa11e5e20e5c80d6bbf6fbeaf0695f5e13d25ef3c16779e38118f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839404": [
        {
            "ioc_value": "ec59831e37a33f9206c1545125d4ccfd64da2ccc52f0962bbcc6a4fa1af7ea65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839403": [
        {
            "ioc_value": "71f413c994c2440f30bf04dc27c5267c5bb033d38ad1fd0f25d32de4f27e95da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839402": [
        {
            "ioc_value": "bc56317243189038f87628f895aa739b1fd5fede6b3ea98e02dbbe634e0bd7e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839401": [
        {
            "ioc_value": "aa89ad65c2434a64ad5482dfccf0d9b2a799e077141be3f9daf573793d96d528",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839400": [
        {
            "ioc_value": "ed257c6c25bf11eeb7c43db19686f5d846dc082013bc152b3694d819d64c7e5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839399": [
        {
            "ioc_value": "7b73d35a97658a13599a8233ae1c2d9dbf25f5b672865b32a80f98e22671dd94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839398": [
        {
            "ioc_value": "8aa06f1bb5a4aa843d803bcf0a646f9ab094b8afc9dfa4cf639ea3118e6c6bb9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839397": [
        {
            "ioc_value": "d78d9fb3655e9a82462b84bb1da4a167d2c7fb43a334e2575e3c3d5a9cf1355b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839396": [
        {
            "ioc_value": "409c84781854d26a3b4a0e61b7873dca642dd0f848f1bcc75d95beacf3f0ad9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839395": [
        {
            "ioc_value": "55b45570bae5a8268fe1cbf943f3cd2615c80234ffde342569d0e44ad58b2dad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839394": [
        {
            "ioc_value": "59466a6f6e4471e68ca42a85e3bda70794d023c541013fa2df357b8e4d238e61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839393": [
        {
            "ioc_value": "1dcaf8ff52269dca2c224e2f6d868576155cdd9d2ceab2f206d0c37b59ed38db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839392": [
        {
            "ioc_value": "0ab2fe60e6a9c59a3c2a645653883151b80883079d78099179d4a256c10c554b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839391": [
        {
            "ioc_value": "b830f043076a12748b6a2dc0810ece85439ee77434d991ae7d84201b09ead756",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839390": [
        {
            "ioc_value": "454850749d874755a8e1e43e5a128a9fa39ffe49f5ffdbe9f264b5997ccb039c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839389": [
        {
            "ioc_value": "acc38d4b54fbcfd60d86551b4a06771f4b29f1ac7dc4392d86ddeded18b110d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839388": [
        {
            "ioc_value": "4039f4b7894969cd03b96e0e004b2da18445e24eb6dbfdec09a1a0de685e4215",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839387": [
        {
            "ioc_value": "3ddd8f09dc777f42558989e0e32631982ecdb93300dfbd7f9bbfb8f462c14022",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839386": [
        {
            "ioc_value": "1e2e4e41198b8497b8e8a2853645fc10f763b0e4e299a68f614b8a22b3e30022",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839385": [
        {
            "ioc_value": "b6912c23cccc4b0964d55608916297f6978f0b38c80a4beac472004a786fcef7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839384": [
        {
            "ioc_value": "f7ae66c8b93850663c6c20d6a405189e4fdef2c9de46dee7c283de24bf0c2137",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839382": [
        {
            "ioc_value": "0741ef664b10674534eba0e77c162b901d1efdb2863e2f8046ed4adc2ac6865f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839383": [
        {
            "ioc_value": "df15eaf4f30afa77031861ce664291dc880977506b09e747a065edf41a6faf3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839381": [
        {
            "ioc_value": "9e6b554e7a442878b6d5f60bd82ca28cb22ef29e41f2bd13e8fcb05dd81d4562",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839380": [
        {
            "ioc_value": "fa868603841380979823c72d0eb9c18fdf4bc877f0f8f0982bb647151fad9906",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839379": [
        {
            "ioc_value": "4dc8daeb8563b9fe0eec40ce0d32d9987d1280cb69a588dd4f6ea41b6fefc218",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:35:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839378": [
        {
            "ioc_value": "f609202eaeec428706aec08f32c50978bc49515fe11e9146afa03e8e472a8883",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839377": [
        {
            "ioc_value": "b4d18f3e85c518921941aff9cbc10d92c48087fb013fec78b41907223662163c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839376": [
        {
            "ioc_value": "41c6a9b7cc368a6f5e4d63ec7dc407eb66b1ccdb2dc727f2520b894c87b0ae3d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839375": [
        {
            "ioc_value": "924138f5d487abd853e2d6bd792736112054504b7c8e324556f5ee01f54d2fbc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839374": [
        {
            "ioc_value": "fcd3b80ec4b61eebdec2785ea74fefffdf1e5b580f329a1717972225c78b8133",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839373": [
        {
            "ioc_value": "fd7a3cdd0fa8481dab663c5d58d63667011e8dc3fba310f83e59b26c74521fe4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839371": [
        {
            "ioc_value": "2b977fcbd6f3587d1f680d26eeed21981a9029bd57874a0d526f3f4d0d122da1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839372": [
        {
            "ioc_value": "b751b3e82e1fe57e8c32fef2373694ff889bfe4336124ec9ec61d22920e26d23",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839370": [
        {
            "ioc_value": "2d3200584452bf1e11a3f00373ee82fdd419cc0ec455d720ebf6d1c414e46275",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839369": [
        {
            "ioc_value": "0f7a4ed93500ae446ab6cb923125c4bd220b9bae4ab0ad418599aceec324d04e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839368": [
        {
            "ioc_value": "514a4732ccf9faf6f43478e0424a3f8803e261fea97ffd428cb8329a61226659",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839367": [
        {
            "ioc_value": "chicago-bbq.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839366": [
        {
            "ioc_value": "clainasns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839365": [
        {
            "ioc_value": "claudesave.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839364": [
        {
            "ioc_value": "claudjaframework.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:34:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839363": [
        {
            "ioc_value": "cloudcdnginx.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839362": [
        {
            "ioc_value": "cloude-js-server.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839361": [
        {
            "ioc_value": "createbeer.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839360": [
        {
            "ioc_value": "darndcs-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839359": [
        {
            "ioc_value": "dhnsdns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839358": [
        {
            "ioc_value": "exp.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839357": [
        {
            "ioc_value": "fetestjs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839356": [
        {
            "ioc_value": "fontawesome-js-cdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839355": [
        {
            "ioc_value": "fonts-fontawesome.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839354": [
        {
            "ioc_value": "framework-jsoncdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839353": [
        {
            "ioc_value": "frameworkjsbns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839352": [
        {
            "ioc_value": "fredcreate.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839351": [
        {
            "ioc_value": "gdnssljs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839350": [
        {
            "ioc_value": "graciasdenada.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839349": [
        {
            "ioc_value": "hahletsgoagain.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839348": [
        {
            "ioc_value": "hcountry-cdn.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839347": [
        {
            "ioc_value": "hpscdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839346": [
        {
            "ioc_value": "las-js-claud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839345": [
        {
            "ioc_value": "ldnscreatejs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839344": [
        {
            "ioc_value": "lmstles-bootstrapped.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839343": [
        {
            "ioc_value": "lnfcdnclad.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839342": [
        {
            "ioc_value": "mcdns-imager.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839341": [
        {
            "ioc_value": "mistraljs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839340": [
        {
            "ioc_value": "ns-claude-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:33:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839339": [
        {
            "ioc_value": "ns1cdnclaude.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839338": [
        {
            "ioc_value": "nshtjscdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839337": [
        {
            "ioc_value": "nsserdns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839336": [
        {
            "ioc_value": "nsserv-bootstru.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839335": [
        {
            "ioc_value": "nsservclod.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839334": [
        {
            "ioc_value": "nstdcs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839333": [
        {
            "ioc_value": "nvbfcdnclaud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839332": [
        {
            "ioc_value": "olnsclaud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839331": [
        {
            "ioc_value": "oplod-cdn-bootstrap-28.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839330": [
        {
            "ioc_value": "panelwork.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839329": [
        {
            "ioc_value": "polygon-cnd-stats.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839328": [
        {
            "ioc_value": "sane-cdn-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839327": [
        {
            "ioc_value": "sbnsdns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839326": [
        {
            "ioc_value": "sccdnd-ltyles.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839325": [
        {
            "ioc_value": "slndcdnclaud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:29",
            "last_seen_utc": "2026-07-29 06:21:53",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839324": [
        {
            "ioc_value": "slngftr.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839323": [
        {
            "ioc_value": "smetana-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839322": [
        {
            "ioc_value": "smfcdnbb.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839321": [
        {
            "ioc_value": "sns-clauder-cdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839320": [
        {
            "ioc_value": "sr-hostes-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839319": [
        {
            "ioc_value": "ssjscrybootstrup.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839318": [
        {
            "ioc_value": "ssns-cdn-ns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839317": [
        {
            "ioc_value": "testesclaus.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839316": [
        {
            "ioc_value": "travel-js-ns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839315": [
        {
            "ioc_value": "unacerveza.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839314": [
        {
            "ioc_value": "virtual-cdncloud.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839313": [
        {
            "ioc_value": "viscdnclaud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:32:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839312": [
        {
            "ioc_value": "vlns-andb-cdn.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:31:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839311": [
        {
            "ioc_value": "vrfimgjs.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:31:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839310": [
        {
            "ioc_value": "vsactivens.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:31:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839309": [
        {
            "ioc_value": "09120c6637578e163ebad21e650c77bf0a23d8b48aaf887d72fb971a17e0327c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:30:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839308": [
        {
            "ioc_value": "caea180952b57ccf9ce66b81578fa3096bc877ec6a6a7a1ac8352eba3100edd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:30:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839307": [
        {
            "ioc_value": "0b1f3390d9fc8cba8725e19adcf30bd6fef8651fb85c5cb919775eb14286d599",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839306": [
        {
            "ioc_value": "d7396fd0f9509212d99d653cc91bc99d64281447af4aa7db66a7c049a3b75b67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:27:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839305": [
        {
            "ioc_value": "gasshopper.sale",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:26:12",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,ErrTraffic,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839304": [
        {
            "ioc_value": "matrix-config.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839303": [
        {
            "ioc_value": "openandopen.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839302": [
        {
            "ioc_value": "meetinformation.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839301": [
        {
            "ioc_value": "getimageinformation.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839300": [
        {
            "ioc_value": "tryinformation.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839299": [
        {
            "ioc_value": "documentmanagement.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839298": [
        {
            "ioc_value": "45.143.166.36:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839297": [
        {
            "ioc_value": "188.119.122.123:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839296": [
        {
            "ioc_value": "51.222.96.111:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839295": [
        {
            "ioc_value": "153.75.90.37:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839294": [
        {
            "ioc_value": "153.75.90.64:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839293": [
        {
            "ioc_value": "153.75.90.66:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839292": [
        {
            "ioc_value": "153.75.90.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839288": [
        {
            "ioc_value": "c23bf7fd69a2cd8c3d5eb8bd1e7dac371a207e95b77ce05047193764cbc0a897",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:25:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839287": [
        {
            "ioc_value": "findyoursoftupdate.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:56",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839286": [
        {
            "ioc_value": "personalprogrammupdater.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:54",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839285": [
        {
            "ioc_value": "popularsoftupdates.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:53",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839284": [
        {
            "ioc_value": "captchadefence.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:51",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839283": [
        {
            "ioc_value": "gatekeepernet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:49",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839282": [
        {
            "ioc_value": "topclouddefence.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:47",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839281": [
        {
            "ioc_value": "cloudbreachdetection.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:46",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839280": [
        {
            "ioc_value": "cloudsupergatekeeper.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:44",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839279": [
        {
            "ioc_value": "premiumcloudguard.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:42",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839278": [
        {
            "ioc_value": "perfectcloudgate.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:41",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839277": [
        {
            "ioc_value": "powerfireguard.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:39",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839276": [
        {
            "ioc_value": "powerfullcloudflare.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:37",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839275": [
        {
            "ioc_value": "cdnstatus.us.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839274": [
        {
            "ioc_value": "5f1b5a914ec38e997b077a93a9c7d174165756b8b5f8dd731dc2f98f14f06cde",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839273": [
        {
            "ioc_value": "fc76860e01af5e28fa484927559f9a5138d64d8dcea4c23bf1e361f046e2e156",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839272": [
        {
            "ioc_value": "50868954dbd4daa70e117c58ae8426cb9f5c13ed96d0f60d764590517e95e7cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839271": [
        {
            "ioc_value": "08e8efef3bd0fbb1ec1e098ec83563314dddbf28d8801b1ab3c77cb86c1b3838",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHide,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839270": [
        {
            "ioc_value": "2362ed8f4009e137a598ae749dacee4612560fdee4b2cc8b71d712fe0c7d1dcc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839269": [
        {
            "ioc_value": "b9befdb3bd01faf9dc6cdc1f6f5ec5931a4f4560f2917c1e6ce97208c0504747",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839268": [
        {
            "ioc_value": "1d4dab0bc6e3d654d4f7cd3be4a2153d1b4821199765d77cb0de48a0d533f122",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839267": [
        {
            "ioc_value": "881be71c4df6c699d18688b98e554d9c63374b1409ecd8ac63d3562288dac53c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839266": [
        {
            "ioc_value": "91359861a6912d074603eaba0cbe61dd2a5e6800df9db4b8942ddaf50ef042bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839265": [
        {
            "ioc_value": "cd8b89cac64af045e8720d959016027bbe3f4a6e893fc0611a934fe7f0b1eddd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839264": [
        {
            "ioc_value": "b421e8f0903263e37fe4d9830e67afec9f69d7c80d76c1a5f446944715d6f8db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 13:24:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,EtherHidingMagecart",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839263": [
        {
            "ioc_value": "154.12.19.70:22012",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 13:15:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ffe98374173d7c2084a1a6953b308c13a8b9493294af831c23542b0d88654036/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839262": [
        {
            "ioc_value": "154.12.19.70:22011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 13:15:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ffe98374173d7c2084a1a6953b308c13a8b9493294af831c23542b0d88654036/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839245": [
        {
            "ioc_value": "https://alphakey.ae/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 12:38:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/alphakey.ae",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839237": [
        {
            "ioc_value": "751.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 12:38:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bee4e24128c232853bc1decc9e5db2cf0fcb14538936adf01d6356beb4ac820c/",
            "tags": "751Stealer,c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1839242": [
        {
            "ioc_value": "https://crown-seema.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 12:38:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/crown-seema.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839243": [
        {
            "ioc_value": "plaguec2.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 12:38:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bee4e24128c232853bc1decc9e5db2cf0fcb14538936adf01d6356beb4ac820c/",
            "tags": "c2,PlagueStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1839244": [
        {
            "ioc_value": "51.195.202.236:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-29 12:38:08",
            "last_seen_utc": "2026-08-24 13:22:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/db29882c1be518e6addf815fd941d3c29c60d3c225dc693afb5adefb07831ce9/",
            "tags": "c2,OverlordRAT",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1839246": [
        {
            "ioc_value": "https://www.sosolidworld.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 12:38:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sosolidworld.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839241": [
        {
            "ioc_value": "209.200.246.194:35885",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 11:46:48",
            "last_seen_utc": "2026-08-25 20:47:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839240": [
        {
            "ioc_value": "116.213.42.110:5006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 11:46:28",
            "last_seen_utc": "2026-08-03 20:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839238": [
        {
            "ioc_value": "updatesrv.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 11:46:18",
            "last_seen_utc": "2026-09-01 02:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839239": [
        {
            "ioc_value": "web-analyzer-serv32.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 11:46:18",
            "last_seen_utc": "2026-09-01 02:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839165": [
        {
            "ioc_value": "178.62.3.223:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 10:54:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1059_003",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1839170": [
        {
            "ioc_value": "111.229.114.105:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:05",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839171": [
        {
            "ioc_value": "172.104.173.62:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:05",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839172": [
        {
            "ioc_value": "23.234.72.111:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839173": [
        {
            "ioc_value": "59.110.241.158:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839174": [
        {
            "ioc_value": "95.182.96.193:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839175": [
        {
            "ioc_value": "95.173.222.59:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:03",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839176": [
        {
            "ioc_value": "3.129.187.38:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 10:54:03",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839177": [
        {
            "ioc_value": "112.52.34.18:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839178": [
        {
            "ioc_value": "134.209.202.49:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839179": [
        {
            "ioc_value": "167.94.146.49:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839180": [
        {
            "ioc_value": "172.236.228.227:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839181": [
        {
            "ioc_value": "173.255.225.25:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839182": [
        {
            "ioc_value": "193.32.162.60:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:00",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839183": [
        {
            "ioc_value": "199.45.155.108:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:54:00",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839184": [
        {
            "ioc_value": "2.57.122.202:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:59",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839185": [
        {
            "ioc_value": "20.150.193.32:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:59",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839186": [
        {
            "ioc_value": "20.65.195.35:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839187": [
        {
            "ioc_value": "209.50.170.112:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839188": [
        {
            "ioc_value": "45.79.5.11:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839189": [
        {
            "ioc_value": "47.84.194.39:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839190": [
        {
            "ioc_value": "65.49.20.67:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 10:53:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839235": [
        {
            "ioc_value": "129.212.233.8:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-29 10:53:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1839230": [
        {
            "ioc_value": "39p49guo.mokatebatedari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 09:55:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839222": [
        {
            "ioc_value": "178.104.119.162:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839223": [
        {
            "ioc_value": "77.42.88.66:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839225": [
        {
            "ioc_value": "167.233.207.52:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839226": [
        {
            "ioc_value": "167.233.193.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839227": [
        {
            "ioc_value": "91.98.87.85:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839228": [
        {
            "ioc_value": "167.233.198.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839229": [
        {
            "ioc_value": "167.233.204.162:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:47:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839221": [
        {
            "ioc_value": "5.8.19.155:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 09:45:40",
            "last_seen_utc": "2026-07-29 08:59:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839220": [
        {
            "ioc_value": "45.92.158.150:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 09:45:31",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839219": [
        {
            "ioc_value": "45.74.7.168:2428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 09:45:28",
            "last_seen_utc": "2026-08-03 08:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839218": [
        {
            "ioc_value": "27.102.137.139:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 09:45:08",
            "last_seen_utc": "2026-08-11 18:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839215": [
        {
            "ioc_value": "fog.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:45:07",
            "last_seen_utc": "2026-06-30 16:01:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839216": [
        {
            "ioc_value": "gpy.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839217": [
        {
            "ioc_value": "iii.psgiran.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839212": [
        {
            "ioc_value": "fog.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839213": [
        {
            "ioc_value": "gpy.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839214": [
        {
            "ioc_value": "iii.jangkarsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839211": [
        {
            "ioc_value": "https://167.233.204.162/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839205": [
        {
            "ioc_value": "https://77.42.88.66/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839206": [
        {
            "ioc_value": "https://167.233.114.81/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:44",
            "last_seen_utc": "2026-08-27 11:38:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839207": [
        {
            "ioc_value": "https://167.233.207.52/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:44",
            "last_seen_utc": "2026-08-11 11:40:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839208": [
        {
            "ioc_value": "https://167.233.193.229/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:44",
            "last_seen_utc": "2026-08-11 04:50:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839209": [
        {
            "ioc_value": "https://91.98.87.85/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:44",
            "last_seen_utc": "2026-08-27 11:21:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839210": [
        {
            "ioc_value": "https://167.233.198.35/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839199": [
        {
            "ioc_value": "https://gpy.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839200": [
        {
            "ioc_value": "https://iii.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839201": [
        {
            "ioc_value": "https://fog.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839202": [
        {
            "ioc_value": "https://gpy.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839203": [
        {
            "ioc_value": "https://iii.psgiran.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839204": [
        {
            "ioc_value": "https://178.104.119.162/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:43",
            "last_seen_utc": "2026-08-27 11:37:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839196": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198680197300",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:42",
            "last_seen_utc": "2026-08-11 11:11:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839197": [
        {
            "ioc_value": "https://telegram.me/af97ri",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:42",
            "last_seen_utc": "2026-08-11 11:11:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839198": [
        {
            "ioc_value": "https://fog.jangkarsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 09:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1839195": [
        {
            "ioc_value": "193.35.17.42:9956",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-29 09:44:11",
            "last_seen_utc": "2026-08-07 08:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839194": [
        {
            "ioc_value": "192.162.199.149:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-29 09:44:08",
            "last_seen_utc": "2026-08-08 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839193": [
        {
            "ioc_value": "178.128.133.69:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-29 09:43:49",
            "last_seen_utc": "2026-07-31 18:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839192": [
        {
            "ioc_value": "107.174.142.104:5543",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-29 09:43:13",
            "last_seen_utc": "2026-08-01 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839191": [
        {
            "ioc_value": "104.168.38.165:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-29 09:43:10",
            "last_seen_utc": "2026-08-08 08:43:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839169": [
        {
            "ioc_value": "dsr.bet1forward.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 09:34:19",
            "last_seen_utc": "2026-07-11 04:33:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839168": [
        {
            "ioc_value": "203.159.90.247:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 09:30:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aff8f851155a1e45b120dfcf0ccd0ff9679ee0d3ae4284b09d01c88ff46b48bb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839166": [
        {
            "ioc_value": "idverification-cdn.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 08:19:40",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,Polygon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839164": [
        {
            "ioc_value": "137.220.140.4:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 08:11:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/54ad3d4d8342ddea5cc6adea83d26a574a11d7e5133a04af6999a87adbbc2336/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839163": [
        {
            "ioc_value": "137.220.140.4:15443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 08:11:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/54ad3d4d8342ddea5cc6adea83d26a574a11d7e5133a04af6999a87adbbc2336/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839160": [
        {
            "ioc_value": "103.101.176.234:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-29 08:05:05",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839082": [
        {
            "ioc_value": "27.133.154.218:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 07:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1839158": [
        {
            "ioc_value": "1j4lxwuu.1xboropartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:44:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839157": [
        {
            "ioc_value": "107.172.13.198:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 07:40:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5b88eb2c33e9389324abd2f14064a0c1861bdccd5ee12c49e6620112c2c8dfaf/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1839155": [
        {
            "ioc_value": "backupper.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:23",
            "last_seen_utc": "2026-06-29 13:24:08",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,Magecart,WebSkimmer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839156": [
        {
            "ioc_value": "cdn.api-middle-connect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:23",
            "last_seen_utc": "2026-06-29 13:24:20",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,Magecart,WebSkimmer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839154": [
        {
            "ioc_value": "178.16.53.219:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:21",
            "last_seen_utc": "2026-06-29 16:01:48",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,Magecart,WebSkimmer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839153": [
        {
            "ioc_value": "wiciauth.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:19",
            "last_seen_utc": "2026-06-29 13:24:32",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839144": [
        {
            "ioc_value": "be32773534e3d4cd7618194949f7628882992f3dfb048c37f4c960505a005b1c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:23",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839145": [
        {
            "ioc_value": "ada4690c212b7b983e65986c2528c9bdf7cff75589b043ee223a021465c43920",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:25",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839146": [
        {
            "ioc_value": "833e888570c0873e3ce1f026bf6fe7d5abdc0efdd9e55399084ec6fabe9df21b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:26",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839147": [
        {
            "ioc_value": "0c86f5737476c1efc6dffed41e548e75ef9aa4b3dd36b59a30edd320bd65a429",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:28",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839148": [
        {
            "ioc_value": "c6d22ebf9dce5fef2d5f1d87b3007457ef3c6d0193f121305b3d14e85441b43f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:30",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839149": [
        {
            "ioc_value": "5239a198297149ff5440bda18c94ce9c8cc2a2212bd95b3c4bedc197c1b9fb1c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:33",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839150": [
        {
            "ioc_value": "550fe153238e6a8c2cc6cf6a882bdc853fa4bb00721ebf5e7eae863124fd316b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:35",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839151": [
        {
            "ioc_value": "35f619453b4ab2c491b29d880c6bee8f3ae16700b293bbf31deeae975caa71c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:36",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839152": [
        {
            "ioc_value": "c2ee091e95cdc4b4d677e55dc361d76867367a771b540dade1c698a05a2d5f0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:14",
            "last_seen_utc": "2026-06-29 13:40:38",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839135": [
        {
            "ioc_value": "ab101c1996f424300c3eddd06c10575585eeca9d2f7c892f3c45c50e9719c690",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:04",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839136": [
        {
            "ioc_value": "acf4462915e81d81deac3f8e34de6b8cee64cc30dd9f57945794ba0f6dd0a0a8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:08",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839137": [
        {
            "ioc_value": "46a8a3d6131259e53ec07ac725c12dcf5a07d677ac35583982038ad397c19ad3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:10",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839138": [
        {
            "ioc_value": "42624224dfce7a43fcb9d806db2082c30227a815478b1feb74e8cf8cb64f71d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:11",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839139": [
        {
            "ioc_value": "fa6e5f8bb72cc6b04bafe95f01d664b21c1654381b74154897c3efe32e01104b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:13",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839140": [
        {
            "ioc_value": "2d32bf0acaaf5ab032313ec4476774390ebc084d9b8459afd284223fcfb6021d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:16",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839141": [
        {
            "ioc_value": "3f6b065ed2f63b461f23880aee569b9522dd136c20c65bea450f305e9c93f22c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:18",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839142": [
        {
            "ioc_value": "0c964ea5e7a7809b665aa2517d078d50020ddc3b0868f11dc77e625ceb9e9712",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:20",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839143": [
        {
            "ioc_value": "d18d2f76bc553fdecc640c00a548602979c0fcc281b5a626d394937951896822",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:13",
            "last_seen_utc": "2026-06-29 13:40:21",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839126": [
        {
            "ioc_value": "1fd793fc4db29dd42133cb20ea217f29b036d6d0a18d1753ebe56f4544537c32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:36:28",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839127": [
        {
            "ioc_value": "d92133d8434307a99c4c5bbbc905e65c330b38fe991fdcb5b14bd26f70333df9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:36:32",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839128": [
        {
            "ioc_value": "5071b6b49624a35b28f6cc66537be58e76daf2fa3de33a1b106bbd1c7c07561d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:36:33",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839129": [
        {
            "ioc_value": "b481fa88ec61057add0348646d4c703bf7ee3cfc3c98c8547371e6f3cd2ad0b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:36:35",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839130": [
        {
            "ioc_value": "d0ab588b2b93e141b7dc39722f92711dd2de0ae5ad0e764f957ba01f92155820",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:36:37",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839131": [
        {
            "ioc_value": "cd94f3a58d58d6c3e5c317fae03cc845d2368c42dba736386c1699c4c157d7f3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:39:57",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839132": [
        {
            "ioc_value": "9623feb7944da035d38aa653477951b809b4a1c2f6500cd20dd0492889b776f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:39:59",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839133": [
        {
            "ioc_value": "8aaed4d47ae246059967342ee86a0420793c5751dcf86730e8800f31e26ec866",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:40:00",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839134": [
        {
            "ioc_value": "c43c3397154a1f2d89b34cc4122842c2abbfeab139486e55e1e2b71b978959cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:12",
            "last_seen_utc": "2026-06-29 13:40:02",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839119": [
        {
            "ioc_value": "9afbc96639fa400657630e2a3cf4e021a0ab685215b18a03b808e9f27f19fac7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:15",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839120": [
        {
            "ioc_value": "55abd984d38cf05764b4c7ac4d636dfb827a379be7c975aae6d0a88d545fdf25",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:17",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839121": [
        {
            "ioc_value": "7448dccda7b3a82c715869498870f0d0216b31f015fc1324aadf73636a9f0af1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:19",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839122": [
        {
            "ioc_value": "876f875e31e95dfc8b592594f17e6da1a271293de61fade030ea679b815ca817",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:22",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839123": [
        {
            "ioc_value": "f95432faa54a492129454056a396b4b31b5211899d0f9611bee7189661ca3188",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:23",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839124": [
        {
            "ioc_value": "3ed8020622796f70bdf3c16de772b8b45bb542f0af0d9fb639b1513c5c722b53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:25",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839125": [
        {
            "ioc_value": "3e2820527d8eb9a5396cc533f976a929ceb016168a5bce6150fc3ba061e04218",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:11",
            "last_seen_utc": "2026-06-29 13:36:27",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839111": [
        {
            "ioc_value": "4d24fab4342c0b19a2ea0d0ca36392f4053331ce57deeb7115eb34aeb35313ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:35:58",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839112": [
        {
            "ioc_value": "6b3f8442d21103d11bb232c3dfb1dcbac8c576f3e4094c0542baed6b3e4fb657",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:35:59",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839113": [
        {
            "ioc_value": "75c3961a5e1e88b1d8599111df547fe8bec37388eede78f121568417de635ffb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:36:01",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839114": [
        {
            "ioc_value": "8bfc5d83dd86d69937a22a091d8aacafbbf0fa7f0c7faa34674fccb1e5b6b657",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:36:04",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839115": [
        {
            "ioc_value": "4004d3a14a3c7810c44b363927adea33cd55f4a28f6f0baacd937021fc8ed563",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:36:07",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839116": [
        {
            "ioc_value": "6103c24bf10fa4e282d27d63c38934d66bf999b81eb880b9e5761da6496dd575",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:36:08",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839117": [
        {
            "ioc_value": "efa24e6d66c558ef12539fbf615c8a607181e676b4da98e96203910fb9cc0e61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:36:10",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839118": [
        {
            "ioc_value": "af387603dc23f60d2bcd1269e6a1b18f4dceb90575f44b15b36e9c04170f14c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:10",
            "last_seen_utc": "2026-06-29 13:36:12",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839103": [
        {
            "ioc_value": "02e0fb035d480b199f0f2173ed4a8a7b8d6b8340bda05a2af7a20b166a716fe0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:41",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839104": [
        {
            "ioc_value": "18338778e3114e19b28f64e4c1bf9d4ccf0cfc4b2783b46b86862fb6bab12a80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:43",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839105": [
        {
            "ioc_value": "201c5e3d0a94d4ebe356e8280f430f87bdf6d04d8116aac59e04d7ee3951bae5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:46",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839106": [
        {
            "ioc_value": "627867b7897597d74d64f2f722771b87df1796f8a7e7bbff2e0941d25da96a87",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:48",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839107": [
        {
            "ioc_value": "a2009f634a5dec6911655bb282d95487bf53100a72c70a62e56044a31594aefd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:49",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839108": [
        {
            "ioc_value": "425607e394b6da612043b6d91e485c3c4b12910af1c27c1df41397b59d832096",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:51",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839109": [
        {
            "ioc_value": "e021ef11104505f017fad54273c00d29bf87f537dd102c6fc2f519f8bc6e3f64",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:53",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839110": [
        {
            "ioc_value": "7c8f07dabe3eedee00f7de27fabc5689b699ea7c932c9c29bde9f5c3e59f9fd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:09",
            "last_seen_utc": "2026-06-29 13:35:54",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839095": [
        {
            "ioc_value": "cdc845c61341126fa2a784dfc27a11eef47d05cc323530be7b7a4515d202d838",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:25",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839096": [
        {
            "ioc_value": "f62af451ebc1e8ef181d022bdcd25af8d152fa0fc8e408eb610d4075efa1e02f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:26",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839097": [
        {
            "ioc_value": "d246a63fcffa767c9407a4090489db5986233c63c79f79292ae6e0715673ddad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:30",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839098": [
        {
            "ioc_value": "039d75c7bfe0c3917aba98362c636198eafea3f93e4760796abbcd84c2c7e3d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:31",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839099": [
        {
            "ioc_value": "e1287b14eaa142e26a4bb988d8e3431c80d0ffc4401810c07b0d954960738e0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:33",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839100": [
        {
            "ioc_value": "3f18be9db505a0ee69a528269e8bbe2f85cf2116ca465d8f618946013f4bedee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:35",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839101": [
        {
            "ioc_value": "80d4451d914a701e293e643ed33ec53c47b0692793c4d7e1a00368170c5cd739",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:38",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839102": [
        {
            "ioc_value": "c0ac7be40b90efa93340d26787074f5ba40f02762039bdc84d8778419fb8bf46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:08",
            "last_seen_utc": "2026-06-29 13:35:39",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839088": [
        {
            "ioc_value": "a580e434ed06f2bd779c0e6674a0ff31b69a6aaa5f908d95564b17e23bcb714d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:11",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839089": [
        {
            "ioc_value": "058e9c0b3c714b83e131d4990ac5199ee5622ef92dc5d7503f6eaffadb3347a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:13",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839090": [
        {
            "ioc_value": "19d2c2c8f842d70bdd8a9b91ed168e45fbb9a0e3587027e863b3df051f4d3a82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:15",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839091": [
        {
            "ioc_value": "6433b5122e362359e61c61ff2a35b885a229fc41d4d9a942be169f711f81173e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:17",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839092": [
        {
            "ioc_value": "25009746f1960f36bf2efdea616a087c1cbe8cc00e88d6e5a562e76bfc2e2ec5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:20",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839093": [
        {
            "ioc_value": "fd79ca089f7fef7acb21457cde1056c09d36c1fabea56b6333c61171363d320a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:21",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839094": [
        {
            "ioc_value": "f943eb5158841d992932c2502e0075eff351cbd368922e9ab256827c4b707c9f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:07",
            "last_seen_utc": "2026-06-29 13:35:23",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839087": [
        {
            "ioc_value": "22439bc9a2b6716ae7eb5c1aaa9f3ff3ff91cefcbfe27b52763546861121adbc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:06",
            "last_seen_utc": "2026-06-29 13:35:08",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding,GoStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839084": [
        {
            "ioc_value": "qiuy.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839085": [
        {
            "ioc_value": "abt90shart.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:04",
            "last_seen_utc": "2026-06-29 13:50:39",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839086": [
        {
            "ioc_value": "yekshart.app",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:04",
            "last_seen_utc": "2026-06-29 13:49:36",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839083": [
        {
            "ioc_value": "1xbet.sex",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:40:03",
            "last_seen_utc": "2026-06-29 13:35:10",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "BSC,ClearFake,ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839081": [
        {
            "ioc_value": "https://rpc-cloud.beer/api/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 07:24:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake,ClickFix,EtherHiding,Polygon,Stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839070": [
        {
            "ioc_value": "http://103.26.86.217:52895/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-29 06:43:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.26.86.217",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1839071": [
        {
            "ioc_value": "http://103.213.112.214:49082/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-29 06:43:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.213.112.214",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1839072": [
        {
            "ioc_value": "settra5ldqwgtw5q7z5awbsvlksakyfojuc5slgrz5lvapune4fantqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 06:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1839073": [
        {
            "ioc_value": "pbxvml6h3wz35qlr5muy2cg5jvjsd4qhjlsztmxj4lqkyohnfdrntqyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 06:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1839074": [
        {
            "ioc_value": "26z3gms2rshr2zzedxhw5fbucilmgt2inhmxzmuhteyztpxohoqplgyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 06:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1839075": [
        {
            "ioc_value": "ttfy4zmtiaywfkkmykpxiwtlxkcr5ofvrhqgxxyspgwzbxkc3uze7jid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 06:43:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1839076": [
        {
            "ioc_value": "c3u3g7dz2yxkefci3x34jfvfa4gka4iogi4zfjkyxx2c536oqdld4kid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 06:43:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware",
            "tags": "ransomware,settra",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1839077": [
        {
            "ioc_value": "https://aheadsupport.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 06:43:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aheadsupport.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839069": [
        {
            "ioc_value": "130.12.182.90:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-29 06:10:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/47c3f86cd33b11cb9c57df1f9ab4363eab0306e230936cbf45321b17c11fb012/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838807": [
        {
            "ioc_value": "103.214.9.20:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:21",
            "last_seen_utc": "2026-06-29 09:39:58",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838808": [
        {
            "ioc_value": "116.162.216.223:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838809": [
        {
            "ioc_value": "123.57.92.77:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838810": [
        {
            "ioc_value": "134.122.1.61:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:20",
            "last_seen_utc": "2026-06-29 09:40:01",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838811": [
        {
            "ioc_value": "159.203.64.55:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838812": [
        {
            "ioc_value": "159.89.172.54:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838813": [
        {
            "ioc_value": "165.22.8.2:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:18",
            "last_seen_utc": "2026-06-29 09:40:05",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838816": [
        {
            "ioc_value": "188.166.154.126:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:18",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838814": [
        {
            "ioc_value": "172.104.63.215:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:17",
            "last_seen_utc": "2026-06-29 09:40:08",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838815": [
        {
            "ioc_value": "174.138.39.122:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:16",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838817": [
        {
            "ioc_value": "194.163.181.15:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:15",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838818": [
        {
            "ioc_value": "213.136.84.163:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:15",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838819": [
        {
            "ioc_value": "217.216.66.74:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:14",
            "last_seen_utc": "2026-06-29 09:40:22",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838820": [
        {
            "ioc_value": "185.76.9.35:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:14",
            "last_seen_utc": "2026-07-01 19:00:21",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838821": [
        {
            "ioc_value": "23.234.72.111:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:13",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838822": [
        {
            "ioc_value": "139.59.67.197:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:13",
            "last_seen_utc": "2026-07-01 19:00:25",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838823": [
        {
            "ioc_value": "138.199.15.161:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-29 05:55:13",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838824": [
        {
            "ioc_value": "104.207.47.232:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838825": [
        {
            "ioc_value": "104.207.59.109:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838826": [
        {
            "ioc_value": "109.91.201.209:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:11",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838828": [
        {
            "ioc_value": "159.195.76.136:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:11",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838827": [
        {
            "ioc_value": "157.245.123.148:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838829": [
        {
            "ioc_value": "162.227.109.103:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838830": [
        {
            "ioc_value": "169.150.201.135:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838831": [
        {
            "ioc_value": "172.185.40.47:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838832": [
        {
            "ioc_value": "172.202.118.46:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838833": [
        {
            "ioc_value": "173.177.131.92:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:06",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838834": [
        {
            "ioc_value": "174.170.194.116:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:06",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838835": [
        {
            "ioc_value": "174.18.49.143:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:05",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838836": [
        {
            "ioc_value": "176.144.233.36:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:55:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838837": [
        {
            "ioc_value": "176.146.33.242:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838838": [
        {
            "ioc_value": "178.26.11.44:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:38",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838839": [
        {
            "ioc_value": "185.214.96.150:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:38",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838840": [
        {
            "ioc_value": "191.44.125.4:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838841": [
        {
            "ioc_value": "191.44.71.181:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838842": [
        {
            "ioc_value": "191.44.71.39:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838843": [
        {
            "ioc_value": "191.44.91.71:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838844": [
        {
            "ioc_value": "2.15.88.196:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838845": [
        {
            "ioc_value": "20.102.108.84:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:34",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838846": [
        {
            "ioc_value": "209.50.168.38:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:33",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838847": [
        {
            "ioc_value": "217.253.14.112:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:33",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838848": [
        {
            "ioc_value": "217.253.208.240:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:32",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838849": [
        {
            "ioc_value": "37.65.13.51:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:32",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838850": [
        {
            "ioc_value": "37.67.104.221:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:32",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838851": [
        {
            "ioc_value": "37.67.75.82:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:31",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838852": [
        {
            "ioc_value": "45.156.129.127:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:31",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838853": [
        {
            "ioc_value": "60.191.137.103:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:30",
            "last_seen_utc": "2026-07-01 19:01:53",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838854": [
        {
            "ioc_value": "64.62.156.10:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:30",
            "last_seen_utc": "2026-07-01 19:01:57",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838855": [
        {
            "ioc_value": "65.49.1.182:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:29",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838856": [
        {
            "ioc_value": "66.132.195.118:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:29",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838858": [
        {
            "ioc_value": "71.226.150.30:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:28",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838857": [
        {
            "ioc_value": "70.95.146.19:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:27",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838859": [
        {
            "ioc_value": "73.146.198.16:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838860": [
        {
            "ioc_value": "73.198.29.237:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838861": [
        {
            "ioc_value": "74.15.98.76:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838862": [
        {
            "ioc_value": "75.184.86.154:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838863": [
        {
            "ioc_value": "79.197.154.178:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1839067": [
        {
            "ioc_value": "4cfyhd61.fagaheestedlali.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 05:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838864": [
        {
            "ioc_value": "80.134.27.93:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:23",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838865": [
        {
            "ioc_value": "82.226.177.82:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:23",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838866": [
        {
            "ioc_value": "85.217.140.1:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:23",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838867": [
        {
            "ioc_value": "85.217.140.9:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:22",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838868": [
        {
            "ioc_value": "87.160.124.215:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:22",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838869": [
        {
            "ioc_value": "88.151.33.203:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838870": [
        {
            "ioc_value": "88.162.196.213:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838871": [
        {
            "ioc_value": "88.168.217.152:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838872": [
        {
            "ioc_value": "88.170.161.23:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838873": [
        {
            "ioc_value": "89.92.248.142:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838874": [
        {
            "ioc_value": "90.114.76.109:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838875": [
        {
            "ioc_value": "90.21.61.108:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838876": [
        {
            "ioc_value": "90.62.187.41:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:18",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838877": [
        {
            "ioc_value": "90.9.80.38:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:18",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838878": [
        {
            "ioc_value": "91.166.6.193:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:17",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838879": [
        {
            "ioc_value": "91.55.174.82:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838880": [
        {
            "ioc_value": "91.96.255.15:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:03",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838882": [
        {
            "ioc_value": "92.209.188.108:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:03",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838881": [
        {
            "ioc_value": "92.208.25.142:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838883": [
        {
            "ioc_value": "93.128.162.24:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838884": [
        {
            "ioc_value": "95.182.96.193:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-29 05:54:00",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1838885": [
        {
            "ioc_value": "162.248.100.101:2",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:54:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838886": [
        {
            "ioc_value": "162.248.100.101:23",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:53:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838887": [
        {
            "ioc_value": "162.248.100.101:4567",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:53:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838888": [
        {
            "ioc_value": "162.248.100.101:8512",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:53:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838890": [
        {
            "ioc_value": "43.241.19.155:9327",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:53:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838889": [
        {
            "ioc_value": "162.248.100.101:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:53:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,NFS",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1839064": [
        {
            "ioc_value": "https://3king.ai/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 05:53:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/3king.ai",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839065": [
        {
            "ioc_value": "https://3king.live/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 05:53:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/3king.live",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1839066": [
        {
            "ioc_value": "https://3king.app/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 05:53:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/3king.app",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838781": [
        {
            "ioc_value": "https://vacante-ieftine.ro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 05:53:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vacante-ieftine.ro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838782": [
        {
            "ioc_value": "https://genova.com.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-29 05:53:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/genova.com.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838787": [
        {
            "ioc_value": "http://103.176.16.92:42446/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-29 05:53:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.176.16.92",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838791": [
        {
            "ioc_value": "147.182.217.141:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-29 05:53:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838792": [
        {
            "ioc_value": "143.20.185.89:18129",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-29 05:53:51",
            "last_seen_utc": "2026-06-29 07:40:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1839060": [
        {
            "ioc_value": "6xbjz1e7.1xfa.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 04:52:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839058": [
        {
            "ioc_value": "9lw19l8l.betbuf.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 01:52:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1839057": [
        {
            "ioc_value": "xmsjdtn0.betbuf.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-29 01:52:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1839054": [
        {
            "ioc_value": "139d50b674112ca42a6f9e2aea789d0a1f3bd64e7ed5584d54bbfa6c7a418f72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839055": [
        {
            "ioc_value": "41f8ffacbe031d1db7828d62a8e3a868f8599342",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839056": [
        {
            "ioc_value": "787d7a0b27f676de5986ff2aeffa694d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839051": [
        {
            "ioc_value": "e19f312bb3c65120c5faefbded0ce63abb79ae5871fdff02cc1c399c58ff5236",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839052": [
        {
            "ioc_value": "24aa148b9aa0a391ec5fb157ef1c467f2eb75763",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839053": [
        {
            "ioc_value": "796c75cc4d7986e8088deeac118b3ff8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839047": [
        {
            "ioc_value": "e2ea34aa55123dd1c1c4ca7027b12053",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839048": [
        {
            "ioc_value": "046ead5e49940d24ad2249ff10375d6d1a9057c08d00d1874a2669d7a7b57058",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839049": [
        {
            "ioc_value": "50619615547d3f65f46546f21c9935913bc5ec44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839050": [
        {
            "ioc_value": "83286b40935dc23576b57950f1fe9e62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839044": [
        {
            "ioc_value": "ccdd5b209678728be86711582b64f86c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839045": [
        {
            "ioc_value": "99fa87f8885cd8d4f0afb63b6c43c0f00d3cdd3edf535c1730641c8f919449b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839046": [
        {
            "ioc_value": "e12a2429c946114b6beb8921b7326b284250ebc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839041": [
        {
            "ioc_value": "496caac1fa6369e93cb48970f72e26da",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-29 01:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839042": [
        {
            "ioc_value": "9a9e73edcf3b0732bb82ebcd530d4d9591cd057cbf080fb5f00eecc6366190b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839043": [
        {
            "ioc_value": "e861ed732b772e44994486dbfd62e0d49fb1fcb8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839038": [
        {
            "ioc_value": "9f18eac675b554fd802aa4641f61da47",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839039": [
        {
            "ioc_value": "40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-29 01:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839040": [
        {
            "ioc_value": "bd2a22a6bab8f5d5c146f6162ad28244ab22985b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-29 01:23:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839035": [
        {
            "ioc_value": "80b9ce821562da8e4178c2e08e761aca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839036": [
        {
            "ioc_value": "946754adecdf78d5d3fc21edcf01023405faf7bf698f3a5bf5b98df2060bbc3d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839037": [
        {
            "ioc_value": "773b2f09868d6a0ff62927d59f09f9e4d34dc726",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839032": [
        {
            "ioc_value": "a439f3ed1a23f8fad8a1b5b0e22bbea0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839033": [
        {
            "ioc_value": "8ee29f72021306cf5ed6e3a5e7ec19a8e4de837ec77c6dc307ce5dcc96d833b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839034": [
        {
            "ioc_value": "e7ddbec4cc309a35f40ed6127fa108363a56ffd0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839029": [
        {
            "ioc_value": "2695e24e6d062fe97e0e3ae4238ecc11",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839030": [
        {
            "ioc_value": "643812d9c9cc62a10d46401fcca897897d2fbe843014d175206131ad4aeaa576",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839031": [
        {
            "ioc_value": "9edc9d2206b28c939176a2fc4970ee7c4ca3a65b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839025": [
        {
            "ioc_value": "f53a40ad6fae35057880eaf1dbd0624e2ac7c7f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839026": [
        {
            "ioc_value": "3993e71fea3db426410909d3752d4932",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839027": [
        {
            "ioc_value": "2f33698f3e24d9f7633782c67097b67973630bbf16b51dbb493d59acaf36f5b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839028": [
        {
            "ioc_value": "4a22a0aeef82e9e9094f100e714ad71919ae8a84",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839022": [
        {
            "ioc_value": "5d465ee2e2567bd59a1110597045c87d14a7a611",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839023": [
        {
            "ioc_value": "fda577720a8c60c46a37650398fc0144",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839024": [
        {
            "ioc_value": "be245c2e6674ae197b407cd08b7d995909f79f4b2ea128f2a049ce7227ac5b93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839019": [
        {
            "ioc_value": "449b411859b06e87e62ea42985d02ba8c5134716",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839020": [
        {
            "ioc_value": "d5e9cd5cd5ba38ae51a114cbc2189efa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839021": [
        {
            "ioc_value": "bc5a6386c6ecdc49d1714ebf156059d392c8d40def48eca333aee821da492e0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839016": [
        {
            "ioc_value": "ea8402d8d42601b6c8efb38dd19c60e52bb60f09",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839017": [
        {
            "ioc_value": "d6d0aff94ec9c1d794fa31daf5fad87a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839018": [
        {
            "ioc_value": "4a087a74df20ffa9f4acc2427cea2158f76f32ae85389fe396282c8c44fa794a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839013": [
        {
            "ioc_value": "2c707ca426222f790dc10216f9784127b386bf75",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-29 01:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839014": [
        {
            "ioc_value": "c21c6962c9902ddbf4d08537ea7d96a4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-29 01:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839015": [
        {
            "ioc_value": "823aa0257a4c971b780e5569f4f93a017db7337f9ae6eb16692c37f68920b6bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839010": [
        {
            "ioc_value": "fab8258cfc30c4a88de0ca122513ea8ddd306f9d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839011": [
        {
            "ioc_value": "7e359d8fdd0d72a0971d639c20197d40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839012": [
        {
            "ioc_value": "7317d297686d154b4d78217e100df5f57949f05efe095f1a017b5988cddef98b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-29 01:23:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839006": [
        {
            "ioc_value": "fe566ca92d40914438c7ce3157a6a0936ac7be94e71e6c37b95ac84177511874",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-06-29 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839007": [
        {
            "ioc_value": "38fe8d2da94de97b0a6c0e7648dba85e00eeecca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-06-29 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839008": [
        {
            "ioc_value": "41251868de0e68da924595a9e4b6b899",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-06-29 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839009": [
        {
            "ioc_value": "f89d864f7d2382e8e2e34c35ef0b435eb6fd3f1e43cc4c2a9e3d2e96faf452f7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839005": [
        {
            "ioc_value": "3e7ca33a0746e65cc08a92035af226c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 01:23:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839003": [
        {
            "ioc_value": "b8b16633d9cc1eda12aa9415d2fa2e91f39ffe8b7a94e38812e5c49ac88fe9ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 01:23:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839004": [
        {
            "ioc_value": "ec6c1aa469dea25359080e6e2f22a7dfecb8a14e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 01:23:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839002": [
        {
            "ioc_value": "dced1923790be572edf4191106a6dc10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-29 01:23:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838999": [
        {
            "ioc_value": "d070cecbc810cebe7c1cf373ea69b5fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839000": [
        {
            "ioc_value": "d6d38c1850e229809385420e9473ebd68fc9ade8d3d2b25052c476741db52bda",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-29 01:23:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1839001": [
        {
            "ioc_value": "2b671eb88103b9af4fb79f494eab79f80f0d7899",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-29 01:23:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838996": [
        {
            "ioc_value": "4322706ec257b3612d493aec83709abd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838997": [
        {
            "ioc_value": "afed5328d5778877ed29130d62987f9492177080a067d249ee303502ef9530d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838998": [
        {
            "ioc_value": "87452ff24f31736f014cc9852c6e879d3f3c3b8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838993": [
        {
            "ioc_value": "28a483eac56dcdc47c904ce010f34d65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838994": [
        {
            "ioc_value": "123450a779753bd0045cb82de9179cd7a3aad2d560b16a8201ca4eaa7da52ba3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838995": [
        {
            "ioc_value": "45bbb23402b9d86278b9953820c9252d33ee85a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838990": [
        {
            "ioc_value": "029714671183c6988e3067a1d2fdec6e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838991": [
        {
            "ioc_value": "b30a55c62ea914a9dd179a56583cffffdccdf03b38210b87af7f4064a2a941b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838992": [
        {
            "ioc_value": "af51eb484b38c2084bdfca42d5178821238ec5a3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838986": [
        {
            "ioc_value": "30f5f001631cb48f37b684fcbb7791976dbdadb2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838987": [
        {
            "ioc_value": "77ac1472bfb41dcc80e160bc87691abc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838988": [
        {
            "ioc_value": "acb2f08fd49a1958c809389b01141248f19bde31dc70b44b9f466ebd8c6dcbd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838989": [
        {
            "ioc_value": "79bb656381c24aacdd3bdae1e6c3ad8448eaf34a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838983": [
        {
            "ioc_value": "cbaebbe158ff69d922a67b61eb93b19e3a92306a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838984": [
        {
            "ioc_value": "948b712d99e0c5cad05416e7f13841bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838985": [
        {
            "ioc_value": "4ed6520516e5f756f1d020510d5e508c03811b3cb5062eed4bede73df641b779",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838979": [
        {
            "ioc_value": "4a465658121a15449fadbeed82d37c461e601ae45c08a3d6c992285d31ebf804",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838980": [
        {
            "ioc_value": "f8feca6cc45f6b934201c28a8c0d86409fce8836",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838981": [
        {
            "ioc_value": "a040670ccbe6b4c9841d8706c433997c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838982": [
        {
            "ioc_value": "e21f70aebb96b545be30ba9b92fb7a77321d78da5641ce9f4d7b3ab8f6d09e70",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-29 01:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838978": [
        {
            "ioc_value": "9fc877b010e2c630c4db9efd1e0c5ffe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838976": [
        {
            "ioc_value": "a3fed15f05903e3bb645f059a65f5e56ffeab45ab02f535d6df263d4363a6628",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838977": [
        {
            "ioc_value": "64dda3b0dc00c304bb3b65db472548d7d4c7204c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838975": [
        {
            "ioc_value": "390929763242f8f854188b405ac7f5ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 01:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838971": [
        {
            "ioc_value": "b7d45389d4acc560c93215f1096befb28cda75f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838972": [
        {
            "ioc_value": "e2f13f6d216b70e66ce859e3e0cadcb7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838973": [
        {
            "ioc_value": "39cbd2d2299ebbc1eba6bb1ffab7d87f0016715fb237d0a1a253262b4b9cea13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 01:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838974": [
        {
            "ioc_value": "6d20314cdc9d3ba60bb44a2ff17666054394dfcb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 01:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838968": [
        {
            "ioc_value": "7542b7b567d58fde29869a84038ce49f20a8ffe4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838969": [
        {
            "ioc_value": "4f32445270d6f1a4b3a1692aebce68b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838970": [
        {
            "ioc_value": "8928d35f3e18435f6c17940a5a9a2515186b5a7a4faa6f681b7d244249daaf0b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838964": [
        {
            "ioc_value": "94dc6a521549029a2bcd479bf04327518ea0cf0a3a4675d98cb421f256340122",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838965": [
        {
            "ioc_value": "5c7fc0c75b357a21fb920bdb78eaa3a236c7b634",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838966": [
        {
            "ioc_value": "e0227ae2a175af87b2e31d1a47cb3276",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838967": [
        {
            "ioc_value": "542ab12e9aa46a0a19d380e7390a84c4628c7316cb7a4bd01a85a8b3a45ca421",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838962": [
        {
            "ioc_value": "a39c3459c3a86a8e1ab58323e878320c85b43b51",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838963": [
        {
            "ioc_value": "7e87c40331ad08fecfeb53c22fccd9d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838960": [
        {
            "ioc_value": "011c4ffba12eb2a298ff83159177ca7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-29 01:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838961": [
        {
            "ioc_value": "e207ce6f845f84bd247294390e12fd94df499436b8170ec143266405735d36fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-29 01:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838957": [
        {
            "ioc_value": "c1cda5f5016b812993dd4858fa6fb949",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-29 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838958": [
        {
            "ioc_value": "b2687e641c114589ef0f3e96abb7bdf5758009b72a0ef74f2e7f30fafe7bebe7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-29 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838959": [
        {
            "ioc_value": "71f8c01b5819fe2d77519326317a1922cbd92a40",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-29 01:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838954": [
        {
            "ioc_value": "6f9edbfed883db4efc7ede0460ecb3ff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838955": [
        {
            "ioc_value": "c942ecd62cc2de17119903a9adb79dc9a382136288a2a5e9385e856a668a3d7a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-29 01:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838956": [
        {
            "ioc_value": "75b70ffacf08e1d1cc7d77fbf3dc719c8711f150",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-29 01:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838951": [
        {
            "ioc_value": "38d02de220bc3849fbc8632696f8dd6c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838952": [
        {
            "ioc_value": "ed7a9ad7284781a6961eb2b9715e813c430f732f7535813c0c6285a34e29b67b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838953": [
        {
            "ioc_value": "78ecd6ea99e2b709bd1fda2554069451edebd56d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838947": [
        {
            "ioc_value": "803dd34dfa729441444bc19a74db9cf5b7fd73a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-29 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838948": [
        {
            "ioc_value": "2e4931fc4f7fcfcea1192df30ffcb858",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-29 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838949": [
        {
            "ioc_value": "147c4f3da4b13ba13048e762128aeaf1270a9c9a47c7caf481feb947e4428794",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838950": [
        {
            "ioc_value": "4b02778c2e6387e73baa0b8404cf7346cd625695",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-29 01:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838944": [
        {
            "ioc_value": "56210b7439f90f92eba1093292e3b23e6127f693",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-29 01:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838945": [
        {
            "ioc_value": "b2930338fad806be737dd392270160dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-29 01:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838946": [
        {
            "ioc_value": "555cb9ec0842dce18895c26b81fc108cadc4958970235631fd703d31d7e6ba65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-29 01:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838941": [
        {
            "ioc_value": "c817079b896094d9aaf6be570b7ee03f87323cea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838942": [
        {
            "ioc_value": "1413fa8b1bc8437830fe7dcfc19ebd90",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838943": [
        {
            "ioc_value": "fcd0a4054eba07a6e2c6697c7e6f116afe494e43cce7ceb99cea6d1ba6faf0b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-29 01:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838938": [
        {
            "ioc_value": "79b63082f73ed3cab60901b9256a81b78de4192b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 01:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838939": [
        {
            "ioc_value": "29e09a2fdea6179f9ac0bbfffecfba99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 01:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838940": [
        {
            "ioc_value": "0befde76298e1cd14983e1ed0c5858c29a46381f45592acfc9143deca6fc6ecb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838935": [
        {
            "ioc_value": "e9e83354951260d9485f21cdaacf954034f1fe05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838936": [
        {
            "ioc_value": "ce93846b8a4d42531f4e5950a817bcc1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838937": [
        {
            "ioc_value": "670482ef4243ca62c495b94b86af529e5b44fa449e524613cee373dd0aa549af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-29 01:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838932": [
        {
            "ioc_value": "896235eebadf15fb2fe4333e109b9c7d3e2b7432",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 01:23:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838933": [
        {
            "ioc_value": "3dcd3e2a1919055bd32c83dab86da59e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 01:23:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838934": [
        {
            "ioc_value": "bb9433e362bc054482b4dda309b67271b0de66bd4facb5370d2c48c3a2f69b17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-29 01:23:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838929": [
        {
            "ioc_value": "1db264fab7a33a9962423109aa9fdcf1688eee74",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 01:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838930": [
        {
            "ioc_value": "8871665f04a761afb82cd425a9419130",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 01:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838931": [
        {
            "ioc_value": "8258d0072d4ce97403d82e6560f46d9e135ff8783ed04409870ad7df03035953",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-29 01:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838927": [
        {
            "ioc_value": "de295da07916a1e68e05fb9f6eb4fee5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838928": [
        {
            "ioc_value": "536a20ad2c2de578288f060adba7ce718ca8b4ad3e9111e6e461dd482bd34cc8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-29 01:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838923": [
        {
            "ioc_value": "007293c1ec4879705375c9f89dfaa78a8b45db6a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838924": [
        {
            "ioc_value": "9ac45cd7937cadf8ee6e9b45484aaec5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838925": [
        {
            "ioc_value": "d70a183081591e5760f750c5ecf24cac4bd9d9db61b3269ab4933401649cacfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838926": [
        {
            "ioc_value": "f66b4f00e56a4f100c6f179b30e06285ae4230fa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838920": [
        {
            "ioc_value": "a8cbb1b5420146a7d3f57bf4115caa96d8930b42",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "elf.zhtrap",
            "malware_alias": null,
            "malware_printable": "ZHtrap",
            "first_seen_utc": "2026-06-29 01:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838921": [
        {
            "ioc_value": "cdce6c8c32f041f574161f7e2edfd398",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "elf.zhtrap",
            "malware_alias": null,
            "malware_printable": "ZHtrap",
            "first_seen_utc": "2026-06-29 01:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838922": [
        {
            "ioc_value": "09f9d5761ddd83f5830852c9958b35c2f379dbdb1f2ad8a35a8a442911726c28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838917": [
        {
            "ioc_value": "a136cb341ae29b97ce6cb1d980bc8c793d85d8bd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838918": [
        {
            "ioc_value": "ca4f85f75f459c4963f7e3eb4e295394",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838919": [
        {
            "ioc_value": "9c9fd1ab06198b6d0aa3222006a7f97e2cb29c5ea3ab1d5f408784c008a32515",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.zhtrap",
            "malware_alias": null,
            "malware_printable": "ZHtrap",
            "first_seen_utc": "2026-06-29 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838914": [
        {
            "ioc_value": "e2885a36319e84ef9c8decc8d261192b13590754",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838915": [
        {
            "ioc_value": "b953f81730955b8883bc2e8baa9091e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838916": [
        {
            "ioc_value": "20160e27904a71a77b26aeb6edb37aedc6ed18aaffb5f7eb3fbbab035ab3c458",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-29 01:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838910": [
        {
            "ioc_value": "b435de3e50714d774f42cfdefd710519915e7f987f69da8d5fc1963961519844",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-29 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838911": [
        {
            "ioc_value": "0a5b8f09e60b8c9598e16e1ffb37d877da4d069d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-29 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838912": [
        {
            "ioc_value": "0184f5f0b05f0bfb33f2657836f00dd5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-29 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838913": [
        {
            "ioc_value": "11f50bd71ee026c644b2322d84b4a3e03b48455e34ebf478bd6afc32e0fdfbef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838908": [
        {
            "ioc_value": "1d0bf06fdc2505d6947d4b2825e888ab5148b68b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838909": [
        {
            "ioc_value": "3cc6072eca86948127764f87d84baa85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838905": [
        {
            "ioc_value": "688f4b4ecfd26d2529d2c1b21a9d8be2f3245cc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 01:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838906": [
        {
            "ioc_value": "193177af43f8f24851b76d2866a11e1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 01:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838907": [
        {
            "ioc_value": "e9c6dda67b1da1be30f8b0d4c7ff329c6b9831ae2c413742bbe59cc66690a630",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-29 01:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838902": [
        {
            "ioc_value": "ed5bdffd8e51239effd147106709a026995deaee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-29 01:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838903": [
        {
            "ioc_value": "388ed6c8e9e5ba54c49209337f0a71a6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-29 01:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838904": [
        {
            "ioc_value": "cd1ab1369c5b2090a046e27574158e038fabdabc695623b3e85810246990e351",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-29 01:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838901": [
        {
            "ioc_value": "ffb966fce55f67726e7f8084a1dc21b80650e5c05373529b35d93eafcfcc7e26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-29 01:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838898": [
        {
            "ioc_value": "38.54.117.107:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-28 23:45:51",
            "last_seen_utc": "2026-07-30 08:47:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838897": [
        {
            "ioc_value": "117.72.159.96:8777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-28 23:45:35",
            "last_seen_utc": "2026-07-31 10:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838896": [
        {
            "ioc_value": "103.73.161.60:9005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-28 23:45:30",
            "last_seen_utc": "2026-07-31 10:46:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838893": [
        {
            "ioc_value": "8zdusrwn.xbetone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 21:51:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838892": [
        {
            "ioc_value": "dows.sabad724.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 21:47:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838891": [
        {
            "ioc_value": "htfll3q5.1x303.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 21:42:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838803": [
        {
            "ioc_value": "54.180.147.42:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-28 19:45:13",
            "last_seen_utc": "2026-08-15 18:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838804": [
        {
            "ioc_value": "54.180.147.42:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-28 19:45:13",
            "last_seen_utc": "2026-08-04 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838801": [
        {
            "ioc_value": "5.8.19.157:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 19:45:11",
            "last_seen_utc": "2026-07-31 18:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838802": [
        {
            "ioc_value": "5.8.19.157:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 19:45:11",
            "last_seen_utc": "2026-07-31 18:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838800": [
        {
            "ioc_value": "45.94.23.42:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 19:45:00",
            "last_seen_utc": "2026-08-13 08:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838799": [
        {
            "ioc_value": "45.150.38.95:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-28 19:44:54",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838798": [
        {
            "ioc_value": "199.247.14.228:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-06-28 19:44:04",
            "last_seen_utc": "2026-07-29 08:58:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838797": [
        {
            "ioc_value": "185.115.164.59:2892",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 19:43:47",
            "last_seen_utc": "2026-07-28 18:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838796": [
        {
            "ioc_value": "109.227.35.147:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-06-28 19:43:12",
            "last_seen_utc": "2026-07-31 08:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838793": [
        {
            "ioc_value": "103.11.41.10:8237",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 19:43:05",
            "last_seen_utc": "2026-07-29 08:56:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838794": [
        {
            "ioc_value": "103.11.41.19:16666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 19:43:05",
            "last_seen_utc": "2026-07-28 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838795": [
        {
            "ioc_value": "103.11.41.20:1000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 19:43:05",
            "last_seen_utc": "2026-07-29 08:56:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838789": [
        {
            "ioc_value": "104.248.201.191:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-28 19:05:05",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838788": [
        {
            "ioc_value": "fjy9zygx.1xsignupbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 18:51:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838786": [
        {
            "ioc_value": "huz6wkqi.mokatebatedari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 17:50:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838785": [
        {
            "ioc_value": "mokatebatedari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 17:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838783": [
        {
            "ioc_value": "jarayemaleyhamval.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 15:49:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838780": [
        {
            "ioc_value": "http://103.146.231.107:80/DFne",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-28 15:15:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/536a20ad2c2de578288f060adba7ce718ca8b4ad3e9111e6e461dd482bd34cc8/",
            "tags": "cobaltstrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838772": [
        {
            "ioc_value": "https://geurtuin.com/?doing_wp_cron=1782651363.9469881057739257812500",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 14:38:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/geurtuin.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838777": [
        {
            "ioc_value": "geurtuin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-28 14:37:59",
            "last_seen_utc": "2026-08-26 21:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,FakeCF",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838778": [
        {
            "ioc_value": "engr-salahuddin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-28 14:37:58",
            "last_seen_utc": "2026-08-26 21:48:12",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,FakeCF",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838779": [
        {
            "ioc_value": "https://citrusocarpetscleaning.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 14:37:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/citrusocarpetscleaning.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838774": [
        {
            "ioc_value": "nqxr9m1i.iranfitness.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 13:50:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838773": [
        {
            "ioc_value": "iranfitness.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 13:48:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838771": [
        {
            "ioc_value": "http://lawofi.xyz:7538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-28 13:10:43",
            "last_seen_utc": "2026-07-31 08:37:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb9433e362bc054482b4dda309b67271b0de66bd4facb5370d2c48c3a2f69b17/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838744": [
        {
            "ioc_value": "lawofi.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-28 13:07:11",
            "last_seen_utc": "2026-07-11 06:49:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c86b1625d01dbd8c7dd9e5cc17a438c1c39bb333bd71e2062a89e241d1875263/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1838746": [
        {
            "ioc_value": "https://bibliorock.lol/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 13:07:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bibliorock.lol",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838747": [
        {
            "ioc_value": "https://memshowblob.forum/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 13:07:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/memshowblob.forum",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838748": [
        {
            "ioc_value": "https://mistertwister.sale/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 13:07:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mistertwister.sale",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838766": [
        {
            "ioc_value": "http://153.117.41.29:45738/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 13:07:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.41.29",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838767": [
        {
            "ioc_value": "http://175.107.208.203:48676/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 13:07:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.208.203",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838765": [
        {
            "ioc_value": "fagaheestedlali.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 11:46:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838764": [
        {
            "ioc_value": "1bmaiu5y.1xbetpartnersiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 11:42:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838763": [
        {
            "ioc_value": "134.122.155.142:6276",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-28 11:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/670482ef4243ca62c495b94b86af529e5b44fa449e524613cee373dd0aa549af/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838759": [
        {
            "ioc_value": "1v6qcobc.betbuf.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 09:47:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838758": [
        {
            "ioc_value": "bcxmyrgq.betbuf.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 09:46:02",
            "last_seen_utc": "2026-06-29 18:00:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838757": [
        {
            "ioc_value": "45.74.7.173:9521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 09:45:16",
            "last_seen_utc": "2026-08-14 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838756": [
        {
            "ioc_value": "192.162.199.149:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-28 09:44:03",
            "last_seen_utc": "2026-08-08 08:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838755": [
        {
            "ioc_value": "185.212.128.231:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-28 09:43:55",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838754": [
        {
            "ioc_value": "177.22.119.145:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-06-28 09:43:45",
            "last_seen_utc": "2026-07-28 08:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838753": [
        {
            "ioc_value": "167.94.81.175:62722",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-28 09:43:38",
            "last_seen_utc": "2026-07-28 18:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838752": [
        {
            "ioc_value": "159.195.193.179:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 09:43:34",
            "last_seen_utc": "2026-08-06 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838751": [
        {
            "ioc_value": "141.98.10.150:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 09:43:21",
            "last_seen_utc": "2026-08-13 08:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838750": [
        {
            "ioc_value": "103.83.87.87:25900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 09:43:09",
            "last_seen_utc": "2026-08-19 18:41:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838749": [
        {
            "ioc_value": "103.11.41.20:201",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-28 09:43:06",
            "last_seen_utc": "2026-07-28 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838745": [
        {
            "ioc_value": "rjjgfvu6.vip1xbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 08:50:22",
            "last_seen_utc": "2026-07-04 03:04:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838743": [
        {
            "ioc_value": "45.88.186.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-28 08:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NetSupport",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838739": [
        {
            "ioc_value": "103.253.212.175:6868",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:49:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bf23faf4440b3ecf07ebc99d4961bae4274a68c0ee8bb35f1936fcb80284ef47/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838738": [
        {
            "ioc_value": "nzr.narxzz.biz.id",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:49:17",
            "last_seen_utc": "2026-07-04 04:58:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bf23faf4440b3ecf07ebc99d4961bae4274a68c0ee8bb35f1936fcb80284ef47/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838624": [
        {
            "ioc_value": "https://thespeedyhomeoffer.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thespeedyhomeoffer.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838625": [
        {
            "ioc_value": "https://hollytree-transport.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hollytree-transport.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838626": [
        {
            "ioc_value": "https://emdgroupe.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/emdgroupe.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838627": [
        {
            "ioc_value": "https://cgain.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cgain.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838630": [
        {
            "ioc_value": "https://purplebandage.org.za/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/purplebandage.org.za",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838635": [
        {
            "ioc_value": "147.182.140.2:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-28 07:46:08",
            "last_seen_utc": "2026-06-30 00:34:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838631": [
        {
            "ioc_value": "https://www.rssssociety.org.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.rssssociety.org.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838636": [
        {
            "ioc_value": "91.92.42.125:9111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:46:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838637": [
        {
            "ioc_value": "http://188.169.20.12:35057/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:46:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/188.169.20.12",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838638": [
        {
            "ioc_value": "http://172.168.137.58:37141/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:46:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/172.168.137.58",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838639": [
        {
            "ioc_value": "http://5.166.134.69:43702/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:46:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/5.166.134.69",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838640": [
        {
            "ioc_value": "http://223.123.43.71:35524/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:46:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.71",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838641": [
        {
            "ioc_value": "bonavol.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1838642": [
        {
            "ioc_value": "jaffacakes118-is-a-stupid-nigger.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:46:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838643": [
        {
            "ioc_value": "lumennix.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1838644": [
        {
            "ioc_value": "funrat.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f1600a7996129ec26473f82b846800ebce3bf53f59a0c0246d62761f3f603bd7/",
            "tags": "c2,PussyRAT",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1838645": [
        {
            "ioc_value": "bestcheats.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:46:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1838646": [
        {
            "ioc_value": "figural.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-28 07:45:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1838647": [
        {
            "ioc_value": "46.8.236.234:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838648": [
        {
            "ioc_value": "46.8.236.234:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838649": [
        {
            "ioc_value": "46.8.236.234:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838677": [
        {
            "ioc_value": "advanceslibrary.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-28 07:45:57",
            "last_seen_utc": "2026-06-28 07:32:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838678": [
        {
            "ioc_value": "remiumholdings.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-28 07:45:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838703": [
        {
            "ioc_value": "bibliorock.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-28 07:45:56",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838704": [
        {
            "ioc_value": "mistertwister.sale",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-28 07:45:55",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838705": [
        {
            "ioc_value": "memshowblob.forum",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-28 07:45:53",
            "last_seen_utc": "2026-06-29 13:26:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838711": [
        {
            "ioc_value": "http://119.157.76.175:39761/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:45:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.157.76.175",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838713": [
        {
            "ioc_value": "194.59.31.123:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-28 07:45:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "399486,c2,censys,quasar",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1838715": [
        {
            "ioc_value": "196.75.14.206:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-28 07:45:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "36903,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1838722": [
        {
            "ioc_value": "91.92.40.63:9111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838723": [
        {
            "ioc_value": "141.11.88.109:6767",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838727": [
        {
            "ioc_value": "http://101.53.225.41:45308/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:45:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.225.41",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838728": [
        {
            "ioc_value": "http://112.246.97.119:37502/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:45:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/112.246.97.119",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838729": [
        {
            "ioc_value": "http://153.117.15.75:41179/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-28 07:45:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.75",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838731": [
        {
            "ioc_value": "higher.makeup",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838732": [
        {
            "ioc_value": "46.8.238.161:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838733": [
        {
            "ioc_value": "46.8.238.161:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838734": [
        {
            "ioc_value": "46.8.238.161:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-28 07:45:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838730": [
        {
            "ioc_value": "47.236.116.9:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-28 06:36:01",
            "last_seen_utc": "2026-07-27 23:48:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=47.236.116.9",
            "tags": "Amadey,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838725": [
        {
            "ioc_value": "c0yc77zn.blackjackonlineplay83.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 05:45:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838724": [
        {
            "ioc_value": "http://47.236.116.9/y8jdGc5jS/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-28 04:45:05",
            "last_seen_utc": "2026-06-29 08:41:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838721": [
        {
            "ioc_value": "2ffuyto6.taktikbet.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 01:44:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838720": [
        {
            "ioc_value": "cd5p7l7t.xbetone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-28 01:41:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838712": [
        {
            "ioc_value": "144.31.61.126:21418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-28 00:25:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838710": [
        {
            "ioc_value": "45.227.253.121:52445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 23:46:10",
            "last_seen_utc": "2026-07-30 16:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838708": [
        {
            "ioc_value": "134.122.135.120:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 23:45:52",
            "last_seen_utc": "2026-08-04 10:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838709": [
        {
            "ioc_value": "134.122.135.53:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 23:45:52",
            "last_seen_utc": "2026-08-04 18:47:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838707": [
        {
            "ioc_value": "t71awqhc.1xsignupbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 22:41:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838701": [
        {
            "ioc_value": "1e2sdyr4.honardartarikh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 21:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838698": [
        {
            "ioc_value": "8cd1408dbe57b890cb7aac49c60567e659156f376075ef617d5d7afb588daa09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darkme",
            "malware_alias": null,
            "malware_printable": "DarkMe",
            "first_seen_utc": "2026-06-27 21:28:14",
            "last_seen_utc": "2026-06-29 01:23:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838699": [
        {
            "ioc_value": "6de94861e213b9b876edac4bdc716e141df735b7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darkme",
            "malware_alias": null,
            "malware_printable": "DarkMe",
            "first_seen_utc": "2026-06-27 21:28:14",
            "last_seen_utc": "2026-06-29 01:23:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838700": [
        {
            "ioc_value": "891776acc33d8c22e4667d51c8370d49",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darkme",
            "malware_alias": null,
            "malware_printable": "DarkMe",
            "first_seen_utc": "2026-06-27 21:28:14",
            "last_seen_utc": "2026-06-29 01:23:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838696": [
        {
            "ioc_value": "2b4e83cfdab5b79ae1aa1b4df8dd4503a9c99deb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-27 21:28:13",
            "last_seen_utc": "2026-06-29 01:23:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838697": [
        {
            "ioc_value": "038112c489a65525aaa6c2ede6c33c2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-27 21:28:13",
            "last_seen_utc": "2026-06-29 01:23:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838693": [
        {
            "ioc_value": "8c00b490332ca6af591294e1b2ffd01e708c612f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-27 21:28:12",
            "last_seen_utc": "2026-06-29 01:23:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838694": [
        {
            "ioc_value": "2549dc1f259917a6179f726de0ed45e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-27 21:28:12",
            "last_seen_utc": "2026-06-29 01:23:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838695": [
        {
            "ioc_value": "737646392a7c882064e22ecb9fc0b2732399e44ced2f56d873e656d0035af288",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-27 21:28:12",
            "last_seen_utc": "2026-06-29 01:23:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838690": [
        {
            "ioc_value": "3eae959cc134d89dcfab4f8388569626e166be0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-27 21:28:11",
            "last_seen_utc": "2026-06-29 01:23:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838691": [
        {
            "ioc_value": "885e4c62d17993ccffbfd44a1c128ddf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-27 21:28:11",
            "last_seen_utc": "2026-06-29 01:23:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838692": [
        {
            "ioc_value": "feea6bd8a190f0820c19df24b870a205d5799a9c75ace8044542496650a91ef0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-27 21:28:11",
            "last_seen_utc": "2026-06-29 01:23:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838689": [
        {
            "ioc_value": "bac12c7b2bc08d4d552e4692bc1566d7d54efc67c3a1131628c491c23626d773",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-27 21:28:10",
            "last_seen_utc": "2026-06-29 01:23:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838686": [
        {
            "ioc_value": "f2cd38b6c081535971bc76d9aa3560ce3bf33e02986a430464a75e3261c4a8f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-27 21:28:09",
            "last_seen_utc": "2026-06-29 01:23:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838687": [
        {
            "ioc_value": "cc0ae92edb66b42397a1f91894c0e14d12c83454",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-27 21:28:09",
            "last_seen_utc": "2026-06-29 01:23:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838688": [
        {
            "ioc_value": "c0b5ba4fbb2d486362d4be79caecc2b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-27 21:28:09",
            "last_seen_utc": "2026-06-29 01:23:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838684": [
        {
            "ioc_value": "b10573574be99566629f6ca88ba82d0e7e2122a7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-27 21:28:08",
            "last_seen_utc": "2026-06-29 01:23:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838685": [
        {
            "ioc_value": "f269378bb7d1c7817fa6200a1198b9df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-27 21:28:08",
            "last_seen_utc": "2026-06-29 01:23:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838681": [
        {
            "ioc_value": "89eec27c0af96d4932891f02c0a7988b05526012",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-27 21:28:07",
            "last_seen_utc": "2026-06-29 01:23:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838682": [
        {
            "ioc_value": "52c76d9b7366f34a1fad3b5b0527e24f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-27 21:28:07",
            "last_seen_utc": "2026-06-29 01:23:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838683": [
        {
            "ioc_value": "abb0ddc5d6972b69a938f88cbc354dffbd14adcd13b8049e6654f51dd3f5836d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-27 21:28:07",
            "last_seen_utc": "2026-06-29 01:23:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838680": [
        {
            "ioc_value": "716612c11982500cca51970f822ddffb5a4b3aa84fda3cb30ffab6daa94f5248",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-27 21:28:06",
            "last_seen_utc": "2026-06-29 01:23:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838676": [
        {
            "ioc_value": "103.146.231.107:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 19:46:07",
            "last_seen_utc": "2026-08-28 08:09:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838675": [
        {
            "ioc_value": "85.137.249.185:8977",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:45:47",
            "last_seen_utc": "2026-07-30 16:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838674": [
        {
            "ioc_value": "80.211.129.141:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:45:43",
            "last_seen_utc": "2026-08-12 18:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838672": [
        {
            "ioc_value": "68.64.178.130:48951",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:45:40",
            "last_seen_utc": "2026-08-08 08:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838673": [
        {
            "ioc_value": "69.48.228.170:65531",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:45:40",
            "last_seen_utc": "2026-08-01 08:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838670": [
        {
            "ioc_value": "5.8.18.155:992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-27 19:45:33",
            "last_seen_utc": "2026-07-28 08:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838671": [
        {
            "ioc_value": "5.8.19.157:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:45:33",
            "last_seen_utc": "2026-07-31 18:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838669": [
        {
            "ioc_value": "5.206.224.226:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:45:32",
            "last_seen_utc": "2026-07-30 08:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838668": [
        {
            "ioc_value": "45.74.7.170:3305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:45:22",
            "last_seen_utc": "2026-08-14 08:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838666": [
        {
            "ioc_value": "45.74.7.165:8455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:45:21",
            "last_seen_utc": "2026-08-14 08:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838667": [
        {
            "ioc_value": "45.74.7.169:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:45:21",
            "last_seen_utc": "2026-08-15 08:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838665": [
        {
            "ioc_value": "45.141.234.47:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:45:17",
            "last_seen_utc": "2026-08-30 08:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838664": [
        {
            "ioc_value": "37.220.31.90:61135",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:45:09",
            "last_seen_utc": "2026-08-07 18:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838663": [
        {
            "ioc_value": "185.212.128.139:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-27 19:43:58",
            "last_seen_utc": "2026-08-22 18:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838662": [
        {
            "ioc_value": "178.83.121.60:48203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 19:43:49",
            "last_seen_utc": "2026-07-28 08:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838661": [
        {
            "ioc_value": "173.231.188.244:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:43:46",
            "last_seen_utc": "2026-07-31 18:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838660": [
        {
            "ioc_value": "155.94.163.75:8797",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 19:43:32",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838659": [
        {
            "ioc_value": "138.124.84.7:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-27 19:43:20",
            "last_seen_utc": "2026-09-01 02:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838657": [
        {
            "ioc_value": "107.174.142.104:6578",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 19:43:13",
            "last_seen_utc": "2026-08-01 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838658": [
        {
            "ioc_value": "107.174.142.104:7790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 19:43:13",
            "last_seen_utc": "2026-08-01 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838656": [
        {
            "ioc_value": "107.173.160.177:2850",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-27 19:43:12",
            "last_seen_utc": "2026-08-16 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838655": [
        {
            "ioc_value": "104.37.173.203:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:43:10",
            "last_seen_utc": "2026-07-28 08:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838654": [
        {
            "ioc_value": "103.11.41.20:2753",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:43:06",
            "last_seen_utc": "2026-07-28 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838653": [
        {
            "ioc_value": "103.11.41.10:49584",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 19:43:05",
            "last_seen_utc": "2026-07-28 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838652": [
        {
            "ioc_value": "101.245.74.162:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-27 19:43:02",
            "last_seen_utc": "2026-07-29 18:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838634": [
        {
            "ioc_value": "ccczqxl6.blackjackonlineplay83.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 17:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838633": [
        {
            "ioc_value": "154.86.119.228:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 17:27:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1838632": [
        {
            "ioc_value": "yigu360.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 16:55:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abus3reports"
        }
    ],
    "1838629": [
        {
            "ioc_value": "47.86.184.71:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 15:46:40",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838628": [
        {
            "ioc_value": "test.officeplustool.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 15:46:01",
            "last_seen_utc": "2026-09-01 02:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838623": [
        {
            "ioc_value": "hzks2llo.1xdownload2023.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 15:30:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838622": [
        {
            "ioc_value": "e.perspolis.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 14:22:03",
            "last_seen_utc": "2026-06-27 15:21:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838619": [
        {
            "ioc_value": "91.92.33.132:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-27 14:13:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fe566ca92d40914438c7ce3157a6a0936ac7be94e71e6c37b95ac84177511874/",
            "tags": "QatarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838618": [
        {
            "ioc_value": "176.121.50.1:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 14:10:57",
            "last_seen_utc": "2026-08-26 07:55:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838617": [
        {
            "ioc_value": "47.243.151.183:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 14:10:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838534": [
        {
            "ioc_value": "66800eefed4e4c7dae18fe4dfe388e5f0ef20159cf0c7188df6c1a1d88f63a03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 14:08:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "GiovanniProto"
        }
    ],
    "1838535": [
        {
            "ioc_value": "2eebecf7c504a215a51fb2876ec4f646b252fea92b43a6c5a811b8338f0ed133",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 14:08:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/2eebecf7c504a215a51fb2876ec4f646b252fea92b43a6c5a811b8338f0ed133",
            "tags": null,
            "anonymous": 0,
            "reporter": "GiovanniProto"
        }
    ],
    "1838537": [
        {
            "ioc_value": "6bdc600936975f49a706081d941b5de37f23586828a13aded77e015cf01cccc5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 14:08:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/6bdc600936975f49a706081d941b5de37f23586828a13aded77e015cf01cccc5",
            "tags": null,
            "anonymous": 0,
            "reporter": "GiovanniProto"
        }
    ],
    "1838538": [
        {
            "ioc_value": "f636f4b5522e2a1c341fd1064190fe714a2965b4432b0bfe57c05233a60f611f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 14:08:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/f636f4b5522e2a1c341fd1064190fe714a2965b4432b0bfe57c05233a60f611f",
            "tags": null,
            "anonymous": 0,
            "reporter": "GiovanniProto"
        }
    ],
    "1838590": [
        {
            "ioc_value": "comienzo.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-27 14:08:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1838591": [
        {
            "ioc_value": "guaricha.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-27 14:08:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1838592": [
        {
            "ioc_value": "178.16.52.10:207",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-27 14:08:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1838593": [
        {
            "ioc_value": "128.90.112.26:15831",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-27 14:08:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1838594": [
        {
            "ioc_value": "128.90.105.93:15831",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-27 14:08:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1838596": [
        {
            "ioc_value": "abusereports.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 14:08:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838604": [
        {
            "ioc_value": "http://23.94.145.194/82bea16070014e869235.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-27 14:08:28",
            "last_seen_utc": "2026-06-28 02:06:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,first,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838607": [
        {
            "ioc_value": "http://89.32.41.16/bins/pmips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 14:08:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/89.32.41.16",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838608": [
        {
            "ioc_value": "http://89.32.41.16/bins/pmpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 14:08:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/89.32.41.16",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838609": [
        {
            "ioc_value": "http://175.107.228.60:46088/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-27 14:08:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.228.60",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838611": [
        {
            "ioc_value": "37733e5966cf4129c79c419725fbc2f7bcdac446683d966107bb3065d959422f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 14:08:24",
            "last_seen_utc": "2026-08-25 00:20:17",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/89.32.41.16",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838610": [
        {
            "ioc_value": "3af414ef65da7494da9604e1a1dcf1a2a92234a4c8fd2fa11bb292970ea4282e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 14:08:23",
            "last_seen_utc": "2026-08-25 00:20:16",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/89.32.41.16",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838614": [
        {
            "ioc_value": "thkjhg.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 14:08:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "GiovanniProto"
        }
    ],
    "1838615": [
        {
            "ioc_value": "yfps3ls.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 14:08:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "GiovanniProto"
        }
    ],
    "1838616": [
        {
            "ioc_value": "209.25.141.24:1425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-27 13:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838612": [
        {
            "ioc_value": "tb4awyc7.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 12:41:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838598": [
        {
            "ioc_value": "103.11.41.20:9087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 09:43:07",
            "last_seen_utc": "2026-07-27 08:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838597": [
        {
            "ioc_value": "bcb7ukdo.tinyshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 09:34:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838595": [
        {
            "ioc_value": "144.31.236.240:27018",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 09:25:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838589": [
        {
            "ioc_value": "http://millersteelusa.com:8893",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-27 09:10:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/99fa87f8885cd8d4f0afb63b6c43c0f00d3cdd3edf535c1730641c8f919449b6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838568": [
        {
            "ioc_value": "ezbadvogados.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-27 08:48:25",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,FakeCloudflare",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838555": [
        {
            "ioc_value": "188.212.158.4:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-27 08:05:05",
            "last_seen_utc": "2026-08-14 08:44:32",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838532": [
        {
            "ioc_value": "8.152.212.104:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 07:05:05",
            "last_seen_utc": "2026-09-01 02:47:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838531": [
        {
            "ioc_value": "185.242.3.43:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:52:15",
            "last_seen_utc": "2026-07-22 08:01:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69805c2f081cd4bd6b43e991f380f7e8a70dcc4b4dcd6a7a62584d3400a300b4/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838530": [
        {
            "ioc_value": "http://185.194.175.132:8000/api/endpoint.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:42:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3c54bcae35db1c091af07cb1fee2040430b26b1c7f2d28a3b176e211ba43ea02/",
            "tags": "CoinMiner",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838529": [
        {
            "ioc_value": "198.37.119.51:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-27 06:40:07",
            "last_seen_utc": "2026-08-24 13:22:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15df91e37347dcb779f9d62f9a5655fc05a6834037dca4ff13fcc8dbe92f3453/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838528": [
        {
            "ioc_value": "icro-soft.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-27 06:34:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15df91e37347dcb779f9d62f9a5655fc05a6834037dca4ff13fcc8dbe92f3453/",
            "tags": "OverlordRAT,RA",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838527": [
        {
            "ioc_value": "hoteljune2026.blogspot.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-27 06:33:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15df91e37347dcb779f9d62f9a5655fc05a6834037dca4ff13fcc8dbe92f3453/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838526": [
        {
            "ioc_value": "162.141.92.192:14123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.moobot",
            "malware_alias": null,
            "malware_printable": "MooBot",
            "first_seen_utc": "2026-06-27 06:31:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/992c26a5cc1ca754400a33b9973acd1c24a26997c0a19d1e2a2feaa62586f074/",
            "tags": "Moobot",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838525": [
        {
            "ioc_value": "bukuru.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 06:25:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e61e14aaba209be7bfed6b4ef08d1de630fd0b2f05c12eeb3f8906946522e7b9/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838461": [
        {
            "ioc_value": "skillboxultra.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-27 06:24:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838464": [
        {
            "ioc_value": "129.212.233.8:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-27 06:24:38",
            "last_seen_utc": "2026-06-30 02:15:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838469": [
        {
            "ioc_value": "sailboaterists.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838470": [
        {
            "ioc_value": "45.11.229.45:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-27 06:24:37",
            "last_seen_utc": "2026-06-27 00:02:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838471": [
        {
            "ioc_value": "bins.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=59.126.16.66",
            "tags": "IoT,Mirai,Telnet",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1838472": [
        {
            "ioc_value": "http://bins.oceanic-node.su/wget.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=59.126.16.66",
            "tags": "IoT,Mirai,Telnet",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1838473": [
        {
            "ioc_value": "15.204.234.74:23",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=15.204.234.74",
            "tags": "IoT,Mirai,telnet",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1838476": [
        {
            "ioc_value": "http://72.255.33.12:55798/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-27 06:24:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.33.12",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838474": [
        {
            "ioc_value": "147.182.140.2:9035",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-27 06:24:33",
            "last_seen_utc": "2026-07-02 09:06:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838477": [
        {
            "ioc_value": "http://103.31.100.79:57731/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-27 06:24:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.31.100.79",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838478": [
        {
            "ioc_value": "47.108.60.27:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 06:24:31",
            "last_seen_utc": "2026-08-28 08:09:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "37963,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1838487": [
        {
            "ioc_value": "45.192.97.47:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.bashlite",
            "malware_alias": "gayfgt,Gafgyt,qbot,torlus,lizkebab",
            "malware_printable": "Bashlite",
            "first_seen_utc": "2026-06-27 06:24:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Gafgyt",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1838489": [
        {
            "ioc_value": "147.182.140.2:34567",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-27 06:24:30",
            "last_seen_utc": "2026-07-02 09:41:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838506": [
        {
            "ioc_value": "91.108.243.146:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838507": [
        {
            "ioc_value": "91.108.243.146:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838508": [
        {
            "ioc_value": "91.108.243.146:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838509": [
        {
            "ioc_value": "46.8.236.82:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838510": [
        {
            "ioc_value": "46.8.236.82:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838511": [
        {
            "ioc_value": "46.8.236.82:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838514": [
        {
            "ioc_value": "178.16.52.104:28931",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:25",
            "last_seen_utc": "2026-07-27 10:06:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838516": [
        {
            "ioc_value": "mdsearch.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-27 06:24:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838517": [
        {
            "ioc_value": "178.16.52.104:18234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-27 06:24:24",
            "last_seen_utc": "2026-07-27 10:06:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1838518": [
        {
            "ioc_value": "madproxys.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-27 06:24:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838161": [
        {
            "ioc_value": "192.162.199.186:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-27 06:24:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/69de2958-b593-4d93-802b-6b2601a2f93b",
            "tags": "loader,stealc,stealer",
            "anonymous": 0,
            "reporter": "gh0styippe"
        }
    ],
    "1838162": [
        {
            "ioc_value": "196.251.107.186:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.solaris_loader",
            "malware_alias": null,
            "malware_printable": "SolarisLoader",
            "first_seen_utc": "2026-06-27 06:24:16",
            "last_seen_utc": "2026-08-07 23:48:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/69de2958-b593-4d93-802b-6b2601a2f93b",
            "tags": "botnet,injection,solaris",
            "anonymous": 0,
            "reporter": "gh0styippe"
        }
    ],
    "1838166": [
        {
            "ioc_value": "olddenver.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838163": [
        {
            "ioc_value": "sdnstatistic.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholigh",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838167": [
        {
            "ioc_value": "http://36.255.40.171:34374/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-27 06:24:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.40.171",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838176": [
        {
            "ioc_value": "147.182.140.2:9034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-27 06:24:12",
            "last_seen_utc": "2026-07-02 12:55:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838184": [
        {
            "ioc_value": "275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager,steganography",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838185": [
        {
            "ioc_value": "1b9e167757acd83c27a58de454cdc67af447c16422e8568ac08491de01ca7caa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager,steganography",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838186": [
        {
            "ioc_value": "39fa0fa694213d27c09ff2da27ae8a08866a36edece31e0c14312a4d42eb5fb4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager,steganography",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838187": [
        {
            "ioc_value": "50d9c3519a2fb107671c7d0151aa2ea2e15143d732821ec381732876e487034d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager,steganography",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838188": [
        {
            "ioc_value": "49281a9d741515d1ece2051fc1c5f7fac2c54c73f5e96c32a70d6729cdb94e4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager,steganography",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838189": [
        {
            "ioc_value": "http://172.245.25.134:8787/collect",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838190": [
        {
            "ioc_value": "172.245.25.134:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838191": [
        {
            "ioc_value": "africadasi.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-27 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/275e5b085534f64313b50cbdcb08ecd59c57d21c96bb937f140ee92a3d27f792",
            "tags": "clickfix,netsupport,netsupportmanager,steganography",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1838501": [
        {
            "ioc_value": "d42e4181eb28a34149d95e716d63e9dcbe07c9f93f630bc7f6f19afda19bf3fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crypto_ransomeware",
            "malware_alias": null,
            "malware_printable": "CryptoRansomeware",
            "first_seen_utc": "2026-06-27 06:24:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://s.threatbook.com/report/file/d42e4181eb28a34149d95e716d63e9dcbe07c9f93f630bc7f6f19afda19bf3fc",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838502": [
        {
            "ioc_value": "a7aa93ad69ee4641c9346eea3456415dbb00be679940d5070db0587894ede987",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crypto_ransomeware",
            "malware_alias": null,
            "malware_printable": "CryptoRansomeware",
            "first_seen_utc": "2026-06-27 06:24:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://s.threatbook.com/report/file/a7aa93ad69ee4641c9346eea3456415dbb00be679940d5070db0587894ede987",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838503": [
        {
            "ioc_value": "cb1dd59ac326416b84a5c28ced438a25518d4b5fadfbb9c979ed319db844cda7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crypto_ransomeware",
            "malware_alias": null,
            "malware_printable": "CryptoRansomeware",
            "first_seen_utc": "2026-06-27 06:24:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838504": [
        {
            "ioc_value": "0013d3a2143469022ce41148f0df1898a5c7f122bc5d2842139d47054178f83c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.uacme",
            "malware_alias": "Akagi",
            "malware_printable": "UACMe",
            "first_seen_utc": "2026-06-27 06:24:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://s.threatbook.com/report/file/0013d3a2143469022ce41148f0df1898a5c7f122bc5d2842139d47054178f83c",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838505": [
        {
            "ioc_value": "3142e7ca3dbe7756b792ba425bf4e3c3b856c430647a8c51126a38993f916451",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crypto_ransomeware",
            "malware_alias": null,
            "malware_printable": "CryptoRansomeware",
            "first_seen_utc": "2026-06-27 06:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://s.threatbook.com/report/file/3142e7ca3dbe7756b792ba425bf4e3c3b856c430647a8c51126a38993f916451",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838521": [
        {
            "ioc_value": "closegate21.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-27 06:23:57",
            "last_seen_utc": "2026-08-28 11:40:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gate",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838522": [
        {
            "ioc_value": "http://110.36.28.183:54729/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-27 06:23:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.36.28.183",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838523": [
        {
            "ioc_value": "http://60.23.235.10:40564/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-27 06:23:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/60.23.235.10",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838524": [
        {
            "ioc_value": "107.172.238.19:4550",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 06:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838519": [
        {
            "ioc_value": "62.0.120.51:82",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-27 06:05:06",
            "last_seen_utc": "2026-08-28 08:08:51",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838515": [
        {
            "ioc_value": "85xhbv2q.shartcart.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 05:33:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838500": [
        {
            "ioc_value": "8.217.130.185:5678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-27 04:10:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/59afd76ba4c60df30d59b1cd3db92f203040ed0d4e84279434bd702c919e9273/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838497": [
        {
            "ioc_value": "8.217.130.185:5677",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-27 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838496": [
        {
            "ioc_value": "172.111.169.70:1771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-27 04:00:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838495": [
        {
            "ioc_value": "samplerace.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-27 03:50:54",
            "last_seen_utc": "2026-07-27 08:42:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838494": [
        {
            "ioc_value": "7pkztjkc.1xbetpartnersiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 03:43:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838492": [
        {
            "ioc_value": "20.69.167.4:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-27 03:05:08",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838488": [
        {
            "ioc_value": "tszebpwz.1xprobet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 02:33:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838483": [
        {
            "ioc_value": "c2uwzjf8.blackjackonlineplay83.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-27 01:32:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838482": [
        {
            "ioc_value": "91.213.186.177:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-27 01:05:05",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838465": [
        {
            "ioc_value": "6b4ki3sp.abt90kade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 21:30:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838460": [
        {
            "ioc_value": "0be31a0c4f530c88f1cdf8491827fa39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:23:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838458": [
        {
            "ioc_value": "9ee6705e84b232fa40fa8911064b68755615c4c8e26a1b9bb15b7e3fc91b646b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:23:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838459": [
        {
            "ioc_value": "cd0f34ec571a6b0ec988a00e4bb9a63425869ccd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:23:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838455": [
        {
            "ioc_value": "9fdfcf7a50597fe85398f2a3520919f8c309f087c433a509ac0f730d363cf5ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838456": [
        {
            "ioc_value": "a9e0b176984c9194f40e70e093527a46acd40a29",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838457": [
        {
            "ioc_value": "5d6ee171b5847a25c2d068031faef9cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:23:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838452": [
        {
            "ioc_value": "1510cc532b57e79000e7ce51b86809582f11300e118d4769d256c31de753dbad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 20:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838453": [
        {
            "ioc_value": "81611a9f9cd9e5eddba6b64105b11936faf5b843",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 20:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838454": [
        {
            "ioc_value": "61fd58a78e2bb56fe2a7e46a561cb79b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 20:23:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838449": [
        {
            "ioc_value": "b0e94f6295e469e77f16759ad1a117e4f5c120455032f375b38660f050bbf9ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-26 20:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838450": [
        {
            "ioc_value": "84f81b908bd93e017c25cebb74b970cc42c23287",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-26 20:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838451": [
        {
            "ioc_value": "4b68c75c72823af59074f1dd0d07b1f5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-26 20:23:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838446": [
        {
            "ioc_value": "51ce23480bb91da183356efa8a0003d7cba21c18847165abc435b3e7536d721a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-26 20:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838447": [
        {
            "ioc_value": "b54e2388437298c34d62431eea04ac9852fb18f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-26 20:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838448": [
        {
            "ioc_value": "7a5224de6406df80ee440ea593e4f526",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-26 20:23:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838443": [
        {
            "ioc_value": "d0d8d45ef06d0d9ee5f3e0b01885c965f8541d2ad0cba3ca401aca56bb0258e9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 20:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838444": [
        {
            "ioc_value": "ccad36f947b504ab0d3fa44db56416bbeba001fe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 20:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838445": [
        {
            "ioc_value": "5eca7be606723c470d02afbb53188dc2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 20:23:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838440": [
        {
            "ioc_value": "f2b4f9ac25b35389294ade3fcfe8a8bb5dc1f0e283c5be145a28bd785e993906",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-26 20:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838441": [
        {
            "ioc_value": "c18fdfd1a053a9c408fb8ae563ea55684be5d4ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-26 20:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838442": [
        {
            "ioc_value": "79c3344864afd83d6cfa95aa816e3286",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-26 20:23:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838437": [
        {
            "ioc_value": "e534d9032141555d21be8b23f30d8f6dd156d61e986bbeed019d9316973b1ba9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 20:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838438": [
        {
            "ioc_value": "139c7a9f824bcf6db4407f38413ef817ebef64a8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 20:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838439": [
        {
            "ioc_value": "1f65544978b8ea0e745e573b8ee9684b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 20:23:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838434": [
        {
            "ioc_value": "c8d5ded9c78fa5cd8ea2ec956064e7aab3e04fab95e9b2c4611f9370c0b28323",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 20:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838435": [
        {
            "ioc_value": "8e575b592e414923db94865039e5b79266314b52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 20:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838436": [
        {
            "ioc_value": "6c9a2003f966064e96244f362628065b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 20:23:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838431": [
        {
            "ioc_value": "b6acdce1f0bf857ab01659840e683c2b9c0a6d92d40ce20f6853123e2a08b8ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838432": [
        {
            "ioc_value": "be456fe6ab331084ed9e22e935b8b10bbc086dfc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838433": [
        {
            "ioc_value": "98df75fde3c6ce76573002cba98f8279",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838427": [
        {
            "ioc_value": "8cd1ed35cc813729823da0630d57808d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838428": [
        {
            "ioc_value": "ba394c1dc1c059a38ee415ef860286b425af60cc76fc74c768c6fa146cb6cc94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838429": [
        {
            "ioc_value": "acb9d85117fe4483d99e089c272a00ff846f0895",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838430": [
        {
            "ioc_value": "c524874b75254cb431a7d9ef4980018c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838424": [
        {
            "ioc_value": "06acc48e71d65bbfe3806548a516c5b7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838425": [
        {
            "ioc_value": "45c93c7aa3c228704da86609c949a466c49ddb25d3b9647283f9b5ad77b88df5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838426": [
        {
            "ioc_value": "643fa77d5b6eef7fc5050abcd7b3b69a97908109",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838421": [
        {
            "ioc_value": "ede8ec7dd17d6a4337e9480f32ab3556",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838422": [
        {
            "ioc_value": "95752f1cd35d41c1b16a36cde5fa89773aed1705730ff3b2a40078c1583a098c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838423": [
        {
            "ioc_value": "ac00c922bd38503e0e6598ee30d5c7182d2ef544",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838418": [
        {
            "ioc_value": "6349de7a2dde48ba850d2b9fbae1703b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838419": [
        {
            "ioc_value": "349a1d1f52f1efb7ca65a9f18c4b5f5a5ac6cb8fea801053d6ee3acd3f8e2b2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838420": [
        {
            "ioc_value": "b0047f0f91b11915cde2d30dacbce3da53d07282",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838416": [
        {
            "ioc_value": "f3deff6d564ca838ad782a3a2b77c5bc510160c104f50b2016b1f10d90ad28b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838417": [
        {
            "ioc_value": "0d45c202e18303b12ee50df797f1bc7babbd2500",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838414": [
        {
            "ioc_value": "23873ddbc77bb57622a6268e615fad409c94a26d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838415": [
        {
            "ioc_value": "16ed0d418245c47341c71db17b7b92f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838413": [
        {
            "ioc_value": "a493e6d90938bbe5efe425f644c4041d0a0c74404c8b73f489d33d328d1501ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838410": [
        {
            "ioc_value": "e09d248d6bdb9485c97ac15eb33c7bf6ae991d1c3a95f5c51e7bf1833639b96c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838411": [
        {
            "ioc_value": "9c29b28dfbc33d42b1050215094260023de75fbc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838412": [
        {
            "ioc_value": "af206791419453501fe13d086252f629",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838408": [
        {
            "ioc_value": "38da022cf8af1169cea91fb86fa7ab5ca2e512f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838409": [
        {
            "ioc_value": "e407d70eb9f90af6103fc71519a0d454",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:23:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838406": [
        {
            "ioc_value": "a65d0888e130eac4d2f7e160f52df4c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838407": [
        {
            "ioc_value": "893ea837583c9ad2775a5f907b817cb411dfd12057846ad09360d38c59edb39e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838403": [
        {
            "ioc_value": "254f91bb40539160b6e5cf91d17f4c22",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838404": [
        {
            "ioc_value": "88c9d78237aef1714c18d8c9a02b53f3c22165171071bae7c8bea99dc875c3f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838405": [
        {
            "ioc_value": "6288f79ca523a8d8897356fbd357daf467116d8e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838401": [
        {
            "ioc_value": "f25762e88d91d3a353ad95cfd958f411e9979626d101f99cd8b5a09da8004ca3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838402": [
        {
            "ioc_value": "c059daa4452164f35b321bb303fc53fbd92ea933",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838398": [
        {
            "ioc_value": "5d6e64c2e229f0c18bedf78483cf6560539a87a31fec009a205cd369fcc7ddb6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838399": [
        {
            "ioc_value": "cf580e95d3f29da1f273166bb2b341105dcf163b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838400": [
        {
            "ioc_value": "f6d811e5e564b528eadd6bd2440d4ff4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838395": [
        {
            "ioc_value": "b9a711023cde48ebef1937edd6dfad98382fffca3cd538691a3933921f987d2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838396": [
        {
            "ioc_value": "f7892b8553a93de8679228ecf1ca6f0de7855b46",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838397": [
        {
            "ioc_value": "38261bfbfa59d9af40a0686529dc2262",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838392": [
        {
            "ioc_value": "2f5413d9e5f3f2a1da5dba06b64a362f5a89584e1c4f2a164711d6d63cbe7648",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838393": [
        {
            "ioc_value": "7bd82372c2cd370aa2cfea08fea735f5766f1bc6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838394": [
        {
            "ioc_value": "95f7327a2dd6ad35a7363ac72c0a3472",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838389": [
        {
            "ioc_value": "9aef1f496e5c3cc1ba187fdeb1865b2cb112e71316062913be88e8eba219c417",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838390": [
        {
            "ioc_value": "bc285df2b57842713075ce1ffc30823146a4a028",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838391": [
        {
            "ioc_value": "d17b005f6c28c7875294028f7a8595d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838386": [
        {
            "ioc_value": "a0f009b91a76d602d781aa9fff9522289769513b5c9ec10ece9f4891aafc6684",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838387": [
        {
            "ioc_value": "8e8dead8cbc6a79939760f7b0915e139effa4b2f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838388": [
        {
            "ioc_value": "bd760e634620513016f5d3db47f4eda9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838383": [
        {
            "ioc_value": "cd861121f29f14fb75db0ce73b979b86fe4eb3c019cd0bd83683786f9af26dd6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838384": [
        {
            "ioc_value": "d68cd664051e64aea45b844bdcc38af3460d1359",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838385": [
        {
            "ioc_value": "0c84fe9285b5eaa476a7646ae02c87b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838380": [
        {
            "ioc_value": "a59521e3eb851bf86fff48634c3c1ddd573ba3ce123a46a48f1bf08617c00e34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838381": [
        {
            "ioc_value": "5eb29963546c2ac77bcbe8875745f3c6bae07266",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838382": [
        {
            "ioc_value": "cb624c395ca5cd9c17dce1e147c3b191",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838377": [
        {
            "ioc_value": "af86620ba519e190b2eb9175d0cb8b9dcb46ae610282164d0596c0e76f0e37b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838378": [
        {
            "ioc_value": "8d7de03085033264eeace68a19c4a031069e87b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838379": [
        {
            "ioc_value": "d0be04a50f59108082b5494a11edae7b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838374": [
        {
            "ioc_value": "f471c961f7d4c7ebee70b24648385673fb6e8719554d0b85d9ca614138b9f751",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838375": [
        {
            "ioc_value": "0e3343c4231dd879517d55b7dd8996eec688b8f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838376": [
        {
            "ioc_value": "1dd0e8fd632dd232d9c61eb6fa246703",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838371": [
        {
            "ioc_value": "5c59483ca6ec22fa2181ea5c15de7fa36d4d69e80ceaf92230d2d85768b96624",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838372": [
        {
            "ioc_value": "1455004b2657a35ff4e7d9118109b33260567042",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838373": [
        {
            "ioc_value": "4b248d55ae517ac46c0d2ea215fba348",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838368": [
        {
            "ioc_value": "990ed1ce451e3da0d02b708adfffd69d53a076309ae2a1f3a56e55d79322e331",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838369": [
        {
            "ioc_value": "d9ecbceabd7700fb7efbad7ba96299762f83c4ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838370": [
        {
            "ioc_value": "10dc559182458c1ec10f21c31bbbdccf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838365": [
        {
            "ioc_value": "137f184f33a0b694139073c3863291667202e58f80078c180de6e2be9c2cc70c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838366": [
        {
            "ioc_value": "35dc8c856816cdd20ad2b81335f194076b3261ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838367": [
        {
            "ioc_value": "3f5b7e07efee987cd75000a6a413fedc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838362": [
        {
            "ioc_value": "88abe5b4abf3d7449425adbd40e6e4ca5c219d91b22556d5dc37fedb3f69fda2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838363": [
        {
            "ioc_value": "1b0622a874f848caff03627ee3007b631181d03c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838364": [
        {
            "ioc_value": "fd0d176de0f31f66122db5f06381102a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838360": [
        {
            "ioc_value": "e3b5c94d66d0aa05f9f3168cdac1ea44055529c3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838361": [
        {
            "ioc_value": "2f6758bd9dd843fe2b4337d8fca758d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838357": [
        {
            "ioc_value": "dbc9d5cbd1708da32f8d632e93efd93a45856560",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838358": [
        {
            "ioc_value": "caefe47322a5aa05ddac7cb67aa274ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838359": [
        {
            "ioc_value": "b00956d3ba0a6c2f0219cf5a062996a1e9ace8b6926f3735a417896a719bb717",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838354": [
        {
            "ioc_value": "ed38c8f779fb57139a10e931662482c9c579f078",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838355": [
        {
            "ioc_value": "c50df4af20305dde4ed6a420bff2ebc8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838356": [
        {
            "ioc_value": "2f48b8c5b7a6033bad84127f011b9780ddcd2f2bb084846bdf4a06e719f1e719",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838351": [
        {
            "ioc_value": "b41892263642df6f4dae10d8116d7e8da39ddeb8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838352": [
        {
            "ioc_value": "f22525696e2cda866516145e63a625dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838353": [
        {
            "ioc_value": "5f5747a210165a60979a95841a602c2758947fb47e70a96a31949b71665a7645",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838348": [
        {
            "ioc_value": "f8baad3bc189ab36faeea3bb8f68e2a3e63aabaf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838349": [
        {
            "ioc_value": "d881ff2d496d18b8dabfff2a0cbef79e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838350": [
        {
            "ioc_value": "b1db4568ac046cca55619fc4f488a3f9c3b8b8071e0d5dc74530923750b9bf7d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838346": [
        {
            "ioc_value": "1264576eb9649b064a6c9fe34923fa16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838347": [
        {
            "ioc_value": "afc49e31e6ae1cb3b6d6e2b3745048dc9935fa5cbac24b31f47a94837e1fe2dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838343": [
        {
            "ioc_value": "7ebfeb5782fcf974362581c0a1533445",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838344": [
        {
            "ioc_value": "aa1568998c531266e0dd0f0ec26e623d6271e8441356b8267342fb64c73b9711",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838345": [
        {
            "ioc_value": "83609a69e0057093f1f44065266fde68bf911cb6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838340": [
        {
            "ioc_value": "e2847541c512e86bc6514c0bb3677590",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838341": [
        {
            "ioc_value": "45c6158d789c92df57cec8d280c88604d06de0d4119c49e5cd500542a0ad60b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838342": [
        {
            "ioc_value": "45752bdbc88e3f281c9e6822b7e7f3b371af7742",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838337": [
        {
            "ioc_value": "caeddfa1b0347b727632ce6275652c1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838338": [
        {
            "ioc_value": "13c520eb3e5c494b064ec61139acee1a90555bf56d0a488fcc065b19b7456397",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838339": [
        {
            "ioc_value": "dab37328fdbeba23962ad02a24482163e899f7a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838334": [
        {
            "ioc_value": "82a228c7b33477075bdde3eab3c5c14d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838335": [
        {
            "ioc_value": "565500125bdfccacdee564cac4cfef786c2f361a75efcff0783c37368e01af72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838336": [
        {
            "ioc_value": "da0dc5e7d41eb8308b06c1430035de228e759619",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838331": [
        {
            "ioc_value": "f8dd091e55b5cce125ded11ba441b287",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838332": [
        {
            "ioc_value": "f4ebf635cdfdd17e0f252246dd13c113e10b423fccd1250fd8fb8b26abbff90e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838333": [
        {
            "ioc_value": "a8c3098075bad3210fa0929536bd2804efc8c8f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838329": [
        {
            "ioc_value": "a2cae636e32a071fc687371786f7072072ebe4dedcef1dbda9890c8bf03b9868",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838330": [
        {
            "ioc_value": "023ea1d21263c20b75b51eca8b6e19fbb11f9994",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838326": [
        {
            "ioc_value": "59b2c511fb6d62be0df6ba272c4697fca9ee92d38e55b5a937792f6f3de191a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838327": [
        {
            "ioc_value": "37e8ddc66cf923c42658f18c35590bd85d901ded",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838328": [
        {
            "ioc_value": "a5e250adea3405bc5ef99ff0162333fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838323": [
        {
            "ioc_value": "4989f797197cdda8a4c2a36b19a4d3d9142543f3d56c71c73f7be584918ee0ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838324": [
        {
            "ioc_value": "3a7bed880a5420cd10fe2787e06d7d842c778e08",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838325": [
        {
            "ioc_value": "6d8fcf33be0cd5f4ead399412271c8a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838320": [
        {
            "ioc_value": "b8117b16485f80a23007d8c527f7ee3204a3b5c7623e7c782dbda03899318916",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838321": [
        {
            "ioc_value": "31460a02e4fbab7cfb582600b5a5dff1e7e7cf2a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838322": [
        {
            "ioc_value": "0bd221b54d468936dbabb9fbcae5dbe4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838317": [
        {
            "ioc_value": "42c6a1581f9ac7134dcd392b13d3c7fad3c75fef3473ee68ffc6ae8d2e086fcb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838318": [
        {
            "ioc_value": "a4eae2b207bfc9257728ccf4560b567b843afa38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838319": [
        {
            "ioc_value": "444b819900e286ff196511d8cc4c4458",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838314": [
        {
            "ioc_value": "8da0c79f118e909fcfcb9b041dfa584d3687a16b7e197b30164fd4a64100b9cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838315": [
        {
            "ioc_value": "a11560e1adb452bc631eaf498891abbc494919e3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838316": [
        {
            "ioc_value": "8a543dd478ed8fa843fdc57a3da8075e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838311": [
        {
            "ioc_value": "96d8ed136e291fcb896b5742307e3ddb6636a22d4492665ecd8fa3542c892ebe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838312": [
        {
            "ioc_value": "15a02d56d3f76c5ce92103ea12b45c4b682cec6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838313": [
        {
            "ioc_value": "39d65662043cedd60aac868773c2c630",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838308": [
        {
            "ioc_value": "4f9f2df05d605116324d0d4575debe7d2238d882065f110c2aaf373d6696f74f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838309": [
        {
            "ioc_value": "e087ad88510644a5833558479ce2288f3b2c6cb7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838310": [
        {
            "ioc_value": "7fc39c5f95187eacf49c5bb111344df1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838305": [
        {
            "ioc_value": "15ad8cf25718fcc8e20cb7f446f284cfb83c09632273487c9ccda77f295dd0fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838306": [
        {
            "ioc_value": "c4ec56559787496634d637b447bdeff5a38fcaee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838307": [
        {
            "ioc_value": "2b30f61bc9c5590780296c198d53da1f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838301": [
        {
            "ioc_value": "2044f4c2d285ecd05327e826d669a1ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838302": [
        {
            "ioc_value": "7bc03b5dc106037cead7d885cfdcd7ae485d2fcdc02e457b220687b28754b007",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838303": [
        {
            "ioc_value": "db87709ae289c246a58f71308956f037e0fb904c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838304": [
        {
            "ioc_value": "44615fb0e87e5fe90052e5d48c2ba35c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838298": [
        {
            "ioc_value": "1c2e3acf98bef526aa633a7245eef3e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838299": [
        {
            "ioc_value": "bc6e19c760e652670a81ea3d099305d171111a6c9a910792b57f2aaaf36105c1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838300": [
        {
            "ioc_value": "42bc7d0aab96389f1aacb1e49958b55cc775c7c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838295": [
        {
            "ioc_value": "5b356e439cc173fc59acb80072432154",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838296": [
        {
            "ioc_value": "e8fc72b7fd7a2f5736e4c076f08753e5a9eb65d76571883a6466b764d68b3b7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838297": [
        {
            "ioc_value": "78208a0c779e8ebffe9fd860106c263fdcd484e5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838292": [
        {
            "ioc_value": "260657f419e41d92e676a81f660b9403",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838293": [
        {
            "ioc_value": "6d9895fc54df40b3823deb7ffaf83754f00ce9085ce7788b735a9d18c4be7442",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838294": [
        {
            "ioc_value": "e5048317d58f489488c62eaaf0c42ecbb31062a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838290": [
        {
            "ioc_value": "96627dbbb6130d1842b5244f4ca8fbbabee67982d03d6bb05ff0e53a3fbd7ad9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838291": [
        {
            "ioc_value": "7d4c270997349f9a8030217f888a9b901bd92f29",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838288": [
        {
            "ioc_value": "bbd5bfce055e5d608b4073c755086e2acfada2b0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838289": [
        {
            "ioc_value": "8f2c3c4321f23e146343c09cc7101391",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838286": [
        {
            "ioc_value": "46c5fedb9cf3b4b7c83b97843a7d00ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838287": [
        {
            "ioc_value": "30c6549cbe425b9b1ea6d6613ece63c72546738b06da1f678385756b806a825b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838283": [
        {
            "ioc_value": "b9c0227f06a438fcb658e96c7b9f3f2d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838284": [
        {
            "ioc_value": "df19a218334f4c54bedf4b8d9636b05f42ddad96ac0633207aede90990da81a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838285": [
        {
            "ioc_value": "50f348a63e65897a1f28cc5d41558832fcf2bed4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838281": [
        {
            "ioc_value": "24afc5bc2d31311861f5d64e776f2524cada58839b07713026e1e751f0919e96",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838282": [
        {
            "ioc_value": "b3047f02a81ba92ba555b40a4ad440cb6c3cb630",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838278": [
        {
            "ioc_value": "639a967478596859c4f728c7e9683dbd76de1120bc17ef1dc33a2e3e613bd7e7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838279": [
        {
            "ioc_value": "2bedbd69f4208849df3131e053bfe2806bdf5101",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838280": [
        {
            "ioc_value": "4aa2ec181bfe0f1203f864b02479f378",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838275": [
        {
            "ioc_value": "03418b5196affd9519c6eef53f4e0092fab19ac2f9da6ff59e4d0180a40b1c7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838276": [
        {
            "ioc_value": "46fb7ea0e7018fc26168c763bf43d683bc89f3ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838277": [
        {
            "ioc_value": "99809c96a288be22824d5fccbda95ec2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838272": [
        {
            "ioc_value": "5c216d28d26f5486f4e57104378134ec54564c23f312de17b6c3699bb8afc5c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838273": [
        {
            "ioc_value": "456352313684b55dccc544cf7c1b34ef28c877d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838274": [
        {
            "ioc_value": "4108abf102718acbb7fd311e85254a3c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838269": [
        {
            "ioc_value": "e12ced95e4aaec4ed32823d071236a04bdb9fb04c60fcbfcfa4eb8488f14d938",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838270": [
        {
            "ioc_value": "89f767809c3856706fb02de8eb55829405281504",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838271": [
        {
            "ioc_value": "9e264537de2b12881f8b51f624a48d93",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838266": [
        {
            "ioc_value": "c37542c9a47f215a2e13e99878bbae1a87f65d2239848d3ac0fac7371b9c1114",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838267": [
        {
            "ioc_value": "1996b34e3424885bda52145418c14be6273f8be1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838268": [
        {
            "ioc_value": "419eddfb2f3808f2de24083e3d2453c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838263": [
        {
            "ioc_value": "4de08ef8c99d7a83d9013587801a190dfdb6033593a24e7a1265db7cef617c1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838264": [
        {
            "ioc_value": "3e908361f4ba6061499f39823e790af9fb322bbe",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838265": [
        {
            "ioc_value": "a6c1720f3024ce8bae45b493e54c6c85",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838260": [
        {
            "ioc_value": "c54e31892d9b39a99472105b17cbbae579c4d2b6affda2dfc79e00628c940592",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838261": [
        {
            "ioc_value": "0eb91dfaa265da98636badbff3d8f55485947a9d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838262": [
        {
            "ioc_value": "270b0faa31df55806d6fe4090eb68439",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838257": [
        {
            "ioc_value": "5dd680fe24cca11f4b082a57d44c8ab03bd4d11ef338ca348d8a2863786dbdc4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838258": [
        {
            "ioc_value": "04e8683cb31804e309d83b3137219149ee78e0cd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838259": [
        {
            "ioc_value": "ffd07b98c369a9b381e5e84c147dafd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838254": [
        {
            "ioc_value": "53d0f41053bead4d050c6de1dbf0f11d82c847d8b22cc489dbbb58a82cecfdf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838255": [
        {
            "ioc_value": "25e7a1336d22162d5259896d4d499b2f400d0a39",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838256": [
        {
            "ioc_value": "0919e23941fc3253f600fd2db4f47eda",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838251": [
        {
            "ioc_value": "25a8eb0db919417573b58dbffb7cd007ceffb808cf21d6cbe82bad80e07f9472",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838252": [
        {
            "ioc_value": "c839d45e1c603e33eb4637005f2f6951c42d53c9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838253": [
        {
            "ioc_value": "62ae160c7ed83b5a3941c4bf1b6175b2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838248": [
        {
            "ioc_value": "3ffb231b8bdf8f56bc6d2e378ac0c37bad91cabded0d95a732855651e936e12c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838249": [
        {
            "ioc_value": "d667abbdb29226439ecd6d3534d5c542aee167f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838250": [
        {
            "ioc_value": "831fe85e5e12493e8fbb6728944190b9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838244": [
        {
            "ioc_value": "894291fe7bc78e1eb8d19d0d79511445",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838245": [
        {
            "ioc_value": "3c8e0dbb19cfdf11cb4055e62cca3037bc659a25eba9b9fcfd440563053eaf83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838246": [
        {
            "ioc_value": "e7920347c5eb5ed342858d10c75d1e2132547f96",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838247": [
        {
            "ioc_value": "a81286deb2b5c60f5a68558e74428b9a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838243": [
        {
            "ioc_value": "4c8bcc432bd7bad7d3ad1ca8e1e4109f79cc02f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838241": [
        {
            "ioc_value": "7a933ecb05c9a0f96e97702573e5bc69",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838242": [
        {
            "ioc_value": "9c1ec8c3d134806ed5cb3dcca895a9d0ccb6423657974199a51935eb73b077b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838239": [
        {
            "ioc_value": "f10d37857ced0fb54e7dd54d06b1349e6927764db788976424f9bae936bf3f0e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838240": [
        {
            "ioc_value": "3e475929a60a68262f656adf2aa40135c8e57e21",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:22:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838236": [
        {
            "ioc_value": "07ff9393c8dfffd7d630ab83682e88118bbd75fff8d6804a1ee45b68c2d5b483",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838237": [
        {
            "ioc_value": "6c268f18a0e9dcc7b3d9b83a2821bbbb38fa5703",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838238": [
        {
            "ioc_value": "72899882c6cb903c51d2f8f99d8e0d3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838233": [
        {
            "ioc_value": "2583bde597de433a2cc59c1f538d6d691fb84aaa82d83aee8625090a20a05d26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838234": [
        {
            "ioc_value": "c907db86aa5318b2ec9da9b07315413cfb500835",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838235": [
        {
            "ioc_value": "7ab73b37f2b756a4e49d7a2e77920d06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838230": [
        {
            "ioc_value": "2ba8395708412d5c31c1c56e6522b67040f807840948e544f5345e07e312d74f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838231": [
        {
            "ioc_value": "ae9708c11cf0b9d9c5343350e68247a4f8484eb6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838232": [
        {
            "ioc_value": "59484d2abfceb3dcd75485e1b9d85035",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838227": [
        {
            "ioc_value": "7a558084441e0bffc41b8bfba66caee553d9b24e5d18ed93136d440c61c09d31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838228": [
        {
            "ioc_value": "ab0413e53280b1abe727765e2342c5f42bcebb83",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838229": [
        {
            "ioc_value": "ee023c4bc2c9e6beb6c17bbe8ed695ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838224": [
        {
            "ioc_value": "293c3f7991ac35535f7ceb88e6175a5a0fcd5f9265564d68ae8a16a9f3c65972",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838225": [
        {
            "ioc_value": "1fae7b6d3213b011189bbf53126dbd1a52fa652c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838226": [
        {
            "ioc_value": "16016ef97dca920aaf77b7ada30b5f3a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838221": [
        {
            "ioc_value": "b1b42a53800427415c6ac7d386574c04fbee740b1993150103b55f68d8ebb625",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838222": [
        {
            "ioc_value": "bdde8a33e0e8aecefdaa5f6f83379c9bf0642b66",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838223": [
        {
            "ioc_value": "1fcc698a3ec527ad70918c7b09ee183e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838219": [
        {
            "ioc_value": "85c2dd97b5801f4a23448546c050600d01f173e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838220": [
        {
            "ioc_value": "2a026ebc8eef3e2cc77878bca0798f22",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838215": [
        {
            "ioc_value": "cc933a50c4b195a7c043188496042d2a3566ee1589b48112050b552c948bb3d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838216": [
        {
            "ioc_value": "1c3fea3f97d87bfb853e10d3dcc5404677e1411c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838217": [
        {
            "ioc_value": "b41cbc3ebfd0db1331818712635e7d03",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838218": [
        {
            "ioc_value": "ca08bdd63f2268afbe9d1662cb45c3ff77f892e5e6a6c1e86b83d481af182649",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-26 20:21:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838213": [
        {
            "ioc_value": "ae549f86d58e56deb5408327745113e2728300dd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:21:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838214": [
        {
            "ioc_value": "6776873bba10f9f247ef5f63cd0bd8ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:21:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838210": [
        {
            "ioc_value": "2f65514b79316edd2cf69840e294f0f55a40e66a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-06-26 20:21:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838211": [
        {
            "ioc_value": "2219a5e9013168e6238b071ee8ca14c4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-06-26 20:21:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838212": [
        {
            "ioc_value": "bcb9b1d06d7e39ea21a7cdcae0f96c5ae4191565f2b1f6f72959e078cf3d2373",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-26 20:21:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838206": [
        {
            "ioc_value": "d20ac6d6eda2d70adf552f3bca04c1e030611df9e61febee7246b87410e68d6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-06-26 20:21:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838207": [
        {
            "ioc_value": "ed87b2e3088e4bb147855d2829a48a9e45f03351",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-06-26 20:21:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838208": [
        {
            "ioc_value": "3f48ee014cdde9588eddecf08bf35821",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.redline_stealer",
            "malware_alias": "RECORDSTEALER",
            "malware_printable": "RedLine Stealer",
            "first_seen_utc": "2026-06-26 20:21:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838209": [
        {
            "ioc_value": "86628f5f0cd9960e9691e0b6594591b144b4365f8e2e85c54a90bddba9a19e3f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-06-26 20:21:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838203": [
        {
            "ioc_value": "c75d8323a4288498f44893d1549ecc98be5b4dc3e89875189fe45f2eee0de36a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-26 20:21:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838204": [
        {
            "ioc_value": "9e8fa6e35b2122fad071a03b6180bf345f7e0f61",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-26 20:21:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838205": [
        {
            "ioc_value": "3ed46511118ca32e085a53caca44a09b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-26 20:21:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838200": [
        {
            "ioc_value": "c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 20:21:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838201": [
        {
            "ioc_value": "03fab2a83b8b4f563133d4b7b4b8f0cc5018ec5d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 20:21:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838202": [
        {
            "ioc_value": "481b030071c78a6d71901654b7fa4dcd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 20:21:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838197": [
        {
            "ioc_value": "b122fb13a9014410c09a8ae53d40979ad4c2f7903223563941aea3be50edf01f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-26 20:21:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838198": [
        {
            "ioc_value": "a9464a7c132787dd9589c51ecb48d7bb4bc05d66",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-26 20:21:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838199": [
        {
            "ioc_value": "83c72f21a650908f11476e32c210951b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-26 20:21:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838195": [
        {
            "ioc_value": "ebdf48efba35c32ff7bee9db6897aa2d98591a17",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-26 20:21:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838196": [
        {
            "ioc_value": "993f015fc9f5a9f683c32541e0039627",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-26 20:21:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838194": [
        {
            "ioc_value": "7b7cc6ddaaf7883d131dcf43677381da5707ca6d534b5b2aaae4ec9033a69ec6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-26 20:21:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1838183": [
        {
            "ioc_value": "82.165.79.60:1336",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-26 19:45:25",
            "last_seen_utc": "2026-09-01 02:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838182": [
        {
            "ioc_value": "5.200.255.45:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-26 19:45:15",
            "last_seen_utc": "2026-07-31 08:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838181": [
        {
            "ioc_value": "45.254.246.208:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-26 19:45:00",
            "last_seen_utc": "2026-07-26 18:45:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838180": [
        {
            "ioc_value": "209.54.103.150:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-26 19:44:13",
            "last_seen_utc": "2026-07-26 18:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838179": [
        {
            "ioc_value": "193.169.194.63:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-26 19:44:00",
            "last_seen_utc": "2026-07-27 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838178": [
        {
            "ioc_value": "141.98.189.248:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-26 19:43:19",
            "last_seen_utc": "2026-08-05 08:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838177": [
        {
            "ioc_value": "103.11.41.19:52814",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-26 19:43:05",
            "last_seen_utc": "2026-07-27 08:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838175": [
        {
            "ioc_value": "honarrang.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 19:29:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838174": [
        {
            "ioc_value": "sjc3.sabad724.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 19:11:59",
            "last_seen_utc": "2026-06-26 19:51:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838168": [
        {
            "ioc_value": "185.194.175.132:4445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-26 18:20:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3c54bcae35db1c091af07cb1fee2040430b26b1c7f2d28a3b176e211ba43ea02/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838165": [
        {
            "ioc_value": "effc4p41.honardartarikh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 17:30:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838164": [
        {
            "ioc_value": "honardartarikh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 17:29:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838160": [
        {
            "ioc_value": "pffvv3yw.22bahis-tr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 16:32:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838159": [
        {
            "ioc_value": "cehoirfg.work",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 16:20:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/36c3dc54b916de228ece4cff973790a2e1fa46b3bb6ce2f6660087d6dabe3ad4/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838151": [
        {
            "ioc_value": "147.182.140.2:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-26 16:12:29",
            "last_seen_utc": "2026-07-02 12:23:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838152": [
        {
            "ioc_value": "taaeiuep.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 16:12:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ebaf5aded88ec40f16f1448586633ff44d907abb2d8990cb52ba7f6a6e405831",
            "tags": "Brazil,InnoSetup,ProcuracaoDigital,stealer",
            "anonymous": 0,
            "reporter": "juliohyper"
        }
    ],
    "1838153": [
        {
            "ioc_value": "reitdnreepo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 16:12:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ebaf5aded88ec40f16f1448586633ff44d907abb2d8990cb52ba7f6a6e405831",
            "tags": "Brazil,InnoSetup,ProcuracaoDigital,stealer",
            "anonymous": 0,
            "reporter": "juliohyper"
        }
    ],
    "1838156": [
        {
            "ioc_value": "147.182.140.2:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-26 16:12:27",
            "last_seen_utc": "2026-07-02 10:00:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838158": [
        {
            "ioc_value": "trunnsns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 16:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838157": [
        {
            "ioc_value": "yvkbbq3e.1xdownload2023.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 16:11:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838155": [
        {
            "ioc_value": "hesabdarishabahang.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 15:29:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838154": [
        {
            "ioc_value": "babayagadead.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-26 15:10:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/509c2a5b7f12d2a67bfb9b697581fc9718c6ceba0575cc9e8490284fe4bdd6ce/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838150": [
        {
            "ioc_value": "http://osgyx.cn/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-26 15:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838149": [
        {
            "ioc_value": "62.60.226.68:24041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-26 15:00:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838148": [
        {
            "ioc_value": "82.29.94.69:1933",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-26 15:00:09",
            "last_seen_utc": "2026-06-28 10:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838144": [
        {
            "ioc_value": "https://gulshan2.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 14:37:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gulshan2.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838146": [
        {
            "ioc_value": "147.182.140.2:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-26 14:37:32",
            "last_seen_utc": "2026-07-02 12:44:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1838143": [
        {
            "ioc_value": "64.83.33.240:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 14:00:06",
            "last_seen_utc": "2026-07-25 23:48:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=64.83.33.240",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838140": [
        {
            "ioc_value": "192.3.16.35:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 14:00:05",
            "last_seen_utc": "2026-08-24 13:22:48",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=192.3.16.35",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838141": [
        {
            "ioc_value": "192.3.16.34:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 14:00:05",
            "last_seen_utc": "2026-08-24 13:22:48",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=192.3.16.34",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838142": [
        {
            "ioc_value": "185.103.166.53:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 14:00:05",
            "last_seen_utc": "2026-08-24 13:22:47",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=185.103.166.53",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838139": [
        {
            "ioc_value": "192.109.200.233:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 14:00:04",
            "last_seen_utc": "2026-07-25 23:48:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=192.109.200.233",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838138": [
        {
            "ioc_value": "107.175.115.123:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 14:00:03",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=107.175.115.123",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838137": [
        {
            "ioc_value": "87.120.84.133:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-26 13:48:02",
            "last_seen_utc": "2026-08-24 13:22:56",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=87.120.84.133",
            "tags": "Overlord,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838130": [
        {
            "ioc_value": "api.pimparolix.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 13:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838127": [
        {
            "ioc_value": "https://flatboxproduction.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 13:36:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/flatboxproduction.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838133": [
        {
            "ioc_value": "https://globalforumconsulting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 13:36:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/globalforumconsulting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838134": [
        {
            "ioc_value": "fg-analytics.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 13:36:12",
            "last_seen_utc": "2026-08-08 08:27:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838135": [
        {
            "ioc_value": "https://screy.world/download/406f3e9e48362d08?.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-26 13:36:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/6b134bcf-5f48-4721-a963-a87538b2bb53",
            "tags": "WDYMStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838136": [
        {
            "ioc_value": "http://13.63.239.13/download/406f3e9e48362d08?.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-26 13:36:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/6b134bcf-5f48-4721-a963-a87538b2bb53",
            "tags": "WDYMStealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838132": [
        {
            "ioc_value": "0qam1x6q.alobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 13:29:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1838131": [
        {
            "ioc_value": "alobet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 13:28:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838125": [
        {
            "ioc_value": "https://k1h.fileboro.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 12:25:27",
            "last_seen_utc": "2026-07-03 14:25:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838126": [
        {
            "ioc_value": "k1h.fileboro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 12:25:27",
            "last_seen_utc": "2026-07-03 14:25:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838123": [
        {
            "ioc_value": "https://k1h.hopesm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 12:25:15",
            "last_seen_utc": "2026-09-01 03:23:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838124": [
        {
            "ioc_value": "k1h.hopesm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-26 12:25:15",
            "last_seen_utc": "2026-09-01 03:23:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1838113": [
        {
            "ioc_value": "https://medxa.web.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 12:22:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/medxa.web.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838116": [
        {
            "ioc_value": "https://enterprisecloudupdate.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 12:22:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/enterprisecloudupdate.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838117": [
        {
            "ioc_value": "https://expresssafaris.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 12:22:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/expresssafaris.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1838122": [
        {
            "ioc_value": "http://110.37.18.108:49402/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 12:22:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.18.108",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1838115": [
        {
            "ioc_value": "abt90kade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 11:27:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1838019": [
        {
            "ioc_value": "environmentaldaily.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-26 10:46:04",
            "last_seen_utc": "2026-08-25 14:54:37",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,FakeCF,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1838009": [
        {
            "ioc_value": "electriq.se",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-26 10:46:01",
            "last_seen_utc": "2026-08-25 16:43:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,FakeCF,victim",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1837943": [
        {
            "ioc_value": "perfectcloudgate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 10:44:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837942": [
        {
            "ioc_value": "powerfullcloudflare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 10:44:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837941": [
        {
            "ioc_value": "powerfireguard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 10:44:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837940": [
        {
            "ioc_value": "00pq7d1j.1xboropartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 10:28:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837939": [
        {
            "ioc_value": "vsc888x.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-26 10:20:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f5b246182290991e9ee234a6b4dd3ef20db712516e4a5123670d0b188bda528d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837938": [
        {
            "ioc_value": "107.173.9.99:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-26 09:43:14",
            "last_seen_utc": "2026-07-26 08:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837937": [
        {
            "ioc_value": "rfhudhbz.313betsingup.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 09:28:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837919": [
        {
            "ioc_value": "66.42.41.148:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-26 09:02:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837920": [
        {
            "ioc_value": "115.48.55.41:52311",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 09:02:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Mozi",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837921": [
        {
            "ioc_value": "201.71.24.73:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 09:02:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NetBus",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837922": [
        {
            "ioc_value": "139.59.67.197:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-26 09:02:28",
            "last_seen_utc": "2026-06-28 21:15:36",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837923": [
        {
            "ioc_value": "158.69.201.163:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-26 09:02:27",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837924": [
        {
            "ioc_value": "47.243.208.30:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-26 09:02:27",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837925": [
        {
            "ioc_value": "64.227.164.38:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-26 09:02:27",
            "last_seen_utc": "2026-06-29 09:40:14",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837926": [
        {
            "ioc_value": "211.234.111.116:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-26 09:02:26",
            "last_seen_utc": "2026-07-01 19:00:29",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837927": [
        {
            "ioc_value": "77.90.185.248:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-26 09:02:26",
            "last_seen_utc": "2026-07-01 19:00:30",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837928": [
        {
            "ioc_value": "176.65.139.43:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:26",
            "last_seen_utc": "2026-06-28 21:16:21",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837929": [
        {
            "ioc_value": "18.97.5.108:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837930": [
        {
            "ioc_value": "183.81.169.76:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:25",
            "last_seen_utc": "2026-07-01 19:00:55",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837931": [
        {
            "ioc_value": "64.227.0.95:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837932": [
        {
            "ioc_value": "66.132.172.136:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837933": [
        {
            "ioc_value": "68.183.99.254:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:23",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837934": [
        {
            "ioc_value": "85.217.140.38:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:23",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837935": [
        {
            "ioc_value": "85.217.140.51:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-26 09:02:21",
            "last_seen_utc": "2026-07-01 19:02:14",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837918": [
        {
            "ioc_value": "154.94.233.166:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 08:23:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837917": [
        {
            "ioc_value": "67.216.197.83:2095",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 08:23:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837916": [
        {
            "ioc_value": "142.248.138.80:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 08:23:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837914": [
        {
            "ioc_value": "drf.honareslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 08:10:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837903": [
        {
            "ioc_value": "xb.bet1bonus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 07:39:31",
            "last_seen_utc": "2026-07-02 22:00:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837902": [
        {
            "ioc_value": "313betiran.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 07:26:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837844": [
        {
            "ioc_value": "superstarlog.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-26 07:18:44",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1837865": [
        {
            "ioc_value": "http://160.30.142.210:38596/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 07:18:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/160.30.142.210",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837866": [
        {
            "ioc_value": "http://103.244.172.42:50199/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 07:18:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.244.172.42",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837867": [
        {
            "ioc_value": "http://119.160.215.48:39102/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 07:18:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.160.215.48",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837868": [
        {
            "ioc_value": "http://110.38.254.78:46399/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 07:18:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.254.78",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837869": [
        {
            "ioc_value": "68.183.8.109:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-26 07:18:42",
            "last_seen_utc": "2026-06-29 16:36:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1837870": [
        {
            "ioc_value": "167.99.36.25:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-26 07:18:41",
            "last_seen_utc": "2026-06-29 16:36:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1837871": [
        {
            "ioc_value": "https://run.trb88resmi.top",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 07:18:40",
            "last_seen_utc": "2026-08-14 07:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/784d0110eae807fcb24ef64e9572f329df5904dcd62de6ff0f9d3b383143bd0f",
            "tags": "clickfix,Go,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837872": [
        {
            "ioc_value": "run.trb88resmi.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 07:18:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/784d0110eae807fcb24ef64e9572f329df5904dcd62de6ff0f9d3b383143bd0f",
            "tags": "clickfix,Go,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837873": [
        {
            "ioc_value": "https://superstarlog.click/api/index.php?a=grab",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 07:18:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/784d0110eae807fcb24ef64e9572f329df5904dcd62de6ff0f9d3b383143bd0f",
            "tags": "clickfix,Go,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837874": [
        {
            "ioc_value": "superstarlog.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 07:18:39",
            "last_seen_utc": "2026-06-30 21:58:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/784d0110eae807fcb24ef64e9572f329df5904dcd62de6ff0f9d3b383143bd0f",
            "tags": "clickfix,Go,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837875": [
        {
            "ioc_value": "784d0110eae807fcb24ef64e9572f329df5904dcd62de6ff0f9d3b383143bd0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-26 07:18:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/784d0110eae807fcb24ef64e9572f329df5904dcd62de6ff0f9d3b383143bd0f",
            "tags": "clickfix,Go,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837880": [
        {
            "ioc_value": "122.51.221.207:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 07:18:38",
            "last_seen_utc": "2026-09-01 02:46:51",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45090,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1837876": [
        {
            "ioc_value": "13.230.159.156:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 07:18:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "16509,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1837877": [
        {
            "ioc_value": "209.99.185.190:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-26 07:18:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "203999,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1837881": [
        {
            "ioc_value": "118.107.9.217:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-26 07:18:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "152194,c2,censys,quasar",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1837882": [
        {
            "ioc_value": "168.245.203.178:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-26 07:18:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1837890": [
        {
            "ioc_value": "d0b4f5055b71063e4b90a4e86c9a1a83199696c0384433aa033799033f570942",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-26 07:18:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1837893": [
        {
            "ioc_value": "misamario1.dynuddns.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-26 07:18:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1837894": [
        {
            "ioc_value": "http://103.162.40.120:44824/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-26 07:18:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.162.40.120",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837896": [
        {
            "ioc_value": "nxbv.sabad724.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 06:50:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837895": [
        {
            "ioc_value": "nxk3vadq.1xprobet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 06:31:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837892": [
        {
            "ioc_value": "ty954rii.313betios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 05:27:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837891": [
        {
            "ioc_value": "313betios.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 05:26:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837885": [
        {
            "ioc_value": "yekshart.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-26 03:01:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837857": [
        {
            "ioc_value": "4iw2skgz.tinyshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 23:01:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837856": [
        {
            "ioc_value": "tinyshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 23:00:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837855": [
        {
            "ioc_value": "nmo1ivv6.akhlagvaahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 22:58:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837845": [
        {
            "ioc_value": "ex5nibpq.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 20:26:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837843": [
        {
            "ioc_value": "172.245.196.240:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 20:05:06",
            "last_seen_utc": "2026-08-28 08:09:06",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837840": [
        {
            "ioc_value": "217.60.97.3:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-25 19:45:00",
            "last_seen_utc": "2026-08-18 18:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837839": [
        {
            "ioc_value": "217.60.195.194:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 19:44:59",
            "last_seen_utc": "2026-07-30 18:45:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837838": [
        {
            "ioc_value": "209.54.103.150:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 19:44:24",
            "last_seen_utc": "2026-07-26 08:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837837": [
        {
            "ioc_value": "185.192.125.141:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 19:43:58",
            "last_seen_utc": "2026-07-26 08:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837836": [
        {
            "ioc_value": "157.245.171.59:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-25 19:43:34",
            "last_seen_utc": "2026-07-25 18:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837833": [
        {
            "ioc_value": "147.124.223.75:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 19:43:25",
            "last_seen_utc": "2026-07-26 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837834": [
        {
            "ioc_value": "147.124.223.75:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 19:43:25",
            "last_seen_utc": "2026-07-26 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837835": [
        {
            "ioc_value": "147.124.223.75:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 19:43:25",
            "last_seen_utc": "2026-07-26 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837832": [
        {
            "ioc_value": "t5gnk3khm55f9ar.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-25 19:06:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837831": [
        {
            "ioc_value": "7t2lkz7v1c2u2ry.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-25 19:06:36",
            "last_seen_utc": "2026-06-25 19:06:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/485e853a93284b5ff68752809af6370e774fb965b533c02badbbe7d8471b0ab6/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837827": [
        {
            "ioc_value": "hdb1qm8y.shartcart.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 19:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837826": [
        {
            "ioc_value": "shartcart.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 18:59:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837448": [
        {
            "ioc_value": "207.56.138.121:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837449": [
        {
            "ioc_value": "50.114.184.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:17",
            "last_seen_utc": "2026-09-01 02:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837450": [
        {
            "ioc_value": "50.114.184.63:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837451": [
        {
            "ioc_value": "151.246.168.106:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837452": [
        {
            "ioc_value": "176.96.138.123:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837453": [
        {
            "ioc_value": "176.96.138.123:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837454": [
        {
            "ioc_value": "168.222.97.139:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837455": [
        {
            "ioc_value": "168.222.97.139:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837456": [
        {
            "ioc_value": "168.222.97.139:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837457": [
        {
            "ioc_value": "172.81.133.50:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837458": [
        {
            "ioc_value": "172.81.133.50:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837459": [
        {
            "ioc_value": "172.81.133.50:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837460": [
        {
            "ioc_value": "217.60.195.157:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837461": [
        {
            "ioc_value": "27.124.10.66:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837462": [
        {
            "ioc_value": "27.124.10.66:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837463": [
        {
            "ioc_value": "27.124.10.66:441",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837464": [
        {
            "ioc_value": "134.122.203.161:43368",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837465": [
        {
            "ioc_value": "134.122.203.161:47672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837466": [
        {
            "ioc_value": "27.124.10.98:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837467": [
        {
            "ioc_value": "27.124.10.98:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837468": [
        {
            "ioc_value": "80.76.49.42:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837469": [
        {
            "ioc_value": "80.76.49.42:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837470": [
        {
            "ioc_value": "80.76.49.42:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837471": [
        {
            "ioc_value": "80.76.49.139:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837472": [
        {
            "ioc_value": "80.76.49.139:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837473": [
        {
            "ioc_value": "194.164.203.46:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837474": [
        {
            "ioc_value": "192.229.81.73:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837475": [
        {
            "ioc_value": "192.229.81.73:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837476": [
        {
            "ioc_value": "45.192.211.64:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:02",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837477": [
        {
            "ioc_value": "45.192.211.64:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:02",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837478": [
        {
            "ioc_value": "45.192.211.64:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:02",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837479": [
        {
            "ioc_value": "188.227.196.203:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837480": [
        {
            "ioc_value": "172.81.63.27:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837481": [
        {
            "ioc_value": "64.224.17.13:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:54:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837482": [
        {
            "ioc_value": "64.224.17.13:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837483": [
        {
            "ioc_value": "172.245.18.243:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837484": [
        {
            "ioc_value": "172.245.18.243:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837485": [
        {
            "ioc_value": "158.94.208.107:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837486": [
        {
            "ioc_value": "154.91.75.193:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837487": [
        {
            "ioc_value": "154.91.75.193:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837488": [
        {
            "ioc_value": "216.250.252.129:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837489": [
        {
            "ioc_value": "216.250.252.129:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837490": [
        {
            "ioc_value": "5.230.201.220:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837491": [
        {
            "ioc_value": "5.230.201.220:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837492": [
        {
            "ioc_value": "107.172.13.206:51350",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837493": [
        {
            "ioc_value": "151.242.63.126:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837494": [
        {
            "ioc_value": "27.124.10.85:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837495": [
        {
            "ioc_value": "27.124.10.85:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837496": [
        {
            "ioc_value": "2.58.56.18:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837497": [
        {
            "ioc_value": "2.58.56.18:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837498": [
        {
            "ioc_value": "2.58.56.18:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837499": [
        {
            "ioc_value": "216.107.139.88:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:44",
            "last_seen_utc": "2026-09-01 02:44:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837500": [
        {
            "ioc_value": "94.26.3.104:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:44",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837501": [
        {
            "ioc_value": "94.26.3.104:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:43",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837502": [
        {
            "ioc_value": "94.26.3.104:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:43",
            "last_seen_utc": "2026-09-01 02:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837503": [
        {
            "ioc_value": "172.245.12.91:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837504": [
        {
            "ioc_value": "95.85.247.19:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837505": [
        {
            "ioc_value": "95.85.247.19:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837506": [
        {
            "ioc_value": "64.188.79.207:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837507": [
        {
            "ioc_value": "120.89.68.114:442",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837508": [
        {
            "ioc_value": "117.55.203.177:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837509": [
        {
            "ioc_value": "209.50.250.103:4693",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837510": [
        {
            "ioc_value": "209.50.250.103:1992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837511": [
        {
            "ioc_value": "185.254.96.205:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837512": [
        {
            "ioc_value": "185.254.96.205:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837513": [
        {
            "ioc_value": "164.90.133.38:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837514": [
        {
            "ioc_value": "84.54.33.16:55007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837515": [
        {
            "ioc_value": "84.54.33.252:55006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:53:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837516": [
        {
            "ioc_value": "196.251.107.117:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.solaris_loader",
            "malware_alias": null,
            "malware_printable": "SolarisLoader",
            "first_seen_utc": "2026-06-25 18:52:55",
            "last_seen_utc": "2026-06-25 15:42:07",
            "confidence_level": 77,
            "is_compromised": false,
            "reference": "https://tria.ge/260422-d6re8agt6q",
            "tags": null,
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1837519": [
        {
            "ioc_value": "http://51.158.248.122:8517/bins.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 18:52:54",
            "last_seen_utc": "2026-06-25 15:50:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1837520": [
        {
            "ioc_value": "137.220.171.61:51609",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837521": [
        {
            "ioc_value": "137.220.171.61:55378",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837522": [
        {
            "ioc_value": "217.60.195.24:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837523": [
        {
            "ioc_value": "192.229.81.71:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837524": [
        {
            "ioc_value": "192.229.81.71:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837525": [
        {
            "ioc_value": "111.92.242.193:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837526": [
        {
            "ioc_value": "94.26.3.76:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837527": [
        {
            "ioc_value": "94.26.3.76:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837528": [
        {
            "ioc_value": "94.26.3.76:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837529": [
        {
            "ioc_value": "64.224.17.51:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 18:52:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837533": [
        {
            "ioc_value": "https://vy.ijnggpi.com/ftx/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 18:52:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/f3810d99-b455-4a43-b184-4a91b53cf278",
            "tags": "connectwise,phishing,rmm,screenconnect,telegram",
            "anonymous": 0,
            "reporter": "gh0styippe"
        }
    ],
    "1837542": [
        {
            "ioc_value": "112.46.215.14:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 18:52:43",
            "last_seen_utc": "2026-06-25 17:09:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=112.46.215.14",
            "tags": "2J6iclGG,Mirai Variant",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1837541": [
        {
            "ioc_value": "instance-g63lkz-relay.screenconnect.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 18:52:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/f3810d99-b455-4a43-b184-4a91b53cf278",
            "tags": "connectwise,rmm,screenconnect",
            "anonymous": 0,
            "reporter": "gh0styippe"
        }
    ],
    "1837543": [
        {
            "ioc_value": "http://176.65.144.120/bc850000649f490e9617.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:52:39",
            "last_seen_utc": "2026-06-29 11:25:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,eu1,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1837549": [
        {
            "ioc_value": "205.186.144.66:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 18:52:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=205.186.144.66",
            "tags": "Mirai Variant,UNSTABLE",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1837550": [
        {
            "ioc_value": "103.166.200.226:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 18:52:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=103.166.200.226",
            "tags": "Mirai Variant,UNSTABLE",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1837551": [
        {
            "ioc_value": "bellamacho.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 18:52:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/34e6cebb-9ad8-45e1-a5ff-0625eb0d0a3e",
            "tags": "Clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1837552": [
        {
            "ioc_value": "easy-pixx321.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 18:52:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/34e6cebb-9ad8-45e1-a5ff-0625eb0d0a3e",
            "tags": "Clickfix,etherhiding",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1837558": [
        {
            "ioc_value": "153.117.33.140:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 18:52:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=153.117.33.140",
            "tags": "Mirai Variant",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1837559": [
        {
            "ioc_value": "http://182.116.54.21:41717/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 18:52:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.116.54.21",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837825": [
        {
            "ioc_value": "51.158.248.123:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 18:52:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/",
            "tags": "honeypot,iot,Mirai",
            "anonymous": 0,
            "reporter": "photon010101"
        }
    ],
    "1837821": [
        {
            "ioc_value": "27988a7e5afee247366e8f560bd37e14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:35:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837822": [
        {
            "ioc_value": "a64eee9ab72607f0f5b69d6bb3871586767b8b3e46f23d3154833bada493afb5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-25 18:35:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837823": [
        {
            "ioc_value": "a6d21904e1661fd2f368afa633088aeffcb21ba3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-25 18:35:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837824": [
        {
            "ioc_value": "215d24f82100037b3b0212c7a53166e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-25 18:35:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837818": [
        {
            "ioc_value": "d2894a452a69cd574591dd927e38f105",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-25 18:35:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837819": [
        {
            "ioc_value": "faecc582b335ed2b680ea464419c30943a04c05117ba76cefdd453ec983febbe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:35:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837820": [
        {
            "ioc_value": "d8bf3a711962b0f52ca26fe424d48678ae07a245",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:35:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837816": [
        {
            "ioc_value": "1bee14b1afc29e401d0f8f6e559cab82d2b40c6fde24e38bcaf70631795fac21",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-25 18:35:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837817": [
        {
            "ioc_value": "ea19b2afb22abede82c1e2fb8c00eee4a2230c06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-25 18:35:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837813": [
        {
            "ioc_value": "7f01a05055ec07b287de38a6e92f2a04dc512fe1b6972c16e2412ff27c53ce6a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-06-25 18:35:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837814": [
        {
            "ioc_value": "23f1bb7c643902b3b00b41d43a04ed3fe3b84cf5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-06-25 18:35:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837815": [
        {
            "ioc_value": "744c291f1af31190766580c630d0c032",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.webmonitor",
            "malware_alias": "RevCode",
            "malware_printable": "WebMonitor RAT",
            "first_seen_utc": "2026-06-25 18:35:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837809": [
        {
            "ioc_value": "9c167edb9c4ecd0de1e5cd5fe59a54db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837810": [
        {
            "ioc_value": "f1a895267514b8b63673820a534724b1b9ad41b314be2aa1c458512f0d75a8d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837811": [
        {
            "ioc_value": "488337c138f299e899a72237558b935abb9bc26c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837812": [
        {
            "ioc_value": "33f940fc07c36a2309cc994192f706a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837805": [
        {
            "ioc_value": "8208754335f380fb46057a3ca92f44da409cd2ad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837806": [
        {
            "ioc_value": "cf4468705b9eec5c9b791b0be310462f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837807": [
        {
            "ioc_value": "9007698a67964ef5f647ae478ad2b4d6e6b940428ebb86ef22b8d746fd6b8d0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837808": [
        {
            "ioc_value": "d06361025008b4124a371aa7980c3890a577dcdc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837802": [
        {
            "ioc_value": "58ae2f9830d5ad8864ef33aa9c1db659abed2e69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837803": [
        {
            "ioc_value": "06cab9b5ed4cd7f73393ebfeba6e4a75",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837804": [
        {
            "ioc_value": "9b1717eb154011b52aa24e4d6848976a9aafff2665f3171265aa767d5951be6c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837799": [
        {
            "ioc_value": "e6fae54cba02e2aeb468b874d87f549e2129a6fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837800": [
        {
            "ioc_value": "104f3ba9a4884a153696833fb7d90c24",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837801": [
        {
            "ioc_value": "34ae1b40cc36ff02ab71f076a78dd3961e1accb50dc158dc02f3b9c3ba538633",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837795": [
        {
            "ioc_value": "13a3e7f3955eb52b9e281f191cbcb8cfd7a7c21f371df21246ce5106070541c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837796": [
        {
            "ioc_value": "5079c6be00876abfdbc0390bc7aa6d2ecb632536",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837797": [
        {
            "ioc_value": "352fed139c6838c4ccc695a26ccebfd5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837798": [
        {
            "ioc_value": "3972f0b20671837938996ebf0e6dba5e36a8dd3dcd9cf72ade6300506e670380",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837792": [
        {
            "ioc_value": "a58321399f8aa6098a602e0336e4e3e4910412fae67f35baacceb90cf93625bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-25 18:35:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837793": [
        {
            "ioc_value": "deca2a324fd48fbb33a39ee4845e5b05f694ff88",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-25 18:35:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837794": [
        {
            "ioc_value": "7dec659ecec8d9ff214b5af9f0e54d38",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-25 18:35:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837788": [
        {
            "ioc_value": "0cc9c48a044cdfb621b3c24427e622c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837789": [
        {
            "ioc_value": "1737899af08da74b07395f82cff64b0c6c8c0eb30ee9b3b5b5eb652874cd0112",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837790": [
        {
            "ioc_value": "c7b610e23aae34cc9b03c967d62c58111adcd251",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837791": [
        {
            "ioc_value": "a9ab1790f4c6691fa91373bca0812a52",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837784": [
        {
            "ioc_value": "538d28fbaaa65cb7c69652b0e54e154e431fe8f8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 18:35:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837785": [
        {
            "ioc_value": "6695bc02e32d5b7c076ab8bae9ca2693",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 18:35:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837786": [
        {
            "ioc_value": "46ea5e72b0203fe4d9e2155a033f7bcd4582c12550d8ea9a112f7c03b24de347",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837787": [
        {
            "ioc_value": "5521bfe0b2f14fce5c21bcde2f50695c279b8f22",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-25 18:35:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837781": [
        {
            "ioc_value": "6391658acacb8c8dce3778b17d136c6bfaec40b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837782": [
        {
            "ioc_value": "3ed1aa6794d410b4c93bde4a7b04cc4c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837783": [
        {
            "ioc_value": "59bb710abe6edad7040227e259f3665f2852f2e954ac82059c746f54e947e6cd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 18:35:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837777": [
        {
            "ioc_value": "ac1a4d8a2c2bf91b75c4c173424b4b142ef29aa7356ee9e05f043e4faeab94dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837778": [
        {
            "ioc_value": "f88feab7ef25e79712839093fdfe3f4dad207da5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837779": [
        {
            "ioc_value": "8ba608a4387e67dfd407e07bf04c83f2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837780": [
        {
            "ioc_value": "3bb4f904ef0475df99243a5c00d041840b660252c837efc8523e2d2712251e87",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837773": [
        {
            "ioc_value": "e5c0637997dd3b06bf74d9285ce348f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-25 18:35:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837774": [
        {
            "ioc_value": "401ed2d083d047422220358d8d73f4c666a82e565e9cd915c6d52749bfba4bcf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837775": [
        {
            "ioc_value": "6275c7084ac75d0b96cc3371a9cc46a0ef8cdf1b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837776": [
        {
            "ioc_value": "4ca5e797a633675885e5676641291289",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837770": [
        {
            "ioc_value": "538bea099f31396d164d5a76a9f1e897",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:35:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837771": [
        {
            "ioc_value": "17502e8db2948738ef424ff4e5de9ffeaa7fea6777d0988540d32169cb7609ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-25 18:35:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837772": [
        {
            "ioc_value": "0dd1cf091d048c6966a24873e72d6f35b1f97ed4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-25 18:35:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837766": [
        {
            "ioc_value": "6f7d5955a7db93de1f9e69c0a47e014d14b5ab12",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837767": [
        {
            "ioc_value": "456a55c731ff6a8f443fe0fdec426af0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837768": [
        {
            "ioc_value": "9213b2fbce84b1f8a824d6475831100538944bac794e12fc542d733b3b2201eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:35:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837769": [
        {
            "ioc_value": "a2e9f76ae1b7919dd667cb6f29656f31afb1e2db",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:35:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837762": [
        {
            "ioc_value": "6a0dfb7d51c8caed596fa2b89cdedf7180a86f09c4aba4e5bb43d03fd1b9d255",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-06-25 18:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837763": [
        {
            "ioc_value": "84c044dc34afb9fad6b2a693ae41e965bc9dd952",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-06-25 18:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837764": [
        {
            "ioc_value": "5cdded78f2b177c4245ffb1778b6491f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-06-25 18:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837765": [
        {
            "ioc_value": "4afdc4faef1f739bb7b53936fea9f58f2f002e2a2b05f783ba797be96757ea9d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837758": [
        {
            "ioc_value": "144a0a499e007931628c98f38929466f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dyepack",
            "malware_alias": "BanSwift,swift",
            "malware_printable": "DYEPACK",
            "first_seen_utc": "2026-06-25 18:35:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837759": [
        {
            "ioc_value": "b481b6034d399f7f85877662838d4cd461a8ef5ae694b2cd44fcd9614b8842fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-25 18:35:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837760": [
        {
            "ioc_value": "d0e187f73008bdce2ff5a40312cb32d13ed0d69c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-25 18:35:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837761": [
        {
            "ioc_value": "8e584b7f95ee67a337c103260f122413",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-25 18:35:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837755": [
        {
            "ioc_value": "fa94e3c046c382492715a9dcbc2eab36",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837756": [
        {
            "ioc_value": "0dc0fa727f900ed5033f46f8ba6cf2d97d20ab95fd334cabc0f216da6e0622b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dyepack",
            "malware_alias": "BanSwift,swift",
            "malware_printable": "DYEPACK",
            "first_seen_utc": "2026-06-25 18:35:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837757": [
        {
            "ioc_value": "c7eccd855d2e97b57420afd23a4b9261f42f5b84",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dyepack",
            "malware_alias": "BanSwift,swift",
            "malware_printable": "DYEPACK",
            "first_seen_utc": "2026-06-25 18:35:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837752": [
        {
            "ioc_value": "6737c77e8ee4db7099c297210c7ebd01",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-25 18:35:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837753": [
        {
            "ioc_value": "d3ca561473774b431ad7fd0563acb20bb87b46f42efe6300c183f784abb1c6b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837754": [
        {
            "ioc_value": "87c2839472a5e0ef9e5697722ba94d6891e28578",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837749": [
        {
            "ioc_value": "a2f47118550285e90517345545e3061c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-25 18:35:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837750": [
        {
            "ioc_value": "ec7ea6a2febb44c94dc09f3d1a66ea49af94e61f2a4a330dfa9e24e7b776b0f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-25 18:35:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837751": [
        {
            "ioc_value": "14daabf98de18aff4e2392266d6f7e982b1c979e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-25 18:35:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837748": [
        {
            "ioc_value": "3da045844ab2286de615b8e0ce9e8af728d0feaa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-25 18:35:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837745": [
        {
            "ioc_value": "a250ffa45a7e64b8c958c93fc18a467ceaf06f6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837746": [
        {
            "ioc_value": "3df8ef81dc48c642aa5a6fb0a7a3d56a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837747": [
        {
            "ioc_value": "7df24f93af9945d9917b46d5996853604603836b08fcc1a730e8f72b99b52537",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-25 18:35:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837741": [
        {
            "ioc_value": "e597fbda1571b0debb7c8b82a374e761d7db21eea06ec6f3f7f998d29522e314",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837742": [
        {
            "ioc_value": "ca462b80ab100ad333e7e860ddd75f1bd4ada675",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837743": [
        {
            "ioc_value": "12b5b59530529b5b000e85bf364b9de7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837744": [
        {
            "ioc_value": "a38a3d2fbfa94a870ad2a716356e3d4f09dd4e31edce3d4e9c5de543e4454ac2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837737": [
        {
            "ioc_value": "a0b4085cf946ec17dfc382a16f873405",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-25 18:35:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837738": [
        {
            "ioc_value": "361ef56a8016de1052d39311bbf1288e3673d2fc8c06eb4a864841d018979eb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-25 18:35:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837739": [
        {
            "ioc_value": "dd08c8c89c4b6f02df0abe4876a51e9d7fc83c36",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-25 18:35:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837740": [
        {
            "ioc_value": "9856ca926fc6b0b41d1548c9b7878b9d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-25 18:35:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837734": [
        {
            "ioc_value": "b8fc34330f8eedcabb6b3c71d1748620",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837735": [
        {
            "ioc_value": "56865486886b3755cdf0b29a53d0d599d100565a609f8217e18b3983359b8e7f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-25 18:35:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837736": [
        {
            "ioc_value": "cdaf10e2379a3cd341e1b9aed793fb372c4e274b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-25 18:35:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837731": [
        {
            "ioc_value": "b37e5964bddc09f0532077bf8915bd16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837732": [
        {
            "ioc_value": "33bb1e43c6d93702f68f4238ffafda1c1c0766c1816d8e51328e872fe055c8e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837733": [
        {
            "ioc_value": "da4e18766a3d1d114f888fd42bf448c771ebad90",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837727": [
        {
            "ioc_value": "496c07bab7957c76efd8ade9996f1e1db0746798",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837728": [
        {
            "ioc_value": "8928e0f9ade1ca6b96c0a7539ff6c9fb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837729": [
        {
            "ioc_value": "3ff379fcedca10405d22eb467db5d93a9393e3e5b69f179989e02ec1ff23a578",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837730": [
        {
            "ioc_value": "7f8ba4fb2dcfa3ab390df14899ca23c8b280eb62",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:35:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837724": [
        {
            "ioc_value": "53b4f3493184045d5bbff9de6b8a94b150c6e0e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 18:35:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837725": [
        {
            "ioc_value": "f3f5b3f73221c983693a4658a8875fc1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 18:35:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837726": [
        {
            "ioc_value": "1585edaf13490949e78b37a4f39d3001f81af41942dd16567a820eb8369cd9b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837723": [
        {
            "ioc_value": "70c2fe27f67d5bd45f18c826a1dc1f852fa86b2de8271151a7b8c4d6d58f34d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 18:35:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837720": [
        {
            "ioc_value": "07cc22c1db2b39a7fc3058b02ec15225b2945e4866a9a0e84b8f73672ae9bcd7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:35:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837721": [
        {
            "ioc_value": "7277c32465833b8146cbb896341d7fc35b109b8b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:35:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837722": [
        {
            "ioc_value": "a61025e3511cf9700a38e681a1fcdc81",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 18:35:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837716": [
        {
            "ioc_value": "32a09ed1e719a39805d854a368ba9ef6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:35:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837717": [
        {
            "ioc_value": "fc7a60c88a82b47f9590bb64fb48ed57cf8f52908f5b55a8af83def45647856d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837718": [
        {
            "ioc_value": "040e9834b6d79171723402a904e8d0b0afaed34b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837719": [
        {
            "ioc_value": "35db0ed31de09aef583803786e4d710e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-25 18:35:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837712": [
        {
            "ioc_value": "e2469892028d96c480063baf099e4d57bf5dcd01",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837713": [
        {
            "ioc_value": "1784d3f41e8a5314c54d7fb86d24805a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837714": [
        {
            "ioc_value": "8fc455e31efe2cbb2ccffb27169f67e54d2535ecc71aa070f0d26817d0aca480",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837715": [
        {
            "ioc_value": "4a16937299536c6290f250d489759b1df321a0d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837708": [
        {
            "ioc_value": "d1518d0bd89529e64e3e4e8a433b988c99334b2c3ebdbdf85de312addaa8bbbf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837709": [
        {
            "ioc_value": "5c49266edcc4865fb0491de8a8b9ff09f751a13e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837710": [
        {
            "ioc_value": "142f7ff0f06bc597c7eb5904a4bdeeb8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837711": [
        {
            "ioc_value": "c4fabfcf75a6745956013a61656e620c485d9f39b286b4c7e3b099fe1bba652a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837704": [
        {
            "ioc_value": "9a7a03f400f70df4492a7e5617c0ff15",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837705": [
        {
            "ioc_value": "ae6e65d00f1bb515ff1fb8f049afc360161fa38260e0bf1329c2dde072d70a67",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837706": [
        {
            "ioc_value": "48157e75813d38bedbb74ede75ae2a9add5c45ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837707": [
        {
            "ioc_value": "db1c710f7f5576ec0308a1815c3883bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837701": [
        {
            "ioc_value": "f73a3a4e3c0aa4bfa571c98c439dd7f0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837702": [
        {
            "ioc_value": "d727c634a81811e5a557dfcffb92e033862b636785410a81cf717046a91e0d19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837703": [
        {
            "ioc_value": "137a69e52a5aa8b62fe239de42d0aee214d9f6d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837697": [
        {
            "ioc_value": "67747489ef893a25a166c2ca08b1bdd3d6a66774",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837698": [
        {
            "ioc_value": "720d4bce674dd06565b68942a704b683",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837699": [
        {
            "ioc_value": "38475cd6250b74e515d6f39e49ba51ab31fb5ab3e510e49756b45236e5a2f7cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837700": [
        {
            "ioc_value": "41b6b2f8cf99d9499b01fc4ef0f1ace2b3529a6f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837695": [
        {
            "ioc_value": "51db895887aa65d11f4548cec0ce7c1a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837696": [
        {
            "ioc_value": "fb1e649118f2f86cb22147f0ccca53b4a75598619ed80afddd5a25a5563515d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837691": [
        {
            "ioc_value": "6ad7d8ad7ac77c7fbdad465d94f644e5833c11b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837692": [
        {
            "ioc_value": "303e4d07247fa4e5685473e2bbacfe38",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837693": [
        {
            "ioc_value": "3596dcb90c580070993afc073e7158b4bcac5b4fb930b8e184fc531629012b14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837694": [
        {
            "ioc_value": "4ed9bb6625c5f4d465a89ee04ddb0f1eef6c4ee6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837687": [
        {
            "ioc_value": "330b792df60d23ef400d9347bd3bc3e001ddc2062d9ca7e54e66f834d41d4307",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837688": [
        {
            "ioc_value": "69acea57abd10f45672ef719d75476c53e424b59",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837689": [
        {
            "ioc_value": "232966840c8f399ee9ae7a9d073c554b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837690": [
        {
            "ioc_value": "b78a156ab33beb6fd8b0bf5283b9a9c67af2d42bc544ac04023185ab1eff5e73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837683": [
        {
            "ioc_value": "25d89bb632271696eb7f9a0fccc19847",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837684": [
        {
            "ioc_value": "46be6a8ec8d32e8f534c96ab1f7e792b273ecaedf320f32080d3310cc7f7590d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837685": [
        {
            "ioc_value": "d8902d4506d660c3c46c9bbb46774b83ec17a82b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837686": [
        {
            "ioc_value": "3617e75cac18b8b7ff534014fa64f134",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837679": [
        {
            "ioc_value": "b40af75be8cec229bab1093b2cf87bf809fee3bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837680": [
        {
            "ioc_value": "4a8e84fdae2a9cebfdd8c251cc06d0c5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837681": [
        {
            "ioc_value": "bc92812448658c397f3ecf4c6475dc3de7ba80eb04c4f9a2ea67221bd8556176",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837682": [
        {
            "ioc_value": "7027e15cc88013c8756ac321fc843f9cef13d8d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837675": [
        {
            "ioc_value": "5195e93ca254b2bcbfffb309848d42f3132538704343865a2dea3b4516c5ced8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837676": [
        {
            "ioc_value": "dd31154745834ef5cb953ddb452a3a27ab1730c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837677": [
        {
            "ioc_value": "3e0365986665180a9f1c96024377a85e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837678": [
        {
            "ioc_value": "536874b4e68c8d067cbdb0100c0e4e46810248ea6fdb3c4fed4720b23d9bed89",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837671": [
        {
            "ioc_value": "b43622585386544a0ddf1b295ce55e1c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837672": [
        {
            "ioc_value": "00c765d93bbf7f11013dcfb30a0143b0d2620e39f4e8ef47c0dcde10663276bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837673": [
        {
            "ioc_value": "5b764b2e0ef983ce885b22a6019468141548e6ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837674": [
        {
            "ioc_value": "8dca820fa28aa408d9686b79a038631d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837667": [
        {
            "ioc_value": "b66e457ed95265b1e9aeec75e52384d02d8d95ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837668": [
        {
            "ioc_value": "c0d397d9e7844f2b27d6bc867ce9703a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837669": [
        {
            "ioc_value": "882f750531309d59d6ebae6ce9f35a9b55312dc4900e0381e2656226b617102b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837670": [
        {
            "ioc_value": "356e39495f95e93e628d434c64c2e91a1891e4f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837663": [
        {
            "ioc_value": "ad78fecd0f39e1c15214d0f9ad5b0bb77d93705ec95ef8da8b3270dab8410f3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837664": [
        {
            "ioc_value": "556b1f03384bd5e94d1af8f973ce958c8a20099f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837665": [
        {
            "ioc_value": "805a1412233ed58144381ecd904e10be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837666": [
        {
            "ioc_value": "cd1b7d2dab1da7da0eba682c4b499282cf0c3bab37c2bdab8825af002bc7fd8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837659": [
        {
            "ioc_value": "31fd05d7375ec32b6d92c2df9f2cf077",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837660": [
        {
            "ioc_value": "fbface75828c2fdc3533b818268f5b8e680f65662953ff83d30240e78ff8d36b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837661": [
        {
            "ioc_value": "8da7d85415a203888a8997ad5d04386ea2aa47f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837662": [
        {
            "ioc_value": "023907a32ebf06ff02ca41f9f6ec89b8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837655": [
        {
            "ioc_value": "6641862075949a4e2d62cae17035d4525b3caaa1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837656": [
        {
            "ioc_value": "072a01e30d89dd72021e33b33f97a2df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837657": [
        {
            "ioc_value": "3ebeb21ddf3a0913397058609db41cf23e440dbdee26a2a569752521fb09d1eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837658": [
        {
            "ioc_value": "fbcbb0f32b0a2c4d6eb1a9098b4b9fad3e0734eb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837651": [
        {
            "ioc_value": "8d35b1c48357c10fd6357edb0154e97e02323f16694f13c495a0c7ce23b15a12",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837652": [
        {
            "ioc_value": "85b9c90d7b8642bc673921e7750f9a504753896a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837653": [
        {
            "ioc_value": "9d126c8f171e535a48c779c24d5dcadc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837654": [
        {
            "ioc_value": "de79e908320bd93cfe500e4904bc39e57c01e8f84f6e23ab80fc05874145e862",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837647": [
        {
            "ioc_value": "8da34ec68b4dad99467ce20c6696d097",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837648": [
        {
            "ioc_value": "946cb371cd41764484013c0b85638d9157b947a4378d81c395b6461f594c5eb3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837649": [
        {
            "ioc_value": "bca8fc65db5a3cc18a6bdbdaee42569a642da1de",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837650": [
        {
            "ioc_value": "ef85ff913bdbaf39347ef2768ae8632b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837643": [
        {
            "ioc_value": "d24dce407c1593f1f2ca96a93e8a5bbe5d5f9984",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837644": [
        {
            "ioc_value": "041d3e837d4deeee1a1f1501cb2ea662",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837645": [
        {
            "ioc_value": "94dadfc956c7affead3690c011e4bffd29ecadb8ef328c0548adf6bae35fa3f0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837646": [
        {
            "ioc_value": "820b2cf69083bfa39a722aea463229b19bb9b128",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837640": [
        {
            "ioc_value": "ca75dd8e9d9930b8c09d739fc1616537b55f6f69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837641": [
        {
            "ioc_value": "d6799104c80839099fa8a7957326a30e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837642": [
        {
            "ioc_value": "651a64eb4ebe8ef3ba9d6494e205257808c7ca58ae041dffb1b9683162b50328",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837636": [
        {
            "ioc_value": "88de4138699965edf561a5cd9bacd036fb8e474c61acf311b7a33e0563b04304",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837637": [
        {
            "ioc_value": "21691aba761cda40346f13d805e6dc3fefdacc3a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837638": [
        {
            "ioc_value": "f20b87dd56f9686d7090e2eed1e14971",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837639": [
        {
            "ioc_value": "d31744fa54b637061ccdf4de0ceb9110cdef375f5a812ca71522a2e41eb50fab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837632": [
        {
            "ioc_value": "df087178f6871ede7e7d88e814572bd3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837633": [
        {
            "ioc_value": "5709e15f530c3c281cbd105751610e6ffb24d282207e2176bb98e99170173be7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837634": [
        {
            "ioc_value": "a31700869eb96a585be8e6b1370d9056088eb467",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837635": [
        {
            "ioc_value": "18f28fe6464a529300124e6b2ec81766",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837628": [
        {
            "ioc_value": "23e8c6bd0de11a29f46f805a709177e2d27de7db",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837629": [
        {
            "ioc_value": "c666ed1b15cca96e76c8657d260f25ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837630": [
        {
            "ioc_value": "63c030b19be8dd63081c8d5aeed5c4c1604be565ba4485af93006ad48ab57489",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837631": [
        {
            "ioc_value": "683b49068305f9c3203bbf415858dbd2ad5c5443",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837625": [
        {
            "ioc_value": "6d89c53f1de4003837bbd88fbc072fcc4edee0d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837626": [
        {
            "ioc_value": "3e0499a96d5b14b1b37ff738b1d1953a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837627": [
        {
            "ioc_value": "a63e488f5742245f1436035ba1ddc4f81c74b6678d3014f265eca541b15a88e1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837622": [
        {
            "ioc_value": "9e568ddf9ffbcfbab62f61e592c27d18e0cbc5ba",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837623": [
        {
            "ioc_value": "c59d0913b35a03b8beb220ec4d261298",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837624": [
        {
            "ioc_value": "3eb586bc3205268becc78c10b6949d8c2960bfce9bceeab622201b1091b7f1b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837619": [
        {
            "ioc_value": "578ed6e6ba3c1b0a6e1601d1da3b0159f7498d63",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837620": [
        {
            "ioc_value": "9f286fc8152bfc5e2f3d51b10f5775b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837621": [
        {
            "ioc_value": "6b7f6d33611b0362d7a60dea3e6f75f3745b3ebb9d25285106bc945943b14af5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837616": [
        {
            "ioc_value": "aba52b1f50bc5f5eff66528241f104a65f06b7b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837617": [
        {
            "ioc_value": "a37e2db02cd6a1a6da7ccc124cc3d5e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837618": [
        {
            "ioc_value": "dd9eb55d35232b79b8fd3105f96c320d9b68e75cecb148d8b628b2c26c9bda44",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837613": [
        {
            "ioc_value": "5aa3f6654bca4eddac7a3055696d0363275f6e13",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837614": [
        {
            "ioc_value": "75b7480830830bb47e35db46bbb4cf73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837615": [
        {
            "ioc_value": "7fc84a19ee1029403baefd2f0c58ab6e55dfc346e759157a7fab4fd5cc397c4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837610": [
        {
            "ioc_value": "9402f48a721e4132924c03cdae287a7e139cc85c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837611": [
        {
            "ioc_value": "630af280e74aa6327ceff433d6dd20f9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837612": [
        {
            "ioc_value": "e89aa9bec3284f837e7d338d5069842df245a0f9919617865b8a2eea480e3dd9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837606": [
        {
            "ioc_value": "0205aa7b8a0852633918bb36f7b961ea61e6bfb0eec66690a946a33adef4f166",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837607": [
        {
            "ioc_value": "c0261b0ca2acdb7654f4daaabf85a41a8befc7a9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837608": [
        {
            "ioc_value": "48c371568ae1e9a7e0b7d094c0b0994d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837609": [
        {
            "ioc_value": "620e1b095c157be83a25c8772b941ee20051b53253d325117788716cbc4f50ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837603": [
        {
            "ioc_value": "a8936a401395781773004cb920cd89f02200f2a4ee25a1b241e593b1d3f544d3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837604": [
        {
            "ioc_value": "cb2badc43d22cb7770ce6aa1131b7b316d4f9ad3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837605": [
        {
            "ioc_value": "7d3b985fa4df0c0037807e337dc970fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837599": [
        {
            "ioc_value": "ad19964d16858afba780be897f2cead7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837600": [
        {
            "ioc_value": "e85141b23c76fe7b5b6cd7a7a6e4e3ccc444f8b7515e7883f64e1b91423997d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837601": [
        {
            "ioc_value": "8cf247a166e94f8dd40c9aa87368c5de227eefce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837602": [
        {
            "ioc_value": "6e9c7c732727236b82948c939557e019",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837596": [
        {
            "ioc_value": "2177d4601c94e659d142751797f3486a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837597": [
        {
            "ioc_value": "c12b2a94593fead09896badb4bf2efc4144c69a7c63ab68b2250ae5b639f77a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837598": [
        {
            "ioc_value": "089d93eb384a4dfe0685b43fb7072ef838a9cfac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837593": [
        {
            "ioc_value": "8b45d43cf0d9a4dcfb0a372f128725ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837594": [
        {
            "ioc_value": "3690225f09b36394ee90c3ca13bc11db63b9411bf5145f39acd028ac1a1da201",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837595": [
        {
            "ioc_value": "b41511d55690e6deaaa49666d597106262a73f7a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837590": [
        {
            "ioc_value": "1664066b37236ad9855a4397f1981ad4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837591": [
        {
            "ioc_value": "58d923fe877760cf366d83cba548eae53dd8f18f858b5d56c27b699db4f4c633",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837592": [
        {
            "ioc_value": "a8e33ef33f539e8a3dff0153aa4c3b416e658eeb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837586": [
        {
            "ioc_value": "5dd82a44fb16ac34c42f0451ca8ed5b60f748390",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837587": [
        {
            "ioc_value": "4db7967bfaf6c43d0abdb2ca9abb698b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837588": [
        {
            "ioc_value": "2d4991fd72a7944cdc0593555d35f1dc7896e50bda71a0443376c3290d0ab0b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837589": [
        {
            "ioc_value": "857eef40b9e9397263db3ab2bc25039a12ae0be4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837582": [
        {
            "ioc_value": "4b3d341f6a15caacb540bb2e403dfbfbdbf98b077649f184505839d4a9e27cc2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837583": [
        {
            "ioc_value": "04b7d197b4e795b5bf829085c3eafd90887be3d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837584": [
        {
            "ioc_value": "19f96cdf0273950f87dd6b674fdcff92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837585": [
        {
            "ioc_value": "8d9fc8a6c1fd93714a36ef4239ee7816a50f092b1b5a9d7fc31218159763d2e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837578": [
        {
            "ioc_value": "73a752c08b30f2deb6a7c5ad3dd55c75",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837579": [
        {
            "ioc_value": "4b0d8c093bf2f79b4297708a35a901735b1bafe812efbcb67b4161c84c037c31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837580": [
        {
            "ioc_value": "81b2565b6f79c24f8288e24fe19172c245c31056",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837581": [
        {
            "ioc_value": "5f5919f7939a670914954b9467cc49e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837574": [
        {
            "ioc_value": "69524b859ca899c87246d7de2d1c143328f7d8d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837575": [
        {
            "ioc_value": "85267c0d6cf650bb021dbe0d1486c15e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837576": [
        {
            "ioc_value": "75bc2baf3c12afbefb893af00d361d6d66273d7852d8c0f16dce28e01293c3ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837577": [
        {
            "ioc_value": "3d1aa738506f4344f6ced8842df6c0e156a8b58f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837571": [
        {
            "ioc_value": "e14d37249fc6b1af05e402b4e551d8aace58e7a0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-25 18:34:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837572": [
        {
            "ioc_value": "632237a7536db7d9c6b29b28ba189c9b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-25 18:34:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837573": [
        {
            "ioc_value": "7c82302ecd14f21edfceec918d47b51b5d4bc1792cf77bde61527111d8fdb56c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837567": [
        {
            "ioc_value": "5187e5216ddf0f63d74a69f483c9568d0b04f7ae67dd17ed1d7644b97ce3a8d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837568": [
        {
            "ioc_value": "c64ca32757200e42117a290de4c6c56842e5c9a1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837569": [
        {
            "ioc_value": "341a025fa2b8c640b9b09b8cafb2d329",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-25 18:34:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837570": [
        {
            "ioc_value": "93696af402e19dfc858f5867e56e9dd5ddfa4f88df05bbb68cb482ca2c21a79b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-25 18:34:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837565": [
        {
            "ioc_value": "88c44f87b0decd5d91759514ffa7e4abd7c42471",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-25 18:34:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837566": [
        {
            "ioc_value": "6434db989785abb5ce2088e34915935f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-25 18:34:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837564": [
        {
            "ioc_value": "7791be7f06e67cfb2e32c1f709b8bf8afc5f354653d1a2074a47e80d8c04ff49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-25 18:34:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837562": [
        {
            "ioc_value": "https://ntg.fileboro.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:25:28",
            "last_seen_utc": "2026-06-25 22:25:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837563": [
        {
            "ioc_value": "ntg.fileboro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:25:28",
            "last_seen_utc": "2026-06-25 22:25:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837560": [
        {
            "ioc_value": "https://ntg.hopesm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:25:16",
            "last_seen_utc": "2026-06-25 22:25:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837561": [
        {
            "ioc_value": "ntg.hopesm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 18:25:16",
            "last_seen_utc": "2026-06-25 22:25:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837518": [
        {
            "ioc_value": "tv2gs2t9.1xfa.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 15:46:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837517": [
        {
            "ioc_value": "boldtop.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 15:45:59",
            "last_seen_utc": "2026-07-26 08:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837406": [
        {
            "ioc_value": "209.99.186.92:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-25 15:27:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ProxyBox,Socks5 Systemz",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837447": [
        {
            "ioc_value": "etaczb1.jetbetapk.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-25 15:27:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,EtherHiding",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837405": [
        {
            "ioc_value": "2.26.75.141:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837404": [
        {
            "ioc_value": "151.59.116.117:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837403": [
        {
            "ioc_value": "94.130.51.119:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837401": [
        {
            "ioc_value": "146.103.116.11:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837402": [
        {
            "ioc_value": "212.43.156.47:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837399": [
        {
            "ioc_value": "209.99.189.233:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837400": [
        {
            "ioc_value": "5.188.87.210:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837398": [
        {
            "ioc_value": "212.43.156.196:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837396": [
        {
            "ioc_value": "144.124.252.209:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837397": [
        {
            "ioc_value": "188.137.238.187:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837395": [
        {
            "ioc_value": "212.43.156.145:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837393": [
        {
            "ioc_value": "185.203.240.32:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837394": [
        {
            "ioc_value": "95.133.228.222:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837392": [
        {
            "ioc_value": "188.137.254.82:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-25 15:18:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "1xxbot,ArechClient,SectopRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837391": [
        {
            "ioc_value": "proviewhomeinspections.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-25 15:18:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837407": [
        {
            "ioc_value": "185.181.8.143:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 15:18:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Remcos,RemcosRAT,Remvio,Socmer",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837411": [
        {
            "ioc_value": "103.101.85.184:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:14",
            "last_seen_utc": "2026-08-27 07:29:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837412": [
        {
            "ioc_value": "193.148.56.72:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837413": [
        {
            "ioc_value": "94.26.83.70:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:13",
            "last_seen_utc": "2026-06-25 19:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837414": [
        {
            "ioc_value": "62.164.177.228:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837415": [
        {
            "ioc_value": "31.77.199.86:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837416": [
        {
            "ioc_value": "146.19.248.120:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837417": [
        {
            "ioc_value": "212.127.91.32:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 15:18:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=212.127.91.32",
            "tags": "apache-rce,apache.selfrep,CVE-2021-41773,libredtail-http",
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1837418": [
        {
            "ioc_value": "91.92.242.231:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 15:18:08",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Stealc",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837419": [
        {
            "ioc_value": "176.65.139.225:56789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 15:18:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837422": [
        {
            "ioc_value": "207.56.138.104:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:18:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837423": [
        {
            "ioc_value": "155.94.163.91:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:18:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837425": [
        {
            "ioc_value": "209.99.186.214:1013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:18:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837424": [
        {
            "ioc_value": "209.99.186.214:1011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:18:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837426": [
        {
            "ioc_value": "117.0.195.17:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837427": [
        {
            "ioc_value": "117.0.195.17:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837428": [
        {
            "ioc_value": "104.234.195.141:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837429": [
        {
            "ioc_value": "104.234.195.141:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837430": [
        {
            "ioc_value": "104.234.195.141:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837431": [
        {
            "ioc_value": "31.76.118.59:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837432": [
        {
            "ioc_value": "31.76.118.59:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837433": [
        {
            "ioc_value": "109.230.199.86:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837434": [
        {
            "ioc_value": "109.230.199.86:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837435": [
        {
            "ioc_value": "109.230.199.86:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837436": [
        {
            "ioc_value": "38.240.48.202:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837437": [
        {
            "ioc_value": "98.142.247.91:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837438": [
        {
            "ioc_value": "98.142.247.91:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837439": [
        {
            "ioc_value": "98.142.247.91:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837440": [
        {
            "ioc_value": "192.236.215.245:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837441": [
        {
            "ioc_value": "45.192.211.59:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:46",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837442": [
        {
            "ioc_value": "45.192.211.59:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:45",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837443": [
        {
            "ioc_value": "45.192.211.59:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:44",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837444": [
        {
            "ioc_value": "45.192.211.83:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837445": [
        {
            "ioc_value": "45.192.211.83:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837446": [
        {
            "ioc_value": "45.192.211.83:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 15:17:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837367": [
        {
            "ioc_value": "185.182.186.243:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 14:59:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://speculus.co/search?ip=185.182.186.243",
            "tags": null,
            "anonymous": 0,
            "reporter": "Speculus"
        }
    ],
    "1837368": [
        {
            "ioc_value": "45.77.132.73:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 14:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "AsyncRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837369": [
        {
            "ioc_value": "170.75.167.176:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 14:59:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837370": [
        {
            "ioc_value": "103.252.94.60:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 14:59:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837371": [
        {
            "ioc_value": "172.81.183.183:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 14:59:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837372": [
        {
            "ioc_value": "170.75.164.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 14:59:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837373": [
        {
            "ioc_value": "170.75.164.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 14:59:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "BotManager",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837374": [
        {
            "ioc_value": "134.122.38.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.count_loader",
            "malware_alias": null,
            "malware_printable": "CountLoader",
            "first_seen_utc": "2026-06-25 14:59:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "CountLoader",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837375": [
        {
            "ioc_value": "77.90.14.48:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-06-25 14:59:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837376": [
        {
            "ioc_value": "77.90.14.48:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-06-25 14:59:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Breut,DarkComet,Fynloski,klovbot",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837377": [
        {
            "ioc_value": "120.236.26.126:45350",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghostsocks",
            "malware_alias": null,
            "malware_printable": "GhostSocks",
            "first_seen_utc": "2026-06-25 14:59:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "GhostSocks",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837378": [
        {
            "ioc_value": "115.52.150.76:45350",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghostsocks",
            "malware_alias": null,
            "malware_printable": "GhostSocks",
            "first_seen_utc": "2026-06-25 14:59:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "GhostSocks",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837379": [
        {
            "ioc_value": "46.99.251.91:2049",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 14:59:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837381": [
        {
            "ioc_value": "182.124.232.250:52311",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 14:59:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837380": [
        {
            "ioc_value": "168.227.148.151:2049",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 14:59:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837382": [
        {
            "ioc_value": "221.151.118.252:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-25 14:59:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NetSupport,NetSupportManager RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837383": [
        {
            "ioc_value": "81.85.75.204:10380",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-25 14:59:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "NetSupport,NetSupportManager RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837384": [
        {
            "ioc_value": "176.45.16.239:1177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-25 14:59:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Bladabindi,Lime-worm,NjRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837385": [
        {
            "ioc_value": "94.96.162.127:12255",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-25 14:59:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837386": [
        {
            "ioc_value": "94.96.154.128:15",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-25 14:59:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837387": [
        {
            "ioc_value": "154.41.194.177:445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-25 14:59:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837388": [
        {
            "ioc_value": "94.96.171.62:13",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-25 14:59:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837389": [
        {
            "ioc_value": "94.49.161.55:4282",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-25 14:59:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837390": [
        {
            "ioc_value": "94.49.161.55:18102",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-25 14:59:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1837365": [
        {
            "ioc_value": "https://y14.fileboro.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 14:25:37",
            "last_seen_utc": "2026-06-25 17:25:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837366": [
        {
            "ioc_value": "y14.fileboro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 14:25:37",
            "last_seen_utc": "2026-06-25 17:25:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837364": [
        {
            "ioc_value": "y14.hopesm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 14:25:25",
            "last_seen_utc": "2026-06-25 17:25:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837363": [
        {
            "ioc_value": "https://y14.hopesm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 14:25:24",
            "last_seen_utc": "2026-06-25 17:25:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837339": [
        {
            "ioc_value": "repack-games.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.5t_downloader",
            "malware_alias": null,
            "malware_printable": "5.t Downloader",
            "first_seen_utc": "2026-06-25 13:55:28",
            "last_seen_utc": "2026-07-21 03:50:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837349": [
        {
            "ioc_value": "http://153.117.32.156:40587/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 13:55:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.32.156",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837348": [
        {
            "ioc_value": "http://70.70.17.10:54200/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 13:55:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/70.70.17.10",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837358": [
        {
            "ioc_value": "verificationscodes.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 13:55:26",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1837359": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/swiftvpnaccess/smtp-incoming-mx/load",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 13:26:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837350": [
        {
            "ioc_value": "8opocc30.1x303.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 12:57:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837344": [
        {
            "ioc_value": "185.91.69.99:8444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-25 12:12:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4d68dfcf30f581cdc3467a3b1d564719a6c6dc6d1a437ab2413b13db3052beb7/",
            "tags": "PureLogStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837338": [
        {
            "ioc_value": "www.mb8coin.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 11:55:45",
            "last_seen_utc": "2026-06-26 04:28:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81e7fa249c5a779dfb397d80ed5d85b4718e6b94bb2cec78adfedb3b7732cce8/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837337": [
        {
            "ioc_value": "sofin.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 11:55:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81e7fa249c5a779dfb397d80ed5d85b4718e6b94bb2cec78adfedb3b7732cce8/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837336": [
        {
            "ioc_value": "logitron.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 11:55:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81e7fa249c5a779dfb397d80ed5d85b4718e6b94bb2cec78adfedb3b7732cce8/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837325": [
        {
            "ioc_value": "sj98xe4.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-25 11:54:24",
            "last_seen_utc": "2026-06-25 11:16:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer",
            "anonymous": 0,
            "reporter": "LowagieT"
        }
    ],
    "1837326": [
        {
            "ioc_value": "xuiaxwx.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-25 11:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer",
            "anonymous": 0,
            "reporter": "LowagieT"
        }
    ],
    "1837327": [
        {
            "ioc_value": "gesck4m.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-25 11:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer",
            "anonymous": 0,
            "reporter": "LowagieT"
        }
    ],
    "1837328": [
        {
            "ioc_value": "smdh7.surf",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-25 11:54:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer",
            "anonymous": 0,
            "reporter": "LowagieT"
        }
    ],
    "1837329": [
        {
            "ioc_value": "citcix6.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-25 11:54:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer",
            "anonymous": 0,
            "reporter": "LowagieT"
        }
    ],
    "1837330": [
        {
            "ioc_value": "hf98x4d.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-25 11:54:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer",
            "anonymous": 0,
            "reporter": "LowagieT"
        }
    ],
    "1837335": [
        {
            "ioc_value": "172.245.57.227:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 11:46:44",
            "last_seen_utc": "2026-07-26 10:46:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837334": [
        {
            "ioc_value": "124.222.218.12:4848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 11:46:36",
            "last_seen_utc": "2026-07-27 14:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837333": [
        {
            "ioc_value": "1.94.187.246:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 11:46:22",
            "last_seen_utc": "2026-07-28 08:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837332": [
        {
            "ioc_value": "qkqz220k.jetbet1.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 11:46:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837331": [
        {
            "ioc_value": "jetbet1.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 11:44:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837319": [
        {
            "ioc_value": "http://64.89.161.67/3b250ef3f9e542adadfb.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-25 11:10:48",
            "last_seen_utc": "2026-07-06 09:11:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/07cc22c1db2b39a7fc3058b02ec15225b2945e4866a9a0e84b8f73672ae9bcd7/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837298": [
        {
            "ioc_value": "143.92.37.168:18987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 10:31:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=2666e31",
            "tags": "SilverFox",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1837299": [
        {
            "ioc_value": "143.92.37.168:38987",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 10:31:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=2666e31",
            "tags": "SilverFox",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1837300": [
        {
            "ioc_value": "143.92.37.168:48988",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 10:31:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=2666e31",
            "tags": "SilverFox",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1837301": [
        {
            "ioc_value": "143.92.37.168:48991",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 10:31:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=2666e31",
            "tags": "SilverFox",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1837302": [
        {
            "ioc_value": "143.92.37.168:48992",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 10:31:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://netresec.com/?b=2666e31",
            "tags": "SilverFox",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1837315": [
        {
            "ioc_value": "op2.hopesm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 10:25:28",
            "last_seen_utc": "2026-06-25 13:25:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837314": [
        {
            "ioc_value": "https://op2.hopesm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-25 10:25:27",
            "last_seen_utc": "2026-06-25 13:25:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837309": [
        {
            "ioc_value": "84.38.129.31:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 10:10:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4ec260e09ccbbc4718902d1668ece35b1d825a8b8470ef3e7901609772ec5c65/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837305": [
        {
            "ioc_value": "84.38.129.31:9095",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 10:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837297": [
        {
            "ioc_value": "8.130.74.111:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 09:47:23",
            "last_seen_utc": "2026-07-27 08:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837296": [
        {
            "ioc_value": "159.75.176.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 09:46:55",
            "last_seen_utc": "2026-07-26 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837295": [
        {
            "ioc_value": "88.198.11.120:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-06-25 09:46:16",
            "last_seen_utc": "2026-07-25 18:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837294": [
        {
            "ioc_value": "5.101.84.82:9521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 09:45:52",
            "last_seen_utc": "2026-07-27 18:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837293": [
        {
            "ioc_value": "45.74.7.166:1377",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 09:45:43",
            "last_seen_utc": "2026-08-14 08:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837292": [
        {
            "ioc_value": "27.124.43.249:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-25 09:45:24",
            "last_seen_utc": "2026-07-30 08:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837290": [
        {
            "ioc_value": "209.54.103.150:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 09:44:34",
            "last_seen_utc": "2026-07-26 18:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837291": [
        {
            "ioc_value": "209.54.103.150:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-25 09:44:34",
            "last_seen_utc": "2026-07-26 18:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837289": [
        {
            "ioc_value": "185.115.164.59:3731",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 09:44:03",
            "last_seen_utc": "2026-07-25 18:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837288": [
        {
            "ioc_value": "jetbet1.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 09:44:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837287": [
        {
            "ioc_value": "154.219.98.36:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-25 09:43:32",
            "last_seen_utc": "2026-08-04 18:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837286": [
        {
            "ioc_value": "104.250.167.40:9093",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-25 09:43:11",
            "last_seen_utc": "2026-08-28 08:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837285": [
        {
            "ioc_value": "103.11.41.10:55483",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 09:43:05",
            "last_seen_utc": "2026-07-25 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837278": [
        {
            "ioc_value": "6novzudn.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 09:03:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837277": [
        {
            "ioc_value": "https://betterment-us.comalign.pro/betterment/wwws/betterment/app/login/secure.html",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 09:02:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/betterment-us.comalign.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837274": [
        {
            "ioc_value": "proxymonster.sale",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-06-25 08:58:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "MaskGramStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837275": [
        {
            "ioc_value": "zauber-edgecb61leise.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-06-25 08:58:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "MaskGramStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837276": [
        {
            "ioc_value": "samtpfotchensnezhok9566leisegepard.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.maskgramstealer",
            "malware_alias": null,
            "malware_printable": "MaskGramStealer",
            "first_seen_utc": "2026-06-25 08:58:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "MaskGramStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837270": [
        {
            "ioc_value": "87.251.66.118:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 08:49:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837271": [
        {
            "ioc_value": "135.136.39.69:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.kinsing",
            "malware_alias": "h2miner",
            "malware_printable": "Kinsing",
            "first_seen_utc": "2026-06-25 08:49:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "chroot,docker-api,kinsing",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837272": [
        {
            "ioc_value": "141.94.164.126:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 08:49:58",
            "last_seen_utc": "2026-06-29 09:40:02",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837273": [
        {
            "ioc_value": "143.244.165.24:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 08:49:57",
            "last_seen_utc": "2026-06-29 09:40:04",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837265": [
        {
            "ioc_value": "45.192.211.63:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 08:21:13",
            "last_seen_utc": "2026-09-01 02:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837262": [
        {
            "ioc_value": "picturesurprise.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-25 08:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837263": [
        {
            "ioc_value": "liquidbalance.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-25 08:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837261": [
        {
            "ioc_value": "95.215.32.3:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 08:19:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837260": [
        {
            "ioc_value": "dentalfaxgate.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 08:17:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837259": [
        {
            "ioc_value": "91.215.85.231:8040",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 08:17:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837258": [
        {
            "ioc_value": "46.17.96.253:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-25 08:16:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837244": [
        {
            "ioc_value": "23.94.187.126:88",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:08:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837242": [
        {
            "ioc_value": "101.43.24.136:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:08:03",
            "last_seen_utc": "2026-08-28 08:08:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837243": [
        {
            "ioc_value": "169.239.128.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:08:03",
            "last_seen_utc": "2026-09-01 02:46:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837240": [
        {
            "ioc_value": "176.121.48.1:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:08:01",
            "last_seen_utc": "2026-08-04 08:18:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837241": [
        {
            "ioc_value": "176.121.51.1:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:08:01",
            "last_seen_utc": "2026-06-27 14:10:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837237": [
        {
            "ioc_value": "172.245.196.240:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:56",
            "last_seen_utc": "2026-08-28 08:09:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837239": [
        {
            "ioc_value": "8.134.255.60:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:56",
            "last_seen_utc": "2026-08-28 08:09:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837236": [
        {
            "ioc_value": "176.121.60.1:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:51",
            "last_seen_utc": "2026-08-26 07:55:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837235": [
        {
            "ioc_value": "176.121.62.10:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:50",
            "last_seen_utc": "2026-08-02 07:50:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837234": [
        {
            "ioc_value": "102.134.53.147:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837232": [
        {
            "ioc_value": "39.100.71.226:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:40",
            "last_seen_utc": "2026-06-26 08:23:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837233": [
        {
            "ioc_value": "192.52.167.193:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:40",
            "last_seen_utc": "2026-07-04 08:18:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837231": [
        {
            "ioc_value": "209.126.7.188:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837230": [
        {
            "ioc_value": "67.216.197.83:2086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:36",
            "last_seen_utc": "2026-06-26 08:23:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837229": [
        {
            "ioc_value": "43.254.167.120:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-25 08:07:35",
            "last_seen_utc": "2026-06-26 08:23:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837224": [
        {
            "ioc_value": "oay019z6.1xfa.bio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 07:44:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837218": [
        {
            "ioc_value": "http://110.37.44.158:58509/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 06:44:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.44.158",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837219": [
        {
            "ioc_value": "http://223.123.72.169:60310/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 06:44:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.169",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837207": [
        {
            "ioc_value": "iiillillilliiliilllliilllililiillillililiiliillilliiiiiliiillli.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 06:06:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837208": [
        {
            "ioc_value": "ddos.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 06:06:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837209": [
        {
            "ioc_value": "bill-toulas-egg-head-ugly-nigga.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 06:06:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837211": [
        {
            "ioc_value": "204.10.160.167:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-25 05:40:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/59bb710abe6edad7040227e259f3665f2852f2e954ac82059c746f54e947e6cd/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837212": [
        {
            "ioc_value": "204.10.160.167:45683",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 05:40:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/59bb710abe6edad7040227e259f3665f2852f2e954ac82059c746f54e947e6cd/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837210": [
        {
            "ioc_value": "172.111.169.85:56090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 05:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837206": [
        {
            "ioc_value": "kereta-tinted.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-25 05:31:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837205": [
        {
            "ioc_value": "hatcae.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-25 05:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837199": [
        {
            "ioc_value": "157.20.182.81:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:29",
            "last_seen_utc": "2026-08-27 07:52:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837200": [
        {
            "ioc_value": "62.60.226.183:484",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:29",
            "last_seen_utc": "2026-07-13 17:07:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837201": [
        {
            "ioc_value": "157.20.182.81:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:29",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837202": [
        {
            "ioc_value": "157.20.182.81:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:29",
            "last_seen_utc": "2026-07-13 17:07:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837203": [
        {
            "ioc_value": "196.251.121.90:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:29",
            "last_seen_utc": "2026-07-13 17:07:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837204": [
        {
            "ioc_value": "157.20.182.81:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:29",
            "last_seen_utc": "2026-07-21 05:35:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837196": [
        {
            "ioc_value": "196.251.121.90:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:28",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837197": [
        {
            "ioc_value": "196.251.121.90:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:28",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837198": [
        {
            "ioc_value": "196.251.121.90:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-25 05:28:28",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837195": [
        {
            "ioc_value": "206.189.94.70:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-25 05:22:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1837187": [
        {
            "ioc_value": "c2.saintpetersburgresident.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 05:14:15",
            "last_seen_utc": "2026-07-28 06:23:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837188": [
        {
            "ioc_value": "peer.saintpetersburgresident.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 05:14:15",
            "last_seen_utc": "2026-07-28 06:23:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837189": [
        {
            "ioc_value": "217.60.195.160:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 05:14:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837190": [
        {
            "ioc_value": "217.60.195.160:14",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 05:14:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837191": [
        {
            "ioc_value": "verificationscodes.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 05:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837185": [
        {
            "ioc_value": "pa9xqikq.1000shart.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 03:43:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837184": [
        {
            "ioc_value": "q4ylri6k.1000shart.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 03:42:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837182": [
        {
            "ioc_value": "jpgomd.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-25 03:23:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837183": [
        {
            "ioc_value": "bksnb.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-25 03:23:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837069": [
        {
            "ioc_value": "363ee51fc02f20cb206039434758c3afa1c71bc7d316c6db4a39b0d310ab92f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 03:14:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/372f19a45d0eb4c8c52117c6ae2bb8040a91bc72be8670623f957a18c2166985",
            "tags": "dotnet,Remcos,stego-loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837070": [
        {
            "ioc_value": "372f19a45d0eb4c8c52117c6ae2bb8040a91bc72be8670623f957a18c2166985",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-25 03:14:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/372f19a45d0eb4c8c52117c6ae2bb8040a91bc72be8670623f957a18c2166985",
            "tags": "dotnet,Remcos,stego-loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837096": [
        {
            "ioc_value": "https://gbaof.com/hair/hia8qef5nj2o/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:14:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/1eb89fbbdeaca143288cd71e73304fedf5abbeb093bfe64bce48ccb4e5158be9",
            "tags": "clickfix,kongtuke,loader,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837095": [
        {
            "ioc_value": "159.223.162.164:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:14:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/1eb89fbbdeaca143288cd71e73304fedf5abbeb093bfe64bce48ccb4e5158be9",
            "tags": "clickfix,kongtuke,loader,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837097": [
        {
            "ioc_value": "https://gbaof.com/hair/o48ljeia99/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:14:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/1eb89fbbdeaca143288cd71e73304fedf5abbeb093bfe64bce48ccb4e5158be9",
            "tags": "clickfix,kongtuke,loader,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837098": [
        {
            "ioc_value": "1eb89fbbdeaca143288cd71e73304fedf5abbeb093bfe64bce48ccb4e5158be9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:14:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/1eb89fbbdeaca143288cd71e73304fedf5abbeb093bfe64bce48ccb4e5158be9",
            "tags": "clickfix,kongtuke,loader,powershell",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1837100": [
        {
            "ioc_value": "144.31.151.138:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-25 03:14:16",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "c2,ddos,go,orbital",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837101": [
        {
            "ioc_value": "62.238.37.207:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-25 03:14:14",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ddos,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837102": [
        {
            "ioc_value": "158.51.96.38:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xorddos",
            "malware_alias": "XORDDOS",
            "malware_printable": "XOR DDoS",
            "first_seen_utc": "2026-06-25 03:14:14",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ssh,xorddos",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837103": [
        {
            "ioc_value": "45.81.243.62:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:14",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "outlaw,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837104": [
        {
            "ioc_value": "46.101.213.236:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:13",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "outlaw,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837105": [
        {
            "ioc_value": "144.31.158.144:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837106": [
        {
            "ioc_value": "27.153.157.138:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837107": [
        {
            "ioc_value": "83.229.8.197:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:11",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837108": [
        {
            "ioc_value": "101.47.8.187:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:10",
            "last_seen_utc": "2026-07-01 19:00:32",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837109": [
        {
            "ioc_value": "118.145.245.82:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837110": [
        {
            "ioc_value": "47.251.34.92:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:09",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837111": [
        {
            "ioc_value": "185.214.96.142:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "diicot,docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837112": [
        {
            "ioc_value": "185.226.196.12:2375",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:14:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,mcp-scanner",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837113": [
        {
            "ioc_value": "42.121.220.29:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837114": [
        {
            "ioc_value": "129.211.222.51:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:06",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837115": [
        {
            "ioc_value": "207.180.232.121:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:06",
            "last_seen_utc": "2026-06-29 09:40:09",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837116": [
        {
            "ioc_value": "89.125.35.26:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:05",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "exfil,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837117": [
        {
            "ioc_value": "138.199.15.156:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:05",
            "last_seen_utc": "2026-06-26 08:50:20",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837118": [
        {
            "ioc_value": "138.199.15.175:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837119": [
        {
            "ioc_value": "185.244.213.94:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-25 03:14:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837120": [
        {
            "ioc_value": "85.215.192.100:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837121": [
        {
            "ioc_value": "47.253.245.52:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:03",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837122": [
        {
            "ioc_value": "37.27.197.191:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837123": [
        {
            "ioc_value": "80.241.209.14:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837124": [
        {
            "ioc_value": "152.42.252.134:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-25 03:14:00",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1837130": [
        {
            "ioc_value": "https://raksasa633.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/raksasa633.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837131": [
        {
            "ioc_value": "https://www.seinfor.pe/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.seinfor.pe",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837132": [
        {
            "ioc_value": "https://sport666.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:59",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sport666.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837136": [
        {
            "ioc_value": "https://mindtribe.io/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mindtribe.io",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837137": [
        {
            "ioc_value": "https://ono138.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ono138.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837138": [
        {
            "ioc_value": "https://pakettogel.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/pakettogel.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837143": [
        {
            "ioc_value": "153.75.251.77:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837141": [
        {
            "ioc_value": "153.75.251.77:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837142": [
        {
            "ioc_value": "153.75.251.77:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837144": [
        {
            "ioc_value": "157.254.167.56:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837145": [
        {
            "ioc_value": "157.254.167.56:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837146": [
        {
            "ioc_value": "157.254.167.56:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837147": [
        {
            "ioc_value": "103.56.155.127:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837148": [
        {
            "ioc_value": "103.56.155.127:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837149": [
        {
            "ioc_value": "103.56.155.127:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837150": [
        {
            "ioc_value": "151.242.125.234:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837151": [
        {
            "ioc_value": "151.242.125.234:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837153": [
        {
            "ioc_value": "178.83.206.213:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:48",
            "last_seen_utc": "2026-08-04 19:20:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837152": [
        {
            "ioc_value": "151.242.125.234:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837154": [
        {
            "ioc_value": "178.83.206.213:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:46",
            "last_seen_utc": "2026-08-04 19:20:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837155": [
        {
            "ioc_value": "178.83.206.213:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:45",
            "last_seen_utc": "2026-08-04 19:20:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837156": [
        {
            "ioc_value": "156.246.90.214:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:45",
            "last_seen_utc": "2026-08-06 18:43:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837157": [
        {
            "ioc_value": "156.246.90.214:123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:44",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837158": [
        {
            "ioc_value": "156.246.90.214:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:43",
            "last_seen_utc": "2026-08-13 19:47:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837159": [
        {
            "ioc_value": "unsinkable.boats",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837040": [
        {
            "ioc_value": "https://namaste-bungalows.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/namaste-bungalows.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837042": [
        {
            "ioc_value": "yellowrace.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-25 03:13:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "connectwise,screenconnect",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837044": [
        {
            "ioc_value": "impresa.pub",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.backdoorit",
            "malware_alias": "backd00rit",
            "malware_printable": "Backdoorit",
            "first_seen_utc": "2026-06-25 03:13:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "backdoor",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837045": [
        {
            "ioc_value": "https://synthexisgroupllc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/synthexisgroupllc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837053": [
        {
            "ioc_value": "https://www.zhouruntech.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.zhouruntech.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837064": [
        {
            "ioc_value": "http://111.164.238.73:57439/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 03:13:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/111.164.238.73",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837065": [
        {
            "ioc_value": "http://119.160.215.52:35806/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 03:13:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.160.215.52",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837066": [
        {
            "ioc_value": "http://115.42.75.110:45397/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 03:13:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.42.75.110",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837067": [
        {
            "ioc_value": "https://studioreverse.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/studioreverse.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837068": [
        {
            "ioc_value": "clicky.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-25 03:13:24",
            "last_seen_utc": "2026-07-21 02:38:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "gray,script,tracker,unmalicious",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837161": [
        {
            "ioc_value": "squibblypuff.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837162": [
        {
            "ioc_value": "druzya-iz-kartonnoy-korobki.christmas",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837163": [
        {
            "ioc_value": "176.65.139.225:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-25 03:13:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1837166": [
        {
            "ioc_value": "147.182.217.141:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-25 03:13:15",
            "last_seen_utc": "2026-07-02 13:04:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1837176": [
        {
            "ioc_value": "http://110.37.84.200:46837/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-25 03:13:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.84.200",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1837180": [
        {
            "ioc_value": "g3byemsx.xbetone.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 02:56:45",
            "last_seen_utc": "2026-07-02 17:01:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837177": [
        {
            "ioc_value": "rigel1poker.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-25 01:41:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837172": [
        {
            "ioc_value": "http://94.26.83.70/778052944783478db669.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-24 23:55:40",
            "last_seen_utc": "2026-06-28 01:34:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/faecc582b335ed2b680ea464419c30943a04c05117ba76cefdd453ec983febbe/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837171": [
        {
            "ioc_value": "45.227.253.121:25338",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 23:48:40",
            "last_seen_utc": "2026-07-27 14:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837170": [
        {
            "ioc_value": "130.94.59.160:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 23:48:22",
            "last_seen_utc": "2026-08-03 10:47:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837169": [
        {
            "ioc_value": "121.4.76.54:8091",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 23:48:20",
            "last_seen_utc": "2026-07-27 08:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837168": [
        {
            "ioc_value": "glbr7plk.parsballl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 23:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837167": [
        {
            "ioc_value": "parsballl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 23:41:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837164": [
        {
            "ioc_value": "https://rdv.holidaysm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 22:25:19",
            "last_seen_utc": "2026-06-25 05:25:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837165": [
        {
            "ioc_value": "rdv.holidaysm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 22:25:19",
            "last_seen_utc": "2026-06-25 05:25:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837133": [
        {
            "ioc_value": "onlinecasinorouletteblackjack.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 21:40:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837129": [
        {
            "ioc_value": "b97pimiu.vip1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 21:19:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837128": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/swiftvpnaccess/wanting-public-driver-barricade/256446-uuid",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 21:06:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837125": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/swiftvpnaccess/wanting-public-driver-barricade/78956-uuid",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 20:56:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837094": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/galinavsuk6/text-set/vdr",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 19:58:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837093": [
        {
            "ioc_value": "89.124.93.139:49999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-24 19:45:44",
            "last_seen_utc": "2026-07-25 08:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837092": [
        {
            "ioc_value": "83.136.210.74:7077",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 19:45:41",
            "last_seen_utc": "2026-07-25 08:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837091": [
        {
            "ioc_value": "62.85.21.181:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 19:45:33",
            "last_seen_utc": "2026-08-07 08:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837090": [
        {
            "ioc_value": "46.246.4.2:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-24 19:45:21",
            "last_seen_utc": "2026-07-25 08:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837088": [
        {
            "ioc_value": "45.74.7.163:6448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:45:18",
            "last_seen_utc": "2026-08-14 08:46:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837089": [
        {
            "ioc_value": "45.74.7.164:6913",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:45:18",
            "last_seen_utc": "2026-08-14 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837087": [
        {
            "ioc_value": "45.74.7.155:1202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:45:17",
            "last_seen_utc": "2026-08-14 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837086": [
        {
            "ioc_value": "27.124.43.241:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-24 19:44:57",
            "last_seen_utc": "2026-07-30 08:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837085": [
        {
            "ioc_value": "198.23.185.82:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 19:44:11",
            "last_seen_utc": "2026-07-25 08:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837084": [
        {
            "ioc_value": "192.227.219.81:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:44:04",
            "last_seen_utc": "2026-07-24 18:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837082": [
        {
            "ioc_value": "185.115.164.59:65372",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:43:53",
            "last_seen_utc": "2026-07-24 18:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837083": [
        {
            "ioc_value": "185.115.164.60:10251",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:43:53",
            "last_seen_utc": "2026-07-25 08:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837081": [
        {
            "ioc_value": "178.16.55.214:55380",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-24 19:43:46",
            "last_seen_utc": "2026-07-26 08:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837080": [
        {
            "ioc_value": "146.190.80.105:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-24 19:43:22",
            "last_seen_utc": "2026-09-01 02:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837079": [
        {
            "ioc_value": "141.98.10.150:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:43:21",
            "last_seen_utc": "2026-08-08 18:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837078": [
        {
            "ioc_value": "109.199.97.174:6010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-24 19:43:12",
            "last_seen_utc": "2026-07-26 08:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837077": [
        {
            "ioc_value": "107.173.9.99:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 19:43:11",
            "last_seen_utc": "2026-07-24 18:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837076": [
        {
            "ioc_value": "xxgbaenv.onlineblackjackscam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 19:40:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837075": [
        {
            "ioc_value": "onlineblackjackscam.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 19:40:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837074": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/galinavsuk6/text-set/vbr",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 19:39:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837073": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/galinavsuk6/fjhg-567/hm-354",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 19:17:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837071": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/galinavsuk6/fjhg-567/hum",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 18:47:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837054": [
        {
            "ioc_value": "online-blackjack-j.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 17:39:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837048": [
        {
            "ioc_value": "hbcq8sv3.oghabbet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 17:15:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837047": [
        {
            "ioc_value": "oghabbet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 17:13:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1837043": [
        {
            "ioc_value": "4o63jpbm.ekhtelalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 16:57:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1837039": [
        {
            "ioc_value": "caishendaole.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-24 16:25:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3f72211404ff5670355048653520db21461daab20f4b7e09aeb1fd987ae1b939/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837038": [
        {
            "ioc_value": "http://qqdhq.cn/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-24 16:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837037": [
        {
            "ioc_value": "191.223.42.2:16280",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-24 16:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837036": [
        {
            "ioc_value": "http://somrapum.mywebcommunity.org/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.azorult",
            "malware_alias": "PuffStealer,Rultazo",
            "malware_printable": "Azorult",
            "first_seen_utc": "2026-06-24 16:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "AZORult",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837035": [
        {
            "ioc_value": "fb88.farm",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 16:15:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3061e2a6b00e4874345eb1e9dcab0e2390e0073608b31e5925e27af462ccff1a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1837033": [
        {
            "ioc_value": "https://www.hyperx.com.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 16:09:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.hyperx.com.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837034": [
        {
            "ioc_value": "ljkfok0p.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 16:02:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836930": [
        {
            "ioc_value": "hotstz.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-24 15:49:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260624-pxxrescs3x/behavioral2",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836931": [
        {
            "ioc_value": "strgsd.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-24 15:49:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260622-rvmjsac12p",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836936": [
        {
            "ioc_value": "https://avipri.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/avipri.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836945": [
        {
            "ioc_value": "heartbeatlinkbot.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 15:49:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/host/heartbeatlinkbot.online/",
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836946": [
        {
            "ioc_value": "157.230.237.88:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-24 15:49:05",
            "last_seen_utc": "2026-06-30 01:04:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836949": [
        {
            "ioc_value": "https://eivmusic.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/eivmusic.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836950": [
        {
            "ioc_value": "https://fullsteamahead.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fullsteamahead.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836951": [
        {
            "ioc_value": "https://dojoinvicto.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dojoinvicto.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836952": [
        {
            "ioc_value": "https://entrepreneur-businesshub-international.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/entrepreneur-businesshub-international.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836953": [
        {
            "ioc_value": "https://kirmanalidris.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:03",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kirmanalidris.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836954": [
        {
            "ioc_value": "https://koreatravellog.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/koreatravellog.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836955": [
        {
            "ioc_value": "https://innenausstattung-mah.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/innenausstattung-mah.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836956": [
        {
            "ioc_value": "https://www.legalsolutions-florida.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.legalsolutions-florida.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836957": [
        {
            "ioc_value": "https://kakawiperu.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kakawiperu.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836958": [
        {
            "ioc_value": "https://lopalooza.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lopalooza.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836959": [
        {
            "ioc_value": "https://www.inkaravany.sk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:49:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.inkaravany.sk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836964": [
        {
            "ioc_value": "https://laabali.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/laabali.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836965": [
        {
            "ioc_value": "https://perisai4d.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/perisai4d.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836966": [
        {
            "ioc_value": "https://milanolivings.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/milanolivings.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836967": [
        {
            "ioc_value": "https://motomaniasrl.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/motomaniasrl.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836969": [
        {
            "ioc_value": "https://peharava.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:55",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/peharava.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836968": [
        {
            "ioc_value": "https://medicogadget.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/medicogadget.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836971": [
        {
            "ioc_value": "https://physiothetics.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:54",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/physiothetics.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836970": [
        {
            "ioc_value": "https://prohealingblog.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:53",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/prohealingblog.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836977": [
        {
            "ioc_value": "https://ranklocally.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ranklocally.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836985": [
        {
            "ioc_value": "https://www.transportesuriarte.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.transportesuriarte.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836979": [
        {
            "ioc_value": "https://seamasterscf.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/seamasterscf.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836980": [
        {
            "ioc_value": "https://romefirstchoicetours.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/romefirstchoicetours.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836981": [
        {
            "ioc_value": "https://puntoscardinalestv.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/puntoscardinalestv.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836984": [
        {
            "ioc_value": "https://tubephanoi.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tubephanoi.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836978": [
        {
            "ioc_value": "https://www.thenewyorkentrepreneur.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.thenewyorkentrepreneur.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836986": [
        {
            "ioc_value": "https://visaovencedora.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/visaovencedora.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836974": [
        {
            "ioc_value": "https://rambhabedcollege.ac.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rambhabedcollege.ac.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836975": [
        {
            "ioc_value": "https://rr99-vn.online/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rr99-vn.online",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836976": [
        {
            "ioc_value": "https://savana99.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/savana99.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836973": [
        {
            "ioc_value": "http://193.148.56.150/3eab1140a670beece97d.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-24 15:48:45",
            "last_seen_utc": "2026-06-24 19:09:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,default,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836987": [
        {
            "ioc_value": "https://visasistltd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/visasistltd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836988": [
        {
            "ioc_value": "https://valltorp.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/valltorp.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836989": [
        {
            "ioc_value": "https://westmillsbritishschool.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/westmillsbritishschool.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836990": [
        {
            "ioc_value": "https://yesproperties.com.ng/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 15:48:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/yesproperties.com.ng",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1837032": [
        {
            "ioc_value": "finger.claudenell.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 15:48:41",
            "last_seen_utc": "2026-06-30 16:46:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "tanner"
        }
    ],
    "1837029": [
        {
            "ioc_value": "a8c80fd91c3104f110be2bea8288621eadba7d4e9060fe9d9ae97719d5a298f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-24 15:33:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837030": [
        {
            "ioc_value": "fbff8303fa9e9967753d6c32f227045d3dc98536",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-24 15:33:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837031": [
        {
            "ioc_value": "f6ad32434247191f22bb92daec16df79",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-24 15:33:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837026": [
        {
            "ioc_value": "c5c2c8515c39bb0752d0e4064af465978b8cbb12a762b0c2411297262c4230e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-24 15:33:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837027": [
        {
            "ioc_value": "6f02fcb2e516ca88978750efcbd6810685c501c5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-24 15:33:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837028": [
        {
            "ioc_value": "375e3e0945e1aae4a3ed38420238db1b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-24 15:33:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837023": [
        {
            "ioc_value": "69642cd14966d9ab7e824fa28c3f06b00c18a3d6de683d3754e41b5424d4f750",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-24 15:33:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837024": [
        {
            "ioc_value": "68b5904aeae8503ce30dc89dd38dfeba13d4ebde",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-24 15:33:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837025": [
        {
            "ioc_value": "e2e001f0896a74144a4fb0bbabe8e672",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-24 15:33:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837020": [
        {
            "ioc_value": "a54318d38eb5b85ffa139155072f9581b55eab73b03aed1cfba6431dda1fc7c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-24 15:33:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837021": [
        {
            "ioc_value": "35738a73dba62cbd14c11590c35927ad729107d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-24 15:33:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837022": [
        {
            "ioc_value": "7f4dfafd6d37ad850e5d38f090eed2c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-24 15:33:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837017": [
        {
            "ioc_value": "e27a5045f2660cb54dff7d7e161e87dcb752a50c6ada34941615c0995349f0db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-24 15:33:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837018": [
        {
            "ioc_value": "4203e1760ed2c7b39ddaa7f05a850efc74ef23ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-24 15:33:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837019": [
        {
            "ioc_value": "02729d88a009fbfd895cf9b5395ff8bb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-24 15:33:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837015": [
        {
            "ioc_value": "de672f778b3a568320a1f39a911f018215bfdf47",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-24 15:33:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837016": [
        {
            "ioc_value": "67b8124fadb279c17d379cb2945280d3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-24 15:33:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837011": [
        {
            "ioc_value": "3cbb2b2f06b3a55dafc4f53f0babb163668ecd5832363d69b5d96c378f6c7f85",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837012": [
        {
            "ioc_value": "a6169d5698999d2f95250fd6ebd5b1caf321d7cd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837013": [
        {
            "ioc_value": "838690a59454ceca4ead19bb6182cce7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837014": [
        {
            "ioc_value": "8540b339ae5a8ce9b54e4a41e42a364b317d78ac6679a8a845d33c27d3f435c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-24 15:33:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837010": [
        {
            "ioc_value": "d89940de135aefb14006171ce9583685",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 15:33:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837007": [
        {
            "ioc_value": "1056d0afee214f439f0b8f9a94144cb6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837008": [
        {
            "ioc_value": "b1b2ce043a42e8a9fd97d478bf86776103b2be910dfcff97e7d9ce6378e7701e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 15:33:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837009": [
        {
            "ioc_value": "8cacd12ab5c7695626d67d4d5bc13c7510217039",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 15:33:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837004": [
        {
            "ioc_value": "3b39953c24882ef34dc75ef5badb0ada",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837005": [
        {
            "ioc_value": "4109c17426627535aa43650672e76150d73150bb5358222d01ac4af02f6aec9f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837006": [
        {
            "ioc_value": "2143eb651300fee9742ee3a7f74d7ae2918b1735",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837001": [
        {
            "ioc_value": "028f4d4e2a10746578248da6e51ff891",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-24 15:33:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837002": [
        {
            "ioc_value": "2f5a0566c5576efac2c72cdd0270840e4171c5b72e0fd7058b70e0f0c49d8f46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837003": [
        {
            "ioc_value": "18e09a5a3ab1a020b0e5db61e0639587daacda53",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836999": [
        {
            "ioc_value": "90a27fd7f19422c8b76ac2961c329b544ce06f1320c98295ab5fcaceff02d543",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-24 15:33:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1837000": [
        {
            "ioc_value": "d8613f56f7a2c1e8b22d503db11f6a98746ccb44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-24 15:33:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836995": [
        {
            "ioc_value": "ffba0d0ec1848f799a0ab489affb8ab7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836996": [
        {
            "ioc_value": "e5f8ab450586be710d9bd3b2a9e6f421a77567736b920833868045e1f0c7b44c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836997": [
        {
            "ioc_value": "ace8583dfc4769b9b6db1e93679ae06dd23c040b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836998": [
        {
            "ioc_value": "86cdb9c9aed5bc74090be5d955162a2a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836993": [
        {
            "ioc_value": "294ae135fa8ca524f5a78f8a12e2ed99c535bc58c86333dba3759ab738e971c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836994": [
        {
            "ioc_value": "745a2a45f00937bba7636414b4d9109620e10ba2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 15:33:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836983": [
        {
            "ioc_value": "http://hotstz.xyz:9549",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-24 15:15:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/171ff07d334a93105add23e6993e7efdf04010b42a31acae8d254472b1a2f6e5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836982": [
        {
            "ioc_value": "jetbt9.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 15:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836948": [
        {
            "ioc_value": "9baeu5sl.zistzirezarebin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 13:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836947": [
        {
            "ioc_value": "zistzirezarebin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 13:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836926": [
        {
            "ioc_value": "http://72.61.196.110:8080/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 12:30:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260624-hg6aasax3r/behavioral1",
            "tags": "c2,Mirai",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836918": [
        {
            "ioc_value": "xstrapper.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:30:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836919": [
        {
            "ioc_value": "instrapper.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836920": [
        {
            "ioc_value": "voidgame.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:30:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836923": [
        {
            "ioc_value": "xeno-plus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:30:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836929": [
        {
            "ioc_value": "cloudbreachdetection.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:27:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836928": [
        {
            "ioc_value": "premiumcloudguard.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:26:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836927": [
        {
            "ioc_value": "cloudsupergatekeeper.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 12:26:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836925": [
        {
            "ioc_value": "60.217.58.49:2121",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 11:48:48",
            "last_seen_utc": "2026-08-28 08:08:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836924": [
        {
            "ioc_value": "43.131.240.236:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 11:48:29",
            "last_seen_utc": "2026-07-26 08:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836922": [
        {
            "ioc_value": "165.227.199.109:8893",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-24 11:45:52",
            "last_seen_utc": "2026-06-27 09:10:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/90a27fd7f19422c8b76ac2961c329b544ce06f1320c98295ab5fcaceff02d543/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836921": [
        {
            "ioc_value": "http://kereta-tinted.com:8893",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-24 11:45:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/90a27fd7f19422c8b76ac2961c329b544ce06f1320c98295ab5fcaceff02d543/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836917": [
        {
            "ioc_value": "zarinfile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 11:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836903": [
        {
            "ioc_value": "transportesuriarte.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-24 11:04:25",
            "last_seen_utc": "2026-08-28 11:45:35",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,injected,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836824": [
        {
            "ioc_value": "entrepreneur-businesshub-international.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-24 11:04:14",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,injected,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836822": [
        {
            "ioc_value": "eivmusic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-24 11:04:13",
            "last_seen_utc": "2026-08-28 11:41:58",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,injected,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836787": [
        {
            "ioc_value": "https://dev.esteghlal.news/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 10:25:23",
            "last_seen_utc": "2026-06-24 12:25:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836788": [
        {
            "ioc_value": "dev.esteghlal.news",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 10:25:23",
            "last_seen_utc": "2026-06-24 12:25:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836785": [
        {
            "ioc_value": "https://dev.holidaysm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 10:25:11",
            "last_seen_utc": "2026-06-24 12:25:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836786": [
        {
            "ioc_value": "dev.holidaysm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 10:25:11",
            "last_seen_utc": "2026-06-24 12:25:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836784": [
        {
            "ioc_value": "95.81.79.153:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-24 09:45:56",
            "last_seen_utc": "2026-08-14 08:47:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836783": [
        {
            "ioc_value": "45.74.7.160:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 09:45:24",
            "last_seen_utc": "2026-08-14 18:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836782": [
        {
            "ioc_value": "45.138.16.56:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 09:45:19",
            "last_seen_utc": "2026-07-24 18:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836781": [
        {
            "ioc_value": "38.207.177.71:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 09:45:14",
            "last_seen_utc": "2026-09-01 02:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836780": [
        {
            "ioc_value": "217.60.195.194:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 09:45:00",
            "last_seen_utc": "2026-07-30 16:45:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836779": [
        {
            "ioc_value": "192.227.219.81:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 09:44:09",
            "last_seen_utc": "2026-07-27 18:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836777": [
        {
            "ioc_value": "185.115.161.32:6943",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-24 09:43:58",
            "last_seen_utc": "2026-07-24 18:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836778": [
        {
            "ioc_value": "185.115.164.59:30023",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 09:43:58",
            "last_seen_utc": "2026-07-24 07:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836775": [
        {
            "ioc_value": "154.219.98.36:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-24 09:43:30",
            "last_seen_utc": "2026-08-10 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836776": [
        {
            "ioc_value": "154.219.98.36:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-24 09:43:30",
            "last_seen_utc": "2026-08-10 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836774": [
        {
            "ioc_value": "141.98.10.150:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 09:43:23",
            "last_seen_utc": "2026-08-10 08:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836773": [
        {
            "ioc_value": "128.90.115.181:7011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-24 09:43:17",
            "last_seen_utc": "2026-07-24 18:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836771": [
        {
            "ioc_value": "107.172.140.187:32333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-24 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836772": [
        {
            "ioc_value": "107.173.9.99:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 09:43:12",
            "last_seen_utc": "2026-07-27 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836770": [
        {
            "ioc_value": "107.172.133.195:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 09:43:11",
            "last_seen_utc": "2026-07-27 18:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836767": [
        {
            "ioc_value": "102.220.160.222:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 09:43:04",
            "last_seen_utc": "2026-07-29 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836768": [
        {
            "ioc_value": "102.220.160.250:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 09:43:04",
            "last_seen_utc": "2026-07-28 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836769": [
        {
            "ioc_value": "102.220.160.250:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-24 09:43:04",
            "last_seen_utc": "2026-07-28 18:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836766": [
        {
            "ioc_value": "crimsonnightsky.top",
            "ioc_type": "domain",
            "threat_type": "cc_skimming",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-24 09:24:14",
            "last_seen_utc": "2026-07-10 11:48:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Magecart",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836765": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/galinavsuk6/sdg7-j9/r-fd7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 09:21:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836764": [
        {
            "ioc_value": "5.101.84.223:4242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-24 09:16:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836753": [
        {
            "ioc_value": "http://109.104.153.60/bins/frosty.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 09:14:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/109.104.153.60",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836754": [
        {
            "ioc_value": "http://89.32.41.16/bins/kla.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 09:14:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/89.32.41.16",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836755": [
        {
            "ioc_value": "http://91.92.40.176:67/sonnet.x86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 09:14:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.92.40.176",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836761": [
        {
            "ioc_value": "https://www.campeggioletizialivigno.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 09:14:10",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.campeggioletizialivigno.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836763": [
        {
            "ioc_value": "k9qxyqt8.jetbt8.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 09:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836762": [
        {
            "ioc_value": "jetbt8.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 09:11:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836759": [
        {
            "ioc_value": "topclouddefence.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 08:43:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836758": [
        {
            "ioc_value": "gatekeepernet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 08:43:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836757": [
        {
            "ioc_value": "captchadefence.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 08:43:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836756": [
        {
            "ioc_value": "personalprogrammupdater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 08:43:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836749": [
        {
            "ioc_value": "https://superboomer.world/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 08:23:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/superboomer.world",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836750": [
        {
            "ioc_value": "https://merkantalolol.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 08:23:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/merkantalolol.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836748": [
        {
            "ioc_value": "45.225.135.24:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-24 07:51:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836747": [
        {
            "ioc_value": "192.163.162.63:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-24 07:48:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836746": [
        {
            "ioc_value": "144.124.236.93:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-24 07:47:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836745": [
        {
            "ioc_value": "45.192.211.77:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-24 07:46:37",
            "last_seen_utc": "2026-09-01 02:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d025a29613e300d7755f878eb1d23d8a8a042cb2d3eb9005d66664ab9b97c677/",
            "tags": "PureHVNC,PureRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836744": [
        {
            "ioc_value": "216.126.237.248:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:45:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/93b3fd82886a45a090e16c25da026a8197694567ecdb5bcd9aaa787e3f5f79d7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836743": [
        {
            "ioc_value": "216.126.227.207:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:44:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e87151a8c2d6069a986895f5a7168c8ab98b52c5f917211d8d13e1156c0249eb/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836742": [
        {
            "ioc_value": "216.126.227.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:44:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0128796cc2b8849ba974e79ee44de0a8761550082e8c7ef920690e9b5c3dc99c/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836741": [
        {
            "ioc_value": "172.86.126.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:43:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f4dd083eebd66cb1829b90dd2f9cbf9f180a4106a23d4ecf35c0b91125a4909f/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836739": [
        {
            "ioc_value": "172.86.117.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:41:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/82272ba8a1224ba27acf6790fce88e0b60380a3e6ab38939d48cd35e84e3f5e5/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836738": [
        {
            "ioc_value": "167.88.166.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:40:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d424c09bb29a1c3c6c97de53d7ecee5a89060477715948d514bb06dcee0d381/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836737": [
        {
            "ioc_value": "167.88.166.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:40:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09318d5d0f9bda9ff2a4137a4025e042187804d36709c1228d98a805f6833f52/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836736": [
        {
            "ioc_value": "144.172.99.94:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:39:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7127cc1a27fc514f5712dc78377877ff42bb42cb05ff217eb496166939a8c53e/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836735": [
        {
            "ioc_value": "144.172.94.21:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:39:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e58a15a0e14a06d42f8520559225146b41245047bea80398eaa609e181b1f939/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836734": [
        {
            "ioc_value": "144.172.116.114:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:38:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/acb6362aea9d26d1992131fddb32ec6ae6ce8a1a28b853593f5475f7fb212274/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836733": [
        {
            "ioc_value": "144.172.115.45:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:37:39",
            "last_seen_utc": "2026-08-25 14:16:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1198a85b96154a18dfb7a2bb60e87750e21835e925aca7c89ed54d0e943f7bce/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836732": [
        {
            "ioc_value": "144.172.109.163:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-24 07:35:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/966ce68b2eae61e5528a9f7a8cca097d1d1c8d698dd2006d8a45605c29894459/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836730": [
        {
            "ioc_value": "67.216.197.83:2083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 07:27:15",
            "last_seen_utc": "2026-06-25 08:08:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836731": [
        {
            "ioc_value": "67.216.197.83:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 07:27:15",
            "last_seen_utc": "2026-06-26 08:23:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836729": [
        {
            "ioc_value": "103.201.131.147:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 07:26:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836728": [
        {
            "ioc_value": "67.216.197.83:2082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 07:26:56",
            "last_seen_utc": "2026-06-25 08:07:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836727": [
        {
            "ioc_value": "jetbt7.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 07:11:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836724": [
        {
            "ioc_value": "m2p5bg3q.ahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 06:56:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836723": [
        {
            "ioc_value": "annexs.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-24 06:55:57",
            "last_seen_utc": "2026-08-04 06:12:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836722": [
        {
            "ioc_value": "45.131.214.241:34267",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:55:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5d2991a85516c16d2453c18eaf00258c975a420daf646d9b4926f5ea539312f6/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836720": [
        {
            "ioc_value": "91.92.240.107:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-24 06:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/905048266f359367fea147487dce73f4f7c40c631fa9e0dffc74cdebc787db33/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836721": [
        {
            "ioc_value": "91.92.240.107:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-24 06:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/905048266f359367fea147487dce73f4f7c40c631fa9e0dffc74cdebc787db33/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836366": [
        {
            "ioc_value": "192.142.28.77:6742",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1836367": [
        {
            "ioc_value": "genddos.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:35",
            "last_seen_utc": "2026-08-14 13:17:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1836369": [
        {
            "ioc_value": "three.followfromapps.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 06:36:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://queer.hacktivis.me/objects/daf381fc-a0a7-42d4-9626-1bc143a8b217",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836370": [
        {
            "ioc_value": "reef-swan-lagoon.pages.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 06:36:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://queer.hacktivis.me/objects/daf381fc-a0a7-42d4-9626-1bc143a8b217",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836371": [
        {
            "ioc_value": "http://72.255.26.220:48951/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.26.220",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836372": [
        {
            "ioc_value": "aedc3120dd7be8cb7336e8e6ed9b31fcdc01e10bc51e3491053858a4d403f001",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:33",
            "last_seen_utc": "2026-08-25 00:20:16",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/89.32.41.16",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836373": [
        {
            "ioc_value": "33efcefc39dabf8181aaf22dfab876531a86beb077a0eb87c77c80c5dadf2fa3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:30",
            "last_seen_utc": "2026-08-25 00:20:29",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/109.104.153.60",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836374": [
        {
            "ioc_value": "863bfa0c0feb80dcdb7b9d3312c141496ccaba5017d692f016482f020c3db3a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:29",
            "last_seen_utc": "2026-08-25 00:20:30",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/91.92.40.176:67",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836375": [
        {
            "ioc_value": "7b15e02eb1012a75718bdbb7e4eb296337f7ddab152a72caf81f4440abf101b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:29",
            "last_seen_utc": "2026-08-25 00:20:30",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/217.60.195.70:8080",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836376": [
        {
            "ioc_value": "bb2b445a438cd2091098112e40248b332da6d01378dacf5d48c97eba74e62151",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:27",
            "last_seen_utc": "2026-08-25 00:20:31",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/176.65.149.124",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836377": [
        {
            "ioc_value": "fbde3dfeefcc05bd893b757804dbcf3c6f1abe2e12cc28291bd778e01aa28af9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:27",
            "last_seen_utc": "2026-08-25 00:20:32",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/176.65.139.27",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836378": [
        {
            "ioc_value": "52746757fcaa032ec73fa1344c12a86295b170fd44cec5ece496279b29796a17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:26",
            "last_seen_utc": "2026-08-25 00:20:32",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.157.233.103",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836379": [
        {
            "ioc_value": "b35ea6b18e0bb373da551d5aef9353b9b63878a771f6930e41f37b332bdb8fd8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:24",
            "last_seen_utc": "2026-08-25 00:20:33",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/176.65.139.131",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836380": [
        {
            "ioc_value": "3fc221b4c837deedba2a10c9334aeef33acf1dd287e04208e1e2929a56cb5cad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:24",
            "last_seen_utc": "2026-08-25 00:20:34",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.157.233.103",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836381": [
        {
            "ioc_value": "68e2eaaf831a3f3ae2009b349226218be68c7eb16c0cbb051c3dacb15f51a665",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:23",
            "last_seen_utc": "2026-08-25 00:20:34",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/31.56.209.125",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836383": [
        {
            "ioc_value": "http://153.117.15.25:54506/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.25",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836384": [
        {
            "ioc_value": "http://119.73.7.187:39650/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.73.7.187",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836385": [
        {
            "ioc_value": "http://103.98.191.25:49278/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.98.191.25",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836387": [
        {
            "ioc_value": "http://124.29.194.65:59822/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/124.29.194.65",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836388": [
        {
            "ioc_value": "http://153.117.37.46:40580/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.37.46",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836389": [
        {
            "ioc_value": "http://72.255.33.140:45838/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.33.140",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836390": [
        {
            "ioc_value": "http://103.197.112.191:35184/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.197.112.191",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836391": [
        {
            "ioc_value": "http://223.123.72.246:56586/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.246",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836398": [
        {
            "ioc_value": "https://chsaleem.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chsaleem.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836680": [
        {
            "ioc_value": "83db1389e824cba2f08277f4b9a57429d4d6b3fe6d779ad0b4860874553ba5d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-24 06:36:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a0c62d1074ff1933fa55af9/",
            "tags": "amos,applescript,dropper,macos,stealer",
            "anonymous": 0,
            "reporter": "thi4go"
        }
    ],
    "1836681": [
        {
            "ioc_value": "barmaleieba.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 06:36:17",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836682": [
        {
            "ioc_value": "cdn-speed.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 06:36:16",
            "last_seen_utc": "2026-06-29 13:30:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836684": [
        {
            "ioc_value": "merkantalolol.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 06:36:16",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836683": [
        {
            "ioc_value": "code.verification-claude-cdn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 06:36:14",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836685": [
        {
            "ioc_value": "superboomer.world",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 06:36:13",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836686": [
        {
            "ioc_value": "https://priestsassembly.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/priestsassembly.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836692": [
        {
            "ioc_value": "http://72.255.18.159:35935/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.18.159",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836687": [
        {
            "ioc_value": "129.212.233.8:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-24 06:36:11",
            "last_seen_utc": "2026-07-02 07:19:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836689": [
        {
            "ioc_value": "globalchrome.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-24 06:36:10",
            "last_seen_utc": "2026-06-24 08:49:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836690": [
        {
            "ioc_value": "http://110.38.250.149:37006/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.250.149",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836691": [
        {
            "ioc_value": "http://153.117.32.235:57055/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.32.235",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836693": [
        {
            "ioc_value": "206.189.94.70:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-24 06:36:08",
            "last_seen_utc": "2026-06-28 08:22:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836700": [
        {
            "ioc_value": "https://bearsheartstudios.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bearsheartstudios.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836701": [
        {
            "ioc_value": "https://thungracbinhduong.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thungracbinhduong.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836705": [
        {
            "ioc_value": "149.248.3.38:9960",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-botnet-threat-analysis/tree/main",
            "tags": "AcmeCo,G1017,Go-TLS,JDY,payload,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836706": [
        {
            "ioc_value": "23.27.120.240:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-botnet-threat-analysis/tree/main",
            "tags": "G1017,JDY,payload-host,Platypus,Termite,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836707": [
        {
            "ioc_value": "109.104.154.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-24 06:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-botnet-threat-analysis/tree/main",
            "tags": "G1017,JDY,payload-host,Platypus,Termite,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836712": [
        {
            "ioc_value": "http://180.244.187.139:36196/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/180.244.187.139",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836713": [
        {
            "ioc_value": "http://153.117.13.30:33425/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.13.30",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836714": [
        {
            "ioc_value": "http://8.217.17.75:2000/ml",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:04",
            "last_seen_utc": "2026-06-24 08:24:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/8.217.17.75",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836715": [
        {
            "ioc_value": "http://153.117.33.214:54146/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.33.214",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836716": [
        {
            "ioc_value": "http://103.66.148.82:35099/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-24 06:36:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.66.148.82",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836717": [
        {
            "ioc_value": "0e838c6a588d00c029ea5e469e55e121688df7a6e8af7b75e53504dc81631cb5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-24 06:36:03",
            "last_seen_utc": "2026-08-25 00:20:29",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/8.217.17.75:2000",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836719": [
        {
            "ioc_value": "176.65.132.25:55057",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-24 06:35:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836718": [
        {
            "ioc_value": "173.214.167.253:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-24 06:26:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/558eee1d844abe408ba89a5df01ad8bf9807158f4a4885ad13cb75d4a226da48/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836710": [
        {
            "ioc_value": "kyard07v.vip1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 06:02:24",
            "last_seen_utc": "2026-07-02 23:02:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836709": [
        {
            "ioc_value": "arop4gtf.jetbt6.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 05:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836708": [
        {
            "ioc_value": "jetbt6.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 05:10:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836704": [
        {
            "ioc_value": "49.233.9.4:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 03:46:33",
            "last_seen_utc": "2026-07-27 08:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836703": [
        {
            "ioc_value": "www.rmsmarineservice.com.qwqqwq.ggff.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-24 03:45:54",
            "last_seen_utc": "2026-09-01 02:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836702": [
        {
            "ioc_value": "jetbet1.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 03:10:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836695": [
        {
            "ioc_value": "p0d2virz.blackjacktipsnnt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 01:11:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836694": [
        {
            "ioc_value": "blackjacktipsnnt.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-24 01:09:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836688": [
        {
            "ioc_value": "blackjack-x.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 23:09:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836679": [
        {
            "ioc_value": "69xb4m1d.betmajic.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 21:10:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836678": [
        {
            "ioc_value": "8ra83hil.blackjackonlineplay83.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 21:09:26",
            "last_seen_utc": "2026-06-30 16:30:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836676": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/louis-mellor/2d-aee4-1433332c1@main/f5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 20:33:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836675": [
        {
            "ioc_value": "s7w5r3s2.onebet1x.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 19:50:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836674": [
        {
            "ioc_value": "91.92.242.235:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 19:45:49",
            "last_seen_utc": "2026-07-25 08:46:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836673": [
        {
            "ioc_value": "82.29.100.224:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:45:42",
            "last_seen_utc": "2026-07-23 18:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836672": [
        {
            "ioc_value": "46.29.166.65:3481",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-23 19:45:22",
            "last_seen_utc": "2026-07-25 08:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836671": [
        {
            "ioc_value": "45.74.7.161:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:45:19",
            "last_seen_utc": "2026-07-25 18:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836669": [
        {
            "ioc_value": "45.74.7.156:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:45:18",
            "last_seen_utc": "2026-07-25 08:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836670": [
        {
            "ioc_value": "45.74.7.159:5691",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:45:18",
            "last_seen_utc": "2026-07-25 08:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836668": [
        {
            "ioc_value": "45.138.16.56:8008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:45:14",
            "last_seen_utc": "2026-07-23 18:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836667": [
        {
            "ioc_value": "2.26.17.59:6448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:44:13",
            "last_seen_utc": "2026-07-23 18:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836666": [
        {
            "ioc_value": "192.227.219.81:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:44:04",
            "last_seen_utc": "2026-07-23 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836665": [
        {
            "ioc_value": "188.23.173.69:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-06-23 19:44:02",
            "last_seen_utc": "2026-08-21 18:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836664": [
        {
            "ioc_value": "185.115.164.59:51227",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:43:54",
            "last_seen_utc": "2026-07-23 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836663": [
        {
            "ioc_value": "178.73.192.17:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-23 19:43:47",
            "last_seen_utc": "2026-07-24 07:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836662": [
        {
            "ioc_value": "156.239.47.147:4221",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-23 19:43:29",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836660": [
        {
            "ioc_value": "147.124.213.155:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:43:23",
            "last_seen_utc": "2026-07-25 18:43:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836661": [
        {
            "ioc_value": "147.93.191.75:20500",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:43:23",
            "last_seen_utc": "2026-07-23 18:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836659": [
        {
            "ioc_value": "137.220.59.55:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-23 19:43:18",
            "last_seen_utc": "2026-07-24 07:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836657": [
        {
            "ioc_value": "103.11.41.20:5195",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:43:05",
            "last_seen_utc": "2026-07-23 18:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836658": [
        {
            "ioc_value": "103.11.41.20:53523",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:43:05",
            "last_seen_utc": "2026-07-23 18:43:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836656": [
        {
            "ioc_value": "103.11.41.10:53496",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 19:43:04",
            "last_seen_utc": "2026-07-24 07:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836655": [
        {
            "ioc_value": "102.220.160.250:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:43:03",
            "last_seen_utc": "2026-07-28 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836654": [
        {
            "ioc_value": "102.117.173.226:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 19:43:02",
            "last_seen_utc": "2026-07-24 07:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836652": [
        {
            "ioc_value": "defc99dbb6a36ddb8fa8d3ce218db4747feb980a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836653": [
        {
            "ioc_value": "79187195d75a83469f94d84887157251",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836649": [
        {
            "ioc_value": "b918bf19df52464f084f35cc915fa8490e49a7c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836650": [
        {
            "ioc_value": "87c61136236dbb9ab635e379d866fe49",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836651": [
        {
            "ioc_value": "1188d1f47cfc3797e1eb004e531b11b7a191a21475d97226dfa607db380b650b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836646": [
        {
            "ioc_value": "dead5907bef0ca8370293edfef487550437393d1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836647": [
        {
            "ioc_value": "d2b4cb1d964d01bce7246acb289f2a23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836648": [
        {
            "ioc_value": "33166e17fdb736cdfbe304002b081db17069618d5110e30b3a01d9086d5e1273",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836644": [
        {
            "ioc_value": "820e7ddb14f8b3de26b54c56d8b67749",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836645": [
        {
            "ioc_value": "69e82da57188417c62f945e4d4747954ee3e75edfc82e7da9c28f67cef18430a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836641": [
        {
            "ioc_value": "ab0553ff56ec4cd19d58b115c03513e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836642": [
        {
            "ioc_value": "dad8e703aa0e0077992d417f2825b9fd7b3c54058f76212547ffb0da2e072e02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836643": [
        {
            "ioc_value": "fa3a516af1aa89399bd9702af25ac3a4d3169402",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836638": [
        {
            "ioc_value": "214e97b9f597cbb2422a4cf062c8154f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-23 19:40:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836639": [
        {
            "ioc_value": "f56297a4158c79b49c9079ba634ea9595461717fb0955affe308ea05633ec9f1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836640": [
        {
            "ioc_value": "6536a0cdc1e3147904ca91d17411bc5d11febba2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-23 19:40:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836635": [
        {
            "ioc_value": "5ff36f2bfed0594959b6274942585334",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-23 19:40:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836636": [
        {
            "ioc_value": "059f89bc7b83b669362cb3ce1182508255c2e97c296c1b9820415d0a9b1ba3d5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-23 19:40:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836637": [
        {
            "ioc_value": "3a9e07ad7d205d67d2e1e2608fc85c9a92418380",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-23 19:40:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836633": [
        {
            "ioc_value": "97894eccb6b591f2176e28068418b4cdb7d8ef439680b55936cc0189d4dff6c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-23 19:40:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836634": [
        {
            "ioc_value": "8cda1c2e44c35cc8c0b8b6a12d56a4d393f772a8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-23 19:40:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836631": [
        {
            "ioc_value": "d4b7e5485f55e006e2f53eca9b032a7f9613fbf7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836632": [
        {
            "ioc_value": "9e88feaa39cb8d2c778b87ad7b89ae97",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836630": [
        {
            "ioc_value": "dbb698ebf5abfaae07cc900762d6580df0c86eae78e416983a0784d611b25b19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836627": [
        {
            "ioc_value": "b5f51c54c5839d9a18e8dc4068ff247b177e9208c4a6d3404393494af83eec50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836628": [
        {
            "ioc_value": "b7dca0f057e927d47b1620fd5b9bcb844e137c9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836629": [
        {
            "ioc_value": "01803f005f87f23b7fa07841b12e2bea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836625": [
        {
            "ioc_value": "85fe676c2bc4bfc7a1f82b76afb73e44c2bf86a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836626": [
        {
            "ioc_value": "c597e50b1cff780f6550c38184652947",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:40:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836622": [
        {
            "ioc_value": "b16cb354d4fb0ab8a72124b811b35dd8936c8892",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836623": [
        {
            "ioc_value": "3cb00022d8a6eff781dc293e2ac2fd39",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836624": [
        {
            "ioc_value": "c8ba0a3d838ca1b968f7c21976339a477f49c43413b7a83583592a03554b5a27",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836619": [
        {
            "ioc_value": "dfcd9d67757f58cfd53719718239dd00bb1e39e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836620": [
        {
            "ioc_value": "0879e5569c1331665eabd5ab96b22c3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836621": [
        {
            "ioc_value": "25e648823b90865e55cff7f7d9c0f53c46aaa80db33212aae1d6bb60f394da8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836616": [
        {
            "ioc_value": "7a71844db27756db4bb0036ab1749922b4036a44",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 19:39:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836617": [
        {
            "ioc_value": "c7dfe7b9f5d6e98de85edf2e4f16e7e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 19:39:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836618": [
        {
            "ioc_value": "9b30f3c425c9eb4d4bf7d6bca07b82f5f63fbcc92a43e0885b2e7613d76d7a1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.starloader",
            "malware_alias": null,
            "malware_printable": "StarLoader",
            "first_seen_utc": "2026-06-23 19:39:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836613": [
        {
            "ioc_value": "78eca2f32b2cfd515b337bd66eccd1b93a6da881",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.pxa_stealer",
            "malware_alias": "PXAStealer,PXA",
            "malware_printable": "PXA Stealer",
            "first_seen_utc": "2026-06-23 19:39:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836614": [
        {
            "ioc_value": "449b0afdd3d6f27090a783b882c527a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.pxa_stealer",
            "malware_alias": "PXAStealer,PXA",
            "malware_printable": "PXA Stealer",
            "first_seen_utc": "2026-06-23 19:39:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836615": [
        {
            "ioc_value": "3441e8dc5855680eecd7b9795d918ad23ec48a718a1a874979f2570751d4ce12",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 19:39:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836610": [
        {
            "ioc_value": "4a65b44aee410e901fd318ec7043b653b1215e38",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-23 19:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836611": [
        {
            "ioc_value": "ea425b8c0e70dca5e395592a4e7379d5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-23 19:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836612": [
        {
            "ioc_value": "fcd0615378546a7f70b2a81cd83cd1da2bbc0595c75869c7b42956bd69d0015a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.pxa_stealer",
            "malware_alias": "PXAStealer,PXA",
            "malware_printable": "PXA Stealer",
            "first_seen_utc": "2026-06-23 19:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836607": [
        {
            "ioc_value": "f15948ad0777cfbc4ca11d3564e9091d9441368d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836608": [
        {
            "ioc_value": "2d715527ed271f79a106cea57e63c42c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836609": [
        {
            "ioc_value": "7aa0e249b5c1176344f5fa5579d39a095a08bcb156ffa1789c16c2828bb4cf13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-23 19:39:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836604": [
        {
            "ioc_value": "3ce935604e44eed4aaed2c3da3c635e235b1523f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836605": [
        {
            "ioc_value": "448632521c4e9e8c6347c1a60068fda0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836606": [
        {
            "ioc_value": "e22803cae1a7038c13aa1fedc934cdadf64aba5313c728246986febf3d219266",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836601": [
        {
            "ioc_value": "c0c501845ebb88d8bafa4cc4ce37868f7c7f1b9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836602": [
        {
            "ioc_value": "d4ad0cc7f55c93e3283afcf27fd367df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836603": [
        {
            "ioc_value": "d4a858911a34290410ef354e1d00e02874dca9ed946d4bef5bae5e0149b52b72",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836597": [
        {
            "ioc_value": "d25c2e6f6efa788da31393d2fd0bbe25dd9fb0ff8414115c020971df71efd3ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-23 19:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836598": [
        {
            "ioc_value": "e9f53c7dc45ccdbf4b39a2ec7ed58285401ed5e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-23 19:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836599": [
        {
            "ioc_value": "6e0966ab703a05ce406d9a34a67c8519",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-23 19:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836600": [
        {
            "ioc_value": "b5fd21ff8bb89ae62c4e0ba14fdeb11ba5c42aef94a9718e830ea113a5cde880",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836594": [
        {
            "ioc_value": "cccaa74eb48cc6152f062bff6416def6922875ff7da6bbd2fac5f75b3332493b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-23 19:39:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836595": [
        {
            "ioc_value": "7b98ad093e87167824703d9123c1505c29409a0f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-23 19:39:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836596": [
        {
            "ioc_value": "f9faf7b128cbe714fc5fea22fd6fcfca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-23 19:39:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836591": [
        {
            "ioc_value": "d9d8d0359d7307b6342bb65d21ca5242ea8cef686ece2a53832f18fedaebee0f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836592": [
        {
            "ioc_value": "6b2534d8a4fa4fc5485b3c223dabf9ebcdde1ae2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836593": [
        {
            "ioc_value": "2363e2bc658b1742795bb1b2b34ecb8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836588": [
        {
            "ioc_value": "29571eb079c469ee84ed580743f3632920435540adc9100cf91b40ff2ef7647a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836589": [
        {
            "ioc_value": "a1cbc16e96070d3e8f61322342e04b5e39e37ef7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836590": [
        {
            "ioc_value": "c4cc23fb7a38b9891faacc6d69bf0e0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836585": [
        {
            "ioc_value": "082c34d5ff4cc9268a700a57b1c3604bf0051e09be704549bb18876e7047f28b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836586": [
        {
            "ioc_value": "f690480f7a7dd6b747aee36f2489601a80de501e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836587": [
        {
            "ioc_value": "da6350db6be2cdc4ccdb5577e36f8b33",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836582": [
        {
            "ioc_value": "8508735e2c6cc5b7a95cfc06f4d467cc0be161b6df6dfd5491117fdd5ed00dbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836583": [
        {
            "ioc_value": "b3460b8cc47ecc4c9ca9dfa08d0ac4c5185e9d11",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836584": [
        {
            "ioc_value": "66fd839bf8f8f2905ceb862805a0e2a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836579": [
        {
            "ioc_value": "966ce68b2eae61e5528a9f7a8cca097d1d1c8d698dd2006d8a45605c29894459",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836580": [
        {
            "ioc_value": "4e6362ab676e947ca6bce119529ef9370ff87aa7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836581": [
        {
            "ioc_value": "1f715464d6eeb3e78639882abe18bcb0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836576": [
        {
            "ioc_value": "020319661288963025c1832c0f99ff6ec266f9c6deb7533c3ac0ec186367cd4c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836577": [
        {
            "ioc_value": "cf513c70469fded12d6f1ab2f8807208b9121806",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836578": [
        {
            "ioc_value": "b8f547ae812d1ef149f42436880621f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836573": [
        {
            "ioc_value": "b9f1f768ac05c84377c2e36fa56be5294856571cf59a168dc768cb6b29037fc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836574": [
        {
            "ioc_value": "72c94bf53992e4ebe5311d77ca04a46af570f33c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836575": [
        {
            "ioc_value": "048f9479bf9e79c486bd4b6a527f6025",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836570": [
        {
            "ioc_value": "01e9c74cbdced022d97ea6c20653112c396dc9c5307899ff0960de3a8895f036",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836571": [
        {
            "ioc_value": "e532c2182d1f062b5e93c25f3c9ab902ce144310",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836572": [
        {
            "ioc_value": "ea9653fc6e7780c699895a8f6a65f7e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836568": [
        {
            "ioc_value": "b8d32201c922958acb26f0a79be8c1ede96f47e1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836569": [
        {
            "ioc_value": "4a89c176d80a853fbcfa41ae3f832366",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836565": [
        {
            "ioc_value": "454b5bbc9dd67724e3798d7af5eb1e44d7e587f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836566": [
        {
            "ioc_value": "72d63a58a15014d10fc40c909687ddbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836567": [
        {
            "ioc_value": "c5641ee1850c5ccb6d8a2bf6894235cf3177115205f1543548ab6ed41778b004",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836562": [
        {
            "ioc_value": "a6a2d0d0bcd33ee293e265559c7241b195ace30e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836563": [
        {
            "ioc_value": "df82f49a449258f8b3369a9e9e15ec51",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836564": [
        {
            "ioc_value": "6a733de838f642ba5b8f65c589c19037c4e77f04fa3e26bdf4cb9719fa97b3c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836559": [
        {
            "ioc_value": "4d8e591e8b5353291fa31069db4c7fcca2ae509b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836560": [
        {
            "ioc_value": "aa1b9dafea5da9a91038446d0d6e0e8a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836561": [
        {
            "ioc_value": "1198a85b96154a18dfb7a2bb60e87750e21835e925aca7c89ed54d0e943f7bce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836556": [
        {
            "ioc_value": "a94a7ac2111384fb8cc5d9b6e6e57417592201ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836557": [
        {
            "ioc_value": "e802d26922497c447c7152d0dc7f1c35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836558": [
        {
            "ioc_value": "0928a46bc4622e85afba9206988f3fce40c8bd0c7a6263098228fa661320870c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836554": [
        {
            "ioc_value": "d77ecb98f524306213dd2e2e4d2bbce0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836555": [
        {
            "ioc_value": "e3133d6068eba141b3a07adf832a9f6200c116a9dbed925f8db92c5911c908a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836552": [
        {
            "ioc_value": "acb6362aea9d26d1992131fddb32ec6ae6ce8a1a28b853593f5475f7fb212274",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836553": [
        {
            "ioc_value": "108a97e405808f5b4435e1ac4c0d09f08d8feabc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836549": [
        {
            "ioc_value": "abbac2111fb10a1b0359548802e084e4dc5ef889c76b1508b766f74f37879ae1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836550": [
        {
            "ioc_value": "985082edc8ee49a33c5b49a88a7c9d097244b4b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836551": [
        {
            "ioc_value": "0bb33ef113ce5c086bdd25e91a50c07a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836546": [
        {
            "ioc_value": "12ea1472fafdbc11e93a379b76d9aa5dd683bd72639cc0977d4a17a266221e43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836547": [
        {
            "ioc_value": "abfa6419794b27f98fa35d1823f33c6fea9e41c1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836548": [
        {
            "ioc_value": "2c70011ea7f76773e68ed581b89ef56e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836543": [
        {
            "ioc_value": "1a27d360e4870f260abe8feb74ff71014954200fb83358eb49429ae7306c3836",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836544": [
        {
            "ioc_value": "67eaddfcdd1d08f0afb9c6ea6cb035a73c103d00",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836545": [
        {
            "ioc_value": "31e6b51f8ff1b0c429f68978e793b5bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836540": [
        {
            "ioc_value": "08230ab9413d48445adc50a44ac220c38b933fe0ee91c4e385420d7b1a37e117",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836541": [
        {
            "ioc_value": "253458f1958ac40a8744a2d14d5d61c01d9a2123",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836542": [
        {
            "ioc_value": "4a28d74422d11c29804d84bff744fd0c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836538": [
        {
            "ioc_value": "9cf067b3cab0c87e4dc203f0075596133e1c0a36",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836539": [
        {
            "ioc_value": "453926ac43baf65bad26a54d0d03e6e3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836534": [
        {
            "ioc_value": "da3fd6ee9a00c393e2237cd264fae318351b8cfdce982510107cc38034bd047d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836535": [
        {
            "ioc_value": "f8554c9324313ea7c35b63c33358bd5551b67026",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836536": [
        {
            "ioc_value": "c37b66823272ad2020cbd4d34f2d6cef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836537": [
        {
            "ioc_value": "c7670cf49ec638996209d47baec772ab79e41ee7cb78fa08f61fb46a34843b2f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 19:39:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836531": [
        {
            "ioc_value": "33d553f06fa035685ebaa7e6d92b701af8f6f7a8731330dd2397fc9f7414672d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836532": [
        {
            "ioc_value": "c63decef6302b3f0c4837d6503a487be0fe517a9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836533": [
        {
            "ioc_value": "d32f235bef8d215d9841d2ef4826f7c6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836528": [
        {
            "ioc_value": "e58a15a0e14a06d42f8520559225146b41245047bea80398eaa609e181b1f939",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836529": [
        {
            "ioc_value": "e3cef2639218fef42d30ad7669ede50afbe3b226",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836530": [
        {
            "ioc_value": "a81f5cc8fe2ee8f89c9406fbfe64ed19",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836526": [
        {
            "ioc_value": "3a02cc9c456e9863f9e42e23f036a6e886432bc8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836527": [
        {
            "ioc_value": "316d5cd7a836b285db5a62a40d7a2d99",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836522": [
        {
            "ioc_value": "78d61f68070ec4bacd52a328c02080aab7476a540cc1fd2e72365396fb71722e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836523": [
        {
            "ioc_value": "340772dfaba4ad40107e993986c95bc717d77aa8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836524": [
        {
            "ioc_value": "814500d9eed759f84863185d99ff4358",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836525": [
        {
            "ioc_value": "55db3327bd98150b3f343721ea85084960c1c71722557ca3b82f62738138b974",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836519": [
        {
            "ioc_value": "3285a1ae273683f154431dbdec2f9f884e81f9ec9074dddcc4749e1707685c84",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836520": [
        {
            "ioc_value": "2aa8a0a28b55dc69ee4e9cab73722c85e7769b4b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836521": [
        {
            "ioc_value": "a2cdebad9d05915a5a5294850f74adfe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836517": [
        {
            "ioc_value": "44053c823ea6a8be76152267c4a8d42a580304d4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836518": [
        {
            "ioc_value": "0118a16faa4084c5240bf741342d47d4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836514": [
        {
            "ioc_value": "1d21a57118fbce200204f0c59b027f9217c35109",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836515": [
        {
            "ioc_value": "1e76336b373ffda894b529553e1ef7e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836516": [
        {
            "ioc_value": "4a39903d55aefe27d938b752bb2156153157797915e7c74ce98cfcc4f1311f73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836511": [
        {
            "ioc_value": "99bdd95c69a7e507ed8d4ec727725b38c2f05021",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836512": [
        {
            "ioc_value": "f515e22d8f2ad0d4e1dab5eb173f6d52",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836513": [
        {
            "ioc_value": "0b01016d6117a8a0af97c5a7a1f6e2241f0b2a31240628e8a70f6635e8386d20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836507": [
        {
            "ioc_value": "5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 19:39:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836508": [
        {
            "ioc_value": "2d26bb6cc224cf0f5a412521abc8d35ec0ab7cc6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 19:39:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836509": [
        {
            "ioc_value": "fb457a6418fc28940991bc763c342e3e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 19:39:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836510": [
        {
            "ioc_value": "c2686d007b37b0e0ba7a68b3a48a2f1c1f8a4da07b09a69bd5de6dde9889e0bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836504": [
        {
            "ioc_value": "f8caf4ff7737a95efeafb2ca3b219a79afd39736b02289c38eca6f46860bc181",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-23 19:39:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836505": [
        {
            "ioc_value": "e444a45f51c2cf394d729314bc52152a1538b961",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-23 19:39:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836506": [
        {
            "ioc_value": "ad0caca81694d9cff7ab3cbb5c51114b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-23 19:39:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836501": [
        {
            "ioc_value": "10e23ac0190ab98cc4f6c851045279038a54dbaa1d30ae0ac6fa16543f7c0d1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-23 19:39:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836502": [
        {
            "ioc_value": "e32c363c3d0f55c57609c8c116d6d390a05ad5b4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-23 19:39:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836503": [
        {
            "ioc_value": "6d072d7f5d189f7714b3ef04bc0c2aec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-23 19:39:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836498": [
        {
            "ioc_value": "c8525c9380f5c3d9d5c66e101120fee50c3e4a80d0981507d300b33a6cafb208",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-23 19:39:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836499": [
        {
            "ioc_value": "eb53d9ecc2a01e2700ba29a95f71de02edb4fece",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-23 19:39:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836500": [
        {
            "ioc_value": "a1730a346e6f5ee77650976177a17e68",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-23 19:39:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836495": [
        {
            "ioc_value": "b45bbb0582aa658722616257d7cde23eb98430a2f31dbac3de596365122a642f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-23 19:39:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836496": [
        {
            "ioc_value": "f76a9f6453dac0ec9be54f80b8474ac28a3a1c1c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-23 19:39:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836497": [
        {
            "ioc_value": "b97769a9e25a997a29d8b849800ac541",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-23 19:39:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836492": [
        {
            "ioc_value": "7127cc1a27fc514f5712dc78377877ff42bb42cb05ff217eb496166939a8c53e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836493": [
        {
            "ioc_value": "bd4bbd768770dce125dc12f4d32e2aa2f944c976",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836494": [
        {
            "ioc_value": "a12583bca076954507329a37f52e2a5c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836489": [
        {
            "ioc_value": "f2e59b3a78d4ee57638b940ea4910c76c0b09ec505da8f7719ca5064a3901f62",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836490": [
        {
            "ioc_value": "5461b574838fe15bd71ea3f7e8467a3d4f463105",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836491": [
        {
            "ioc_value": "f8319f6f9c38d0bbeec1b2a153008055",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836487": [
        {
            "ioc_value": "b845ba922f18421be03396ee080302fd8a758c3b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836488": [
        {
            "ioc_value": "5533719b6d2bda4dcca3cd4c9f0e5451",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836485": [
        {
            "ioc_value": "4cc86df7c8b0748102cbaca105313469",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836486": [
        {
            "ioc_value": "693e88c3ede9bf69c9f6b7c46cab0c1360ce5498ed6be7360f634314675a426e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836482": [
        {
            "ioc_value": "6b7b93350359e62ca41a3acf97b73945",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836483": [
        {
            "ioc_value": "a068667d8f2bcb0a56930fb552a9b16e73b01b9621dbfd321c3ffc1ba4540aab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836484": [
        {
            "ioc_value": "b40881a4aa7adfc3bf031ebd0b22e3446871d2be",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836479": [
        {
            "ioc_value": "a937ae4c5bfa00c9c8b178587368d783",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836480": [
        {
            "ioc_value": "09318d5d0f9bda9ff2a4137a4025e042187804d36709c1228d98a805f6833f52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836481": [
        {
            "ioc_value": "1377821d908faed1d2c19c17bb952d927acf14b2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836476": [
        {
            "ioc_value": "6019f364c9f02fa6b515eba7d1eec5d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-23 19:39:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836477": [
        {
            "ioc_value": "04858a0860457288a32a37ca94a3ea082fb18448bb395e5eed7b04f28a1c8569",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836478": [
        {
            "ioc_value": "ed01bb8d2cee51e24de5a71ae1539cfffd150530",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836472": [
        {
            "ioc_value": "1dd60777576c45dd42c89cc2e58991c5bce0e676",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836473": [
        {
            "ioc_value": "68cc228531adcc0b7c2f9068e443cb3d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836474": [
        {
            "ioc_value": "24bcf4e8d33ea1e417d0a675016c6103be753ae57a6c2025e8711f0da17bc57f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-23 19:39:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836475": [
        {
            "ioc_value": "47d324e3678336ae4f01acdd1a4b6dc5b9e2214e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-23 19:39:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836470": [
        {
            "ioc_value": "8fb9236c324c2fc8e9a691e0ef7fd5b6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836471": [
        {
            "ioc_value": "e103baab2aabeaf26383fb69786e72c8068e91e8f7a086e0a496a431312b8ad3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836467": [
        {
            "ioc_value": "d88a6aae901996d08a7796b90b670b9c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-23 19:39:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836468": [
        {
            "ioc_value": "000bfd081641b1ef26e85ee67d601c34d9206de59929ce3faf5225cca379a407",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836469": [
        {
            "ioc_value": "43d0574375875bbd889ac8bee2d8832f4db1dfd7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836465": [
        {
            "ioc_value": "a2d26b996d7b613ba4d4bc42950be5ef73e805a66e5566412e4f4588bff9dc93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-23 19:39:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836466": [
        {
            "ioc_value": "9050b174daee1586a61cfeab660ce5d332aa34e1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-23 19:39:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836463": [
        {
            "ioc_value": "1ecfc872f02211fe2fd3990042f592ba1a5fde51",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836464": [
        {
            "ioc_value": "c75668226449a2296a7788059616e975",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836461": [
        {
            "ioc_value": "33d615b96b07f00567f3939c08f4a02e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:39:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836462": [
        {
            "ioc_value": "1d424c09bb29a1c3c6c97de53d7ecee5a89060477715948d514bb06dcee0d381",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836459": [
        {
            "ioc_value": "7adeac778393f2889190521e4a72153903bff700790a50d76f6d4df05f99ca83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:39:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836460": [
        {
            "ioc_value": "c858be9f812dd21eef8e402271f58cacdeff69af",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:39:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836456": [
        {
            "ioc_value": "bc50f5f0cf418acf65b177a2c9e9a770b7de778a638996ef82f8a86cc632f9fb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836457": [
        {
            "ioc_value": "bcbc5b3021d27e53a2047f291e6b98873f4d8f4a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836458": [
        {
            "ioc_value": "5b3538216b7079fbc8b0292d335fee14",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836455": [
        {
            "ioc_value": "ad02a396d2842b16b973bcd547aa0c81",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:39:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836451": [
        {
            "ioc_value": "94b820f29b10e78460b0f591d4c9bbc377b0605d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836452": [
        {
            "ioc_value": "1b57820e73fa101cbd1703fe47430606",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836453": [
        {
            "ioc_value": "82272ba8a1224ba27acf6790fce88e0b60380a3e6ab38939d48cd35e84e3f5e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836454": [
        {
            "ioc_value": "1e7fcdedf5fbb201b9f91389254393b70ad1759f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836448": [
        {
            "ioc_value": "47411ce35483fa807f5abda7450b2cfc53c13c8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-23 19:38:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836449": [
        {
            "ioc_value": "31bec9ae02ad45a5f57624526a2e55d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-23 19:38:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836450": [
        {
            "ioc_value": "80790d8e694ebf955bee25b07a6d6a2dede80637e8da7642f563278aaf400a00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836445": [
        {
            "ioc_value": "69a549b840f06fead535c695594041b2218aa09a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836446": [
        {
            "ioc_value": "6c80b51f9655aafd1e76c6d19492fdeb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836447": [
        {
            "ioc_value": "ca0d6b04fc3b7229e6379ad31799338a552a75f9c5b160cfee4678f88a4500fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-23 19:38:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836443": [
        {
            "ioc_value": "8a2bfd3db3c1c7174d79577ee3669e04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836444": [
        {
            "ioc_value": "6630c369dc42a3b09cc376337fc2b070f7aa2739e4f73867349b0b28fe0eba16",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836441": [
        {
            "ioc_value": "48aab8be1d71524bc52147732af43a4db631b5c9dacd731a08edaa44aeef6133",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836442": [
        {
            "ioc_value": "7c530a4db564f4eb3797b15d25c9d25cb58cc9d0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836437": [
        {
            "ioc_value": "924e0f3caf68b9dc2d770ec7731e4363",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836438": [
        {
            "ioc_value": "f4dd083eebd66cb1829b90dd2f9cbf9f180a4106a23d4ecf35c0b91125a4909f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836439": [
        {
            "ioc_value": "5967d44536ff952bd69f6de4666042859494eb82",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836440": [
        {
            "ioc_value": "85c170552c596662d5903e35fa3d0803",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836435": [
        {
            "ioc_value": "cedaeda67b82f01eab28f268b9469bbf550eb9fd456b9c6cdab6cefd7fdcc06e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836436": [
        {
            "ioc_value": "1de205d5ca34a5c5b39d6b1f93e427df13f97335",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836431": [
        {
            "ioc_value": "aba7b8104bf632cc981fa45dfaa4deca",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836432": [
        {
            "ioc_value": "e45497746ec8e85c6775af9e03ac001e691017773d081bd3aeb5df09f3e3afaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-23 19:38:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836433": [
        {
            "ioc_value": "bb0cf020c7b25bd46e8eecedb172c686a15dd9d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-23 19:38:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836434": [
        {
            "ioc_value": "6b730deb54b36fe9cb81817d533bcf89",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-23 19:38:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836429": [
        {
            "ioc_value": "0128796cc2b8849ba974e79ee44de0a8761550082e8c7ef920690e9b5c3dc99c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836430": [
        {
            "ioc_value": "5fff4425a71e724195071545de4e08bdc3941a5a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836426": [
        {
            "ioc_value": "3dbaf616dcaacfcf66909b7a3404d1536f9e0d230b3b59934f1ccc6fe3e20554",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:38:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836427": [
        {
            "ioc_value": "19905d50384db33546b8d86cdbc9b0864a3ecd43",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:38:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836428": [
        {
            "ioc_value": "0be5324ba4c2f648cee646e91135728f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 19:38:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836423": [
        {
            "ioc_value": "e87151a8c2d6069a986895f5a7168c8ab98b52c5f917211d8d13e1156c0249eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836424": [
        {
            "ioc_value": "835c769ce1602a3e0b82ae7cd80cf51c2af1fc46",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836425": [
        {
            "ioc_value": "7abd23e3c92c5acbee7c6147cd1c7121",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836420": [
        {
            "ioc_value": "7b5c88bc57cd084b76f8e7da83a145ed0c65d64d4a9ca227cc4e40674a435afa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836421": [
        {
            "ioc_value": "9676ec51cf46b5598f820fc26acbb862f107b071",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836422": [
        {
            "ioc_value": "2eae922a47d8b14b7122ec1f93bb02c2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836417": [
        {
            "ioc_value": "93b3fd82886a45a090e16c25da026a8197694567ecdb5bcd9aaa787e3f5f79d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836418": [
        {
            "ioc_value": "8f3e85d0b2ce35647f5cfbb1ec93704011aaf641",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836419": [
        {
            "ioc_value": "917337889870afed6fbc18dfbb96cb42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836413": [
        {
            "ioc_value": "ad8699ff1e37c4939837e21aaa02ecf9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836414": [
        {
            "ioc_value": "0bc5d51f8efe5fcb7293ef438ab7d90729b530bbca808a1a5fb10fd4638c5637",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836415": [
        {
            "ioc_value": "9bbd377656ad180831a8ba2219c04bc36c3225f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836416": [
        {
            "ioc_value": "b9c44e860de162f8f8430a5ce7b0d81b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836411": [
        {
            "ioc_value": "c6742350c0b2a1ef0fe7fe3bdf46dce7b43d34230318539810390699980f455c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836412": [
        {
            "ioc_value": "4146470ef45ae72591644e2cf97bbbae0d406170",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836408": [
        {
            "ioc_value": "4d547c0ed2440d19d7a5ed7186a2e162e224091e99b409b88b8c2fc9d7e0348e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836409": [
        {
            "ioc_value": "0627da527079e4ff8001d470eb7c27c4b7374111",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836410": [
        {
            "ioc_value": "2334ccbf5b701c36e95ff83289c874af",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836406": [
        {
            "ioc_value": "07d8ce45ea8cc2ae15686340a442251b1dd53859",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836407": [
        {
            "ioc_value": "5e457f44b85ded5049f10308db21225c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836404": [
        {
            "ioc_value": "00e6550efbb39731ffca412808163435",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836405": [
        {
            "ioc_value": "afc81242f78b72681897c590da4c4ccea2c714a9d132e867b2a40c479562bb77",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836401": [
        {
            "ioc_value": "191436a9bea707bb25df754d19c21bdd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836402": [
        {
            "ioc_value": "011b3b20095e9de6e8c5f3a0f3ca18b5404869ada82599c4bf4473e2204953dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836403": [
        {
            "ioc_value": "3b00e30e0ad5d0ab6a5707c5622dc3b73c3b01ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836399": [
        {
            "ioc_value": "0ad7f891ca02d0f11a3209211f3f6543393774f317dcad291628d9d7c7f0865e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836400": [
        {
            "ioc_value": "f1bd6ff941a407a1808ad64da138bc5c10f6a80a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-23 19:38:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836397": [
        {
            "ioc_value": "engelabeslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 18:45:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836386": [
        {
            "ioc_value": "haqoakt0.elmolnafs.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 16:46:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836382": [
        {
            "ioc_value": "elmolnafs.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 16:44:30",
            "last_seen_utc": "2026-06-23 16:45:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836365": [
        {
            "ioc_value": "hubscore.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-23 15:45:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7adeac778393f2889190521e4a72153903bff700790a50d76f6d4df05f99ca83/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836345": [
        {
            "ioc_value": "206.189.94.70:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-23 15:44:35",
            "last_seen_utc": "2026-07-02 12:52:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836346": [
        {
            "ioc_value": "129.212.233.8:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-23 15:44:35",
            "last_seen_utc": "2026-07-02 12:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836347": [
        {
            "ioc_value": "157.230.237.88:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-23 15:44:34",
            "last_seen_utc": "2026-07-02 12:50:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836348": [
        {
            "ioc_value": "147.182.217.141:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.aisuru",
            "malware_alias": null,
            "malware_printable": "Aisuru",
            "first_seen_utc": "2026-06-23 15:44:34",
            "last_seen_utc": "2026-07-02 13:00:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Aisuru,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1836350": [
        {
            "ioc_value": "91.92.40.142:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-23 15:44:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1836351": [
        {
            "ioc_value": "191.96.94.207:3778",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-23 15:44:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1836352": [
        {
            "ioc_value": "newpopularimages.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 15:44:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0c5f1770ba4495fb3be0e3abd522a7b0685cb375e33acf5c42fde6cba0513c41",
            "tags": "applaunch-sideload,clickfix,deaddrop-codebook,dll-sideload,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1836353": [
        {
            "ioc_value": "editdocumentfree.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 15:44:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0c5f1770ba4495fb3be0e3abd522a7b0685cb375e33acf5c42fde6cba0513c41",
            "tags": "applaunch-sideload,clickfix,deaddrop-codebook,dll-sideload,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1836354": [
        {
            "ioc_value": "000122bb86e71548cc16dd4c4f5bb6c8fdf548a098d1bd591ee10f1bc17f9883",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 15:44:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0c5f1770ba4495fb3be0e3abd522a7b0685cb375e33acf5c42fde6cba0513c41",
            "tags": "applaunch-sideload,clickfix,deaddrop-codebook,dll-sideload,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1836355": [
        {
            "ioc_value": "0c5f1770ba4495fb3be0e3abd522a7b0685cb375e33acf5c42fde6cba0513c41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 15:44:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0c5f1770ba4495fb3be0e3abd522a7b0685cb375e33acf5c42fde6cba0513c41",
            "tags": "applaunch-sideload,clickfix,deaddrop-codebook,dll-sideload,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1836343": [
        {
            "ioc_value": "b.360ctct.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-23 14:05:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5665f5570d006c5d08e9dfac4dc1eef5960ea07c403ffca33e88da564eaa0c83/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836336": [
        {
            "ioc_value": "https://huu.holidaysm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 13:25:13",
            "last_seen_utc": "2026-06-23 16:25:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836337": [
        {
            "ioc_value": "huu.holidaysm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 13:25:13",
            "last_seen_utc": "2026-06-23 16:25:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836322": [
        {
            "ioc_value": "https://tafeqld-brisbane.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 12:51:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tafeqld-brisbane.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836323": [
        {
            "ioc_value": "https://porcherservicesandtransfer.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 12:51:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/porcherservicesandtransfer.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836324": [
        {
            "ioc_value": "bestcheats.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 12:51:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1836325": [
        {
            "ioc_value": "l2ekym1s.megaparivip.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 12:44:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836320": [
        {
            "ioc_value": "http://202.70.139.77:44049/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 12:20:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.70.139.77",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836321": [
        {
            "ioc_value": "http://101.53.224.211:42723/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 12:20:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.224.211",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836315": [
        {
            "ioc_value": "2b4zfudu.ekhtelalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 11:07:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836313": [
        {
            "ioc_value": "http://62.60.226.159/post.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.solaris_loader",
            "malware_alias": null,
            "malware_printable": "SolarisLoader",
            "first_seen_utc": "2026-06-23 10:36:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SolarisLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836309": [
        {
            "ioc_value": "verification-code-js.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 10:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/search/#page.ip%3A178.16.52.101",
            "tags": "ClearFake,ClickFix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "BaskTech"
        }
    ],
    "1836310": [
        {
            "ioc_value": "verification-claude-cdn.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 10:31:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/search/#page.ip%3A178.16.52.101",
            "tags": "ClearFake,ClickFix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "BaskTech"
        }
    ],
    "1836311": [
        {
            "ioc_value": "code.verification-claude-cdn.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 10:31:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/search/#page.ip%3A178.16.52.101",
            "tags": "ClearFake,ClickFix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "BaskTech"
        }
    ],
    "1836312": [
        {
            "ioc_value": "http://62.60.226.159/debug.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.solaris_loader",
            "malware_alias": null,
            "malware_printable": "SolarisLoader",
            "first_seen_utc": "2026-06-23 10:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SolarisLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836308": [
        {
            "ioc_value": "az6trzrx.one1xbet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 09:43:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836306": [
        {
            "ioc_value": "188.40.60.27:7802",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-23 09:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e82da57188417c62f945e4d4747954ee3e75edfc82e7da9c28f67cef18430a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836305": [
        {
            "ioc_value": "http://losslvs.surf:7802",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-23 09:35:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69e82da57188417c62f945e4d4747954ee3e75edfc82e7da9c28f67cef18430a/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836304": [
        {
            "ioc_value": "photo-drivedownload.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-23 09:16:03",
            "last_seen_utc": "2026-07-07 12:22:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836299": [
        {
            "ioc_value": "ordiljgt.entegaljerm.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 08:44:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836298": [
        {
            "ioc_value": "entegaljerm.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 08:42:47",
            "last_seen_utc": "2026-06-23 08:43:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836297": [
        {
            "ioc_value": "45.115.27.4:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 08:26:36",
            "last_seen_utc": "2026-08-05 07:04:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/42e2ae31e6fb82b97294ab1ea4c77835eb2c51a8f9d37779dbd6a398b9f6544b/",
            "tags": "ZigClipper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836296": [
        {
            "ioc_value": "usoram2026.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.koadic",
            "malware_alias": null,
            "malware_printable": "Koadic",
            "first_seen_utc": "2026-06-23 08:25:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1f5e9d142982853d02067c066c2329aa0077ea72d8d8b61f0afe6b6ec1b0c050/",
            "tags": "Koadic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836294": [
        {
            "ioc_value": "91.92.120.66:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-23 08:10:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/352f25c650a50bccf19c8a5e427483c1a883dc1880b3004865a8538377aa8a19/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836295": [
        {
            "ioc_value": "94.154.32.52:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-23 08:10:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09eb254ca162965a3722fd345476cbbacbd46e7d6d27632c4ce8ae614c961a2d/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836293": [
        {
            "ioc_value": "194.116.236.239:4066",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 08:10:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/580a8190bca4746631e9c13b748d00c1153b722ac02af3fa73130aeae494004f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836292": [
        {
            "ioc_value": "104.239.66.11:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-23 08:10:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0ccb8ac16a5b64cda0bce7baa106190667c1270991cd434a974d86facd191b9d/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836291": [
        {
            "ioc_value": "rem.herbalsupplementss.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-23 08:10:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85720311a3547edd95b5bfd0816136cfdb71e9402210a95a84def54874ea3324/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836290": [
        {
            "ioc_value": "155.103.69.160:2839",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-23 08:01:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/83babce6edd6eb5f1a1daa0c333eae8ccd471b62e958402beef6c0187e9914f2/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836288": [
        {
            "ioc_value": "86.109.75.168:3308",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 07:59:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b738c03fef5e3d26419e4aab1818a0a7ad206c67fb3eeedcdfb3ef1ee07eb620/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836287": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41vf67-74j/forw-74",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 07:54:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836285": [
        {
            "ioc_value": "http://62.60.226.159/api.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.solaris_loader",
            "malware_alias": null,
            "malware_printable": "SolarisLoader",
            "first_seen_utc": "2026-06-23 07:54:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/633ddc31dd195d88e889c9110fa7c08bde1d66ad6498997710426a48a72a3b65/",
            "tags": "SolarisLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836284": [
        {
            "ioc_value": "drinkappliance.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-23 07:47:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836280": [
        {
            "ioc_value": "https://www.kozijnenmaster.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 07:46:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.kozijnenmaster.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836281": [
        {
            "ioc_value": "https://emergsol.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 07:46:00",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/emergsol.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836283": [
        {
            "ioc_value": "104.238.186.154:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-23 07:44:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0b3e31bd2e94bb8db8ce5376c431c2912844d3e5f89226abae7ef6407888db59/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836282": [
        {
            "ioc_value": "192.142.54.83:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-23 07:43:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/51117a84e36c6fb759d0478e09d94f7f919f244b7da9a068083f62fb1359827b/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836279": [
        {
            "ioc_value": "209.126.7.188:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 07:15:09",
            "last_seen_utc": "2026-06-24 08:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836278": [
        {
            "ioc_value": "111.231.173.74:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 07:14:51",
            "last_seen_utc": "2026-08-28 08:08:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836277": [
        {
            "ioc_value": "60.205.127.57:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 07:14:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836271": [
        {
            "ioc_value": "node-js.prentiva99.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-23 06:55:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.elastic.co/security-labs/oxloader-malware-loader-infostealer",
            "tags": "OXLOADER",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836272": [
        {
            "ioc_value": "app.miloyannopoulos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-23 06:55:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.elastic.co/security-labs/oxloader-malware-loader-infostealer",
            "tags": "OXLOADER",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836270": [
        {
            "ioc_value": "13.213.217.16:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-23 06:55:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836267": [
        {
            "ioc_value": "54.169.85.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-23 06:55:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836264": [
        {
            "ioc_value": "56.10.22.234:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-23 06:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836151": [
        {
            "ioc_value": "claudverification-id.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-23 06:52:06",
            "last_seen_utc": "2026-06-23 09:58:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/d6e8a963-ed20-4562-99a7-3428de5e8cd6",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836152": [
        {
            "ioc_value": "stellar-minds.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-23 06:52:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/d6e8a963-ed20-4562-99a7-3428de5e8cd6",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836155": [
        {
            "ioc_value": "popularsoftupdates.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-23 06:52:05",
            "last_seen_utc": "2026-06-24 08:43:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260622-vzl1laey9s/behavioral1",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836156": [
        {
            "ioc_value": "editdocumentfree.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-23 06:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260622-vzl1laey9s/behavioral1",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836157": [
        {
            "ioc_value": "opendocumentonline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-23 06:52:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260622-vzl1laey9s/behavioral1",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836158": [
        {
            "ioc_value": "getimageinformation.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-23 06:52:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260622-vzl1laey9s/behavioral1",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836159": [
        {
            "ioc_value": "senterprise2026.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-23 06:52:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260622-vzl1laey9s/behavioral1",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836160": [
        {
            "ioc_value": "https://mascotfreights.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:52:01",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mascotfreights.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836161": [
        {
            "ioc_value": "cdnusa-01.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:52:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/40eed4a5-2977-4936-a265-f3d3f0b1e679",
            "tags": "clickfix,etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836162": [
        {
            "ioc_value": "216.173.65.250:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:52:00",
            "last_seen_utc": "2026-06-24 05:03:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,JDY,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836163": [
        {
            "ioc_value": "194.14.217.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:52:00",
            "last_seen_utc": "2026-06-24 05:10:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,JDY,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836164": [
        {
            "ioc_value": "149.248.3.38:13339",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:52:00",
            "last_seen_utc": "2026-06-24 05:10:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,JDY,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836165": [
        {
            "ioc_value": "avivtech.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/ad476a14-2cdf-4a27-a1ad-c53ae735060c",
            "tags": "clickfix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836166": [
        {
            "ioc_value": "grupandreu.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/ad476a14-2cdf-4a27-a1ad-c53ae735060c",
            "tags": "clickfix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836167": [
        {
            "ioc_value": "genbunsha.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/ad476a14-2cdf-4a27-a1ad-c53ae735060c",
            "tags": "clickfix,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1836168": [
        {
            "ioc_value": "40ad28b87b5ed395fe8ff303555cc28974682ed6cc5a71ede76c4b17648cb8ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:57",
            "last_seen_utc": "2026-06-24 05:04:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836169": [
        {
            "ioc_value": "28a23ab78739de674f94d9acadfe0709862c2b2d947e9051b200a24d3f9f45c4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836170": [
        {
            "ioc_value": "d1414803a83b1ba260e3e1be742379eccbb806f987ec1e7c0bc5399e4971a58f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836171": [
        {
            "ioc_value": "03c4667f016f1e8441177639d87f77a59f32d2c7e0041616376967338667bd3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836172": [
        {
            "ioc_value": "1e0da906811b570c4134ade310c3a94631d4b308d27b616497266b49aae2ad0a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836173": [
        {
            "ioc_value": "d62055910cd579ff1fb57bd1926c5b2e80e1677f0316737b2f733f86b01615dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836174": [
        {
            "ioc_value": "96ecc107aa645e36b5f939ebfcf9e61fc9ebc27616680fbd0fdeb41c7950d79a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "botnet,G1017,MIPS,recon,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836175": [
        {
            "ioc_value": "https://216.173.65.250/dispatch_service/v2/test",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "sh.kv",
            "malware_alias": null,
            "malware_printable": "KV",
            "first_seen_utc": "2026-06-23 06:51:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/jdy-tasking-decryption",
            "tags": "dispatch,G1017,JDY,novel,VoltTyphoon",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836133": [
        {
            "ioc_value": "http://223.123.42.237:49820/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 06:51:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.42.237",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836136": [
        {
            "ioc_value": "https://one-verification.lol/m",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/one-verification.lol",
            "tags": "ClickFix,curl-iex,KongTuke",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1835933": [
        {
            "ioc_value": "pdf-srv.pdfbamaa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/665e50b3ccf388f8fd9360e4d41bca52edf7defb5d6d8804865e517f5db2cb46",
            "tags": "clickfix,jsdelivr,loader,rundll32,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1835932": [
        {
            "ioc_value": "665e50b3ccf388f8fd9360e4d41bca52edf7defb5d6d8804865e517f5db2cb46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/665e50b3ccf388f8fd9360e4d41bca52edf7defb5d6d8804865e517f5db2cb46",
            "tags": "clickfix,jsdelivr,loader,rundll32,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1836132": [
        {
            "ioc_value": "http://103.98.37.183:37776/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 06:51:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.98.37.183",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836176": [
        {
            "ioc_value": "http://45.90.119.34/DotNetZip.dll",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-23 06:51:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Polygon,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836177": [
        {
            "ioc_value": "45.138.135.27:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836178": [
        {
            "ioc_value": "claudverification-id.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:46",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,Polygon,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836181": [
        {
            "ioc_value": "2.55.81.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-23 06:51:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1059_001,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836188": [
        {
            "ioc_value": "194.38.157.233:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:44",
            "last_seen_utc": null,
            "confidence_level": 93,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836182": [
        {
            "ioc_value": "185.156.66.165:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:43",
            "last_seen_utc": null,
            "confidence_level": 86,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836187": [
        {
            "ioc_value": "89.184.185.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:42",
            "last_seen_utc": null,
            "confidence_level": 92,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1059_003,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836193": [
        {
            "ioc_value": "185.89.60.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:40",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1055,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836194": [
        {
            "ioc_value": "185.89.141.70:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:40",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836195": [
        {
            "ioc_value": "185.193.170.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:38",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836196": [
        {
            "ioc_value": "178.16.55.124:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836197": [
        {
            "ioc_value": "218.252.234.243:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-23 06:51:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1573_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836198": [
        {
            "ioc_value": "217.92.214.15:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 06:51:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1059_003,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836199": [
        {
            "ioc_value": "94.230.141.123:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-23 06:51:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1573_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1836202": [
        {
            "ioc_value": "https://destinationsomewheretravel.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/destinationsomewheretravel.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836203": [
        {
            "ioc_value": "http://182.116.120.29:53323/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 06:51:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.116.120.29",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836204": [
        {
            "ioc_value": "https://hamzasarfaraz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hamzasarfaraz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836205": [
        {
            "ioc_value": "https://geonatiq.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/geonatiq.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836209": [
        {
            "ioc_value": "https://twolionspainting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/twolionspainting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836211": [
        {
            "ioc_value": "centroopticosur.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:32",
            "last_seen_utc": "2026-08-14 08:56:29",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836213": [
        {
            "ioc_value": "compagnie-et-autres.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:32",
            "last_seen_utc": "2026-08-14 08:56:30",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836212": [
        {
            "ioc_value": "cleaningwithocd.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:31",
            "last_seen_utc": "2026-08-28 11:41:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836219": [
        {
            "ioc_value": "jofcostadelsol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:27",
            "last_seen_utc": "2026-08-19 06:47:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836224": [
        {
            "ioc_value": "seagullsfootuscalais.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:24",
            "last_seen_utc": "2026-08-14 08:58:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836225": [
        {
            "ioc_value": "thedentalmedia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-23 06:51:23",
            "last_seen_utc": "2026-08-14 08:58:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1836228": [
        {
            "ioc_value": "https://mikukidsstore.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mikukidsstore.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836250": [
        {
            "ioc_value": "https://www.enterprisecloudupdate.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-23 06:51:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.enterprisecloudupdate.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1836256": [
        {
            "ioc_value": "annieareuok.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-23 06:51:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836258": [
        {
            "ioc_value": "http://125.27.11.223:36704/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 06:51:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.27.11.223",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836259": [
        {
            "ioc_value": "http://72.255.32.94:51378/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-23 06:51:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.94",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1836255": [
        {
            "ioc_value": "52.128.224.234:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-23 06:00:23",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836246": [
        {
            "ioc_value": "52.128.224.236:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-23 05:00:13",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836245": [
        {
            "ioc_value": "yw1tz6yc.englishekhtesasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 04:43:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836238": [
        {
            "ioc_value": "42.193.15.237:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-23 03:46:19",
            "last_seen_utc": "2026-07-27 08:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836227": [
        {
            "ioc_value": "d52cv625.ahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 01:05:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836208": [
        {
            "ioc_value": "nqw33qaj.engelabiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 00:41:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836206": [
        {
            "ioc_value": "megapariwin.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-23 00:39:58",
            "last_seen_utc": "2026-06-23 14:44:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836201": [
        {
            "ioc_value": "62.234.22.228:51123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 23:46:20",
            "last_seen_utc": "2026-09-01 02:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836200": [
        {
            "ioc_value": "1iubqhod.megapariwin.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 23:41:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836154": [
        {
            "ioc_value": "xbf6th7x.megaparicom.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 20:40:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1836153": [
        {
            "ioc_value": "47.76.51.107:5678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 20:36:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bbfcc27dfcbdb84ba4394883089301d90e7ab9523e313f2133ee5bf5e4099ba2/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836148": [
        {
            "ioc_value": "42.193.15.237:9002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 19:46:25",
            "last_seen_utc": "2026-07-27 08:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836147": [
        {
            "ioc_value": "findyoursoftupdate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_webinject",
            "malware_alias": null,
            "malware_printable": "Unknown Webinject",
            "first_seen_utc": "2026-06-22 19:45:56",
            "last_seen_utc": "2026-06-24 08:43:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Etherhiding,FakeCaptcha",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1836146": [
        {
            "ioc_value": "72.56.68.200:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pupy",
            "malware_alias": "Patpoopy",
            "malware_printable": "pupy",
            "first_seen_utc": "2026-06-22 19:45:30",
            "last_seen_utc": "2026-07-27 08:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PupyRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836145": [
        {
            "ioc_value": "64.89.160.127:60859",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:45:27",
            "last_seen_utc": "2026-07-23 08:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836144": [
        {
            "ioc_value": "217.60.195.194:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:44:50",
            "last_seen_utc": "2026-07-24 18:45:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836143": [
        {
            "ioc_value": "2.27.5.72:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:44:11",
            "last_seen_utc": "2026-07-23 08:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836141": [
        {
            "ioc_value": "185.115.164.59:50824",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:43:50",
            "last_seen_utc": "2026-07-22 18:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836142": [
        {
            "ioc_value": "185.115.164.60:8455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:43:50",
            "last_seen_utc": "2026-07-23 08:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836140": [
        {
            "ioc_value": "150.40.117.39:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-22 19:43:24",
            "last_seen_utc": "2026-07-23 08:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836139": [
        {
            "ioc_value": "107.173.9.99:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:43:10",
            "last_seen_utc": "2026-07-23 18:43:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836137": [
        {
            "ioc_value": "103.11.41.10:9428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:43:04",
            "last_seen_utc": "2026-07-23 08:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836138": [
        {
            "ioc_value": "103.11.41.19:5213",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 19:43:04",
            "last_seen_utc": "2026-07-23 08:43:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1836134": [
        {
            "ioc_value": "megaparivip.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 18:37:11",
            "last_seen_utc": "2026-06-22 18:37:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836126": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41/jjh-765/nxx-5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 17:13:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1836123": [
        {
            "ioc_value": "6d80382d125cb0253ef827c7da1054c30b1097511b4d538c15463a8ccab4772c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836124": [
        {
            "ioc_value": "5122a53d59c7d8199651b0eb541d93aed62b3080",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836125": [
        {
            "ioc_value": "10c0804818712c05c2a972f6fd64f86f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836119": [
        {
            "ioc_value": "2da9b1748b6154c69b6dcbbf09ec91d0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836120": [
        {
            "ioc_value": "8eae6ca0380279f0c047e6b5d49808db591f9e14d106226017eaae62b79c1a10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-22 16:57:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836121": [
        {
            "ioc_value": "a4be417dd9ef150c53eaed54d1bba4c97e5883f4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-22 16:57:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836122": [
        {
            "ioc_value": "da26a2729ed04d876c8e9c55175ffc2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-22 16:57:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836116": [
        {
            "ioc_value": "a99bb6e07b5f1b469ecd1a75f16f8a40",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:57:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836117": [
        {
            "ioc_value": "5d641dcf1b0dae4f248a3037e4f50a9fe20a9a313210e0bf0f759153eecac9ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836118": [
        {
            "ioc_value": "77867af29fdfdd7d42a33a05db3b9b45f4684b1e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836113": [
        {
            "ioc_value": "4b9dda8347383b785cbedba3c0a78e09",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:57:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836114": [
        {
            "ioc_value": "5f28fc0de30c2301ae8d82e8420df587a5bca6451bbaea053aa2ef48217b2081",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:57:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836115": [
        {
            "ioc_value": "2145d16a8e5920988be4007a4f1346ebc7ab98b6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:57:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836110": [
        {
            "ioc_value": "0c8d700f7a519da0160feeeb10ba3f67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:57:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836111": [
        {
            "ioc_value": "a41acf294032b38643e10298f66ef056bdcc41f02545f4e71ec20463450d9def",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:57:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836112": [
        {
            "ioc_value": "7294118a8bb12b512948399c7478109d9c7373cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:57:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836107": [
        {
            "ioc_value": "0dd679f8d2624c0326d358479e664735",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-06-22 16:57:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836108": [
        {
            "ioc_value": "57221740ae61a5958921f73b0f14e2ee2d4af79629139f935ac828f325ce5786",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:57:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836109": [
        {
            "ioc_value": "403eacb0b1dd75e31f778fa51799623706742e76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:57:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836103": [
        {
            "ioc_value": "73c60396594458f2731eac23824a4e18ebef5129",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-22 16:57:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836104": [
        {
            "ioc_value": "16e842400bbf74db1315b2ec3697cbcc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-22 16:57:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836105": [
        {
            "ioc_value": "e3f43bc77fa2ef74946abc231c0980543aa8fb54901dfa23ade201e886a27672",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-06-22 16:57:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836106": [
        {
            "ioc_value": "f558016334afeff7a578088a7078add70be31bbb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.facestealer",
            "malware_alias": null,
            "malware_printable": "FaceStealer",
            "first_seen_utc": "2026-06-22 16:57:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836100": [
        {
            "ioc_value": "0ac00c9165c88cc409a8de6b0aca37a4f0256693",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-22 16:57:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836101": [
        {
            "ioc_value": "c76ecf8d8dc484a7cbfc0b43e286e97a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-22 16:57:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836102": [
        {
            "ioc_value": "5c516974cba2aaaee4da889f153f7ae078caf833b31eb6366bd9f8c20f956e76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-22 16:57:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836097": [
        {
            "ioc_value": "5c06f652d16fd71136c9c1af45661989d03b7ed8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-22 16:57:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836098": [
        {
            "ioc_value": "0acfe0a8740e071874d3b0789ed5cd30",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-22 16:57:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836099": [
        {
            "ioc_value": "68b472722874374a6132ce1ec9470b14b7030030602d740fd5038d6560264c68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dostealer",
            "malware_alias": null,
            "malware_printable": "DOSTEALER",
            "first_seen_utc": "2026-06-22 16:57:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836094": [
        {
            "ioc_value": "0ae1a89c865f28cdcfebea962aa7deeba2845176",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836095": [
        {
            "ioc_value": "23a0877a9493286fda03edf640df32f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836096": [
        {
            "ioc_value": "817ac7a4ee5b546a812b129c9b9cfbb4581988bd95ac3e2a32a83b82f1bf430c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-22 16:57:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836091": [
        {
            "ioc_value": "ea41ab57edc9a9a1cb1ae258325d6519f5d23571",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "js.ghostblade",
            "malware_alias": null,
            "malware_printable": "GHOSTBLADE",
            "first_seen_utc": "2026-06-22 16:57:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836092": [
        {
            "ioc_value": "3b2a2777cead3c4981d4b2106c1ec4b4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "js.ghostblade",
            "malware_alias": null,
            "malware_printable": "GHOSTBLADE",
            "first_seen_utc": "2026-06-22 16:57:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836093": [
        {
            "ioc_value": "b460a840b07530fec4e32c46b6d945def5e9d6afa3b1e2004463272d7b25c3a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836087": [
        {
            "ioc_value": "ecaedc68c09154f9e97673d84d1860d5755828182a42f6aab64ab3766ce47396",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.ghostblade",
            "malware_alias": null,
            "malware_printable": "GHOSTBLADE",
            "first_seen_utc": "2026-06-22 16:57:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836088": [
        {
            "ioc_value": "d7982957ccd47d3603494688dc4a3d1a6d5183f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "js.ghostblade",
            "malware_alias": null,
            "malware_printable": "GHOSTBLADE",
            "first_seen_utc": "2026-06-22 16:57:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836089": [
        {
            "ioc_value": "4b1fd32206aa2831edead99efe88549a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "js.ghostblade",
            "malware_alias": null,
            "malware_printable": "GHOSTBLADE",
            "first_seen_utc": "2026-06-22 16:57:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836090": [
        {
            "ioc_value": "be4bb2ea6fc6959cdeb63238018761be56adb2d1e69e7c3d3340272187198b5d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.ghostblade",
            "malware_alias": null,
            "malware_printable": "GHOSTBLADE",
            "first_seen_utc": "2026-06-22 16:57:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836084": [
        {
            "ioc_value": "61269eca1d774d5e3bc5fb9445de05bb7b0f9057876a9ef7779ecd5ca1582acc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836085": [
        {
            "ioc_value": "594be30eb706112067443617d7690378c4113a37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836086": [
        {
            "ioc_value": "4f8186a34c9b0580111641749d875faa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836081": [
        {
            "ioc_value": "1277eba7151e5cd202713bd63622050f291a3448289f1ee636d49c42ee9ed1e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-22 16:57:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836082": [
        {
            "ioc_value": "f2171ec69a8cb8711dcecae2dbb16a956fd1af8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-22 16:57:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836083": [
        {
            "ioc_value": "059288a7f75595dbbdb7712e9c493fea",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-22 16:57:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836078": [
        {
            "ioc_value": "a44ec3a4e3c5a2076d2bcf75bebd01f2e596bdca44dbfec85ebfb933b7a8d865",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836079": [
        {
            "ioc_value": "0250f7c5d1938db42b4b0424c90da0bb4aa2a046",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836080": [
        {
            "ioc_value": "50d5cbf38b67eab98eca1e7cdc81b72e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836075": [
        {
            "ioc_value": "e7b999184fe1dd10a5018bfe049ba961059df4b3e826393bb7886abb82956b80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836076": [
        {
            "ioc_value": "07046b74403769d94de06880645623ffdf9a06d9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836077": [
        {
            "ioc_value": "5154b86d4eae71012e4ab8c076fc36b7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836072": [
        {
            "ioc_value": "4d802f691eb285fd3ff09083250000c9237ef62c008d7123a6d91486d8f4ac41",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836073": [
        {
            "ioc_value": "26feb2313cc06ebe32acbf6774aa5b3ea0621664",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836074": [
        {
            "ioc_value": "553edf1f5bc2f3c36b5d49070e07a3df",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836069": [
        {
            "ioc_value": "96e5117b89a7f3b20cea680ebd4fe453715f4022a2cdca394b5a2c23aabe2361",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 16:57:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836070": [
        {
            "ioc_value": "0ea50e2b1161e55bbed355b12283f268da1021ff",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 16:57:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836071": [
        {
            "ioc_value": "b06380cb28347af4fc2c5e294fc779c3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 16:57:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836067": [
        {
            "ioc_value": "a5409cda948810edc3535521c0edb51bbffa1823",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836068": [
        {
            "ioc_value": "6a00edc93f4bd49d200b2fc49e4f63d2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836064": [
        {
            "ioc_value": "56040d65720a2eee67b0cff3160e3504d113ec65",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836065": [
        {
            "ioc_value": "6bdcd7a0d5c1bb109552844edebdf4b4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836066": [
        {
            "ioc_value": "a2df0c26bf1a5292ce5d4a2f2a41397478090da65f80d10902be6ef2c6b50faf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:57:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836061": [
        {
            "ioc_value": "96fe4f933a6bea747a05408e9bf1650f9aee6f67",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836062": [
        {
            "ioc_value": "8d7e1b9d461f8a1557062786174d2d74",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836063": [
        {
            "ioc_value": "574cebd5ea2acb459274679dc5411d805e1a20c4c79c111450befd038819c4c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836058": [
        {
            "ioc_value": "b8cb9a47c68bf67ccd8d7a2769d32501f9aed4fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-22 16:57:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836059": [
        {
            "ioc_value": "ba3281bb9c624619a22b1e506f23fe46",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-22 16:57:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836060": [
        {
            "ioc_value": "c9f77f2a7cae28d3a7bf48b365f284d3189ad6c57d66145a22c8371110da2081",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836055": [
        {
            "ioc_value": "560840d4772533a016994cb21046929f6f0460f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836056": [
        {
            "ioc_value": "be0afa6b88f180fca9fbef78a4206283",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836057": [
        {
            "ioc_value": "060618b911a7022394c88e195aa477157d366363f76ed4b86f0cc3b635908cc3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-22 16:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836052": [
        {
            "ioc_value": "9c6114c5ba66466b3bbb7c25870a33ba9848e64f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836053": [
        {
            "ioc_value": "dd9e5a8ef764babeb49e5a4154bea186",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836054": [
        {
            "ioc_value": "2172b92bf5a298d1d99dd4f827c581fb86a3f81dac4f8d64394f507a7116b386",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836049": [
        {
            "ioc_value": "3b1dec5c00a60dd99a41e9085f8956e2fee6f8c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-22 16:57:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836050": [
        {
            "ioc_value": "572ee6e985c588c4a66fe7d5ab13ae05",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-22 16:57:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836051": [
        {
            "ioc_value": "57ee90250da5f51dc59d2e189bbedd0e2c1dba097a766e5bab903288686322dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:57:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836045": [
        {
            "ioc_value": "d58139c7219be351d742a21fc35150702bae9ac2023a7086620521f1721f2c49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-22 16:57:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836046": [
        {
            "ioc_value": "2a54e5da3531992016fcf0ab7f6f284a122712cc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-22 16:57:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836047": [
        {
            "ioc_value": "52fdfdac4eb28cc5f0f709de00c1e527",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-22 16:57:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836048": [
        {
            "ioc_value": "2e4845a187fa3a02cac09ca22d314d3f924c8bf63bf877d23e8645f7bac8cf55",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-22 16:57:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836042": [
        {
            "ioc_value": "d45bdfaf72211e28cdb9566151db2cfbd98d27df680582e795b2a79e0d0044ae",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-22 16:57:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836043": [
        {
            "ioc_value": "a6531acda0c26ae9269c80e9e64b2ec711b4874c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-22 16:57:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836044": [
        {
            "ioc_value": "f17e14678bfb1475eefa43dcb91a8cad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-22 16:57:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836039": [
        {
            "ioc_value": "72e855025d02c02fa90b0ee9296d8a59a6c008dff1b70682b58474a8183836b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-06-22 16:57:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836040": [
        {
            "ioc_value": "176cf51a8c84e358c1473b0b25ff7506a0a7e447",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-06-22 16:57:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836041": [
        {
            "ioc_value": "09406d8c037ab49a52afe0e1d6d0eaf9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-06-22 16:57:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836036": [
        {
            "ioc_value": "c1b8f7f2093c2131b450a051d130c545f2fa5ceb44c6176204ef0b1f474d6c65",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:57:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836037": [
        {
            "ioc_value": "514797b3d43ea786d77a25d678be74e17384cf87",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:57:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836038": [
        {
            "ioc_value": "52655a6db617f3bbf385564a47d783d9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:57:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836032": [
        {
            "ioc_value": "bd9d6c8361b4d9ab9cf22f177273ca03",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:57:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836033": [
        {
            "ioc_value": "97e7c70270a2522d212ad556382d97477dba6730dccd421230a9f36cb97aa9ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-06-22 16:57:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836034": [
        {
            "ioc_value": "d5d9cf48338890823f4897aa4db4a2e246f1ffad",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-06-22 16:57:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836035": [
        {
            "ioc_value": "a9b33292b46c7536a34f812d16aae9fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.guidloader",
            "malware_alias": null,
            "malware_printable": "GUIDLOADER",
            "first_seen_utc": "2026-06-22 16:57:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836029": [
        {
            "ioc_value": "ab525145e57509b5284bfafcf339ad45",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-22 16:57:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836030": [
        {
            "ioc_value": "2009c2095160ce4c016855f7af23529a143e7533a5624b60f4dbc277ae9a7bbf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:57:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836031": [
        {
            "ioc_value": "a33adebc327a5548fda826b1c0cdf55899af31e4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:57:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836025": [
        {
            "ioc_value": "22d4462061e98ebe85f0815ebf11925fcd3c631c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:57:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836026": [
        {
            "ioc_value": "482dbba4f2559fa2ee3666e4d35e9d67",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:57:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836027": [
        {
            "ioc_value": "c8b4ce8bd2ae8e48dc2ab2d322faca65c673312dfa22751877e97426cb7b760e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-22 16:57:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836028": [
        {
            "ioc_value": "f576ede4e8e19128e703880f11460a4e35f0420a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-22 16:57:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836022": [
        {
            "ioc_value": "153a6e115c377fa1232636c03d6fd68d3643d196",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836023": [
        {
            "ioc_value": "81e00f65b86f0db0754b5d851631dfb0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836024": [
        {
            "ioc_value": "9b0fb92deed4eca6da96d3a1c99c2a806c47865c08ed36ea361e9d5361c09a66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:57:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836020": [
        {
            "ioc_value": "82fa0aa7387d7173c9a9ebd1e8dcbb84",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 16:57:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836021": [
        {
            "ioc_value": "d3edc0c8ca141d1a7e1f93f4d727f92e0e63bba43cac95723d9a20467e790296",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:57:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836018": [
        {
            "ioc_value": "7e1435b42bd584c4edeaa1fc4055de16e99c5242e0a9d0e24b5a677e1c356563",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 16:57:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836019": [
        {
            "ioc_value": "5d592bb2433bca01152fa99773bd785e631fea73",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 16:57:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836015": [
        {
            "ioc_value": "9d16b4e2e2852fde0a55f2075f9d0a40618eaff06634d947668d5b6f586d5293",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-22 16:57:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836016": [
        {
            "ioc_value": "f006c1d8c4aa04be2bf05e8f4487f497f1ab2d20",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-22 16:57:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836017": [
        {
            "ioc_value": "12b7a66e1314a078c3ff4e6b486b1cbb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-22 16:57:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836012": [
        {
            "ioc_value": "28fb3127d5e68e4436fc9c8c83556f41d9f644df94157d1f99ae00288b9572cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836013": [
        {
            "ioc_value": "29fe07a5605099c1342267ea76989f07346bc9e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836014": [
        {
            "ioc_value": "86db7353d79a3b44770de794d76c7f6b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836008": [
        {
            "ioc_value": "50f80b086aac1820defd105200518c2f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:56:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836009": [
        {
            "ioc_value": "44760ec58f066892b58f50330093213d3bfb0358d74f735010aaf54585712b34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:56:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836010": [
        {
            "ioc_value": "28c13d17160b8dd52de8cd5d3e3cca77117be2f7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:56:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836011": [
        {
            "ioc_value": "00a25c881533896a7fb5646f1411596a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:56:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836005": [
        {
            "ioc_value": "9b76d12f3786d918ffd01eefedd10026",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:56:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836006": [
        {
            "ioc_value": "99bee9c7498d8bbf660140795ad31220000a408d8234f58bed07939779ce0ed4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:56:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836007": [
        {
            "ioc_value": "b66cd7c24d5867bc26ad615d33c0123fdc0c634a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:56:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836001": [
        {
            "ioc_value": "93db4f4cbb3d7dca6ca1d3d8dca16b653929eb42",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836002": [
        {
            "ioc_value": "eb42e023cad8abcdd43a65d49846d15b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836003": [
        {
            "ioc_value": "1d47d23590a3fa04729bb611f7b69356b47639667b83cdfe38eeee77e7f1601c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:56:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836004": [
        {
            "ioc_value": "39f24666b2fcff117ed4526118a44d6853cc2a82",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-22 16:56:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835998": [
        {
            "ioc_value": "8bb8fb2f001b434f5de5cc52f471c755eebadfeb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835999": [
        {
            "ioc_value": "9fd222a83d7848f1aef9e43a885a89fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1836000": [
        {
            "ioc_value": "af7d2b9b203041d11f70996168610b8b277fb6b0c06ef245d1db38dd81958095",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835995": [
        {
            "ioc_value": "10bbf24515ca365e2333d6129ef439a38c146ee8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835996": [
        {
            "ioc_value": "343da20a5db5a3dcfff78d3ee853038b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835997": [
        {
            "ioc_value": "789d88591e1400fad82e92ab9afcb8ee04b7671fa2ac19ae2fa70cbbf82757b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835991": [
        {
            "ioc_value": "f3321076596f3bf0f3cf48b50437c694b726e787d5703915bcb33bac49701551",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835992": [
        {
            "ioc_value": "75ec993235a9dc4a5aab04f372e1f7a8b2ef66d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835993": [
        {
            "ioc_value": "adf6a14557d511c3e960b22c4e645b54",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835994": [
        {
            "ioc_value": "e350ca46f64afa440429285396c60ff2ac5c325996eed910832bd94c9f43c487",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835988": [
        {
            "ioc_value": "ff1860389f41deedf8b72f3cd4cf7b33584c0b329264bb58d1d62d0f6cda777d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835989": [
        {
            "ioc_value": "36d2ab1dd36957542552164c77dc387308be4b1a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835990": [
        {
            "ioc_value": "7d8946ca862fe4a2cfe723f8583f4767",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835984": [
        {
            "ioc_value": "3ebaabe329226d8e7428bc1c4dcb9e3c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:56:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835985": [
        {
            "ioc_value": "03ab8ad3d41ca487e715290a68e3f90d671f36ffeda8c12439d2d7c92880948e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835986": [
        {
            "ioc_value": "30e669ff4710b6e5dd195221af5c068c7f2acf37",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835987": [
        {
            "ioc_value": "05cacbb03802272dcc3e6747d79069fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835982": [
        {
            "ioc_value": "d337ba3b1ea0946b50973a01b66e2d9e26c6693109b6ac196a43ee6e20300e4b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:56:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835983": [
        {
            "ioc_value": "acde6fbb8be8f20540a7dc0a91429326635d0d7b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 16:56:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835979": [
        {
            "ioc_value": "409ad0799fe0b1ca3265d58f95eb13b7d56d6bad1f7346459fb02f772a3bf751",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:56:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835980": [
        {
            "ioc_value": "a37e1c91a8f00ddd5b86ae6848b8e2163843b3f2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:56:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835981": [
        {
            "ioc_value": "be2bc476dc6a18164b63ecc75e85cde8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-22 16:56:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835975": [
        {
            "ioc_value": "098a3905a8bde664d46f9967e9c34770",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-22 16:56:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835976": [
        {
            "ioc_value": "85faf8edd9d7b2c78e1a8bddd0ead41b822adc0d4bb67bc1a5cda9a3e4ba9c5c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835977": [
        {
            "ioc_value": "7bb76f4e92d6ba57bb57c0bb3d365aa934dedcb4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835978": [
        {
            "ioc_value": "a604cd455d2e8c3d199753e13ed77d04",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835972": [
        {
            "ioc_value": "d9e0461524386292212444734e44619e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 16:56:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835973": [
        {
            "ioc_value": "3e982ec9ece55bc3e565186182caea369338d277c078f4380fe2258342ca4893",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-22 16:56:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835974": [
        {
            "ioc_value": "8e13a19050a2db7525813f4a6de1654af4ed2dfd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-22 16:56:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835968": [
        {
            "ioc_value": "a837343932d5b5113189eced089c63b6c25aa246",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:56:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835969": [
        {
            "ioc_value": "158b8af97dc35528e53d10e6ed9f6d62",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:56:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835970": [
        {
            "ioc_value": "6a0bf1dba11b61b4b53e78ccb483a7aea4ec3cfa81d2e7f9de55376c9fdef7ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 16:56:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835971": [
        {
            "ioc_value": "8b0954a8e13c1086945b93e9e967786e86bd0f2a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 16:56:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835964": [
        {
            "ioc_value": "3f55e9b6542684cbe6ad853fc7a0c1df1b0e8de0a7c69fef131e93c82f3712ac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:56:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835965": [
        {
            "ioc_value": "401901a30cbe4578341ade9e3f4f992bc8c6a7f1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:56:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835966": [
        {
            "ioc_value": "9f21fda4eace55e9f759bbfb4d5799b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 16:56:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835967": [
        {
            "ioc_value": "674295167707c56a258e7f8a55b34c12332793733ee86e23023af7fe099e16cc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-22 16:56:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835961": [
        {
            "ioc_value": "0b3e31bd2e94bb8db8ce5376c431c2912844d3e5f89226abae7ef6407888db59",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835962": [
        {
            "ioc_value": "686d46b27b2434e1aeb24dd67d2e7a1d085e7125",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835963": [
        {
            "ioc_value": "2312608a5b3968e154d49629cbb44f4a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835958": [
        {
            "ioc_value": "5061c681e8b516f877c426dd593f570cc8520d2411e842f9c236b6f555046bac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835959": [
        {
            "ioc_value": "ef6c5eb5fd7029d03b1906821d91e50ee5afb958",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835960": [
        {
            "ioc_value": "58a8095bf4ef6402cd551425f63f51a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835955": [
        {
            "ioc_value": "12b90ddb368ab4ffcc98171a59b8a19a07aeb6017b3ec08a06b3b1eecdd9fdd4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835956": [
        {
            "ioc_value": "08f68b73d628e543ead4fc92ef9c0fdb37b8acfb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835957": [
        {
            "ioc_value": "0c4f98399c7d35ad1158f92ee7043b3b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:56:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835952": [
        {
            "ioc_value": "80ea7456faf8688b78fe1b82d534bc6251c70cddb9ec076225adac334ad988ca",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835953": [
        {
            "ioc_value": "f1fd3ca4a4dccaeee98eeb6fc94f4eeba7d89f3f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835954": [
        {
            "ioc_value": "e4841bff2e9072bb045ef9f6d0643280",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835948": [
        {
            "ioc_value": "0f89e6a8ca11c4e734b1bb205e264ae9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-06-22 16:56:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835949": [
        {
            "ioc_value": "abb567030783490103cd3b5b5e075aaf5a4bb35379188fe8389317a5a514a9af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-06-22 16:56:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835950": [
        {
            "ioc_value": "28fe622e40c2ba89b9f57b3242b6d9e7565216c4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-06-22 16:56:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835951": [
        {
            "ioc_value": "cb9ff4d0795d8248ae73f252acdca705",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-06-22 16:56:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835945": [
        {
            "ioc_value": "cee53ef94384940fbf12ca59041a55e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835946": [
        {
            "ioc_value": "f3355943d1b279778879cbe6f036bd1b2f86b6e33ef1c4b1f4896a4e540b3593",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-06-22 16:56:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835947": [
        {
            "ioc_value": "99188aeaf816b25a1c489e5609394738df16d0bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "apk.clipper",
            "malware_alias": null,
            "malware_printable": "Clipper",
            "first_seen_utc": "2026-06-22 16:56:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835942": [
        {
            "ioc_value": "71cb65bdb528dbde4338ae5db952d086",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835943": [
        {
            "ioc_value": "51117a84e36c6fb759d0478e09d94f7f919f244b7da9a068083f62fb1359827b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835944": [
        {
            "ioc_value": "6445c9df6a7e5faf484e3d2f32e94cd0eb45fedd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-22 16:56:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835938": [
        {
            "ioc_value": "8881557af5bdf3837483c10a730c8911e91abafa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-06-22 16:56:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835939": [
        {
            "ioc_value": "a65959f323391321beba89312391a706",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-06-22 16:56:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835940": [
        {
            "ioc_value": "6b1cddee856444740634d7fb9cce065955d4855a564b11a63e8d1b83516822c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835941": [
        {
            "ioc_value": "92a16c3982c8f6d0ac59d58362d6d44347384f4f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835935": [
        {
            "ioc_value": "390c2fd4ff2ffa07cab321eecf9623ec0625b00f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835936": [
        {
            "ioc_value": "c0f539f5c7b3b42359d1c56d864bfe7d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835937": [
        {
            "ioc_value": "8208dedd51639c570af2d9fc3388cfb3320505618700a843a0d6544bee88dac0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-06-22 16:56:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835934": [
        {
            "ioc_value": "a38e30fc95d2a59e32e381c5c36d7f3a8e874e53fb3f5c6e6ba5ea09fa0fe2a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 16:56:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835931": [
        {
            "ioc_value": "https://ext2.info/time.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 16:41:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b11ef9f11c9bb6228582f38a61f4c04dc7160939d8c5b7ee4e467ffde6317f02/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835930": [
        {
            "ioc_value": "c4cxraym.megaparicom.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 16:38:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835927": [
        {
            "ioc_value": "a6dbc09d360b0cc7bb5b45e015e191aa4528b1fc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-06-22 16:28:35",
            "last_seen_utc": "2026-06-22 16:56:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835928": [
        {
            "ioc_value": "286ab1c862a170f4ccdba9ee6b870445",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-06-22 16:28:35",
            "last_seen_utc": "2026-06-22 16:56:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835924": [
        {
            "ioc_value": "db16d6f72caf600aa8e6ba5672e3062b773628ca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:28:34",
            "last_seen_utc": "2026-06-22 16:56:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835925": [
        {
            "ioc_value": "833fa87f27753cce6db881c080475663",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:28:34",
            "last_seen_utc": "2026-06-22 16:56:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835926": [
        {
            "ioc_value": "d41252ddc4fab7295681019cfb2f1c1e899e2f480c306bfad78b24c38165a807",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.orcus_rat",
            "malware_alias": "Schnorchel",
            "malware_printable": "Orcus RAT",
            "first_seen_utc": "2026-06-22 16:28:34",
            "last_seen_utc": "2026-06-22 16:56:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835921": [
        {
            "ioc_value": "a4358deca3180c3864cd4030d9ac3eea5634a7b3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 16:28:33",
            "last_seen_utc": "2026-06-22 16:56:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835922": [
        {
            "ioc_value": "c3d6b73e54ff4efd29651e46f751fe5b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 16:28:33",
            "last_seen_utc": "2026-06-22 16:56:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835923": [
        {
            "ioc_value": "930070e90a3b037b5132ff7bd2c49899d3da39679e9ff377ef5d7e40ea57d39e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-22 16:28:33",
            "last_seen_utc": "2026-06-22 16:56:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835918": [
        {
            "ioc_value": "41b27584362b4fff75ab23fb0caa2968609fd570",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-22 16:28:32",
            "last_seen_utc": "2026-06-22 16:56:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835919": [
        {
            "ioc_value": "1277177e9e12414f50182a8bb5463a7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-22 16:28:32",
            "last_seen_utc": "2026-06-22 16:56:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835920": [
        {
            "ioc_value": "1859950b3f410ae37bf115ab107917f6af6313a598f76ddbb0225d9cc85518a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-22 16:28:32",
            "last_seen_utc": "2026-06-22 16:56:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835915": [
        {
            "ioc_value": "6f5272e60fc23e7d911bc651fbe8e58187a73d30",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-22 16:28:31",
            "last_seen_utc": "2026-06-22 16:56:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835916": [
        {
            "ioc_value": "6735cd20825820a7065894676a056491",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-22 16:28:31",
            "last_seen_utc": "2026-06-22 16:56:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835917": [
        {
            "ioc_value": "3832eea5221afb6554def361abd9abed7258c0916fc34ecbd19191131f462fba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-22 16:28:31",
            "last_seen_utc": "2026-06-22 16:56:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835914": [
        {
            "ioc_value": "7b55a11d09462a48b0e2c2875edf253827f304ad28eaeb1553c7633b86e87807",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-22 16:28:30",
            "last_seen_utc": "2026-06-22 16:56:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1835910": [
        {
            "ioc_value": "www.iltat.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 16:10:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3d02b25398110fbaa434c955c2037aafec29dde96d1e5e66711eda46c26a36e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835911": [
        {
            "ioc_value": "www.iltatbackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 16:10:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3d02b25398110fbaa434c955c2037aafec29dde96d1e5e66711eda46c26a36e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835912": [
        {
            "ioc_value": "www.iltatbackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 16:10:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3d02b25398110fbaa434c955c2037aafec29dde96d1e5e66711eda46c26a36e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835909": [
        {
            "ioc_value": "www.cbcleib.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 16:10:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d3d02b25398110fbaa434c955c2037aafec29dde96d1e5e66711eda46c26a36e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835878": [
        {
            "ioc_value": "https://yodonoplasma.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:09",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/yodonoplasma.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835881": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.x86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:09",
            "last_seen_utc": "2026-07-23 14:08:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835882": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.x86_64",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:09",
            "last_seen_utc": "2026-07-23 14:08:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835883": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.i686",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:08",
            "last_seen_utc": "2026-07-23 14:08:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835884": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.arc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:08",
            "last_seen_utc": "2026-07-23 14:08:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835885": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.arm6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:07",
            "last_seen_utc": "2026-07-23 14:08:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835886": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.mpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:07",
            "last_seen_utc": "2026-07-23 14:08:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835887": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.arm",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:06",
            "last_seen_utc": "2026-07-23 14:08:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835888": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.m68k",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:05",
            "last_seen_utc": "2026-07-23 14:08:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835889": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.sh4",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:05",
            "last_seen_utc": "2026-07-23 14:08:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835890": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.spc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:04",
            "last_seen_utc": "2026-07-23 14:08:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835891": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.arm7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:04",
            "last_seen_utc": "2026-07-23 14:08:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835892": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:03",
            "last_seen_utc": "2026-07-23 14:08:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835893": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.arm5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:03",
            "last_seen_utc": "2026-07-23 14:08:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835894": [
        {
            "ioc_value": "http://192.142.28.77/bachekuni/ohshit.ppc",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 15:45:02",
            "last_seen_utc": "2026-07-23 14:08:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835908": [
        {
            "ioc_value": "135.136.141.43:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-22 15:44:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7122d9c3a7cca9754cdab80ea7c79856234a735cf744262bbe28708150153a0a/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835907": [
        {
            "ioc_value": "94.26.106.34:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-22 15:42:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3483b7680898f8691b352ba248dc962c3e7734e7da76f78dcd4a31e2a2342ea1/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835906": [
        {
            "ioc_value": "5.101.81.131:16614",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-22 15:42:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b34f4d6348e400a235867e9104125278e07914ec071b8cabf8c3982e70e1918e/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835904": [
        {
            "ioc_value": "38.240.51.74:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 15:35:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e2fa1f0b6df7ca036edab2d3c9ae4990ab2898c7a25c1cf0a0326bc5b45d4fa6/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835905": [
        {
            "ioc_value": "85.11.167.17:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:35:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa5091fb1b6623d8318336e4ad4c290b7b7847767a017b4da94b570fe38e4e3e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835903": [
        {
            "ioc_value": "216.250.250.247:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 15:35:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/10e2ae86cdd60ba9851b6e2bd676a3621f404c217baf00a7d6a74d976e6808e0/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835902": [
        {
            "ioc_value": "104.239.66.178:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 15:35:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/06316914d40365bcd7a60ccd3268411f4b79ba14bef8fd1bd713fbb65fedf115/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835899": [
        {
            "ioc_value": "www.webdevarrayremcobackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/05f635babcfecd234ec89193ccf34b4f892e7a07730ed09730443e9abd95a655/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835900": [
        {
            "ioc_value": "www.webdevarrayremcobackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/05f635babcfecd234ec89193ccf34b4f892e7a07730ed09730443e9abd95a655/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835901": [
        {
            "ioc_value": "www.webdevarrayremcobackup3.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/05f635babcfecd234ec89193ccf34b4f892e7a07730ed09730443e9abd95a655/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835897": [
        {
            "ioc_value": "watchthisyear.gotdns.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 15:35:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b271d12f4da306da079d7592f4611ffbd1f4c0a10f62031fc1d96a259728f96d/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835898": [
        {
            "ioc_value": "www.webdevarrayremco.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:35:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/05f635babcfecd234ec89193ccf34b4f892e7a07730ed09730443e9abd95a655/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835896": [
        {
            "ioc_value": "147.124.218.109:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:30:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/320e1f0e1ebc1faa07e434e5b76e64078d208adac7ae738e75cb03928a434e0c/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835895": [
        {
            "ioc_value": "147.124.218.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:30:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/320e1f0e1ebc1faa07e434e5b76e64078d208adac7ae738e75cb03928a434e0c/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835877": [
        {
            "ioc_value": "91.92.41.150:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/98d16c461d163348984b87df772e19af72ae133de38b0c97bf03838d995c9071/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835875": [
        {
            "ioc_value": "193.104.58.63:1122",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-22 15:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d41c4e42ec7b047d855df45e8c5b6b8a14c94743e79e87589715ff776920cae7/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835876": [
        {
            "ioc_value": "216.250.253.127:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7123256ecff0daa41a49448c5fd399c35b02ea28bdf8f129c0ff4145a0a04a3c/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835873": [
        {
            "ioc_value": "151.241.154.173:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b4c879cb84c835ef64d9f45b78a69b9f08700ab35498f06d802c72af7428223e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835874": [
        {
            "ioc_value": "158.94.211.172:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba08e2d253229e0f2c2766a7415b31f8b0f75f37b6c9277a0c794a10831b3275/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835872": [
        {
            "ioc_value": "104.168.7.223:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61c857e42f076450574d7e708cf9ca8104c25ad32606317afdbaa33c1b49fb1e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835871": [
        {
            "ioc_value": "102.220.160.244:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d6ea12a8124866c210f639363ae04f6cf67c041ffee09e3f61e955d5e2b69db9/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835869": [
        {
            "ioc_value": "japanaction059.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a287e0ef9c97ea4ec7bb033c2c52076bd370270ae51288924b751ecbf7dd29ba/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835870": [
        {
            "ioc_value": "japanaction059bk.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 15:25:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a287e0ef9c97ea4ec7bb033c2c52076bd370270ae51288924b751ecbf7dd29ba/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835868": [
        {
            "ioc_value": "opa.utvrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 15:25:33",
            "last_seen_utc": "2026-06-22 17:25:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835867": [
        {
            "ioc_value": "https://opa.utvrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 15:25:32",
            "last_seen_utc": "2026-06-22 17:25:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "k5yss1,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835860": [
        {
            "ioc_value": "25yiumhh.rahnemayenegaresh.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 15:05:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835858": [
        {
            "ioc_value": "http://acnms.dmdoc.dynv6.net/smltm/bootservice.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 14:57:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4/",
            "tags": "APT,DPRK",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835859": [
        {
            "ioc_value": "http://acnms.dmdoc.dynv6.net/smltm/finalservice.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 14:57:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4/",
            "tags": "APT,DPRK",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835857": [
        {
            "ioc_value": "acnms.dmdoc.dynv6.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 14:57:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0efbd18c77479b458078521c18bdad84852b71250122a17cb8105c10d3df38d4/",
            "tags": "APT,DPRK",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835849": [
        {
            "ioc_value": "apivuecomponent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-22 14:50:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835856": [
        {
            "ioc_value": "boatdesk.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-22 14:44:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835855": [
        {
            "ioc_value": "aimemtools.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-22 14:40:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5b5434cc8bb3556075c6967d2ffee5a6b33793de07b9d4701bc63d369de63861/",
            "tags": "AnyDesk,RMM",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835852": [
        {
            "ioc_value": "http://strgsd.xyz:5392",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-22 14:35:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/409ad0799fe0b1ca3265d58f95eb13b7d56d6bad1f7346459fb02f772a3bf751/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835851": [
        {
            "ioc_value": "fruitbeginner.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-22 14:34:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835850": [
        {
            "ioc_value": "railcountry.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-22 14:34:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835772": [
        {
            "ioc_value": "https://lsnsdns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835807": [
        {
            "ioc_value": "https://lskannsserv.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835808": [
        {
            "ioc_value": "https://xdavnode.pro",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835809": [
        {
            "ioc_value": "https://ethercdnns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835810": [
        {
            "ioc_value": "https://framework-css-styles-js.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835811": [
        {
            "ioc_value": "https://verification-js-cdn.boats",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835812": [
        {
            "ioc_value": "https://svs-verificationdate.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835813": [
        {
            "ioc_value": "https://verification-code-js.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835815": [
        {
            "ioc_value": "https://codecerification.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:57:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835814": [
        {
            "ioc_value": "https://code-verification-js.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835816": [
        {
            "ioc_value": "https://dark-strong.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835817": [
        {
            "ioc_value": "https://idverification-code.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835818": [
        {
            "ioc_value": "http://185.199.199.159/api/endpoint.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835820": [
        {
            "ioc_value": "http://84.21.189.135",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835819": [
        {
            "ioc_value": "https://yoginth.com/pfp.png",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835821": [
        {
            "ioc_value": "http://78.40.209.225",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835822": [
        {
            "ioc_value": "http://213.176.72.204",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835823": [
        {
            "ioc_value": "http://89.169.12.160",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835824": [
        {
            "ioc_value": "http://212.34.142.111/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835825": [
        {
            "ioc_value": "http://89.169.12.140",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835826": [
        {
            "ioc_value": "http://144.31.57.67",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835827": [
        {
            "ioc_value": "http://213.176.73.139",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835828": [
        {
            "ioc_value": "http://85.137.52.21",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835829": [
        {
            "ioc_value": "http://185.10.68.98",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835830": [
        {
            "ioc_value": "212.34.130.122:2727",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835831": [
        {
            "ioc_value": "http://110.36.27.209:58170/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-22 13:56:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.36.27.209",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1835832": [
        {
            "ioc_value": "http://153.117.15.36:59821/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-22 13:56:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.36",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1835833": [
        {
            "ioc_value": "http://119.30.118.255:52351/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-22 13:56:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.30.118.255",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1835836": [
        {
            "ioc_value": "dbxqkb.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-06-22 13:56:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835837": [
        {
            "ioc_value": "ambercompanion.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-06-22 13:56:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835838": [
        {
            "ioc_value": "https://storage.googleapis.com/mantrams-browser-defender-public/non-login-pages/clickfix_cloudflare_multios.html",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/storage.googleapis.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835842": [
        {
            "ioc_value": "https://thisisafalsepositive.st/shard/submitMinecraftLog",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 13:56:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cee20b0ab5a4f45984e8692355fd73082c52120875101bd3ff87d07c82646ee7/",
            "tags": "c2,SilentNet",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835844": [
        {
            "ioc_value": "9b9bmxfm.megapariwin.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 13:41:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835835": [
        {
            "ioc_value": "myrya1hx.megaparicom.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 12:38:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835802": [
        {
            "ioc_value": "https://biyaconserver.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835803": [
        {
            "ioc_value": "https://npanssltejs.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835804": [
        {
            "ioc_value": "https://inst-bi.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835805": [
        {
            "ioc_value": "https://lsikjsns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835806": [
        {
            "ioc_value": "https://shssshdscn.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835796": [
        {
            "ioc_value": "https://visual-ns-portal.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835797": [
        {
            "ioc_value": "https://nsbdnscloud.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835798": [
        {
            "ioc_value": "https://chekbrow.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835799": [
        {
            "ioc_value": "https://smtnscerver.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835800": [
        {
            "ioc_value": "http://45.82.13.83/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835801": [
        {
            "ioc_value": "http://144.31.181.38/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835789": [
        {
            "ioc_value": "https://testerlau.lat",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835790": [
        {
            "ioc_value": "https://bcncdncl-ns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835791": [
        {
            "ioc_value": "https://cgfuryclaud.shop",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835792": [
        {
            "ioc_value": "https://sssndns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835793": [
        {
            "ioc_value": "https://vnmdnns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835794": [
        {
            "ioc_value": "https://cdn-yethounds.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835795": [
        {
            "ioc_value": "https://nslsconscloud.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835783": [
        {
            "ioc_value": "https://remotesh.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835784": [
        {
            "ioc_value": "https://mikelle.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835785": [
        {
            "ioc_value": "https://clip-stash.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835786": [
        {
            "ioc_value": "https://web-safe.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835787": [
        {
            "ioc_value": "https://webflare.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835788": [
        {
            "ioc_value": "https://web-protection.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835777": [
        {
            "ioc_value": "http://91.92.240.204/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835778": [
        {
            "ioc_value": "http://45.155.69.156/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835779": [
        {
            "ioc_value": "https://bootstrup-cdn-ns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835780": [
        {
            "ioc_value": "https://best-claudns-js.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835781": [
        {
            "ioc_value": "https://remoteshields.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835782": [
        {
            "ioc_value": "https://remoteshcontrol.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835771": [
        {
            "ioc_value": "https://api-imager-host.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835773": [
        {
            "ioc_value": "https://jsframeworkns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835774": [
        {
            "ioc_value": "https://bbdsnssserver.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835775": [
        {
            "ioc_value": "https://clnsdns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835776": [
        {
            "ioc_value": "https://ntsnsdns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835765": [
        {
            "ioc_value": "https://ghdnsserverns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835766": [
        {
            "ioc_value": "https://js-server.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835767": [
        {
            "ioc_value": "https://mainrist.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835768": [
        {
            "ioc_value": "https://updtruam.club",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835769": [
        {
            "ioc_value": "http://dreff-nsdns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835770": [
        {
            "ioc_value": "https://dreff-nsdns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835761": [
        {
            "ioc_value": "https://l3cdnns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835762": [
        {
            "ioc_value": "https://siteamnsserv.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835763": [
        {
            "ioc_value": "https://smnsdns.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835764": [
        {
            "ioc_value": "https://vdsinatest.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:52",
            "last_seen_utc": "2026-06-22 11:41:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835756": [
        {
            "ioc_value": "https://bedcdnset.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835757": [
        {
            "ioc_value": "https://cdnjsdelivr.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:51",
            "last_seen_utc": "2026-06-22 11:41:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835758": [
        {
            "ioc_value": "https://sdhscndnssl.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835759": [
        {
            "ioc_value": "https://sdnssmdf-js.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835760": [
        {
            "ioc_value": "https://pastebin.com/raw/myvh5TTa",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835752": [
        {
            "ioc_value": "https://macerapindasi.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835753": [
        {
            "ioc_value": "https://localcloudcss.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835754": [
        {
            "ioc_value": "https://workcdnmass.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835755": [
        {
            "ioc_value": "https://lasthauszver.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835747": [
        {
            "ioc_value": "https://fontawesome-js-ico.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835748": [
        {
            "ioc_value": "https://opserver-styles-svg.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835749": [
        {
            "ioc_value": "https://bacloudserver.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835750": [
        {
            "ioc_value": "https://rpc-cloud.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835751": [
        {
            "ioc_value": "https://hylqpinportal.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835742": [
        {
            "ioc_value": "https://lvlensourgat.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835743": [
        {
            "ioc_value": "https://vblbs.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835744": [
        {
            "ioc_value": "https://image-fonts-awesomeserver.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835745": [
        {
            "ioc_value": "https://fonts25-save.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835746": [
        {
            "ioc_value": "https://istile-c-cloud.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835736": [
        {
            "ioc_value": "https://winecdn.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835737": [
        {
            "ioc_value": "https://cdn-2faclov.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835738": [
        {
            "ioc_value": "https://wldsc-api-cloud.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835739": [
        {
            "ioc_value": "https://lstyle-sdn.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835740": [
        {
            "ioc_value": "https://bigsmart.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835741": [
        {
            "ioc_value": "https://networksolutionson.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835731": [
        {
            "ioc_value": "https://store-image.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835732": [
        {
            "ioc_value": "https://rpc-polygon.beer/api",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:46",
            "last_seen_utc": "2026-06-22 11:41:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835733": [
        {
            "ioc_value": "https://llc-image-ico.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835734": [
        {
            "ioc_value": "https://mrllvd.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835735": [
        {
            "ioc_value": "https://ai-nexora.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835725": [
        {
            "ioc_value": "https://image-hoster11.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835726": [
        {
            "ioc_value": "https://restapiserv.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835727": [
        {
            "ioc_value": "https://nstv-css-styles-19.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835728": [
        {
            "ioc_value": "https://cdn-server.beer",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835729": [
        {
            "ioc_value": "http://bssapi.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835730": [
        {
            "ioc_value": "https://bssapi.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835719": [
        {
            "ioc_value": "https://firazit.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835720": [
        {
            "ioc_value": "https://asefwe.myvnc.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835721": [
        {
            "ioc_value": "https://tag.testhotdomain.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835722": [
        {
            "ioc_value": "https://str-smcontrcats.cfd",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835723": [
        {
            "ioc_value": "https://store-image.shop",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835724": [
        {
            "ioc_value": "https://vaer-cdn-3.sbs",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835713": [
        {
            "ioc_value": "https://updates.tdesktop.com/tsetup/tsetup.6.5.0.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835714": [
        {
            "ioc_value": "https://cdn-server.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835715": [
        {
            "ioc_value": "https://www.faststone.org/DN/FSViewerSetup83.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835716": [
        {
            "ioc_value": "https://softdoska.ru/storage/utorrent/utweb_installer.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835717": [
        {
            "ioc_value": "https://rpc-framework-check.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835718": [
        {
            "ioc_value": "https://cloud-safe.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835707": [
        {
            "ioc_value": "https://captcha-cds.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835708": [
        {
            "ioc_value": "https://2fa-cp.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835709": [
        {
            "ioc_value": "https://sdn-cloudflare-js-css.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835710": [
        {
            "ioc_value": "https://cdn-js-conhost.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835711": [
        {
            "ioc_value": "https://poygon-notifications.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835712": [
        {
            "ioc_value": "https://cdn-server-styles.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835703": [
        {
            "ioc_value": "https://sdn-cloudflare-js-css.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:41",
            "last_seen_utc": "2026-06-22 11:41:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835704": [
        {
            "ioc_value": "https://servupdt.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835705": [
        {
            "ioc_value": "https://img-cdn-cloud.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835706": [
        {
            "ioc_value": "https://nascdn-js.click",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835700": [
        {
            "ioc_value": "https://cdn-clodflare-fotns.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:40",
            "last_seen_utc": "2026-06-22 11:41:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835701": [
        {
            "ioc_value": "https://sdn-cloudflare-js-botstrup.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:40",
            "last_seen_utc": "2026-06-22 11:41:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835702": [
        {
            "ioc_value": "https://sdn-cloudflare-js.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:40",
            "last_seen_utc": "2026-06-22 11:41:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835697": [
        {
            "ioc_value": "https://fonts-fontawesome.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:39",
            "last_seen_utc": "2026-06-22 11:41:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835698": [
        {
            "ioc_value": "https://cloud-safe.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:39",
            "last_seen_utc": "2026-06-22 11:41:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835699": [
        {
            "ioc_value": "https://fontawesome-cdn.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:39",
            "last_seen_utc": "2026-06-22 11:41:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835693": [
        {
            "ioc_value": "https://rpc-framework-check.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:38",
            "last_seen_utc": "2026-06-22 11:41:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835694": [
        {
            "ioc_value": "https://dev-js-cdn.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:38",
            "last_seen_utc": "2026-06-22 11:41:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835695": [
        {
            "ioc_value": "https://img-cdn-cloud.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:38",
            "last_seen_utc": "2026-06-22 11:41:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835696": [
        {
            "ioc_value": "https://cdn-js-conhost.icu/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:38",
            "last_seen_utc": "2026-06-22 11:41:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835689": [
        {
            "ioc_value": "https://styles-get-img.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835690": [
        {
            "ioc_value": "https://2fa-cp.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:37",
            "last_seen_utc": "2026-06-22 11:41:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835691": [
        {
            "ioc_value": "http://89.169.12.173",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835692": [
        {
            "ioc_value": "https://captcha-cds.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:37",
            "last_seen_utc": "2026-06-22 11:41:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835682": [
        {
            "ioc_value": "https://berlof.shop/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835683": [
        {
            "ioc_value": "https://ferlik.shop/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835684": [
        {
            "ioc_value": "http://poygon-notifications.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835685": [
        {
            "ioc_value": "https://poygon-notifications.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": "2026-06-22 11:41:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835686": [
        {
            "ioc_value": "https://cdn-server-styles.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": "2026-06-22 11:41:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835687": [
        {
            "ioc_value": "https://iplogger.com/RNG7Y7",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835688": [
        {
            "ioc_value": "https://fontawesome-framework.sbs/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835675": [
        {
            "ioc_value": "http://93.123.39.246",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835676": [
        {
            "ioc_value": "http://144.31.219.13",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835677": [
        {
            "ioc_value": "http://213.176.72.209",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835678": [
        {
            "ioc_value": "https://bootstrap-css-framework.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835679": [
        {
            "ioc_value": "https://winupdate.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835680": [
        {
            "ioc_value": "https://winupdateconf.cfd/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835681": [
        {
            "ioc_value": "https://nascdn-js.life/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:35",
            "last_seen_utc": "2026-06-22 11:41:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835670": [
        {
            "ioc_value": "https://skr.sh/vYMZ8HWGID6",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835671": [
        {
            "ioc_value": "https://iplogger.co/1jpf05",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835672": [
        {
            "ioc_value": "https://updates.tdesktop.com/tsetup/tsetup.6.3.6.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835673": [
        {
            "ioc_value": "http://151.243.113.15",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835674": [
        {
            "ioc_value": "https://iplogger.com/1X3mH4",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835665": [
        {
            "ioc_value": "https://clpuanmeserver.shop/log.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835666": [
        {
            "ioc_value": "https://clpuanmeserver.shop/rpc.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835667": [
        {
            "ioc_value": "https://download.cpuid.com/cpu-z/cpu-z_2.17-en.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835668": [
        {
            "ioc_value": "https://www.xmedia-recode.de/download/XMediaRecode3619_x64_setup.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835669": [
        {
            "ioc_value": "https://ru.download.nvidia.com/Windows/581.57/581.57-desktop-win10-win11-64bit-international-dch-whql.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835660": [
        {
            "ioc_value": "https://www.win-rar.com/fileadmin/winrar-versions/winrar/winrar-x64-713ru.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835661": [
        {
            "ioc_value": "https://vpn.protondownload.com/download/ProtonVPN_v4.3.4_x64.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835662": [
        {
            "ioc_value": "https://www.slo.ru/storage/hwinfo/hwi64_830.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835663": [
        {
            "ioc_value": "https://www.faststone.org/DN/FSViewerSetup81.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835664": [
        {
            "ioc_value": "https://updates.tdesktop.com/tsetup/tsetup.6.2.2.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835653": [
        {
            "ioc_value": "https://minecraft65server.3utilities.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835654": [
        {
            "ioc_value": "https://testsoryy.hopto.org",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835655": [
        {
            "ioc_value": "https://testhostrouter.onthewifi.com",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835656": [
        {
            "ioc_value": "http://45.149.235.146",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835657": [
        {
            "ioc_value": "https://iplogger.co/1v8Rw5",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835658": [
        {
            "ioc_value": "https://ezstat.ru/1vXRw5",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835659": [
        {
            "ioc_value": "https://2no.co/logo5484.ico",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835649": [
        {
            "ioc_value": "https://clpcentr.world",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835650": [
        {
            "ioc_value": "http://31.172.80.212/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835651": [
        {
            "ioc_value": "https://185.157.212.223",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835652": [
        {
            "ioc_value": "https://pastebin.com/raw/p1GBF379",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835645": [
        {
            "ioc_value": "http://109.107.172.164",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835646": [
        {
            "ioc_value": "http://176.46.158.51/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835647": [
        {
            "ioc_value": "http://193.17.183.103/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835648": [
        {
            "ioc_value": "http://176.46.158.52/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835641": [
        {
            "ioc_value": "http://185.170.153.173",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835642": [
        {
            "ioc_value": "http://91.196.33.38",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835643": [
        {
            "ioc_value": "http://146.103.113.235",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835644": [
        {
            "ioc_value": "http://212.34.130.122:2727/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:28",
            "last_seen_utc": "2026-06-22 11:41:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835638": [
        {
            "ioc_value": "http://185.125.50.26/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835639": [
        {
            "ioc_value": "https://95.164.53.153",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835640": [
        {
            "ioc_value": "http://185.170.153.239",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835636": [
        {
            "ioc_value": "http://77.239.114.102/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835637": [
        {
            "ioc_value": "http://77.105.164.45",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835631": [
        {
            "ioc_value": "https://pastebin.com/raw/ugtPeGd0",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835632": [
        {
            "ioc_value": "https://clpuanmeserver.shop/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835633": [
        {
            "ioc_value": "http://77.238.246.40/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835634": [
        {
            "ioc_value": "http://77.239.114.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835635": [
        {
            "ioc_value": "http://77.239.114.101/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835626": [
        {
            "ioc_value": "http://dev.clpcentr.world/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835627": [
        {
            "ioc_value": "https://clpuserabcserver.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835628": [
        {
            "ioc_value": "https://autapigame2025.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:24",
            "last_seen_utc": "2026-06-22 11:41:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835629": [
        {
            "ioc_value": "https://minecraftserverapigame.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:24",
            "last_seen_utc": "2026-06-22 11:41:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835630": [
        {
            "ioc_value": "https://dev.clpcentr.world/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835624": [
        {
            "ioc_value": "https://esdfg34tg34gfggg34g34g34g.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835625": [
        {
            "ioc_value": "https://clpusserver.xyz/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835620": [
        {
            "ioc_value": "https://examg54g45g54gple2.com/,https://examrdsfg54ertgretgple3.com/,https://avscan.info/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:22",
            "last_seen_utc": "2026-06-22 11:41:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835621": [
        {
            "ioc_value": "https://www.avscan.info/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835622": [
        {
            "ioc_value": "https://examg54g45g54gple2.com/,https://examrdsfg54ertgretgple3.com/,https://www.avscan.info/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835616": [
        {
            "ioc_value": "https://avscan.info/,https://example2.com/,https://example3.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835617": [
        {
            "ioc_value": "https://exam4hgh5656566hple2.com/,https://examg54g54g54gple3.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835618": [
        {
            "ioc_value": "https://exagdfhrthgrthrthmple2.com/,https://ex45y45h45hhample3.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835619": [
        {
            "ioc_value": "https://examdfgdfgdfggdfple2.com/,https://exasdfggegergregmple3.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835612": [
        {
            "ioc_value": "http://blockchainlegion.duckdns",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835613": [
        {
            "ioc_value": "http://blockchainlegion.duckdns.org/api/point.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835614": [
        {
            "ioc_value": "http://avscan.info/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835615": [
        {
            "ioc_value": "https://avscan.info/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:19",
            "last_seen_utc": "2026-06-22 11:41:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835604": [
        {
            "ioc_value": "cdn-yethounds.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835605": [
        {
            "ioc_value": "nslsconscloud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835606": [
        {
            "ioc_value": "nsbdnscloud.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835607": [
        {
            "ioc_value": "mhaskins.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835608": [
        {
            "ioc_value": "biyaconserver.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835609": [
        {
            "ioc_value": "inst-bi.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835610": [
        {
            "ioc_value": "lsikjsns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835611": [
        {
            "ioc_value": "dark-strong.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835594": [
        {
            "ioc_value": "mainrist.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835595": [
        {
            "ioc_value": "api-imager-host.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835596": [
        {
            "ioc_value": "jsframeworkns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835597": [
        {
            "ioc_value": "clnsdns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835598": [
        {
            "ioc_value": "bootstrup-cdn-ns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835599": [
        {
            "ioc_value": "web-safe.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835600": [
        {
            "ioc_value": "web-protection.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": "2026-06-29 13:39:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835601": [
        {
            "ioc_value": "cgfuryclaud.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835602": [
        {
            "ioc_value": "sssndns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835603": [
        {
            "ioc_value": "vnmdnns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835587": [
        {
            "ioc_value": "softdoska.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835588": [
        {
            "ioc_value": "str-smcontrcats.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835589": [
        {
            "ioc_value": "restapiserv.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835590": [
        {
            "ioc_value": "llc-image-ico.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": "2026-06-29 13:39:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835591": [
        {
            "ioc_value": "wldsc-api-cloud.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835592": [
        {
            "ioc_value": "image-fonts-awesomeserver.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835593": [
        {
            "ioc_value": "opserver-styles-svg.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835585": [
        {
            "ioc_value": "blockchainlegion.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835586": [
        {
            "ioc_value": "www.slo.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 11:41:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "dead-drop-c2,polygon-deaddrop,SmartLoader,SmartLoader-MaaS",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835575": [
        {
            "ioc_value": "https://www.sokolmarefy.cz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 10:30:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sokolmarefy.cz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835576": [
        {
            "ioc_value": "https://www.seesingit.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 10:30:58",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.seesingit.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835577": [
        {
            "ioc_value": "https://www.petektemizligifiyatlari.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 10:30:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.petektemizligifiyatlari.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835582": [
        {
            "ioc_value": "https://vitimadetransito.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 10:30:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vitimadetransito.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835583": [
        {
            "ioc_value": "https://thesagevibe.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 10:30:56",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thesagevibe.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835574": [
        {
            "ioc_value": "ujlo7o5o.readthisintro.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 09:52:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835573": [
        {
            "ioc_value": "204.194.54.198:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:46:29",
            "last_seen_utc": "2026-08-09 08:47:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835572": [
        {
            "ioc_value": "ns2.msgkg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:46:01",
            "last_seen_utc": "2026-08-09 08:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835571": [
        {
            "ioc_value": "ns1.msgkg.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:45:59",
            "last_seen_utc": "2026-08-09 08:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835570": [
        {
            "ioc_value": "5.101.86.23:8455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:45:28",
            "last_seen_utc": "2026-07-22 18:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835569": [
        {
            "ioc_value": "46.161.0.48:2428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:45:23",
            "last_seen_utc": "2026-07-22 18:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835568": [
        {
            "ioc_value": "45.81.243.44:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 09:45:21",
            "last_seen_utc": "2026-08-07 18:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835567": [
        {
            "ioc_value": "217.60.195.194:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:44:56",
            "last_seen_utc": "2026-07-22 08:45:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835565": [
        {
            "ioc_value": "205.209.106.158:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 09:44:19",
            "last_seen_utc": "2026-07-22 18:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835566": [
        {
            "ioc_value": "205.209.106.158:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 09:44:19",
            "last_seen_utc": "2026-07-22 18:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835564": [
        {
            "ioc_value": "205.209.106.158:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 09:44:18",
            "last_seen_utc": "2026-07-24 18:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835562": [
        {
            "ioc_value": "192.236.217.70:24047",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:44:05",
            "last_seen_utc": "2026-07-27 18:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835563": [
        {
            "ioc_value": "192.236.217.70:24048",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:44:05",
            "last_seen_utc": "2026-07-27 18:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835561": [
        {
            "ioc_value": "185.212.128.215:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-22 09:43:56",
            "last_seen_utc": "2026-09-01 02:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835560": [
        {
            "ioc_value": "13.140.160.249:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 09:43:16",
            "last_seen_utc": "2026-07-24 18:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835559": [
        {
            "ioc_value": "107.173.9.99:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:43:10",
            "last_seen_utc": "2026-07-25 18:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835557": [
        {
            "ioc_value": "103.11.41.10:7408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:43:04",
            "last_seen_utc": "2026-07-22 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835558": [
        {
            "ioc_value": "103.11.41.19:126",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:43:04",
            "last_seen_utc": "2026-07-22 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835556": [
        {
            "ioc_value": "102.220.160.250:7829",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 09:43:03",
            "last_seen_utc": "2026-09-01 02:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835538": [
        {
            "ioc_value": "61.239.35.235:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:31:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1835540": [
        {
            "ioc_value": "194.58.122.74:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:31:48",
            "last_seen_utc": null,
            "confidence_level": 91,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1835541": [
        {
            "ioc_value": "https://stonecraftfabrication.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stonecraftfabrication.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835542": [
        {
            "ioc_value": "https://thefaithlifeclub.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thefaithlifeclub.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835543": [
        {
            "ioc_value": "https://stichtingunityvibes.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stichtingunityvibes.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835544": [
        {
            "ioc_value": "https://test-flight.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/test-flight.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835545": [
        {
            "ioc_value": "https://sttechnologie.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sttechnologie.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835546": [
        {
            "ioc_value": "https://techco.ec/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/techco.ec",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835547": [
        {
            "ioc_value": "https://shanghaiwangqing.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/shanghaiwangqing.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835548": [
        {
            "ioc_value": "https://sskfhospital.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:40",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sskfhospital.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835549": [
        {
            "ioc_value": "https://window-cleaner.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/window-cleaner.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835550": [
        {
            "ioc_value": "https://silanavi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/silanavi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835551": [
        {
            "ioc_value": "https://www.alma2019-int.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.alma2019-int.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835552": [
        {
            "ioc_value": "https://server-ke436.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/server-ke436.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835553": [
        {
            "ioc_value": "https://thequadtec.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:38",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thequadtec.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835554": [
        {
            "ioc_value": "https://vetenim.site/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vetenim.site",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835555": [
        {
            "ioc_value": "https://www.pentaconsultant.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:31:37",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.pentaconsultant.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835539": [
        {
            "ioc_value": "ruffyayeaye.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 09:13:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1835535": [
        {
            "ioc_value": "5.75.221.125:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 09:10:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835536": [
        {
            "ioc_value": "91.98.109.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 09:10:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835537": [
        {
            "ioc_value": "167.233.132.8:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 09:10:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835532": [
        {
            "ioc_value": "https://5.75.221.125/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 09:09:14",
            "last_seen_utc": "2026-08-20 18:09:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835533": [
        {
            "ioc_value": "https://91.98.109.24/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 09:09:14",
            "last_seen_utc": "2026-08-24 17:34:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835534": [
        {
            "ioc_value": "https://167.233.132.8/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 09:09:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835440": [
        {
            "ioc_value": "https://triplords.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/triplords.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835441": [
        {
            "ioc_value": "https://ubytovani-hlohovec.cz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ubytovani-hlohovec.cz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835442": [
        {
            "ioc_value": "https://seedgoc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:51",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/seedgoc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835443": [
        {
            "ioc_value": "https://warriorsoftorah.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/warriorsoftorah.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835444": [
        {
            "ioc_value": "https://www.andrewyoungkim.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.andrewyoungkim.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835446": [
        {
            "ioc_value": "https://traillecaribbean.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:49",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/traillecaribbean.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835445": [
        {
            "ioc_value": "https://wandaspeaks.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wandaspeaks.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835447": [
        {
            "ioc_value": "https://ushiroyama-koumuten.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ushiroyama-koumuten.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835448": [
        {
            "ioc_value": "https://ur-schlecker.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ur-schlecker.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835449": [
        {
            "ioc_value": "https://veducationservices.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/veducationservices.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835450": [
        {
            "ioc_value": "https://vaerdi.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vaerdi.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835451": [
        {
            "ioc_value": "https://thelightdevelopers.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thelightdevelopers.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835452": [
        {
            "ioc_value": "https://tienda.lapapadulce.cl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tienda.lapapadulce.cl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835453": [
        {
            "ioc_value": "https://thesq.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thesq.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835454": [
        {
            "ioc_value": "https://velazquezdrywall515.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/velazquezdrywall515.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835456": [
        {
            "ioc_value": "188.245.99.156:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-22 09:06:41",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "c2,multi-c2,python-agent",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835457": [
        {
            "ioc_value": "85.209.134.204:8181",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-22 09:06:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "c2,diicot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835458": [
        {
            "ioc_value": "31.76.46.226:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-22 09:06:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835459": [
        {
            "ioc_value": "209.99.185.239:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-22 09:06:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835460": [
        {
            "ioc_value": "112.18.182.202:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-22 09:06:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835461": [
        {
            "ioc_value": "185.211.94.76:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-22 09:06:38",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835463": [
        {
            "ioc_value": "185.214.96.152:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-22 09:06:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "diicot,docker-api,miner",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835464": [
        {
            "ioc_value": "31.177.110.228:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xorddos",
            "malware_alias": "XORDDOS",
            "malware_printable": "XOR DDoS",
            "first_seen_utc": "2026-06-22 09:06:37",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ddos,ssh,xorddos",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835462": [
        {
            "ioc_value": "68.183.234.194:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-22 09:06:36",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835465": [
        {
            "ioc_value": "120.26.7.147:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-22 09:06:35",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835466": [
        {
            "ioc_value": "59.110.217.189:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-22 09:06:35",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835467": [
        {
            "ioc_value": "146.70.184.43:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-22 09:06:34",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1835470": [
        {
            "ioc_value": "45.138.26.93:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:06:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1059_003,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1835488": [
        {
            "ioc_value": "https://www.labormed.biz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.labormed.biz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835489": [
        {
            "ioc_value": "https://www.luppolovers.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.luppolovers.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835490": [
        {
            "ioc_value": "https://www.manuelav.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.manuelav.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835491": [
        {
            "ioc_value": "https://www.gtrecording.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.gtrecording.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835492": [
        {
            "ioc_value": "https://theloanbar.co/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/theloanbar.co",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835493": [
        {
            "ioc_value": "https://www.kotelvceneplynu.cz/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.kotelvceneplynu.cz",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835494": [
        {
            "ioc_value": "https://www.gilles-hossepied.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.gilles-hossepied.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835495": [
        {
            "ioc_value": "https://www.fillerwholesale.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.fillerwholesale.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835496": [
        {
            "ioc_value": "https://www.mediamanova.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.mediamanova.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835497": [
        {
            "ioc_value": "https://www.inside-thebox.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.inside-thebox.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835498": [
        {
            "ioc_value": "https://www.estatelaw.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.estatelaw.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835499": [
        {
            "ioc_value": "https://www.jatka.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.jatka.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835500": [
        {
            "ioc_value": "https://www.egkart.co.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.egkart.co.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835501": [
        {
            "ioc_value": "https://www.eurohub.store/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.eurohub.store",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835502": [
        {
            "ioc_value": "https://www.fithe.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.fithe.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835503": [
        {
            "ioc_value": "https://www.mistersawmill.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.mistersawmill.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835504": [
        {
            "ioc_value": "https://www.erciyesenerji.com.tr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.erciyesenerji.com.tr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835505": [
        {
            "ioc_value": "https://www.angryfox.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.angryfox.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835506": [
        {
            "ioc_value": "https://www.comtecdev.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:23",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.comtecdev.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835507": [
        {
            "ioc_value": "https://www.animaroc.ma/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.animaroc.ma",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835508": [
        {
            "ioc_value": "https://www.dciinteriors.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.dciinteriors.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835509": [
        {
            "ioc_value": "https://www.thetimesbusiness.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:21",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.thetimesbusiness.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835510": [
        {
            "ioc_value": "https://www.phonerep.se/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.phonerep.se",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835511": [
        {
            "ioc_value": "https://www.vlumber.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:20",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.vlumber.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835512": [
        {
            "ioc_value": "https://xlxlux.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:19",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/xlxlux.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835518": [
        {
            "ioc_value": "https://www.penzionzemianskydvor.sk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.penzionzemianskydvor.sk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835519": [
        {
            "ioc_value": "https://www.poeles-granules-manosque.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.poeles-granules-manosque.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835520": [
        {
            "ioc_value": "https://www.mudanzasalcorcon.es/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.mudanzasalcorcon.es",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835521": [
        {
            "ioc_value": "https://www.startupnewsindia.in/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.startupnewsindia.in",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835522": [
        {
            "ioc_value": "https://www.techsaeein.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.techsaeein.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835523": [
        {
            "ioc_value": "https://www.themoore-group.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.themoore-group.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835524": [
        {
            "ioc_value": "https://www.simbioseproxectos.gal/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.simbioseproxectos.gal",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835525": [
        {
            "ioc_value": "https://xn--72cf4ba3a3f6bcbb8a5rsa7c.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/xn--72cf4ba3a3f6bcbb8a5rsa7c.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835526": [
        {
            "ioc_value": "https://www.rzeczoznawcaklama.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.rzeczoznawcaklama.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835527": [
        {
            "ioc_value": "https://www.septondespositives.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:14",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.septondespositives.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835528": [
        {
            "ioc_value": "https://xn--normobariachrzstw-vyb35a.pl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/xn--normobariachrzstw-vyb35a.pl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835529": [
        {
            "ioc_value": "https://www.spclvtflooring.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.spclvtflooring.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835530": [
        {
            "ioc_value": "https://youthfulstudio.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/youthfulstudio.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835531": [
        {
            "ioc_value": "45.138.183.81:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 09:06:11",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1835438": [
        {
            "ioc_value": "bonavol.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835439": [
        {
            "ioc_value": "leakads.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 09:06:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835516": [
        {
            "ioc_value": "animal342.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 08:55:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8ae20a166e6b2ab746c2f97d92967b6df83c85d6cd81acab1a4883638c5dde92/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835517": [
        {
            "ioc_value": "animal342bk.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 08:55:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8ae20a166e6b2ab746c2f97d92967b6df83c85d6cd81acab1a4883638c5dde92/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835514": [
        {
            "ioc_value": "fjaoi5is.megaparibet.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 08:36:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835480": [
        {
            "ioc_value": "65.109.246.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835481": [
        {
            "ioc_value": "91.98.96.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835482": [
        {
            "ioc_value": "91.98.105.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835483": [
        {
            "ioc_value": "91.98.106.140:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835485": [
        {
            "ioc_value": "91.98.99.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835486": [
        {
            "ioc_value": "91.98.100.19:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835487": [
        {
            "ioc_value": "95.217.244.189:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835473": [
        {
            "ioc_value": "https://91.98.96.126/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835474": [
        {
            "ioc_value": "https://91.98.105.63/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835475": [
        {
            "ioc_value": "https://91.98.106.140/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835476": [
        {
            "ioc_value": "https://95.217.244.13/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835477": [
        {
            "ioc_value": "https://91.98.99.76/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835478": [
        {
            "ioc_value": "https://91.98.100.19/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835479": [
        {
            "ioc_value": "https://95.217.244.189/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835472": [
        {
            "ioc_value": "https://65.109.246.92/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 08:29:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835471": [
        {
            "ioc_value": "idverification-code.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 08:24:12",
            "last_seen_utc": "2026-06-23 09:58:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1835469": [
        {
            "ioc_value": "185.38.142.229:8787",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 08:20:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/72e855025d02c02fa90b0ee9296d8a59a6c008dff1b70682b58474a8183836b5/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835468": [
        {
            "ioc_value": "83.142.209.250:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 08:15:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2e4845a187fa3a02cac09ca22d314d3f924c8bf63bf877d23e8645f7bac8cf55/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835427": [
        {
            "ioc_value": "copysofort.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 07:49:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b2315b4ad93131afad8bc924a386a5d50d65877c89078a3c700af044f217e8f7/",
            "tags": "c2,ConnectWise",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835428": [
        {
            "ioc_value": "37.60.253.62:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 07:49:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b2315b4ad93131afad8bc924a386a5d50d65877c89078a3c700af044f217e8f7/",
            "tags": "c2,ConnectWise",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835429": [
        {
            "ioc_value": "https://stephanygill.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 07:49:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/stephanygill.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835430": [
        {
            "ioc_value": "https://suancescup.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 07:49:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/suancescup.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835431": [
        {
            "ioc_value": "https://theglobalskillshub.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 07:49:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/theglobalskillshub.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835436": [
        {
            "ioc_value": "18.140.223.115:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 07:35:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835433": [
        {
            "ioc_value": "3.0.88.138:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-22 07:35:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835399": [
        {
            "ioc_value": "thisisafalsepositive.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 07:21:35",
            "last_seen_utc": "2026-08-11 03:08:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/54a62444672de4d11e9a3ebd67289f1afc4401d7f7631ac02e404c7d0ca257ca/",
            "tags": "c2,SilentNet",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835423": [
        {
            "ioc_value": "api.r0csgo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.4h_rat",
            "malware_alias": null,
            "malware_printable": "4h_rat",
            "first_seen_utc": "2026-06-22 07:21:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bbs.kanxue.com/thread-291612.htm",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835424": [
        {
            "ioc_value": "ac-api-v3.r0csgo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.4h_rat",
            "malware_alias": null,
            "malware_printable": "4h_rat",
            "first_seen_utc": "2026-06-22 07:21:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bbs.kanxue.com/thread-291612.htm",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835425": [
        {
            "ioc_value": "ac-socket.r0csgo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.4h_rat",
            "malware_alias": null,
            "malware_printable": "4h_rat",
            "first_seen_utc": "2026-06-22 07:21:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bbs.kanxue.com/thread-291612.htm",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835426": [
        {
            "ioc_value": "local-api-direct.r0csgo.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.4h_rat",
            "malware_alias": null,
            "malware_printable": "4h_rat",
            "first_seen_utc": "2026-06-22 07:21:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bbs.kanxue.com/thread-291612.htm",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835419": [
        {
            "ioc_value": "178.104.255.247:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835420": [
        {
            "ioc_value": "159.69.221.162:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835421": [
        {
            "ioc_value": "178.104.113.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835422": [
        {
            "ioc_value": "167.233.112.191:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835417": [
        {
            "ioc_value": "167.233.131.186:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835418": [
        {
            "ioc_value": "91.99.3.169:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835415": [
        {
            "ioc_value": "46.224.16.213:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835416": [
        {
            "ioc_value": "46.62.226.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:17:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835413": [
        {
            "ioc_value": "cht.hitamsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:38",
            "last_seen_utc": "2026-06-22 09:25:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835414": [
        {
            "ioc_value": "cht.utvrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:38",
            "last_seen_utc": "2026-06-22 09:25:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835408": [
        {
            "ioc_value": "https://91.99.3.169/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835409": [
        {
            "ioc_value": "https://178.104.255.247/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:18",
            "last_seen_utc": "2026-08-20 18:09:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835410": [
        {
            "ioc_value": "https://159.69.221.162/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835411": [
        {
            "ioc_value": "https://178.104.113.24/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:18",
            "last_seen_utc": "2026-08-14 07:47:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835412": [
        {
            "ioc_value": "https://167.233.112.191/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835401": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198684471717",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": "2026-08-24 13:04:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835402": [
        {
            "ioc_value": "https://telegram.me/t0mdr",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": "2026-08-24 13:48:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835403": [
        {
            "ioc_value": "https://cht.hitamsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": "2026-06-22 09:25:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835404": [
        {
            "ioc_value": "https://cht.utvrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": "2026-06-22 09:25:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835405": [
        {
            "ioc_value": "https://46.224.16.213/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835406": [
        {
            "ioc_value": "https://46.62.226.239/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835407": [
        {
            "ioc_value": "https://167.233.131.186/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 07:16:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1835400": [
        {
            "ioc_value": "216.250.250.247:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-22 07:05:53",
            "last_seen_utc": "2026-08-15 18:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8c63a57313ad2479a758ca018134377043acbeade2b457f7f3392364b78a4a32/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835398": [
        {
            "ioc_value": "196.251.121.90:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:15",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835392": [
        {
            "ioc_value": "196.251.121.90:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:14",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835393": [
        {
            "ioc_value": "217.60.241.17:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:14",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835394": [
        {
            "ioc_value": "51.195.111.212:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:14",
            "last_seen_utc": "2026-07-13 17:07:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835395": [
        {
            "ioc_value": "217.60.241.14:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:14",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835396": [
        {
            "ioc_value": "196.251.121.90:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:14",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835397": [
        {
            "ioc_value": "196.251.121.90:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:14",
            "last_seen_utc": "2026-07-21 05:35:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835387": [
        {
            "ioc_value": "196.251.121.90:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:13",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835388": [
        {
            "ioc_value": "196.251.121.90:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:13",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835389": [
        {
            "ioc_value": "196.251.121.90:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:13",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835390": [
        {
            "ioc_value": "196.251.121.90:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:13",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835391": [
        {
            "ioc_value": "217.60.241.39:422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:13",
            "last_seen_utc": "2026-07-02 11:59:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835385": [
        {
            "ioc_value": "217.60.241.14:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:12",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835386": [
        {
            "ioc_value": "51.195.111.212:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835382": [
        {
            "ioc_value": "217.60.241.39:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:10",
            "last_seen_utc": "2026-06-25 05:28:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835383": [
        {
            "ioc_value": "51.195.111.212:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:10",
            "last_seen_utc": "2026-07-21 05:35:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835384": [
        {
            "ioc_value": "217.60.241.14:421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-22 07:00:10",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835376": [
        {
            "ioc_value": "https://itecau.com.au/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 06:46:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/itecau.com.au",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1835381": [
        {
            "ioc_value": "45.144.137.148:801",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 06:39:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835380": [
        {
            "ioc_value": "67.216.197.83:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 06:39:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835379": [
        {
            "ioc_value": "74.48.84.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 06:39:32",
            "last_seen_utc": "2026-07-26 08:47:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835378": [
        {
            "ioc_value": "121.4.76.54:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 06:39:31",
            "last_seen_utc": "2026-06-26 08:23:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835375": [
        {
            "ioc_value": "https://192.177.26.222",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-22 06:25:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2736f5de45c8f90998998de0ce2db18fd182df2532350c2c7a162985e2703415/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835343": [
        {
            "ioc_value": "61.238.202.155:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 06:22:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1059_003",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1835346": [
        {
            "ioc_value": "3.132.75.97:55510",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.vo1d",
            "malware_alias": null,
            "malware_printable": "vo1d",
            "first_seen_utc": "2026-06-22 06:22:32",
            "last_seen_utc": "2026-07-09 00:11:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "redirector,Vo1d",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1835370": [
        {
            "ioc_value": "http://85.120.255.35/ssh.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-22 06:22:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1835373": [
        {
            "ioc_value": "194.58.113.92:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 06:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1834948": [
        {
            "ioc_value": "cdn.privatefile.host",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-22 06:22:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/host/cdn.privatefile.host/",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834949": [
        {
            "ioc_value": "77.90.41.3:42457",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-22 06:22:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/host/77.90.41.3/",
            "tags": "RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1835374": [
        {
            "ioc_value": "104.161.46.91:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 06:01:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/166e0b889d42908d544d47be2a2131793b150ea2f3f93ddd7e58669fd99586f8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835372": [
        {
            "ioc_value": "nwkvg7b4.qurankarim.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 05:03:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835369": [
        {
            "ioc_value": "73mabfum.303bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 04:37:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835367": [
        {
            "ioc_value": "27hrchzs.megaparibet.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 04:35:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835365": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41/4240-98d7-bc2c@main/fe3b",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 04:27:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1835364": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41/r4240-98d7-bc2c@main/fe3b",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 04:24:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1835362": [
        {
            "ioc_value": "119.45.166.6:9876",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-22 03:45:53",
            "last_seen_utc": "2026-07-22 08:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835361": [
        {
            "ioc_value": "qt0z6jqj.megaparibet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 03:40:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835350": [
        {
            "ioc_value": "23.95.103.219:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-22 02:11:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3898a662f25925b6b46700297832940cfc026f5e59815fe670328a0213094a3b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835345": [
        {
            "ioc_value": "qraju7pt.betmegapari.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 00:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835344": [
        {
            "ioc_value": "betmegapari.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-22 00:33:06",
            "last_seen_utc": "2026-06-22 00:33:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1835341": [
        {
            "ioc_value": "uqz8xcw9.gamebc.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 23:56:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1835339": [
        {
            "ioc_value": "115.190.149.214:58848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-21 23:45:40",
            "last_seen_utc": "2026-08-28 08:08:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1835335": [
        {
            "ioc_value": "yodonoplasma.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:33",
            "last_seen_utc": "2026-08-14 10:01:25",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835287": [
        {
            "ioc_value": "www.animaroc.ma",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:31",
            "last_seen_utc": "2026-08-18 07:14:42",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835289": [
        {
            "ioc_value": "www.comtecdev.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:31",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835296": [
        {
            "ioc_value": "www.fillerwholesale.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:31",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835297": [
        {
            "ioc_value": "www.fithe.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:31",
            "last_seen_utc": "2026-08-15 14:19:36",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835298": [
        {
            "ioc_value": "www.gilles-hossepied.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:31",
            "last_seen_utc": "2026-08-28 11:44:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835300": [
        {
            "ioc_value": "www.hlsre.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:31",
            "last_seen_utc": "2026-08-28 11:44:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835261": [
        {
            "ioc_value": "thelightdevelopers.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:30",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835239": [
        {
            "ioc_value": "seminariodeintegracao.ucam-campos.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:29",
            "last_seen_utc": "2026-08-19 06:47:40",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835248": [
        {
            "ioc_value": "sskfhospital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:29",
            "last_seen_utc": "2026-08-14 21:10:11",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835165": [
        {
            "ioc_value": "lrevenements.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:26",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835116": [
        {
            "ioc_value": "gettemps.ca",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:24",
            "last_seen_utc": "2026-08-28 11:42:51",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835121": [
        {
            "ioc_value": "growingthenationstherapyprogrammes.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:24",
            "last_seen_utc": "2026-08-14 08:57:31",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835122": [
        {
            "ioc_value": "hamzasarfaraz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:24",
            "last_seen_utc": "2026-08-26 21:54:38",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835123": [
        {
            "ioc_value": "hankinhoto.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:24",
            "last_seen_utc": "2026-08-28 11:42:52",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835104": [
        {
            "ioc_value": "factumindia.law",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:23",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835109": [
        {
            "ioc_value": "forexsisters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:23",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835051": [
        {
            "ioc_value": "canaanland.africa",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:21",
            "last_seen_utc": "2026-08-16 01:15:18",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835057": [
        {
            "ioc_value": "clientsbooster.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:21",
            "last_seen_utc": "2026-08-19 06:45:12",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835021": [
        {
            "ioc_value": "b2ccom.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:20",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1835009": [
        {
            "ioc_value": "amcf.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-21 22:58:19",
            "last_seen_utc": "2026-08-23 17:25:28",
            "confidence_level": 75,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,etherhiding,Polygon,Remus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834981": [
        {
            "ioc_value": "freesoftupdater.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834982": [
        {
            "ioc_value": "invokeupdate.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834983": [
        {
            "ioc_value": "mothechurh.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834984": [
        {
            "ioc_value": "ocean-animals.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834985": [
        {
            "ioc_value": "park-lake.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834986": [
        {
            "ioc_value": "updatecurrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834987": [
        {
            "ioc_value": "updatemsnow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834988": [
        {
            "ioc_value": "updateocean.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834989": [
        {
            "ioc_value": "updateyourprogram.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834990": [
        {
            "ioc_value": "updateyoursoft.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834991": [
        {
            "ioc_value": "uptodatehere.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:18",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834976": [
        {
            "ioc_value": "animal-zoo-lake.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:17",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834977": [
        {
            "ioc_value": "autoupdaters.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:17",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834978": [
        {
            "ioc_value": "autoupdatet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:17",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834979": [
        {
            "ioc_value": "autoupdatethis.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:17",
            "last_seen_utc": "2026-06-30 22:00:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834980": [
        {
            "ioc_value": "exactupdate.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 22:35:17",
            "last_seen_utc": "2026-06-30 22:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834974": [
        {
            "ioc_value": "http://193.148.57.16/1109860002d645548e1b.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-21 21:55:41",
            "last_seen_utc": "2026-06-24 18:40:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fdfaed3893bb2cf3ebd547c889e17c1e2f0b90208ecccc8591164bec41cfdb85/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834973": [
        {
            "ioc_value": "102.220.160.155:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 21:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a31bbac723d61178ae45f02937f67b694256220327989155044f9cd97763fca6/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834971": [
        {
            "ioc_value": "n8n69sm2.bcgameiran.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 20:33:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834970": [
        {
            "ioc_value": "bcgameiran.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 20:32:10",
            "last_seen_utc": "2026-06-21 20:32:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834969": [
        {
            "ioc_value": "jb9ff818.azmoondadrasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 20:23:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834967": [
        {
            "ioc_value": "52.128.224.237:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-21 20:00:20",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834964": [
        {
            "ioc_value": "5.101.86.67:5691",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 19:45:25",
            "last_seen_utc": "2026-07-22 08:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834962": [
        {
            "ioc_value": "45.154.98.254:2004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 19:45:13",
            "last_seen_utc": "2026-07-22 08:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834963": [
        {
            "ioc_value": "45.154.98.254:2006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 19:45:13",
            "last_seen_utc": "2026-07-22 08:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834960": [
        {
            "ioc_value": "217.60.195.194:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 19:44:53",
            "last_seen_utc": "2026-07-30 08:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834961": [
        {
            "ioc_value": "217.60.195.194:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 19:44:53",
            "last_seen_utc": "2026-07-31 18:45:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834959": [
        {
            "ioc_value": "198.23.185.136:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 19:44:09",
            "last_seen_utc": "2026-07-22 08:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834958": [
        {
            "ioc_value": "194.116.236.239:4020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 19:44:05",
            "last_seen_utc": "2026-07-24 07:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834957": [
        {
            "ioc_value": "185.115.164.60:13766",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 19:43:51",
            "last_seen_utc": "2026-07-22 08:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834956": [
        {
            "ioc_value": "156.247.51.40:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-21 19:43:28",
            "last_seen_utc": "2026-08-06 08:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834955": [
        {
            "ioc_value": "147.93.191.75:90",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 19:43:23",
            "last_seen_utc": "2026-07-26 08:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834954": [
        {
            "ioc_value": "137.220.154.16:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-21 19:43:17",
            "last_seen_utc": "2026-07-25 08:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834953": [
        {
            "ioc_value": "103.110.80.154:7444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 19:43:05",
            "last_seen_utc": "2026-08-05 18:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Covenant,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834952": [
        {
            "ioc_value": "103.11.41.19:9233",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 19:43:04",
            "last_seen_utc": "2026-07-22 08:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834950": [
        {
            "ioc_value": "njzlopghznkamkl.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-21 19:04:04",
            "last_seen_utc": "2026-08-22 17:37:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834947": [
        {
            "ioc_value": "ut7worjq.1x303.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 18:36:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834787": [
        {
            "ioc_value": "autapigame2025.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:37",
            "last_seen_utc": "2026-06-22 11:41:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834788": [
        {
            "ioc_value": "birdybird.rest",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:36",
            "last_seen_utc": "2026-06-29 13:26:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834789": [
        {
            "ioc_value": "codecerification.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:36",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834790": [
        {
            "ioc_value": "holopebamiy.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:36",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834791": [
        {
            "ioc_value": "honeymoonshop.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:35",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834792": [
        {
            "ioc_value": "idverification-code.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:35",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834793": [
        {
            "ioc_value": "mamamiadomio.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:35",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834794": [
        {
            "ioc_value": "mampodik.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:34",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834796": [
        {
            "ioc_value": "svs-verificationdate.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:34",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834795": [
        {
            "ioc_value": "smenapodik.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 18:27:33",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClickFix,Vidar",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834913": [
        {
            "ioc_value": "176.65.144.30:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:31",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clickfix,evalusion,jarm:1276612955,merry-florist,netsupport,port:1337,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834914": [
        {
            "ioc_value": "momsdodigital.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:30",
            "last_seen_utc": "2026-08-30 00:06:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "central-hub,clickfix,clickfix-hub,evalusion,merry-florist,netsupport,unc2190,wordpress-compromise",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834916": [
        {
            "ioc_value": "daskljtitaskastvv.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:30",
            "last_seen_utc": "2026-08-30 00:06:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "clickfix,evalusion,fake-captcha,merry-florist,netsupport,unc2190,wordpress-injection",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834915": [
        {
            "ioc_value": "deoint.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:29",
            "last_seen_utc": "2026-08-30 00:06:14",
            "confidence_level": 90,
            "is_compromised": false,
            "reference": null,
            "tags": "clickfix,evalusion,fake-captcha,merry-florist,netsupport,unc2190,wordpress-injection",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834917": [
        {
            "ioc_value": "lobsterrakkos.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:28",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834918": [
        {
            "ioc_value": "kiskapeskaloska.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:28",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834919": [
        {
            "ioc_value": "lopapopamiskasupa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:28",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834920": [
        {
            "ioc_value": "kasmokitomaccito.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:26",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834921": [
        {
            "ioc_value": "posostamioalkfjka.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:26",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834922": [
        {
            "ioc_value": "ostamioalkfjka.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:25",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834923": [
        {
            "ioc_value": "opfiksotpffff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:25",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834924": [
        {
            "ioc_value": "oficekoslosld.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:24",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834925": [
        {
            "ioc_value": "tomaskoslimsok.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:24",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834926": [
        {
            "ioc_value": "msiulosjudiid.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:22",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834927": [
        {
            "ioc_value": "mxjxifkfkkffjjf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:21",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834928": [
        {
            "ioc_value": "fopsadfposkdf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:21",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834929": [
        {
            "ioc_value": "hdudidjdjdndjdjd.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:20",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834930": [
        {
            "ioc_value": "skadfjsdijfhsfso9to.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:19",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834931": [
        {
            "ioc_value": "asmfmfmfmf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:19",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834932": [
        {
            "ioc_value": "daisiiafsfk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:19",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834933": [
        {
            "ioc_value": "dkilkamajsiot.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:18",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834934": [
        {
            "ioc_value": "lopstmisot.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:18",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834935": [
        {
            "ioc_value": "fastoqoakkas.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:18",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834936": [
        {
            "ioc_value": "asqmvmastt.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:17",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834937": [
        {
            "ioc_value": "aosotaka.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:17",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834938": [
        {
            "ioc_value": "foasfjkasf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-21 18:27:17",
            "last_seen_utc": "2026-08-30 00:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2-rotation,clickfix,evalusion,merry-florist,netsupport,single-gateway,unc2190",
            "anonymous": 0,
            "reporter": "Justice_Hammer"
        }
    ],
    "1834940": [
        {
            "ioc_value": "datafluxworker.system-telemetry.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 18:27:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e22d7710e36dce587c71a661cb57843ef711f0320ac570ed0b9dea85c891761b/",
            "tags": "c2,SilentStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834941": [
        {
            "ioc_value": "machinelearningaimod.onrender.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 18:27:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e22d7710e36dce587c71a661cb57843ef711f0320ac570ed0b9dea85c891761b/",
            "tags": "c2,SilentStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834944": [
        {
            "ioc_value": "aiBot.casacam.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-21 18:25:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/95a6eeb9407cfae94a99df9ca32c3b1858a5d6ff944eff33ad2228a1915c808b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834943": [
        {
            "ioc_value": "gdxai3cp.shart.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 17:56:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834912": [
        {
            "ioc_value": "phitqv0l.ravabetensani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 17:06:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834908": [
        {
            "ioc_value": "2b9747c1655337738c7fd6ebfbb066e8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 16:40:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834909": [
        {
            "ioc_value": "ecf36149156698c531615c8d553d6588dc48b2befe47ca1a7339f194daebfe08",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 16:40:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834910": [
        {
            "ioc_value": "8d693cd4723944b4a8b02da6d466c194fb3461cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 16:40:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834911": [
        {
            "ioc_value": "da8477a03bf4c8f4926c2cfe25e52afb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 16:40:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834906": [
        {
            "ioc_value": "7fe76ccceaec33d07e90e96ac144be83ed622c8af8b134d7429020e476cf4716",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 16:40:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834907": [
        {
            "ioc_value": "53fe3ff374836f5d32314aae77d588f252116e19",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 16:40:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834905": [
        {
            "ioc_value": "6a31b6cc74d3377af554b9176ee6ad15",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:40:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834903": [
        {
            "ioc_value": "ff7ef7b89256ee681d76c7369f4619003e0e77f5e32fa0e18a09ae45a8e98843",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:40:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834904": [
        {
            "ioc_value": "a56295554ddb80b424b2a48c7ea33dc7f78110c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:40:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834902": [
        {
            "ioc_value": "1c95b93ed0c018ade4980f117b031f23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 16:40:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834898": [
        {
            "ioc_value": "11d163bb0e2468fbb5cc4b2cc3aee3cb214bca76",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-21 16:40:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834899": [
        {
            "ioc_value": "2f13ce2e5e573efd9363188cef289860",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-21 16:40:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834900": [
        {
            "ioc_value": "a1bebf922ec25ea218d165605716c37a5536b2b046fef5462b057594297db2ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 16:40:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834901": [
        {
            "ioc_value": "c39fce373d82d1ffda14ae3025e8e5f6fcda4595",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 16:40:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834894": [
        {
            "ioc_value": "1ce931d621b70d14bdc90b5dcb8dc8cfce60e027f60eb2ff895c60efeb8ffbe7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-21 16:40:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834895": [
        {
            "ioc_value": "4c219a04109734d4a50f591c720fa15c2e951912",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-21 16:40:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834896": [
        {
            "ioc_value": "1dea9bcf5ed297e9803b91e6b75fd3f3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-21 16:40:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834897": [
        {
            "ioc_value": "ce00a84a546cf51d9428350aa1929c8999a4c48de5d7e53372f4faca22cbaf2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-21 16:40:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834891": [
        {
            "ioc_value": "526ae427fececcdfb7d231d95a3a4f3ffa83c130ed5d58192daad06510f4ee69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834892": [
        {
            "ioc_value": "d9e22066987e02a6bd6e50fe3882109a1ad2567e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834893": [
        {
            "ioc_value": "d45dad3c505e89ac54acb6dbc86ec41e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834887": [
        {
            "ioc_value": "d0541c8b7fd74b0f5dfeae5efa574216",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-21 16:40:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834888": [
        {
            "ioc_value": "0e6902640affe9ac58c39d52046a073741b8e77a6ad29137bdeb6f8cf8222964",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834889": [
        {
            "ioc_value": "55168d5f90679d56f58e5f581a064cd0045012fd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834890": [
        {
            "ioc_value": "71682679387d5f8e8d1540e77b1b8d61",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834884": [
        {
            "ioc_value": "062a5e59925595038bb7522dc3d16250",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834885": [
        {
            "ioc_value": "c06c3002302f47202884762c57982d86718ba4500699e9ef37d5cd513c6e8bf8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-21 16:40:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834886": [
        {
            "ioc_value": "006e2982a742a5085e87985e22dcff59fa5d9647",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-21 16:40:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834881": [
        {
            "ioc_value": "1b37fb289ad1e3da62510caf740de1ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 16:40:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834882": [
        {
            "ioc_value": "a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834883": [
        {
            "ioc_value": "4e710f19855891ed350ed2e96c009393dfb331d7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:17",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834877": [
        {
            "ioc_value": "26bd4d81a16ea2726cc7c645fd00a6427e3202d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834878": [
        {
            "ioc_value": "2ed805decde82a5dba7cb9210d0b76ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834879": [
        {
            "ioc_value": "c9eadf5f3be0996c41ad4c42f7bf530b74d8682ac630cea018dd0edefa07d4ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 16:40:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834880": [
        {
            "ioc_value": "0468dca0ebefd05537dfa9a770b7c9e332aa4093",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 16:40:16",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834874": [
        {
            "ioc_value": "d6c5f173cea005c5081c4f189477c1ade350cec3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834875": [
        {
            "ioc_value": "7408473f668d0e3563d8755b17fdf638",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834876": [
        {
            "ioc_value": "52764c8c74bc2ec19138f7bbaaeb30fc24f5384709409e756f3edb03848c67bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834871": [
        {
            "ioc_value": "11fbd76ea1316ecc5aaf7face831b33ed0e0abd6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834872": [
        {
            "ioc_value": "60e777e3511e77ed3504aa4743edd945",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834873": [
        {
            "ioc_value": "40345a358400cb771088c33a9cf194946da95c2bb2d979e7be5e1c8c37facf33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834868": [
        {
            "ioc_value": "2d8cd9d19e931872f9a9999db7e61c59f39808b1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834869": [
        {
            "ioc_value": "b9970201d525bfc80d9c3b1f011e4178",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834870": [
        {
            "ioc_value": "5122b2cc1fc99c60330b863c94e09e82553eff28cbfba8496f30bea88465b77d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834865": [
        {
            "ioc_value": "2acb65032e6581214fd927404d761dda32e0fd62",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834866": [
        {
            "ioc_value": "1479d53b5b86ad090d66775f14fb03fc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834867": [
        {
            "ioc_value": "eb2cca230b99d059355c3d4d2c35e9585aedd030c7477535b86bbc950d7ea2a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834862": [
        {
            "ioc_value": "e73867c158e8a2bf1c1201f397c24675d8a269c6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.cryptomix",
            "malware_alias": "Azer,CryptFile2",
            "malware_printable": "CryptoMix",
            "first_seen_utc": "2026-06-21 16:40:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834863": [
        {
            "ioc_value": "82d94a9e1a29ce0803fc5bd0b228a94f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.cryptomix",
            "malware_alias": "Azer,CryptFile2",
            "malware_printable": "CryptoMix",
            "first_seen_utc": "2026-06-21 16:40:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834864": [
        {
            "ioc_value": "a9303e3948a212476179499bf5e7aaf5df89fc490bf28c8ec15005bf8b023ee5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-21 16:40:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834858": [
        {
            "ioc_value": "ff771fcecd52f9051afca243d97c785b4bec00bb87ef2392ed6a74c91c443fa7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834859": [
        {
            "ioc_value": "e5b5c76a2180c85d7d432b358c07bc457e27dd9c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834860": [
        {
            "ioc_value": "cc78cd65c4c0beba0d3d6db9f70401a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834861": [
        {
            "ioc_value": "ff79eaaff344de14717cf301e0501b62407bc7a4836ade5b4c2c92b9ea2cc32d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cryptomix",
            "malware_alias": "Azer,CryptFile2",
            "malware_printable": "CryptoMix",
            "first_seen_utc": "2026-06-21 16:40:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834855": [
        {
            "ioc_value": "41c710a185e6a5e81c76f71d078c377bc3852381d712cbb1d409e9ab8647569e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-21 16:40:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834856": [
        {
            "ioc_value": "69f92c76ec8c824a34d7b5c426ee41e47435e9ae",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-21 16:40:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834857": [
        {
            "ioc_value": "b6f366e487fbf740c0479a8c286d7cd8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-21 16:40:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834852": [
        {
            "ioc_value": "cb28fdfae1fd9f5e60bb24d077a3fc414f3b44415508d92fca77555ae00b0703",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834853": [
        {
            "ioc_value": "e790a7d570b8fe30bfe73cfe047b991782d4eee5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834854": [
        {
            "ioc_value": "25b176b099b70e96e0a5ff93e456f7e0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834849": [
        {
            "ioc_value": "fb7565d2611a76bd796aa438e907da5b8b59b5acc754b6031f56998468445be1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834850": [
        {
            "ioc_value": "0ec9c0d2c4645776d630be30d41f60ea872dbd6a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834851": [
        {
            "ioc_value": "dbd4b9870f55d57cb57938df3834984d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-21 16:40:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834847": [
        {
            "ioc_value": "2819c4d821ee9a49acf12428842d986b072af44e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834848": [
        {
            "ioc_value": "9c8e686647ebc9296299ff7debaea57f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834844": [
        {
            "ioc_value": "ca6415ffa1168b09b817994623d14368739c812c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834845": [
        {
            "ioc_value": "564697f11bde8139c60f92cee6389b8e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834846": [
        {
            "ioc_value": "d3746f04ba8114641b6faeb20106bbbf61633652f14d8871cb1f1ed10f5c0765",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834841": [
        {
            "ioc_value": "796bb8aa995056739a6201720f3266da815e92bf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-21 16:40:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834842": [
        {
            "ioc_value": "5c1469dfe6aed70e8bc529c68216b9ad",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-21 16:40:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834843": [
        {
            "ioc_value": "38710fa6b5218e34f90935ea70f138136123aaabbcdab215d7337b2994c8d222",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:40:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834839": [
        {
            "ioc_value": "fe6daf3d6816030d2288947b6c0aa5ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-21 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834840": [
        {
            "ioc_value": "96ada74774413c01c0e7d4707d9837bb30dba9132cc3519178e890596f2b5dbd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-21 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834838": [
        {
            "ioc_value": "fafb5d550f47c6b808736cda42762d86c8f9a78c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-21 16:40:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834837": [
        {
            "ioc_value": "063697f8cbaedc2a31af56896c9c2f2ef23c1bc5f8d839aa2c304daf8f809926",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-21 16:40:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834833": [
        {
            "ioc_value": "5a4dcdc6cbe2bb676b37f9a24bd593a3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-21 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834834": [
        {
            "ioc_value": "2a97e8ffb5cfbbccd8e2c812fb6f86769ec014692f9bd598ad446c096630d577",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834835": [
        {
            "ioc_value": "5019d6cfd60cb67191f009f781f772a074b1ce89",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834836": [
        {
            "ioc_value": "5377b90a65cef26fcfd075a0ee2b9822",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834829": [
        {
            "ioc_value": "39367cdbe465ccb091c30a9142d624a343f632ac",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-21 16:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834830": [
        {
            "ioc_value": "e2f8bcbe8815b33869f87f1e99ab6f70",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-21 16:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834831": [
        {
            "ioc_value": "43ee2409e135916fab34e910035ff437eb1eaa670000c4f0948ba33f11a7083b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-21 16:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834832": [
        {
            "ioc_value": "d4d165ba51a52baff5e187f62e5d970f378ec119",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-21 16:39:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834825": [
        {
            "ioc_value": "ea5bf6fd34986ea7ce7e9f9207742a2dad04700f23e25d2e3a861315503f8a2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-21 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834826": [
        {
            "ioc_value": "5b5c1b64b8d00704dabbdf7d453029b00fe61072",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-21 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834827": [
        {
            "ioc_value": "52141a7468dbfbc858f72d2ce947d6b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-21 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834828": [
        {
            "ioc_value": "2dcdb89527b240984a85645a4a41e4fed7ed33891fd91da07e1f8b62180f2c33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-21 16:39:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834822": [
        {
            "ioc_value": "894d32df224ee6fad68f8fa19e50042819e7834edfc985be3369783d63ce95b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834823": [
        {
            "ioc_value": "c9bc0dfa7686958f7c1bb01438b7240984766f6b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834824": [
        {
            "ioc_value": "79a2c458c2f540fb85e4fd98f9183564",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834819": [
        {
            "ioc_value": "077bfdd22b49adeeb86e80050de6bbf2ca9616279c426e21847f476761cba27d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834820": [
        {
            "ioc_value": "d7313f4cbbc1ea4dca4954f58052fd671c0e3dfa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834821": [
        {
            "ioc_value": "30cb9db600cbd4a03defb987066e3956",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834815": [
        {
            "ioc_value": "35425edb78f2b9cb8836385bd442fa56",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834816": [
        {
            "ioc_value": "9d7ecd3a4aeefa449a7313e98a6afab0ea28eb1f693380f2ef5a4c9fe612c5dd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834817": [
        {
            "ioc_value": "2a467b379b48b0d1a1a4616ae50763b20bd730be",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834818": [
        {
            "ioc_value": "f3d3fa71555ade263f753a6d543b81ab",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834812": [
        {
            "ioc_value": "34651af99f5f8d4334fe37e2c7989e06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.hades",
            "malware_alias": null,
            "malware_printable": "Hades",
            "first_seen_utc": "2026-06-21 16:39:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834813": [
        {
            "ioc_value": "abe7da6b5be41348ce74be00a5158c0fe7dc138051a84f41b1ebc5f9c49b35d6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834814": [
        {
            "ioc_value": "2f1d17e5ca6891af0f8a11491cfc9881ddfdcf0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-21 16:39:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834809": [
        {
            "ioc_value": "5e2398c39af420f21172d898548c7570",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:39:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834810": [
        {
            "ioc_value": "5b5434cc8bb3556075c6967d2ffee5a6b33793de07b9d4701bc63d369de63861",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.hades",
            "malware_alias": null,
            "malware_printable": "Hades",
            "first_seen_utc": "2026-06-21 16:39:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834811": [
        {
            "ioc_value": "7c0f669cd06e5ba8fdcdba107b9519fe73519368",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.hades",
            "malware_alias": null,
            "malware_printable": "Hades",
            "first_seen_utc": "2026-06-21 16:39:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834805": [
        {
            "ioc_value": "cb599fcb6ada4fc6143e9eccfdeaee1e5911a972",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-21 16:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834806": [
        {
            "ioc_value": "252fe77945fba9b1426dd4ec923dd8eb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-21 16:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834807": [
        {
            "ioc_value": "e5ca4586785728938cb9de0e964a35bd36dfa534bd7bf47f2438af4a4c2103c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834808": [
        {
            "ioc_value": "11f5c65ef619abba958fe56d33006250f5e6c0e0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-21 16:39:52",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834802": [
        {
            "ioc_value": "5f8e51e3cbc4530d86c2ee6cf77ccaf77e7189a2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 16:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834803": [
        {
            "ioc_value": "1e3c5aa594c8beaefb73e35b563379d7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 16:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834804": [
        {
            "ioc_value": "0b3581ab2acd2099ec8d7de4f77608a0e9a1b7b4810009c7eb1cc4007d30d487",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-21 16:39:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834799": [
        {
            "ioc_value": "e68d17c94b4d37b1a9639bbebc542dafec3f9db3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-21 16:39:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834800": [
        {
            "ioc_value": "ce8dbd9fce3e739bfed8a23a96a92fe0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-21 16:39:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834801": [
        {
            "ioc_value": "6aa08b6fdb70023bdd14805657a5d4e36b5733b8b4c372c95ce2ec17668a0f11",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 16:39:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834798": [
        {
            "ioc_value": "2011c98d44911abf78217ecc29dadb6c1dcb28506ac4970a1937eee54ccc31af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-21 16:39:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834781": [
        {
            "ioc_value": "zyppn5vo.riyazishahkilid.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 13:07:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834774": [
        {
            "ioc_value": "86.54.25.202:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-21 13:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://chainabuse.com/report/50a2071b-4c3e-488b-bebb-4c260a9c9b11",
            "tags": "AMOS,AtomicStealer,ClickFix,Cthulhu,macOS,xxxblyat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834775": [
        {
            "ioc_value": "macos.certificates.ltd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-21 13:05:18",
            "last_seen_utc": "2026-06-21 10:50:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834776": [
        {
            "ioc_value": "https://macos.certificates.ltd/apple/macos/installation/terminal/launcher",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-21 13:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "AMOS,AtomicStealer,ClickFix,Cthulhu,macOS,stealer",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834778": [
        {
            "ioc_value": "74.208.92.197:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.overlord",
            "malware_alias": null,
            "malware_printable": "Overlord RAT",
            "first_seen_utc": "2026-06-21 13:05:15",
            "last_seen_utc": "2026-08-24 13:22:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9c5f121e984d76e479ca119499d35efe9402925a2c29b195bff88542c47b0c05/",
            "tags": "c2,OverlordRAT",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834780": [
        {
            "ioc_value": "6w8npdwb.angizeshfarahani.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 13:03:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834779": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41/d846-4abc/id-7843",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 12:25:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834777": [
        {
            "ioc_value": "6xelt3vl.shartplus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 11:56:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834773": [
        {
            "ioc_value": "mail-cross3.acilkredi.ch",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-21 10:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834772": [
        {
            "ioc_value": "oyine.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 09:45:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2b48b4d74ec2b1cfbd9e732c2b4d1c58c82882007ab5624c74b15657feb9641d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834771": [
        {
            "ioc_value": "89.42.134.220:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:45:40",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834770": [
        {
            "ioc_value": "51.79.51.255:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-21 09:45:23",
            "last_seen_utc": "2026-08-31 08:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834769": [
        {
            "ioc_value": "45.81.243.44:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:45:12",
            "last_seen_utc": "2026-08-07 18:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834768": [
        {
            "ioc_value": "45.140.14.29:1489",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-21 09:45:07",
            "last_seen_utc": "2026-07-25 08:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834765": [
        {
            "ioc_value": "191.107.87.183:5010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:59",
            "last_seen_utc": "2026-07-23 18:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834766": [
        {
            "ioc_value": "191.107.87.183:8917",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:59",
            "last_seen_utc": "2026-07-21 18:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834767": [
        {
            "ioc_value": "191.107.87.183:9140",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:59",
            "last_seen_utc": "2026-07-21 18:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834764": [
        {
            "ioc_value": "185.115.164.59:808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 09:43:51",
            "last_seen_utc": "2026-07-21 18:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834763": [
        {
            "ioc_value": "150.40.117.39:43723",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-21 09:43:24",
            "last_seen_utc": "2026-07-22 18:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834762": [
        {
            "ioc_value": "147.93.191.75:1111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:22",
            "last_seen_utc": "2026-07-21 08:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834761": [
        {
            "ioc_value": "141.98.10.150:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 09:43:18",
            "last_seen_utc": "2026-08-03 18:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834759": [
        {
            "ioc_value": "103.67.163.27:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:07",
            "last_seen_utc": "2026-07-21 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834760": [
        {
            "ioc_value": "103.67.163.27:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:07",
            "last_seen_utc": "2026-07-21 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834758": [
        {
            "ioc_value": "103.6.219.25:6745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-21 09:43:06",
            "last_seen_utc": "2026-07-23 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834756": [
        {
            "ioc_value": "103.11.41.10:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 09:43:04",
            "last_seen_utc": "2026-07-21 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834757": [
        {
            "ioc_value": "103.11.41.10:51490",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-21 09:43:04",
            "last_seen_utc": "2026-07-21 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834755": [
        {
            "ioc_value": "yezqbe5v.tarahisystem.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 09:05:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834754": [
        {
            "ioc_value": "xlp38wsp.yekiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 08:35:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834751": [
        {
            "ioc_value": "50.114.184.68:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-21 07:50:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a97e8ffb5cfbbccd8e2c812fb6f86769ec014692f9bd598ad446c096630d577/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834750": [
        {
            "ioc_value": "43.108.49.157:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-21 07:16:50",
            "last_seen_utc": "2026-06-25 08:07:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834749": [
        {
            "ioc_value": "67.216.197.83:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-21 07:16:49",
            "last_seen_utc": "2026-06-25 04:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834746": [
        {
            "ioc_value": "64.89.163.22:4477",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 07:01:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Meterpreter",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834747": [
        {
            "ioc_value": "64.89.163.22:8844",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 07:01:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Meterpreter",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834748": [
        {
            "ioc_value": "64.89.163.22:8745",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-21 07:01:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Meterpreter",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834521": [
        {
            "ioc_value": "13.140.155.136:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-21 06:47:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834522": [
        {
            "ioc_value": "167.172.152.94:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-21 06:47:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834523": [
        {
            "ioc_value": "185.214.96.111:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-21 06:47:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "diicot,docker-api,miner",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834524": [
        {
            "ioc_value": "45.153.34.212:8181",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-21 06:47:42",
            "last_seen_utc": "2026-06-22 08:13:12",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "c2,diicot,junko",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834525": [
        {
            "ioc_value": "150.138.182.190:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xorddos",
            "malware_alias": "XORDDOS",
            "malware_printable": "XOR DDoS",
            "first_seen_utc": "2026-06-21 06:47:41",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ddos,ssh,xorddos",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834526": [
        {
            "ioc_value": "87.249.134.3:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-21 06:47:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "boyzee,phoenix-c2,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834527": [
        {
            "ioc_value": "193.32.126.167:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-21 06:47:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834528": [
        {
            "ioc_value": "194.238.26.34:8880",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-21 06:47:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "boyzee,c2,phoenix",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834529": [
        {
            "ioc_value": "http://82.144.86.37:38207/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/82.144.86.37",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834530": [
        {
            "ioc_value": "http://119.73.19.131:53332/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.73.19.131",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834531": [
        {
            "ioc_value": "http://110.38.254.172:58822/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.254.172",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834534": [
        {
            "ioc_value": "justkiddin.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834535": [
        {
            "ioc_value": "216.128.153.60:51515",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834536": [
        {
            "ioc_value": "217.60.195.160:4569",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834537": [
        {
            "ioc_value": "217.60.195.160:4568",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834538": [
        {
            "ioc_value": "217.60.195.160:9018",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834560": [
        {
            "ioc_value": "46.151.182.157:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260620-yrwfvahs6p/behavioral2",
            "tags": "RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834561": [
        {
            "ioc_value": "46.151.182.157:751",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260620-yrwfvahs6p/behavioral2",
            "tags": "RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834565": [
        {
            "ioc_value": "http://46.151.182.157:1337/api/ps",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260620-yrwfvahs6p/behavioral2",
            "tags": "RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834564": [
        {
            "ioc_value": "46.151.182.157:2008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260620-yrwfvahs6p/behavioral2",
            "tags": "c2,RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834566": [
        {
            "ioc_value": "http://46.151.182.157:751/download",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260620-yrwfvahs6p/behavioral2",
            "tags": "RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834567": [
        {
            "ioc_value": "http://46.151.182.157:2008/api/forwarder",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://tria.ge/260620-yrwfvahs6p/behavioral2",
            "tags": "c2,RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834568": [
        {
            "ioc_value": "http://46.151.182.157:1337/api/discord",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.rapid_stealer",
            "malware_alias": null,
            "malware_printable": "RapidStealer",
            "first_seen_utc": "2026-06-21 06:47:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RapidStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834574": [
        {
            "ioc_value": "cdnpro-987.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-21 06:47:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@Ffforward/116780837774853850",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834575": [
        {
            "ioc_value": "cdnportal-us.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 06:47:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@Ffforward/116780837774853850",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834577": [
        {
            "ioc_value": "203.154.14.18:8999",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834578": [
        {
            "ioc_value": "203.154.14.18:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-21 06:47:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834737": [
        {
            "ioc_value": "https://aidancollege.ac.ug/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-21 06:47:22",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aidancollege.ac.ug",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834742": [
        {
            "ioc_value": "http://153.117.15.86:42008/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.86",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834743": [
        {
            "ioc_value": "http://223.123.42.235:41900/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.42.235",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834744": [
        {
            "ioc_value": "http://110.39.255.247:35440/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.39.255.247",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834286": [
        {
            "ioc_value": "http://110.36.86.0:55983/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-21 06:47:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.36.86.0",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834745": [
        {
            "ioc_value": "s3zzh7np.sigaribetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 06:23:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834739": [
        {
            "ioc_value": "xfq2kf92.angizeshfarahani.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 05:41:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834731": [
        {
            "ioc_value": "zamineravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 03:36:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834726": [
        {
            "ioc_value": "bbzvqin8.zamineravan.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 01:36:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834725": [
        {
            "ioc_value": "zamineravan.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 01:35:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834724": [
        {
            "ioc_value": "g9lo26em.shartland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-21 00:21:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834723": [
        {
            "ioc_value": "64e9b14f81a21120b831e19ef94f902e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:57:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834719": [
        {
            "ioc_value": "f545a0384505117c03a33842384f9ea397ffc835",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-06-20 23:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834720": [
        {
            "ioc_value": "f2a520db47f163760eef8629fc4a92e2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-06-20 23:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834721": [
        {
            "ioc_value": "d0da8e7c8c47561a8b9f78b38e31e02964dcf4ae1d10cc01a99e409d20ad73ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834722": [
        {
            "ioc_value": "1f8e8faddb98e2e6cd723c4c1854000281ef3913",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:57:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834715": [
        {
            "ioc_value": "2af09010211b22731abbc733c648be84f75ac947f919ac895374dd28719c32f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834716": [
        {
            "ioc_value": "85af6e8ac64a65f9f163199e6cc85ee5409dd74f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834717": [
        {
            "ioc_value": "4a9c90e7662bc3876f4ef627816c6eff",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834718": [
        {
            "ioc_value": "0aa7360574fed7f19d3c1b9c12e0e3e90f0b415eab4d0901559fbe7703dfe939",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-06-20 23:57:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834712": [
        {
            "ioc_value": "0c620497c06028c783050d81daf378edc7c0cfba3977f0137ebc3ffdd8765a56",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-06-20 23:57:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834713": [
        {
            "ioc_value": "afca972d30b80f02e2a2abc4d653cb1579cb509b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-06-20 23:57:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834714": [
        {
            "ioc_value": "349e9cfa230a379f16ba28418a73d3bf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.xloader",
            "malware_alias": "Formbook",
            "malware_printable": "Xloader",
            "first_seen_utc": "2026-06-20 23:57:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834709": [
        {
            "ioc_value": "aadc96fe85cb6f7089b51457c2bd30ff443262ccd53fbb3ca4529289c70a595f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:10",
            "last_seen_utc": "2026-06-21 16:40:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834710": [
        {
            "ioc_value": "a77cb0942631742512c5a015c580ad0c6a6e2afc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:10",
            "last_seen_utc": "2026-06-21 16:40:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834711": [
        {
            "ioc_value": "f69859707432442f70c49c2f0678f675",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:10",
            "last_seen_utc": "2026-06-21 16:40:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834706": [
        {
            "ioc_value": "3c4e06fe06b26cb70c0dabc743b728db50c87151606c421cb809e19b29876fbe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:09",
            "last_seen_utc": "2026-06-21 16:40:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834707": [
        {
            "ioc_value": "fcea5aa80c9154c30a2ecf73de6d93c1d3a2436c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:09",
            "last_seen_utc": "2026-06-21 16:40:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834708": [
        {
            "ioc_value": "dc993e02dd8b72b4c1d2d31e13811746",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:09",
            "last_seen_utc": "2026-06-21 16:40:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834703": [
        {
            "ioc_value": "da6dec4baeadb44b654d21d14c27530851ed1c57e71d50c39c16ff3fb730af86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:08",
            "last_seen_utc": "2026-06-21 16:40:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834704": [
        {
            "ioc_value": "05b88c149fbce94d91166c7eb92c861f0d269915",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:08",
            "last_seen_utc": "2026-06-21 16:40:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834705": [
        {
            "ioc_value": "4f19d659d8a775b1a1f77d5263113f23",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:08",
            "last_seen_utc": "2026-06-21 16:40:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834700": [
        {
            "ioc_value": "e35d943f539f6d61e0d9e5d39f5cc78180accb01a7a42fe7287b2000dadfaf4a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:07",
            "last_seen_utc": "2026-06-21 16:40:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834701": [
        {
            "ioc_value": "a0bc24435ea17b686873950175f23cdc31c81df5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:07",
            "last_seen_utc": "2026-06-21 16:40:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834702": [
        {
            "ioc_value": "8f45724779f470a3697b39fa6a6be4db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:07",
            "last_seen_utc": "2026-06-21 16:40:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834697": [
        {
            "ioc_value": "2f14862545773c034e41f1ece62bc0618cb1396eacfd2bbe2aec9c958689e002",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:06",
            "last_seen_utc": "2026-06-21 16:40:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834698": [
        {
            "ioc_value": "d48ec01d6c8143a571fae4bbcabb9969fbfa1c84",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:06",
            "last_seen_utc": "2026-06-21 16:40:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834699": [
        {
            "ioc_value": "2ce7e3f516c80084cda7b9a35809e90b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:06",
            "last_seen_utc": "2026-06-21 16:40:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834695": [
        {
            "ioc_value": "dcb74d6c2fe8a0cf6906bab57e48b2cd18b2cecc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:05",
            "last_seen_utc": "2026-06-21 16:40:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834696": [
        {
            "ioc_value": "30a9ecc59bc94186d32978e4a9f5bb0d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:05",
            "last_seen_utc": "2026-06-21 16:40:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834691": [
        {
            "ioc_value": "1e6d5898bea2ebf6b249707ea4235e17e009eda510f2476ce885b97fcd8c26a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-20 23:57:04",
            "last_seen_utc": "2026-06-21 16:40:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834692": [
        {
            "ioc_value": "cad40d347c87fc9bc1a2f1038e4e8761a6cc080c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-20 23:57:04",
            "last_seen_utc": "2026-06-21 16:40:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834693": [
        {
            "ioc_value": "c2005d83afa2f81ddeb3c4513734d3b7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-20 23:57:04",
            "last_seen_utc": "2026-06-21 16:40:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834694": [
        {
            "ioc_value": "2fe27cfc680a6fb118a023caa55bfa39a55d4aecf9e540f65b531874066fec16",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:04",
            "last_seen_utc": "2026-06-21 16:40:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834688": [
        {
            "ioc_value": "9c48fc643b569e7b37d851c8e3c3a19d1469427a99d405b7f9fdefaa0b40f9b4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:03",
            "last_seen_utc": "2026-06-21 16:40:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834689": [
        {
            "ioc_value": "9e7c5644cb14f71db5a5ec9820594ee55e4eb949",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:03",
            "last_seen_utc": "2026-06-21 16:40:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834690": [
        {
            "ioc_value": "f97369c65ce71afac2ebab1ae5c96e16",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:03",
            "last_seen_utc": "2026-06-21 16:40:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834686": [
        {
            "ioc_value": "9604fdffe5573bca0dc7e224867e90ffdc0c491e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:02",
            "last_seen_utc": "2026-06-21 16:40:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834687": [
        {
            "ioc_value": "db5f9352503f9cd7f1c572d03a64f32d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:02",
            "last_seen_utc": "2026-06-21 16:40:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834685": [
        {
            "ioc_value": "691c74f56d546998e51af78a4a55a0b13744b3d4a882b0247da05b59e1e1d6c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:57:01",
            "last_seen_utc": "2026-06-21 16:40:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834681": [
        {
            "ioc_value": "49cb19282d2e43eadf128dd03ff98394",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.blackshades",
            "malware_alias": null,
            "malware_printable": "BlackShades",
            "first_seen_utc": "2026-06-20 23:57:00",
            "last_seen_utc": "2026-06-21 16:40:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834682": [
        {
            "ioc_value": "2f8b6ff170d5c231fc25d0ecc9b907448a5cdea6513bef52a10856fd1b814479",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.blackshades",
            "malware_alias": null,
            "malware_printable": "BlackShades",
            "first_seen_utc": "2026-06-20 23:57:00",
            "last_seen_utc": "2026-06-21 16:40:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834683": [
        {
            "ioc_value": "399921c6d715c4166b7641cf64fdc41ad06dde65",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.blackshades",
            "malware_alias": null,
            "malware_printable": "BlackShades",
            "first_seen_utc": "2026-06-20 23:57:00",
            "last_seen_utc": "2026-06-21 16:40:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834684": [
        {
            "ioc_value": "72e11e578b0195306835b11387846662",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.blackshades",
            "malware_alias": null,
            "malware_printable": "BlackShades",
            "first_seen_utc": "2026-06-20 23:57:00",
            "last_seen_utc": "2026-06-21 16:40:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834678": [
        {
            "ioc_value": "9be1777c6150a1a50e4961902a487ef5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-20 23:56:59",
            "last_seen_utc": "2026-06-21 16:40:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834679": [
        {
            "ioc_value": "ee50115e22710719e3fc70e61fa09ce101e409d0acb6d9b9a1b4f32c96917c06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.blackshades",
            "malware_alias": null,
            "malware_printable": "BlackShades",
            "first_seen_utc": "2026-06-20 23:56:59",
            "last_seen_utc": "2026-06-21 16:40:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834680": [
        {
            "ioc_value": "6cf6221711c69d1b908e24ed08ab5c5766d0a882",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.blackshades",
            "malware_alias": null,
            "malware_printable": "BlackShades",
            "first_seen_utc": "2026-06-20 23:56:59",
            "last_seen_utc": "2026-06-21 16:40:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834675": [
        {
            "ioc_value": "016b642c77e8ee87b4faf0b0e507e15d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:58",
            "last_seen_utc": "2026-06-21 16:40:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834676": [
        {
            "ioc_value": "29352f59456553b5f5484561ad72727866119f00dfa50626b152ec47d68369a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-20 23:56:58",
            "last_seen_utc": "2026-06-21 16:40:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834677": [
        {
            "ioc_value": "f5afd7c8ebd868bde7287829ad63d07e0681cfe2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-20 23:56:58",
            "last_seen_utc": "2026-06-21 16:40:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834672": [
        {
            "ioc_value": "ed32f554a6e15f3d3112e9b07f21e8fa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:57",
            "last_seen_utc": "2026-06-21 16:40:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834673": [
        {
            "ioc_value": "e681fb538d6b064f2bb81ffc552784b264d3888eb18df2ae50fd133b35feb95a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:57",
            "last_seen_utc": "2026-06-21 16:40:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834674": [
        {
            "ioc_value": "dbf792049783f13098d6fc6cf14eeb80a1be0caf",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:57",
            "last_seen_utc": "2026-06-21 16:40:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834669": [
        {
            "ioc_value": "b4e61dcfcf46bbd01ee140b355d738c8",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:56",
            "last_seen_utc": "2026-06-21 16:40:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834670": [
        {
            "ioc_value": "6bc5bbef79cd96c26cee4702a22eec2b7d49adc7c67b0a76efcc852df2252214",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:56",
            "last_seen_utc": "2026-06-21 16:40:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834671": [
        {
            "ioc_value": "81c89ddcb7ff90acd948aceaab9aa358fa9674ca",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:56",
            "last_seen_utc": "2026-06-21 16:40:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834666": [
        {
            "ioc_value": "b274c8c20aa752171b716382707b85f3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:55",
            "last_seen_utc": "2026-06-21 16:40:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834667": [
        {
            "ioc_value": "2ee10a4e204a3adbf2102913c95c3cad56199bd75e1c6e194f239a7cf4837e36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:55",
            "last_seen_utc": "2026-06-21 16:40:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834668": [
        {
            "ioc_value": "864b9623279497e028ba193b2f52233b1cb6be53",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:55",
            "last_seen_utc": "2026-06-21 16:40:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834663": [
        {
            "ioc_value": "8820cc652b0c3ed6dfff7c4032f646b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:56:54",
            "last_seen_utc": "2026-06-21 16:40:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834664": [
        {
            "ioc_value": "e176972714a4fd0fe9b299ae8598487c92d9da508de42d042d1ddccb8548a3b5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:54",
            "last_seen_utc": "2026-06-21 16:40:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834665": [
        {
            "ioc_value": "d8c611e7d43a0d746530580f3d87d71aebbc446a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:54",
            "last_seen_utc": "2026-06-21 16:40:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834660": [
        {
            "ioc_value": "2f9ec23d6ca74629b928f5f149d9feb4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-20 23:56:53",
            "last_seen_utc": "2026-06-21 16:40:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834661": [
        {
            "ioc_value": "0dcbe5afb17831300599e9cdc3c8a655c1380c86a1562db04fec664677a50e20",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:56:53",
            "last_seen_utc": "2026-06-21 16:40:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834662": [
        {
            "ioc_value": "bf382fab74d8255350a0058f5dbec9a0742f81a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-20 23:56:53",
            "last_seen_utc": "2026-06-21 16:40:43",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834657": [
        {
            "ioc_value": "cead56d13a90d65bc036283e71985c10",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:52",
            "last_seen_utc": "2026-06-21 16:40:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834658": [
        {
            "ioc_value": "afa807cee34e8b931688ccf2be76b7ea5337af3d64714a348bead839c756643a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-20 23:56:52",
            "last_seen_utc": "2026-06-21 16:40:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834659": [
        {
            "ioc_value": "c23880aace575129c384723e82fa92e8e25d54c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-20 23:56:52",
            "last_seen_utc": "2026-06-21 16:40:42",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834653": [
        {
            "ioc_value": "7d553a1a6d7cdc7a177665644b11ccfa34cd4b30",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:51",
            "last_seen_utc": "2026-06-21 16:40:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834654": [
        {
            "ioc_value": "ccdc1f893f3e7bd91ac4dd77a1ddc377",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:51",
            "last_seen_utc": "2026-06-21 16:40:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834655": [
        {
            "ioc_value": "89a9dfb74bf31b40951bac672cd108db9c7c4cbdcf282d1f29e8049d3b4b47d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:51",
            "last_seen_utc": "2026-06-21 16:40:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834656": [
        {
            "ioc_value": "c8e94b71624a15d3ac6661856c943e2c9f989da2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:51",
            "last_seen_utc": "2026-06-21 16:40:41",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834650": [
        {
            "ioc_value": "d864ee78933a3c2758eb4446cbf601ed0826b8e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:50",
            "last_seen_utc": "2026-06-21 16:40:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834651": [
        {
            "ioc_value": "93f74ef611a21edab4602bacc1925b7c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:50",
            "last_seen_utc": "2026-06-21 16:40:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834652": [
        {
            "ioc_value": "7ffea08c03e9c49def06aab41881b65596e26bba26ca30f2cc26640e892d38ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:50",
            "last_seen_utc": "2026-06-21 16:40:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834647": [
        {
            "ioc_value": "4ff4720313ae142d1979ed78678728827eb508b8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:49",
            "last_seen_utc": "2026-06-21 16:40:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834648": [
        {
            "ioc_value": "8ad98d809e87c146555686b252feacfa",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:49",
            "last_seen_utc": "2026-06-21 16:40:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834649": [
        {
            "ioc_value": "ed32368823c139fa2e2f0771e6716f93c7db856aa24bbc81c0eea653ac3618f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:49",
            "last_seen_utc": "2026-06-21 16:40:40",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834644": [
        {
            "ioc_value": "ded7a484d242d344a7c5f06638f87e9cfa19a870",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:48",
            "last_seen_utc": "2026-06-21 16:40:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834645": [
        {
            "ioc_value": "edc2b0119fa8b56272bc613dca7c6a92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:48",
            "last_seen_utc": "2026-06-21 16:40:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834646": [
        {
            "ioc_value": "93de66680b277c94cf8925ea36b9e396e6a57096f018f493edf64df898034dd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:48",
            "last_seen_utc": "2026-06-21 16:40:39",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834640": [
        {
            "ioc_value": "0932c80cd89391d69281f4938676d354d5982379f52381794a31f8e20fc74f17",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:47",
            "last_seen_utc": "2026-06-21 16:40:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834641": [
        {
            "ioc_value": "5fc628830a5096201995d90855c65e0728bdcb20",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:47",
            "last_seen_utc": "2026-06-21 16:40:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834642": [
        {
            "ioc_value": "5017c337b5a477b716148f78735344cf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:47",
            "last_seen_utc": "2026-06-21 16:40:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834643": [
        {
            "ioc_value": "b9f2ba742e2e227a55912746acf22992d2dfc416d3877665b83abf0bc3e3f093",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:47",
            "last_seen_utc": "2026-06-21 16:40:38",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834637": [
        {
            "ioc_value": "77ef08194ab04f99824d79503fe719c893f3bf180faf94ba5b1afbcc418d872b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:46",
            "last_seen_utc": "2026-06-21 16:40:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834638": [
        {
            "ioc_value": "700a24f5aecb59c23e7142094cb425c0a732624b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:46",
            "last_seen_utc": "2026-06-21 16:40:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834639": [
        {
            "ioc_value": "0e7c42de35a8effa21d8aedd55170f6c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:46",
            "last_seen_utc": "2026-06-21 16:40:37",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834633": [
        {
            "ioc_value": "3b118bb05c12ba6f65e001a95d723bac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:45",
            "last_seen_utc": "2026-06-21 16:40:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834634": [
        {
            "ioc_value": "47167ee6a2eedbb6a361b502516be53365b4399ca8c05a51c21b0dea8980e33f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:45",
            "last_seen_utc": "2026-06-21 16:40:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834635": [
        {
            "ioc_value": "47c68148c07d104bacdf77757e977f40d2fdf54f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:45",
            "last_seen_utc": "2026-06-21 16:40:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834636": [
        {
            "ioc_value": "8234ba4a21540a58a60ca07853c4279e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:45",
            "last_seen_utc": "2026-06-21 16:40:36",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834630": [
        {
            "ioc_value": "8edc3fc30ff421f6383006a6820b6137",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:44",
            "last_seen_utc": "2026-06-21 16:40:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834631": [
        {
            "ioc_value": "59c31b45f7e3a04bfc35651d087d063e95f7e31d1246018eed1150a177410125",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:44",
            "last_seen_utc": "2026-06-21 16:40:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834632": [
        {
            "ioc_value": "d98b8274ad5c0dd6cf544bcda38774a93d50027b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:44",
            "last_seen_utc": "2026-06-21 16:40:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834627": [
        {
            "ioc_value": "cbb52530c3719b037e97c552abffc626",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:43",
            "last_seen_utc": "2026-06-21 16:40:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834628": [
        {
            "ioc_value": "d3189d197237dcaafd3e04413bda0ad055dfe236679f4a004732af2954416f93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:43",
            "last_seen_utc": "2026-06-21 16:40:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834629": [
        {
            "ioc_value": "5e9058e3d99c0c99a36d3bed8284042ca5390c0e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:43",
            "last_seen_utc": "2026-06-21 16:40:35",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834624": [
        {
            "ioc_value": "5e6a3929d6e3020f75115a47addbf987",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:42",
            "last_seen_utc": "2026-06-21 16:40:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834625": [
        {
            "ioc_value": "c9a93549b2b5999337eb51e916a489456466b0fbaf6d3aa27bb45cb28ca614a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:42",
            "last_seen_utc": "2026-06-21 16:40:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834626": [
        {
            "ioc_value": "341b470efe14cdd2601ecdd8ea7e723aeca8c9bd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-20 23:56:42",
            "last_seen_utc": "2026-06-21 16:40:34",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834621": [
        {
            "ioc_value": "31a28a1e13d0f9cb638cd445f2acb559",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:41",
            "last_seen_utc": "2026-06-21 16:40:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834622": [
        {
            "ioc_value": "aefc4db306e46c7b1baf4542dcd7ab3e0324f92fc5e5734be180b90c0546205b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:41",
            "last_seen_utc": "2026-06-21 16:40:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834623": [
        {
            "ioc_value": "70b9a9a1b50c2b48bd1cbc0fd0465618e97b3faa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:41",
            "last_seen_utc": "2026-06-21 16:40:33",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834617": [
        {
            "ioc_value": "064df4beb9b4ca437a317b6744dc89f985aa37ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:40",
            "last_seen_utc": "2026-06-21 16:40:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834618": [
        {
            "ioc_value": "69952dfc4e13803c1ded01e97e859178",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:40",
            "last_seen_utc": "2026-06-21 16:40:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834619": [
        {
            "ioc_value": "1de74088c8dc5abbb6f5c8d708d0fa4c396f5474e27eb56a8c5e961464b89c3e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:40",
            "last_seen_utc": "2026-06-21 16:40:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834620": [
        {
            "ioc_value": "b9b32ae4989254713d181e658f1fadf6725611f6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:40",
            "last_seen_utc": "2026-06-21 16:40:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834614": [
        {
            "ioc_value": "43b5bdb67072735ae2791a0bdce47548aa0b56e2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:39",
            "last_seen_utc": "2026-06-21 16:40:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834615": [
        {
            "ioc_value": "67540f6e31a6430c90c370a4572e7cf1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:39",
            "last_seen_utc": "2026-06-21 16:40:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834616": [
        {
            "ioc_value": "5d08aed3131bd6ea086a72aca7084f54ad16cc23f05ed8eded1006cece746270",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-20 23:56:39",
            "last_seen_utc": "2026-06-21 16:40:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834611": [
        {
            "ioc_value": "063cd1d546e0ebc972a8be86415848262795375a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-20 23:56:38",
            "last_seen_utc": "2026-06-21 16:40:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834612": [
        {
            "ioc_value": "b0e1d25b47d005257990f1626739383e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-20 23:56:38",
            "last_seen_utc": "2026-06-21 16:40:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834613": [
        {
            "ioc_value": "e8c84a21131672927104f8a91d1062a71351e97e3052dd1d3ca04b7b73b6e37e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:38",
            "last_seen_utc": "2026-06-21 16:40:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834608": [
        {
            "ioc_value": "df5cc073aaec64c7998cca5e7561d1a423112f7b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:37",
            "last_seen_utc": "2026-06-21 16:40:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834609": [
        {
            "ioc_value": "f72f667fac878f750e4b8d4d59643f26",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:37",
            "last_seen_utc": "2026-06-21 16:40:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834610": [
        {
            "ioc_value": "aff0e85a8e066750e4380b756c2a12b9c9b4bdf7460eff4dba462422e572fe81",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-20 23:56:37",
            "last_seen_utc": "2026-06-21 16:40:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834605": [
        {
            "ioc_value": "9cc3d2d139d493012fe15e7bbb3ce4cb1563d4bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:36",
            "last_seen_utc": "2026-06-21 16:40:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834606": [
        {
            "ioc_value": "8c84bbc4ae0513b991821a21fac9f8d6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:36",
            "last_seen_utc": "2026-06-21 16:40:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834607": [
        {
            "ioc_value": "88a2c9db752d0474d3acae63d3a5c7059051460c588142ee8d0769d9765ddc18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:36",
            "last_seen_utc": "2026-06-21 16:40:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834601": [
        {
            "ioc_value": "e7a53970dbc5a570d4d98e963902f37641fc6e526ef9af1e7117806436b7a394",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:35",
            "last_seen_utc": "2026-06-21 16:40:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834602": [
        {
            "ioc_value": "3df8d4836f520c7acf17b3e82f21d04f4dc0e676",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:35",
            "last_seen_utc": "2026-06-21 16:40:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834603": [
        {
            "ioc_value": "d36c0c4fe0ddc64e42a4674da64d7838",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:35",
            "last_seen_utc": "2026-06-21 16:40:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834604": [
        {
            "ioc_value": "13dd71dc712256f0bf365439e1b814f17347f5fa797577801afd5bc334349532",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-20 23:56:35",
            "last_seen_utc": "2026-06-21 16:40:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834598": [
        {
            "ioc_value": "3368d54f30631c9e305f6df3464e08b6b4f24eebdb605240c44b144deed717fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-20 23:56:34",
            "last_seen_utc": "2026-06-21 16:40:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834599": [
        {
            "ioc_value": "50cdc90b8ac39e4167409fedb3d25e4de8229578",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-20 23:56:34",
            "last_seen_utc": "2026-06-21 16:40:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834600": [
        {
            "ioc_value": "c83776891f0407e6401a7d7004691f86",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-20 23:56:34",
            "last_seen_utc": "2026-06-21 16:40:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834595": [
        {
            "ioc_value": "16f121c04202eb4a7cc68ecafdc85e66a114801e2edbcf5f2561437993bbd278",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-20 23:56:33",
            "last_seen_utc": "2026-06-21 16:40:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834596": [
        {
            "ioc_value": "5b92ef29344c1dbce51dfd4632605107cd21f1e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-20 23:56:33",
            "last_seen_utc": "2026-06-21 16:40:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834597": [
        {
            "ioc_value": "a01b56eb305f46b4c8c4a72256124510",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-20 23:56:33",
            "last_seen_utc": "2026-06-21 16:40:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834592": [
        {
            "ioc_value": "7348ea4bd90ba897c35d9cdcc1da7470d8ad00db072538e21686db797e3b1a69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:32",
            "last_seen_utc": "2026-06-21 16:40:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834593": [
        {
            "ioc_value": "0a3fa4f8d598e6a92e0814924a93fc8782e2752d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:32",
            "last_seen_utc": "2026-06-21 16:40:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834594": [
        {
            "ioc_value": "1d562cac7c67ff7ebbe87a6a9dcfcd35",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:32",
            "last_seen_utc": "2026-06-21 16:40:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834590": [
        {
            "ioc_value": "b0e87085fc953ca47d20dd900eaf1765d00ff74f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:31",
            "last_seen_utc": "2026-06-21 16:40:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834591": [
        {
            "ioc_value": "e716660c19bd9ca857be57cc3926d60a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:31",
            "last_seen_utc": "2026-06-21 16:40:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834586": [
        {
            "ioc_value": "ef3b3ab549f0abd21112eaa6b2d92cc43268960cc784241dc0512b38db090923",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-06-20 23:56:30",
            "last_seen_utc": "2026-06-21 16:40:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834587": [
        {
            "ioc_value": "cf1a1e8a99cb6db904e6c1712d045f4437b3ae82",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-06-20 23:56:30",
            "last_seen_utc": "2026-06-21 16:40:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834588": [
        {
            "ioc_value": "be10a9ac2bfe28e74a4ed2029a077d28",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.remotex",
            "malware_alias": null,
            "malware_printable": "RemoteX",
            "first_seen_utc": "2026-06-20 23:56:30",
            "last_seen_utc": "2026-06-21 16:40:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834589": [
        {
            "ioc_value": "6696a32df2f9598926cda34e6a239e24c66e417fe40617ad5853b2cb339481a4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-20 23:56:30",
            "last_seen_utc": "2026-06-21 16:40:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834583": [
        {
            "ioc_value": "0ecd4eed4e6933a51dbedfb4927b330135e0df7957e4e1eb6c6cee939a5bdec4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 23:56:29",
            "last_seen_utc": "2026-06-21 16:40:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834584": [
        {
            "ioc_value": "cb1d22c31403322adabd6b6f72ab53347661450b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 23:56:29",
            "last_seen_utc": "2026-06-21 16:40:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834585": [
        {
            "ioc_value": "e76c8f8521a3c532b93466301076cccb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 23:56:29",
            "last_seen_utc": "2026-06-21 16:40:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834582": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41/8a-96dfe89a4aa3/hum-id46",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 23:53:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834581": [
        {
            "ioc_value": "zabantehrani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 23:34:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834580": [
        {
            "ioc_value": "wc7skdzu.yakhbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 22:34:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834579": [
        {
            "ioc_value": "l3q1ng7a.azmoondadrasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 22:20:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834576": [
        {
            "ioc_value": "iplzbag0.shartbandi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 21:36:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834573": [
        {
            "ioc_value": "185.56.46.230:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 20:45:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9eadf5f3be0996c41ad4c42f7bf530b74d8682ac630cea018dd0edefa07d4ea/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834570": [
        {
            "ioc_value": "185.56.46.230:1605",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 20:45:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9eadf5f3be0996c41ad4c42f7bf530b74d8682ac630cea018dd0edefa07d4ea/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834571": [
        {
            "ioc_value": "185.56.46.230:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 20:45:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9eadf5f3be0996c41ad4c42f7bf530b74d8682ac630cea018dd0edefa07d4ea/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834572": [
        {
            "ioc_value": "185.56.46.230:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 20:45:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9eadf5f3be0996c41ad4c42f7bf530b74d8682ac630cea018dd0edefa07d4ea/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834569": [
        {
            "ioc_value": "host.serveminecraft.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 20:45:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9eadf5f3be0996c41ad4c42f7bf530b74d8682ac630cea018dd0edefa07d4ea/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834559": [
        {
            "ioc_value": "116.213.42.110:5005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 19:45:51",
            "last_seen_utc": "2026-08-03 10:46:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834558": [
        {
            "ioc_value": "100.110.56.1:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 19:45:45",
            "last_seen_utc": "2026-07-24 10:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834557": [
        {
            "ioc_value": "89.124.107.161:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 19:45:29",
            "last_seen_utc": "2026-07-22 18:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834556": [
        {
            "ioc_value": "80.211.129.141:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 19:45:24",
            "last_seen_utc": "2026-07-21 08:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834555": [
        {
            "ioc_value": "8.217.141.231:636",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-20 19:45:23",
            "last_seen_utc": "2026-07-21 08:46:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834554": [
        {
            "ioc_value": "5.200.176.105:55476",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-20 19:45:13",
            "last_seen_utc": "2026-07-21 08:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834553": [
        {
            "ioc_value": "5.101.85.65:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-20 19:45:10",
            "last_seen_utc": "2026-07-22 08:45:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834552": [
        {
            "ioc_value": "47.243.211.244:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 19:45:07",
            "last_seen_utc": "2026-07-21 08:46:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834551": [
        {
            "ioc_value": "45.81.243.44:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:45:01",
            "last_seen_utc": "2026-08-07 18:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834550": [
        {
            "ioc_value": "45.77.254.232:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 19:45:00",
            "last_seen_utc": "2026-07-21 08:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834549": [
        {
            "ioc_value": "198.23.185.136:10900",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:44:03",
            "last_seen_utc": "2026-07-21 08:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834547": [
        {
            "ioc_value": "195.20.115.197:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:44:01",
            "last_seen_utc": "2026-07-21 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834548": [
        {
            "ioc_value": "195.20.115.197:7829",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:44:01",
            "last_seen_utc": "2026-07-21 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834546": [
        {
            "ioc_value": "195.20.115.197:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:44:00",
            "last_seen_utc": "2026-07-21 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834545": [
        {
            "ioc_value": "188.23.170.123:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-06-20 19:43:54",
            "last_seen_utc": "2026-07-21 08:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834544": [
        {
            "ioc_value": "162.216.241.206:7997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-20 19:43:30",
            "last_seen_utc": "2026-07-24 18:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834542": [
        {
            "ioc_value": "13.140.160.249:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:43:13",
            "last_seen_utc": "2026-07-24 18:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834543": [
        {
            "ioc_value": "13.140.160.249:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:43:13",
            "last_seen_utc": "2026-07-24 18:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834541": [
        {
            "ioc_value": "104.194.151.163:65381",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-20 19:43:06",
            "last_seen_utc": "2026-07-21 08:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834540": [
        {
            "ioc_value": "102.220.160.217:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 19:43:02",
            "last_seen_utc": "2026-08-09 18:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834539": [
        {
            "ioc_value": "liwxdd48.romabetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 19:34:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834533": [
        {
            "ioc_value": "almontm.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-20 18:42:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "ffforward"
        }
    ],
    "1834532": [
        {
            "ioc_value": "https://almontm.xyz/file.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-20 18:42:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "ffforward"
        }
    ],
    "1834520": [
        {
            "ioc_value": "http://193.148.57.10/88004f4d3e32489389ea.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-20 17:35:56",
            "last_seen_utc": "2026-06-24 17:00:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ce00a84a546cf51d9428350aa1929c8999a4c48de5d7e53372f4faca22cbaf2e/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834519": [
        {
            "ioc_value": "zuldqm04.riyaziyattajrobi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 17:35:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834514": [
        {
            "ioc_value": "76b7d33401d60a564d8761c3b31a061ad3e8c64579cdcfb81cce92b55f491c3c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834515": [
        {
            "ioc_value": "5f72bdb14e138f10c1658248fdaf10db2fd1e812240966e009bbcf8d463e099c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834501": [
        {
            "ioc_value": "b5dfd4fb5e17d304c15d42a1d2404ff7a578b618f996f5cb6b2762cd9a6d0c53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834502": [
        {
            "ioc_value": "4b7779b386a7efee91f70008f7d7f773e9b787a374c8c974fd450ce3cb642398",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834503": [
        {
            "ioc_value": "f7010e50cc72851a99f686370ac0b5bf75c81cc00e809b4e7937a8d6e60114db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834504": [
        {
            "ioc_value": "acfe720d95e1adfedc4869e89930644cbd17635c121b43698bf66ff1d14e5746",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834505": [
        {
            "ioc_value": "7454191be1a95519697a68bdce4a90fec5aadcfe0871d8537135e2af5de8de8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834506": [
        {
            "ioc_value": "722360b213bc17885dcd6894a07d9a8be342b240d7d41e0490e50964f63aa239",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834507": [
        {
            "ioc_value": "718d6f185fdc2d9fd206914c2b05f85e3c50b53c705071c09cebdf44cff34768",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834508": [
        {
            "ioc_value": "1bc4c339b1c0773a649234d4b85dd1929c0b5d2d0cd9836c7ad1d7491372f9ec",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834509": [
        {
            "ioc_value": "300bc2769c6d62ba9d228cc45e126cd458e1a23fd23092da258053afd82f2755",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834510": [
        {
            "ioc_value": "6a5e547756ef1256f1eb9df0249245c35461affd009be8f046559bc007cafcf2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834511": [
        {
            "ioc_value": "3dc7d4023c7380ed740ac5ac7d82a4ba6f587f430b2b7b66f1d34a44f89c39cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834512": [
        {
            "ioc_value": "3999a25f8f0fd8252aa9250fa9bd70aae202f181812cc6c230c8ea2842340f18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834513": [
        {
            "ioc_value": "f25b7f11e9f34ee5d91b3e07ba22925022e8b8b05c3ddf6672ae86e5144481cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834488": [
        {
            "ioc_value": "36131ab94a019b67a88fa167f8e8e48d2ac20a27f2cef6a7c49ce2b102c8cf66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834489": [
        {
            "ioc_value": "e3744b3c8520e462e419b1d63b6474a0c45ae5eb561e66c1d924b00503336533",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834490": [
        {
            "ioc_value": "a6ee7327cc2efe51abd32ac04d601bec931c4dbb91236755882aed715656fb3d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834491": [
        {
            "ioc_value": "9c8b81f82d5870e12062c9c2b31391f79d51dacbb15b15178d6759cbf6b4cadb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834492": [
        {
            "ioc_value": "7d408096bc0b679103c8a9c7d2460d5bebf13a8630e2fdbd5a4953f78c26874a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834493": [
        {
            "ioc_value": "b534ab6313858e92a929eaf85a255382b894e8d2bc01c470994ad88ef915ca12",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834494": [
        {
            "ioc_value": "ef41ea6b089e5a12ce4ae339a5c131349fd89509ce595c781b7c94baf91731ab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834495": [
        {
            "ioc_value": "81c36830ea8e0df4de2e4e7040c551a8b7aeac4dc847268d144adcb2ead49ec1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834496": [
        {
            "ioc_value": "fc7a155c2a563ef21beedb7c1ac1bf2f0488b80b337f986229e126b0a312a5da",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834497": [
        {
            "ioc_value": "2e0b923cbbf6f655fbac594d100421787f03c39bea97c702b1ddf91c19b3e1c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834498": [
        {
            "ioc_value": "8b5a2462019b8faa9dfc06b21d10706718480b9488dbebf12d021980e0c646fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834499": [
        {
            "ioc_value": "8248b493de0c1c6415afecb34bb344b21dc467b026a6381687ad82a2a8938f2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834500": [
        {
            "ioc_value": "9f97d8732ccafdfd352d4da4501d4ce9e6e10c3112f3d10c437543c3ef578fd2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:05:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,elf,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834472": [
        {
            "ioc_value": "a091fb15074d114bcc16a3575c6053535356c3e8576e50e147b7cf3876d33267",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834473": [
        {
            "ioc_value": "b9c1e8700e39c6768be9d6bcb092cd6abe80d4244fc437566b58721cdc7d61ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834474": [
        {
            "ioc_value": "0fd6097b0b306b736249f108b9b51e1574a11c8de23d03b7d615a48ebb0f5139",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834475": [
        {
            "ioc_value": "6775f96c27672c6a44696e3472d42ed8584828b3e5ec15da3a866534a344cc54",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834476": [
        {
            "ioc_value": "3bfe215b14e16e37ac60a6708de8e422590404e2724f90cc16a772366e9afcf9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834477": [
        {
            "ioc_value": "56f1014eb2d145c957f9bc0843f4e506735d7821e16355bcfbb6150b1b5f39db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834478": [
        {
            "ioc_value": "db39502dde5980ff3f36c39fe540b49053d1baf46a393bc0f05fc9b0ccf47951",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834479": [
        {
            "ioc_value": "78f9d62c6ad2d449d640d3f1400c0587779261a7050e6a6af1393c151d3e53c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834480": [
        {
            "ioc_value": "6abc0e6ef8d728a6269f8bd16881b7617dae01e032d38d583fbbbf5fcb6cac73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834481": [
        {
            "ioc_value": "2e714c3cd379fe7e862db59f0b507692a3f6f7280db5bf066c8b6fd5dfbdb39b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834482": [
        {
            "ioc_value": "8738ba49fcd520789569aea7bf7af890741a745c79ae2bef49b93fb46c076c2b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834483": [
        {
            "ioc_value": "77068c6cfaf8b107443522757149d75400248c598f72a2dba35b1dac4639f043",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834484": [
        {
            "ioc_value": "a07e8c676820fa8d0ab78d86071380ecd0e2c1c39857daba2f730748b9f347e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:04:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834456": [
        {
            "ioc_value": "105198b40b332d4c3c2bfb7bd4069258c083160bfd305d3ec7036ea02b9bcb90",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834457": [
        {
            "ioc_value": "156541afe21c9f60150b1376e76e09d3b9b6e1b6ec17340b47efe6479eb2489f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834458": [
        {
            "ioc_value": "db2cbcf7d50b8d7dd77d01f0ee9c7576e2a97c869754f8fb27d712212e7f8fe2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834459": [
        {
            "ioc_value": "b11f81c26acfcc5e7ea8504ea84d48134d84331eacb89c793a9714fc56a05883",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834460": [
        {
            "ioc_value": "613a67af3ca2af098cb854c45ed37b0aeecf0874b90bdafcb2750f4e2ed60016",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834461": [
        {
            "ioc_value": "26841db9c5f0aa186c07462709984a15ff7d867e7cb635d270442cfef3868354",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834462": [
        {
            "ioc_value": "e8c7ceb1a023c5f69b3ad9146c1a674088b7471cdcfb936fd5afba4f45aabac1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834463": [
        {
            "ioc_value": "392bbfa9a1526428e2db1c5bd6fda098ee0303a8ebf2831e66fd68d54f5977ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834464": [
        {
            "ioc_value": "e6a67dedaaefb6edec079a3071b30b771ae1c38d7b17b6da5c32bdea5a448a6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834465": [
        {
            "ioc_value": "eb6dc793918d46556ea79531e49d5e12bb237802218abd8cdaa115752431b07a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834466": [
        {
            "ioc_value": "e74f3881764f0469ac6d67379fbcc837ddbc753d019a0ba35ce97abe550453ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834467": [
        {
            "ioc_value": "5c62626731856fb5e669473b39ac3deb0052b32981863f8cf697ae01c80512e5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834468": [
        {
            "ioc_value": "a3dd850d5c543003baaa5422ef084adff7e3b1691a11eed8c91235ba12be13bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834469": [
        {
            "ioc_value": "4f16317dba9b983bf494892dcd227c0795f3809303e3b2787bf0a2193a318e0c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834470": [
        {
            "ioc_value": "0358e06e72e92d95dbaff4f113018f6bf6fd0fb064108adc349b80d016b207eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834471": [
        {
            "ioc_value": "39e8cc7d47b69341908afda35046dbcccf118271918e69c4012dd35923b55c9f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834439": [
        {
            "ioc_value": "f60912a40674eb272021438937a29a81d02903810e8d694525d4d47ebf238675",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834440": [
        {
            "ioc_value": "088c4dd3fbf7eaab222070cb573c2baab2a5ccf94d078290b64a905de8c4363f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834441": [
        {
            "ioc_value": "6b9af9686fb0979ae5b9a8c65323106f5ea20939ba674c57fb0680e67a72db6f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834442": [
        {
            "ioc_value": "2128a68f2140e72e8cf42fae54a66f8eb228a5393744237cf2a04c72d0310188",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834443": [
        {
            "ioc_value": "7952174eac06c1378e48e48b2d0cba5b1963d0755639721b14a24cfc57ff4798",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834444": [
        {
            "ioc_value": "a65edb1500bf5cd249f38d142f9a10215b0722968a1cc2751f796e7c4b80ebd0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834445": [
        {
            "ioc_value": "470a883c7a88f9469f3b5b4c0a4599fd53539d2d8e3e3cfc333a7b80cd0411cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834446": [
        {
            "ioc_value": "4aecacb55f9ba28712c20ea5bdc4fd7354412829e887d287232a85dabeb696ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834447": [
        {
            "ioc_value": "7004fec9a7015c5d7d60c988e767d60013748b1a4a37b24c154f99b8cd8e4bbb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834448": [
        {
            "ioc_value": "7854cd8e3a652e6007d4aeb930197792a373d469d296b821197d348d31551cdc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834449": [
        {
            "ioc_value": "18c6981b03dc2b828de36ec90dddae8b38e7964dc7b67975bbf7e387c5e48f36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834450": [
        {
            "ioc_value": "de2b583b84d6c1bcdf75456cf9a30972a15278959dd096ef71ac5da1e5ba4fed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834451": [
        {
            "ioc_value": "12de41a24e92382769c75721766bfbf6d8ab0ef3a3915956639833889c72fefa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834452": [
        {
            "ioc_value": "598a67522f79712e4acb52ba57fddcaf4b1cb65e0df388115b5abd36b33ecc2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834453": [
        {
            "ioc_value": "ccca807c491c31c7f36c97b5b2db227f89a3a7875a68e144e38589afac468cba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834454": [
        {
            "ioc_value": "a342b8b6541487fc77ecc93d06b320ac84dd294085a0ab2d255e535c80836d66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834455": [
        {
            "ioc_value": "4759d6fb32ea08bdb2a960b9b58a5db9e4d086af1d2bfb9af1d025513fac23b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834424": [
        {
            "ioc_value": "123a75ee679937b4d4f034a960aca82552f5f6d2a51b3911d758a6643ae94fb8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834425": [
        {
            "ioc_value": "4ea7bccc299aff0b1218651762913debbf94d3da29ea6590a28f510454f0cc33",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834426": [
        {
            "ioc_value": "a59244547b115d491ef67f1080c31b134f64492c3a501781e8f384a65afe976c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834427": [
        {
            "ioc_value": "aa8f864d8047ac73d40fd96cdcf30f327ec66935fe3768502b19c4003186e200",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834428": [
        {
            "ioc_value": "fbbd105403b99ff5d2a31f82c5937ba5f3eb5812feb383c087242258b873a947",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834429": [
        {
            "ioc_value": "9e3a279a34064af8494fecdb79aa511869255e3ebcce848cf04b98ab1643371c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834430": [
        {
            "ioc_value": "7489b95edc756576a81ad16c124d4a6bb66a283171b913b699bdf8d33a21d9ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834431": [
        {
            "ioc_value": "835b5213337c47b10e2ec2c295d9d7b103dc694b78a75dfc4ff22804fd7bcc00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834432": [
        {
            "ioc_value": "893d3e530eb673aad3000011f7e6fc307db099f05a047de1804a82d54f115a9b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834433": [
        {
            "ioc_value": "4391dd816e99cec4240ea8d8cdcc4149e4a4cb974959af078e76868a8983393c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834434": [
        {
            "ioc_value": "98ab43eaa8b58683cee189cf2e2fb90d7517942658821486613ee3f6b9fbb07b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834435": [
        {
            "ioc_value": "41986e9951f61b91609b7242e63e8caa534737d7a44036458fc2c11cdf2e936d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834436": [
        {
            "ioc_value": "f28eff7bb5e7d57228e969bc8fa4229ed94b9b38449ac65251a535a00f9f2d43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834437": [
        {
            "ioc_value": "33d9c131bf1b0e3bd016a5155d3b16f3dcc2961d2332f8119d7a19c981eef83e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834438": [
        {
            "ioc_value": "c7da440df85d7415ae9fa4001fbae675353606504055a9a2b30a9f3950dabc82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834409": [
        {
            "ioc_value": "d815864feee209ce574e62c39f49714ae50ae9625e122138b9688fa23e0ac0b6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834410": [
        {
            "ioc_value": "de730d969854c3697fd0e0803826b4222f3a14efe47e4c60ed749fff6edce19d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834411": [
        {
            "ioc_value": "d351f8af7e2e74313e5783dca8d01fc73401aae597bb92f47abdd8abc817fe82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834412": [
        {
            "ioc_value": "00d72c8a0a892f0c13e77cc2c36b60c1e200be05dd009f35874ae5a7c4f41195",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834413": [
        {
            "ioc_value": "908df2284fdd8708825ab62d180455f9e891d7d650db060c7600b2f9de727748",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834414": [
        {
            "ioc_value": "69e258b9da870faee72e9350ea1770d3525c050396d4e890af017e96bc53bc94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834415": [
        {
            "ioc_value": "a1d14b84a3b82cd8731eb0e43b51c1c426c1444ac1f4282134ef0f4539aa3716",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834416": [
        {
            "ioc_value": "6c45d2ec9cc7641ba42add1f7068e220a1f336844823dfdfc661e27e35efef69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834417": [
        {
            "ioc_value": "ccfcc2c8527a7ba34990968f0fcf722bea6412b20ba1e2dbb416e8cc250d172f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834418": [
        {
            "ioc_value": "7f4b899e9cd384f8e8842541d4728ff21041d8fddacaf6671c2ab60fbe1f4847",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834419": [
        {
            "ioc_value": "a21433f67bd7b089ecde124415271402a3bf496cfffc4a3961609395ea894952",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834420": [
        {
            "ioc_value": "0a26b3ee7dcd5a21129118cbcf9eb5c3dffabf650b22a42678e6df4258acc142",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834421": [
        {
            "ioc_value": "6703690584069b9709c069c8a4eccc08479d0da255dd71313354cc6ed5f16dce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834422": [
        {
            "ioc_value": "f1b3978089f22f9f1e620042235c6ceab133d75be4ba9c5830d25ef09aa306d7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834423": [
        {
            "ioc_value": "cfbc9569b3fa04653fb0f2b7ba9af32ac9b43edad5c32159f1f69253f76acca8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834394": [
        {
            "ioc_value": "94737a470b6d8baa52b9794a200e4677255b40cb3c70570e608696683d6ae456",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834395": [
        {
            "ioc_value": "a649c28970440f4a3b58bab037c418f9930e286a4c57436e278a6b7d996c949d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834396": [
        {
            "ioc_value": "453982e39c4318e2ef81fbe3cb67c77e11837eec07d24a358252ab62a10f21cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834397": [
        {
            "ioc_value": "8cf136767a6e0a75d05df220da10a187c24245ecf56b1b619a1f226c6bca76ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834398": [
        {
            "ioc_value": "236c5938f204e51b5d3485a2d9bfdb75c66f2a7a6da0a4d2b82c276e43569c66",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834399": [
        {
            "ioc_value": "76f474b4cc1c06e8bb614cc61b898703648a3f89687c2caf469ecb71803b00df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834400": [
        {
            "ioc_value": "0518f05b7d77b4dbdd62f70e87f72ff7debc39377376b30ddec189f5e07e29a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834401": [
        {
            "ioc_value": "cf5ac04a33fb5c4b40b0f68728ba3f7bbdce65655324a981c340c555db62aed9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834402": [
        {
            "ioc_value": "9c8795c8cf23dd52d7678a235e1b717a7792ef23aead6dd839fb7da531b07411",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834403": [
        {
            "ioc_value": "8f842daae18d7bbeeeef1cf76f5195037fc90b56cf2430c814b4801b971e0864",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834404": [
        {
            "ioc_value": "a93fcad70380433828f053826848a482611d9e8760601bc6d8e45f6aaed178ed",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834405": [
        {
            "ioc_value": "b7d008366983164fbd1c8e28165972ae1d7ff3893109659fc0b2dfb67b80c8af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834406": [
        {
            "ioc_value": "635f8e19b199652ba6aca8d5b24e6f30b6d3c74b8ff7af423f979adf2dc7d58c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834407": [
        {
            "ioc_value": "f319d89302849adf31a5cf8d91b7b0b3e44d4ba5e54addb3cd0987bcf49aee9c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834408": [
        {
            "ioc_value": "31e6b65f9261c2fefcd769282f03de73af72f86c8ebb25c7fb99bd87c6cd14af",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834380": [
        {
            "ioc_value": "39d4984521a8088c0a0c9e4a3ffa8436ef123063344a2f260c36f551e9f2724d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834381": [
        {
            "ioc_value": "17c17bce513ecfe10ebbf4844bc673115481a9c47154e5db29321bf3defb4778",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834382": [
        {
            "ioc_value": "52a9bd1f5985dc06b068c0b3d1993628a1d5fa463b208d6eb2e5268b01507b10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834383": [
        {
            "ioc_value": "04ad5cb7b9aea4f38d890edb46116c21a719a676843829294bedadc1bec21d18",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834384": [
        {
            "ioc_value": "a530b2d65710a0a8053600174dc786c52035f1eb44a1a7148838066b7397496c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834385": [
        {
            "ioc_value": "ab220f6fbcbdebe306a6b529ea66068daafe81a292564ad823c8c1eba4b30646",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834386": [
        {
            "ioc_value": "b7a45b3b17de08f895a7dfd252280abda18e12041666359389bb2bb32572e578",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834387": [
        {
            "ioc_value": "79491d8d34831c12dc72cf99c1e6287680272d224125c98a1d45a7904a151812",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834388": [
        {
            "ioc_value": "6ee52aec01487816def0cbdac9471d6ec9d59b01a57650685baaa0ac4b740ad4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834389": [
        {
            "ioc_value": "18846cb94d097dcbd0bcb04ace4cf32d76fd935bdfe43f611b63a6c1c23ff390",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834390": [
        {
            "ioc_value": "4cd235661936f47f1623c5f3641a9ae8b5a1bb4581f04cafdbf4499e778fbb26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834391": [
        {
            "ioc_value": "cc5d38a04a6e632eefc79e27e0c061135188a730c2c181fdeb55bb779ede1f2a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834392": [
        {
            "ioc_value": "cc4207bb68ce88d7d769a3d3c858c4ad4c0edae10dd5925135db05ca0613c902",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834393": [
        {
            "ioc_value": "2ce52e57bb2ca339160933777ea3492c314cbf5ddad63133f9f73350a0d7067d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834378": [
        {
            "ioc_value": "5ce962907621dd4ac2455b2f921b5f56c035899cd81da9ec6eb646a8a7e985c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834379": [
        {
            "ioc_value": "310db4ae1c7dc6f3da03565b8338830428d293fa5511738e21280f18e02aca19",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834373": [
        {
            "ioc_value": "4b4315270185349dbbaf2245d14b5f9779035ce28f42cd6eac7bc2930827a033",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834374": [
        {
            "ioc_value": "1b7362a43c58330a9bcb1127ef8d1e049960e4dc1ce128dbffc30916ae03e979",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834375": [
        {
            "ioc_value": "23d2d0e180a8d1e673d378cb6fe4da8af173b2fac30bbc09150f49382b4ec83e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834376": [
        {
            "ioc_value": "ba9d4c8652d0876379a5ad0e64d3456184f3fda250453078cedf128ae16cd1b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834377": [
        {
            "ioc_value": "2900d59f25d7a44eec889705c5466c387314e130831986a9ce471c73a30eaa7e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834361": [
        {
            "ioc_value": "c3631de2c86e9347eb1ba74d2d8aad47c8dbb00ac79bdcae2b29551c936327b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834362": [
        {
            "ioc_value": "29be8bcff1035e5629e2e2f48b01a261bf42461cc5dd6c32a14d3421fd05ec8b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834363": [
        {
            "ioc_value": "528cc55c23469158120e76655979e038a3317d864360bb61f668d6bf74fc0dfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834364": [
        {
            "ioc_value": "f0c65e69102860395ac7b6d45ccf52a5e6eff8ea14dc79ca1f678cef08815d2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834365": [
        {
            "ioc_value": "d47df6063c4c4274c09afe4043ce11ecf71fc9fb9729238528c590ad11702b50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834366": [
        {
            "ioc_value": "f63188ba0b2ece396f32d389d062fde19e000d7286e72da8fd616cee80173538",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834367": [
        {
            "ioc_value": "de92a982372f5a9b6c8dd73a6777bccc1e21094b6566659a540f837fcd6b1290",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834368": [
        {
            "ioc_value": "efc2353f18ac2d57436afa5a544e921849ee98bf3138c08bfdafca85b7470b22",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834369": [
        {
            "ioc_value": "4ae328b9c180d8451c313001c7af0f384f43cad07e6504b32a23c002919cdd40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834370": [
        {
            "ioc_value": "4605148d9453d5ad0487cc1a06a014451c48e3c03af49abcdf341207518ce1c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834371": [
        {
            "ioc_value": "6faa325bc14f737261a64bdf07d7ed7ebedd5f20edb26e67696170282bf79dfa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834372": [
        {
            "ioc_value": "06449365e4cb6b92692c82f8e60d6e7ec781e85e3883e35067f25f27d68b2bf3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834351": [
        {
            "ioc_value": "b47a0e404db57b2c194028787cac817b4c99dff2803f2dda3dc42eb718832ac7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834352": [
        {
            "ioc_value": "7d8cf6648ab9c3b84fabad7846d82effaf91e09bfeb3fbf3c434e1a68c57e5c2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834353": [
        {
            "ioc_value": "98053cb9d6f44fe19674e808ebfcb3c99cbbdbd9e7730a96482c48a232692db4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834354": [
        {
            "ioc_value": "74157056776afdd7875c23a5daf8e14d836101d887cbfb42174361c0e3aaac7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834355": [
        {
            "ioc_value": "d82cbb5cb6f84b421d9c21148926599614b973466bc90cdaafcf63be0d334a1e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834356": [
        {
            "ioc_value": "d10e606b96b13872dcd4c88bfc46c53927c7753afdfe09f0c168988a5105053f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834357": [
        {
            "ioc_value": "6cbc9b8347026c9564df80dcfcd3694d1b63fbdbb642e80318a73b93bf9e9a48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834358": [
        {
            "ioc_value": "6a98c669a7d413058f1f57037f95459e8485ec0dbda01509f7a5b4065a82a6c8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834359": [
        {
            "ioc_value": "c062d6d46d54dea65cc6dcd6b9f6530bbec04083045e2990e25ab857150ad330",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834360": [
        {
            "ioc_value": "d1943d2546876bdf572e50972bc20f352fcf962043de223275055e9b03010535",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834339": [
        {
            "ioc_value": "f03b00913b35c006a8709060c9be4b8e28946abecc0bb14df0e2df4bc2c45a94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834340": [
        {
            "ioc_value": "69eeb97e5272fe54c3b1624862e88342b08fb3cf6cd7bb7ec66521bab3de4da8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834341": [
        {
            "ioc_value": "6ef5997c96a79c41c8f2cfb2c3f56d33dfec8dd76057ec40835589d9d3d3c591",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834342": [
        {
            "ioc_value": "5a3c18ecff4ce4ec144c50a1c84c12266b8f259da39e14840ce555735e11d18c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834343": [
        {
            "ioc_value": "7d55c1e2bd8380517a3a5d34abec7c47c675cece61232026a36deea99263cd84",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834344": [
        {
            "ioc_value": "40d38247350ba9eb25832e33b548e6da520c71b0fe021c5c318324e4baf8f897",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834345": [
        {
            "ioc_value": "ea08b01733c4aebcdf8aba6bbbc3d9b6a4a9d611c938b23a6a5e56d3a09b74cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834346": [
        {
            "ioc_value": "ebda0be6e08f473e3127f7cd870f8c75283473af83205c6914df9b1b0657c714",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834347": [
        {
            "ioc_value": "ce73822504f2166bb884c5ff5717c282e35257196b60a9d382c9eb40140e8535",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834348": [
        {
            "ioc_value": "3f95b93c2a63b2edfbdf656a76100bdd91d1805cfeda369e3817e29289f0721a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834349": [
        {
            "ioc_value": "a55cc627387c95cace97a5357cdbff178814a3a7e7f7007b527add07c163b6a6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834350": [
        {
            "ioc_value": "1ef2b63e5983da066b6634e7722b04535d146889b90e51f18fb06cfe796e009e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834325": [
        {
            "ioc_value": "140471e87d9c698e285db693971d7deb2c4e32662237237d89a338c20ff6bdf9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834326": [
        {
            "ioc_value": "1feee87449f929e84e88eedf442fd36303cc7b885b4e3ed07a9f1b4780929f50",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834327": [
        {
            "ioc_value": "81f06e74f63da97046acdc3ddf030b1a724b90e5b82114ce872c7febe7daef74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834328": [
        {
            "ioc_value": "65f9ca9ec8933209d7deb0e9e2d2ff2ca9359efd2f0d15e7d73f76ee6cd7e7b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834329": [
        {
            "ioc_value": "de746e47ba5d8ec56ec0e787258b42b128378069655b4f4a91c1f0b3a42a6e34",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834330": [
        {
            "ioc_value": "13d15dafaa15e713e53d150f558e903616797c5dec6adc588ece5d2abbf85e45",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834331": [
        {
            "ioc_value": "ec88ed2999570f1d3d55ca161a9a2fe5effbd69668a6c04b6f72694179d3795e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834332": [
        {
            "ioc_value": "9fbf25131fd47c7a0ef72b3ffa7887be4ccf7b8cb0190460492e0991c21f1d22",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834333": [
        {
            "ioc_value": "f86e9cb02b7d6d21bbcb1f6409c8f20efc3840c1ce6d20669f7b841df7f1a4be",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834334": [
        {
            "ioc_value": "cd2e56122c741187e5ba6303dd3f8b3b67e5312575023e62386c273e5ee57202",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834335": [
        {
            "ioc_value": "e03c0db578f415721513dd70a60019fff4fe0b0a39c688b8fc249e2908c4e9cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834336": [
        {
            "ioc_value": "68d36736f8b77205962d5b812a93ed741da26da3492f57de8c91826278b9d997",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834337": [
        {
            "ioc_value": "f4159bdee293286b234393f09974fcd6dab878f538208295c46d79cab2bd0e82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834338": [
        {
            "ioc_value": "6a7ab094e534b9637458909ca8da421ced59540ede6de4587c166444219f532b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834313": [
        {
            "ioc_value": "9a7b93f77dd09503f0ead9fa739176d7879b4bb0a8b8adc90f8ed10e1174b239",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834314": [
        {
            "ioc_value": "759305a8012dbf56252b7b02c0554e6c3739b3c06e065011a30c79a3f9e8be6e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834315": [
        {
            "ioc_value": "142c5302ae8e2254796103f92499fa4467db9c1349b04e1c3496c3c84d7694bf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834316": [
        {
            "ioc_value": "8d18d616ba59259f741c84e3bcae7f0116eb6e5a71f0396e3986b767c46518a5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834317": [
        {
            "ioc_value": "eb9894b4a6eeb29a321f62d0b0981647dee58c9c261f1da59d140a144ad28731",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834318": [
        {
            "ioc_value": "2fcc402a01269b951d19f574969f82b44082e14c112b4e451523c592d6db4d48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834319": [
        {
            "ioc_value": "8f08a5515ffc9fd24222ac562c9eb58cd5ad7a859e4449040e0dc55a6a7dfc28",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834320": [
        {
            "ioc_value": "4bcaab305fab4feec2e5b250083a4f95da373dcb39ef02c5b726e3fdc3a83367",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834321": [
        {
            "ioc_value": "e43ce71e18abf6850d886e55a9966e5b517bf9656c8a31a8c022f64fcf7f8d03",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834322": [
        {
            "ioc_value": "4d7a6316b532cd29060d2f6d086cd932cb90880899c3fc4f6e29c1fa5918c163",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834323": [
        {
            "ioc_value": "c8418f60d313b1f854a6fc6c3c0cd63f351b2993f44e3ad56bb96eb992ae840f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834324": [
        {
            "ioc_value": "9e1ddf491227a781f3914d8657769c7ec35394dbcfdddc87f54c40e2db1636b3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834300": [
        {
            "ioc_value": "3c07c8d01b67e870393eb03e5fd70f4730a9789976a47deae4c30386906c7922",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834301": [
        {
            "ioc_value": "d9775fff49ee094e32608ff1fa17214cb4314237516f550c4e1cc97ba059f05f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834302": [
        {
            "ioc_value": "89fc51502d3de74f1354b1e9d104fc04f2498c58f8c38dbe575f0363f4d8e1f4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834303": [
        {
            "ioc_value": "bc209326df8a240397db8081318b04a4152aff023fe0f3e7e4dafc2296ca7601",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834304": [
        {
            "ioc_value": "614ac476bac559fc8ad177e5e74988da7d12db94e91906abc71155fdc706b120",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834305": [
        {
            "ioc_value": "162a2db401025a6ba181af6c372ca29bff172000422e7699e58ca019172834db",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834306": [
        {
            "ioc_value": "8531c673cc8412f891f3fa70cd5ea00b5485ccf42a567a2fb1106e7e5304e165",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834307": [
        {
            "ioc_value": "1a61b370663be4124a4cbcacfd358e5a583a54aa49474174333aeb43d7360d1d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834308": [
        {
            "ioc_value": "bc304ca3edb92e8dd93cf6cdb572894973d1e036f06375996317fb84c2801403",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834309": [
        {
            "ioc_value": "ffbe3bbbd5671b7bf840c0911a78ee01dcc2f0741677e74ee434873c5e9bcc43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834310": [
        {
            "ioc_value": "d30488c4266693070d2db135203513b4e5430bfff4e4c414afba797ab3de14a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834311": [
        {
            "ioc_value": "83babb4948e67eaeae8d199019777bce14aa574d53fa8eee147a0b2147e4bebd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834312": [
        {
            "ioc_value": "2e7287a9a44bad7dc30e80c1e28449be8fe5d64f00abcbbf7c1d6bc9f2516389",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834297": [
        {
            "ioc_value": "7de36ce97ba0da128ce80fd2f2bb279dc8d116766cd2303ae914ed22f5643f69",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834298": [
        {
            "ioc_value": "de8cbfe0366a0c2a1921aed25f0110cc7c800c04dfff985c1de27dc047bf715e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834299": [
        {
            "ioc_value": "9928da49334113c458714bd518941cf3dfe0052f2021ec0ee8368beed6a5eb3b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.akira",
            "malware_alias": "REDBIKE",
            "malware_printable": "Akira",
            "first_seen_utc": "2026-06-20 16:02:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Akira%20Ransomware",
            "tags": "akira,note,ransomnote,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834293": [
        {
            "ioc_value": "4q74zsh8.raftarsazmani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 14:51:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834289": [
        {
            "ioc_value": "58shz66o.tahlilsazeha.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 13:34:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834288": [
        {
            "ioc_value": "zxe9u0st.sigaribetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 13:33:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834287": [
        {
            "ioc_value": "rurhmgw2.readthisintro.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 12:32:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834285": [
        {
            "ioc_value": "43.143.244.134:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 11:46:49",
            "last_seen_utc": "2026-08-28 08:08:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834284": [
        {
            "ioc_value": "139.196.89.43:10443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 11:46:31",
            "last_seen_utc": "2026-07-22 08:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834282": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/savina-41/mcv4f-jp5/launching",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 10:48:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834281": [
        {
            "ioc_value": "http://mathlah.com:9432",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-20 10:10:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/25a0bddff7a3254104b66d4e84010c59ef192924cae703655f7fb592640d8d5d/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834279": [
        {
            "ioc_value": "5.188.61.49:44443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-06-20 09:45:43",
            "last_seen_utc": "2026-08-14 08:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834278": [
        {
            "ioc_value": "47.83.254.175:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-20 09:45:38",
            "last_seen_utc": "2026-07-20 18:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834277": [
        {
            "ioc_value": "45.32.64.12:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-20 09:45:31",
            "last_seen_utc": "2026-08-19 18:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834276": [
        {
            "ioc_value": "36.50.85.69:1235",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-20 09:45:20",
            "last_seen_utc": "2026-08-06 18:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834275": [
        {
            "ioc_value": "217.60.195.176:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-20 09:45:10",
            "last_seen_utc": "2026-08-11 18:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834274": [
        {
            "ioc_value": "198.23.185.136:20600",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 09:44:18",
            "last_seen_utc": "2026-07-20 08:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834273": [
        {
            "ioc_value": "188.253.104.174:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 09:44:08",
            "last_seen_utc": "2026-07-21 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834272": [
        {
            "ioc_value": "147.93.191.75:30400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-20 09:43:25",
            "last_seen_utc": "2026-07-22 08:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834271": [
        {
            "ioc_value": "87khq5gx.ravabetensani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 09:32:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834270": [
        {
            "ioc_value": "yek1.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 09:11:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834250": [
        {
            "ioc_value": "185.89.249.66:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:11:24",
            "last_seen_utc": null,
            "confidence_level": 93,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1834257": [
        {
            "ioc_value": "152.236.7.10:27177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-20 09:11:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834269": [
        {
            "ioc_value": "15.235.159.82:56005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 09:06:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e58ed7df39ec67a18fd90454d3fde120e57aeb06f7ab8f0b8c17d73e4c3a3ad6/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834268": [
        {
            "ioc_value": "107.172.232.71:5002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 09:02:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/994a77fad92b7ba173483358efc7afc3bae565f9258b98d3c5c1a0fcad948d6b/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834264": [
        {
            "ioc_value": "154.37.215.213:88",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834265": [
        {
            "ioc_value": "111.231.173.74:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:50",
            "last_seen_utc": "2026-06-22 06:39:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1873433027",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834266": [
        {
            "ioc_value": "176.121.49.225:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834267": [
        {
            "ioc_value": "89.169.183.76:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834262": [
        {
            "ioc_value": "8.152.2.86:9998",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:32",
            "last_seen_utc": "2026-06-22 02:00:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834263": [
        {
            "ioc_value": "45.140.213.6:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:32",
            "last_seen_utc": "2026-06-24 22:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1580103824",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834261": [
        {
            "ioc_value": "51.91.103.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-20 09:01:29",
            "last_seen_utc": "2026-06-24 22:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834254": [
        {
            "ioc_value": "7cj04th6.shartland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 07:38:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834253": [
        {
            "ioc_value": "v8xihekm.ramzfile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 07:32:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834252": [
        {
            "ioc_value": "13i466gp.shart303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 07:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834251": [
        {
            "ioc_value": "shart303.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 07:11:09",
            "last_seen_utc": "2026-06-21 18:32:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834247": [
        {
            "ioc_value": "book-imageport.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-20 06:48:59",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834244": [
        {
            "ioc_value": "http://103.186.77.95:49560/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-20 06:26:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.186.77.95",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834245": [
        {
            "ioc_value": "http://72.255.3.39:41763/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-20 06:26:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.3.39",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834246": [
        {
            "ioc_value": "http://153.117.13.227:34153/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-20 06:26:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.13.227",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834113": [
        {
            "ioc_value": "212.127.90.201:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-20 05:50:00",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834114": [
        {
            "ioc_value": "147.139.136.75:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-20 05:49:59",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834115": [
        {
            "ioc_value": "31.132.90.3:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-20 05:49:59",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834116": [
        {
            "ioc_value": "115.248.8.65:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-20 05:49:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834117": [
        {
            "ioc_value": "167.233.68.137:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-20 05:49:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834118": [
        {
            "ioc_value": "5.40.229.236:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "eval,lua,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834119": [
        {
            "ioc_value": "39.34.134.209:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "config,rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834120": [
        {
            "ioc_value": "103.217.176.73:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "config,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834121": [
        {
            "ioc_value": "213.209.159.66:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:56",
            "last_seen_utc": "2026-07-01 19:00:28",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834122": [
        {
            "ioc_value": "64.89.163.82:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1834146": [
        {
            "ioc_value": "80.96.113.59:8060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834147": [
        {
            "ioc_value": "64.89.163.212:8060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:51",
            "last_seen_utc": "2026-07-09 04:47:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834148": [
        {
            "ioc_value": "64.89.163.212:8058",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834150": [
        {
            "ioc_value": "coldtechreview.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:50",
            "last_seen_utc": "2026-07-09 04:48:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834149": [
        {
            "ioc_value": "64.89.163.212:8057",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-20 05:49:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "XMRig",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1834151": [
        {
            "ioc_value": "node54group.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-20 05:49:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80",
            "tags": "ClickFix,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834152": [
        {
            "ioc_value": "node66group.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-20 05:49:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80",
            "tags": "ClickFix,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834153": [
        {
            "ioc_value": "http://google2oauth.com/google.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-20 05:49:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80",
            "tags": "ClickFix,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834154": [
        {
            "ioc_value": "google2oauth.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-20 05:49:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80",
            "tags": "ClickFix,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834155": [
        {
            "ioc_value": "172.93.185.254:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-20 05:49:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/b6d4ad0231941e0637485ac5833e0fdc75db35289b54e70f3858b70d36d04c80",
            "tags": "ClickFix,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834158": [
        {
            "ioc_value": "https://imgur.media/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/imgur.media",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834172": [
        {
            "ioc_value": "elijahwgummer.baby",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979",
            "tags": "clickfix,hta-polyglot,loader,msix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834173": [
        {
            "ioc_value": "http://www.kongographics.com/200",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979",
            "tags": "clickfix,hta-polyglot,loader,msix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834174": [
        {
            "ioc_value": "http://cdn.librarygrades.com/200.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979",
            "tags": "clickfix,hta-polyglot,loader,msix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834171": [
        {
            "ioc_value": "https://elijahwgummer.baby/Monkey-e669fb0-a99aeeab-5e65331880-0b06979",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979",
            "tags": "clickfix,hta-polyglot,loader,msix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834142": [
        {
            "ioc_value": "c343f53916747c5b8a60aed844b1882863f432af65867297edf1913f167c4f68",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/c343f53916747c5b8a60aed844b1882863f432af65867297edf1913f167c4f68",
            "tags": "clickfix,crypter,rundll32,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834143": [
        {
            "ioc_value": "e8ee3e3e25e9deef039131b7e66855a2e614d36f395b582f9b7e6365ffd61484",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/c343f53916747c5b8a60aed844b1882863f432af65867297edf1913f167c4f68",
            "tags": "clickfix,crypter,rundll32,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834145": [
        {
            "ioc_value": "api-ext.bixbitemarketing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-20 05:49:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish,tds",
            "anonymous": 0,
            "reporter": "rmceoin"
        }
    ],
    "1834144": [
        {
            "ioc_value": "dgdf.nimographic.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:35",
            "last_seen_utc": "2026-06-22 04:27:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/c343f53916747c5b8a60aed844b1882863f432af65867297edf1913f167c4f68",
            "tags": "clickfix,crypter,rundll32,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834175": [
        {
            "ioc_value": "13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13420d64ce091f6dc0505d5a2ca5858f6080f3d91580459c2284bd68fdcb1979",
            "tags": "clickfix,hta-polyglot,loader,msix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1834177": [
        {
            "ioc_value": "https://vigipart.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/vigipart.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834180": [
        {
            "ioc_value": "217.60.195.144:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-20 05:49:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1834188": [
        {
            "ioc_value": "http://153.117.15.187:54011/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-20 05:49:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.15.187",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834189": [
        {
            "ioc_value": "http://223.123.124.121:60095/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-20 05:49:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.124.121",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834190": [
        {
            "ioc_value": "http://45.230.66.112:11404/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-20 05:49:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.230.66.112",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834195": [
        {
            "ioc_value": "https://prguru.pk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:13",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/prguru.pk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834235": [
        {
            "ioc_value": "https://bullpcn.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-20 05:49:12",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bullpcn.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834242": [
        {
            "ioc_value": "47.243.155.184:771",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 04:26:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1603899e2cbe71abad453b7c2735a294b93e23e4bedcb9e9f8e74b08b2564efb/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834241": [
        {
            "ioc_value": "lc5lya7l.romabetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 04:20:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834240": [
        {
            "ioc_value": "http://154.91.75.105/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 04:20:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834239": [
        {
            "ioc_value": "158.160.75.185:42757",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-20 04:20:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834238": [
        {
            "ioc_value": "47.243.155.184:770",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 04:20:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834237": [
        {
            "ioc_value": "47.86.32.238:10087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 04:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834236": [
        {
            "ioc_value": "64.81.30.35:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-20 04:20:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834233": [
        {
            "ioc_value": "102.209.117.153:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-20 04:00:22",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834231": [
        {
            "ioc_value": "3e90a82f5360cae528a12c76d22fe6a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834228": [
        {
            "ioc_value": "63ffc60f431eb604910d605d8d72754b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-20 03:39:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834229": [
        {
            "ioc_value": "55f65c7a077407e09b5bf46c0d1885e88759583bb56ee3c5495804d0da127dab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834230": [
        {
            "ioc_value": "6bfb4ccd96be883142ec5bb5f35846feaca79b81",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834226": [
        {
            "ioc_value": "d34be339fd8c47756de5b4e6c402612a333c50b9e1fa4bffdd32cb3f9d5c1d74",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-20 03:39:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834227": [
        {
            "ioc_value": "e2b60f4ee39925843ad191a57064d35055d0cf02",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-20 03:39:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834223": [
        {
            "ioc_value": "ef0e9301403d58a4729aaa9cd81abf942b1c8a301a651b1512bc2b5d9e599303",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834224": [
        {
            "ioc_value": "0b8b5c278750f6e4a14fde3495cd403eddb9f2bc",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834225": [
        {
            "ioc_value": "93e61d5a877bbb937e885d3ca385ac8a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834220": [
        {
            "ioc_value": "c2c8ed567f9c65686c4f6599e9259bd31d2ad984c24cf17ad9ebd9d594dcb0ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834221": [
        {
            "ioc_value": "4ccba704170269b7c7ca1ecafe2ed57fd11dcba8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834222": [
        {
            "ioc_value": "10cf94eef24c8932d28698e02faf43e5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834217": [
        {
            "ioc_value": "2e16f46c063ff79af0b312364375706e98674b5869a4c9bb9f96a14b77277c5b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834218": [
        {
            "ioc_value": "5801812345faf457a9be2ede940097ad1e88a626",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834219": [
        {
            "ioc_value": "2470c9c99f13ded1f5b86a2fabde0780",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834216": [
        {
            "ioc_value": "1702f6476993eb605fe93eebbbc5fc42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834213": [
        {
            "ioc_value": "e80c4a3ceb6417d7194183326d498ea5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834214": [
        {
            "ioc_value": "ce990051cbbec61b7e5fda012e29bc9776d0f298cc586c20ed13f949f34db37b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834215": [
        {
            "ioc_value": "409af51ffa0d10f41374a2b1f3517b98b950ed00",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834210": [
        {
            "ioc_value": "63ab7828b518397c0b01596c92a0a0b0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834211": [
        {
            "ioc_value": "8408c932e1f5f49509bdb4a3d27b358de7309a660a4fa01841dbf0f2d1b4bf40",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834212": [
        {
            "ioc_value": "d9c52e67f65c25c3933ca39fee55d0797b3c2c9d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834207": [
        {
            "ioc_value": "d3e37de6dd2dc8ce1bb72536259529cc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834208": [
        {
            "ioc_value": "b8431716195045f269fabd7d4e58fc37d24281a7bc0e4af3ce5424276add5792",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834209": [
        {
            "ioc_value": "c7bb21bf48c0c879b9f382143b94c9e16bd6c81e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834205": [
        {
            "ioc_value": "798138899fae930a2eb5d70aafd8ba622fd1674fec571e282e9c9589b39cffef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834206": [
        {
            "ioc_value": "9c9b962deead54c4364d378324e1f4ec603ab81c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-20 03:39:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834203": [
        {
            "ioc_value": "d7784fdaca930daf2e664a388ce2c9fed3ca7ca4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834204": [
        {
            "ioc_value": "9d9e293be0bc3323060ff6271cc00d4f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834201": [
        {
            "ioc_value": "6640820a921a5235ffa3448c7640039c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834202": [
        {
            "ioc_value": "8d347ecef1e388d150a55d84f0397dc39be24d22c456681eb57ca23580f4083f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834199": [
        {
            "ioc_value": "aa40a70d1dbf91af1d2bfc5209417fadb3b4ad2192a4ea4cbf802e2b10d5b0ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834200": [
        {
            "ioc_value": "791618590c32a2164037f241b401f4698e37c239",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-20 03:39:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1834198": [
        {
            "ioc_value": "g6gib60b.raftarsazmani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 03:31:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834197": [
        {
            "ioc_value": "0odlgi4q.motuntakhasosi.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 03:25:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834196": [
        {
            "ioc_value": "e57ra5jx.plinkobet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-20 03:11:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834187": [
        {
            "ioc_value": "23.141.12.111:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 23:46:13",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834186": [
        {
            "ioc_value": "149.88.66.234:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 23:46:03",
            "last_seen_utc": "2026-07-23 08:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834185": [
        {
            "ioc_value": "116.204.36.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 23:45:54",
            "last_seen_utc": "2026-07-31 10:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834184": [
        {
            "ioc_value": "byz28tfk.rasmfani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 23:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834183": [
        {
            "ioc_value": "i83pv2vx.ravabetensani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 23:08:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834182": [
        {
            "ioc_value": "sjn9cbzs.betvarzeshkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 22:13:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834179": [
        {
            "ioc_value": "tarbiyateslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 21:07:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834178": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/arinao7/86227780-d251hllg",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 20:34:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834176": [
        {
            "ioc_value": "owxoxg4v.jetbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 20:25:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834170": [
        {
            "ioc_value": "97.74.92.237:63334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-19 19:45:40",
            "last_seen_utc": "2026-09-01 02:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834169": [
        {
            "ioc_value": "45.81.243.44:7089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 19:45:09",
            "last_seen_utc": "2026-08-07 18:45:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834168": [
        {
            "ioc_value": "211.235.43.192:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 19:44:17",
            "last_seen_utc": "2026-09-01 02:44:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834167": [
        {
            "ioc_value": "205.209.106.158:5228",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 19:44:13",
            "last_seen_utc": "2026-08-12 08:45:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834165": [
        {
            "ioc_value": "2.27.5.37:8912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 19:44:09",
            "last_seen_utc": "2026-07-20 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834166": [
        {
            "ioc_value": "2.27.5.42:6448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 19:44:09",
            "last_seen_utc": "2026-07-20 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834164": [
        {
            "ioc_value": "198.23.185.136:60",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 19:44:06",
            "last_seen_utc": "2026-07-19 18:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834163": [
        {
            "ioc_value": "194.48.251.24:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-19 19:44:04",
            "last_seen_utc": "2026-07-21 08:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834162": [
        {
            "ioc_value": "155.103.71.115:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 19:43:26",
            "last_seen_utc": "2026-07-21 08:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834161": [
        {
            "ioc_value": "141.98.10.150:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 19:43:18",
            "last_seen_utc": "2026-07-19 18:43:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834160": [
        {
            "ioc_value": "107.172.238.13:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 19:43:09",
            "last_seen_utc": "2026-07-20 08:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834159": [
        {
            "ioc_value": "102.220.160.222:2025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 19:43:03",
            "last_seen_utc": "2026-07-29 08:56:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834157": [
        {
            "ioc_value": "s18b1z48.tarahisystem.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 19:08:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834156": [
        {
            "ioc_value": "tarahisystem.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 19:06:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834141": [
        {
            "ioc_value": "0q26dscq.anodaz.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 17:26:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834136": [
        {
            "ioc_value": "2rvmsbh4.bet303.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 16:28:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834135": [
        {
            "ioc_value": "fvkyh2up.testpaye.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 16:13:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834134": [
        {
            "ioc_value": "81.69.253.132:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 15:46:33",
            "last_seen_utc": "2026-07-25 08:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834132": [
        {
            "ioc_value": "47.242.0.207:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 15:46:26",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834133": [
        {
            "ioc_value": "47.242.0.207:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 15:46:26",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834131": [
        {
            "ioc_value": "114.134.187.38:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 15:45:55",
            "last_seen_utc": "2026-09-01 02:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834130": [
        {
            "ioc_value": "aygi86ej.tahlilsazeha.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 15:08:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834124": [
        {
            "ioc_value": "tasknew35630.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 14:50:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b57c3186303f4a56ac70699bdef1aede047db5a118370f93df0171d9d2add0d6/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834123": [
        {
            "ioc_value": "bogota123.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 14:40:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3fc4b44fdddb35fc904b4aa619de1cacfe1f73490633e22fd163007fe59b2353/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834108": [
        {
            "ioc_value": "173.231.188.244:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 13:55:35",
            "last_seen_utc": "2026-07-30 18:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d113f72b9248e3a89d72d1238a8465af7857822b82951681cff22391ffff3039/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834102": [
        {
            "ioc_value": "http://27.215.55.164:43326/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 13:46:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.215.55.164",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834103": [
        {
            "ioc_value": "http://223.123.42.234:43318/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 13:46:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.42.234",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834104": [
        {
            "ioc_value": "http://223.123.38.127:60991/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 13:46:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.38.127",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834105": [
        {
            "ioc_value": "http://103.141.5.137:41713/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 13:46:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.141.5.137",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834100": [
        {
            "ioc_value": "64.90.3.208:7891",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 11:46:53",
            "last_seen_utc": "2026-07-23 08:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834098": [
        {
            "ioc_value": "185.92.190.214:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 11:46:35",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834099": [
        {
            "ioc_value": "185.92.190.216:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 11:46:35",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834097": [
        {
            "ioc_value": "www.api-aws.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 11:46:11",
            "last_seen_utc": "2026-07-20 14:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834047": [
        {
            "ioc_value": "xeno.getslax.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 11:36:37",
            "last_seen_utc": "2026-06-19 09:29:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834067": [
        {
            "ioc_value": "khabarraja.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-19 11:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64767a09cce6d538bea2d11e0c59f47abd05f6e57f7a88b2b7a864c782cc1041/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834074": [
        {
            "ioc_value": "flowmasterservices.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-19 11:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b699a24254fdb28c85fd40c1019703c40fce07ec4bad324bcbc891aad28159b2/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834080": [
        {
            "ioc_value": "https://beroniw.com/hwkOP5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:35",
            "last_seen_utc": "2026-08-07 05:14:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,FakeCaptcha,NetSupport,PowerShell",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834079": [
        {
            "ioc_value": "https://jobs.trabajoseguro.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 11:36:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jobs.trabajoseguro.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834081": [
        {
            "ioc_value": "http://91.92.34.228/test22.txt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:33",
            "last_seen_utc": "2026-06-19 11:16:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,FakeCaptcha,NetSupport,PowerShell",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834082": [
        {
            "ioc_value": "golviewcheckus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:32",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/jay-salihov/ea2ec22039ad225094e9e25260f4af89",
            "tags": "ClickFix,NetSupport,PowerShell",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834083": [
        {
            "ioc_value": "tiqwtkmma.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:32",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/jay-salihov/ea2ec22039ad225094e9e25260f4af89",
            "tags": "C2,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834084": [
        {
            "ioc_value": "zbxcgtqt.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:31",
            "last_seen_utc": "2026-08-30 00:06:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/jay-salihov/ea2ec22039ad225094e9e25260f4af89",
            "tags": "C2,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834085": [
        {
            "ioc_value": "coraline.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 11:36:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1834090": [
        {
            "ioc_value": "beroniw.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:29",
            "last_seen_utc": "2026-07-28 07:21:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/jay-salihov/ea2ec22039ad225094e9e25260f4af89",
            "tags": "ClickFix,clipboard-hijack,FakeCaptcha,NetSupportRAT",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834091": [
        {
            "ioc_value": "91.92.34.228:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-19 11:36:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://gist.github.com/jay-salihov/ea2ec22039ad225094e9e25260f4af89",
            "tags": "ClickFix,dropper,fileless,NetSupportRAT",
            "anonymous": 0,
            "reporter": "alpaco"
        }
    ],
    "1834096": [
        {
            "ioc_value": "https://holopebamiy.bond/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 11:36:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/holopebamiy.bond",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834094": [
        {
            "ioc_value": "https://prd.rzrrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 11:24:45",
            "last_seen_utc": "2026-06-26 14:25:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834095": [
        {
            "ioc_value": "prd.rzrrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 11:24:45",
            "last_seen_utc": "2026-06-26 14:25:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834092": [
        {
            "ioc_value": "https://prd.harussm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 11:24:33",
            "last_seen_utc": "2026-06-19 11:30:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834093": [
        {
            "ioc_value": "prd.harussm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 11:24:33",
            "last_seen_utc": "2026-06-19 11:30:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834086": [
        {
            "ioc_value": "eub0atxx.tafsirnasiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 11:06:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834078": [
        {
            "ioc_value": "borb5c9q.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 10:11:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834077": [
        {
            "ioc_value": "http://flowmasterservices.com:4437",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-19 10:01:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b699a24254fdb28c85fd40c1019703c40fce07ec4bad324bcbc891aad28159b2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834073": [
        {
            "ioc_value": "updateyoursoft.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834072": [
        {
            "ioc_value": "freesoftupdater.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834071": [
        {
            "ioc_value": "holopebamiy.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:52:20",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834070": [
        {
            "ioc_value": "mamamiadomio.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:52:19",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834069": [
        {
            "ioc_value": "kongographics.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:48:56",
            "last_seen_utc": "2026-06-19 20:19:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834068": [
        {
            "ioc_value": "cdn.librarygrades.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:48:19",
            "last_seen_utc": "2026-06-19 20:19:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834066": [
        {
            "ioc_value": "91.92.242.67:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 09:45:54",
            "last_seen_utc": "2026-07-19 18:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834063": [
        {
            "ioc_value": "77.110.119.172:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-19 09:45:43",
            "last_seen_utc": "2026-08-15 18:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834064": [
        {
            "ioc_value": "78.108.56.64:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 09:45:43",
            "last_seen_utc": "2026-07-19 18:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834065": [
        {
            "ioc_value": "78.108.57.24:8912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 09:45:43",
            "last_seen_utc": "2026-07-19 18:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834062": [
        {
            "ioc_value": "167.99.78.100:4437",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-19 09:45:37",
            "last_seen_utc": "2026-08-01 10:02:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64767a09cce6d538bea2d11e0c59f47abd05f6e57f7a88b2b7a864c782cc1041/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834061": [
        {
            "ioc_value": "http://khabarraja.com:4437",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-19 09:45:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/64767a09cce6d538bea2d11e0c59f47abd05f6e57f7a88b2b7a864c782cc1041/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834060": [
        {
            "ioc_value": "45.32.66.51:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 09:45:22",
            "last_seen_utc": "2026-07-19 18:45:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834059": [
        {
            "ioc_value": "198.23.185.82:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 09:44:13",
            "last_seen_utc": "2026-07-25 18:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834058": [
        {
            "ioc_value": "194.116.236.239:4068",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 09:44:10",
            "last_seen_utc": "2026-07-19 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834057": [
        {
            "ioc_value": "186.246.8.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-19 09:44:03",
            "last_seen_utc": "2026-07-19 08:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834056": [
        {
            "ioc_value": "185.158.249.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-19 09:43:56",
            "last_seen_utc": "2026-07-20 18:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834055": [
        {
            "ioc_value": "147.93.191.75:30700",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 09:43:24",
            "last_seen_utc": "2026-07-19 08:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834054": [
        {
            "ioc_value": "139.180.190.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-19 09:43:19",
            "last_seen_utc": "2026-07-21 18:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834053": [
        {
            "ioc_value": "138.2.120.11:61234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-19 09:43:18",
            "last_seen_utc": "2026-08-24 18:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834052": [
        {
            "ioc_value": "128.90.105.170:7203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-19 09:43:15",
            "last_seen_utc": "2026-07-19 18:43:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834051": [
        {
            "ioc_value": "103.153.254.32:6933",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 09:43:05",
            "last_seen_utc": "2026-09-01 02:43:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834050": [
        {
            "ioc_value": "102.220.160.217:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 09:43:03",
            "last_seen_utc": "2026-08-09 18:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834048": [
        {
            "ioc_value": "test3012.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-19 09:37:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1834049": [
        {
            "ioc_value": "elroiseeme02.ip-ddns.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-19 09:37:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1834045": [
        {
            "ioc_value": "https://fed.rzrrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 09:24:42",
            "last_seen_utc": "2026-06-19 10:24:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834046": [
        {
            "ioc_value": "fed.rzrrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 09:24:42",
            "last_seen_utc": "2026-06-19 10:24:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834043": [
        {
            "ioc_value": "https://fed.harussm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 09:24:30",
            "last_seen_utc": "2026-06-19 10:24:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834044": [
        {
            "ioc_value": "fed.harussm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-19 09:24:30",
            "last_seen_utc": "2026-06-19 10:24:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834042": [
        {
            "ioc_value": "i9yfz7a0.asibshenasiyahya.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 09:08:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834036": [
        {
            "ioc_value": "https://oldagecarefoundation.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 08:32:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/oldagecarefoundation.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1834037": [
        {
            "ioc_value": "api-ext.bixbitemarketing.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-19 08:32:34",
            "last_seen_utc": "2026-06-19 18:44:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1834038": [
        {
            "ioc_value": "porkitao08.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-19 08:32:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/e3726371-10af-4a36-9b47-ed36f6803991",
            "tags": "RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1834032": [
        {
            "ioc_value": "45.140.213.6:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 07:44:12",
            "last_seen_utc": "2026-06-24 21:05:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1580103824",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834031": [
        {
            "ioc_value": "167.71.233.187:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 07:44:11",
            "last_seen_utc": "2026-06-24 22:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834030": [
        {
            "ioc_value": "47.122.118.128:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 07:43:57",
            "last_seen_utc": "2026-06-21 02:00:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834029": [
        {
            "ioc_value": "151.239.24.122:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 07:43:54",
            "last_seen_utc": "2026-08-28 08:08:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834028": [
        {
            "ioc_value": "dy6t49rl.akhlagvaahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 07:24:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834027": [
        {
            "ioc_value": "lh7umyc5.riyazishahkilid.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 07:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1834026": [
        {
            "ioc_value": "riyazishahkilid.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 07:04:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1834012": [
        {
            "ioc_value": "l6tafmqurswrpajwgnvpnpnpd77xavfm4n52xqfsjfltnersjv2fxoqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834013": [
        {
            "ioc_value": "kff3b66znolwznie6cinz2pecxrrxpeptwuzeudaed63viv4fbnketyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834014": [
        {
            "ioc_value": "7egbakn4anfwdtase7fnkgsdpywl4mtsxwpud4ou5lxjjhy4qthv4vid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834015": [
        {
            "ioc_value": "5vmjqdfmmtkvk74uj2khkndrxjmgzbspzugk5a5rzd3upntc7wi5reyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834016": [
        {
            "ioc_value": "lntvtlvl6gn35aa4coklqubskx5r3d6j42onywz7llzf3anetqtoepyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834017": [
        {
            "ioc_value": "a2ahyvmwbfcw7vvdnaddwbvezlpcjvfszdnuer3l6aqnwdzermm7csyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834018": [
        {
            "ioc_value": "xxs3dmkoflcfrkon7a2guje2ojsyv63z7eyxpctjota7xil646v4byyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834019": [
        {
            "ioc_value": "smqqrbvjf7kfcikigbq5hxzq5y6n2as7oy4bmb6dsrb4keyn3korxcid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lockbit",
            "malware_alias": "ABCD Ransomware",
            "malware_printable": "LockBit",
            "first_seen_utc": "2026-06-19 06:49:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://x.com/RakeshKrish12/status/2067858643366944997",
            "tags": "lockbit,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1834020": [
        {
            "ioc_value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:49:25",
            "last_seen_utc": "2026-08-25 00:20:32",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/27.37.111.24:48041",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834021": [
        {
            "ioc_value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:49:25",
            "last_seen_utc": "2026-08-25 00:20:33",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.37.13.96:37828",
            "tags": "elf,iot,Mozi",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834011": [
        {
            "ioc_value": "f253a4f1afdd89847bbe27defbc46043d73391d1d624752d457505489b5e3f05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-19 06:33:31",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/77.110.122.49",
            "tags": "elf,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834010": [
        {
            "ioc_value": "193.149.129.218:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkvnc",
            "malware_alias": null,
            "malware_printable": "DarkVNC",
            "first_seen_utc": "2026-06-19 06:21:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2fcf553b9656523b3207c08cdf16f7be9a25e55cf8c29f5caf933151c9214367/",
            "tags": "DarkVNC",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834009": [
        {
            "ioc_value": "http://ch.10001mb.com/mort.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-06-19 06:16:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/56a90f247ccffb63543d99a659f9517edde587f6e85752c82a9919e325de3ee5/",
            "tags": "Kimsuky",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1834008": [
        {
            "ioc_value": "http://160.30.142.218:34669/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/160.30.142.218",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834006": [
        {
            "ioc_value": "http://175.107.230.24:57256/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.230.24",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834007": [
        {
            "ioc_value": "http://153.117.37.104:59732/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.37.104",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834004": [
        {
            "ioc_value": "http://72.255.32.68:46117/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.32.68",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834005": [
        {
            "ioc_value": "http://59.103.100.2:33514/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.103.100.2",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834002": [
        {
            "ioc_value": "http://115.55.85.7:55027/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.55.85.7",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834003": [
        {
            "ioc_value": "http://103.115.199.18:53070/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.115.199.18",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834001": [
        {
            "ioc_value": "http://153.117.33.228:44081/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.33.228",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833999": [
        {
            "ioc_value": "http://103.173.7.226:33627/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.173.7.226",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1834000": [
        {
            "ioc_value": "http://202.47.56.219:49775/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.47.56.219",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833997": [
        {
            "ioc_value": "http://59.97.250.56:43042/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/59.97.250.56",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833998": [
        {
            "ioc_value": "http://110.39.233.163:45754/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.39.233.163",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833995": [
        {
            "ioc_value": "http://36.255.44.120:49117/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/36.255.44.120",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833996": [
        {
            "ioc_value": "http://223.123.125.13:46831/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.125.13",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833993": [
        {
            "ioc_value": "http://175.107.212.44:38058/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/175.107.212.44",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833994": [
        {
            "ioc_value": "http://144.48.130.229:38194/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.130.229",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833991": [
        {
            "ioc_value": "http://153.117.51.96:36126/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.51.96",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833992": [
        {
            "ioc_value": "http://153.117.6.120:50638/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.120",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833990": [
        {
            "ioc_value": "http://122.50.1.26:33627/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/122.50.1.26",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833988": [
        {
            "ioc_value": "http://101.31.81.241:51191/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.31.81.241",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833989": [
        {
            "ioc_value": "http://223.123.72.190:60788/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.72.190",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833986": [
        {
            "ioc_value": "http://125.45.68.162:39862/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/125.45.68.162",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833987": [
        {
            "ioc_value": "http://102.33.46.27:37709/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/102.33.46.27",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833984": [
        {
            "ioc_value": "http://115.42.75.105:44616/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.42.75.105",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833985": [
        {
            "ioc_value": "http://14.1.104.134:40274/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/14.1.104.134",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833982": [
        {
            "ioc_value": "http://103.18.14.247:60764/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.18.14.247",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833983": [
        {
            "ioc_value": "http://220.112.61.85:36541/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/220.112.61.85",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833980": [
        {
            "ioc_value": "http://45.230.66.118:10669/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.230.66.118",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833981": [
        {
            "ioc_value": "http://112.239.122.134:39926/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/112.239.122.134",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833978": [
        {
            "ioc_value": "http://81.26.83.155:39307/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/81.26.83.155",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833979": [
        {
            "ioc_value": "http://202.9.122.224:35583/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.9.122.224",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833977": [
        {
            "ioc_value": "http://45.230.66.102:10676/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.230.66.102",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833976": [
        {
            "ioc_value": "http://185.221.253.69:37779/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/185.221.253.69",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833975": [
        {
            "ioc_value": "http://153.117.6.68:51654/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.6.68",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833974": [
        {
            "ioc_value": "http://45.230.66.112:10059/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.230.66.112",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833972": [
        {
            "ioc_value": "http://103.181.161.31:48115/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.181.161.31",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833973": [
        {
            "ioc_value": "http://45.230.66.104:10973/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/45.230.66.104",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833970": [
        {
            "ioc_value": "http://103.181.160.235:38778/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.181.160.235",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833971": [
        {
            "ioc_value": "http://153.117.32.204:59142/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.32.204",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833969": [
        {
            "ioc_value": "http://139.135.42.99:32954/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.42.99",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833967": [
        {
            "ioc_value": "http://103.146.110.242:47794/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.146.110.242",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833968": [
        {
            "ioc_value": "http://182.117.70.107:59733/Mozi.7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/182.117.70.107",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833965": [
        {
            "ioc_value": "http://144.48.130.215:51670/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/144.48.130.215",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833966": [
        {
            "ioc_value": "http://110.38.218.245:46130/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/110.38.218.245",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833963": [
        {
            "ioc_value": "http://222.140.134.61:37273/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/222.140.134.61",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833964": [
        {
            "ioc_value": "http://153.117.52.69:51838/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.52.69",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833961": [
        {
            "ioc_value": "http://153.117.9.190:56846/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/153.117.9.190",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833962": [
        {
            "ioc_value": "http://223.123.73.214:56098/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.73.214",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833959": [
        {
            "ioc_value": "http://117.209.7.37:53123/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/117.209.7.37",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833960": [
        {
            "ioc_value": "http://223.123.124.127:43961/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.124.127",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833958": [
        {
            "ioc_value": "http://117.245.138.25:53071/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/117.245.138.25",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833956": [
        {
            "ioc_value": "http://172.168.148.38:60105/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/172.168.148.38",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833957": [
        {
            "ioc_value": "http://202.9.123.77:50006/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/202.9.123.77",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833955": [
        {
            "ioc_value": "http://112.25.235.194:41076/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/112.25.235.194",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833954": [
        {
            "ioc_value": "http://223.123.41.67:37213/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.41.67",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833952": [
        {
            "ioc_value": "http://115.55.232.238:45652/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/115.55.232.238",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833953": [
        {
            "ioc_value": "http://223.123.125.8:43836/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.125.8",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833951": [
        {
            "ioc_value": "http://101.53.233.87:49158/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/101.53.233.87",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833950": [
        {
            "ioc_value": "http://119.30.117.62:57777/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/119.30.117.62",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833937": [
        {
            "ioc_value": "http://103.176.16.93:47938/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:10",
            "last_seen_utc": "2026-06-19 06:06:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.176.16.93",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833938": [
        {
            "ioc_value": "http://223.123.77.15:48168/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.77.15",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833949": [
        {
            "ioc_value": "http://139.135.41.214:57108/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.41.214",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833939": [
        {
            "ioc_value": "http://113.99.201.216:40944/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/113.99.201.216",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833940": [
        {
            "ioc_value": "http://186.4.217.208:43140/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/186.4.217.208",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833941": [
        {
            "ioc_value": "http://42.230.218.169:36211/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/42.230.218.169",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833948": [
        {
            "ioc_value": "http://85.12.229.54:45873/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/85.12.229.54",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833942": [
        {
            "ioc_value": "http://72.255.3.97:44709/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/72.255.3.97",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833943": [
        {
            "ioc_value": "http://223.123.43.68:54638/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/223.123.43.68",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833947": [
        {
            "ioc_value": "http://103.225.191.207:48112/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.225.191.207",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833946": [
        {
            "ioc_value": "http://185.94.182.57:35814/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/185.94.182.57",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833945": [
        {
            "ioc_value": "http://139.135.59.145:34945/Mozi.a",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/139.135.59.145",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833944": [
        {
            "ioc_value": "http://103.146.111.93:37443/Mozi.m",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mozi",
            "malware_alias": null,
            "malware_printable": "Mozi",
            "first_seen_utc": "2026-06-19 06:07:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://honeylabs.net/lookup/103.146.111.93",
            "tags": "honeylabs,honeypot,iot",
            "anonymous": 0,
            "reporter": "HoneyLabs"
        }
    ],
    "1833790": [
        {
            "ioc_value": "193.187.101.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-19 05:57:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v15,nation-state-hunter,t1071_001,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1833832": [
        {
            "ioc_value": "34.27.195.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.ngioweb",
            "malware_alias": null,
            "malware_printable": "Ngioweb",
            "first_seen_utc": "2026-06-19 05:57:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Ngioweb",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1833833": [
        {
            "ioc_value": "imodobeness.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.ngioweb",
            "malware_alias": null,
            "malware_printable": "Ngioweb",
            "first_seen_utc": "2026-06-19 05:57:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Ngioweb",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1833834": [
        {
            "ioc_value": "iruledolical.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.ngioweb",
            "malware_alias": null,
            "malware_printable": "Ngioweb",
            "first_seen_utc": "2026-06-19 05:57:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Ngioweb",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1833835": [
        {
            "ioc_value": "unibokosion.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.ngioweb",
            "malware_alias": null,
            "malware_printable": "Ngioweb",
            "first_seen_utc": "2026-06-19 05:57:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Ngioweb",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1833837": [
        {
            "ioc_value": "165.227.123.79:6504",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-19 05:57:11",
            "last_seen_utc": "2026-08-12 16:05:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "AddType,ClickFix,DigitalOcean,FakeCAPTCHA,mtls,nginx,one-check.lol,PowerShell,TLS1.3",
            "anonymous": 0,
            "reporter": "init_0"
        }
    ],
    "1833841": [
        {
            "ioc_value": "78.40.194.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-19 05:57:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://platform.censys.io/hosts/78.40.194.67",
            "tags": "clickfix,mesh,meshagent",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833877": [
        {
            "ioc_value": "backoffice.ptbaconsulting.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-19 05:57:09",
            "last_seen_utc": "2026-06-19 19:55:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833878": [
        {
            "ioc_value": "191.44.109.233:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/191.44.109.233",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833879": [
        {
            "ioc_value": "24adb118a6f7a8d717bb3d3329c33f6b0eb39046a8fb7f2b3a1fff21436bf7d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/24adb118a6f7a8d717bb3d3329c33f6b0eb39046a8fb7f2b3a1fff21436bf7d2",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833880": [
        {
            "ioc_value": "f5952a6947e65dc0165e27ec100eaee09aa65790ca34c517c28d6d9ea4afb319",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833881": [
        {
            "ioc_value": "b7d6869b427a2e714744c73ade17f1b47fae43bb2ee1a6d7ee9f4c93943406d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833882": [
        {
            "ioc_value": "a9773c53a9611c737dc6a08622b3240e38430ceb0a3960f81391606cd1f02a86",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833883": [
        {
            "ioc_value": "6844800e8a8defda07b2829c02e76517ca98fedcbbf717328517bef28b279724",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833884": [
        {
            "ioc_value": "bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/bb4e08d8d96ace12a659a07d0ede31546e121176321b1d0f8cd15fe0f62127c0",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833885": [
        {
            "ioc_value": "https://delmore-effect.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-19 05:57:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/delmore-effect.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833887": [
        {
            "ioc_value": "711d9427ee43bc2186b9124f31cba2db5f54ec9a0d56dc2948e1a4377bada289",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833888": [
        {
            "ioc_value": "3c098a687947938e36ab34b9f09a11ebd82d50089cbfe6e237d810faa729f8ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833889": [
        {
            "ioc_value": "f36913607356a32ea106103387105c635fa923f8ed98ad0194b66ec79e379a02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833890": [
        {
            "ioc_value": "a5e413456ce9fc60bb44d442b72546e9e4118a61894fbe4b5c56e4dfad6055e3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833891": [
        {
            "ioc_value": "075b20a21ea6a0d2201a12a049f332ecc61348fc0ad3cfee038c6ad6aa44e744",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833892": [
        {
            "ioc_value": "1f5635a512a923e98a90cdc1b2fb988a2da78706e07e419dae9e1a54dd4d682b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833893": [
        {
            "ioc_value": "2d2ca7d21310b14f5f5641bbf4a9ff4c3e566b1fbbd370034c6844cedc8f0538",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.crosslock",
            "malware_alias": null,
            "malware_printable": "CrossLock",
            "first_seen_utc": "2026-06-19 05:57:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "China,CrowDoor,FamousSparrow,telecom,TernDoor,TropicTrooper,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833894": [
        {
            "ioc_value": "154.205.154.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.coreshell",
            "malware_alias": "SOURFACE",
            "malware_printable": "Coreshell",
            "first_seen_utc": "2026-06-19 05:57:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "C2,China,telecom,TernDoor,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833895": [
        {
            "ioc_value": "207.148.121.95:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.coreshell",
            "malware_alias": "SOURFACE",
            "malware_printable": "Coreshell",
            "first_seen_utc": "2026-06-19 05:56:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "C2,China,telecom,TernDoor,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833896": [
        {
            "ioc_value": "207.148.120.52:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.coreshell",
            "malware_alias": "SOURFACE",
            "malware_printable": "Coreshell",
            "first_seen_utc": "2026-06-19 05:56:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "C2,China,telecom,TernDoor,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833897": [
        {
            "ioc_value": "212.11.64.105:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.coreshell",
            "malware_alias": "SOURFACE",
            "malware_printable": "Coreshell",
            "first_seen_utc": "2026-06-19 05:56:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "C2,China,telecom,TernDoor,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833898": [
        {
            "ioc_value": "216.238.118.179:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.coreshell",
            "malware_alias": "SOURFACE",
            "malware_printable": "Coreshell",
            "first_seen_utc": "2026-06-19 05:56:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/terndoor-uat9244",
            "tags": "C2,China,telecom,TernDoor,UAT-9244",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833899": [
        {
            "ioc_value": "115.231.236.150:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xorddos",
            "malware_alias": "XORDDOS",
            "malware_printable": "XOR DDoS",
            "first_seen_utc": "2026-06-19 05:56:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ddos,ssh,xorddos",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833900": [
        {
            "ioc_value": "175.43.149.142:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-19 05:56:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833901": [
        {
            "ioc_value": "77.83.246.97:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-19 05:56:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833902": [
        {
            "ioc_value": "189.51.43.54:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-19 05:56:54",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833903": [
        {
            "ioc_value": "45.225.135.21:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-19 05:56:53",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,selfrep",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833904": [
        {
            "ioc_value": "120.48.32.130:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-19 05:56:53",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cve-2024-4577,redtail,webpot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833906": [
        {
            "ioc_value": "45.198.224.5:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-19 05:56:52",
            "last_seen_utc": "2026-07-01 19:01:40",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,rotator",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833908": [
        {
            "ioc_value": "64.89.163.22:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-19 05:56:52",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,monero,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833905": [
        {
            "ioc_value": "217.60.195.113:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-19 05:56:51",
            "last_seen_utc": "2026-07-09 00:18:34",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "c2,payload-host,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833907": [
        {
            "ioc_value": "5.182.210.61:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-19 05:56:50",
            "last_seen_utc": "2026-07-26 11:19:51",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "payload-host,rotator",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833909": [
        {
            "ioc_value": "80.96.113.59:8058",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-19 05:56:49",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "monero,pool,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833910": [
        {
            "ioc_value": "43.138.153.175:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-19 05:56:49",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833911": [
        {
            "ioc_value": "154.26.235.97:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-19 05:56:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cron,rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833912": [
        {
            "ioc_value": "195.205.190.135:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-19 05:56:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "eval,lua,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833913": [
        {
            "ioc_value": "45.134.79.85:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-19 05:56:47",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "postgres,takeover",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833915": [
        {
            "ioc_value": "5.175.223.249:6969",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-19 05:56:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1833925": [
        {
            "ioc_value": "3ee8a9e1c4e61b215998e8cb23521e2b3417abbfa196ee2215a04ec788ccd114",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-19 05:56:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Malicious",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833926": [
        {
            "ioc_value": "a1548a5dae03edf08e6c7d7e25645d2dd5b4d5008867edbc5b1048394e6b1d09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-19 05:56:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Malicious",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833929": [
        {
            "ioc_value": "aulvud5j.dancebetyek.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 04:12:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833924": [
        {
            "ioc_value": "x69rs3qk.rasmfani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 03:05:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833923": [
        {
            "ioc_value": "rasmfani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 03:03:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833918": [
        {
            "ioc_value": "w5kaz0nm.ahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-19 01:48:01",
            "last_seen_utc": "2026-07-03 01:02:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833917": [
        {
            "ioc_value": "115.190.147.66:63512",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 23:45:44",
            "last_seen_utc": "2026-08-28 08:08:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833916": [
        {
            "ioc_value": "io7yo39n.enfejkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 23:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833914": [
        {
            "ioc_value": "lgoanndm.betvarzeshkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 22:10:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833886": [
        {
            "ioc_value": "1qmi6vxn.hesabdarinoravesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 21:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833876": [
        {
            "ioc_value": "ef1q7686.enfej.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 20:46:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833875": [
        {
            "ioc_value": "103.83.87.182:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-18 20:35:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/22620c9c6d0c2b392ee34bd4e7905b6f161bfe25ed3dc756302aeb091a994b0e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833874": [
        {
            "ioc_value": "91.92.240.194:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-18 19:45:29",
            "last_seen_utc": "2026-07-22 18:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833873": [
        {
            "ioc_value": "91.124.19.150:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:45:28",
            "last_seen_utc": "2026-07-19 08:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833871": [
        {
            "ioc_value": "87.76.179.153:9521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:45:26",
            "last_seen_utc": "2026-07-19 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833872": [
        {
            "ioc_value": "87.76.179.22:8814",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:45:26",
            "last_seen_utc": "2026-07-19 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833870": [
        {
            "ioc_value": "82.146.52.98:8790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-18 19:45:22",
            "last_seen_utc": "2026-08-04 18:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833868": [
        {
            "ioc_value": "77.237.119.204:4433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-06-18 19:45:19",
            "last_seen_utc": "2026-07-25 08:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833869": [
        {
            "ioc_value": "updateyourprogram.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 19:45:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833867": [
        {
            "ioc_value": "64.89.160.127:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:45:16",
            "last_seen_utc": "2026-07-21 08:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833866": [
        {
            "ioc_value": "45.91.138.95:9019",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:44:59",
            "last_seen_utc": "2026-07-19 08:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833865": [
        {
            "ioc_value": "38.242.144.218:4498",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:44:50",
            "last_seen_utc": "2026-07-19 08:45:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833864": [
        {
            "ioc_value": "31.76.87.105:8455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:44:47",
            "last_seen_utc": "2026-07-19 08:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833863": [
        {
            "ioc_value": "23.95.103.214:6024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:44:43",
            "last_seen_utc": "2026-07-19 08:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833860": [
        {
            "ioc_value": "209.54.102.152:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:44:10",
            "last_seen_utc": "2026-07-20 08:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833861": [
        {
            "ioc_value": "209.54.102.152:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:44:10",
            "last_seen_utc": "2026-07-20 08:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833862": [
        {
            "ioc_value": "209.54.102.152:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:44:10",
            "last_seen_utc": "2026-07-20 08:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833859": [
        {
            "ioc_value": "176.12.64.118:8790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-18 19:43:39",
            "last_seen_utc": "2026-07-31 18:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833858": [
        {
            "ioc_value": "162.35.164.249:12262",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:43:31",
            "last_seen_utc": "2026-07-19 08:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833857": [
        {
            "ioc_value": "147.93.191.75:5005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:43:21",
            "last_seen_utc": "2026-07-20 18:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833853": [
        {
            "ioc_value": "141.98.10.150:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:43:17",
            "last_seen_utc": "2026-07-19 08:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833854": [
        {
            "ioc_value": "141.98.10.150:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:43:17",
            "last_seen_utc": "2026-08-15 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833855": [
        {
            "ioc_value": "141.98.10.150:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:43:17",
            "last_seen_utc": "2026-08-09 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833856": [
        {
            "ioc_value": "141.98.10.150:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:43:17",
            "last_seen_utc": "2026-08-14 08:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833852": [
        {
            "ioc_value": "115.190.108.6:54233",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.poshc2",
            "malware_alias": null,
            "malware_printable": "PoshC2",
            "first_seen_utc": "2026-06-18 19:43:11",
            "last_seen_utc": "2026-09-01 02:43:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,PoshC2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833851": [
        {
            "ioc_value": "107.172.238.14:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:43:09",
            "last_seen_utc": "2026-07-20 08:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833850": [
        {
            "ioc_value": "107.172.238.13:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:43:08",
            "last_seen_utc": "2026-07-19 08:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833848": [
        {
            "ioc_value": "102.220.160.217:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:43:03",
            "last_seen_utc": "2026-08-09 18:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833849": [
        {
            "ioc_value": "102.220.160.222:2600",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 19:43:03",
            "last_seen_utc": "2026-07-18 18:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833847": [
        {
            "ioc_value": "107.173.47.148:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 19:30:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/300942cdeac4217d156d03b1032271a6ab59f8dfa826f05bcea12f1094c5c0b1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833842": [
        {
            "ioc_value": "inv527xk.testpaye.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 18:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833840": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/arinao7/6e91d58f-acdf/key",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 18:31:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833839": [
        {
            "ioc_value": "2wr0b5x0.jetbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 18:26:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833838": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/arinao7/6e91d58f-acdf/e62",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 17:49:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833836": [
        {
            "ioc_value": "4hjech32.helabetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 17:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833830": [
        {
            "ioc_value": "52c1005cff76c7c6f4b21a231ad6e130",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-18 16:49:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833827": [
        {
            "ioc_value": "db133a7ead8a83e3dd1a6b2bc4ee41c7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-18 16:49:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833828": [
        {
            "ioc_value": "9f844a78cc2cd8d8a426f050a3efe319930f723eb10be231de1c1f1600e82127",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-18 16:49:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833829": [
        {
            "ioc_value": "fceb71b23ead80d609b2523936fe925e6c1fcb24",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "jar.crossrat",
            "malware_alias": "Trupto",
            "malware_printable": "CrossRAT",
            "first_seen_utc": "2026-06-18 16:49:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833825": [
        {
            "ioc_value": "b19285bcdf3fed2f9bda055d9f61118a616664ee0a6b594f9731ce20cb67daf5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-18 16:49:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833826": [
        {
            "ioc_value": "4bd8ece432c1638d9e0b7e65e4f13483a7ae9870",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-18 16:49:18",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833822": [
        {
            "ioc_value": "da7acbc71a87dcd173d1dfc3a82f40ab784d5896756938afbc1dee2cc5dc7dbe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:17",
            "last_seen_utc": "2026-06-18 18:09:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833823": [
        {
            "ioc_value": "c322b2d4dab977d16b8bb8241a9f186d75dc5e63",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:17",
            "last_seen_utc": "2026-06-18 18:09:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833824": [
        {
            "ioc_value": "08f7bd68b412087ec63f76150088d813",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:17",
            "last_seen_utc": "2026-06-18 18:09:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833818": [
        {
            "ioc_value": "b403e6dbe08ecd6f86b3d6858d2e4c7c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-18 16:49:16",
            "last_seen_utc": "2026-06-18 18:09:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833819": [
        {
            "ioc_value": "aa87d302ef084bc37bdd794fb1f7c600fd438e132e5dd8f51865ef475c7b9a43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-18 16:49:16",
            "last_seen_utc": "2026-06-18 18:09:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833820": [
        {
            "ioc_value": "5059272f852dcfb4d2f82f4b0836ea1597e10dab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-18 16:49:16",
            "last_seen_utc": "2026-06-18 18:09:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833821": [
        {
            "ioc_value": "f116f62d9ccaad036dac5a1965c2de82",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-18 16:49:16",
            "last_seen_utc": "2026-06-18 18:09:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833815": [
        {
            "ioc_value": "6ab9e3c6a1819ae3b3943bc745e33a7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:15",
            "last_seen_utc": "2026-06-18 18:09:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833816": [
        {
            "ioc_value": "afd4b76a1c8586d6c9ceeeca30bca4a00778b097a957890c5dbafd76ae8bf918",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-18 16:49:15",
            "last_seen_utc": "2026-06-18 18:09:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833817": [
        {
            "ioc_value": "97cdf92bed154736457cf67ec2a211b8136ed7ea",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-18 16:49:15",
            "last_seen_utc": "2026-06-18 18:09:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833812": [
        {
            "ioc_value": "ba5cfe07a33b3a75955756fe7fc10b96",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-18 16:49:14",
            "last_seen_utc": "2026-06-18 18:09:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833813": [
        {
            "ioc_value": "c669a2e29833f02b28d5506a3922f3bcf2b506472f2f6bc43610b30b6f724467",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:14",
            "last_seen_utc": "2026-06-18 18:09:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833814": [
        {
            "ioc_value": "1100d79cb233b3dcf0c7a9231ae1d341e99aa7c0",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:14",
            "last_seen_utc": "2026-06-18 18:09:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833809": [
        {
            "ioc_value": "4d976e55c47a5d72a72b90abbebbd137",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:13",
            "last_seen_utc": "2026-06-18 18:08:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833810": [
        {
            "ioc_value": "f35b27b5ef86f0d4ade3752224fe55641ad7c59976dc085cc5109a4008b7ec1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-18 16:49:13",
            "last_seen_utc": "2026-06-18 18:08:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833811": [
        {
            "ioc_value": "4a866e41b9459a77e0217f9eca877650d553ed9f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-18 16:49:13",
            "last_seen_utc": "2026-06-18 18:09:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833806": [
        {
            "ioc_value": "3b7ccb4eb2ba5f3156526ec60cc3033b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-18 16:49:12",
            "last_seen_utc": "2026-06-18 18:08:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833807": [
        {
            "ioc_value": "48514edff1519f8be0c8a64511bf60ae8f847f90a6ac1381663c53646b77fb48",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:12",
            "last_seen_utc": "2026-06-18 18:08:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833808": [
        {
            "ioc_value": "92a9fbdb50864fe117ee69511f8fdd21cd905469",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-18 16:49:12",
            "last_seen_utc": "2026-06-18 18:08:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833803": [
        {
            "ioc_value": "48b039c349e726f4f63ccfd141273bbf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-18 16:49:11",
            "last_seen_utc": "2026-06-18 18:08:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833804": [
        {
            "ioc_value": "202dd2a2a83208c237fcc87f2a077792b8e66815ce36d1dcd9de32a5f3ebab5b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-18 16:49:11",
            "last_seen_utc": "2026-06-18 18:08:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833805": [
        {
            "ioc_value": "c7c3d905ed6cc0219417d83c60a708d9b031617a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-18 16:49:11",
            "last_seen_utc": "2026-06-18 18:08:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833801": [
        {
            "ioc_value": "c263ac4338a05f8a8eac1a2eafb0ea4fac59c5c012a59b927c77dd41fd3536bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-18 16:49:10",
            "last_seen_utc": "2026-06-18 18:08:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833802": [
        {
            "ioc_value": "1805bcb1e9a621d73511e366ddc5a55bd96ec869",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-18 16:49:10",
            "last_seen_utc": "2026-06-18 18:08:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833799": [
        {
            "ioc_value": "https://txs.rzrrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 16:25:05",
            "last_seen_utc": "2026-06-18 18:25:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833800": [
        {
            "ioc_value": "txs.rzrrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 16:25:05",
            "last_seen_utc": "2026-06-18 18:25:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833797": [
        {
            "ioc_value": "https://txs.harussm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 16:24:54",
            "last_seen_utc": "2026-06-18 18:24:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833798": [
        {
            "ioc_value": "txs.harussm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 16:24:54",
            "last_seen_utc": "2026-06-18 18:24:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833795": [
        {
            "ioc_value": "pornbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 15:30:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833780": [
        {
            "ioc_value": "iridla.space",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 13:33:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1833782": [
        {
            "ioc_value": "8u88xbeq.pinbahiskade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 13:31:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833781": [
        {
            "ioc_value": "pinbahiskade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 13:30:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833779": [
        {
            "ioc_value": "titlereason.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-18 13:16:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833774": [
        {
            "ioc_value": "wasthereasolutiin.airdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 12:56:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9f844a78cc2cd8d8a426f050a3efe319930f723eb10be231de1c1f1600e82127/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833772": [
        {
            "ioc_value": "https://birdybird.rest/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 12:53:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/birdybird.rest",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833773": [
        {
            "ioc_value": "5zn1z0hp.dancebetyek.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 12:31:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833771": [
        {
            "ioc_value": "109.100.14.222:40628",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-18 12:18:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "lilsheepyy"
        }
    ],
    "1833755": [
        {
            "ioc_value": "https://siledepartamentos.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 12:03:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/siledepartamentos.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833756": [
        {
            "ioc_value": "https://qantify.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 12:03:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/qantify.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833757": [
        {
            "ioc_value": "https://nabane.com.mx/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 12:03:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nabane.com.mx",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833767": [
        {
            "ioc_value": "https://mingliu.com.tw/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 12:03:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mingliu.com.tw",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833769": [
        {
            "ioc_value": "103.183.119.48:12560",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-18 12:03:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,payload,sh",
            "anonymous": 0,
            "reporter": "lilsheepyy"
        }
    ],
    "1833770": [
        {
            "ioc_value": "188.227.14.105:547",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 11:46:05",
            "last_seen_utc": "2026-07-18 14:47:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833768": [
        {
            "ioc_value": "oxidbetkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 11:43:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833766": [
        {
            "ioc_value": "lnc1c2cf.anodaz.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 11:22:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833765": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/arinao7/8327ac99-c06c-422f-bd2e-4a80978d52c9/api-45",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 11:12:41",
            "last_seen_utc": "2026-06-18 17:46:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833764": [
        {
            "ioc_value": "022iqw23.bet303.download",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 11:07:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833759": [
        {
            "ioc_value": "birdybird.rest",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 10:09:59",
            "last_seen_utc": "2026-06-30 21:58:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833758": [
        {
            "ioc_value": "codecerification.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 10:09:58",
            "last_seen_utc": "2026-06-23 09:58:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833745": [
        {
            "ioc_value": "https://domokitw.lol/downloads",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-18 09:57:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "epol"
        }
    ],
    "1833746": [
        {
            "ioc_value": "https://voltix.gd/App/Voltix.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-18 09:57:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "epol"
        }
    ],
    "1833753": [
        {
            "ioc_value": "98.142.241.170:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-18 09:46:05",
            "last_seen_utc": "2026-07-18 08:47:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833754": [
        {
            "ioc_value": "98.142.241.170:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-18 09:46:05",
            "last_seen_utc": "2026-07-18 08:47:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833752": [
        {
            "ioc_value": "91.223.208.217:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 09:46:00",
            "last_seen_utc": "2026-07-19 18:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833751": [
        {
            "ioc_value": "83.142.209.31:7829",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 09:45:54",
            "last_seen_utc": "2026-07-18 18:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833750": [
        {
            "ioc_value": "54.38.94.225:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-06-18 09:45:43",
            "last_seen_utc": "2026-09-01 02:46:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833749": [
        {
            "ioc_value": "35.254.198.45:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 09:45:15",
            "last_seen_utc": "2026-07-31 08:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833747": [
        {
            "ioc_value": "31.77.168.220:3009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 09:45:13",
            "last_seen_utc": "2026-07-18 18:45:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833748": [
        {
            "ioc_value": "31.77.168.220:3010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 09:45:13",
            "last_seen_utc": "2026-07-18 08:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833744": [
        {
            "ioc_value": "209.99.191.33:440",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-18 09:44:25",
            "last_seen_utc": "2026-08-19 18:44:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833743": [
        {
            "ioc_value": "198.23.185.136:8008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 09:44:14",
            "last_seen_utc": "2026-07-18 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833742": [
        {
            "ioc_value": "178.16.55.204:5022",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-18 09:43:47",
            "last_seen_utc": "2026-07-22 18:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833741": [
        {
            "ioc_value": "172.245.195.233:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-18 09:43:41",
            "last_seen_utc": "2026-07-21 18:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833740": [
        {
            "ioc_value": "147.124.212.146:3096",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-18 09:43:23",
            "last_seen_utc": "2026-07-18 18:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833738": [
        {
            "ioc_value": "https://sonofar.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 09:30:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sonofar.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833739": [
        {
            "ioc_value": "https://volunteerskonect.ca/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 09:30:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/volunteerskonect.ca",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833703": [
        {
            "ioc_value": "172.96.161.212:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-18 09:24:25",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833728": [
        {
            "ioc_value": "https://madhavsamachar.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 09:24:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/madhavsamachar.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833730": [
        {
            "ioc_value": "hostphpwindowsappsconecting.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 09:24:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833736": [
        {
            "ioc_value": "notificacionesfiscalescol.github.io",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 09:24:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833737": [
        {
            "ioc_value": "9jdr35y2.kir.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 09:24:00",
            "last_seen_utc": "2026-06-18 09:37:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833734": [
        {
            "ioc_value": "office-rechnung.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-18 09:15:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d78bc974947dca5f86fc0b5503e157b1537dbac4bcfe4bfb1779213342a5bb19/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833735": [
        {
            "ioc_value": "small-morning-8be0.fsocietyandtools.workers.dev",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-18 09:15:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d78bc974947dca5f86fc0b5503e157b1537dbac4bcfe4bfb1779213342a5bb19/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833731": [
        {
            "ioc_value": "office-rechnung.life",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-18 09:15:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d78bc974947dca5f86fc0b5503e157b1537dbac4bcfe4bfb1779213342a5bb19/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833732": [
        {
            "ioc_value": "rechnung-lexware.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-18 09:15:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d78bc974947dca5f86fc0b5503e157b1537dbac4bcfe4bfb1779213342a5bb19/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833733": [
        {
            "ioc_value": "office-rechnung.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-18 09:15:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d78bc974947dca5f86fc0b5503e157b1537dbac4bcfe4bfb1779213342a5bb19/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833704": [
        {
            "ioc_value": "45.184.226.43:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-18 08:35:50",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833705": [
        {
            "ioc_value": "43.110.37.217:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-18 08:35:50",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833706": [
        {
            "ioc_value": "43.156.71.219:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-18 08:35:49",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833707": [
        {
            "ioc_value": "91.209.228.154:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-18 08:35:49",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833708": [
        {
            "ioc_value": "121.43.211.216:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-18 08:35:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833709": [
        {
            "ioc_value": "164.68.108.70:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-18 08:35:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833710": [
        {
            "ioc_value": "168.144.81.184:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-18 08:35:47",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833725": [
        {
            "ioc_value": "124.198.132.188:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 08:35:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833711": [
        {
            "ioc_value": "118.70.231.249:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-18 08:35:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833712": [
        {
            "ioc_value": "14.103.10.167:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-18 08:35:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1833726": [
        {
            "ioc_value": "158.173.51.23:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 08:35:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833727": [
        {
            "ioc_value": "157.173.124.50:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 08:35:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833721": [
        {
            "ioc_value": "45.92.1.172:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 08:34:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/9ead4006-d220-4319-b816-369db06bb5d2",
            "tags": "rat",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833723": [
        {
            "ioc_value": "194.26.192.56:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 08:34:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/9fd3ff9b-e009-4a84-90f9-e753c7ad5bec",
            "tags": null,
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833724": [
        {
            "ioc_value": "158.173.51.22:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.vjw0rm",
            "malware_alias": null,
            "malware_printable": "Vjw0rm",
            "first_seen_utc": "2026-06-18 08:34:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/5ca04f75-5241-4b65-9e15-f0b432eb31f5",
            "tags": "RAT",
            "anonymous": 0,
            "reporter": "operador614522"
        }
    ],
    "1833718": [
        {
            "ioc_value": "167.233.67.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 08:01:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1833719": [
        {
            "ioc_value": "77.42.32.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 08:01:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1833720": [
        {
            "ioc_value": "167.233.133.99:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 08:01:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1833715": [
        {
            "ioc_value": "https://167.233.67.224/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 08:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1833716": [
        {
            "ioc_value": "https://77.42.32.108/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 08:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1833717": [
        {
            "ioc_value": "https://167.233.133.99/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-18 08:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1833660": [
        {
            "ioc_value": "panelmienbac.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-18 07:23:02",
            "last_seen_utc": "2026-08-11 11:03:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833702": [
        {
            "ioc_value": "khalsebet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 07:22:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833680": [
        {
            "ioc_value": "www.tembuyser.be",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-18 07:22:35",
            "last_seen_utc": "2026-08-18 07:27:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833496": [
        {
            "ioc_value": "https://trecoshop.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/trecoshop.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833575": [
        {
            "ioc_value": "xeno.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1833495": [
        {
            "ioc_value": "metrics.demobunfiber.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amatera",
            "malware_alias": null,
            "malware_printable": "Amatera",
            "first_seen_utc": "2026-06-18 07:22:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "amatera,arcstealer,clearfake,clickfix",
            "anonymous": 0,
            "reporter": "tanner"
        }
    ],
    "1833576": [
        {
            "ioc_value": "luvioros-play.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1833577": [
        {
            "ioc_value": "https://one-confirm.lol/m",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/45.32.132.194",
            "tags": "clickfix,kongtuke,python-backdoor,winpython",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833578": [
        {
            "ioc_value": "45.32.132.194:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/45.32.132.194",
            "tags": "clickfix,kongtuke,python-backdoor,winpython",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833579": [
        {
            "ioc_value": "3d1d192e9879d33a954ea6e5eb0199cd3cb03622d88f2aebd50074eade956f61",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3d1d192e9879d33a954ea6e5eb0199cd3cb03622d88f2aebd50074eade956f61",
            "tags": "clickfix,kongtuke,python-backdoor,winpython",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833580": [
        {
            "ioc_value": "a8fe7ea23ff20fb3ab2bcd122650e0fd0c6f9d384c11570a37290126f5cbef32",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/3d1d192e9879d33a954ea6e5eb0199cd3cb03622d88f2aebd50074eade956f61",
            "tags": "clickfix,kongtuke,python-backdoor,winpython",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833581": [
        {
            "ioc_value": "https://www.dropbox.com/scl/fi/5s7jeh4brmv6zttfswcd3/kkkkkk1.zip?rlkey=rddyt5s55ghjnv6rgtyzyes4p&dl=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a8fe7ea23ff20fb3ab2bcd122650e0fd0c6f9d384c11570a37290126f5cbef32",
            "tags": "clickfix,kongtuke,python-backdoor,winpython",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833582": [
        {
            "ioc_value": "analyticstrack-pzh.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-18 07:22:12",
            "last_seen_utc": "2026-07-07 10:35:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab",
            "tags": "Cloudflare,cracked-games,HijackLoader,Prospero,RenEngine,telemetry",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833583": [
        {
            "ioc_value": "analyticstrack-api.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-18 07:22:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab",
            "tags": "Cloudflare,cracked-games,HijackLoader,Prospero,RenEngine,telemetry",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833584": [
        {
            "ioc_value": "pixel.analyticstrack-pzh.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-18 07:22:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab",
            "tags": "Cloudflare,cracked-games,HijackLoader,Prospero,RenEngine,telemetry",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833585": [
        {
            "ioc_value": "https://chinarice.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-18 07:22:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chinarice.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833699": [
        {
            "ioc_value": "154.12.45.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 06:56:57",
            "last_seen_utc": "2026-06-24 18:05:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833698": [
        {
            "ioc_value": "124.223.112.182:5555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 06:56:56",
            "last_seen_utc": "2026-06-23 07:14:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833696": [
        {
            "ioc_value": "84.252.139.94:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 06:56:55",
            "last_seen_utc": "2026-06-20 09:01:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833697": [
        {
            "ioc_value": "51.250.100.14:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 06:56:55",
            "last_seen_utc": "2026-06-20 09:01:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833695": [
        {
            "ioc_value": "106.14.65.169:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-18 06:56:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833694": [
        {
            "ioc_value": "fg7za1dh.casinobet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 06:31:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833693": [
        {
            "ioc_value": "109.248.150.234:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-18 06:06:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c8c385c10b1586728318f43b9dcafecfd46d8d6000984fe489bb1d219ea8b4f9/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833686": [
        {
            "ioc_value": "acu1ajv0.irxbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 05:23:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833685": [
        {
            "ioc_value": "irxbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 05:22:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833640": [
        {
            "ioc_value": "f8zkjy83.azmoondadrasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 03:44:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833639": [
        {
            "ioc_value": "hokm.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 03:21:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833636": [
        {
            "ioc_value": "59k3ql4x.akhlagvaahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 01:22:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833635": [
        {
            "ioc_value": "ddbk25ms.helabetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 01:21:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833634": [
        {
            "ioc_value": "helabetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 01:21:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833633": [
        {
            "ioc_value": "phwy7fn6.betvarzeshkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-18 00:29:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833625": [
        {
            "ioc_value": "taivvans.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 23:50:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/806a271f5d14a873a1d0965d7caab4f572a5c6b25f5b88985ac88d74c4d96d48/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833624": [
        {
            "ioc_value": "taivvan.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 23:50:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/806a271f5d14a873a1d0965d7caab4f572a5c6b25f5b88985ac88d74c4d96d48/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833623": [
        {
            "ioc_value": "62.113.59.64:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 23:46:03",
            "last_seen_utc": "2026-07-22 02:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833622": [
        {
            "ioc_value": "106.13.189.138:56000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 23:45:31",
            "last_seen_utc": "2026-08-28 08:08:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833621": [
        {
            "ioc_value": "gorgbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 23:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833619": [
        {
            "ioc_value": "https://get.rzrrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 21:25:12",
            "last_seen_utc": "2026-06-18 10:25:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833620": [
        {
            "ioc_value": "get.rzrrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 21:25:12",
            "last_seen_utc": "2026-06-18 10:25:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833617": [
        {
            "ioc_value": "https://get.hanyasm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 21:25:00",
            "last_seen_utc": "2026-06-18 05:24:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833618": [
        {
            "ioc_value": "get.hanyasm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 21:25:00",
            "last_seen_utc": "2026-06-18 05:24:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833616": [
        {
            "ioc_value": "h0cbv92p.golfbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 21:20:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833615": [
        {
            "ioc_value": "golfbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 21:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833614": [
        {
            "ioc_value": "h2vkq89b.angizeshfarahani.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 20:24:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833605": [
        {
            "ioc_value": "96.44.167.215:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 19:45:31",
            "last_seen_utc": "2026-07-18 08:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833604": [
        {
            "ioc_value": "85.11.167.9:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-17 19:45:24",
            "last_seen_utc": "2026-07-17 18:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833603": [
        {
            "ioc_value": "64.89.160.127:1960",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 19:45:16",
            "last_seen_utc": "2026-07-18 08:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833602": [
        {
            "ioc_value": "5.101.82.60:27015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 19:45:06",
            "last_seen_utc": "2026-08-03 08:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833601": [
        {
            "ioc_value": "45.151.102.251:7528",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-17 19:44:54",
            "last_seen_utc": "2026-07-19 08:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833600": [
        {
            "ioc_value": "209.54.102.152:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 19:44:09",
            "last_seen_utc": "2026-07-20 08:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833599": [
        {
            "ioc_value": "192.3.136.254:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 19:43:56",
            "last_seen_utc": "2026-07-20 08:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833598": [
        {
            "ioc_value": "185.212.128.176:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-17 19:43:49",
            "last_seen_utc": "2026-08-14 08:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833597": [
        {
            "ioc_value": "182.23.2.163:7024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 19:43:46",
            "last_seen_utc": "2026-07-17 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833596": [
        {
            "ioc_value": "163.245.213.241:56893",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-17 19:43:31",
            "last_seen_utc": "2026-07-19 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833595": [
        {
            "ioc_value": "147.93.191.75:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 19:43:20",
            "last_seen_utc": "2026-07-19 18:43:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833594": [
        {
            "ioc_value": "118.122.8.154:11534",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-17 19:43:12",
            "last_seen_utc": "2026-07-17 18:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833593": [
        {
            "ioc_value": "103.110.80.154:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 19:43:04",
            "last_seen_utc": "2026-08-10 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833592": [
        {
            "ioc_value": "fazbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 19:19:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833591": [
        {
            "ioc_value": "enfejwin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 19:18:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833570": [
        {
            "ioc_value": "1ycpksxw.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 17:44:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833568": [
        {
            "ioc_value": "96beaa210c51ebc95b19379dd9572013132e7c4d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-17 17:32:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833569": [
        {
            "ioc_value": "ae9613c81a644178999b357600d1498a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-17 17:32:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833566": [
        {
            "ioc_value": "c2fd87e0a14baa16be23ea3b40b42eee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-17 17:32:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833567": [
        {
            "ioc_value": "ff0d872eb0f0474a24273ff2506b9c1e5e7c7ba5fa8d364cea94e0c7405d032c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinymet",
            "malware_alias": "TiniMet",
            "malware_printable": "TinyMet",
            "first_seen_utc": "2026-06-17 17:32:49",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833563": [
        {
            "ioc_value": "629f961741fbee0beced217eef514bd9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-17 17:32:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833564": [
        {
            "ioc_value": "e6085af9fdabb1a5cec731cf03a1da9cf8aa01163baf414cf03cc174616e1c09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-17 17:32:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833565": [
        {
            "ioc_value": "4d87853447b486c8f62cc67b22d8cac7eef3965b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-17 17:32:48",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833560": [
        {
            "ioc_value": "951351f0fb96dbbbd8379548ad1767bc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-17 17:32:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833561": [
        {
            "ioc_value": "1da002b8fdbb45b2b95125e88c0a4421e55c9ec3df08572a28a09a66b71450fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-17 17:32:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833562": [
        {
            "ioc_value": "ef72d52efff59f3c8e3e032db081a11f0b164e18",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phantom_stealer",
            "malware_alias": null,
            "malware_printable": "Phantom Stealer",
            "first_seen_utc": "2026-06-17 17:32:47",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833557": [
        {
            "ioc_value": "97d63f8a798d8195948ef4ea51909385",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-17 17:32:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833558": [
        {
            "ioc_value": "40c9663ae7ffad4448bef4976cc1458253420eddc8b816ea38dbe3df30795301",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-17 17:32:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833559": [
        {
            "ioc_value": "460a1c90411d7abb2e55b9d437e457b88710a2ee",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-17 17:32:46",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833555": [
        {
            "ioc_value": "08ccc97bfba93caf89566888a138d473a4699838f726c22c836495d6c9efd22e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-17 17:32:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833556": [
        {
            "ioc_value": "6124dd12f985d3d3cab32f4a0c78b263153a6f52",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-17 17:32:45",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833553": [
        {
            "ioc_value": "374473c7dfb66406178681191ba4de7de9ff6e7b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.poscardstealer",
            "malware_alias": null,
            "malware_printable": "poscardstealer",
            "first_seen_utc": "2026-06-17 17:32:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833554": [
        {
            "ioc_value": "51335ef0e92ee549c9ec24338935d1b3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.poscardstealer",
            "malware_alias": null,
            "malware_printable": "poscardstealer",
            "first_seen_utc": "2026-06-17 17:32:44",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833550": [
        {
            "ioc_value": "096b1f15b8884bc396a5daaef50a90b4c5bb4fcd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 17:32:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833551": [
        {
            "ioc_value": "a7b3e94a5fcd20c960c42426b7c9a0c9",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 17:32:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833552": [
        {
            "ioc_value": "994360679da88dedbdcc0563919e2b9c7c717aa1acc1620e8bc489a2daa97ac9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.poscardstealer",
            "malware_alias": null,
            "malware_printable": "poscardstealer",
            "first_seen_utc": "2026-06-17 17:32:43",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833547": [
        {
            "ioc_value": "e4a8efef165b15db21b9aa1fa13586119c9b433e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-17 17:32:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833548": [
        {
            "ioc_value": "1e0852887af0490bf192a9e7d06acf49",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-17 17:32:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833549": [
        {
            "ioc_value": "1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 17:32:42",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833544": [
        {
            "ioc_value": "bde47864dd96a3108434ef675008716b9198854b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 17:32:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833545": [
        {
            "ioc_value": "8404ae737e2cf0dd72b36c9cede37a9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 17:32:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833546": [
        {
            "ioc_value": "07a018c6af370b03e0daa84a1dc214ab516fe9f6ce180e64248bc2682d550d9c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-17 17:32:41",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833541": [
        {
            "ioc_value": "27af7e91f33800f4f01cf0df071c100b1faa9951",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-17 17:32:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833542": [
        {
            "ioc_value": "8b3cc6aa0f6b4a3880146323fec3f09d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-17 17:32:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833543": [
        {
            "ioc_value": "a951afc09aa3e8be61204a027c2cc0c141a64792a2022b8d6ebdf8e0e54a2279",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 17:32:40",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833538": [
        {
            "ioc_value": "103b05b20c9c625fe9e38bc3973fc0cc58b797e7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.zynor_rat",
            "malware_alias": null,
            "malware_printable": "ZynorRAT",
            "first_seen_utc": "2026-06-17 17:32:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833539": [
        {
            "ioc_value": "8f4739d863929bd0b22a0d4a569cf72c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.zynor_rat",
            "malware_alias": null,
            "malware_printable": "ZynorRAT",
            "first_seen_utc": "2026-06-17 17:32:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833540": [
        {
            "ioc_value": "f678afbaa4b0fe4537c05f4f811b9d852e40f3739f1e1a16f46b66e93c7c6f8c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-17 17:32:39",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833536": [
        {
            "ioc_value": "9fb91bff7289b601bb0a7d91200fe770",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 17:32:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833537": [
        {
            "ioc_value": "037e5fe028a60604523b840794d06c8f70a9c523a832a97ecaaccd9f419e364a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.zynor_rat",
            "malware_alias": null,
            "malware_printable": "ZynorRAT",
            "first_seen_utc": "2026-06-17 17:32:38",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833534": [
        {
            "ioc_value": "7e27deea413f5c390fd790423de9dc552a1e393187607485394044c4ddc85fdf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 17:32:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833535": [
        {
            "ioc_value": "c211776370bab8368f126d414eb2ea3d55ae7da8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 17:32:37",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833531": [
        {
            "ioc_value": "9ab135ec9d97c65caacdc2cd1ac166b7f491d8ad0635b3bd595a244ca6af9795",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 17:32:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833532": [
        {
            "ioc_value": "6e2603b2cb7c1150b1d0d9f024c7283b4a749260",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 17:32:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833533": [
        {
            "ioc_value": "bd2c666c8c598630a65ac6d481b96ee4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 17:32:36",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833529": [
        {
            "ioc_value": "a5ebaafa75f45f51d25f38ef83a2c1e3ac580435",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-17 17:32:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833530": [
        {
            "ioc_value": "4b896f8ae2fdbedf99648cffa4c7afc3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-17 17:32:35",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833526": [
        {
            "ioc_value": "7289458374e11e03123fcd18b3dc0a2583539ac4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-17 17:32:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833527": [
        {
            "ioc_value": "4dbf036d9486c34dc26ae3316ae13073",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-17 17:32:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833528": [
        {
            "ioc_value": "068725e40de440d38d02f71aea88ec2d28276a98e62b2f5b2659d981c1c11798",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-17 17:32:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833523": [
        {
            "ioc_value": "59d60cf70a62d3fdbafacd52f58577501509b6e1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-17 17:32:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833524": [
        {
            "ioc_value": "b04467d5385758b830565e1affd3e7a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-17 17:32:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833525": [
        {
            "ioc_value": "2e2544644c43e065078d1e9419123c1433aa418a1b5539804374c41f5d99433e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-17 17:32:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833520": [
        {
            "ioc_value": "432574b2a680d458aaa6cffd7455871fc950f824",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.attor",
            "malware_alias": null,
            "malware_printable": "Attor",
            "first_seen_utc": "2026-06-17 17:32:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833521": [
        {
            "ioc_value": "2844a14af35e5d637365fbbfae03732a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.attor",
            "malware_alias": null,
            "malware_printable": "Attor",
            "first_seen_utc": "2026-06-17 17:32:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833522": [
        {
            "ioc_value": "d942110faacaa112adf64b854daa1381da74a91f4f5790ca710c9e082fc98151",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-17 17:32:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833518": [
        {
            "ioc_value": "d2d3e85f0d8d966d22c6dd7f6a94df13",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-17 17:32:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833519": [
        {
            "ioc_value": "f42c90e9b4b33d7a778a6d53841a5ab7ed4b79ac22e056b3939ffbab6d5d39a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.attor",
            "malware_alias": null,
            "malware_printable": "Attor",
            "first_seen_utc": "2026-06-17 17:32:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833515": [
        {
            "ioc_value": "0ad93109b547084f43fe09682c4825cb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-17 17:32:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833516": [
        {
            "ioc_value": "c211109b368eebe5fadfc58540b8ae6c7a33d820a6e5ebf99bdf09fc7ed98d05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-17 17:32:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833517": [
        {
            "ioc_value": "a7bee01e4415bf95982b863820d1930dea5739e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-17 17:32:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833512": [
        {
            "ioc_value": "ca0b75619126f690492350972c59baeb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-17 17:32:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833513": [
        {
            "ioc_value": "5b7146ddfce30ff5d5c8215ba0ba68544726a03da31bf3074c4086587fda1370",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-17 17:32:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833514": [
        {
            "ioc_value": "23795a745385b1444cfe8618603f623d686573f9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-17 17:32:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833510": [
        {
            "ioc_value": "75b337e70eed4a266c7a925c1e484c86ee9f09c56bb7bb9a4e0ebc386f3f4a15",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-17 17:32:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833511": [
        {
            "ioc_value": "bcbc2475f08319df62c3d8539f2b65d00401d61a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-17 17:32:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833507": [
        {
            "ioc_value": "997a09b5cbbebd7e07fad4185d82ca28e8d259ffb93519f563313535e268ddf6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-17 17:32:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833508": [
        {
            "ioc_value": "f5987ecdb335f84401f199f287aecca48763ce3c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-17 17:32:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833509": [
        {
            "ioc_value": "8f7f395cb7def20a202a092772e89a5f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-17 17:32:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1833506": [
        {
            "ioc_value": "j7n7i2dx.enfej.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 17:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833505": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/vitiapig/lang-28/robot",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 17:03:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833500": [
        {
            "ioc_value": "20.39.60.137:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-17 17:00:15",
            "last_seen_utc": "2026-09-01 02:44:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "havoc",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833493": [
        {
            "ioc_value": "159.223.5.44:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-17 16:23:58",
            "last_seen_utc": "2026-06-25 23:37:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1833494": [
        {
            "ioc_value": "152.42.132.65:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-17 16:23:57",
            "last_seen_utc": "2026-06-26 11:01:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1833492": [
        {
            "ioc_value": "zaminshenasi.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 16:08:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833491": [
        {
            "ioc_value": "95.85.239.146:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 16:05:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bdc419313f6d07aae8aa7295dfd00910ee3f4acad5f6310981bfa791e65f1407/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833490": [
        {
            "ioc_value": "154.86.119.78:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 16:04:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bdc419313f6d07aae8aa7295dfd00910ee3f4acad5f6310981bfa791e65f1407/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833489": [
        {
            "ioc_value": "laculex.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 16:04:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bdc419313f6d07aae8aa7295dfd00910ee3f4acad5f6310981bfa791e65f1407/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833488": [
        {
            "ioc_value": "kuilfgfd.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 16:03:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bdc419313f6d07aae8aa7295dfd00910ee3f4acad5f6310981bfa791e65f1407/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833381": [
        {
            "ioc_value": "https://livelaughfite.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/livelaughfite.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833407": [
        {
            "ioc_value": "https://webexpress.cl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/webexpress.cl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833409": [
        {
            "ioc_value": "https://withyou.ma/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/withyou.ma",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833408": [
        {
            "ioc_value": "https://www.kushalcardiaccare.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.kushalcardiaccare.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833410": [
        {
            "ioc_value": "https://toilettage-muzillac.fr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/toilettage-muzillac.fr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833420": [
        {
            "ioc_value": "code-verification-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 15:59:26",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833421": [
        {
            "ioc_value": "verification-code-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 15:59:26",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833426": [
        {
            "ioc_value": "https://panelmienbac.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:25",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/panelmienbac.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833422": [
        {
            "ioc_value": "chinarice.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 15:59:24",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833423": [
        {
            "ioc_value": "https://systemlt.site/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:24",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/systemlt.site",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833451": [
        {
            "ioc_value": "https://www.koktengri.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.koktengri.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833453": [
        {
            "ioc_value": "https://valorglobe.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:59:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/valorglobe.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833460": [
        {
            "ioc_value": "https://voltrix.lol/Beta/Voltrix.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 15:59:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "epol"
        }
    ],
    "1833462": [
        {
            "ioc_value": "https://bebra-dev.pro/Bebra.zip?v=1781701742050&r=34m3tk",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 15:59:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "epol"
        }
    ],
    "1833461": [
        {
            "ioc_value": "https://motido.lol/downloads",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 15:59:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "epol"
        }
    ],
    "1833479": [
        {
            "ioc_value": "96d69776c9a303e03f6539c3b1c1f3db",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-17 15:59:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sheet Rat,SheetRat",
            "anonymous": 0,
            "reporter": "ratguard"
        }
    ],
    "1833480": [
        {
            "ioc_value": "0db2674d46ce0843b2881ee27f9c93e358f205facdf834ac794d594920cee0df",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-17 15:58:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sheet Rat,SheetRat",
            "anonymous": 0,
            "reporter": "ratguard"
        }
    ],
    "1833484": [
        {
            "ioc_value": "185.182.65.150:20824",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-17 15:58:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Sheet Rat,SheetRat",
            "anonymous": 0,
            "reporter": "ratguard"
        }
    ],
    "1833485": [
        {
            "ioc_value": "https://cdn.jsdelivr.net/gh/vitiapig/api-bd7dff3f-84b7-4bbb-a8e1-7be98555d879/js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 15:54:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833483": [
        {
            "ioc_value": "43.138.165.203:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 15:46:35",
            "last_seen_utc": "2026-07-27 08:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833482": [
        {
            "ioc_value": "42.193.15.237:9003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 15:46:34",
            "last_seen_utc": "2026-07-27 08:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833481": [
        {
            "ioc_value": "156.234.211.242:7661",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 15:46:23",
            "last_seen_utc": "2026-07-19 14:47:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833478": [
        {
            "ioc_value": "chinarice.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:41:51",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833477": [
        {
            "ioc_value": "code-verification-js.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 15:39:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833472": [
        {
            "ioc_value": "429jq7cf.ravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 15:21:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833469": [
        {
            "ioc_value": "134.122.155.147:23610",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 14:21:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7e27deea413f5c390fd790423de9dc552a1e393187607485394044c4ddc85fdf/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833468": [
        {
            "ioc_value": "c.360ctct.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-17 14:21:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9ab135ec9d97c65caacdc2cd1ac166b7f491d8ad0635b3bd595a244ca6af9795/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833466": [
        {
            "ioc_value": "bvsfuyvu.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 13:53:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833465": [
        {
            "ioc_value": "ugygn.shartmag.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 13:33:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833464": [
        {
            "ioc_value": "uwso33yr.riyazinikokar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 13:18:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833463": [
        {
            "ioc_value": "cjbbdtba.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 13:16:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833452": [
        {
            "ioc_value": "vprhcxyu.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 12:44:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833450": [
        {
            "ioc_value": "qgkzqew.azmoonzare.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 12:14:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833449": [
        {
            "ioc_value": "zyiirlrr.tarikhravannovin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 12:11:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833440": [
        {
            "ioc_value": "147.93.191.75:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 12:00:22",
            "last_seen_utc": "2026-08-20 18:43:41",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833436": [
        {
            "ioc_value": "91.219.96.131:58908",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 11:47:00",
            "last_seen_utc": "2026-07-19 14:47:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833435": [
        {
            "ioc_value": "185.92.190.217:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 11:46:36",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833434": [
        {
            "ioc_value": "1.13.141.229:8480",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 11:46:12",
            "last_seen_utc": "2026-07-20 14:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833433": [
        {
            "ioc_value": "nc45aae1.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 11:44:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833432": [
        {
            "ioc_value": "ysulmnsc.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 11:37:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833431": [
        {
            "ioc_value": "flamecube.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-17 11:33:13",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833429": [
        {
            "ioc_value": "photo-drive-look.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-17 11:31:00",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833430": [
        {
            "ioc_value": "photokaz2.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-17 11:31:00",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833427": [
        {
            "ioc_value": "hafdlksiewq392dk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-17 11:30:59",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833428": [
        {
            "ioc_value": "image-bookoffice.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-17 11:30:59",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833425": [
        {
            "ioc_value": "jwouoops.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 11:08:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833419": [
        {
            "ioc_value": "hzvho.shartbandifootballkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 10:32:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833418": [
        {
            "ioc_value": "pvxvwrfu.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 10:32:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833414": [
        {
            "ioc_value": "192.210.186.212:5544",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 10:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1833415": [
        {
            "ioc_value": "192.210.186.212:5656",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 10:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1833416": [
        {
            "ioc_value": "192.210.186.212:1343",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 10:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1833417": [
        {
            "ioc_value": "192.210.186.212:4545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 10:07:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1833406": [
        {
            "ioc_value": "bchvsotq.questionsmotor.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 09:59:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833405": [
        {
            "ioc_value": "98.191.176.222:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-06-17 09:48:23",
            "last_seen_utc": "2026-08-08 18:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833404": [
        {
            "ioc_value": "85.137.58.53:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:48:10",
            "last_seen_utc": "2026-07-17 18:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833403": [
        {
            "ioc_value": "31.77.189.2:6064",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 09:46:53",
            "last_seen_utc": "2026-07-19 18:45:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833402": [
        {
            "ioc_value": "31.77.168.195:3009",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 09:46:52",
            "last_seen_utc": "2026-07-17 18:45:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833401": [
        {
            "ioc_value": "31.76.87.242:3305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 09:46:51",
            "last_seen_utc": "2026-07-19 18:45:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833387": [
        {
            "ioc_value": "https://swabina.co.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:46:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/swabina.co.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833388": [
        {
            "ioc_value": "https://ssagronursery.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:46:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ssagronursery.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833389": [
        {
            "ioc_value": "https://readingtime.space/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:46:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/readingtime.space",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833390": [
        {
            "ioc_value": "194.76.217.28:2871",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:46:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.wordfence.com/blog/2026/06/psa-supply-chain-compromise-targets-shapedplugin-backdoored-pro-plugins-distributed-via-official-channels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833391": [
        {
            "ioc_value": "generate.2faplugin.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:46:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.wordfence.com/blog/2026/06/psa-supply-chain-compromise-targets-shapedplugin-backdoored-pro-plugins-distributed-via-official-channels/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833400": [
        {
            "ioc_value": "2.26.74.90:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 09:45:18",
            "last_seen_utc": "2026-07-19 18:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833399": [
        {
            "ioc_value": "186.169.48.87:8092",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-17 09:44:51",
            "last_seen_utc": "2026-07-17 18:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833398": [
        {
            "ioc_value": "182.23.2.163:11667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 09:44:33",
            "last_seen_utc": "2026-07-17 08:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833397": [
        {
            "ioc_value": "178.128.116.134:3443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-17 09:44:26",
            "last_seen_utc": "2026-08-05 18:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833396": [
        {
            "ioc_value": "177.22.117.148:9001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.danabot",
            "malware_alias": "DanaTools",
            "malware_printable": "DanaBot",
            "first_seen_utc": "2026-06-17 09:44:25",
            "last_seen_utc": "2026-07-17 08:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DanBot,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833395": [
        {
            "ioc_value": "172.245.195.233:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 09:44:16",
            "last_seen_utc": "2026-07-17 08:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833394": [
        {
            "ioc_value": "147.93.191.75:2414",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-17 09:43:39",
            "last_seen_utc": "2026-07-17 08:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833393": [
        {
            "ioc_value": "138.199.59.5:53522",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 09:43:33",
            "last_seen_utc": "2026-07-24 07:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833392": [
        {
            "ioc_value": "103.53.80.201:1235",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-17 09:43:10",
            "last_seen_utc": "2026-08-24 18:43:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833386": [
        {
            "ioc_value": "brsppaxh.psgnewsiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 09:27:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833385": [
        {
            "ioc_value": "194.116.236.4:2829",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-17 09:26:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d9370a3a85d27b864790b225c529647667b5878690eafdcd805a1fd75c76648e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833384": [
        {
            "ioc_value": "bewsertinekk.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 09:19:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833383": [
        {
            "ioc_value": "9y6ugqql.zabanenglishanari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 09:18:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833380": [
        {
            "ioc_value": "okuiwrsf.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 08:54:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833379": [
        {
            "ioc_value": "hxelbvz.moshavereravan.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 08:52:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833378": [
        {
            "ioc_value": "zffeyivj.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 08:33:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833376": [
        {
            "ioc_value": "182.61.4.80:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 08:24:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833377": [
        {
            "ioc_value": "101.126.17.43:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 08:24:52",
            "last_seen_utc": "2026-06-19 07:43:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833375": [
        {
            "ioc_value": "175.24.207.15:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 08:24:51",
            "last_seen_utc": "2026-06-18 06:56:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833373": [
        {
            "ioc_value": "32.196.118.34:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 08:24:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833374": [
        {
            "ioc_value": "182.61.4.80:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 08:24:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833372": [
        {
            "ioc_value": "223.166.31.185:2082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-17 08:24:49",
            "last_seen_utc": "2026-08-28 08:08:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833371": [
        {
            "ioc_value": "141.140.0.215:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-17 08:21:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/56e40788e87392cbea4328852c9e5cfcf5ab0a96b778a540835b4fb0bd4cb2d1/",
            "tags": "ConnectWIse,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833370": [
        {
            "ioc_value": "141.140.0.188:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 08:18:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af3ecfc347087c080111b1e845c7d84a2e2625f6d126a0744c016d63ad74483c/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833369": [
        {
            "ioc_value": "141.140.0.116:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-17 08:17:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/57a17538be51fd67c23990096c864f953b32bed6087ad8e0662db2bdcab3c147/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833367": [
        {
            "ioc_value": "respectmountain.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-17 08:05:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833366": [
        {
            "ioc_value": "useeuclu.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 07:57:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833362": [
        {
            "ioc_value": "https://clauscreations.nl/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 07:38:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/clauscreations.nl",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833365": [
        {
            "ioc_value": "xmyzx.shansline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 07:37:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833364": [
        {
            "ioc_value": "https://kelkel.rmtdelek.digital/api/agent/register",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 07:31:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76ccd85ab8f28058a926eb8d2ea07dd7572896046dd1ae742ec453e1da9213e4/",
            "tags": "RMM",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833363": [
        {
            "ioc_value": "kelkel.rmtdelek.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 07:31:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76ccd85ab8f28058a926eb8d2ea07dd7572896046dd1ae742ec453e1da9213e4/",
            "tags": "RMM",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833353": [
        {
            "ioc_value": "https://www.sarivo.co/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 07:27:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.sarivo.co",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833360": [
        {
            "ioc_value": "141.94.121.162:111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-17 07:27:42",
            "last_seen_utc": "2026-06-24 19:05:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,dcrat,RAT",
            "anonymous": 0,
            "reporter": "Rootx007"
        }
    ],
    "1833361": [
        {
            "ioc_value": "ydgnpzbc.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 07:25:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833359": [
        {
            "ioc_value": "uuoecnbs.mechanickhodakarami.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 06:53:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833357": [
        {
            "ioc_value": "xcioxhpp.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 06:18:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833356": [
        {
            "ioc_value": "pirroflobsny.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-17 06:15:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f673426085334e706064501731e19ca5112d78c48aa94869ad1b8017874820fa/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833355": [
        {
            "ioc_value": "demagic009.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-17 06:15:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09cf564075e4a500b6df3a3ca263076c47730b28d60c12fc59c7fd4e7464fa85/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833354": [
        {
            "ioc_value": "107.173.47.132:2555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-17 06:05:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/18c7e2dc3aa3a2d0aa5493eddb3b08e24f21020da05e54a158a15ade67dc9279/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833341": [
        {
            "ioc_value": "https://recreio.pet/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:46",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/recreio.pet",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833342": [
        {
            "ioc_value": "https://scripterx.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/scripterx.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833343": [
        {
            "ioc_value": "https://slammedhospitalitytalk.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:45",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/slammedhospitalitytalk.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833344": [
        {
            "ioc_value": "https://renovapqs.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/renovapqs.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833345": [
        {
            "ioc_value": "https://rebuildinglivesinitiative.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:44",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/rebuildinglivesinitiative.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833062": [
        {
            "ioc_value": "9e4235c530fc10df9225e9ab98095d7a19d35f9e4ebf50a74dcb4b1e7bf86170",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/9e4235c530fc10df9225e9ab98095d7a19d35f9e4ebf50a74dcb4b1e7bf86170",
            "tags": "ClickFix,KongTuke,powershell-loader,rc4",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833063": [
        {
            "ioc_value": "https://verif-human.lol/m",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/9e4235c530fc10df9225e9ab98095d7a19d35f9e4ebf50a74dcb4b1e7bf86170",
            "tags": "ClickFix,KongTuke,powershell-loader,rc4",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1833065": [
        {
            "ioc_value": "725162f784b4438559ad5c434a0cb6f634a2a09f2aba1e4d5e5047f6e37f15a0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/725162f784b4438559ad5c434a0cb6f634a2a09f2aba1e4d5e5047f6e37f15a0",
            "tags": "dropper,fake-document,logmein-resolve,rmm,vbs",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1832952": [
        {
            "ioc_value": "https://aqua-methodsug.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aqua-methodsug.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832953": [
        {
            "ioc_value": "https://atheriumcode.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/atheriumcode.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832954": [
        {
            "ioc_value": "https://ayamprestonyonyalina.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ayamprestonyonyalina.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832955": [
        {
            "ioc_value": "https://blankpublication.at/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/blankpublication.at",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832956": [
        {
            "ioc_value": "https://ashifct.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ashifct.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832958": [
        {
            "ioc_value": "abelmomaroc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 05:45:27",
            "last_seen_utc": "2026-08-12 19:52:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1832960": [
        {
            "ioc_value": "ac4hosting.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 05:45:26",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1832796": [
        {
            "ioc_value": "https://afroskin.id/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:18",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/afroskin.id",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832797": [
        {
            "ioc_value": "https://abilitaseguros.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/abilitaseguros.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832798": [
        {
            "ioc_value": "https://abelmomaroc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/abelmomaroc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832799": [
        {
            "ioc_value": "https://activeiman.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/activeiman.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832800": [
        {
            "ioc_value": "https://2rbo.com.mx/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 05:45:16",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/2rbo.com.mx",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833352": [
        {
            "ioc_value": "wrlunpmj.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 05:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833351": [
        {
            "ioc_value": "ab950zja.testpaye.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 05:41:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833350": [
        {
            "ioc_value": "brcorni.mabaninazari.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 05:35:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833349": [
        {
            "ioc_value": "xlyvz7lr.motuntakhasosi.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 05:19:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833348": [
        {
            "ioc_value": "m7nohnc7.modiriyatnikbakht.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 05:14:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833347": [
        {
            "ioc_value": "jfxdrqqn.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 05:11:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833337": [
        {
            "ioc_value": "www.tr88.uno",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:43:01",
            "last_seen_utc": "2026-08-15 05:58:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833318": [
        {
            "ioc_value": "westlandconsultants.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:43:00",
            "last_seen_utc": "2026-08-14 08:58:38",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833330": [
        {
            "ioc_value": "www.lc3.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:43:00",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833301": [
        {
            "ioc_value": "tritantech.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:59",
            "last_seen_utc": "2026-08-12 20:32:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833288": [
        {
            "ioc_value": "tecnolozzi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:58",
            "last_seen_utc": "2026-08-28 11:44:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833289": [
        {
            "ioc_value": "teknolojikbirinsan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:58",
            "last_seen_utc": "2026-08-23 08:04:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833258": [
        {
            "ioc_value": "rebuildinglivesinitiative.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-12 20:32:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833259": [
        {
            "ioc_value": "recreio.pet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-23 08:04:42",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833260": [
        {
            "ioc_value": "refinedwearfashionstore.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-23 08:04:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833262": [
        {
            "ioc_value": "renovapqs.com.br",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-12 20:52:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833265": [
        {
            "ioc_value": "royalvet.es",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-24 00:37:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833269": [
        {
            "ioc_value": "scripterx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-23 08:04:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833270": [
        {
            "ioc_value": "sgsolicitors.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-12 20:42:18",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833272": [
        {
            "ioc_value": "shambolicliving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-12 20:32:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833273": [
        {
            "ioc_value": "slammedhospitalitytalk.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:57",
            "last_seen_utc": "2026-08-23 08:04:43",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833240": [
        {
            "ioc_value": "nicescleaningservice.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:56",
            "last_seen_utc": "2026-08-19 06:45:21",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833241": [
        {
            "ioc_value": "nuestisingur.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:56",
            "last_seen_utc": "2026-08-23 07:04:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833243": [
        {
            "ioc_value": "ouagayaar.bf",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:56",
            "last_seen_utc": "2026-08-23 07:04:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833223": [
        {
            "ioc_value": "mcliokays.co.zw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:55",
            "last_seen_utc": "2026-08-28 11:42:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833225": [
        {
            "ioc_value": "mediosdigitalesdelnorte.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:55",
            "last_seen_utc": "2026-08-12 21:02:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833226": [
        {
            "ioc_value": "mehedimartbd.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:55",
            "last_seen_utc": "2026-08-12 20:32:17",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833228": [
        {
            "ioc_value": "metroreportase.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:55",
            "last_seen_utc": "2026-08-23 07:13:37",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833205": [
        {
            "ioc_value": "judyprescottmarshall.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:54",
            "last_seen_utc": "2026-08-23 07:04:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833187": [
        {
            "ioc_value": "gospelofwork.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:53",
            "last_seen_utc": "2026-08-23 06:04:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833188": [
        {
            "ioc_value": "gracedrivenlife.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:53",
            "last_seen_utc": "2026-08-12 19:52:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833192": [
        {
            "ioc_value": "homefrontprojects.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:53",
            "last_seen_utc": "2026-08-12 19:52:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833195": [
        {
            "ioc_value": "iamstudent.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:53",
            "last_seen_utc": "2026-08-12 20:32:16",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833174": [
        {
            "ioc_value": "fabidi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:52",
            "last_seen_utc": "2026-08-12 21:02:19",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833141": [
        {
            "ioc_value": "database.lupusinforum.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:51",
            "last_seen_utc": "2026-08-15 11:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833150": [
        {
            "ioc_value": "domarisconcepts.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:51",
            "last_seen_utc": "2026-08-12 21:02:20",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833131": [
        {
            "ioc_value": "codropssarl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:50",
            "last_seen_utc": "2026-08-15 11:47:11",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833102": [
        {
            "ioc_value": "ashifct.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:49",
            "last_seen_utc": "2026-08-12 19:52:15",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833118": [
        {
            "ioc_value": "cameradalat.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:49",
            "last_seen_utc": "2026-08-28 11:41:55",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833099": [
        {
            "ioc_value": "aquapro.ro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-17 04:42:48",
            "last_seen_utc": "2026-08-26 21:54:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,CloudflareHardwareFingerprinting",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1833084": [
        {
            "ioc_value": "gzipfktz.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 04:39:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833083": [
        {
            "ioc_value": "vslaa.melbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 04:36:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833080": [
        {
            "ioc_value": "https://techwizzardz.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/techwizzardz.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833081": [
        {
            "ioc_value": "https://tecnolozzi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tecnolozzi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833082": [
        {
            "ioc_value": "https://topflytdrones.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/topflytdrones.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833078": [
        {
            "ioc_value": "https://taiwandonutsoh.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/taiwandonutsoh.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833079": [
        {
            "ioc_value": "https://somaxsis.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/somaxsis.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833077": [
        {
            "ioc_value": "jgyqxldn.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 04:06:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833068": [
        {
            "ioc_value": "https://www.madinastorebd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.madinastorebd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833069": [
        {
            "ioc_value": "https://www.thmonofuku.lat/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.thmonofuku.lat",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833070": [
        {
            "ioc_value": "https://www.citymoversmagazine.com.ng/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.citymoversmagazine.com.ng",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833071": [
        {
            "ioc_value": "https://www.elficarum.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.elficarum.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833072": [
        {
            "ioc_value": "https://www.itinera.healthcare/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.itinera.healthcare",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833073": [
        {
            "ioc_value": "https://wellzonebuildingcleaningservicesco.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wellzonebuildingcleaningservicesco.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833074": [
        {
            "ioc_value": "https://westlandconsultants.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/westlandconsultants.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833075": [
        {
            "ioc_value": "https://wbworkshops.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/wbworkshops.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833076": [
        {
            "ioc_value": "https://webeffa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/webeffa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833066": [
        {
            "ioc_value": "https://yourmusicboost.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/yourmusicboost.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833067": [
        {
            "ioc_value": "https://www.lc3.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 04:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.lc3.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833064": [
        {
            "ioc_value": "pjzhlamo.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 03:38:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833061": [
        {
            "ioc_value": "riyazinikokar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 03:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833060": [
        {
            "ioc_value": "oucgpofp.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 03:05:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833053": [
        {
            "ioc_value": "https://protraincompany.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/protraincompany.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833054": [
        {
            "ioc_value": "https://quickvinrecord.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/quickvinrecord.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833055": [
        {
            "ioc_value": "https://refinedwearfashionstore.shop/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/refinedwearfashionstore.shop",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833056": [
        {
            "ioc_value": "https://sgsolicitors.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sgsolicitors.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833057": [
        {
            "ioc_value": "https://ouagayaar.bf/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ouagayaar.bf",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833058": [
        {
            "ioc_value": "https://nicescleaningservice.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nicescleaningservice.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833059": [
        {
            "ioc_value": "https://nuestisingur.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nuestisingur.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833052": [
        {
            "ioc_value": "https://patronoapp.online/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 03:00:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/patronoapp.online",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833046": [
        {
            "ioc_value": "https://teknolojikbirinsan.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 02:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/teknolojikbirinsan.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833047": [
        {
            "ioc_value": "https://ultrasound-transducer-repair.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 02:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ultrasound-transducer-repair.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833048": [
        {
            "ioc_value": "https://shambolicliving.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 02:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/shambolicliving.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833049": [
        {
            "ioc_value": "https://tritantech.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 02:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tritantech.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833050": [
        {
            "ioc_value": "https://valuevillagelistens.pro/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 02:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/valuevillagelistens.pro",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833051": [
        {
            "ioc_value": "https://streamsvision.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 02:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/streamsvision.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833045": [
        {
            "ioc_value": "emjkevxm.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 02:28:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833044": [
        {
            "ioc_value": "emuerrz.ecologyardakani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 02:14:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833041": [
        {
            "ioc_value": "fqgadjsy.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 01:56:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833040": [
        {
            "ioc_value": "slceo.rocketbet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 01:31:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833039": [
        {
            "ioc_value": "lkkcicvs.tasisathosseini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 01:27:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833038": [
        {
            "ioc_value": "xsr8ggtp.riyaziatumumi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 01:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833037": [
        {
            "ioc_value": "riyaziatumumi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 01:11:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1833036": [
        {
            "ioc_value": "https://gooddealsinc.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gooddealsinc.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833027": [
        {
            "ioc_value": "https://judyprescottmarshall.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/judyprescottmarshall.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833028": [
        {
            "ioc_value": "https://indicatorspotvip.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/indicatorspotvip.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833029": [
        {
            "ioc_value": "https://homefrontprojects.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/homefrontprojects.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833030": [
        {
            "ioc_value": "https://htxvanthanhphat.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/htxvanthanhphat.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833031": [
        {
            "ioc_value": "https://iamstudent.co.uk/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/iamstudent.co.uk",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833032": [
        {
            "ioc_value": "https://hi-tech-engineering.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hi-tech-engineering.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833033": [
        {
            "ioc_value": "https://gracedrivenlife.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gracedrivenlife.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833034": [
        {
            "ioc_value": "https://gospelofwork.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/gospelofwork.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833035": [
        {
            "ioc_value": "https://ibtidaa.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 01:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ibtidaa.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833026": [
        {
            "ioc_value": "gidptxnf.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 00:50:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833019": [
        {
            "ioc_value": "https://mehedimartbd.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mehedimartbd.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833020": [
        {
            "ioc_value": "https://mobconic.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mobconic.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833021": [
        {
            "ioc_value": "https://mercadodeartesdigitales.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mercadodeartesdigitales.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833022": [
        {
            "ioc_value": "https://macbekent.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/macbekent.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833023": [
        {
            "ioc_value": "https://lumikaafricansafari.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lumikaafricansafari.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833024": [
        {
            "ioc_value": "https://metroreportase.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/metroreportase.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833025": [
        {
            "ioc_value": "https://lookeelooky.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/lookeelooky.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833018": [
        {
            "ioc_value": "https://mediosdigitalesdelnorte.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-17 00:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mediosdigitalesdelnorte.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833017": [
        {
            "ioc_value": "zab.hanyasm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 00:24:50",
            "last_seen_utc": "2026-06-17 11:24:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833016": [
        {
            "ioc_value": "https://zab.hanyasm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-17 00:24:49",
            "last_seen_utc": "2026-06-17 11:24:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833015": [
        {
            "ioc_value": "mbcmhapi.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-17 00:19:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833012": [
        {
            "ioc_value": "ghcruhhs.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 23:46:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833011": [
        {
            "ioc_value": "8.138.23.63:8999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 23:46:15",
            "last_seen_utc": "2026-07-19 14:47:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833010": [
        {
            "ioc_value": "43.138.225.166:6615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 23:46:04",
            "last_seen_utc": "2026-07-24 10:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833008": [
        {
            "ioc_value": "212.14.244.222:807",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 23:46:00",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833009": [
        {
            "ioc_value": "212.14.244.222:809",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 23:46:00",
            "last_seen_utc": "2026-09-01 02:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833007": [
        {
            "ioc_value": "122.51.50.44:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 23:45:48",
            "last_seen_utc": "2026-07-24 10:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1833006": [
        {
            "ioc_value": "ia9opth7.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 23:42:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833002": [
        {
            "ioc_value": "https://cwshealthsurvey.shop/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cwshealthsurvey.shop",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833003": [
        {
            "ioc_value": "https://couragefoundation.eu/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/couragefoundation.eu",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833004": [
        {
            "ioc_value": "https://cybernetron.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:30:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cybernetron.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1833001": [
        {
            "ioc_value": "trzyilzj.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 23:13:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1833000": [
        {
            "ioc_value": "reyhanebeheshti.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 23:11:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832996": [
        {
            "ioc_value": "https://drfelipearnaud.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/drfelipearnaud.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832997": [
        {
            "ioc_value": "https://dulichdonga.vn/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dulichdonga.vn",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832998": [
        {
            "ioc_value": "https://domarisconcepts.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/domarisconcepts.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832999": [
        {
            "ioc_value": "https://dietprepplaybook.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dietprepplaybook.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832989": [
        {
            "ioc_value": "https://electromep.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/electromep.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832990": [
        {
            "ioc_value": "https://festivaldotorresmo.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/festivaldotorresmo.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832991": [
        {
            "ioc_value": "https://forumjabar.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/forumjabar.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832992": [
        {
            "ioc_value": "https://fabidi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/fabidi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832993": [
        {
            "ioc_value": "https://enerjplus.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/enerjplus.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832994": [
        {
            "ioc_value": "https://ebyeos.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ebyeos.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832995": [
        {
            "ioc_value": "https://dnmurals.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 23:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dnmurals.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832988": [
        {
            "ioc_value": "185.61.211.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 22:55:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832987": [
        {
            "ioc_value": "220.158.232.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 22:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832985": [
        {
            "ioc_value": "0a948c1931e5371f089f3fffc6a4719e376181d2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-16 22:51:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832986": [
        {
            "ioc_value": "9394487225859e7dbe1daad782a83183",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-16 22:51:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832983": [
        {
            "ioc_value": "0fe35ce71b049eb3615d35fe5cecf094",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-16 22:51:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832984": [
        {
            "ioc_value": "f13f1e030219e6d913a9970ce27948832e92ee6d00b119217d3c146054a26d24",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-16 22:51:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832981": [
        {
            "ioc_value": "d06c8ee46e760f390dc48f0fa7723e1499998db0801881a3265c2ba3db91882e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-16 22:51:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832982": [
        {
            "ioc_value": "d8d2a0c6b4437b262e8bcc70253674c788551cf1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-16 22:51:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832980": [
        {
            "ioc_value": "xvjjvja.differentialmamuli.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 22:48:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832979": [
        {
            "ioc_value": "bmsmzuxa.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 22:41:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832978": [
        {
            "ioc_value": "pqjqu.shansbartar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 22:31:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832977": [
        {
            "ioc_value": "lueplxze.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 22:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832976": [
        {
            "ioc_value": "b17ae941d850e0d6baf662aa84b1df6e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 22:00:40",
            "last_seen_utc": "2026-06-16 22:51:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832974": [
        {
            "ioc_value": "0f5b306d0e04b56939893e35f82e218b618fbe4ec3ea21ff7316e866a46e9eb2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 22:00:39",
            "last_seen_utc": "2026-06-16 22:51:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832975": [
        {
            "ioc_value": "9489d727ae6c5e174ff63f8c1104022ea5bbc296",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 22:00:39",
            "last_seen_utc": "2026-06-16 22:51:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832973": [
        {
            "ioc_value": "https://chiltonlabs.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:07",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/chiltonlabs.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832972": [
        {
            "ioc_value": "https://ac4hosting.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:06",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ac4hosting.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832967": [
        {
            "ioc_value": "https://buildmoresolutions.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/buildmoresolutions.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832968": [
        {
            "ioc_value": "https://cedckenya.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cedckenya.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832969": [
        {
            "ioc_value": "https://buydallasland.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/buydallasland.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832970": [
        {
            "ioc_value": "https://ccshdi.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ccshdi.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832971": [
        {
            "ioc_value": "https://brasiltarot.online/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/brasiltarot.online",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832966": [
        {
            "ioc_value": "https://cameradalat.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 22:00:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/cameradalat.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832957": [
        {
            "ioc_value": "jwzyamqu.questionsmotor.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 21:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832947": [
        {
            "ioc_value": "09123808505e68eb9c8e8d0d2dfe36e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.quantloader",
            "malware_alias": null,
            "malware_printable": "QuantLoader",
            "first_seen_utc": "2026-06-16 21:13:51",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832943": [
        {
            "ioc_value": "a13048a4a3d8fb506660212b9bb642a240fca11a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:13:50",
            "last_seen_utc": "2026-06-16 22:01:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832944": [
        {
            "ioc_value": "2bc802979916f6cf10bfd109d4a54091",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:13:50",
            "last_seen_utc": "2026-06-16 22:01:32",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832945": [
        {
            "ioc_value": "6d799858922bd94541ded89edc69bde83fc8782d4a0bfb3cb10e50754d2ce6c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quantloader",
            "malware_alias": null,
            "malware_printable": "QuantLoader",
            "first_seen_utc": "2026-06-16 21:13:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832946": [
        {
            "ioc_value": "bdc146a6fe4991e40286657af4eeedebe1cbdd69",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.quantloader",
            "malware_alias": null,
            "malware_printable": "QuantLoader",
            "first_seen_utc": "2026-06-16 21:13:50",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832940": [
        {
            "ioc_value": "71c1b5ec2c39badd9ecf1f02ebe73d0019df7f28",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:49",
            "last_seen_utc": "2026-06-16 22:01:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832941": [
        {
            "ioc_value": "9e1e726d8402f1e4cfa828b8c6e66e92",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:49",
            "last_seen_utc": "2026-06-16 22:01:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832942": [
        {
            "ioc_value": "d11fe9e32edfb959a6ddc4f0a6d2e6db3cb70b14926ec6448484c399ee4cfa9e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:13:49",
            "last_seen_utc": "2026-06-16 22:01:31",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832937": [
        {
            "ioc_value": "92be5def3608f71ab6145a81b4b49d371acb382f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:48",
            "last_seen_utc": "2026-06-16 22:01:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832938": [
        {
            "ioc_value": "1a88b654dc5efe0baecfcdeabb0d16fe",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:48",
            "last_seen_utc": "2026-06-16 22:01:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832939": [
        {
            "ioc_value": "aab80214da54b65baecac6b1e7cb7788850df3471f4ef5a0e4ab9a47e8ec217a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:48",
            "last_seen_utc": "2026-06-16 22:01:30",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832934": [
        {
            "ioc_value": "69ea5ad518115d4415572290c5070b047fb2cbb4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 21:13:47",
            "last_seen_utc": "2026-06-16 22:01:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832935": [
        {
            "ioc_value": "5d83f35231503199c952d12f43feb834",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 21:13:47",
            "last_seen_utc": "2026-06-16 22:01:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832936": [
        {
            "ioc_value": "2b69579b89634572da0edd8f119d68ba091b466be5c2088a4b36dbb07ef10202",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:47",
            "last_seen_utc": "2026-06-16 22:01:29",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832931": [
        {
            "ioc_value": "d63d8f9adbd0be68d03726739027f55bf6c2ea02",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-16 21:13:46",
            "last_seen_utc": "2026-06-16 22:01:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832932": [
        {
            "ioc_value": "329b355f4dd316961a488f7520958f7a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-16 21:13:46",
            "last_seen_utc": "2026-06-16 22:01:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832933": [
        {
            "ioc_value": "41d6c23cb9a70bb4e547f67e175a0182ba5d3917a302cab798d425ffba6bccfd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 21:13:46",
            "last_seen_utc": "2026-06-16 22:01:28",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832928": [
        {
            "ioc_value": "43369f3d7198c4bb7b5791766ebbd2b6428281d5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 21:13:45",
            "last_seen_utc": "2026-06-16 22:01:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832929": [
        {
            "ioc_value": "7f62dbe03c7394b7f7e6b4f06bf3b39c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 21:13:45",
            "last_seen_utc": "2026-06-16 22:01:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832930": [
        {
            "ioc_value": "4dfeaffda4913db0a89c5a35ea2c3b4c3e8a96647224ced32de73349f6c6e61f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-16 21:13:45",
            "last_seen_utc": "2026-06-16 22:01:27",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832925": [
        {
            "ioc_value": "2fec4c9612aa029e925620b4648b2d11935e2f0a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 21:13:44",
            "last_seen_utc": "2026-06-16 22:01:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832926": [
        {
            "ioc_value": "a308ec75b4162425c45963777a2d20ce",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 21:13:44",
            "last_seen_utc": "2026-06-16 22:01:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832927": [
        {
            "ioc_value": "3c984b837219c7b80d7b8c1a517a5967753652830c01d5cea4c86c34971ca77f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 21:13:44",
            "last_seen_utc": "2026-06-16 22:01:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832922": [
        {
            "ioc_value": "8f5a019bf88b5ede19f7aa6e954c1c3456b2f290",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:43",
            "last_seen_utc": "2026-06-16 22:01:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832923": [
        {
            "ioc_value": "4d7c31510aa0084d9ebd7e465e7811a5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:43",
            "last_seen_utc": "2026-06-16 22:01:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832924": [
        {
            "ioc_value": "fc0fd807aa3d677a2de655b85ed7b98de50b85e1bb1488c720cd903150f887d2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 21:13:43",
            "last_seen_utc": "2026-06-16 22:01:26",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832918": [
        {
            "ioc_value": "5dc47c447ede34d11136676305147210acf9c68b1cce1531872edaec80421fb1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-06-16 21:13:42",
            "last_seen_utc": "2026-06-16 22:01:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832919": [
        {
            "ioc_value": "f376d30613d40df8502261466949582be1ea4b8f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-06-16 21:13:42",
            "last_seen_utc": "2026-06-16 22:01:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832920": [
        {
            "ioc_value": "54efa9d2da756db77e3366d8332783b5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.prometei",
            "malware_alias": null,
            "malware_printable": "Prometei",
            "first_seen_utc": "2026-06-16 21:13:42",
            "last_seen_utc": "2026-06-16 22:01:24",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832921": [
        {
            "ioc_value": "034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:42",
            "last_seen_utc": "2026-06-16 22:01:25",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832916": [
        {
            "ioc_value": "2fceb9030b56ab56278cff82581c74d63d8addb8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 21:13:41",
            "last_seen_utc": "2026-06-16 22:01:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832917": [
        {
            "ioc_value": "454544dc37c995eb4f9d5239ae5e602c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 21:13:41",
            "last_seen_utc": "2026-06-16 22:01:23",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832913": [
        {
            "ioc_value": "3466eff91d7981b9ef96d285fd8e9dfdb4f5931d7222858a7ba4dae5737c5662",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:40",
            "last_seen_utc": "2026-06-16 22:01:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832914": [
        {
            "ioc_value": "a612409817ecf8079ce1e163e39b72cd1ed031a5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:40",
            "last_seen_utc": "2026-06-16 22:01:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832915": [
        {
            "ioc_value": "a3a883fc818ff886d127f8677713b5bd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:40",
            "last_seen_utc": "2026-06-16 22:01:22",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832909": [
        {
            "ioc_value": "098f7a6eea5e0174cf206d0a25a05553",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-16 21:13:39",
            "last_seen_utc": "2026-06-16 22:01:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832910": [
        {
            "ioc_value": "2e75cb984f2e08e45fd1ae6c398b148c2f9a704aa9b83c286ca2236edb7315fe",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:39",
            "last_seen_utc": "2026-06-16 22:01:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832911": [
        {
            "ioc_value": "fb6d068309de3903bf0f1d2318b5fe6ef028a993",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:39",
            "last_seen_utc": "2026-06-16 22:01:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832912": [
        {
            "ioc_value": "884033e5d7548ecca97706a6b19c76d1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:39",
            "last_seen_utc": "2026-06-16 22:01:21",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832906": [
        {
            "ioc_value": "e27588b211293274c70d2766c3b889dd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:38",
            "last_seen_utc": "2026-06-16 22:01:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832907": [
        {
            "ioc_value": "a78a5dc6cdb8530325266f054e3ed7be585774eb219740831d139cd9f2659737",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-16 21:13:38",
            "last_seen_utc": "2026-06-16 22:01:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832908": [
        {
            "ioc_value": "7dfbc8818310c2e72ded30eddbf681d7ad2ec559",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-16 21:13:38",
            "last_seen_utc": "2026-06-16 22:01:20",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832903": [
        {
            "ioc_value": "2487776a9ae61250d594e84dc54b8543",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 21:13:37",
            "last_seen_utc": "2026-06-16 22:01:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832904": [
        {
            "ioc_value": "5a870518ce64edd9ba7185b1e3686fdcd7a4a13df7ca4835e9a68ae0f41caf7c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:37",
            "last_seen_utc": "2026-06-16 22:01:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832905": [
        {
            "ioc_value": "659fb9b78d729b00566720375b8dcda62d4b379f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:37",
            "last_seen_utc": "2026-06-16 22:01:19",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832900": [
        {
            "ioc_value": "60c6951eb4cdcc8531f5d0bae1b284ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:36",
            "last_seen_utc": "2026-06-16 22:01:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832901": [
        {
            "ioc_value": "707af1fc2b119cea491cf366d738634ec6918d12c0db13052f4f8f8bf139b7b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 21:13:36",
            "last_seen_utc": "2026-06-16 22:01:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832902": [
        {
            "ioc_value": "9fd993efa7edeb0bab996fea0ec8b0204a09bf94",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-16 21:13:36",
            "last_seen_utc": "2026-06-16 22:01:18",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832897": [
        {
            "ioc_value": "719a506be56da81969f7c439183ef4c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:35",
            "last_seen_utc": "2026-06-16 22:01:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832898": [
        {
            "ioc_value": "a1c41f9aec30973dd26c896128015649a055b2c7a59e488b66bab1f30816ff1f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:35",
            "last_seen_utc": "2026-06-16 22:01:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832899": [
        {
            "ioc_value": "3f3296b5eb56f7e922bf3be2a1089d7e854f6c87",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:35",
            "last_seen_utc": "2026-06-16 22:01:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832894": [
        {
            "ioc_value": "43fb437c6c181c0f0524c4bec059686f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:34",
            "last_seen_utc": "2026-06-16 22:01:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832895": [
        {
            "ioc_value": "9b1250b299fdb88e3ba6b9b3084851b9bcaffdeb202a85b02d20cd9a761af21e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:34",
            "last_seen_utc": "2026-06-16 22:01:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832896": [
        {
            "ioc_value": "3bd86f9c2626a5af34f141c45daac073e50ed004",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:34",
            "last_seen_utc": "2026-06-16 22:01:17",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832891": [
        {
            "ioc_value": "10dcb994591c8d3f81c83dada50d4d2d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:33",
            "last_seen_utc": "2026-06-16 22:01:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832892": [
        {
            "ioc_value": "dfd3f78b3313a33136b499ec4c74594376b83c9df882a410c95a6f41d42f41bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:33",
            "last_seen_utc": "2026-06-16 22:01:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832893": [
        {
            "ioc_value": "977ad4fa539054df10a43b01b7bee65cab804910",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-16 21:13:33",
            "last_seen_utc": "2026-06-16 22:01:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832888": [
        {
            "ioc_value": "92d6c394b1bf7357ee851b92e80296f4",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:32",
            "last_seen_utc": "2026-06-16 22:01:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832889": [
        {
            "ioc_value": "7e9b6481033ae24780e1816c891b9e518af44eef0cadde0903306eeed0162c52",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:32",
            "last_seen_utc": "2026-06-16 22:01:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832890": [
        {
            "ioc_value": "4a525af08f7ef5d9ce60bc888918124e4203ff53",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:32",
            "last_seen_utc": "2026-06-16 22:01:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832885": [
        {
            "ioc_value": "bf598339cf5d38d525d761bf1eb62370",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:31",
            "last_seen_utc": "2026-06-16 22:01:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832886": [
        {
            "ioc_value": "59320d6b1c1e96f31a84f23cfe9bbc36c17100df6ecf94439c90b1fb7af35b31",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:31",
            "last_seen_utc": "2026-06-16 22:01:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832887": [
        {
            "ioc_value": "ccb2b65f882fb8f243ad955260d63a6bdc585445",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:31",
            "last_seen_utc": "2026-06-16 22:01:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832882": [
        {
            "ioc_value": "d4ad96166ed5242fdc71764416df824d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-16 21:13:30",
            "last_seen_utc": "2026-06-16 22:01:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832883": [
        {
            "ioc_value": "daca3e60559b1aa57161573b0498de596866fb4eab3785a09fd6daf03bde2f84",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:30",
            "last_seen_utc": "2026-06-16 22:01:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832884": [
        {
            "ioc_value": "a8d352ebfdc534dc8514ea6e7fe1ff85a7435a96",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:30",
            "last_seen_utc": "2026-06-16 22:01:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832879": [
        {
            "ioc_value": "3791b58433d379c7fea76636a48aec06",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:29",
            "last_seen_utc": "2026-06-16 22:01:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832880": [
        {
            "ioc_value": "787b287a86e8b3cb0f84ea80115ef5e87cee33f13b418e98e32b4335fdcd63eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-16 21:13:29",
            "last_seen_utc": "2026-06-16 22:01:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832881": [
        {
            "ioc_value": "3860f7ea0c5165c94b5f0e432abb2142f7a7ff32",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-16 21:13:29",
            "last_seen_utc": "2026-06-16 22:01:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832876": [
        {
            "ioc_value": "ab236088ec7fad454fad6d3dd7d568ac",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:28",
            "last_seen_utc": "2026-06-16 22:01:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832877": [
        {
            "ioc_value": "7d7e966289ffed9e6b926987a1ee6503c2cf849fcea70e81ab6b46d2f32b358e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:28",
            "last_seen_utc": "2026-06-16 22:01:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832878": [
        {
            "ioc_value": "ef5c7dd3b84717c29478f199cb6489ad68ee2fe1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-16 21:13:28",
            "last_seen_utc": "2026-06-16 22:01:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832873": [
        {
            "ioc_value": "ac3f398f2bb1a25d342fcd9e440bca0a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-16 21:13:27",
            "last_seen_utc": "2026-06-16 22:01:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832874": [
        {
            "ioc_value": "ea4bceecaa998badef365bc44eeebe4a99d1de878ecf8dd56b6e2fe2f663b911",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:27",
            "last_seen_utc": "2026-06-16 22:01:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832875": [
        {
            "ioc_value": "c1357f0d778881e082a699a0124ee94b33ea313e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:27",
            "last_seen_utc": "2026-06-16 22:01:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832870": [
        {
            "ioc_value": "6770efa141ede4415262c8b1a210b9ee",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:26",
            "last_seen_utc": "2026-06-16 22:01:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832871": [
        {
            "ioc_value": "ec2ec4474f27e599379a2d65567fab4042cca9d536c3c0a7e2f8f953b47a598e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-16 21:13:26",
            "last_seen_utc": "2026-06-16 22:01:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832872": [
        {
            "ioc_value": "13e6a579e19d3898c7c983f09f9e51bef0a6a7ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-16 21:13:26",
            "last_seen_utc": "2026-06-16 22:01:09",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832867": [
        {
            "ioc_value": "80bc9159d86170586359786371b1adeb",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "osx.pureland",
            "malware_alias": null,
            "malware_printable": "Pureland",
            "first_seen_utc": "2026-06-16 21:13:25",
            "last_seen_utc": "2026-06-16 22:01:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832868": [
        {
            "ioc_value": "f622ad48334b0a2a5fe28ac97e52a24c8bf65803ca36afb8f3103db8fbab107f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:25",
            "last_seen_utc": "2026-06-16 22:01:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832869": [
        {
            "ioc_value": "d959eb477280034a31af097d4d592dd1114fde06",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-16 21:13:25",
            "last_seen_utc": "2026-06-16 22:01:08",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832864": [
        {
            "ioc_value": "b5860fb24c90f6c3e7e40a0479454a00",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.earthworm",
            "malware_alias": null,
            "malware_printable": "Earthworm",
            "first_seen_utc": "2026-06-16 21:13:24",
            "last_seen_utc": "2026-06-16 22:01:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832865": [
        {
            "ioc_value": "72d9bc04b1dfdaffc927886217386e272798a62fb7c5e54e0c4fec1c6658bfaa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.pureland",
            "malware_alias": null,
            "malware_printable": "Pureland",
            "first_seen_utc": "2026-06-16 21:13:24",
            "last_seen_utc": "2026-06-16 22:01:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832866": [
        {
            "ioc_value": "61d3e96646fba63e999cf52e1843c2668d8558ab",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.pureland",
            "malware_alias": null,
            "malware_printable": "Pureland",
            "first_seen_utc": "2026-06-16 21:13:24",
            "last_seen_utc": "2026-06-16 22:01:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832861": [
        {
            "ioc_value": "7efc3d83ce8f54d93966930c0a8b3316",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:23",
            "last_seen_utc": "2026-06-16 22:01:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832862": [
        {
            "ioc_value": "926e8f1a7f349ff1eef31f89fa8ffe265c30b92e310e8bea19962d38f8c32129",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.earthworm",
            "malware_alias": null,
            "malware_printable": "Earthworm",
            "first_seen_utc": "2026-06-16 21:13:23",
            "last_seen_utc": "2026-06-16 22:01:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832863": [
        {
            "ioc_value": "36cede86d464dacbdc9020082f98e77de0a31bc3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.earthworm",
            "malware_alias": null,
            "malware_printable": "Earthworm",
            "first_seen_utc": "2026-06-16 21:13:23",
            "last_seen_utc": "2026-06-16 22:01:07",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832858": [
        {
            "ioc_value": "a74dda53a5bd51574dd0dcf6c4fc3f19",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:22",
            "last_seen_utc": "2026-06-16 22:01:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832859": [
        {
            "ioc_value": "a4018431ceef5951f42ba74ff9a78db54d43030590b1ade030136227eee9035d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:22",
            "last_seen_utc": "2026-06-16 22:01:05",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832860": [
        {
            "ioc_value": "039599f14cb1ff9f6d9ea7d5cd671b05d5690337",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:22",
            "last_seen_utc": "2026-06-16 22:01:06",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832855": [
        {
            "ioc_value": "9ef660730744dbcad26f40108654ceef",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:21",
            "last_seen_utc": "2026-06-16 22:01:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832856": [
        {
            "ioc_value": "889e20486aa636bb4691c3744afb7ab132a6ce0343afdcec69b9ff65b83921ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:21",
            "last_seen_utc": "2026-06-16 22:01:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832857": [
        {
            "ioc_value": "e805c6c29a90bc26175a554575356d4214c98aa7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:21",
            "last_seen_utc": "2026-06-16 22:01:04",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832853": [
        {
            "ioc_value": "eca23985908165bcc9684bf5b0b500601cf0f1861dd97192517beb0401e601f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:20",
            "last_seen_utc": "2026-06-16 22:01:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832854": [
        {
            "ioc_value": "b97f98aca0828efd5f37ace123a1478e7d784ce5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:20",
            "last_seen_utc": "2026-06-16 22:01:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832850": [
        {
            "ioc_value": "7aaee368f19c7282c7f29ed7e7e236afbafdbd2264bd263ee7a03afd05a47e43",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:19",
            "last_seen_utc": "2026-06-16 22:01:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832851": [
        {
            "ioc_value": "b68ad50cf0875dbded123d91f189275764a0b948",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:19",
            "last_seen_utc": "2026-06-16 22:01:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832852": [
        {
            "ioc_value": "af08bec973fdd3d7984edcadb24f3d42",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:19",
            "last_seen_utc": "2026-06-16 22:01:03",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832847": [
        {
            "ioc_value": "ddaf0d03ed052c9f1cf94cd0ed028129c868e550057cf43826ecc0a45e0b10e0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:18",
            "last_seen_utc": "2026-06-16 22:01:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832848": [
        {
            "ioc_value": "e15764ce94cb76a6f995207737062662ec5c81bd",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:18",
            "last_seen_utc": "2026-06-16 22:01:01",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832849": [
        {
            "ioc_value": "92d67d5f59e1c708af8a4ec0dbe1d8dc",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:18",
            "last_seen_utc": "2026-06-16 22:01:02",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832844": [
        {
            "ioc_value": "2c2ac25b1fa7891ca502f8a4e3146973e560c467cbfc9df395842d4a07854420",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:17",
            "last_seen_utc": "2026-06-16 22:01:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832845": [
        {
            "ioc_value": "ac4c6c27eaf4adce81f2108c560bb4da957d5c09",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:17",
            "last_seen_utc": "2026-06-16 22:01:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832846": [
        {
            "ioc_value": "3adfb1123589caeabc71d3adaecb630b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:17",
            "last_seen_utc": "2026-06-16 22:01:00",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832841": [
        {
            "ioc_value": "d9532a6706ea786a8ca1a39980eb6094a11cd233838032518201a84e43a0b584",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:16",
            "last_seen_utc": "2026-06-16 22:00:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832842": [
        {
            "ioc_value": "5378cd24fbb6c548bdc08e320b8f7de8a994774e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:16",
            "last_seen_utc": "2026-06-16 22:00:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832843": [
        {
            "ioc_value": "c0259b0210de1109edef3eb814e1575a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:16",
            "last_seen_utc": "2026-06-16 22:00:59",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832837": [
        {
            "ioc_value": "aba6be1e3490f6e7e8bff08e8c63a63b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:15",
            "last_seen_utc": "2026-06-16 22:00:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832838": [
        {
            "ioc_value": "f1e1aa06c3793b8e15b15408d32e6df5007d784ddb206f9c4b3075f89e8cb3de",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:15",
            "last_seen_utc": "2026-06-16 22:00:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832839": [
        {
            "ioc_value": "3588153e1f3d52350a00b80558b4bff35781c892",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:15",
            "last_seen_utc": "2026-06-16 22:00:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832840": [
        {
            "ioc_value": "f7217247715350ecb3679e6ae91c77f1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-16 21:13:15",
            "last_seen_utc": "2026-06-16 22:00:58",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832835": [
        {
            "ioc_value": "7c31714b869453bd2e9f0e6506b1feb095b743fa191911b3115be14875f430e8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:14",
            "last_seen_utc": "2026-06-16 22:00:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832836": [
        {
            "ioc_value": "d1e31973ba774b463150c869dc8fc9194b463e63",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:14",
            "last_seen_utc": "2026-06-16 22:00:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832832": [
        {
            "ioc_value": "4c5b729c3522fdd11dfd3e5807c225df109172981d2c214b2a905fa2bf6b39e2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:13:13",
            "last_seen_utc": "2026-06-16 22:00:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832833": [
        {
            "ioc_value": "08f213fdcc86f243bd893432b32df9d6b0830cd6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:13:13",
            "last_seen_utc": "2026-06-16 22:00:56",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832834": [
        {
            "ioc_value": "d68499e4698ec63820ba5b745df2c841",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:13:13",
            "last_seen_utc": "2026-06-16 22:00:57",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832829": [
        {
            "ioc_value": "4bc82ebc691ce659b591db26ce756df0bd2da2959a0f84c2deba108f12660993",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:12",
            "last_seen_utc": "2026-06-16 22:00:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832830": [
        {
            "ioc_value": "781936dd2ef090336d7803d53e5bc23b021952cb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:12",
            "last_seen_utc": "2026-06-16 22:00:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832831": [
        {
            "ioc_value": "4f5295be962f9c1cd9e0537eba76c863",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 21:13:12",
            "last_seen_utc": "2026-06-16 22:00:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832825": [
        {
            "ioc_value": "4b47a73113b5de485833cd436ef95625",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-16 21:13:11",
            "last_seen_utc": "2026-06-16 22:00:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832826": [
        {
            "ioc_value": "c1e8ea0ebbe41a5714caca4fc85046de84dd82553379c16b7f83b0c7fc8ce20a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-16 21:13:11",
            "last_seen_utc": "2026-06-16 22:00:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832827": [
        {
            "ioc_value": "1656334adf66a7d04de72119fade56652898c366",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-16 21:13:11",
            "last_seen_utc": "2026-06-16 22:00:54",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832828": [
        {
            "ioc_value": "b4352b63afaf0d6888c9f5f4b250668e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-16 21:13:11",
            "last_seen_utc": "2026-06-16 22:00:55",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832822": [
        {
            "ioc_value": "bdf08ce9ab6f348e47f6e8af26af4a65",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-16 21:13:10",
            "last_seen_utc": "2026-06-16 22:00:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832823": [
        {
            "ioc_value": "e5c606aebddf2f6f52d66c1667cd1790ca89e7d49ce206422a8d2375c3d7d176",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-16 21:13:10",
            "last_seen_utc": "2026-06-16 22:00:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832824": [
        {
            "ioc_value": "c04fcd595a584ffce678fd46e31793bc1e8b435b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.stealler",
            "malware_alias": null,
            "malware_printable": "stealler",
            "first_seen_utc": "2026-06-16 21:13:10",
            "last_seen_utc": "2026-06-16 22:00:53",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832819": [
        {
            "ioc_value": "435a9ca02b7f3bf72aa917a9803a0f63",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:09",
            "last_seen_utc": "2026-06-16 22:00:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832820": [
        {
            "ioc_value": "d56bd06a68d33a1d07b75d1caec577a592dc7ea893d34153746b0d4cec21de58",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-16 21:13:09",
            "last_seen_utc": "2026-06-16 22:00:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832821": [
        {
            "ioc_value": "d3919b114fc4e131f769b154db6b6c0b0b8b569b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-16 21:13:09",
            "last_seen_utc": "2026-06-16 22:00:52",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832816": [
        {
            "ioc_value": "d94999c701738da0dd72cffe8c9ac30d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-16 21:13:08",
            "last_seen_utc": "2026-06-16 22:00:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832817": [
        {
            "ioc_value": "b7913355c3a29e9bcb4bc950dd8395b8429ec65a84e50f4ce173a313394b84d8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:08",
            "last_seen_utc": "2026-06-16 22:00:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832818": [
        {
            "ioc_value": "dc9a86b989cd11cc82d077e3b5d28ebd8e168dd2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-16 21:13:08",
            "last_seen_utc": "2026-06-16 22:00:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832813": [
        {
            "ioc_value": "806e54bd980e0465d92db5b11f81021c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.earthworm",
            "malware_alias": null,
            "malware_printable": "Earthworm",
            "first_seen_utc": "2026-06-16 21:13:07",
            "last_seen_utc": "2026-06-16 22:00:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832814": [
        {
            "ioc_value": "61e14086ff1b7559ce908651269a3d734d69f144a985d8e21791199ba954b532",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-16 21:13:07",
            "last_seen_utc": "2026-06-16 22:00:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832815": [
        {
            "ioc_value": "da897a1b9ae473115c65570684452efdb41e1ec4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-16 21:13:07",
            "last_seen_utc": "2026-06-16 22:00:51",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832811": [
        {
            "ioc_value": "4a8599ac36825b0a6433ab5b8088f51569808740332a4c140196a3f4e84fca12",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.earthworm",
            "malware_alias": null,
            "malware_printable": "Earthworm",
            "first_seen_utc": "2026-06-16 21:13:06",
            "last_seen_utc": "2026-06-16 22:00:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832812": [
        {
            "ioc_value": "8da24a60d02002707b2f547a7cfaf56057a3bf05",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.earthworm",
            "malware_alias": null,
            "malware_printable": "Earthworm",
            "first_seen_utc": "2026-06-16 21:13:06",
            "last_seen_utc": "2026-06-16 22:00:50",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832810": [
        {
            "ioc_value": "0bb18e2cdcd593bcad15bae3a506256a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:12:58",
            "last_seen_utc": "2026-06-16 22:51:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832807": [
        {
            "ioc_value": "5b4474c82d9b379676013d92a59db2e6",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:12:57",
            "last_seen_utc": "2026-06-16 22:51:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832808": [
        {
            "ioc_value": "71cba217e9878542c95b8fee784bba83a6d4cc9c0e1d8aaccf7186f742e3fc36",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:12:57",
            "last_seen_utc": "2026-06-16 22:51:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832809": [
        {
            "ioc_value": "bd2782ac3fc8d64238ca407075dcfffe164acb61",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:12:57",
            "last_seen_utc": "2026-06-16 22:51:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832805": [
        {
            "ioc_value": "c4ddc279b913182cdeea144a065415f26a8988648b8415f25369204ecb54cf97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:12:56",
            "last_seen_utc": "2026-06-16 22:51:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832806": [
        {
            "ioc_value": "4223d5ea0766870914492e4fd55518838e5cb0bb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.venus_stealer",
            "malware_alias": null,
            "malware_printable": "Venus Stealer",
            "first_seen_utc": "2026-06-16 21:12:56",
            "last_seen_utc": "2026-06-16 22:51:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832804": [
        {
            "ioc_value": "zqxhkfn1.mohasebatadadi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 21:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832803": [
        {
            "ioc_value": "mohasebatadadi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 21:10:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832802": [
        {
            "ioc_value": "eoubkysl.psgnewsiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 21:07:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832794": [
        {
            "ioc_value": "poxcezrq.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 20:29:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832793": [
        {
            "ioc_value": "nebxkrhy.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 20:23:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832787": [
        {
            "ioc_value": "cpysndcd.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 19:51:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832786": [
        {
            "ioc_value": "96.44.167.215:14643",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:45:41",
            "last_seen_utc": "2026-07-16 18:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832784": [
        {
            "ioc_value": "85.215.105.23:1231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 19:45:35",
            "last_seen_utc": "2026-07-17 08:47:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832785": [
        {
            "ioc_value": "87.182.39.55:51124",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 19:45:35",
            "last_seen_utc": "2026-07-19 08:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832783": [
        {
            "ioc_value": "74.208.13.152:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 19:45:29",
            "last_seen_utc": "2026-07-22 08:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832780": [
        {
            "ioc_value": "45.198.224.210:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 19:45:06",
            "last_seen_utc": "2026-08-02 08:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832781": [
        {
            "ioc_value": "45.198.224.211:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 19:45:06",
            "last_seen_utc": "2026-08-02 08:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832782": [
        {
            "ioc_value": "45.198.224.212:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 19:45:06",
            "last_seen_utc": "2026-08-01 18:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832779": [
        {
            "ioc_value": "31.77.168.195:3011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 19:44:53",
            "last_seen_utc": "2026-07-17 08:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832778": [
        {
            "ioc_value": "31.76.32.159:9521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:44:52",
            "last_seen_utc": "2026-07-19 18:45:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832776": [
        {
            "ioc_value": "2.26.75.102:2428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:44:06",
            "last_seen_utc": "2026-07-19 18:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832777": [
        {
            "ioc_value": "2.26.75.121:8912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:44:06",
            "last_seen_utc": "2026-07-19 08:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832774": [
        {
            "ioc_value": "2.26.228.27:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 19:44:05",
            "last_seen_utc": "2026-07-17 08:45:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832775": [
        {
            "ioc_value": "2.26.74.90:8455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:44:05",
            "last_seen_utc": "2026-07-19 18:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832773": [
        {
            "ioc_value": "194.116.236.239:4098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:44:02",
            "last_seen_utc": "2026-07-18 08:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832771": [
        {
            "ioc_value": "192.3.136.254:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:43:58",
            "last_seen_utc": "2026-07-20 08:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832772": [
        {
            "ioc_value": "192.3.136.254:14649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:43:58",
            "last_seen_utc": "2026-07-20 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832770": [
        {
            "ioc_value": "185.141.61.187:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 19:43:49",
            "last_seen_utc": "2026-07-17 08:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832769": [
        {
            "ioc_value": "182.23.2.163:2598",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 19:43:46",
            "last_seen_utc": "2026-07-16 18:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832765": [
        {
            "ioc_value": "156.247.54.11:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-16 19:43:26",
            "last_seen_utc": "2026-08-06 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832766": [
        {
            "ioc_value": "156.247.54.12:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-16 19:43:26",
            "last_seen_utc": "2026-08-06 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832767": [
        {
            "ioc_value": "156.247.54.13:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-16 19:43:26",
            "last_seen_utc": "2026-08-06 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832768": [
        {
            "ioc_value": "156.247.54.14:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-16 19:43:26",
            "last_seen_utc": "2026-08-06 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832764": [
        {
            "ioc_value": "147.93.191.75:85",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 19:43:20",
            "last_seen_utc": "2026-07-16 18:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832763": [
        {
            "ioc_value": "142.111.135.162:16080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-16 19:43:17",
            "last_seen_utc": "2026-07-16 18:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832762": [
        {
            "ioc_value": "119.59.118.75:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 19:43:12",
            "last_seen_utc": "2026-09-01 02:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832761": [
        {
            "ioc_value": "102.220.160.222:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 19:43:02",
            "last_seen_utc": "2026-07-25 08:43:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832760": [
        {
            "ioc_value": "niowimq.shansline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 19:30:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832759": [
        {
            "ioc_value": "zvday.defamogadas.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 19:27:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832758": [
        {
            "ioc_value": "hxfvuhay.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 19:22:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832757": [
        {
            "ioc_value": "ro68mi4f.hesabdari2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 19:18:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832756": [
        {
            "ioc_value": "mohandesitraffic.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 19:10:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832753": [
        {
            "ioc_value": "f3e1459d687da13f8455a49ada4ba782c433a08bf17bf268a965038ef39a5317",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phemedrone_stealer",
            "malware_alias": "Ov3r_Stealer",
            "malware_printable": "Phemedrone Stealer",
            "first_seen_utc": "2026-06-16 19:05:13",
            "last_seen_utc": "2026-06-16 22:00:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832754": [
        {
            "ioc_value": "b37e300e442c4f40c3887c06e674926454d715ce",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phemedrone_stealer",
            "malware_alias": "Ov3r_Stealer",
            "malware_printable": "Phemedrone Stealer",
            "first_seen_utc": "2026-06-16 19:05:13",
            "last_seen_utc": "2026-06-16 22:00:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832755": [
        {
            "ioc_value": "6cc2ef716ba1fd8af7ee825cd332b158",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phemedrone_stealer",
            "malware_alias": "Ov3r_Stealer",
            "malware_printable": "Phemedrone Stealer",
            "first_seen_utc": "2026-06-16 19:05:13",
            "last_seen_utc": "2026-06-16 22:00:49",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832750": [
        {
            "ioc_value": "c32864b6ddfede2177fc0c4ba11ca21ae80cc0c3e1b3d218f4920ea2ddc3e46a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.timbre_stealer",
            "malware_alias": null,
            "malware_printable": "TimbreStealer",
            "first_seen_utc": "2026-06-16 19:05:12",
            "last_seen_utc": "2026-06-16 22:00:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832751": [
        {
            "ioc_value": "ac82eaea1253f735c782ef58d464ddd8e86f3ab1",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.timbre_stealer",
            "malware_alias": null,
            "malware_printable": "TimbreStealer",
            "first_seen_utc": "2026-06-16 19:05:12",
            "last_seen_utc": "2026-06-16 22:00:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832752": [
        {
            "ioc_value": "fc5a6cafed04f3f052d8b94d20eeb650",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.timbre_stealer",
            "malware_alias": null,
            "malware_printable": "TimbreStealer",
            "first_seen_utc": "2026-06-16 19:05:12",
            "last_seen_utc": "2026-06-16 22:00:48",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832748": [
        {
            "ioc_value": "5f029428932c332ac9939d21234bdf37657372be",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-06-16 19:05:11",
            "last_seen_utc": "2026-06-16 22:00:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832749": [
        {
            "ioc_value": "6bc2ac222f8d27464fe186b5f2a055e7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-06-16 19:05:11",
            "last_seen_utc": "2026-06-16 22:00:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832745": [
        {
            "ioc_value": "1d2fc128c078e369cc50d038d1301cf17f48a70f",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-06-16 19:05:10",
            "last_seen_utc": "2026-06-16 22:00:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832746": [
        {
            "ioc_value": "e228b521325b001cecf46224c8e96562",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-06-16 19:05:10",
            "last_seen_utc": "2026-06-16 22:00:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832747": [
        {
            "ioc_value": "879950da6d18cac34619af10099bd5cfe766436f6ad2df7aabd4d5439154f462",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.yibackdoor",
            "malware_alias": null,
            "malware_printable": "YiBackdoor",
            "first_seen_utc": "2026-06-16 19:05:10",
            "last_seen_utc": "2026-06-16 22:00:47",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832743": [
        {
            "ioc_value": "b77625cae72301aa6736c543f1c9d80f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 19:05:09",
            "last_seen_utc": "2026-06-16 22:00:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832744": [
        {
            "ioc_value": "f993630f802c3958c1ed9f5e8f1f09ab8c568a55c26658172105eabf20d3080b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.svcstealer",
            "malware_alias": null,
            "malware_printable": "SVCStealer",
            "first_seen_utc": "2026-06-16 19:05:09",
            "last_seen_utc": "2026-06-16 22:00:46",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832740": [
        {
            "ioc_value": "5bf6e385651d48acf554428e8301ef5b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-16 19:05:08",
            "last_seen_utc": "2026-06-16 22:00:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832741": [
        {
            "ioc_value": "0da7be1647f31711fd16932c46c9897f5d5d321746d4e8ff0f5184c59d08cbe4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 19:05:08",
            "last_seen_utc": "2026-06-16 22:00:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832742": [
        {
            "ioc_value": "4b71682ee75869007a32d565642e39eb1f233dcb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-16 19:05:08",
            "last_seen_utc": "2026-06-16 22:00:45",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832738": [
        {
            "ioc_value": "e38a83583a9e712d2163224485ecd934e9b27a6850bbe3c022d6344d0298a188",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-16 19:05:07",
            "last_seen_utc": "2026-06-16 22:00:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832739": [
        {
            "ioc_value": "36fac57421cd3e344ae6f03685df703c83cf592a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-16 19:05:07",
            "last_seen_utc": "2026-06-16 22:00:44",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832736": [
        {
            "ioc_value": "89645be5e141a5cb33788b798085a7e649014952",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-16 19:05:06",
            "last_seen_utc": "2026-06-16 22:51:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832737": [
        {
            "ioc_value": "dcad6b0d28491d35d79b9f28728ae9e3",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-16 19:05:06",
            "last_seen_utc": "2026-06-16 22:51:16",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832733": [
        {
            "ioc_value": "3f77b99063dff07b1310a98df2c6ffb1ffd0e171",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-16 19:05:05",
            "last_seen_utc": "2026-06-16 22:51:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832734": [
        {
            "ioc_value": "345a1ab350f2c7ddabf686e27e784941",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-16 19:05:05",
            "last_seen_utc": "2026-06-16 22:51:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832735": [
        {
            "ioc_value": "d313447f8bc9b4e058ca7b3de4cb73f03be0713a730b73cc03a9faecbeb288bc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "py.creal_stealer",
            "malware_alias": null,
            "malware_printable": "Creal Stealer",
            "first_seen_utc": "2026-06-16 19:05:05",
            "last_seen_utc": "2026-06-16 22:51:15",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832732": [
        {
            "ioc_value": "b4f2276d77aab7af850e2994faf1f44524a4356ed3ffea0e1ddd4e56dfb274c7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-16 19:05:04",
            "last_seen_utc": "2026-06-16 22:51:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832731": [
        {
            "ioc_value": "llmpgrax.mechanickhodakarami.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 18:45:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832730": [
        {
            "ioc_value": "moqlgtez.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 18:17:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832725": [
        {
            "ioc_value": "spnzuoez.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 17:44:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832724": [
        {
            "ioc_value": "03mnh00l.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 17:40:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832722": [
        {
            "ioc_value": "https://yan.rzrrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 17:25:13",
            "last_seen_utc": "2026-06-16 23:25:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832723": [
        {
            "ioc_value": "yan.rzrrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 17:25:13",
            "last_seen_utc": "2026-06-16 23:25:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832720": [
        {
            "ioc_value": "https://yan.hanyasm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 17:25:00",
            "last_seen_utc": "2026-06-16 23:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832721": [
        {
            "ioc_value": "yan.hanyasm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 17:25:00",
            "last_seen_utc": "2026-06-16 23:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832719": [
        {
            "ioc_value": "oyqqqexh.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 17:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832718": [
        {
            "ioc_value": "rb907ecj.modiriyatnikbakht.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 17:11:29",
            "last_seen_utc": "2026-06-16 17:19:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832717": [
        {
            "ioc_value": "mvipnisr.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832716": [
        {
            "ioc_value": "ojrxidv.shartbandifootballkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 16:30:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832715": [
        {
            "ioc_value": "bqtnx.danestanihavarzeshi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 16:06:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832714": [
        {
            "ioc_value": "zvwkvpww.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 16:03:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832713": [
        {
            "ioc_value": "modiriyatbehrangi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 15:34:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832712": [
        {
            "ioc_value": "fvnxmnaz.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 15:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832704": [
        {
            "ioc_value": "whid-cloude.us.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 15:12:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/5f64a0b2fcf36085e27062589a198ae299d4698c16204a0ad4cb702ef694ad2c",
            "tags": "ClickFix,loader,msiexec",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1832705": [
        {
            "ioc_value": "95.85.239.118:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 15:12:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/5f64a0b2fcf36085e27062589a198ae299d4698c16204a0ad4cb702ef694ad2c",
            "tags": "ClickFix,loader,msiexec",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1832706": [
        {
            "ioc_value": "gzljyxqt.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 14:57:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832703": [
        {
            "ioc_value": "olttywek.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 14:24:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832702": [
        {
            "ioc_value": "essentials733.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 14:20:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4e03498bc61d2b713c0669b58c45dbfd2bc6091ce3db935c5df104a9bb6e3f93/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832698": [
        {
            "ioc_value": "185.91.69.99:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-16 14:09:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832688": [
        {
            "ioc_value": "https://dom-inn.de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 14:02:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/dom-inn.de",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832687": [
        {
            "ioc_value": "uaxjdnjn.tarikhravannovin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 13:51:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832686": [
        {
            "ioc_value": "anxjzoez.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 13:49:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832685": [
        {
            "ioc_value": "vwdpxdo.shartmag.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 13:29:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832684": [
        {
            "ioc_value": "wlqmmlhp.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 13:16:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832683": [
        {
            "ioc_value": "38.49.208.47:22100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-16 13:15:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f0661c2e8446e0a94c9907f37cb9e2d97feb2a1e9a0182682fe57591293252e4/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832682": [
        {
            "ioc_value": "vue0sabv.vanatarsim.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 13:09:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832681": [
        {
            "ioc_value": "3hjfke61.usoleamoozesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 12:59:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832680": [
        {
            "ioc_value": "pgfor.bookdrive.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 12:49:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832679": [
        {
            "ioc_value": "bzdujmed.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 12:45:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832678": [
        {
            "ioc_value": "194.59.30.238:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:27:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832677": [
        {
            "ioc_value": "afxwd.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-16 12:20:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "NeptuneRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832676": [
        {
            "ioc_value": "oisapmtg.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 12:13:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832675": [
        {
            "ioc_value": "animal-zoo-lake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832674": [
        {
            "ioc_value": "ocean-animals.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832673": [
        {
            "ioc_value": "park-lake.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:13:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832656": [
        {
            "ioc_value": "bluyswow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:02:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832657": [
        {
            "ioc_value": "bluyterm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:02:49",
            "last_seen_utc": "2026-06-24 11:46:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832658": [
        {
            "ioc_value": "getmorphy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:02:49",
            "last_seen_utc": "2026-06-19 09:29:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832659": [
        {
            "ioc_value": "xeno.projectryos.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:02:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832660": [
        {
            "ioc_value": "littletonlawnpro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-16 12:02:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4c5b729c3522fdd11dfd3e5807c225df109172981d2c214b2a905fa2bf6b39e2/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832661": [
        {
            "ioc_value": "crimsonhub.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 12:02:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832668": [
        {
            "ioc_value": "104.251.180.176:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-16 12:02:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832667": [
        {
            "ioc_value": "209.99.190.115:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-16 12:01:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eca23985908165bcc9684bf5b0b500601cf0f1861dd97192517beb0401e601f2/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832666": [
        {
            "ioc_value": "104.251.180.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-16 12:00:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a4018431ceef5951f42ba74ff9a78db54d43030590b1ade030136227eee9035d/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832664": [
        {
            "ioc_value": "23.172.112.212:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-16 12:00:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2c2ac25b1fa7891ca502f8a4e3146973e560c467cbfc9df395842d4a07854420/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832663": [
        {
            "ioc_value": "hatbusiness.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-16 11:58:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832662": [
        {
            "ioc_value": "vodzlbpi.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 11:44:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832655": [
        {
            "ioc_value": "185.196.41.201:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-16 11:16:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/348a82709d9ddec8cd56b8b2c55d7793bb99c2ec0d52cb0c388e7485178486ce/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832654": [
        {
            "ioc_value": "dnsduc1k.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-16 11:16:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/348a82709d9ddec8cd56b8b2c55d7793bb99c2ec0d52cb0c388e7485178486ce/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832653": [
        {
            "ioc_value": "217.60.195.132:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 11:12:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/926e8f1a7f349ff1eef31f89fa8ffe265c30b92e310e8bea19962d38f8c32129/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832652": [
        {
            "ioc_value": "mxmzjcfl.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 11:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832647": [
        {
            "ioc_value": "39.106.205.6:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 11:00:15",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832644": [
        {
            "ioc_value": "trwqprv.shartmag.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 10:37:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832643": [
        {
            "ioc_value": "zgdpxwcq.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 10:36:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832642": [
        {
            "ioc_value": "cas.hanyasm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 10:24:53",
            "last_seen_utc": "2026-06-16 13:24:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832641": [
        {
            "ioc_value": "https://cas.hanyasm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 10:24:52",
            "last_seen_utc": "2026-06-16 13:24:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832640": [
        {
            "ioc_value": "jyheezbl.questionsmotor.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 10:02:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832634": [
        {
            "ioc_value": "96.44.167.215:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 09:45:51",
            "last_seen_utc": "2026-07-17 08:47:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832633": [
        {
            "ioc_value": "91.132.161.21:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 09:45:48",
            "last_seen_utc": "2026-09-01 02:46:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832632": [
        {
            "ioc_value": "5.89.155.59:9002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-06-16 09:45:30",
            "last_seen_utc": "2026-07-31 18:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832630": [
        {
            "ioc_value": "45.198.224.214:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 09:45:16",
            "last_seen_utc": "2026-08-02 08:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832631": [
        {
            "ioc_value": "45.198.224.215:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 09:45:16",
            "last_seen_utc": "2026-08-02 08:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832629": [
        {
            "ioc_value": "2.26.229.254:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 09:44:09",
            "last_seen_utc": "2026-09-01 02:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832628": [
        {
            "ioc_value": "194.116.236.239:4099",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 09:44:05",
            "last_seen_utc": "2026-07-17 18:44:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832627": [
        {
            "ioc_value": "182.23.2.163:8415",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 09:43:52",
            "last_seen_utc": "2026-07-16 08:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832626": [
        {
            "ioc_value": "182.23.2.163:21845",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-16 09:43:49",
            "last_seen_utc": "2026-07-16 18:44:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832625": [
        {
            "ioc_value": "177.104.165.104:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-16 09:43:44",
            "last_seen_utc": "2026-07-16 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832623": [
        {
            "ioc_value": "172.232.105.92:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 09:43:39",
            "last_seen_utc": "2026-07-20 18:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832624": [
        {
            "ioc_value": "172.234.16.151:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 09:43:39",
            "last_seen_utc": "2026-07-25 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832622": [
        {
            "ioc_value": "156.247.54.11:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-16 09:43:27",
            "last_seen_utc": "2026-07-17 18:43:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832621": [
        {
            "ioc_value": "15.237.111.251:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-16 09:43:23",
            "last_seen_utc": "2026-07-16 18:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832619": [
        {
            "ioc_value": "147.93.191.75:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:22",
            "last_seen_utc": "2026-07-16 08:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832620": [
        {
            "ioc_value": "147.93.191.75:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:22",
            "last_seen_utc": "2026-07-18 08:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832617": [
        {
            "ioc_value": "147.93.191.75:1008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:21",
            "last_seen_utc": "2026-07-16 08:43:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832618": [
        {
            "ioc_value": "147.93.191.75:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:21",
            "last_seen_utc": "2026-07-23 08:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832615": [
        {
            "ioc_value": "136.111.38.101:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:15",
            "last_seen_utc": "2026-08-13 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832616": [
        {
            "ioc_value": "136.111.38.101:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:15",
            "last_seen_utc": "2026-08-13 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832614": [
        {
            "ioc_value": "13.140.187.194:40056",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-16 09:43:14",
            "last_seen_utc": "2026-07-17 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832613": [
        {
            "ioc_value": "13.140.187.194:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-16 09:43:13",
            "last_seen_utc": "2026-07-17 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832612": [
        {
            "ioc_value": "118.107.5.209:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-16 09:43:12",
            "last_seen_utc": "2026-08-12 08:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832611": [
        {
            "ioc_value": "102.220.160.222:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-16 09:43:02",
            "last_seen_utc": "2026-08-01 08:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832610": [
        {
            "ioc_value": "xoqlqpdb.psgnewsiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 09:34:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832609": [
        {
            "ioc_value": "cnuwz.bankefile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 09:24:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832608": [
        {
            "ioc_value": "tuwlc2yd.hesabdarinoravesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 09:16:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832607": [
        {
            "ioc_value": "3kh6tu2u.shimiumumi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 09:08:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832606": [
        {
            "ioc_value": "nglrdgbx.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 09:02:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832601": [
        {
            "ioc_value": "103.230.15.159:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 08:39:26",
            "last_seen_utc": "2026-07-10 07:29:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832600": [
        {
            "ioc_value": "151.239.24.160:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 08:39:04",
            "last_seen_utc": "2026-07-29 09:00:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832599": [
        {
            "ioc_value": "nnozsfst.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 08:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832590": [
        {
            "ioc_value": "119.29.247.220:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.kinsing",
            "malware_alias": "h2miner",
            "malware_printable": "Kinsing",
            "first_seen_utc": "2026-06-16 08:12:47",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832591": [
        {
            "ioc_value": "195.20.239.136:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-16 08:12:47",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832592": [
        {
            "ioc_value": "47.253.156.31:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-16 08:12:47",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832593": [
        {
            "ioc_value": "60.165.167.98:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-16 08:12:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832595": [
        {
            "ioc_value": "194.56.225.147:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-16 08:00:22",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832594": [
        {
            "ioc_value": "ckvcsacd.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 07:57:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832588": [
        {
            "ioc_value": "finework.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:42:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832589": [
        {
            "ioc_value": "krolikrojer.lat",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:42:35",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832584": [
        {
            "ioc_value": "antigravity.study",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832585": [
        {
            "ioc_value": "chatgpt-web.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832586": [
        {
            "ioc_value": "clip-stash.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832587": [
        {
            "ioc_value": "defi-xstocks.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:42:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832583": [
        {
            "ioc_value": "94.198.96.166:62051",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 07:31:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fc5e53a38115e8c2d9ed3d2e464127d564340a1d0c4cffa2080baf3ea1a8b28d/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832580": [
        {
            "ioc_value": "135.181.77.214:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 07:24:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832581": [
        {
            "ioc_value": "178.105.230.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 07:24:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832582": [
        {
            "ioc_value": "65.21.96.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 07:24:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832577": [
        {
            "ioc_value": "https://135.181.77.214/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 07:24:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832578": [
        {
            "ioc_value": "https://178.105.230.82/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 07:24:35",
            "last_seen_utc": "2026-08-20 18:21:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832579": [
        {
            "ioc_value": "https://65.21.96.130/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 07:24:35",
            "last_seen_utc": "2026-08-14 06:52:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832576": [
        {
            "ioc_value": "gafaiyfx.mechanickhodakarami.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 07:20:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832570": [
        {
            "ioc_value": "4nhtw4lz.testranandegi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 06:58:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832569": [
        {
            "ioc_value": "zsmhobv.shartmag.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 06:54:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832568": [
        {
            "ioc_value": "qvwjatwu.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 06:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832567": [
        {
            "ioc_value": "66.94.119.99:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-16 06:36:02",
            "last_seen_utc": "2026-07-15 23:48:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=66.94.119.99",
            "tags": "Amadey,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832566": [
        {
            "ioc_value": "naqsigxg.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 06:15:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832565": [
        {
            "ioc_value": "132.243.225.15:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 06:09:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2df7a9ec38d125b1e1517466ea4761cc9d9071086f2fdc472ce5a2f0ddc43363/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832564": [
        {
            "ioc_value": "mnzrz.azmoonzare.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 06:03:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832505": [
        {
            "ioc_value": "speed-optimizer.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-16 05:56:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "rmceoin"
        }
    ],
    "1832506": [
        {
            "ioc_value": "https://speed-optimizer.com/scripts/core.min.js",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.fakeupdates",
            "malware_alias": "FakeUpdate,GhoLoader,SocGholish",
            "malware_printable": "FAKEUPDATES",
            "first_seen_utc": "2026-06-16 05:56:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SocGholish",
            "anonymous": 0,
            "reporter": "rmceoin"
        }
    ],
    "1832508": [
        {
            "ioc_value": "https://smenapodik.bond/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-16 05:56:11",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/smenapodik.bond",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832516": [
        {
            "ioc_value": "64.225.65.127:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-16 05:56:11",
            "last_seen_utc": "2026-06-17 10:14:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1832517": [
        {
            "ioc_value": "167.99.47.245:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-16 05:56:10",
            "last_seen_utc": "2026-06-17 11:51:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1832531": [
        {
            "ioc_value": "http://66.94.119.99/Lsge63sd3/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-16 05:56:10",
            "last_seen_utc": "2026-06-16 19:44:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "23b404,amadey,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1832559": [
        {
            "ioc_value": "zejlnzmy.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 05:50:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832558": [
        {
            "ioc_value": "177.3.40.2:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 05:46:04",
            "last_seen_utc": "2026-07-17 08:48:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832557": [
        {
            "ioc_value": "mlcs.mlface.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 05:45:39",
            "last_seen_utc": "2026-07-17 08:47:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832556": [
        {
            "ioc_value": "hxhqsvdq.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 05:22:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832554": [
        {
            "ioc_value": "82a3dcwt.sazehayefooladi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 05:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832547": [
        {
            "ioc_value": "vtulyasw.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 04:45:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832546": [
        {
            "ioc_value": "tfpypiqq.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 04:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832540": [
        {
            "ioc_value": "gyrtdqr.shartbandikade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 03:49:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832539": [
        {
            "ioc_value": "45.151.101.97:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-16 03:46:04",
            "last_seen_utc": "2026-07-20 14:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832538": [
        {
            "ioc_value": "ruynyxnj.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 03:43:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832537": [
        {
            "ioc_value": "cpclyyro.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 03:07:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832536": [
        {
            "ioc_value": "mszrd.mabanieslami2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 02:42:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832535": [
        {
            "ioc_value": "nvxwrvxi.tasisathosseini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 02:16:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832534": [
        {
            "ioc_value": "shfbucmg.tarikhravannovin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 01:43:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832533": [
        {
            "ioc_value": "hibwmmbn.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 01:10:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832532": [
        {
            "ioc_value": "ez92gghl.ravanshenasinovin.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 01:06:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832530": [
        {
            "ioc_value": "vb6axq3r.testdrivepaye3.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 00:58:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832529": [
        {
            "ioc_value": "khfujqd.shartbandifootballkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 00:49:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832528": [
        {
            "ioc_value": "tmajnhws.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 00:37:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832526": [
        {
            "ioc_value": "https://sip.rzrrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 00:25:01",
            "last_seen_utc": "2026-06-16 09:25:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832527": [
        {
            "ioc_value": "sip.rzrrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 00:25:01",
            "last_seen_utc": "2026-06-16 09:25:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832524": [
        {
            "ioc_value": "https://sip.hanyasm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 00:24:49",
            "last_seen_utc": "2026-06-16 09:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832525": [
        {
            "ioc_value": "sip.hanyasm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-16 00:24:49",
            "last_seen_utc": "2026-06-16 09:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832523": [
        {
            "ioc_value": "cunozylb.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-16 00:06:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832522": [
        {
            "ioc_value": "129.204.14.131:57000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 23:45:48",
            "last_seen_utc": "2026-08-28 08:08:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832521": [
        {
            "ioc_value": "maxvicsh.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 23:37:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832520": [
        {
            "ioc_value": "tuivp.ecologyardakani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 23:22:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832519": [
        {
            "ioc_value": "cx2b8w38.anodaz.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 23:16:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832518": [
        {
            "ioc_value": "abmkzgbs.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 23:04:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832515": [
        {
            "ioc_value": "ihypqyrn.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 22:32:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832513": [
        {
            "ioc_value": "https://usa.goturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 22:24:53",
            "last_seen_utc": "2026-06-15 23:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832514": [
        {
            "ioc_value": "usa.goturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 22:24:53",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832510": [
        {
            "ioc_value": "fbvxbuzt.questionsmotor.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 21:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832509": [
        {
            "ioc_value": "dbhmpap.shansline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 21:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832507": [
        {
            "ioc_value": "golkqcqa.psgnewsiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 21:27:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832504": [
        {
            "ioc_value": "lp4hvt2f.ravanshenakhti.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 21:04:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832503": [
        {
            "ioc_value": "64.89.160.219:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 21:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77dccc5455aac4c8114326446ca1605300db691e379027c0d286f1c44035fa81/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832502": [
        {
            "ioc_value": "107.173.47.132:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 21:00:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8a0e2a535aab576ba6a9a88baa4fc6010f26787c0e7d82f44528bf4709dfb7d2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832501": [
        {
            "ioc_value": "vdigvuaz.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 20:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832500": [
        {
            "ioc_value": "scsjldll.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 20:47:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832498": [
        {
            "ioc_value": "https://seanofficials.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 20:39:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/seanofficials.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832499": [
        {
            "ioc_value": "91.92.120.98:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 20:30:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4c7d82f0ca21ad79857d1802f5d0ef18071a96dd17464cef1dcfff62443a54a4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832497": [
        {
            "ioc_value": "jehezikh.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 20:14:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832492": [
        {
            "ioc_value": "btskl.downloadquran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 20:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832489": [
        {
            "ioc_value": "155.103.71.244:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-15 19:50:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5296603d85e7b34a68197e40b30fead8da92d63310ce395396845e23de47a13f/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832488": [
        {
            "ioc_value": "xkpxrkko.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 19:46:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832487": [
        {
            "ioc_value": "96.44.167.215:14647",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:45:35",
            "last_seen_utc": "2026-07-15 18:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832486": [
        {
            "ioc_value": "72.52.132.8:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-06-15 19:45:22",
            "last_seen_utc": "2026-07-16 08:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832485": [
        {
            "ioc_value": "212.193.5.199:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-15 19:44:11",
            "last_seen_utc": "2026-07-24 18:44:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832484": [
        {
            "ioc_value": "2.27.5.220:2428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:44:03",
            "last_seen_utc": "2026-07-16 08:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832483": [
        {
            "ioc_value": "185.190.142.121:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-15 19:43:48",
            "last_seen_utc": "2026-07-16 08:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832482": [
        {
            "ioc_value": "182.23.2.163:7563",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:43:46",
            "last_seen_utc": "2026-07-15 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832480": [
        {
            "ioc_value": "182.23.2.163:54257",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:43:45",
            "last_seen_utc": "2026-07-15 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832481": [
        {
            "ioc_value": "182.23.2.163:625",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:43:45",
            "last_seen_utc": "2026-07-15 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832479": [
        {
            "ioc_value": "172.245.195.233:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:43:35",
            "last_seen_utc": "2026-07-15 18:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832478": [
        {
            "ioc_value": "166.88.159.146:5353",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-15 19:43:31",
            "last_seen_utc": "2026-07-19 18:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832473": [
        {
            "ioc_value": "156.247.54.10:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-15 19:43:24",
            "last_seen_utc": "2026-07-17 08:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832474": [
        {
            "ioc_value": "156.247.54.10:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-15 19:43:24",
            "last_seen_utc": "2026-08-05 08:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832475": [
        {
            "ioc_value": "156.247.54.12:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-15 19:43:24",
            "last_seen_utc": "2026-07-17 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832476": [
        {
            "ioc_value": "156.247.54.13:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-15 19:43:24",
            "last_seen_utc": "2026-07-17 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832477": [
        {
            "ioc_value": "156.247.54.14:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-15 19:43:24",
            "last_seen_utc": "2026-07-17 18:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832472": [
        {
            "ioc_value": "154.44.20.174:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-15 19:43:21",
            "last_seen_utc": "2026-07-18 08:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832471": [
        {
            "ioc_value": "144.31.236.223:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 19:43:17",
            "last_seen_utc": "2026-07-19 18:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832469": [
        {
            "ioc_value": "102.220.160.222:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 19:43:02",
            "last_seen_utc": "2026-07-15 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832470": [
        {
            "ioc_value": "102.46.221.148:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 19:43:02",
            "last_seen_utc": "2026-07-20 08:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832443": [
        {
            "ioc_value": "192.159.99.110:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-15 19:40:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,NFS",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1832442": [
        {
            "ioc_value": "124.198.131.252:2049",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-15 19:40:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,NFS",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1832444": [
        {
            "ioc_value": "92.42.100.131:4568",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-15 19:40:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai,nc",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1832445": [
        {
            "ioc_value": "45.153.34.146:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:40:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/muddywater-etherhiding-resolver-family",
            "tags": "etherhiding,iran,mois,muddywater,tsundere",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832446": [
        {
            "ioc_value": "185.236.25.119:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:40:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/muddywater-etherhiding-resolver-family",
            "tags": "etherhiding,frp,muddywater,relay",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832447": [
        {
            "ioc_value": "85.90.197.26:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:40:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/muddywater-etherhiding-resolver-family",
            "tags": "etherhiding,frp,muddywater,relay",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832448": [
        {
            "ioc_value": "da8d89a25d0edc6186a9e70bca59e37a25b1f4ab84966ed1e4b9aa35d2c20601",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:40:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/vile-ransomware-cti",
            "tags": "discord-c2,golang,infostealer,ransomware,vileransomware",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832450": [
        {
            "ioc_value": "moonzonet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:40:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/muddywater-stagecomp-moonzonet",
            "tags": "iran,muddywater,stagecomp",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832449": [
        {
            "ioc_value": "a92d28f1d32e3a9ab7c3691f8bfca8f7586bb0666adbba47eab3e1a8faf7ecc0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:40:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/muddywater-stagecomp-moonzonet",
            "tags": "downloader,iran,mois,muddywater,stagecomp",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832452": [
        {
            "ioc_value": "https://lbs-lamb-withdrawal-thickness.trycloudflare.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-15 19:40:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832453": [
        {
            "ioc_value": "https://sharedtafel.com/Grandfest.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 19:40:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832455": [
        {
            "ioc_value": "c0d896e94c4dd8b64f400d16ec3cb59f3c51fc940d06241a028d0204d0407a94",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 19:40:15",
            "last_seen_utc": "2026-06-16 22:01:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832456": [
        {
            "ioc_value": "metsfgsd.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 19:40:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832457": [
        {
            "ioc_value": "landgforce.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 19:40:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832462": [
        {
            "ioc_value": "103.181.34.161:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 19:40:12",
            "last_seen_utc": null,
            "confidence_level": 93,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1059_003",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1832467": [
        {
            "ioc_value": "smenapodik.bond",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 19:34:16",
            "last_seen_utc": "2026-06-30 21:58:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832466": [
        {
            "ioc_value": "ljhxazhv.mechanickhodakarami.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 19:10:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832465": [
        {
            "ioc_value": "x8268vj9.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 18:55:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832464": [
        {
            "ioc_value": "ckdydch.shansbartar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 18:52:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832463": [
        {
            "ioc_value": "aiaufdwh.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 18:37:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832461": [
        {
            "ioc_value": "rgojzoub.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 18:09:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832458": [
        {
            "ioc_value": "bodvlnfv.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 18:03:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832454": [
        {
            "ioc_value": "tonajukbhuakpo2.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-15 17:46:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832451": [
        {
            "ioc_value": "rdpztlxu.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 17:32:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832441": [
        {
            "ioc_value": "192.227.135.225:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 17:10:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8cccade2b3df0d398864820af445c22e33512d62a67f1ce80c7b929f82e44826/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832439": [
        {
            "ioc_value": "185.161.208.152:51493",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 17:10:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/08554a2e413370221dc5f5668d336886e2f66cdbcd14314b7a3b8e3d44febbb0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832440": [
        {
            "ioc_value": "185.161.208.152:59657",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 17:10:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/08554a2e413370221dc5f5668d336886e2f66cdbcd14314b7a3b8e3d44febbb0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832438": [
        {
            "ioc_value": "general.activeworkshops.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 17:10:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b7d9f992e21b58de71534c09e6eb78bedcb9685b54ddb4e0ff574face3076da8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832437": [
        {
            "ioc_value": "91.215.85.42:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 17:05:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/yankywilson/etherrat-onchain-c2-detection",
            "tags": "blockchain-c2,EtherHiding,EtherRAT,Tsundere",
            "anonymous": 0,
            "reporter": "Colwilson"
        }
    ],
    "1832436": [
        {
            "ioc_value": "l3fcolra.fubet24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 17:03:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832435": [
        {
            "ioc_value": "divaselinsajep.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-15 17:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3c984b837219c7b80d7b8c1a517a5967753652830c01d5cea4c86c34971ca77f/",
            "tags": "DeerStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832430": [
        {
            "ioc_value": "kulnpioc.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 16:59:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832429": [
        {
            "ioc_value": "98.98.144.133:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-15 16:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832428": [
        {
            "ioc_value": "98.98.144.134:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-15 16:45:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832427": [
        {
            "ioc_value": "xipas.differentialkerayechiyan.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 16:40:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832426": [
        {
            "ioc_value": "139.59.137.44:5003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-15 16:40:43",
            "last_seen_utc": "2026-07-10 13:00:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b124281a985f5914fd8a58e3cf26968341d45c19e654d30e375f850a23c0e8a1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832425": [
        {
            "ioc_value": "http://apprxc.xyz:5003",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-15 16:40:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b124281a985f5914fd8a58e3cf26968341d45c19e654d30e375f850a23c0e8a1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832423": [
        {
            "ioc_value": "finale-code.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-15 16:33:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b124281a985f5914fd8a58e3cf26968341d45c19e654d30e375f850a23c0e8a1/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832422": [
        {
            "ioc_value": "yrzwlqcu.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 16:31:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832411": [
        {
            "ioc_value": "85.137.52.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-15 16:29:24",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://www.derp.ca/research/fakegit-luajit-github-campaign/",
            "tags": "EtherHiding,FakeGit,LuaJIT,Polygon,SmartLoader",
            "anonymous": 0,
            "reporter": "techjoe"
        }
    ],
    "1832421": [
        {
            "ioc_value": "124.198.131.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:28:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0154fa1643fbafceaeb7953ce540e84d5d84550ed013869e2b8350fc91fccbf7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832420": [
        {
            "ioc_value": "124.198.132.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:27:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8496282ebb3abb2daaecaeb43ce3503688447183367c2015a41ad7b028b4b3d9/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832419": [
        {
            "ioc_value": "62.60.226.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:27:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d5068c90a739e6c19752cd7a1ba7bbc5d9fec9c7a97e7a83cb2290d6b83c92f6/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832418": [
        {
            "ioc_value": "46.151.182.197:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:25:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75b4c39950f8c48c00c926ff46384db745b9ea34797eb5cf3b894768b8ac1a4f/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832417": [
        {
            "ioc_value": "64.89.160.96:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:25:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5ba52a3e4e42eeb6ecbf2e3d843086904562f1e055d8a3409d0204a51c7bb8f7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832416": [
        {
            "ioc_value": "209.99.188.149:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:23:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c565c46640f1721a978d46ee6b969ecc4022d1bcc4c65d52c5ed03911f33f1c5/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832415": [
        {
            "ioc_value": "209.99.188.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:22:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/927c5294eb8948c337dd92869ca2efff4833f58cd9abe48ccc1bcb74457000b3/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832413": [
        {
            "ioc_value": "209.99.188.210:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:18:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/15bf2353ddd9597f296f09c71fa9ff8bbe2fdc43631704c90b5809ddcdd68dc0/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832412": [
        {
            "ioc_value": "209.99.190.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:17:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f4f7e592842a11ec33011a05a0ac29ded4fe214cd34173cbe05ff7ff274f9c0a/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832410": [
        {
            "ioc_value": "209.99.188.199:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:13:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eb11992439bfa973d9e35bc7c386210930e89b439a5d908173ffcc37d25e7336/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832409": [
        {
            "ioc_value": "209.99.190.86:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:12:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3a15704b368b40666edc53de2a029ada5c4333e8f05c3b693c4cd34daa57dee5/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832408": [
        {
            "ioc_value": "209.99.185.52:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:11:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/31f78830bdecc47692b20e15f5042e439aadba0c628119066f4de470c8098c19/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832407": [
        {
            "ioc_value": "209.99.184.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:11:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0da9eef940fe37d1f110f01ba44c7b15147cea02aa053aac7550f4a902db72f8/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832406": [
        {
            "ioc_value": "209.99.184.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:10:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c3270918c96d3cf276d60f47141f883df964c8f9b76476d56c72c3df21f1ff55/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832405": [
        {
            "ioc_value": "209.99.184.204:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:09:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3b89b49f578a0d178aebf50f5bda21693920eed9a9525fc80a0335e7a54af8c5/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832404": [
        {
            "ioc_value": "209.99.185.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:08:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/526b941704ba3453439eaababaa7de897fb06aef78ab180ca8083ca39b06aaa0/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832403": [
        {
            "ioc_value": "77.83.39.195:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:07:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/58bd1345b0a16d3d9513322cc40f43e55b8ca98501bdfa38c7f59e6cc30dbd0f/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832402": [
        {
            "ioc_value": "77.83.39.246:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 16:06:31",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5b29f61ae76ae185c75ed6d48e3ebf1c891335243edc25b4aa1435c4c9df0ed7/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832401": [
        {
            "ioc_value": "lmlnqaju.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 15:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832400": [
        {
            "ioc_value": "dvbkmkq.rocketbet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 15:47:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832399": [
        {
            "ioc_value": "23.95.170.223:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 15:46:19",
            "last_seen_utc": "2026-09-01 02:47:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832398": [
        {
            "ioc_value": "cs.tpedu2metricstw.dpdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 15:45:49",
            "last_seen_utc": "2026-09-01 02:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832397": [
        {
            "ioc_value": "ardaplumeit.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 15:45:48",
            "last_seen_utc": "2026-07-16 08:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832396": [
        {
            "ioc_value": "stonewound.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-15 15:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832395": [
        {
            "ioc_value": "eofvjfbp.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 15:22:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832394": [
        {
            "ioc_value": "evoklbxr.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 15:21:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832393": [
        {
            "ioc_value": "http://littletonlawnpro.com:5789",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-15 15:10:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/857ef3e09895cff8faeae1d22935785f7c7afa8860ed0234e52fdbaf6f7521f0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832392": [
        {
            "ioc_value": "ft4borxw.questionstest.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 15:01:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832388": [
        {
            "ioc_value": "thhcalzn.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 14:49:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832387": [
        {
            "ioc_value": "cpulbnri.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 14:48:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832386": [
        {
            "ioc_value": "paqyqptu.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 14:21:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832385": [
        {
            "ioc_value": "yuehqazj.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 14:16:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832384": [
        {
            "ioc_value": "eminley.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-15 14:10:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b064db45193ce571396ff195824ae113a33af2ad516bfe2322ea13c9cc1ce2c4/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832378": [
        {
            "ioc_value": "79.175.189.207:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 14:00:16",
            "last_seen_utc": "2026-08-12 12:48:23",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832377": [
        {
            "ioc_value": "vdljitxt.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:42:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832376": [
        {
            "ioc_value": "wgmqenjy.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:41:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832375": [
        {
            "ioc_value": "172.245.106.54:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-15 13:35:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a63e7dcefe717a6748bb223c17593b13918677dc82cd06468cd58bc891cd53bd/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832373": [
        {
            "ioc_value": "https://gnw.glamisrents.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 13:25:01",
            "last_seen_utc": "2026-06-15 16:25:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832374": [
        {
            "ioc_value": "gnw.glamisrents.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 13:25:01",
            "last_seen_utc": "2026-06-15 16:25:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832371": [
        {
            "ioc_value": "https://gnw.goturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 13:24:49",
            "last_seen_utc": "2026-06-15 16:24:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832372": [
        {
            "ioc_value": "gnw.goturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 13:24:49",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "i7sb1k,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832370": [
        {
            "ioc_value": "zvxuc.darsnamejame.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:17:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832369": [
        {
            "ioc_value": "opyo2s3o.akhlagvaahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:15:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832368": [
        {
            "ioc_value": "froqlquf.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832367": [
        {
            "ioc_value": "aenvmnaq.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:09:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832363": [
        {
            "ioc_value": "0hz5u1mn.moarefeslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:02:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832362": [
        {
            "ioc_value": "4u3hglwc.moarefeslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 13:01:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832359": [
        {
            "ioc_value": "0snofqmc.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 12:55:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832358": [
        {
            "ioc_value": "svs-verificationdate.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 12:53:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832357": [
        {
            "ioc_value": "qbuhghd.melbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 12:51:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832348": [
        {
            "ioc_value": "185.190.91.33:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-15 12:48:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1573_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1832349": [
        {
            "ioc_value": "185.89.182.91:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-15 12:48:24",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1071_001,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1832350": [
        {
            "ioc_value": "185.190.204.235:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-15 12:48:23",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1832351": [
        {
            "ioc_value": "185.188.156.119:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 12:48:23",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1832352": [
        {
            "ioc_value": "griontera.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 12:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/38.110.228.124",
            "tags": "clickfix,fingerfix,ironpython,tcp79",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1832353": [
        {
            "ioc_value": "38.110.228.124:79",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 12:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/38.110.228.124",
            "tags": "clickfix,fingerfix,ironpython,tcp79",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1832354": [
        {
            "ioc_value": "681c3b22d00252e557c458a84f4fdbf37e23ce34db9ba4bd419d17ba6c5ce937",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 12:48:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/38.110.228.124",
            "tags": "clickfix,fingerfix,ironpython,tcp79",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1832356": [
        {
            "ioc_value": "qeqnjdds.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 12:41:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832355": [
        {
            "ioc_value": "kcgxidkf.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 12:36:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832347": [
        {
            "ioc_value": "a.qqmusic1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-15 12:10:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/58fcc9dbca00abb5401e0e0c23dfe355db017ecbcff6a866ceb81ca444a86d76/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832342": [
        {
            "ioc_value": "ncpzdseh.usoleamoozesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 12:05:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832337": [
        {
            "ioc_value": "fqcwxddh.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 11:32:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832336": [
        {
            "ioc_value": "hfl413ch.geotechnictahuni.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 11:00:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832335": [
        {
            "ioc_value": "ttmwdcsm.testranandegi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 11:00:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832331": [
        {
            "ioc_value": "dkrxwehc.testpaye.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 10:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832330": [
        {
            "ioc_value": "bxzyp.daneshkhanevade.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 10:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832326": [
        {
            "ioc_value": "cucnczaq.testdrivepaye3.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:56:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832325": [
        {
            "ioc_value": "oxfzzuaq.tasisathosseini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:53:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832324": [
        {
            "ioc_value": "vwochim.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:46:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832323": [
        {
            "ioc_value": "89.42.134.220:1803",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 09:45:54",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832322": [
        {
            "ioc_value": "87.182.39.55:51123",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 09:45:52",
            "last_seen_utc": "2026-07-18 08:47:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832321": [
        {
            "ioc_value": "83.229.85.74:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 09:45:50",
            "last_seen_utc": "2026-07-15 18:46:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832320": [
        {
            "ioc_value": "8.210.84.56:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-15 09:45:46",
            "last_seen_utc": "2026-09-01 02:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832319": [
        {
            "ioc_value": "31.76.87.112:7716",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-15 09:45:09",
            "last_seen_utc": "2026-07-19 18:45:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832318": [
        {
            "ioc_value": "31.6.11.162:7070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 09:45:08",
            "last_seen_utc": "2026-07-15 18:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832317": [
        {
            "ioc_value": "213.193.20.192:9281",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-15 09:44:22",
            "last_seen_utc": "2026-08-23 18:45:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832316": [
        {
            "ioc_value": "209.99.187.37:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 09:44:19",
            "last_seen_utc": "2026-07-16 18:45:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832315": [
        {
            "ioc_value": "20.224.219.169:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-15 09:44:14",
            "last_seen_utc": "2026-07-15 18:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832314": [
        {
            "ioc_value": "198.23.185.231:70",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 09:44:10",
            "last_seen_utc": "2026-07-15 18:44:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832313": [
        {
            "ioc_value": "131.143.251.246:53921",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-15 09:43:17",
            "last_seen_utc": "2026-09-01 02:43:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832312": [
        {
            "ioc_value": "107.172.133.182:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-15 09:43:09",
            "last_seen_utc": "2026-07-17 18:43:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832311": [
        {
            "ioc_value": "qqpidjr.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832310": [
        {
            "ioc_value": "fcxkiekt.tasisathosseini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:35:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832307": [
        {
            "ioc_value": "bigfrogs.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-15 09:28:21",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832308": [
        {
            "ioc_value": "strayweirds.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-15 09:28:21",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832309": [
        {
            "ioc_value": "marmoteilefinance.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-15 09:28:21",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832306": [
        {
            "ioc_value": "mjwougwp.tarikhravannovin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:03:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832305": [
        {
            "ioc_value": "0dt4r35j.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:02:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832304": [
        {
            "ioc_value": "pbh3hti8.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 09:00:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832290": [
        {
            "ioc_value": "207.56.229.19:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-15 08:44:22",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832291": [
        {
            "ioc_value": "77.223.99.43:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-15 08:44:22",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832293": [
        {
            "ioc_value": "202.61.224.163:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-15 08:44:22",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832292": [
        {
            "ioc_value": "41.110.4.106:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-15 08:44:21",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832294": [
        {
            "ioc_value": "47.113.229.153:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-15 08:44:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832295": [
        {
            "ioc_value": "138.197.39.208:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-15 08:44:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832296": [
        {
            "ioc_value": "180.93.43.226:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-15 08:44:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832297": [
        {
            "ioc_value": "181.104.43.225:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-15 08:44:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832298": [
        {
            "ioc_value": "192.3.16.60:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-15 08:44:18",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832299": [
        {
            "ioc_value": "195.54.179.244:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-15 08:44:18",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832300": [
        {
            "ioc_value": "212.127.90.201:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-15 08:44:17",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832302": [
        {
            "ioc_value": "http://cacywears.ga/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-15 08:44:17",
            "last_seen_utc": "2026-07-03 11:47:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,SmokeLoader",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1832303": [
        {
            "ioc_value": "amrwjltv.tarikhcheravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 08:34:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832301": [
        {
            "ioc_value": "onnzlkiy.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 08:02:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832289": [
        {
            "ioc_value": "mukvsxft.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 07:25:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832145": [
        {
            "ioc_value": "173.44.139.144:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.spica",
            "malware_alias": null,
            "malware_printable": "SPICA",
            "first_seen_utc": "2026-06-15 07:03:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "COLDRIVER,SPICA",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1832146": [
        {
            "ioc_value": "45.133.216.15:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.spica",
            "malware_alias": null,
            "malware_printable": "SPICA",
            "first_seen_utc": "2026-06-15 07:03:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "COLDRIVER,SPICA",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1832147": [
        {
            "ioc_value": "95.164.17.94:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.spica",
            "malware_alias": null,
            "malware_printable": "SPICA",
            "first_seen_utc": "2026-06-15 07:03:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "COLDRIVER,SPICA",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1832148": [
        {
            "ioc_value": "89.19.211.240:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.spica",
            "malware_alias": null,
            "malware_printable": "SPICA",
            "first_seen_utc": "2026-06-15 07:03:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "COLDRIVER,SPICA",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1832172": [
        {
            "ioc_value": "tcp.tcptunnel.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-15 07:03:54",
            "last_seen_utc": "2026-06-14 21:00:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "frp,liberium,liberiumrat,port,ports",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832210": [
        {
            "ioc_value": "185.188.155.179:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 07:03:51",
            "last_seen_utc": null,
            "confidence_level": 93,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1071_001,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1832214": [
        {
            "ioc_value": "https://infobhz.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-15 07:03:50",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/infobhz.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1832287": [
        {
            "ioc_value": "lmgz1tb4.garatequran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 06:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832286": [
        {
            "ioc_value": "fhprjdfj.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 06:52:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832285": [
        {
            "ioc_value": "151.239.24.141:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 06:51:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832283": [
        {
            "ioc_value": "45.202.1.194:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 06:51:54",
            "last_seen_utc": "2026-07-25 08:46:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832284": [
        {
            "ioc_value": "8.136.53.4:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 06:51:54",
            "last_seen_utc": "2026-06-17 08:24:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832281": [
        {
            "ioc_value": "8.136.53.4:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 06:51:53",
            "last_seen_utc": "2026-06-15 10:00:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832282": [
        {
            "ioc_value": "8.145.44.217:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 06:51:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832280": [
        {
            "ioc_value": "162.243.15.224:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-15 06:51:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832276": [
        {
            "ioc_value": "yqzbm.barnamenevisi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 06:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832268": [
        {
            "ioc_value": "204.168.163.225:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832269": [
        {
            "ioc_value": "178.104.208.168:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832270": [
        {
            "ioc_value": "62.238.44.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832271": [
        {
            "ioc_value": "178.104.211.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832272": [
        {
            "ioc_value": "46.62.255.252:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832273": [
        {
            "ioc_value": "46.225.156.170:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832274": [
        {
            "ioc_value": "95.216.152.191:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832275": [
        {
            "ioc_value": "178.105.210.87:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832263": [
        {
            "ioc_value": "65.21.96.133:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832264": [
        {
            "ioc_value": "46.224.136.4:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832265": [
        {
            "ioc_value": "128.140.123.80:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832266": [
        {
            "ioc_value": "5.161.119.247:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832267": [
        {
            "ioc_value": "46.225.162.206:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:25:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832261": [
        {
            "ioc_value": "https://95.216.152.191/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832262": [
        {
            "ioc_value": "https://178.105.210.87/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832255": [
        {
            "ioc_value": "https://204.168.163.225/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:08",
            "last_seen_utc": "2026-08-11 12:23:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832256": [
        {
            "ioc_value": "https://178.104.208.168/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:08",
            "last_seen_utc": "2026-08-11 12:23:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832257": [
        {
            "ioc_value": "https://62.238.44.180/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832258": [
        {
            "ioc_value": "https://178.104.211.206/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832259": [
        {
            "ioc_value": "https://46.62.255.252/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832260": [
        {
            "ioc_value": "https://46.225.156.170/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:08",
            "last_seen_utc": "2026-08-14 13:57:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832250": [
        {
            "ioc_value": "https://65.21.96.133/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832251": [
        {
            "ioc_value": "https://46.224.136.4/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832252": [
        {
            "ioc_value": "https://128.140.123.80/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832253": [
        {
            "ioc_value": "https://5.161.119.247/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832254": [
        {
            "ioc_value": "https://46.225.162.206/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:24:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832249": [
        {
            "ioc_value": "maryaxdn.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 06:21:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832248": [
        {
            "ioc_value": "fpsjq82d.shartbandifootballkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 06:21:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832243": [
        {
            "ioc_value": "snd.goturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:13:23",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832244": [
        {
            "ioc_value": "ikg.goturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:13:23",
            "last_seen_utc": "2026-08-30 18:46:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832245": [
        {
            "ioc_value": "ggt.goturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:13:23",
            "last_seen_utc": "2026-08-30 18:46:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832246": [
        {
            "ioc_value": "snd.glamisrents.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:13:23",
            "last_seen_utc": "2026-06-15 12:25:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832247": [
        {
            "ioc_value": "ikg.glamisrents.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832237": [
        {
            "ioc_value": "https://snd.goturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:38",
            "last_seen_utc": "2026-06-15 12:24:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832238": [
        {
            "ioc_value": "https://ikg.goturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832239": [
        {
            "ioc_value": "https://ggt.goturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832240": [
        {
            "ioc_value": "https://snd.glamisrents.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:38",
            "last_seen_utc": "2026-06-15 12:25:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832241": [
        {
            "ioc_value": "https://ikg.glamisrents.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832242": [
        {
            "ioc_value": "https://ggt.glamisrents.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832235": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198689449626",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:37",
            "last_seen_utc": "2026-08-24 12:19:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832236": [
        {
            "ioc_value": "https://telegram.me/turb00m",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 06:12:37",
            "last_seen_utc": "2026-08-24 13:47:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1832234": [
        {
            "ioc_value": "bcfrgjpx.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 05:48:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832233": [
        {
            "ioc_value": "vazqhwad.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 05:20:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832232": [
        {
            "ioc_value": "qilapvvt.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 05:01:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832231": [
        {
            "ioc_value": "9zpx37x0.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 04:59:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832230": [
        {
            "ioc_value": "ewa1b63u.fununetadris.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 04:58:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832228": [
        {
            "ioc_value": "ggt.glamisrents.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 04:56:40",
            "last_seen_utc": "2026-06-15 06:13:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832229": [
        {
            "ioc_value": "pod.turbo88jp.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-15 04:56:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832227": [
        {
            "ioc_value": "utnoqzc.melbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 04:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832226": [
        {
            "ioc_value": "pauheuld.questionsmotor.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 04:42:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832225": [
        {
            "ioc_value": "everztsi.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 04:10:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832224": [
        {
            "ioc_value": "tblrdccw.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 03:38:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832223": [
        {
            "ioc_value": "543533s9.nagshekeshi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 03:14:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832222": [
        {
            "ioc_value": "tawej.bankefiile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 03:13:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832221": [
        {
            "ioc_value": "fkwiyfrv.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 03:09:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832220": [
        {
            "ioc_value": "384njud7.enfejarkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 02:57:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832219": [
        {
            "ioc_value": "lvegwzzz.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 02:33:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832218": [
        {
            "ioc_value": "lhpahogn.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 02:00:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832217": [
        {
            "ioc_value": "sdppicy4.shansline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 01:52:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832216": [
        {
            "ioc_value": "qelljcx.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 01:47:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832215": [
        {
            "ioc_value": "bgfwrtgo.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 01:32:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832213": [
        {
            "ioc_value": "q6ewl5b2.casinokade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 00:58:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832212": [
        {
            "ioc_value": "obuultev.casinokade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 00:57:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832211": [
        {
            "ioc_value": "twmpoxnh.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 00:55:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832209": [
        {
            "ioc_value": "cwpjgrng.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 00:22:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832208": [
        {
            "ioc_value": "l9oi6rwb.bordestan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-15 00:10:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832207": [
        {
            "ioc_value": "wxlfp.motorbook.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 23:52:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832206": [
        {
            "ioc_value": "idcmamvr.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 23:50:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832205": [
        {
            "ioc_value": "8.152.2.86:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 23:46:04",
            "last_seen_utc": "2026-07-16 08:48:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832204": [
        {
            "ioc_value": "124.222.218.12:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 23:45:41",
            "last_seen_utc": "2026-07-20 14:46:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832203": [
        {
            "ioc_value": "1fjx0agf.zabanmemari.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 23:34:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832202": [
        {
            "ioc_value": "ldbrrvwc.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 23:17:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832201": [
        {
            "ioc_value": "v33c66mq.zabanhaggani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 23:13:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832200": [
        {
            "ioc_value": "iyejvhz.shansbartar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:51:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832199": [
        {
            "ioc_value": "rfvxpytm.psgnewsiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832198": [
        {
            "ioc_value": "lgonmiq3.zabanenglishanari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832197": [
        {
            "ioc_value": "yxjsqrqv.vanatarsim.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832196": [
        {
            "ioc_value": "7396cc3u.vajename.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832195": [
        {
            "ioc_value": "c1atwh88.shimiumumi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:41",
            "last_seen_utc": "2026-06-16 09:06:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832193": [
        {
            "ioc_value": "czcnj5n7.sazehayefooladi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832194": [
        {
            "ioc_value": "pap6wvrz.shimiskoog.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832192": [
        {
            "ioc_value": "4s9g9m9n.ravanshenasisaeedi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832191": [
        {
            "ioc_value": "tem91muy.ravanshenasinovin.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832190": [
        {
            "ioc_value": "8e8q4tjz.ravanshenasiganji.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1832188": [
        {
            "ioc_value": "4f769db571821779a629ec34253e268c3ad78208",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 22:30:18",
            "last_seen_utc": "2026-06-15 00:55:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832189": [
        {
            "ioc_value": "36b013c5e39acbe752709d0b2fc01006",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 22:30:18",
            "last_seen_utc": "2026-06-15 00:55:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832185": [
        {
            "ioc_value": "d311b7b63d69bda94189e7ad586d42ba7f1ba838",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghostnet",
            "malware_alias": "Remosh",
            "malware_printable": "Gh0stnet",
            "first_seen_utc": "2026-06-14 22:30:17",
            "last_seen_utc": "2026-06-15 00:55:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832186": [
        {
            "ioc_value": "81a6699618caa9d38a99aac19a33b770",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghostnet",
            "malware_alias": "Remosh",
            "malware_printable": "Gh0stnet",
            "first_seen_utc": "2026-06-14 22:30:17",
            "last_seen_utc": "2026-06-15 00:55:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832187": [
        {
            "ioc_value": "b48c97d1dadc4cb7e0c3303d556a1217cccdd8839fe739d71a7c5f977b4810bd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 22:30:17",
            "last_seen_utc": "2026-06-15 00:55:14",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832182": [
        {
            "ioc_value": "2b35aa9c70ef66197abfb9bc409952897f9f70818633ab43da85b3825b256307",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.azorult",
            "malware_alias": "PuffStealer,Rultazo",
            "malware_printable": "Azorult",
            "first_seen_utc": "2026-06-14 22:30:16",
            "last_seen_utc": "2026-06-15 00:55:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832183": [
        {
            "ioc_value": "73da2c02c6f8bfd4662dc84820dcd983",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.azorult",
            "malware_alias": "PuffStealer,Rultazo",
            "malware_printable": "Azorult",
            "first_seen_utc": "2026-06-14 22:30:16",
            "last_seen_utc": "2026-06-15 00:55:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832184": [
        {
            "ioc_value": "3dc1a7ac46a1616fe180f42e26d25ea9638f90c73073542b49a8575e2f110174",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghostnet",
            "malware_alias": "Remosh",
            "malware_printable": "Gh0stnet",
            "first_seen_utc": "2026-06-14 22:30:16",
            "last_seen_utc": "2026-06-15 00:55:13",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832179": [
        {
            "ioc_value": "c1d77b03a2d57f4ef9670a7569a77b662196cb10c74e303a04626afc49fcfb0d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 22:30:15",
            "last_seen_utc": "2026-06-15 00:55:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832180": [
        {
            "ioc_value": "1f61163784b16b391bff874349cf5fe115b2b01d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 22:30:15",
            "last_seen_utc": "2026-06-15 00:55:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832181": [
        {
            "ioc_value": "6382ad4c07f225406139f7ab90f2ccaf",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 22:30:15",
            "last_seen_utc": "2026-06-15 00:55:12",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832176": [
        {
            "ioc_value": "4dd2a916d6767a36f1b289339555b1993471952acf4f3ed4813644bf232a68f9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 22:30:14",
            "last_seen_utc": "2026-06-15 00:55:10",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832177": [
        {
            "ioc_value": "8d8cf767dfd250d81c6f0731458c68992cc0649e",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 22:30:14",
            "last_seen_utc": "2026-06-15 00:55:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832178": [
        {
            "ioc_value": "ab02ca10ab74d9ba0bcaff7f62ac2f6e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 22:30:14",
            "last_seen_utc": "2026-06-15 00:55:11",
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1832175": [
        {
            "ioc_value": "zywnzrqf.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 22:17:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832174": [
        {
            "ioc_value": "igcokmdd.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 21:43:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832173": [
        {
            "ioc_value": "aasdaonz.mechanickhodakarami.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 21:06:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832171": [
        {
            "ioc_value": "qj2ddn7c.zabanmemari.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 20:56:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832170": [
        {
            "ioc_value": "irtefuln.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 20:33:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832169": [
        {
            "ioc_value": "zxokl.mabaninazaridelavar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 20:31:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832168": [
        {
            "ioc_value": "dtgncsqn.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 20:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832166": [
        {
            "ioc_value": "xtyqemyq.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 19:57:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832165": [
        {
            "ioc_value": "qchwdca.rocketbet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 19:51:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832164": [
        {
            "ioc_value": "rne9p9if.shartbandikade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 19:50:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832163": [
        {
            "ioc_value": "89.42.134.220:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 19:45:30",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832162": [
        {
            "ioc_value": "83.229.85.74:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 19:45:27",
            "last_seen_utc": "2026-07-15 08:46:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832161": [
        {
            "ioc_value": "82.47.101.191:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-14 19:45:26",
            "last_seen_utc": "2026-07-19 18:45:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832160": [
        {
            "ioc_value": "5.230.69.118:8930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 19:45:13",
            "last_seen_utc": "2026-07-16 08:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832159": [
        {
            "ioc_value": "46.246.82.18:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-14 19:45:04",
            "last_seen_utc": "2026-07-16 08:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832158": [
        {
            "ioc_value": "43.133.164.200:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-14 19:44:54",
            "last_seen_utc": "2026-09-01 02:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832157": [
        {
            "ioc_value": "213.152.161.157:18856",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 19:44:12",
            "last_seen_utc": "2026-07-15 08:44:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832156": [
        {
            "ioc_value": "209.99.185.96:1002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 19:44:10",
            "last_seen_utc": "2026-07-15 08:44:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832155": [
        {
            "ioc_value": "207.211.163.106:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 19:44:09",
            "last_seen_utc": "2026-07-15 08:44:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832154": [
        {
            "ioc_value": "204.194.54.9:2682",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 19:44:06",
            "last_seen_utc": "2026-07-15 08:44:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832153": [
        {
            "ioc_value": "182.23.2.163:26972",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 19:43:44",
            "last_seen_utc": "2026-07-15 08:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832152": [
        {
            "ioc_value": "172.245.195.233:14642",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 19:43:36",
            "last_seen_utc": "2026-07-20 18:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832151": [
        {
            "ioc_value": "163.245.196.102:5400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-14 19:43:31",
            "last_seen_utc": "2026-07-15 08:44:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832150": [
        {
            "ioc_value": "161.97.166.38:6006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 19:43:29",
            "last_seen_utc": "2026-07-16 08:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832149": [
        {
            "ioc_value": "144.31.236.224:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 19:43:19",
            "last_seen_utc": "2026-07-19 08:43:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832144": [
        {
            "ioc_value": "fsphwjzi.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 19:21:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832143": [
        {
            "ioc_value": "emqtqmnj.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 18:52:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832142": [
        {
            "ioc_value": "cfwrfrqx.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 18:16:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832141": [
        {
            "ioc_value": "ockpahmv.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 17:43:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832140": [
        {
            "ioc_value": "shrqj.mabanimashin.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 17:14:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832139": [
        {
            "ioc_value": "of8p7ob4.mururhesabdari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 17:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832138": [
        {
            "ioc_value": "fcsulewd.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 17:11:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832137": [
        {
            "ioc_value": "npmc4uw2.zabanenglishanari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 16:56:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832136": [
        {
            "ioc_value": "xntwroz.melbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 16:46:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832135": [
        {
            "ioc_value": "book-imagegallery.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 16:45:11",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832134": [
        {
            "ioc_value": "aaqgnsji.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 16:38:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832131": [
        {
            "ioc_value": "ojblxlua.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 16:05:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832129": [
        {
            "ioc_value": "38.46.13.178:65301",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 16:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b48c97d1dadc4cb7e0c3303d556a1217cccdd8839fe739d71a7c5f977b4810bd/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832130": [
        {
            "ioc_value": "38.46.13.179:65302",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 16:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b48c97d1dadc4cb7e0c3303d556a1217cccdd8839fe739d71a7c5f977b4810bd/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832125": [
        {
            "ioc_value": "rteutcjg.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 15:33:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832122": [
        {
            "ioc_value": "zrbhitjy.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 15:00:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832119": [
        {
            "ioc_value": "mxlsapwz.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 14:32:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832115": [
        {
            "ioc_value": "lvtimaax.usoleamoozesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 13:56:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832114": [
        {
            "ioc_value": "sxzvcen2.shansline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 13:50:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832113": [
        {
            "ioc_value": "ygyam.livefootba11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 13:49:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832112": [
        {
            "ioc_value": "eviwuji.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 13:45:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832111": [
        {
            "ioc_value": "wbnggxoc.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 13:23:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832109": [
        {
            "ioc_value": "4v96patx.vajename.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 12:55:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832108": [
        {
            "ioc_value": "cqtwbvlx.testranandegi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 12:54:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832107": [
        {
            "ioc_value": "195.222.53.130:6431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-14 12:25:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5205c3eec591a1a025bd4d9d2d2d98c04b2723f7785a2d0e5382572ddeee6b4e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832106": [
        {
            "ioc_value": "http://fusesd.shop:6431",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-14 12:25:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5205c3eec591a1a025bd4d9d2d2d98c04b2723f7785a2d0e5382572ddeee6b4e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832105": [
        {
            "ioc_value": "xyxoieix.testpaye.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 12:22:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832104": [
        {
            "ioc_value": "104.253.79.245:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:21:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/be4bd17e7996dc7533b6741ea83b9dc8b51d26a0434607c5edde403ecb9d2dd3/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832103": [
        {
            "ioc_value": "196.251.107.114:24034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 12:20:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1ee687dc9456dbc3f0a12cefa8bab65b086c66a717998a7deb76ba0386a5c6a8/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832102": [
        {
            "ioc_value": "5.101.81.227:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-14 12:20:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/983511f8bd00898038ff56d4eb41aac90187e8802fc73bc02c16c2423302813d/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832100": [
        {
            "ioc_value": "sekirolegion.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:27",
            "last_seen_utc": "2026-06-22 11:41:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832101": [
        {
            "ioc_value": "ptlegion.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832094": [
        {
            "ioc_value": "http://sekirolegion.duckdns.org/api/endpoint.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:00",
            "last_seen_utc": "2026-06-22 11:41:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832095": [
        {
            "ioc_value": "http://ptlegion.duckdns.org/api/endpoint.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832096": [
        {
            "ioc_value": "http://silentlegion.duckdns.org/gate/update.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832097": [
        {
            "ioc_value": "http://silentlegion.duckdns.org/gate/config.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832098": [
        {
            "ioc_value": "http://silentlegion.duckdns.org/gate/create.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832099": [
        {
            "ioc_value": "http://silentlegion.duckdns.org/gate/connection.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 12:17:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "SupremeLogger",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824711": [
        {
            "ioc_value": "s01687.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824712": [
        {
            "ioc_value": "s01687.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824713": [
        {
            "ioc_value": "s01687.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824714": [
        {
            "ioc_value": "s01687.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824715": [
        {
            "ioc_value": "s01688.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824716": [
        {
            "ioc_value": "s01688.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824717": [
        {
            "ioc_value": "s01688.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824718": [
        {
            "ioc_value": "s01688.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824719": [
        {
            "ioc_value": "s01689.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824720": [
        {
            "ioc_value": "s01689.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824721": [
        {
            "ioc_value": "s01689.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824724": [
        {
            "ioc_value": "s01690.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824722": [
        {
            "ioc_value": "s01689.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824723": [
        {
            "ioc_value": "s01690.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824725": [
        {
            "ioc_value": "s01690.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824726": [
        {
            "ioc_value": "s01690.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824727": [
        {
            "ioc_value": "s01691.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824730": [
        {
            "ioc_value": "s01691.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824728": [
        {
            "ioc_value": "s01691.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824729": [
        {
            "ioc_value": "s01691.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824731": [
        {
            "ioc_value": "s01692.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824732": [
        {
            "ioc_value": "s01692.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824733": [
        {
            "ioc_value": "s01692.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824734": [
        {
            "ioc_value": "s01692.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824735": [
        {
            "ioc_value": "s1408.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824736": [
        {
            "ioc_value": "s1408.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824737": [
        {
            "ioc_value": "s1408.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824738": [
        {
            "ioc_value": "s1408.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824739": [
        {
            "ioc_value": "s1694.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824740": [
        {
            "ioc_value": "s1694.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824741": [
        {
            "ioc_value": "s1694.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824742": [
        {
            "ioc_value": "s1694.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824743": [
        {
            "ioc_value": "s1696.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824744": [
        {
            "ioc_value": "s1696.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824745": [
        {
            "ioc_value": "s1696.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824746": [
        {
            "ioc_value": "s1696.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824747": [
        {
            "ioc_value": "s17.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824748": [
        {
            "ioc_value": "s17.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824749": [
        {
            "ioc_value": "s1702.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824750": [
        {
            "ioc_value": "s1702.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824751": [
        {
            "ioc_value": "s1702.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824752": [
        {
            "ioc_value": "s1702.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824753": [
        {
            "ioc_value": "s1708.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824754": [
        {
            "ioc_value": "s1708.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824755": [
        {
            "ioc_value": "s1708.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824756": [
        {
            "ioc_value": "s1708.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824757": [
        {
            "ioc_value": "s1710.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824758": [
        {
            "ioc_value": "s1710.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824759": [
        {
            "ioc_value": "s1710.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:14",
            "last_seen_utc": "2026-07-26 16:45:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824760": [
        {
            "ioc_value": "s1710.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824761": [
        {
            "ioc_value": "s1726.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:13",
            "last_seen_utc": "2026-07-26 16:45:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824762": [
        {
            "ioc_value": "s1726.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824763": [
        {
            "ioc_value": "s1726.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824764": [
        {
            "ioc_value": "s1726.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:13",
            "last_seen_utc": "2026-07-26 16:45:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824765": [
        {
            "ioc_value": "s1728.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824766": [
        {
            "ioc_value": "s1728.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:12",
            "last_seen_utc": "2026-07-26 16:45:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824767": [
        {
            "ioc_value": "s1728.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824768": [
        {
            "ioc_value": "s1728.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824769": [
        {
            "ioc_value": "s1730.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824770": [
        {
            "ioc_value": "s1730.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824771": [
        {
            "ioc_value": "s1730.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824772": [
        {
            "ioc_value": "s1730.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824773": [
        {
            "ioc_value": "s1732.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824774": [
        {
            "ioc_value": "s1732.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824775": [
        {
            "ioc_value": "s1732.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824776": [
        {
            "ioc_value": "s1732.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824777": [
        {
            "ioc_value": "s1734.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824778": [
        {
            "ioc_value": "s1734.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824779": [
        {
            "ioc_value": "s1734.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824780": [
        {
            "ioc_value": "s1734.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824781": [
        {
            "ioc_value": "s1736.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824782": [
        {
            "ioc_value": "s1736.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824783": [
        {
            "ioc_value": "s1736.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824784": [
        {
            "ioc_value": "s1736.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824785": [
        {
            "ioc_value": "s1738.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824786": [
        {
            "ioc_value": "s1738.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824787": [
        {
            "ioc_value": "s1738.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824789": [
        {
            "ioc_value": "s1740.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824788": [
        {
            "ioc_value": "s1738.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824790": [
        {
            "ioc_value": "s1740.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:13:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824791": [
        {
            "ioc_value": "s1740.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824793": [
        {
            "ioc_value": "s1742.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824792": [
        {
            "ioc_value": "s1740.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824794": [
        {
            "ioc_value": "s1742.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824796": [
        {
            "ioc_value": "s1742.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824795": [
        {
            "ioc_value": "s1742.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824798": [
        {
            "ioc_value": "s1744.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824797": [
        {
            "ioc_value": "s1744.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824799": [
        {
            "ioc_value": "s1744.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824800": [
        {
            "ioc_value": "s1744.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824801": [
        {
            "ioc_value": "s1746.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824802": [
        {
            "ioc_value": "s1746.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824803": [
        {
            "ioc_value": "s1746.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824804": [
        {
            "ioc_value": "s1746.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824805": [
        {
            "ioc_value": "s1747.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824806": [
        {
            "ioc_value": "s1747.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824807": [
        {
            "ioc_value": "s1747.novel-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824808": [
        {
            "ioc_value": "s1747.star-layer.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824809": [
        {
            "ioc_value": "s1748.byte-buff.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824810": [
        {
            "ioc_value": "s1748.house-spirit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 12:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "popa,proxybotnet",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824813": [
        {
            "ioc_value": "5.39.216.137:8083",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824812": [
        {
            "ioc_value": "5.39.216.137:8082",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824814": [
        {
            "ioc_value": "5.175.215.102:456",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824816": [
        {
            "ioc_value": "31.56.209.8:6782",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824817": [
        {
            "ioc_value": "37.16.74.24:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824818": [
        {
            "ioc_value": "37.16.74.24:1414",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824819": [
        {
            "ioc_value": "37.49.224.15:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824820": [
        {
            "ioc_value": "37.49.224.15:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824821": [
        {
            "ioc_value": "37.49.229.42:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824822": [
        {
            "ioc_value": "37.49.229.42:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824823": [
        {
            "ioc_value": "37.49.229.42:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824824": [
        {
            "ioc_value": "45.9.2.162:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824825": [
        {
            "ioc_value": "45.9.156.250:1111",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824826": [
        {
            "ioc_value": "45.9.156.250:8092",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824827": [
        {
            "ioc_value": "45.13.239.7:8000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824828": [
        {
            "ioc_value": "45.142.195.105:8082",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824829": [
        {
            "ioc_value": "45.142.195.105:8083",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824830": [
        {
            "ioc_value": "45.153.34.26:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824831": [
        {
            "ioc_value": "45.194.92.2:1000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824832": [
        {
            "ioc_value": "45.202.247.123:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824833": [
        {
            "ioc_value": "45.205.1.33:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824834": [
        {
            "ioc_value": "51.254.156.25:1111",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824835": [
        {
            "ioc_value": "62.84.172.147:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824836": [
        {
            "ioc_value": "66.29.156.104:5000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824837": [
        {
            "ioc_value": "83.168.110.191:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824838": [
        {
            "ioc_value": "84.32.71.134:1111",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824839": [
        {
            "ioc_value": "85.11.167.101:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824840": [
        {
            "ioc_value": "85.204.125.76:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824841": [
        {
            "ioc_value": "85.239.151.41:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824842": [
        {
            "ioc_value": "87.121.84.18:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824843": [
        {
            "ioc_value": "87.121.84.27:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824844": [
        {
            "ioc_value": "87.121.84.243:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824845": [
        {
            "ioc_value": "92.38.186.110:5144",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824846": [
        {
            "ioc_value": "92.112.124.25:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824847": [
        {
            "ioc_value": "92.112.126.188:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824848": [
        {
            "ioc_value": "92.112.126.188:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824849": [
        {
            "ioc_value": "92.112.126.188:2222",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824850": [
        {
            "ioc_value": "92.112.126.188:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824851": [
        {
            "ioc_value": "92.112.127.184:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824852": [
        {
            "ioc_value": "92.112.127.184:5144",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824853": [
        {
            "ioc_value": "93.95.115.175:1111",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824854": [
        {
            "ioc_value": "94.156.152.234:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824855": [
        {
            "ioc_value": "94.249.228.214:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824856": [
        {
            "ioc_value": "103.83.87.122:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:30",
            "last_seen_utc": "2026-07-18 23:53:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824857": [
        {
            "ioc_value": "103.214.71.127:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824858": [
        {
            "ioc_value": "109.71.252.183:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824859": [
        {
            "ioc_value": "117.55.203.189:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824860": [
        {
            "ioc_value": "117.55.203.189:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824861": [
        {
            "ioc_value": "117.55.203.189:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824862": [
        {
            "ioc_value": "117.55.203.189:25568",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824863": [
        {
            "ioc_value": "124.198.131.24:13123",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824864": [
        {
            "ioc_value": "140.233.190.47:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824865": [
        {
            "ioc_value": "141.11.103.158:13123",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824866": [
        {
            "ioc_value": "141.227.139.189:2222",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824867": [
        {
            "ioc_value": "144.31.94.207:5000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824868": [
        {
            "ioc_value": "158.94.208.131:6971",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824869": [
        {
            "ioc_value": "158.94.208.131:7778",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824870": [
        {
            "ioc_value": "162.141.92.3:81",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824872": [
        {
            "ioc_value": "162.141.92.3:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824871": [
        {
            "ioc_value": "162.141.92.3:82",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824873": [
        {
            "ioc_value": "162.141.92.3:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824874": [
        {
            "ioc_value": "162.141.92.173:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824875": [
        {
            "ioc_value": "162.141.92.192:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824876": [
        {
            "ioc_value": "166.88.225.196:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824877": [
        {
            "ioc_value": "166.88.225.255:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824878": [
        {
            "ioc_value": "176.65.139.26:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824879": [
        {
            "ioc_value": "176.65.139.54:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824880": [
        {
            "ioc_value": "176.65.139.54:1004",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824881": [
        {
            "ioc_value": "176.65.139.54:1005",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824882": [
        {
            "ioc_value": "176.65.139.64:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824883": [
        {
            "ioc_value": "176.65.139.79:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824884": [
        {
            "ioc_value": "176.65.139.89:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824885": [
        {
            "ioc_value": "176.65.139.90:2222",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824886": [
        {
            "ioc_value": "176.65.139.115:8081",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824887": [
        {
            "ioc_value": "176.65.139.143:8081",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824888": [
        {
            "ioc_value": "176.65.139.170:81",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824889": [
        {
            "ioc_value": "176.65.139.173:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824891": [
        {
            "ioc_value": "176.65.139.188:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824890": [
        {
            "ioc_value": "176.65.139.182:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824892": [
        {
            "ioc_value": "176.65.139.253:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824893": [
        {
            "ioc_value": "176.65.148.37:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824894": [
        {
            "ioc_value": "178.18.147.96:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824895": [
        {
            "ioc_value": "178.18.147.96:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824896": [
        {
            "ioc_value": "185.231.155.250:2",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824897": [
        {
            "ioc_value": "192.109.200.47:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824898": [
        {
            "ioc_value": "193.25.217.35:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824899": [
        {
            "ioc_value": "195.178.110.204:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824900": [
        {
            "ioc_value": "195.178.110.204:4444",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824901": [
        {
            "ioc_value": "205.237.106.27:1337",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824903": [
        {
            "ioc_value": "205.237.106.27:5144",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824902": [
        {
            "ioc_value": "205.237.106.27:2222",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824904": [
        {
            "ioc_value": "205.237.106.127:25565",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1824905": [
        {
            "ioc_value": "205.237.110.243:9273",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 12:12:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "adb,exploitation",
            "anonymous": 0,
            "reporter": "synth"
        }
    ],
    "1832087": [
        {
            "ioc_value": "51.195.111.212:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-07-11 05:55:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832088": [
        {
            "ioc_value": "217.60.241.14:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832089": [
        {
            "ioc_value": "217.60.241.39:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-06-22 07:00:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832090": [
        {
            "ioc_value": "83.142.209.228:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-06-22 07:00:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832091": [
        {
            "ioc_value": "217.60.241.17:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832092": [
        {
            "ioc_value": "217.60.241.14:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832093": [
        {
            "ioc_value": "51.195.111.212:417",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:38",
            "last_seen_utc": "2026-07-13 17:07:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832076": [
        {
            "ioc_value": "217.60.241.14:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832077": [
        {
            "ioc_value": "51.195.111.212:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-07-21 05:35:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832078": [
        {
            "ioc_value": "217.60.241.14:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832079": [
        {
            "ioc_value": "51.195.111.212:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-07-21 05:35:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832080": [
        {
            "ioc_value": "217.60.241.14:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832081": [
        {
            "ioc_value": "51.195.111.212:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-07-13 17:07:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832082": [
        {
            "ioc_value": "51.195.111.212:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-06-25 05:28:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832083": [
        {
            "ioc_value": "217.60.241.39:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-06-25 05:28:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832084": [
        {
            "ioc_value": "217.60.241.14:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832085": [
        {
            "ioc_value": "83.142.209.228:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832086": [
        {
            "ioc_value": "217.60.241.17:429",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-14 11:58:37",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832075": [
        {
            "ioc_value": "zggkpuuy.testdrivepaye3.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 11:46:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832074": [
        {
            "ioc_value": "23.254.129.251:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:45:50",
            "last_seen_utc": "2026-08-10 08:47:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832073": [
        {
            "ioc_value": "207.56.229.234:4545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:45:48",
            "last_seen_utc": "2026-07-20 14:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832072": [
        {
            "ioc_value": "sys.systemworld.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:45:27",
            "last_seen_utc": "2026-08-10 08:47:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832071": [
        {
            "ioc_value": "winter.delicacyencrust.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-14 11:38:17",
            "last_seen_utc": "2026-06-14 11:38:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f112a4e51b88606e13153c3ced6e50689960b877d69464b9ea4baad9b67e0706/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832070": [
        {
            "ioc_value": "harmful.ferretcilantro.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-14 11:37:51",
            "last_seen_utc": "2026-06-14 11:37:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8df3d99d225cbe4bcaa60344529c7d07600f3a1b746b62316e09079ba3816aaa/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832055": [
        {
            "ioc_value": "4c16f19a06d210add2c21f0fa59b8a969ef0bc134f233c24dca0737ed8fa5485",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832056": [
        {
            "ioc_value": "eb45868316c1e4b7a2d3c61b032033b52be7f6a058322c6cea1ba9b0e2ffb549",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832057": [
        {
            "ioc_value": "84bca7da50ea5f963ed069eca729bc073c67b72899f5640e18bbc3c5c625d634",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832058": [
        {
            "ioc_value": "3740b88b9f3e65389c5c4e685166389bb1b22ce432633c5c87fd938b043952dc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832059": [
        {
            "ioc_value": "b0de65b3bf5919910086f7fd1d2130570a2caee15580c95364c4341f89086f46",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832060": [
        {
            "ioc_value": "f5f3503cdf5425428441858ea485672e360cf79c9b6c26e23337ddc883edb2cf",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832061": [
        {
            "ioc_value": "6f018848fe17c63af6b62486a64a17d6a37192fa10dec02060efb3c570c10585",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832062": [
        {
            "ioc_value": "e50150ca6d2aeb0ed4b14917521301391d75c4b11bf5a8bcec2ee863a8e5b258",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832063": [
        {
            "ioc_value": "3c5343c9854a94002f821455fb8c869a61d5c77beab213a754733fc3a0a55b59",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832064": [
        {
            "ioc_value": "1f3e35e1e9df7f1428de5ca3cc4a9c21864a0144603d627f75f3d0778bba0d60",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832065": [
        {
            "ioc_value": "e35d10d019fdb04bdb9212235e580b141fc72a7432388c0f9509f2893d605898",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832066": [
        {
            "ioc_value": "b492f711efc73334225174fb338b042964405f8b7d53b2555ec02779b371649d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832067": [
        {
            "ioc_value": "b2e5b81c5b461d024259fb214ffed3a16e97848b6236902a14dcddbf1dc2309a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832068": [
        {
            "ioc_value": "f97fdd1525fd9658352b793dc2e1a9b5ddac9ea24e95f8fc7d1780ef39d0960e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832069": [
        {
            "ioc_value": "b1d6927521122e8cf9ffbdbb4014b55eafec3b408a0bd6b544b22a27530bfae2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832053": [
        {
            "ioc_value": "3f5b518d90c7d63f4cd6ac68fa63bc23ef7b56638477bf9b3cdbab9655fb5715",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832054": [
        {
            "ioc_value": "59f699db1c6b84d00cdcc47b782c99577df3816748b77d61a2e771e5ec928a7b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832051": [
        {
            "ioc_value": "89b76ff76638fee10d34c534e1ad1df0e607ccd16a72f69a3b80d5f1f5a3dd3a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832050": [
        {
            "ioc_value": "e7fc1caf9d8d4c24b9ddbbeacebb1666d5acc16a4bc776229e1006b1eb02b959",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832052": [
        {
            "ioc_value": "ed3b63439398c9d64148bf827ac713126232ba192295ea4e66a6d4556da5d71f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832047": [
        {
            "ioc_value": "14a25cae9f3e4343b26925021763639068b9ed6531ce23c26053f0831a9c9be2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832048": [
        {
            "ioc_value": "fb1853cedbf31d3e0205c46b09f973df0ce2252b2224868ea78381154ddca718",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832049": [
        {
            "ioc_value": "1c3d3a4f074ec97bbda5550d4246555b883d5dd2d3666d9f98cd9062d08c1c9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832044": [
        {
            "ioc_value": "120.237.147.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832045": [
        {
            "ioc_value": "60.191.208.227:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832046": [
        {
            "ioc_value": "123.156.62.67:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832041": [
        {
            "ioc_value": "221.214.111.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832042": [
        {
            "ioc_value": "43.240.223.126:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832043": [
        {
            "ioc_value": "124.223.33.239:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832039": [
        {
            "ioc_value": "202.112.238.106:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832040": [
        {
            "ioc_value": "117.72.45.63:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-14 11:30:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "framework,metasploit",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832037": [
        {
            "ioc_value": "143.92.43.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832038": [
        {
            "ioc_value": "143.92.43.246:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:21",
            "last_seen_utc": "2026-06-22 23:32:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832036": [
        {
            "ioc_value": "143.92.43.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 11:30:20",
            "last_seen_utc": "2026-06-22 23:31:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,cobalt,strike",
            "anonymous": 0,
            "reporter": "mrteddy"
        }
    ],
    "1832035": [
        {
            "ioc_value": "ndotkgyl.tasisathosseini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 11:17:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832032": [
        {
            "ioc_value": "94.26.106.236:777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 11:14:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/120d7c702c2224146f06b528abf1d793a6c86868bad5157549414d2fdc6be5e0/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832031": [
        {
            "ioc_value": "23.236.155.239:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 11:13:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/372270f87bb8f4b5c044ff38f7d8adedc61e158435b068a961b5450ad0e8d8b1/",
            "tags": "PhemedroneStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832030": [
        {
            "ioc_value": "beltka.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-14 11:12:53",
            "last_seen_utc": "2026-07-09 06:49:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832028": [
        {
            "ioc_value": "156.247.51.67:20437",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 11:12:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/84eccbf4424d6d317a8cf239c812c0042689403105b26404081901df608424e4/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832029": [
        {
            "ioc_value": "156.247.51.67:10437",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 11:12:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/84eccbf4424d6d317a8cf239c812c0042689403105b26404081901df608424e4/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832027": [
        {
            "ioc_value": "nishihaoren38.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 11:11:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/84eccbf4424d6d317a8cf239c812c0042689403105b26404081901df608424e4/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832026": [
        {
            "ioc_value": "nishihaoren5.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 11:10:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/28844652fb3520ac318ab50de154c5e75b1561036c59e5a52c30315ceae6e6a9/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832025": [
        {
            "ioc_value": "27.124.34.139:2844",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 11:09:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b795a55ef344eb43ff15bb8e5d929f71078f3fd548d050b5b0350c12991454e6/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832024": [
        {
            "ioc_value": "185.31.200.8:2139",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-14 11:07:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f997453517af9a39f3fb2264c1742bc710307305787ab4cdc2e7d470d58c71ba/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832018": [
        {
            "ioc_value": "yvrvsspv.tarikhravannovin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 10:52:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832017": [
        {
            "ioc_value": "38fead1469cca1192eedb9dd2fc305ddbb15760771223891d8e7db1a7a8fe2ea",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-14 10:42:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/38fead1469cca1192eedb9dd2fc305ddbb15760771223891d8e7db1a7a8fe2ea/",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1831787": [
        {
            "ioc_value": "whatdatcindy.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-06-14 10:39:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2320ad1074babc1e6e661d82ab03180752cb6d42d06aac441779b58ee5573cb/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1831788": [
        {
            "ioc_value": "https://whatdatcindy.com/nfront.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-06-14 10:39:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f2320ad1074babc1e6e661d82ab03180752cb6d42d06aac441779b58ee5573cb/",
            "tags": "LegionLoader",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1831789": [
        {
            "ioc_value": "g4me.flashpopdownloadbutton.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-06-14 10:39:45",
            "last_seen_utc": "2026-06-13 15:38:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,LegionLoader",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1831790": [
        {
            "ioc_value": "verification-js-cdn.boats",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.satacom",
            "malware_alias": "CurlyGate,LegionLoader,RobotDropper",
            "malware_printable": "Satacom",
            "first_seen_utc": "2026-06-14 10:39:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClickFix,LegionLoader",
            "anonymous": 0,
            "reporter": "aachum"
        }
    ],
    "1831796": [
        {
            "ioc_value": "38.60.220.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-06-14 10:39:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "APT43,DPRK,Kimsuky",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1831797": [
        {
            "ioc_value": "user-kakao.login-accounts.dynv6.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-06-14 10:39:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "APT43,DPRK,Kimsuky",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1831798": [
        {
            "ioc_value": "account-login.userauth.o-r.kr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-06-14 10:39:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "APT43,DPRK,Kimsuky",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1831799": [
        {
            "ioc_value": "account-auth.userlogin.kro.kr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-06-14 10:39:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "APT43,DPRK,Kimsuky",
            "anonymous": 0,
            "reporter": "TraiLeR"
        }
    ],
    "1831809": [
        {
            "ioc_value": "https://sindppence.org.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:42",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sindppence.org.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1831812": [
        {
            "ioc_value": "45.67.39.175:995",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:39:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831816": [
        {
            "ioc_value": "185.190.157.173:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:39:40",
            "last_seen_utc": null,
            "confidence_level": 98,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831818": [
        {
            "ioc_value": "185.220.60.185:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:39:40",
            "last_seen_utc": null,
            "confidence_level": 98,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831819": [
        {
            "ioc_value": "185.193.88.139:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:39:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831856": [
        {
            "ioc_value": "https://mampodik.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:39",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mampodik.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1831869": [
        {
            "ioc_value": "194.58.98.20:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:39:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831945": [
        {
            "ioc_value": "79.76.58.113:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:38",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cve-2024-4577,docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831946": [
        {
            "ioc_value": "https://217.60.195.113/sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:38",
            "last_seen_utc": "2026-08-21 15:18:15",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cve-2024-4577,docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831947": [
        {
            "ioc_value": "01baaef04cf032d418dcd85f047d129aa54b0eeabde2fed7287046c0604c3f1b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:37",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "elf,miner,ssh,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831948": [
        {
            "ioc_value": "16d3440fcc067823afc44dcbccea9fbbc2f8c68ae53b7aea45f9adff4c127086",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:37",
            "last_seen_utc": "2026-06-14 06:30:04",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "downloader,ssh,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831949": [
        {
            "ioc_value": "7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:36",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "downloader,dropper,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831950": [
        {
            "ioc_value": "8a68d1c08ea31250063f70b1ccb5051db1f7ab6e17d46e9dd3cc292b9849878b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:36",
            "last_seen_utc": "2026-06-14 06:30:03",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "mdrfckr,miner,outlaw,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831951": [
        {
            "ioc_value": "a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:35",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "backdoor,malkey,ssh-key-plant",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831952": [
        {
            "ioc_value": "87.120.166.130:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:34",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dropper,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831953": [
        {
            "ioc_value": "152.42.247.85:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:34",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dropper,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831954": [
        {
            "ioc_value": "31.76.27.231:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:33",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,redtail,web",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831955": [
        {
            "ioc_value": "159.89.83.151:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:33",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "backdoor,key-plant,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831956": [
        {
            "ioc_value": "37.58.136.133:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:32",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "backdoor,key-plant,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831957": [
        {
            "ioc_value": "183.56.243.176:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:31",
            "last_seen_utc": "2026-06-26 08:50:31",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831958": [
        {
            "ioc_value": "168.144.45.211:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-14 10:39:31",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,ssh-key-plant",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1831959": [
        {
            "ioc_value": "783adb7ad6b16fe9818f3e6d48b937c3ca1994ef24e50865282eeedeab7e0d59",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-14 10:39:31",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dota3,mdrfckr,miner,outlaw,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1832003": [
        {
            "ioc_value": "cqdprod.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:31",
            "last_seen_utc": "2026-06-16 11:28:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832004": [
        {
            "ioc_value": "cqdsequoia.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:30",
            "last_seen_utc": "2026-06-16 11:28:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832005": [
        {
            "ioc_value": "ghost-loader.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832007": [
        {
            "ioc_value": "cryptex-core.pw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832015": [
        {
            "ioc_value": "nottinghamcarpetsandblinds.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-14 10:39:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d68d1f36f030adfae5620e2a7e33fda908687dcf77e1f0529691a5a7a3f6608b/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1832016": [
        {
            "ioc_value": "mgo.gstats-api-contact.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-14 10:39:12",
            "last_seen_utc": "2026-07-10 07:21:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6e7e68fcce89bc7e3284045f0295e08b35f571ecc46004f3ffc5caba18e49f56/",
            "tags": "ZigClipper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832014": [
        {
            "ioc_value": "http://nottinghamcarpetsandblinds.com:5789",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-14 10:35:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d68d1f36f030adfae5620e2a7e33fda908687dcf77e1f0529691a5a7a3f6608b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832013": [
        {
            "ioc_value": "http://151.240.151.64/9966f4d17e8f4875aad6.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-14 10:35:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c458a0b34d5f341179fbd88a408e73df9e87b6b118dbfc9f47873b5127918576/",
            "tags": "stealc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832012": [
        {
            "ioc_value": "65.87.7.18:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:35:06",
            "last_seen_utc": "2026-06-15 06:51:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1670873463",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832011": [
        {
            "ioc_value": "8.152.2.86:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:35:05",
            "last_seen_utc": "2026-06-15 06:51:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832010": [
        {
            "ioc_value": "103.47.83.115:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:35:04",
            "last_seen_utc": "2026-07-24 10:46:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832009": [
        {
            "ioc_value": "188.227.14.105:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:34:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832008": [
        {
            "ioc_value": "65.21.202.12:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 10:34:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1832006": [
        {
            "ioc_value": "fkqhi.drivingbook.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 10:32:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832002": [
        {
            "ioc_value": "xglycuye.tarikhcheravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 10:15:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1832001": [
        {
            "ioc_value": "qlsgo9c9.shimiskoog.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 10:15:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831996": [
        {
            "ioc_value": "66.29.131.145:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-14 09:45:10",
            "last_seen_utc": "2026-07-14 18:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831995": [
        {
            "ioc_value": "64.225.102.218:31400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-14 09:45:07",
            "last_seen_utc": "2026-09-01 02:46:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831994": [
        {
            "ioc_value": "45.61.150.88:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-14 09:44:50",
            "last_seen_utc": "2026-07-14 18:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831993": [
        {
            "ioc_value": "45.198.224.213:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-14 09:44:49",
            "last_seen_utc": "2026-08-01 18:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831992": [
        {
            "ioc_value": "23.235.185.42:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-14 09:44:35",
            "last_seen_utc": "2026-08-15 08:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831989": [
        {
            "ioc_value": "209.99.185.96:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 09:44:04",
            "last_seen_utc": "2026-07-14 08:44:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831990": [
        {
            "ioc_value": "209.99.189.198:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 09:44:04",
            "last_seen_utc": "2026-07-25 08:44:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831991": [
        {
            "ioc_value": "209.99.189.198:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 09:44:04",
            "last_seen_utc": "2026-07-25 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831988": [
        {
            "ioc_value": "crghbprm.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 09:43:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831987": [
        {
            "ioc_value": "185.207.154.11:4848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-14 09:43:43",
            "last_seen_utc": "2026-09-01 02:44:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831986": [
        {
            "ioc_value": "182.23.2.163:11954",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 09:43:38",
            "last_seen_utc": "2026-07-14 08:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831985": [
        {
            "ioc_value": "172.245.195.233:14645",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-14 09:43:32",
            "last_seen_utc": "2026-07-18 18:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831984": [
        {
            "ioc_value": "103.241.64.92:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-14 09:43:05",
            "last_seen_utc": "2026-07-16 18:43:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831983": [
        {
            "ioc_value": "1.14.234.107:8989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-14 09:43:02",
            "last_seen_utc": "2026-07-30 08:43:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831982": [
        {
            "ioc_value": "fnuqorvu.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 09:10:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831979": [
        {
            "ioc_value": "49.232.4.71:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 09:00:14",
            "last_seen_utc": "2026-08-28 08:08:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831977": [
        {
            "ioc_value": "irljgzvr.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 08:37:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831976": [
        {
            "ioc_value": "zjkgepkj.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 08:06:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831974": [
        {
            "ioc_value": "49.232.4.71:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-14 08:00:20",
            "last_seen_utc": "2026-08-28 08:09:01",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831970": [
        {
            "ioc_value": "ztx7i07q.ravanshenasisaeedi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 07:58:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831969": [
        {
            "ioc_value": "zujqygdq.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 07:33:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831968": [
        {
            "ioc_value": "f27u92nr.ravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 07:11:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831967": [
        {
            "ioc_value": "ggqgx.differentialmamuli.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 07:06:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831966": [
        {
            "ioc_value": "zkukywuh.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 07:04:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831960": [
        {
            "ioc_value": "hogugzxj.questionsmotor.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 06:32:23",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831944": [
        {
            "ioc_value": "hduwrmy.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 06:11:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831943": [
        {
            "ioc_value": "fjagjlhm.psgnewsiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 06:03:09",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831939": [
        {
            "ioc_value": "ycnrdnqk.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 05:35:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831938": [
        {
            "ioc_value": "gbqlwrat.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 05:02:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831937": [
        {
            "ioc_value": "pwzkdexx.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 04:25:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831936": [
        {
            "ioc_value": "c3ord92p.ravanshenasiganji.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 03:58:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831935": [
        {
            "ioc_value": "ozaauajb.mechanickhodakarami.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 03:57:49",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831934": [
        {
            "ioc_value": "errmx.defamogadas.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 03:45:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831932": [
        {
            "ioc_value": "8df2a2834beb8e7f61290ad647a943b76d37a7e9",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-14 03:28:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831933": [
        {
            "ioc_value": "4fb1d95832b2daa5125f7ff2e618df0b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-14 03:28:34",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831929": [
        {
            "ioc_value": "5c193587430fa41ac4ff3ba1ac41abec4f025dd5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phemedrone_stealer",
            "malware_alias": "Ov3r_Stealer",
            "malware_printable": "Phemedrone Stealer",
            "first_seen_utc": "2026-06-14 03:28:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831930": [
        {
            "ioc_value": "b01231990bfbb7857d28c8e24aa6251b",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phemedrone_stealer",
            "malware_alias": "Ov3r_Stealer",
            "malware_printable": "Phemedrone Stealer",
            "first_seen_utc": "2026-06-14 03:28:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831931": [
        {
            "ioc_value": "b90911b23eee913a11dc19e983910497c3822f2c0f12722672cb790cadf3f4fa",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-14 03:28:33",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831927": [
        {
            "ioc_value": "a59021e930e4788c1f8ad670d63b00ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-14 03:28:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831928": [
        {
            "ioc_value": "9555123bcc8f0720640dc56fa9e17452a3f2224038f2385e292f64df7c70fa8d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phemedrone_stealer",
            "malware_alias": "Ov3r_Stealer",
            "malware_printable": "Phemedrone Stealer",
            "first_seen_utc": "2026-06-14 03:28:32",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831924": [
        {
            "ioc_value": "c971ef7fa5032f6d999550a0aba36a4d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-14 03:28:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831925": [
        {
            "ioc_value": "7d33c40bde71d7b366335c81ce63e834d6295db5a5b9aaaa179c0a1f782714ce",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-14 03:28:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831926": [
        {
            "ioc_value": "dbfec091c4ca2cf728c090075130705b33f678e6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-14 03:28:31",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831921": [
        {
            "ioc_value": "caccc2e6232c63bdd21bfaf65eff6c78",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-14 03:28:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831922": [
        {
            "ioc_value": "9cfc0394511e10e7fa965aa348c134edc47f8f2af617b92975b3ac573fda95ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-14 03:28:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831923": [
        {
            "ioc_value": "0cb2f8336c23e581668238619de3dc6edb10cef4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-14 03:28:30",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831917": [
        {
            "ioc_value": "2db7e2aa1c6452b8326f8bd485c7cf3db34e94ed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-14 03:28:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831918": [
        {
            "ioc_value": "8b56aebdbd532b68e68ac3d603176027",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-14 03:28:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831919": [
        {
            "ioc_value": "7b16ec86306d55b3dcdfb7897bb9dcc059b8fa2cd9ebfc31b801838f2652f81e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-14 03:28:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831920": [
        {
            "ioc_value": "867e6e4e62e6a48b29439da2b1299f650e2769ec",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-14 03:28:29",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831915": [
        {
            "ioc_value": "9b9dcc895b1e29c298437174b6854a69",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-14 03:28:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831916": [
        {
            "ioc_value": "d776991e64f8abcdcae6fe99e48e83a7570a51712d0b6df25f72f5abaf99fbe4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.luca_stealer",
            "malware_alias": null,
            "malware_printable": "Luca Stealer",
            "first_seen_utc": "2026-06-14 03:28:28",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831912": [
        {
            "ioc_value": "2eb88c1364140da4d32f9d21487cef9f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-14 03:28:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831913": [
        {
            "ioc_value": "5458e333742c00ce6543315bac3b3d8a83ff35034081728bf087a821a6b5a728",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-14 03:28:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831914": [
        {
            "ioc_value": "ac893a40df75c886b5f202ebd9763bd9be009440",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-14 03:28:27",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831908": [
        {
            "ioc_value": "e4be2369cb5210790829c25a45c3ccac0fbe71f3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831909": [
        {
            "ioc_value": "c95629d2f826d57e008e6c791f733361",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831910": [
        {
            "ioc_value": "d7f510d73fa0c926a8e0fccf92c99fcaadcd58708227368a4878663bc0ec2587",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-14 03:28:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831911": [
        {
            "ioc_value": "a15195daaadb5efc0f393cbc6caf3b3abb3393c7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-14 03:28:26",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831906": [
        {
            "ioc_value": "fae41440b83cf11e1ebdbefb47d0b6f2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-14 03:28:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831907": [
        {
            "ioc_value": "3ced756405771b11daab9d9b24db2faad5aaeeab845a31577d03ee545c27d5ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:25",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831903": [
        {
            "ioc_value": "e6953f8c99055eca2c16f26bdc5fb3c0",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 03:28:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831904": [
        {
            "ioc_value": "886ea11a793e4f9eeec10b6758a368ed3a9344e87e01502b4bf3952abd8937a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-14 03:28:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831905": [
        {
            "ioc_value": "fefc88c9a9521c64961030aa22e96fd1768e81b5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-14 03:28:24",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831900": [
        {
            "ioc_value": "3eb10fa565b63f4869b3e63327cdb09a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.purpleink",
            "malware_alias": null,
            "malware_printable": "purpleink",
            "first_seen_utc": "2026-06-14 03:28:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831901": [
        {
            "ioc_value": "88043d66ca29d6b33a24eae0484ae347d66cc9333c65de2b3cf7d960412766ad",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 03:28:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831902": [
        {
            "ioc_value": "855c9d480b9fb345d17e43242bb0a9da10ad0cb5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-14 03:28:23",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831897": [
        {
            "ioc_value": "26799ecfcf4fe9850a1c224aa39c96be",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831898": [
        {
            "ioc_value": "d6e6cb2c61d3f22b05b49a864283c277f5c852565ec07e70c5f408053d1200ee",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.purpleink",
            "malware_alias": null,
            "malware_printable": "purpleink",
            "first_seen_utc": "2026-06-14 03:28:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831899": [
        {
            "ioc_value": "eb79302268a86c6e14977556c2b87f436e277370",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.purpleink",
            "malware_alias": null,
            "malware_printable": "purpleink",
            "first_seen_utc": "2026-06-14 03:28:22",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831894": [
        {
            "ioc_value": "b036154d6a043b690421ac0a812be7fd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831895": [
        {
            "ioc_value": "99dee89a3427e03b136a462f486cf3537f98f4fc82c16dd9119080edf3eb4d2c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831896": [
        {
            "ioc_value": "940844c040b79a2a3b85f5762d5f39ac593ba1d7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:21",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831891": [
        {
            "ioc_value": "6204e3e8f5075a2b598f4460ff069126",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-14 03:28:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831892": [
        {
            "ioc_value": "ffb42d868ef70aafbf8a08178d59c068fc0b13995e8d7185df869b49374dc653",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831893": [
        {
            "ioc_value": "d953d4e234e8b3f0ba659d355011078fa1d8e6e3",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-14 03:28:20",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831889": [
        {
            "ioc_value": "53bcc0b768812ba2860d64b72353c50430572a866bd658b3fe5e671e15b7e699",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-14 03:28:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831890": [
        {
            "ioc_value": "b795d6a60abf51b1ddb8c40706a6ffaf72ab763b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.wannacryptor",
            "malware_alias": "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry",
            "malware_printable": "WannaCryptor",
            "first_seen_utc": "2026-06-14 03:28:19",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831888": [
        {
            "ioc_value": "ipzukbru.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 03:21:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831887": [
        {
            "ioc_value": "xreyotb.livebetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 03:11:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831886": [
        {
            "ioc_value": "xwtwlrkc.masaelmohandesi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 02:52:19",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831885": [
        {
            "ioc_value": "qjivlnde.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 02:15:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831881": [
        {
            "ioc_value": "hhbpyr7b.ravanshenakhti.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 01:55:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831880": [
        {
            "ioc_value": "nztdbnij.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 01:47:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831879": [
        {
            "ioc_value": "qcfxtzci.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 01:15:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831878": [
        {
            "ioc_value": "ptybfgjf.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 00:38:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831877": [
        {
            "ioc_value": "cdppx.danestanihavarzeshi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 00:29:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831876": [
        {
            "ioc_value": "efwjubk.rocketbet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 00:15:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831875": [
        {
            "ioc_value": "qvipoojy.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 00:10:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831874": [
        {
            "ioc_value": "7sxu8ft8.shartbandikade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-14 00:01:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831873": [
        {
            "ioc_value": "8r61gwvq.ravansalamat.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 23:57:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831872": [
        {
            "ioc_value": "yba7z7vt.ravansalamat.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 23:55:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831871": [
        {
            "ioc_value": "zkclsegh.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 23:33:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831870": [
        {
            "ioc_value": "pirqlheh.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 23:00:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831868": [
        {
            "ioc_value": "ahkyokta.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 22:27:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831867": [
        {
            "ioc_value": "xeviozwk.hugugnasiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 21:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831866": [
        {
            "ioc_value": "yym1l9om.qurandownload.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 21:54:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831864": [
        {
            "ioc_value": "uhnuyfcr.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 21:23:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831863": [
        {
            "ioc_value": "igrbuyo.pokerkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 21:11:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831862": [
        {
            "ioc_value": "kl23rl6f.nahjolbalage.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 21:10:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831861": [
        {
            "ioc_value": "hfolz.bookdrive.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 21:08:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831858": [
        {
            "ioc_value": "kzkzbbha.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 20:50:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831857": [
        {
            "ioc_value": "wdbcypih.hugugedari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 20:22:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831850": [
        {
            "ioc_value": "osggwts6.fubet24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 19:56:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831849": [
        {
            "ioc_value": "lmjkrmqt.fubet24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 19:54:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831848": [
        {
            "ioc_value": "vhsqohyd.hugugdaryayi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 19:50:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831845": [
        {
            "ioc_value": "96.44.167.215:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:45:41",
            "last_seen_utc": "2026-07-14 08:47:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831846": [
        {
            "ioc_value": "96.44.167.215:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:45:41",
            "last_seen_utc": "2026-07-15 08:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831847": [
        {
            "ioc_value": "96.44.167.215:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:45:41",
            "last_seen_utc": "2026-07-14 08:47:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831844": [
        {
            "ioc_value": "94.103.1.223:3421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:45:40",
            "last_seen_utc": "2026-07-14 08:47:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831843": [
        {
            "ioc_value": "9.141.105.20:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 19:45:37",
            "last_seen_utc": "2026-07-16 18:46:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831842": [
        {
            "ioc_value": "85.121.176.239:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 19:45:34",
            "last_seen_utc": "2026-08-12 18:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831840": [
        {
            "ioc_value": "72.51.57.131:5202",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-13 19:45:28",
            "last_seen_utc": "2026-07-14 08:47:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831841": [
        {
            "ioc_value": "72.51.57.131:7997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-13 19:45:28",
            "last_seen_utc": "2026-07-14 08:47:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831839": [
        {
            "ioc_value": "46.246.4.9:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-13 19:45:11",
            "last_seen_utc": "2026-07-14 08:46:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831838": [
        {
            "ioc_value": "45.153.127.224:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-06-13 19:45:04",
            "last_seen_utc": "2026-09-01 02:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831836": [
        {
            "ioc_value": "31.76.32.181:8455",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:44:52",
            "last_seen_utc": "2026-07-14 08:46:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831837": [
        {
            "ioc_value": "31.76.87.218:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:44:52",
            "last_seen_utc": "2026-07-16 08:45:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831834": [
        {
            "ioc_value": "209.99.189.198:7005",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:44:13",
            "last_seen_utc": "2026-07-26 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831835": [
        {
            "ioc_value": "209.99.189.198:7006",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:44:13",
            "last_seen_utc": "2026-07-26 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831833": [
        {
            "ioc_value": "209.99.185.96:2025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 19:44:12",
            "last_seen_utc": "2026-07-13 18:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831832": [
        {
            "ioc_value": "2.27.5.179:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:44:06",
            "last_seen_utc": "2026-07-16 08:44:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831831": [
        {
            "ioc_value": "2.26.75.218:6913",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:44:05",
            "last_seen_utc": "2026-07-19 08:44:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831830": [
        {
            "ioc_value": "193.187.91.216:51842",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:43:59",
            "last_seen_utc": "2026-07-14 08:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831829": [
        {
            "ioc_value": "191.107.87.183:5469",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:43:56",
            "last_seen_utc": "2026-07-19 08:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831828": [
        {
            "ioc_value": "191.107.87.183:5011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 19:43:55",
            "last_seen_utc": "2026-07-22 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831826": [
        {
            "ioc_value": "182.23.2.163:49415",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:43:46",
            "last_seen_utc": "2026-07-13 18:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831827": [
        {
            "ioc_value": "182.23.2.163:5814",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:43:46",
            "last_seen_utc": "2026-07-14 08:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831825": [
        {
            "ioc_value": "172.245.195.233:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:43:37",
            "last_seen_utc": "2026-07-21 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831824": [
        {
            "ioc_value": "157.22.185.5:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-13 19:43:28",
            "last_seen_utc": "2026-07-14 08:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831823": [
        {
            "ioc_value": "155.103.71.115:14409",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 19:43:25",
            "last_seen_utc": "2026-07-14 08:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831822": [
        {
            "ioc_value": "144.91.78.57:207",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-13 19:43:19",
            "last_seen_utc": "2026-07-14 08:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831821": [
        {
            "ioc_value": "107.172.133.182:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 19:43:08",
            "last_seen_utc": "2026-07-15 08:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831820": [
        {
            "ioc_value": "jrmcsezq.hugugbime.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 19:17:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831817": [
        {
            "ioc_value": "nqsaymjr.betyek.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 18:40:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831814": [
        {
            "ioc_value": "mampodik.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 18:27:53",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831813": [
        {
            "ioc_value": "honeymoonshop.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 18:27:51",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831811": [
        {
            "ioc_value": "gbbzykw.melbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 18:09:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831810": [
        {
            "ioc_value": "fswqsjdd.betxane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 18:08:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831808": [
        {
            "ioc_value": "1mp15ubu.shansline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 18:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831803": [
        {
            "ioc_value": "haoriskdk839ska.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-13 17:55:52",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831804": [
        {
            "ioc_value": "hatksaks281ksa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-13 17:55:52",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831805": [
        {
            "ioc_value": "photo-27857.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-13 17:55:52",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831806": [
        {
            "ioc_value": "photo-37857.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-13 17:55:52",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831807": [
        {
            "ioc_value": "photo-47857.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-13 17:55:52",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831802": [
        {
            "ioc_value": "vkmz8u3b.enfejarkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 17:53:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831801": [
        {
            "ioc_value": "xetxx.bankefile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 17:47:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831800": [
        {
            "ioc_value": "cugeuvle.betwanna.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 17:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831795": [
        {
            "ioc_value": "urelelgc.betforwardkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 17:02:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831794": [
        {
            "ioc_value": "dyqanvdt.betfidokade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 16:30:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831793": [
        {
            "ioc_value": "bqxhfhog.bet313.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 15:57:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831792": [
        {
            "ioc_value": "phw2uk1e.casinokade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 15:55:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831791": [
        {
            "ioc_value": "k969mylb.casinokade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 15:53:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831786": [
        {
            "ioc_value": "qoutbfpg.bet120x.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 15:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831785": [
        {
            "ioc_value": "http://alchsp.xyz:7673",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-13 15:20:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77a68cbd203c84da42696aa328785ebea30b255e9a9d64ed63368c8fc95613aa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831784": [
        {
            "ioc_value": "111.90.143.196:8081",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:12:33",
            "last_seen_utc": "2026-06-15 06:51:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831783": [
        {
            "ioc_value": "8.141.121.30:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:12:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831782": [
        {
            "ioc_value": "qzxjphs.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 15:12:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831781": [
        {
            "ioc_value": "47.107.106.178:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:12:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831706": [
        {
            "ioc_value": "178.154.229.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:05:42",
            "last_seen_utc": null,
            "confidence_level": 93,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1059_003,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831707": [
        {
            "ioc_value": "92.53.97.113:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:05:42",
            "last_seen_utc": null,
            "confidence_level": 96,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,manual-override,nation-state-hunter,t1059_003,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831671": [
        {
            "ioc_value": "103.245.27.100:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-13 15:05:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "loader,Mirai",
            "anonymous": 0,
            "reporter": "opastorello"
        }
    ],
    "1831697": [
        {
            "ioc_value": "152.236.6.8:28291",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-13 15:05:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1831653": [
        {
            "ioc_value": "103.39.235.194:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-13 15:05:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,lazarus-group,nation-state-hunter,t1190,t1566",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831670": [
        {
            "ioc_value": "vbotnt1.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-13 15:05:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai,Realtek",
            "anonymous": 0,
            "reporter": "opastorello"
        }
    ],
    "1831656": [
        {
            "ioc_value": "43.156.218.130:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:05:37",
            "last_seen_utc": "2026-06-24 12:05:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "132203,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1831657": [
        {
            "ioc_value": "157.230.248.213:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:05:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14061,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1831711": [
        {
            "ioc_value": "http://verification-js-cdn.boats/5c89e36548466c44",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 15:05:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake",
            "anonymous": 0,
            "reporter": "Decio1"
        }
    ],
    "1831712": [
        {
            "ioc_value": "http://verification-js-cdn.boats/5c89e36548466c44?_=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 15:05:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake",
            "anonymous": 0,
            "reporter": "Decio1"
        }
    ],
    "1831713": [
        {
            "ioc_value": "http://verification-js-cdn.boats/5c89e36548466c44?ack=1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 15:05:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake",
            "anonymous": 0,
            "reporter": "Decio1"
        }
    ],
    "1831715": [
        {
            "ioc_value": "https://devltd.us/flomos1.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 15:05:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "Decio1"
        }
    ],
    "1831714": [
        {
            "ioc_value": "http://verification-js-cdn.boats/67422f998296584824aa06c4066c9074457e4dd28a5a84cb209900f0c82a47f0",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 15:05:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake",
            "anonymous": 0,
            "reporter": "Decio1"
        }
    ],
    "1831769": [
        {
            "ioc_value": "framework-css-styles-js.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:28",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831770": [
        {
            "ioc_value": "ethercdnns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:28",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831771": [
        {
            "ioc_value": "misterslivker.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:27",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831772": [
        {
            "ioc_value": "mylovedomen.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:27",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831773": [
        {
            "ioc_value": "slivkishow.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:25",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831774": [
        {
            "ioc_value": "thisismine.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:24",
            "last_seen_utc": "2026-07-16 14:49:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831775": [
        {
            "ioc_value": "verification-js-cdn.boats",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-13 15:05:23",
            "last_seen_utc": "2026-08-15 11:58:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,errtraffic,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831638": [
        {
            "ioc_value": "avexor.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.smartapesg",
            "malware_alias": "HANEYMANEY,ZPHP",
            "malware_printable": "SmartApeSG",
            "first_seen_utc": "2026-06-13 15:05:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "SmartApeSG",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1831637": [
        {
            "ioc_value": "185.89.254.46:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-13 15:05:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831618": [
        {
            "ioc_value": "188.164.250.223:3388",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1059_003,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831625": [
        {
            "ioc_value": "107.189.22.35:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 15:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1831592": [
        {
            "ioc_value": "frreliny.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.unidentified_001",
            "malware_alias": null,
            "malware_printable": "Unidentified 001",
            "first_seen_utc": "2026-06-13 15:05:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260612-t6hq3sbs8p",
            "tags": "connectwise,ransomware,rmm,screenconnect",
            "anonymous": 0,
            "reporter": "gh0styippe"
        }
    ],
    "1831595": [
        {
            "ioc_value": "https://bge-visa.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-13 15:05:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/bge-visa.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1831590": [
        {
            "ioc_value": "178.16.54.109:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-13 15:05:03",
            "last_seen_utc": "2026-08-26 09:30:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://tria.ge/260612-tw2ffaa16r",
            "tags": "loader,phorpiex,worm",
            "anonymous": 0,
            "reporter": "gh0styippe"
        }
    ],
    "1831778": [
        {
            "ioc_value": "boqetwvb.bcgamekade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 14:57:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831777": [
        {
            "ioc_value": "wabel.azmoonzare.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 14:26:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831776": [
        {
            "ioc_value": "kdqtqtbo.ace9bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 14:23:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831763": [
        {
            "ioc_value": "8dtstox1.bordestan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 13:53:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831762": [
        {
            "ioc_value": "qnuaqbez.anodaz.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 13:52:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831761": [
        {
            "ioc_value": "mkspkafs.4030bet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 13:51:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831760": [
        {
            "ioc_value": "hhghzngh.22betkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 13:14:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831757": [
        {
            "ioc_value": "xrekqgkh.1xyek.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 12:41:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831755": [
        {
            "ioc_value": "ymwntmdt.1xborokade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 12:13:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831754": [
        {
            "ioc_value": "toolcvu.livebetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 12:11:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831749": [
        {
            "ioc_value": "undb4pt3.questionstest.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 11:53:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831748": [
        {
            "ioc_value": "5dg7o57f.questionstest.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 11:52:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831747": [
        {
            "ioc_value": "118.24.128.201:64727",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-13 11:46:23",
            "last_seen_utc": "2026-07-16 08:47:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831746": [
        {
            "ioc_value": "zthedtkr.1xbitkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 11:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831745": [
        {
            "ioc_value": "faogw.bankefile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 11:00:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831741": [
        {
            "ioc_value": "owbzzpof.1xbetmag.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 10:55:48",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831740": [
        {
            "ioc_value": "ggifzobt.hugugmadani3.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 10:19:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831734": [
        {
            "ioc_value": "29jpudxc.geotechnictahuni.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 09:52:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831733": [
        {
            "ioc_value": "98.191.176.231:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-06-13 09:46:13",
            "last_seen_utc": "2026-08-07 18:46:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831732": [
        {
            "ioc_value": "89.42.134.220:1991",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 09:46:08",
            "last_seen_utc": "2026-09-01 02:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831731": [
        {
            "ioc_value": "69.164.245.165:8930",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 09:45:57",
            "last_seen_utc": "2026-07-14 18:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831730": [
        {
            "ioc_value": "34.123.214.16:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-13 09:45:23",
            "last_seen_utc": "2026-08-08 08:45:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831728": [
        {
            "ioc_value": "31.76.32.201:1377",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 09:45:22",
            "last_seen_utc": "2026-07-19 18:45:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831729": [
        {
            "ioc_value": "31.76.32.230:1499",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 09:45:22",
            "last_seen_utc": "2026-07-19 18:45:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831727": [
        {
            "ioc_value": "23.235.185.44:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-13 09:45:15",
            "last_seen_utc": "2026-08-15 08:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831726": [
        {
            "ioc_value": "188.121.162.153:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 09:44:10",
            "last_seen_utc": "2026-07-19 18:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831725": [
        {
            "ioc_value": "185.212.129.185:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-13 09:44:06",
            "last_seen_utc": "2026-08-10 08:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831724": [
        {
            "ioc_value": "182.23.2.163:59678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 09:43:59",
            "last_seen_utc": "2026-07-13 08:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831723": [
        {
            "ioc_value": "172.245.195.233:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-13 09:43:46",
            "last_seen_utc": "2026-07-17 18:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831722": [
        {
            "ioc_value": "130.185.82.117:5641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-13 09:43:18",
            "last_seen_utc": "2026-09-01 02:43:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831720": [
        {
            "ioc_value": "108.181.115.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ransomhub",
            "malware_alias": null,
            "malware_printable": "RansomHub",
            "first_seen_utc": "2026-06-13 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RansomHub",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831721": [
        {
            "ioc_value": "108.181.115.254:7045",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ransomhub",
            "malware_alias": null,
            "malware_printable": "RansomHub",
            "first_seen_utc": "2026-06-13 09:43:12",
            "last_seen_utc": "2026-09-01 02:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RansomHub",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831719": [
        {
            "ioc_value": "107.173.9.88:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 09:43:11",
            "last_seen_utc": "2026-07-13 18:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831718": [
        {
            "ioc_value": "102.46.221.148:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-13 09:43:04",
            "last_seen_utc": "2026-07-13 18:43:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831717": [
        {
            "ioc_value": "101.33.202.134:9989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-13 09:43:02",
            "last_seen_utc": "2026-09-01 02:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831710": [
        {
            "ioc_value": "sh6rkpx6.shartmag.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 09:10:46",
            "last_seen_utc": "2026-06-17 16:08:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831709": [
        {
            "ioc_value": "120.24.144.243:16001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-13 09:00:14",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831708": [
        {
            "ioc_value": "192.3.252.164:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-13 09:00:13",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831705": [
        {
            "ioc_value": "alrwomdp.restaurantguideaarhus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 08:26:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831703": [
        {
            "ioc_value": "obmhxqg.rocketbet.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 07:55:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831702": [
        {
            "ioc_value": "ggcjxgov.fununetadris.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 07:53:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831701": [
        {
            "ioc_value": "v47e4385.fununetadris.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 07:51:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831700": [
        {
            "ioc_value": "gsdzofat.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 07:45:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831699": [
        {
            "ioc_value": "krigo.ecologyardakani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 07:38:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831698": [
        {
            "ioc_value": "aoeoelfz.hugugbime.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 07:00:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831696": [
        {
            "ioc_value": "jyvartai.hugugdaryayi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 06:20:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831695": [
        {
            "ioc_value": "kg0kdihy.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 05:51:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831694": [
        {
            "ioc_value": "psmecdlr.hugugedari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 05:43:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831693": [
        {
            "ioc_value": "dngzhceb.hugugmadani3.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 04:59:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831692": [
        {
            "ioc_value": "mhhalmi.pokerkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 04:54:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831690": [
        {
            "ioc_value": "1d3a5e780488095d6174bcdc49ee16c0ea802a6a",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-13 04:31:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831691": [
        {
            "ioc_value": "347187dc7824a887b8f6a3272b3baf12",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-13 04:31:15",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831687": [
        {
            "ioc_value": "f16c4398c613a78c391f2e721f95d879e9bd356c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-13 04:31:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831688": [
        {
            "ioc_value": "fceaf8af1a6e83e0a1ae35a4a2fa35a7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-13 04:31:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831689": [
        {
            "ioc_value": "49999f257686cfba6fe9504ff99a7776f998e3ba4887d28d2957f040ac346306",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-13 04:31:14",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831684": [
        {
            "ioc_value": "7105e52803914e37050b6f2a4c0d8a8339a2a381",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-13 04:31:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831685": [
        {
            "ioc_value": "8368894761e8f296575356fe49978880",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-13 04:31:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831686": [
        {
            "ioc_value": "af71d8886f256bf2393b1bf6d44b2fcb50d7d546e49bb7b6fbe151a3cf2032f5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-13 04:31:13",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831681": [
        {
            "ioc_value": "7c1dc6b792df9cf72d40102b9daa1969ce88e5f5",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-13 04:31:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831682": [
        {
            "ioc_value": "94d2ca3c409914ad4d42ea57ce4b36b1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-13 04:31:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831683": [
        {
            "ioc_value": "13a1587305880da5fbd956cf9a1353a336996a66735f887004e38ed65b2f7ff1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.taurus_stealer",
            "malware_alias": null,
            "malware_printable": "Taurus Stealer",
            "first_seen_utc": "2026-06-13 04:31:12",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831679": [
        {
            "ioc_value": "e5cd97b309afed34383aff420333d831",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-13 04:31:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831680": [
        {
            "ioc_value": "e913c5f78dbe49989518ee50ee56cdb581a16a16b5ebb2ff567d526b238a0fc2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-13 04:31:11",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831676": [
        {
            "ioc_value": "a1e49c1cf7db97c042a5e5403fed0c79",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-06-13 04:31:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831677": [
        {
            "ioc_value": "24efe51c32a2017f5ad0aab43a2eb099eaf4379846f1b4e8a62093338ddae517",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-13 04:31:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831678": [
        {
            "ioc_value": "1f81e5529c284ea4561fd49997d5beb395ee2aa4",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-13 04:31:10",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831674": [
        {
            "ioc_value": "f2cbfb04c06d7a29349769b1c9b2c5c6b9b34f1d9f827d89b444016069f36656",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-06-13 04:31:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831675": [
        {
            "ioc_value": "6eaf280a71db28b3557ebed4073412a6357f08c8",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-06-13 04:31:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1831673": [
        {
            "ioc_value": "nwklhlmm.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 04:18:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831672": [
        {
            "ioc_value": "ezrzb.downloadquran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 04:17:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831669": [
        {
            "ioc_value": "2igj4kg6.shartbandifootballkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 03:56:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831668": [
        {
            "ioc_value": "9fmgmj87.garatequran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 03:51:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831667": [
        {
            "ioc_value": "wgtpfakz.akhlagvaahkam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 03:51:15",
            "last_seen_utc": "2026-07-03 03:03:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831666": [
        {
            "ioc_value": "p4pav6zh.garatequran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 03:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831665": [
        {
            "ioc_value": "xmxmplzc.hugugmadanikatouzian.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 03:42:25",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831663": [
        {
            "ioc_value": "http://abscete.info/ret/two/fre.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lokipws",
            "malware_alias": "Burkina,Loki,LokiBot,LokiPWS",
            "malware_printable": "Loki Password Stealer (PWS)",
            "first_seen_utc": "2026-06-13 03:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Loki",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831662": [
        {
            "ioc_value": "qjgjbwpw.hugugnasiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 02:58:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831661": [
        {
            "ioc_value": "cdvmgdw.melbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 02:40:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831660": [
        {
            "ioc_value": "wutgubeq.hugugtatbigi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 02:21:38",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831659": [
        {
            "ioc_value": "9xt13o7k.moarefeslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 01:50:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831658": [
        {
            "ioc_value": "fmhkmjyi.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 01:36:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831655": [
        {
            "ioc_value": "tkzvl.nagshekeshi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 00:57:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831654": [
        {
            "ioc_value": "edtmogyp.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 00:56:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831652": [
        {
            "ioc_value": "195.211.191.95:4190",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-13 00:25:41",
            "last_seen_utc": "2026-07-17 11:05:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a5ed89ce1dfdc342f2da873166bd095037f30e76b7fd29d300cb3c2eb7eb5a4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831651": [
        {
            "ioc_value": "http://mottla.shop:4190",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-13 00:25:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a5ed89ce1dfdc342f2da873166bd095037f30e76b7fd29d300cb3c2eb7eb5a4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831650": [
        {
            "ioc_value": "cowhdabq.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-13 00:15:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831649": [
        {
            "ioc_value": "x6veozdp.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 23:50:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831648": [
        {
            "ioc_value": "trqyckok.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 23:49:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831647": [
        {
            "ioc_value": "153.0.197.184:8555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 23:45:46",
            "last_seen_utc": "2026-07-19 14:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831646": [
        {
            "ioc_value": "sjgnfsm.megaparikade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 23:40:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831645": [
        {
            "ioc_value": "hkhyaprc.betyek.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 23:35:36",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831639": [
        {
            "ioc_value": "geirvzju.betxane.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 22:58:56",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831636": [
        {
            "ioc_value": "xipuryqj.betwanna.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 22:14:06",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831635": [
        {
            "ioc_value": "195.177.94.56:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-12 22:05:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d15248555e7a2d9c279d219e6587a74fca9c25720194512a2e4b0757f7a63219/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831634": [
        {
            "ioc_value": "ukpoojmk.shansbartar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:58:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831633": [
        {
            "ioc_value": "wumyhfj.livebetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:57:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831632": [
        {
            "ioc_value": "9w0va69z.shansbartar.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:53:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831631": [
        {
            "ioc_value": "4y04a82z.hattrickbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:49:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831630": [
        {
            "ioc_value": "raqmk.mururhesabdari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:35:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831629": [
        {
            "ioc_value": "hqqacfwe.betforwardkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:34:06",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831628": [
        {
            "ioc_value": "k96h8q0b.fubet24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831627": [
        {
            "ioc_value": "8gl6eqnn.fubet24.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 21:19:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831626": [
        {
            "ioc_value": "yzqzbtkr.betfidokade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 20:57:47",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831624": [
        {
            "ioc_value": "koiffqfm.enfejarkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 20:19:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831623": [
        {
            "ioc_value": "dxxxyoqr.bet313.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 20:17:28",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831617": [
        {
            "ioc_value": "69.172.210.50:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-12 19:45:16",
            "last_seen_utc": "2026-07-13 08:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831616": [
        {
            "ioc_value": "39.96.188.57:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 19:44:48",
            "last_seen_utc": "2026-07-17 08:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831615": [
        {
            "ioc_value": "31.76.32.161:9405",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 19:44:44",
            "last_seen_utc": "2026-07-14 18:45:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831614": [
        {
            "ioc_value": "198.23.177.222:14641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 19:43:57",
            "last_seen_utc": "2026-07-13 08:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831613": [
        {
            "ioc_value": "194.213.18.93:991",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-12 19:43:55",
            "last_seen_utc": "2026-07-15 18:44:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831612": [
        {
            "ioc_value": "182.23.2.163:7649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 19:43:43",
            "last_seen_utc": "2026-07-12 18:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831611": [
        {
            "ioc_value": "172.94.18.103:72",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-12 19:43:35",
            "last_seen_utc": "2026-08-04 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831610": [
        {
            "ioc_value": "172.245.195.233:14648",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 19:43:34",
            "last_seen_utc": "2026-07-22 18:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831609": [
        {
            "ioc_value": "158.220.96.15:3319",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-12 19:43:25",
            "last_seen_utc": "2026-07-13 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831608": [
        {
            "ioc_value": "149.104.28.77:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 19:43:19",
            "last_seen_utc": "2026-08-07 18:43:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831607": [
        {
            "ioc_value": "107.172.44.141:45699",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 19:43:08",
            "last_seen_utc": "2026-07-13 08:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831606": [
        {
            "ioc_value": "101.99.92.220:8264",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 19:43:03",
            "last_seen_utc": "2026-07-13 08:43:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831605": [
        {
            "ioc_value": "llfarlit.bet120x.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 19:36:17",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831604": [
        {
            "ioc_value": "vidsloii.bcgamekade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 18:51:34",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831603": [
        {
            "ioc_value": "g1zevlqh.casinokade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 18:20:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831602": [
        {
            "ioc_value": "17tx25qi.casinokade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 18:19:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831601": [
        {
            "ioc_value": "whitfkos.ace9bet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 18:17:49",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831600": [
        {
            "ioc_value": "oywlk.motorbook.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 18:11:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831599": [
        {
            "ioc_value": "9np2x3by.bordestan.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 17:59:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831598": [
        {
            "ioc_value": "dtphi824.akhbarsport.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 17:51:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831597": [
        {
            "ioc_value": "rngvl.bilyardkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 17:41:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831596": [
        {
            "ioc_value": "burreepr.ace90betkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 17:34:47",
            "last_seen_utc": "2026-07-13 11:19:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831594": [
        {
            "ioc_value": "euerx2bw.linebetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 17:22:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831593": [
        {
            "ioc_value": "wnwrwqfz.4030bet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 16:56:02",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831591": [
        {
            "ioc_value": "nylmc.hotbetkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 16:51:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831589": [
        {
            "ioc_value": "tngbqcwl.22betkade.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 16:21:57",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831583": [
        {
            "ioc_value": "gzcgy.hiwino.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 16:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831576": [
        {
            "ioc_value": "https://slivkishow.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 16:04:52",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/slivkishow.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1831582": [
        {
            "ioc_value": "cxdba2b3.zabanmemari.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 16:00:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831578": [
        {
            "ioc_value": "ddk5uk7m.zabanmemari.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 15:58:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1831577": [
        {
            "ioc_value": "htftvttj.1xyek.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 15:43:34",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831575": [
        {
            "ioc_value": "twhjk.hazaratkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 15:25:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1831573": [
        {
            "ioc_value": "https://ggt.glamisrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 15:24:53",
            "last_seen_utc": "2026-06-19 11:24:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831574": [
        {
            "ioc_value": "ggt.glamisrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 15:24:53",
            "last_seen_utc": "2026-06-19 11:24:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831571": [
        {
            "ioc_value": "https://ggt.gerbongsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 15:24:41",
            "last_seen_utc": "2026-06-25 07:24:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1831572": [
        {
            "ioc_value": "ggt.gerbongsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 15:24:41",
            "last_seen_utc": "2026-06-25 07:24:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830964": [
        {
            "ioc_value": "eqnenkch.zabanhaggani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 15:00:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830963": [
        {
            "ioc_value": "hodomoxq.1xborokade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 15:00:54",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830953": [
        {
            "ioc_value": "slivkishow.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 14:54:58",
            "last_seen_utc": "2026-06-30 21:58:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830951": [
        {
            "ioc_value": "ygfnk.darsnamejame.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 14:52:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830950": [
        {
            "ioc_value": "emqlb.tahlilsazeha.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 14:27:49",
            "last_seen_utc": "2026-06-19 15:06:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830949": [
        {
            "ioc_value": "zjfxfoev.1xbitkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 14:26:48",
            "last_seen_utc": "2026-07-10 07:20:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830935": [
        {
            "ioc_value": "onetasknext.eastasia.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-06-12 14:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830936": [
        {
            "ioc_value": "sydelorme.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-06-12 14:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830937": [
        {
            "ioc_value": "davidkapor.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-06-12 14:02:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830938": [
        {
            "ioc_value": "swgraphic.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-06-12 14:02:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830939": [
        {
            "ioc_value": "foodnflavors.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-06-12 14:02:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830940": [
        {
            "ioc_value": "procuducts.southafricanorth.cloudapp.azure.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.ether_rat",
            "malware_alias": null,
            "malware_printable": "EtherRAT",
            "first_seen_utc": "2026-06-12 14:02:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "EtherRat",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830947": [
        {
            "ioc_value": "https://misterslivker.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 14:02:04",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/misterslivker.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1830943": [
        {
            "ioc_value": "ljist.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:53:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830942": [
        {
            "ioc_value": "ktokj.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:52:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830941": [
        {
            "ioc_value": "vspdk.tahgigbazargan.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:36:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830896": [
        {
            "ioc_value": "claimsj.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830897": [
        {
            "ioc_value": "passedt.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830898": [
        {
            "ioc_value": "cohesrc.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830899": [
        {
            "ioc_value": "montgqd.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830900": [
        {
            "ioc_value": "familbi.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830901": [
        {
            "ioc_value": "feathqz.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830902": [
        {
            "ioc_value": "pitchgb.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-12 13:20:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Domain,Lumma,Lumma Stealer,Stealer",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830905": [
        {
            "ioc_value": "2.27.5.127:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:20:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830906": [
        {
            "ioc_value": "45.12.62.176:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:20:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830907": [
        {
            "ioc_value": "45.115.27.3:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:20:02",
            "last_seen_utc": "2026-07-11 18:04:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830908": [
        {
            "ioc_value": "77.90.185.36:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:20:01",
            "last_seen_utc": "2026-07-03 17:34:54",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830910": [
        {
            "ioc_value": "104.251.180.218:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:20:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830909": [
        {
            "ioc_value": "94.26.83.178:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830911": [
        {
            "ioc_value": "150.40.117.245:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830912": [
        {
            "ioc_value": "150.241.66.52:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830913": [
        {
            "ioc_value": "158.94.208.114:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830914": [
        {
            "ioc_value": "158.94.210.59:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830915": [
        {
            "ioc_value": "45.141.119.188:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830916": [
        {
            "ioc_value": "178.16.53.18:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830917": [
        {
            "ioc_value": "95.133.228.206:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830918": [
        {
            "ioc_value": "146.19.56.31:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830919": [
        {
            "ioc_value": "144.172.102.43:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830920": [
        {
            "ioc_value": "171.22.108.181:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830921": [
        {
            "ioc_value": "108.165.185.188:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830922": [
        {
            "ioc_value": "43.230.162.47:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830923": [
        {
            "ioc_value": "173.232.146.29:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830924": [
        {
            "ioc_value": "194.33.61.174:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830925": [
        {
            "ioc_value": "193.111.117.50:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830926": [
        {
            "ioc_value": "194.33.61.203:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830927": [
        {
            "ioc_value": "185.102.115.242:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:48",
            "last_seen_utc": "2026-07-11 18:04:24",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830930": [
        {
            "ioc_value": "198.244.206.28:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830928": [
        {
            "ioc_value": "168.93.214.29:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830929": [
        {
            "ioc_value": "181.174.165.186:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:46",
            "last_seen_utc": "2026-08-01 17:40:44",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830931": [
        {
            "ioc_value": "209.99.186.230:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830932": [
        {
            "ioc_value": "216.203.20.148:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-12 13:19:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "IP,Stealc",
            "anonymous": 0,
            "reporter": "RacWatchin8872"
        }
    ],
    "1830934": [
        {
            "ioc_value": "rizvw.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:19:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830933": [
        {
            "ioc_value": "keofm.sanjeshravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:14:08",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830904": [
        {
            "ioc_value": "g29aiuih.zabanenglishanari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:01:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830903": [
        {
            "ioc_value": "28ri3ljq.zabanenglishanari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 13:01:03",
            "last_seen_utc": "2026-06-16 15:34:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830895": [
        {
            "ioc_value": "srv.turbo88ku.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 12:54:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830894": [
        {
            "ioc_value": "jsyao.tafsirquran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 12:52:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830893": [
        {
            "ioc_value": "eejgo.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 12:36:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830892": [
        {
            "ioc_value": "mpgfy.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 12:35:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830891": [
        {
            "ioc_value": "ydcgvobr.tarbiatbadani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 12:32:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830890": [
        {
            "ioc_value": "misterslivker.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 12:25:54",
            "last_seen_utc": "2026-06-30 21:58:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830889": [
        {
            "ioc_value": "fuwtp.tafsirnasiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 12:10:23",
            "last_seen_utc": "2026-06-19 11:33:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830880": [
        {
            "ioc_value": "uss6wss6.hesabdarieskandari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 12:01:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830879": [
        {
            "ioc_value": "qsbsd.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:58:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830878": [
        {
            "ioc_value": "ecypk.sadreislam.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:57:06",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830877": [
        {
            "ioc_value": "8.217.12.212:48080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 11:46:40",
            "last_seen_utc": "2026-07-14 10:49:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830876": [
        {
            "ioc_value": "addeg.quranmohagegin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:24:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830875": [
        {
            "ioc_value": "umnbp.usoleamoozesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:19:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830874": [
        {
            "ioc_value": "lyrge.usoleamoozesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:18:41",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830873": [
        {
            "ioc_value": "cswwy.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:16:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830872": [
        {
            "ioc_value": "ytuit.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:15:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830871": [
        {
            "ioc_value": "nbyap.danestanihavarzeshi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:06:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830870": [
        {
            "ioc_value": "sqgdb.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:04:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830869": [
        {
            "ioc_value": "vleqz.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:03:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830864": [
        {
            "ioc_value": "mdgg3n1z.vanatarsim.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 11:00:03",
            "last_seen_utc": "2026-06-16 13:24:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830828": [
        {
            "ioc_value": "http://94.183.232.247/Ciabins.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 10:56:03",
            "last_seen_utc": "2026-06-12 09:20:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1830831": [
        {
            "ioc_value": "179.43.182.70:666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-12 10:56:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "elfdigest"
        }
    ],
    "1830859": [
        {
            "ioc_value": "nostrendezvous.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-12 10:56:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c6dc62c4bad1c383518470c3156b4f38126b991450f050fb656d82db72d5c5a8/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1830863": [
        {
            "ioc_value": "esnjo.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 10:40:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830862": [
        {
            "ioc_value": "brrls.rahnemayenegaresh.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 10:38:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830861": [
        {
            "ioc_value": "http://nostrendezvous.com:5789",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-12 10:35:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c6dc62c4bad1c383518470c3156b4f38126b991450f050fb656d82db72d5c5a8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830860": [
        {
            "ioc_value": "aknoq.tractor11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 10:34:23",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830858": [
        {
            "ioc_value": "64.89.161.185:5566",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-12 10:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830854": [
        {
            "ioc_value": "tfpvi.testranandegi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 09:56:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830853": [
        {
            "ioc_value": "cnurx.testranandegi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 09:55:54",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830852": [
        {
            "ioc_value": "jebclxk.raftarsazmani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 09:48:14",
            "last_seen_utc": "2026-06-22 10:03:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830851": [
        {
            "ioc_value": "78.141.208.70:46337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 09:45:24",
            "last_seen_utc": "2026-08-18 18:46:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830850": [
        {
            "ioc_value": "69.172.210.50:5333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-12 09:45:23",
            "last_seen_utc": "2026-07-12 18:46:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830848": [
        {
            "ioc_value": "64.89.162.10:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:45:21",
            "last_seen_utc": "2026-07-17 08:47:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830849": [
        {
            "ioc_value": "64.89.162.178:5903",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:45:21",
            "last_seen_utc": "2026-08-15 08:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830847": [
        {
            "ioc_value": "61.158.61.134:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-12 09:45:18",
            "last_seen_utc": "2026-07-12 18:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830846": [
        {
            "ioc_value": "45.32.120.188:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 09:44:57",
            "last_seen_utc": "2026-07-14 18:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830845": [
        {
            "ioc_value": "45.137.99.3:8989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 09:44:55",
            "last_seen_utc": "2026-08-05 18:45:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830844": [
        {
            "ioc_value": "31.76.32.160:7716",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:44:47",
            "last_seen_utc": "2026-07-20 08:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830843": [
        {
            "ioc_value": "31.57.184.154:7008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-12 09:44:45",
            "last_seen_utc": "2026-08-30 08:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830842": [
        {
            "ioc_value": "2.26.21.17:4323",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 09:44:00",
            "last_seen_utc": "2026-07-24 18:44:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830841": [
        {
            "ioc_value": "193.163.203.183:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:55",
            "last_seen_utc": "2026-07-14 18:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830839": [
        {
            "ioc_value": "182.23.2.163:602",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:44",
            "last_seen_utc": "2026-07-12 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830840": [
        {
            "ioc_value": "182.23.2.163:8206",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:44",
            "last_seen_utc": "2026-07-12 08:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830837": [
        {
            "ioc_value": "182.23.2.163:49552",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:43",
            "last_seen_utc": "2026-07-12 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830838": [
        {
            "ioc_value": "182.23.2.163:5137",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:43",
            "last_seen_utc": "2026-07-12 18:44:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830836": [
        {
            "ioc_value": "182.23.2.163:12615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:42",
            "last_seen_utc": "2026-07-12 18:44:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830835": [
        {
            "ioc_value": "144.31.236.19:3305",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-12 09:43:18",
            "last_seen_utc": "2026-07-20 08:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830834": [
        {
            "ioc_value": "114.132.238.70:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 09:43:11",
            "last_seen_utc": "2026-09-01 02:43:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830833": [
        {
            "ioc_value": "110.42.34.220:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-12 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830832": [
        {
            "ioc_value": "104.234.240.68:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-12 09:43:06",
            "last_seen_utc": "2026-07-12 18:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830830": [
        {
            "ioc_value": "qtxcrltc.testpaye.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 09:18:09",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830829": [
        {
            "ioc_value": "arqn7djf.vajename.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 09:01:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830826": [
        {
            "ioc_value": "jyp2epby.vajename.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 08:59:41",
            "last_seen_utc": "2026-06-16 11:07:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830683": [
        {
            "ioc_value": "43.133.157.218:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-12 08:53:54",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,rce,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830684": [
        {
            "ioc_value": "ef9a91a7f3423d779353baebed34aa1f3b6104e7e4730c77fe8457b42a576ac5",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-12 08:53:54",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,rce,redis-module",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830685": [
        {
            "ioc_value": "e9c924c170332d42cae71bb9113ed9556cf91d5c50257b316eb433be9a211fb7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-12 08:53:53",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,rce,redis-module,reverse-shell",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830686": [
        {
            "ioc_value": "f32b209d33c4194f37dbbf2a677c4faf78cf6b24cf2474bf1c14aed17af40b2e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-12 08:53:53",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,rce,redis-module,reverse-shell",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830818": [
        {
            "ioc_value": "123.207.35.85:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.kinsing",
            "malware_alias": "h2miner",
            "malware_printable": "Kinsing",
            "first_seen_utc": "2026-06-12 08:53:52",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "chroot-escape,docker-api,kinsing",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830819": [
        {
            "ioc_value": "87.121.89.116:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:52",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,ssh-key-plant",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830821": [
        {
            "ioc_value": "95.59.142.69:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:52",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830820": [
        {
            "ioc_value": "47.79.37.117:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:51",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,redtail,ssh-key-plant",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830823": [
        {
            "ioc_value": "150.40.117.224:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:51",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830822": [
        {
            "ioc_value": "175.200.104.40:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:50",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830824": [
        {
            "ioc_value": "84.247.129.208:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:49",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830825": [
        {
            "ioc_value": "13.140.137.178:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-12 08:53:48",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1830526": [
        {
            "ioc_value": "https://riverbreezeintl.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 08:48:41",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/riverbreezeintl.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1830817": [
        {
            "ioc_value": "nffhlpcv.testdrivepaye3.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 08:40:30",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830687": [
        {
            "ioc_value": "wnfo1c8w.tanasobmafhumi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 08:30:08",
            "last_seen_utc": "2026-06-19 17:07:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830676": [
        {
            "ioc_value": "46.224.173.3:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830678": [
        {
            "ioc_value": "65.21.96.134:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830679": [
        {
            "ioc_value": "167.233.39.81:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830680": [
        {
            "ioc_value": "167.233.60.161:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830681": [
        {
            "ioc_value": "178.105.87.41:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830682": [
        {
            "ioc_value": "178.105.226.167:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830674": [
        {
            "ioc_value": "135.181.224.78:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830675": [
        {
            "ioc_value": "167.233.40.16:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:25:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830673": [
        {
            "ioc_value": "https://178.105.226.167/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:41",
            "last_seen_utc": "2026-08-25 02:28:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830666": [
        {
            "ioc_value": "https://167.233.40.16/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": "2026-08-11 11:40:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830667": [
        {
            "ioc_value": "https://46.224.173.3/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830668": [
        {
            "ioc_value": "https://65.21.96.132/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830669": [
        {
            "ioc_value": "https://65.21.96.134/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830670": [
        {
            "ioc_value": "https://167.233.39.81/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": "2026-08-13 12:22:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830671": [
        {
            "ioc_value": "https://167.233.60.161/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830672": [
        {
            "ioc_value": "https://178.105.87.41/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830665": [
        {
            "ioc_value": "https://135.181.224.78/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-12 08:24:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1830664": [
        {
            "ioc_value": "ozymtyh.tahgigbazargan.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 08:21:33",
            "last_seen_utc": "2026-06-19 13:05:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830657": [
        {
            "ioc_value": "rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhysida",
            "malware_alias": null,
            "malware_printable": "Rhysida",
            "first_seen_utc": "2026-06-12 08:12:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Rhysida%20Ransomware",
            "tags": "ransomware,rhysida",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1830659": [
        {
            "ioc_value": "rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhysida",
            "malware_alias": null,
            "malware_printable": "Rhysida",
            "first_seen_utc": "2026-06-12 08:12:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Rhysida%20Ransomware",
            "tags": "ransomware,rhysida",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1830658": [
        {
            "ioc_value": "rhysida6qqkj5ahjfshlepbhk7m2sgqc25y5iznmabcch2i7pbw4g6yd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhysida",
            "malware_alias": null,
            "malware_printable": "Rhysida",
            "first_seen_utc": "2026-06-12 08:12:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Rhysida%20Ransomware",
            "tags": "ransomware,rhysida",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1830660": [
        {
            "ioc_value": "rhysidaiqemmlrvn2jvncdwhkvuiv7s2iu342xnrpeynxoe6r2dtjfyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhysida",
            "malware_alias": null,
            "malware_printable": "Rhysida",
            "first_seen_utc": "2026-06-12 08:12:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Rhysida%20Ransomware",
            "tags": "ransomware,rhysida",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1830661": [
        {
            "ioc_value": "rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhysida",
            "malware_alias": null,
            "malware_printable": "Rhysida",
            "first_seen_utc": "2026-06-12 08:12:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Rhysida%20Ransomware",
            "tags": "ransomware,rhysida",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1830662": [
        {
            "ioc_value": "rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhysida",
            "malware_alias": null,
            "malware_printable": "Rhysida",
            "first_seen_utc": "2026-06-12 08:12:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Rhysida%20Ransomware",
            "tags": "ransomware,rhysida",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1830663": [
        {
            "ioc_value": "lqlrmchm.tasisathosseini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 08:01:30",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830538": [
        {
            "ioc_value": "vfxdzptjm.mabaninazaridelavar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 07:41:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830537": [
        {
            "ioc_value": "zeuephv.tafsirquran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 07:32:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830536": [
        {
            "ioc_value": "npejbmmk.tarikhravannovin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 07:27:18",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830534": [
        {
            "ioc_value": "154.198.49.31:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 07:20:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830535": [
        {
            "ioc_value": "45.116.14.13:8111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 07:20:05",
            "last_seen_utc": "2026-07-01 07:35:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830532": [
        {
            "ioc_value": "95.182.114.29:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 07:20:03",
            "last_seen_utc": "2026-07-15 08:48:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830533": [
        {
            "ioc_value": "60.205.126.246:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 07:20:03",
            "last_seen_utc": "2026-07-22 02:46:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830531": [
        {
            "ioc_value": "1.13.141.229:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 07:19:49",
            "last_seen_utc": "2026-07-20 14:46:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830529": [
        {
            "ioc_value": "rqvfqcgu.tarikhcheravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 06:48:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830528": [
        {
            "ioc_value": "tarikhcheravanshenasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 06:44:14",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "12June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1830527": [
        {
            "ioc_value": "8qh80m8o.shimiskoog.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 06:41:19",
            "last_seen_utc": "2026-06-16 07:09:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830423": [
        {
            "ioc_value": "185.212.19.144:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-12 06:11:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1830498": [
        {
            "ioc_value": "107.189.21.145:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-12 06:11:25",
            "last_seen_utc": null,
            "confidence_level": 91,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v14,nation-state-hunter,t1059_003,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1830505": [
        {
            "ioc_value": "http://5.83.134.26/z.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-12 06:11:24",
            "last_seen_utc": "2026-06-17 05:31:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1830524": [
        {
            "ioc_value": "syqxxqi.riyaziyattajrobi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 05:59:52",
            "last_seen_utc": "2026-06-19 10:43:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830523": [
        {
            "ioc_value": "omgolqds.sazebetonarme.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 05:01:39",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830522": [
        {
            "ioc_value": "118.107.25.243:7001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-12 05:00:15",
            "last_seen_utc": "2026-08-22 00:03:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830517": [
        {
            "ioc_value": "aegkmnbe.sanjeshvaandazegiri.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 04:59:10",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830516": [
        {
            "ioc_value": "0saw15fk.activereading.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 04:41:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830515": [
        {
            "ioc_value": "6azbm23o.sazehayefooladi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 04:39:14",
            "last_seen_utc": "2026-06-16 05:05:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830514": [
        {
            "ioc_value": "scrbsmf.activebook.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 04:26:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830513": [
        {
            "ioc_value": "lvzqrradp.mabanieslami2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 04:04:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830507": [
        {
            "ioc_value": "negnwxwk.sakhtemandade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 03:42:46",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830506": [
        {
            "ioc_value": "yyyfiub.1x1.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 02:55:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830504": [
        {
            "ioc_value": "2q6xaa8u.ravanshenasisaeedi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 02:40:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830503": [
        {
            "ioc_value": "l6y96jmj.ravanshenasisaeedi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 02:38:36",
            "last_seen_utc": "2026-06-16 03:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830502": [
        {
            "ioc_value": "lrvizgxp.lincoplus.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 02:24:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830501": [
        {
            "ioc_value": "kn46xsmt.readthisintro.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 02:11:00",
            "last_seen_utc": "2026-06-22 09:37:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830499": [
        {
            "ioc_value": "bjuo48bq.ravanroshd.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 01:42:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830497": [
        {
            "ioc_value": "kdphdmr.rahnemayenegaresh.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 01:18:55",
            "last_seen_utc": "2026-06-22 15:04:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830496": [
        {
            "ioc_value": "uqknomxs.karbordriyaziyat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 01:08:32",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830492": [
        {
            "ioc_value": "4o6giyl4.ravanshenasinovin.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-12 00:38:05",
            "last_seen_utc": "2026-06-16 01:04:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830489": [
        {
            "ioc_value": "qeyshvibv.azmoonzare.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 23:59:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830488": [
        {
            "ioc_value": "fdktfbbn.jam-jahani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 23:51:16",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830487": [
        {
            "ioc_value": "ravandarmani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 23:40:03",
            "last_seen_utc": "2026-06-11 23:40:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "11June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1830485": [
        {
            "ioc_value": "18b93f31c49e4302e3fd26764b6ad37a",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-11 23:21:09",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830482": [
        {
            "ioc_value": "624eb52464199c7dfea8f082c5b4e9f7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-11 23:21:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830483": [
        {
            "ioc_value": "9a04ce5c1ed6e353d8d8d936fefba4517ecc8f6777e5f866178dba084ae90d8a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-11 23:21:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830484": [
        {
            "ioc_value": "cf5058b0d233abf4abf55bd13597f9b07c5d2eed",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.agent_tesla",
            "malware_alias": "AgenTesla,AgentTesla,Negasteal",
            "malware_printable": "Agent Tesla",
            "first_seen_utc": "2026-06-11 23:21:08",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830479": [
        {
            "ioc_value": "d13cad682fd5abb767313f79c1732822",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.tinyloader",
            "malware_alias": null,
            "malware_printable": "TinyLoader",
            "first_seen_utc": "2026-06-11 23:21:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830480": [
        {
            "ioc_value": "c2a383a0dff5e69299443a119bb73f2b76f3f9c0f3951330ffea5db26fc3797f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-11 23:21:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830481": [
        {
            "ioc_value": "60b2674a3acda83abedd7173355a9473f2904f17",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.darktortilla",
            "malware_alias": null,
            "malware_printable": "DarkTortilla",
            "first_seen_utc": "2026-06-11 23:21:07",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830476": [
        {
            "ioc_value": "173e47952a519cedcbc37d7468c0afe5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-11 23:21:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830477": [
        {
            "ioc_value": "b3e6200b05e579b9577686e9f510338b197fe392483f3d2eb50398d3097573cb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.tinyloader",
            "malware_alias": null,
            "malware_printable": "TinyLoader",
            "first_seen_utc": "2026-06-11 23:21:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830478": [
        {
            "ioc_value": "2a6ff4571b915d61b60ecc2922d342f07bdfb71d",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.tinyloader",
            "malware_alias": null,
            "malware_printable": "TinyLoader",
            "first_seen_utc": "2026-06-11 23:21:06",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830473": [
        {
            "ioc_value": "700fab1c874a6e5948af14c7d122bd48",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-11 23:21:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830474": [
        {
            "ioc_value": "985a2c4839ac4ded904d1d9b354d2fbe9e24c36e963d171d7e21130a4c0f66d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-11 23:21:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830475": [
        {
            "ioc_value": "e562387236169b80911a4081e772ac1151942462",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.troystealer",
            "malware_alias": null,
            "malware_printable": "troystealer",
            "first_seen_utc": "2026-06-11 23:21:05",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830469": [
        {
            "ioc_value": "164493c98f5172618a090b336b9ddf41d90f5751",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-11 23:21:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830470": [
        {
            "ioc_value": "537013864063eb458e47b3fcbbffbc8f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-11 23:21:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830471": [
        {
            "ioc_value": "7458d3a59fa6682ac4d2e3070ccbd0c223607eed768bd7a99d14f6dc5bfb88b9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-11 23:21:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830472": [
        {
            "ioc_value": "07c5bd17e0d1930f324aaa02369fd7e85a6585d6",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-11 23:21:04",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830466": [
        {
            "ioc_value": "0ca01817ecdf07b17f89b5e8a070e541c5dd922b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-11 23:21:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830467": [
        {
            "ioc_value": "c843d4538bb0f0c1b31e057ec7d8d8c1",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-11 23:21:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830468": [
        {
            "ioc_value": "162a1c2e10796e24e94283907b9af34f7cbb9a38002e374afa715f7d101248fc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-11 23:21:03",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830463": [
        {
            "ioc_value": "fb5a09899b06e4ed91b14a9e67f5ece2a558a877",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-06-11 23:21:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830464": [
        {
            "ioc_value": "0ff94617c08fe032327753b286011da5",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-06-11 23:21:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830465": [
        {
            "ioc_value": "d049d136b7c8aaf342ffd924e09d23b2ca168552b3a6b3cf68913657b68fdf37",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-11 23:21:02",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830460": [
        {
            "ioc_value": "be34707cb56d7b41393d14c67b4ad8626c4519d7",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.strelastealer",
            "malware_alias": null,
            "malware_printable": "StrelaStealer",
            "first_seen_utc": "2026-06-11 23:21:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830461": [
        {
            "ioc_value": "39a19118f2d38bfdb9421f69a84e5dec",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.strelastealer",
            "malware_alias": null,
            "malware_printable": "StrelaStealer",
            "first_seen_utc": "2026-06-11 23:21:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830462": [
        {
            "ioc_value": "574c4503c071e8e8892d267e786acdf811970d4f927cf4536a870c8ba2fc7a13",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.masslogger",
            "malware_alias": null,
            "malware_printable": "MASS Logger",
            "first_seen_utc": "2026-06-11 23:21:01",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830457": [
        {
            "ioc_value": "e7026b2f6adadbf070e9926e1d4b79a65044cd5c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:21:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830458": [
        {
            "ioc_value": "92bc3b1ba378c14e601c4e617ec7c422",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:21:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830459": [
        {
            "ioc_value": "8a82da328a3db0fca63f31e7b464b5989cecfd619ebab0b238c07b63544bf823",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.strelastealer",
            "malware_alias": null,
            "malware_printable": "StrelaStealer",
            "first_seen_utc": "2026-06-11 23:21:00",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830454": [
        {
            "ioc_value": "13d8b44123e6f9f9a58a9359d0a772566f4eff3b",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830455": [
        {
            "ioc_value": "93996829b15b3cf1bb4bd79f2091d72f",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830456": [
        {
            "ioc_value": "3d008cb4d346a95396868f786ec6d4fe7e12a0451768f957664abba7469f2cf0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:59",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830451": [
        {
            "ioc_value": "8314be1136b9d1fc76350f1c7ef4cf8fe52a4acb",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830452": [
        {
            "ioc_value": "e06aacd6139288d5bea4a676ee0c2404",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830453": [
        {
            "ioc_value": "73b2c01ca7f082bf4d999426e07886144b7bccaecead90e1acf661695fda39b1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:58",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830447": [
        {
            "ioc_value": "c8889ebbf9516b00d148dfd3b2aee781deb30d27f654039903d31a8ff39d1f4e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.gootkit",
            "malware_alias": "Waldek,Xswkit,talalpek",
            "malware_printable": "GootKit",
            "first_seen_utc": "2026-06-11 23:20:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830448": [
        {
            "ioc_value": "b1e46ed3f539868edb60e25b523e77dea71868c2",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.gootkit",
            "malware_alias": "Waldek,Xswkit,talalpek",
            "malware_printable": "GootKit",
            "first_seen_utc": "2026-06-11 23:20:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830449": [
        {
            "ioc_value": "2e4973a854f88682666c77394ec3e61e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.gootkit",
            "malware_alias": "Waldek,Xswkit,talalpek",
            "malware_printable": "GootKit",
            "first_seen_utc": "2026-06-11 23:20:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830450": [
        {
            "ioc_value": "68a34fd6765d3a6d791e83c29e783fbe585579e08ea1ad569962e6644a3197a3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.firecrypt",
            "malware_alias": null,
            "malware_printable": "FireCrypt",
            "first_seen_utc": "2026-06-11 23:20:57",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830444": [
        {
            "ioc_value": "c0b18beb746f408a76371760e64ab37b350419da5292a6fe5b9b83bf7e225257",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-11 23:20:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830445": [
        {
            "ioc_value": "87bc65dccd4cb91d55afc1afd257c23acd14570c",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-11 23:20:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830446": [
        {
            "ioc_value": "a59b7602663fb130c5a85507fbbe29a2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-11 23:20:56",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830441": [
        {
            "ioc_value": "20a1484577dc0b66613cc70619a74dfcaa7da6c19d0a4949cbc83a8e80317fd9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-11 23:20:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830442": [
        {
            "ioc_value": "213cd9fcf2377c5b72e02e4490863dc535bbe871",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-11 23:20:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830443": [
        {
            "ioc_value": "b82f0b9989f316d6679e1ea067e31cdd",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-11 23:20:55",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830439": [
        {
            "ioc_value": "059182cc6f9d9a6ae2aced1075e5ab3f4e081d55",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-11 23:20:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830440": [
        {
            "ioc_value": "1f8b721815bfd4f57aa377369fa5f2ed",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-11 23:20:54",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830438": [
        {
            "ioc_value": "f0ff7f1e0e1544828984d40247d38e38cb4b5d528665098c058e41b24db1d56f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.coinminer",
            "malware_alias": null,
            "malware_printable": "Coinminer",
            "first_seen_utc": "2026-06-11 23:20:53",
            "last_seen_utc": null,
            "confidence_level": 95,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "Grim"
        }
    ],
    "1830434": [
        {
            "ioc_value": "pipx8iw2.ravanshenasiganji.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 22:39:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830433": [
        {
            "ioc_value": "2sci40h1.ravanshenasiganji.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 22:37:44",
            "last_seen_utc": "2026-06-15 23:04:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830432": [
        {
            "ioc_value": "qlwxqybo.prozhedownload.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 22:36:38",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830430": [
        {
            "ioc_value": "zjtjokj.quranmohagegin.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 22:15:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830426": [
        {
            "ioc_value": "jdxqaihsh.bankefiile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 21:47:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830425": [
        {
            "ioc_value": "bfksnnrp.prozhecart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 21:43:20",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830424": [
        {
            "ioc_value": "o0irv3h9.ravabetensani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 21:41:00",
            "last_seen_utc": "2026-06-21 17:20:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830416": [
        {
            "ioc_value": "49.233.136.227:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 21:00:15",
            "last_seen_utc": "2026-08-28 08:08:59",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830413": [
        {
            "ioc_value": "owedcphc.ravanshenakhti.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 20:37:12",
            "last_seen_utc": "2026-06-15 21:03:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830412": [
        {
            "ioc_value": "eeqagxew.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 20:16:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830411": [
        {
            "ioc_value": "t92hw5pi.nazariyeyadgiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 20:11:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830403": [
        {
            "ioc_value": "178.16.53.137:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 19:52:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830402": [
        {
            "ioc_value": "1364170351-9enmkvd46p.ap-guangzhou.tencentscf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 19:45:26",
            "last_seen_utc": "2026-07-19 14:46:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830401": [
        {
            "ioc_value": "64.89.162.59:4422",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:45:11",
            "last_seen_utc": "2026-08-08 08:46:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830400": [
        {
            "ioc_value": "46.246.80.2:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-11 19:44:53",
            "last_seen_utc": "2026-07-12 08:45:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830398": [
        {
            "ioc_value": "46.101.195.123:31400",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-11 19:44:52",
            "last_seen_utc": "2026-08-06 08:47:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830399": [
        {
            "ioc_value": "46.151.182.181:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 19:44:52",
            "last_seen_utc": "2026-08-07 18:45:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830395": [
        {
            "ioc_value": "45.225.135.43:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:44:49",
            "last_seen_utc": "2026-07-15 18:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830396": [
        {
            "ioc_value": "45.225.135.43:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:44:49",
            "last_seen_utc": "2026-07-15 18:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830397": [
        {
            "ioc_value": "45.225.135.43:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:44:49",
            "last_seen_utc": "2026-07-15 18:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830394": [
        {
            "ioc_value": "31.76.93.193:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 19:44:40",
            "last_seen_utc": "2026-07-19 08:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830392": [
        {
            "ioc_value": "23.235.185.45:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-11 19:44:35",
            "last_seen_utc": "2026-08-15 18:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830393": [
        {
            "ioc_value": "23.235.185.46:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-11 19:44:35",
            "last_seen_utc": "2026-08-15 08:45:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830391": [
        {
            "ioc_value": "213.165.40.206:8887",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.bianlian",
            "malware_alias": null,
            "malware_printable": "BianLian",
            "first_seen_utc": "2026-06-11 19:44:04",
            "last_seen_utc": "2026-07-11 18:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Bianlian,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830390": [
        {
            "ioc_value": "209.99.188.193:43221",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 19:44:02",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830389": [
        {
            "ioc_value": "2.27.62.228:60204",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 19:43:57",
            "last_seen_utc": "2026-07-28 18:44:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830388": [
        {
            "ioc_value": "194.116.236.239:4069",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 19:43:52",
            "last_seen_utc": "2026-07-15 08:44:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830387": [
        {
            "ioc_value": "192.3.139.18:15221",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 19:43:50",
            "last_seen_utc": "2026-09-01 02:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830384": [
        {
            "ioc_value": "188.137.242.166:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:43:47",
            "last_seen_utc": "2026-07-12 08:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830385": [
        {
            "ioc_value": "188.137.242.166:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:43:47",
            "last_seen_utc": "2026-07-12 08:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830386": [
        {
            "ioc_value": "188.137.242.166:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:43:47",
            "last_seen_utc": "2026-07-12 08:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830383": [
        {
            "ioc_value": "182.23.2.163:8307",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 19:43:41",
            "last_seen_utc": "2026-07-11 18:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830382": [
        {
            "ioc_value": "178.255.126.146:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 19:43:36",
            "last_seen_utc": "2026-07-12 08:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830381": [
        {
            "ioc_value": "155.103.71.115:14408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 19:43:22",
            "last_seen_utc": "2026-07-16 08:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830380": [
        {
            "ioc_value": "130.94.18.95:24321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 19:43:12",
            "last_seen_utc": "2026-07-18 18:43:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830378": [
        {
            "ioc_value": "109.199.109.62:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 19:43:09",
            "last_seen_utc": "2026-07-13 08:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830379": [
        {
            "ioc_value": "109.199.109.62:40056",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 19:43:09",
            "last_seen_utc": "2026-07-13 08:43:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830377": [
        {
            "ioc_value": "kaiojocv.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 19:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830376": [
        {
            "ioc_value": "933anmoo.azmoonhayeravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 18:41:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830375": [
        {
            "ioc_value": "ljj8nzo0.ravansalamat.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 18:38:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830374": [
        {
            "ioc_value": "f7a20n5o.ravansalamat.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 18:36:50",
            "last_seen_utc": "2026-06-15 19:02:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830368": [
        {
            "ioc_value": "193.106.217.106:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-11 18:09:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1830369": [
        {
            "ioc_value": "185.89.255.244:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-11 18:09:01",
            "last_seen_utc": null,
            "confidence_level": 91,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1071_001,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1830367": [
        {
            "ioc_value": "nkxkhfp.bet303.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 17:48:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830366": [
        {
            "ioc_value": "hlgwrpbh.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 17:44:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830365": [
        {
            "ioc_value": "ffynigbdr.barnamenevisi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 17:43:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830358": [
        {
            "ioc_value": "80.76.49.194:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-11 17:21:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/80.76.49.194",
            "tags": "asyncrat-fork,iex-cradle,purerat,tmpfiles",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830359": [
        {
            "ioc_value": "80.76.49.194:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-11 17:21:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/80.76.49.194",
            "tags": "asyncrat-fork,iex-cradle,purerat,tmpfiles",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830360": [
        {
            "ioc_value": "80.76.49.194:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-11 17:21:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/80.76.49.194",
            "tags": "asyncrat-fork,iex-cradle,purerat,tmpfiles",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830361": [
        {
            "ioc_value": "7e49b00bef718eb7e3645d8705e6521b011f66d10f06201e209a8a0511abc81a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-11 17:21:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab",
            "tags": "asyncrat-fork,dotnet,iex-cradle,purerat,tmpfiles",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830362": [
        {
            "ioc_value": "b50a05e38e9d04fd5c4dac4f29850649a77bb3ae443639206c908058e45593eb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-11 17:21:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab",
            "tags": "asyncrat-fork,dotnet,iex-cradle,purerat,tmpfiles",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830363": [
        {
            "ioc_value": "a05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-11 17:21:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a05254840b45fcbfd12d09fd416ca860e2cfcab793f4780fa8f138b8f7a86aab",
            "tags": "asyncrat-fork,dotnet,iex-cradle,purerat,tmpfiles",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830364": [
        {
            "ioc_value": "216.250.251.226:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-11 17:20:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/972a58bf48c75cf5f93cd6208ad6015fc35c53e9efa441b0dbeb27d7f187aae9/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830317": [
        {
            "ioc_value": "www.sharingfile.cloud",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.acronis.com/en/tru/posts/behind-khmer-shadow-targeted-espionage-against-cambodian-government-entities/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830318": [
        {
            "ioc_value": "linkednewsapi.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.acronis.com/en/tru/posts/behind-khmer-shadow-targeted-espionage-against-cambodian-government-entities/",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830319": [
        {
            "ioc_value": "193.169.240.38:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:26",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830320": [
        {
            "ioc_value": "104.193.255.99:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830323": [
        {
            "ioc_value": "104.234.18.91:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1926476/0/html",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1830326": [
        {
            "ioc_value": "104.234.18.91:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.joesandbox.com/analysis/1926476/0/html",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1830328": [
        {
            "ioc_value": "http://104.234.18.91:3001/api/internal/log",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.vmray.com/analyses/_mb/9e514a2edc36/report/network.html",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1830339": [
        {
            "ioc_value": "ce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468d",
            "tags": "chacha20,clickfix,finger-cradle,lolbas,python-loader,websocket-rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830327": [
        {
            "ioc_value": "http://104.234.18.91:3001/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.vmray.com/analyses/_mb/9e514a2edc36/report/network.html",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1830329": [
        {
            "ioc_value": "http://104.234.18.91:3001/api/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.vmray.com/analyses/_mb/9e514a2edc36/report/network.html",
            "tags": "c2",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1830340": [
        {
            "ioc_value": "8de1ce72b4efd1d4ca0841d79a1fcea463fd8fa84579fe743f58eb6205ccce76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/ce9690621c9311446bcf61ec40498a98f8c1b775185064f6dc321d72fafb468d",
            "tags": "chacha20,clickfix,finger-cradle,lolbas,python-loader,websocket-rat",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830341": [
        {
            "ioc_value": "starayadaet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/starayadaet.com",
            "tags": "clickfix,finger-cradle,websocket-rat,wss",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830342": [
        {
            "ioc_value": "marblecologrgr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 16:42:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/marblecologrgr.com",
            "tags": "clickfix,finger,finger-cradle,lolbas,tcp79",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1830356": [
        {
            "ioc_value": "98jhjysx.ehtemalatvaamar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 16:40:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830355": [
        {
            "ioc_value": "znrax5pn.qurandownload.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 16:37:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830354": [
        {
            "ioc_value": "rlpxurgo.qurandownload.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 16:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830353": [
        {
            "ioc_value": "nibfzvsq.hugugbime.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 16:36:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830351": [
        {
            "ioc_value": "https://ox3.gasturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-11 16:24:51",
            "last_seen_utc": "2026-06-11 20:24:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830352": [
        {
            "ioc_value": "ox3.gasturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-11 16:24:51",
            "last_seen_utc": "2026-06-11 20:24:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830338": [
        {
            "ioc_value": "mlcos.cdnupdate.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 15:45:51",
            "last_seen_utc": "2026-07-14 10:48:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830337": [
        {
            "ioc_value": "jksidxrvz.bookdrive.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 15:41:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830336": [
        {
            "ioc_value": "cmkfhtt.bet303.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 15:34:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830335": [
        {
            "ioc_value": "hqvgwxfu.hugugedari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 15:18:56",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830334": [
        {
            "ioc_value": "ogonna.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-11 15:00:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c2a383a0dff5e69299443a119bb73f2b76f3f9c0f3951330ffea5db26fc3797f/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830325": [
        {
            "ioc_value": "94.154.32.163:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-11 14:45:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/be4308b1266c148eb7c778aa68d58dffb1350aa556d7bd58d8ff3a0d2ad449fa/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830324": [
        {
            "ioc_value": "45.88.91.5:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-11 14:45:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/be4308b1266c148eb7c778aa68d58dffb1350aa556d7bd58d8ff3a0d2ad449fa/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830322": [
        {
            "ioc_value": "https://spasopro.at/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-11 14:20:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbb697f6ff25ac3ea01c7536945ec053406f2fdd30e802350a2c28fcb19672dd/",
            "tags": "smokeloader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830321": [
        {
            "ioc_value": "http://spasopro.at/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-11 14:20:47",
            "last_seen_utc": "2026-07-27 20:49:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fbb697f6ff25ac3ea01c7536945ec053406f2fdd30e802350a2c28fcb19672dd/",
            "tags": "smokeloader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830311": [
        {
            "ioc_value": "mymrtijp.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 14:01:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830307": [
        {
            "ioc_value": "172.94.18.103:79",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 14:00:17",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830191": [
        {
            "ioc_value": "https://thisismine.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 13:17:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/thisismine.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1830192": [
        {
            "ioc_value": "https://testerha.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 13:17:57",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/testerha.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1830302": [
        {
            "ioc_value": "64.89.162.149:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.moobot",
            "malware_alias": null,
            "malware_printable": "MooBot",
            "first_seen_utc": "2026-06-11 12:51:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.89.162.149#80",
            "tags": "c2,moobot,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830301": [
        {
            "ioc_value": "138.124.29.208:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:50:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.124.29.208#80",
            "tags": "c2,shodan,unam",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830300": [
        {
            "ioc_value": "185.167.96.179:1604",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.darkcomet",
            "malware_alias": "Breut,Fynloski,klovbot",
            "malware_printable": "DarkComet",
            "first_seen_utc": "2026-06-11 12:50:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.167.96.179#1604",
            "tags": "c2,darkcomet,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830298": [
        {
            "ioc_value": "104.168.62.5:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-11 12:49:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.168.62.5#54984",
            "tags": "c2,nanocore,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830296": [
        {
            "ioc_value": "185.241.208.118:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 12:48:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.241.208.118#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830297": [
        {
            "ioc_value": "185.241.208.118:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 12:48:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.241.208.118#4444",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830294": [
        {
            "ioc_value": "151.59.114.129:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-11 12:47:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.59.114.129#8080",
            "tags": "c2,sectoprat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830295": [
        {
            "ioc_value": "146.103.126.127:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-11 12:47:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.103.126.127#9000",
            "tags": "c2,sectoprat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830293": [
        {
            "ioc_value": "122.114.252.115:12340",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.shadowpad",
            "malware_alias": "POISONPLUG.SHADOW,XShellGhost",
            "malware_printable": "ShadowPad",
            "first_seen_utc": "2026-06-11 12:46:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/122.114.252.115#12340",
            "tags": "c2,shadowpad,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830289": [
        {
            "ioc_value": "113.44.64.117:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:30",
            "last_seen_utc": "2026-07-21 18:43:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/113.44.64.117#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830290": [
        {
            "ioc_value": "175.178.123.42:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/175.178.123.42#8089",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830291": [
        {
            "ioc_value": "159.89.48.54:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:30",
            "last_seen_utc": "2026-08-12 08:44:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.89.48.54#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830292": [
        {
            "ioc_value": "107.148.1.64:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.148.1.64#9443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830288": [
        {
            "ioc_value": "35.239.220.64:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.239.220.64#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830283": [
        {
            "ioc_value": "79.110.49.85:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/79.110.49.85#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830284": [
        {
            "ioc_value": "65.108.32.130:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/65.108.32.130#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830285": [
        {
            "ioc_value": "34.89.98.172:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.89.98.172#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830286": [
        {
            "ioc_value": "20.54.88.98:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.54.88.98#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830287": [
        {
            "ioc_value": "34.143.184.190:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:46:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.143.184.190#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830277": [
        {
            "ioc_value": "159.65.154.209:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.65.154.209#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830278": [
        {
            "ioc_value": "83.142.209.60:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/83.142.209.60#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830279": [
        {
            "ioc_value": "172.238.122.85:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.238.122.85#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830280": [
        {
            "ioc_value": "62.210.214.18:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.210.214.18#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830281": [
        {
            "ioc_value": "144.172.104.22:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/144.172.104.22#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830282": [
        {
            "ioc_value": "87.106.75.120:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/87.106.75.120#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830276": [
        {
            "ioc_value": "153.75.227.142:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-11 12:45:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/153.75.227.142#1337",
            "tags": "c2,shodan,starkillerc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830274": [
        {
            "ioc_value": "3.18.5.177:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.18.5.177#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830275": [
        {
            "ioc_value": "209.91.248.6:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.91.248.6#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830270": [
        {
            "ioc_value": "35.168.186.153:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.168.186.153#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830271": [
        {
            "ioc_value": "13.58.240.163:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/13.58.240.163#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830272": [
        {
            "ioc_value": "130.160.1.225:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/130.160.1.225#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830273": [
        {
            "ioc_value": "35.130.170.60:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.130.170.60#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830268": [
        {
            "ioc_value": "165.29.86.2:8989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/165.29.86.2#8989",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830269": [
        {
            "ioc_value": "94.49.35.175:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/94.49.35.175#9090",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830266": [
        {
            "ioc_value": "namrqlix.hugugnasiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 12:44:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830263": [
        {
            "ioc_value": "38.76.169.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.76.169.231#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830264": [
        {
            "ioc_value": "43.112.115.8:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.112.115.8#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830262": [
        {
            "ioc_value": "149.28.13.194:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:44:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/149.28.13.194#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830256": [
        {
            "ioc_value": "194.146.38.191:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.146.38.191#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830257": [
        {
            "ioc_value": "195.246.230.115:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.246.230.115#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830258": [
        {
            "ioc_value": "207.174.30.91:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.174.30.91#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830259": [
        {
            "ioc_value": "169.40.135.88:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.40.135.88#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830260": [
        {
            "ioc_value": "173.230.0.145:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.230.0.145#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830251": [
        {
            "ioc_value": "185.241.208.118:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.241.208.118#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830252": [
        {
            "ioc_value": "95.182.84.43:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/95.182.84.43#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830253": [
        {
            "ioc_value": "109.107.140.248:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/109.107.140.248#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830254": [
        {
            "ioc_value": "101.200.39.128:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.200.39.128#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830255": [
        {
            "ioc_value": "80.241.208.176:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/80.241.208.176#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830244": [
        {
            "ioc_value": "80.241.219.92:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/80.241.219.92#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830245": [
        {
            "ioc_value": "74.48.108.73:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.48.108.73#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830246": [
        {
            "ioc_value": "91.236.230.152:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.236.230.152#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830247": [
        {
            "ioc_value": "172.105.114.236:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.105.114.236#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830248": [
        {
            "ioc_value": "159.65.22.41:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.65.22.41#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830249": [
        {
            "ioc_value": "194.87.24.131:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.87.24.131#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830250": [
        {
            "ioc_value": "193.242.184.158:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.242.184.158#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830238": [
        {
            "ioc_value": "95.111.239.243:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/95.111.239.243#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830239": [
        {
            "ioc_value": "185.163.2.10:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.163.2.10#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830240": [
        {
            "ioc_value": "103.160.59.17:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.160.59.17#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830241": [
        {
            "ioc_value": "213.21.254.240:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/213.21.254.240#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830242": [
        {
            "ioc_value": "185.225.226.85:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.225.226.85#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830243": [
        {
            "ioc_value": "107.189.11.149:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.189.11.149#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830235": [
        {
            "ioc_value": "62.84.172.151:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.84.172.151#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830236": [
        {
            "ioc_value": "66.116.238.103:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.116.238.103#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830237": [
        {
            "ioc_value": "5.230.201.54:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 12:44:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.230.201.54#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830233": [
        {
            "ioc_value": "54.86.242.233:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:39",
            "last_seen_utc": "2026-06-11 12:43:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/54.86.242.233#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830234": [
        {
            "ioc_value": "202.10.42.113:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:39",
            "last_seen_utc": "2026-06-11 12:43:42",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/202.10.42.113#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830229": [
        {
            "ioc_value": "20.197.43.238:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:38",
            "last_seen_utc": "2026-06-11 12:43:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.197.43.238#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830230": [
        {
            "ioc_value": "152.89.16.45:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.89.16.45#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830231": [
        {
            "ioc_value": "46.182.217.204:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:38",
            "last_seen_utc": "2026-06-11 12:43:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/46.182.217.204#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830232": [
        {
            "ioc_value": "34.128.109.190:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:38",
            "last_seen_utc": "2026-06-11 12:43:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.128.109.190#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830223": [
        {
            "ioc_value": "101.96.111.198:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.96.111.198#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830224": [
        {
            "ioc_value": "51.159.82.179:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.159.82.179#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830225": [
        {
            "ioc_value": "190.20.96.35:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:37",
            "last_seen_utc": "2026-06-11 12:43:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/190.20.96.35#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830226": [
        {
            "ioc_value": "195.246.230.115:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.246.230.115#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830227": [
        {
            "ioc_value": "203.189.71.122:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/203.189.71.122#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830228": [
        {
            "ioc_value": "200.33.163.61:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:37",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/200.33.163.61#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830220": [
        {
            "ioc_value": "103.85.226.42:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:36",
            "last_seen_utc": "2026-06-11 12:43:40",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.85.226.42#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830221": [
        {
            "ioc_value": "173.249.33.186:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:36",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.249.33.186#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830222": [
        {
            "ioc_value": "34.172.171.254:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:36",
            "last_seen_utc": "2026-06-11 12:43:40",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.172.171.254#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830217": [
        {
            "ioc_value": "159.89.167.49:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.89.167.49#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830218": [
        {
            "ioc_value": "20.197.43.238:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.197.43.238#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830219": [
        {
            "ioc_value": "57.162.106.141:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 12:43:35",
            "last_seen_utc": "2026-06-11 12:43:40",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/57.162.106.141#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830216": [
        {
            "ioc_value": "134.65.51.39:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.65.51.39#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830211": [
        {
            "ioc_value": "218.244.142.4:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:07",
            "last_seen_utc": "2026-06-11 12:43:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/218.244.142.4#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830212": [
        {
            "ioc_value": "114.132.199.129:1443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.132.199.129#1443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830213": [
        {
            "ioc_value": "135.125.196.5:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:07",
            "last_seen_utc": "2026-06-11 12:43:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/135.125.196.5#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830214": [
        {
            "ioc_value": "190.90.147.38:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/190.90.147.38#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830215": [
        {
            "ioc_value": "120.26.208.96:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:07",
            "last_seen_utc": "2026-07-22 14:05:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.26.208.96#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830208": [
        {
            "ioc_value": "154.201.68.191:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:06",
            "last_seen_utc": "2026-06-11 18:00:23",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/154.201.68.191#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830209": [
        {
            "ioc_value": "114.134.187.38:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:06",
            "last_seen_utc": "2026-06-12 01:00:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.134.187.38#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830210": [
        {
            "ioc_value": "20.15.58.107:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:43:06",
            "last_seen_utc": "2026-06-11 12:43:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.15.58.107#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830207": [
        {
            "ioc_value": "114.132.89.132:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:42:28",
            "last_seen_utc": "2026-06-12 01:00:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.132.89.132#8443",
            "tags": "c2,cobaltstrike,cs-watermark-600000,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830206": [
        {
            "ioc_value": "117.72.159.215:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:42:24",
            "last_seen_utc": "2026-09-01 02:46:48",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/117.72.159.215#8080",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830205": [
        {
            "ioc_value": "156.234.211.162:8821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 12:42:23",
            "last_seen_utc": "2026-06-11 12:43:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.234.211.162#8821",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1830204": [
        {
            "ioc_value": "02y48l3v.asibshenasiyahya.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 12:41:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830203": [
        {
            "ioc_value": "ghdre2hy.geotechnictahuni.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 12:36:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830194": [
        {
            "ioc_value": "btbwehpkp.drivingbook.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 11:55:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830193": [
        {
            "ioc_value": "ieemaju.akhlageslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 11:32:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830189": [
        {
            "ioc_value": "zyuhgbux.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 11:27:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830186": [
        {
            "ioc_value": "shell.botnet.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-11 10:52:32",
            "last_seen_utc": "2026-06-11 10:16:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ddos",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830187": [
        {
            "ioc_value": "real.botnet.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-11 10:52:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ddos",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830188": [
        {
            "ioc_value": "2chci0sm.andisheeslami2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 10:20:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830185": [
        {
            "ioc_value": "gimomouf.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 10:13:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830054": [
        {
            "ioc_value": "p5k42qtw.anodaz.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 09:56:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830053": [
        {
            "ioc_value": "206.81.21.156:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-11 09:44:07",
            "last_seen_utc": "2026-09-01 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830051": [
        {
            "ioc_value": "182.23.2.163:4048",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 09:43:44",
            "last_seen_utc": "2026-07-11 08:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830052": [
        {
            "ioc_value": "182.23.2.163:4814",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 09:43:44",
            "last_seen_utc": "2026-07-11 08:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830050": [
        {
            "ioc_value": "182.23.2.163:1230",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 09:43:42",
            "last_seen_utc": "2026-07-11 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830049": [
        {
            "ioc_value": "gwofphogw.differentialmamuli.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 09:38:32",
            "last_seen_utc": "2026-06-15 18:19:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830048": [
        {
            "ioc_value": "qnjutqs.bet303.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 09:22:10",
            "last_seen_utc": "2026-06-23 07:32:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830047": [
        {
            "ioc_value": "thisismine.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 09:16:22",
            "last_seen_utc": "2026-06-30 21:58:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1830043": [
        {
            "ioc_value": "kwoptitn.restaurantguideaarhus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:52:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830042": [
        {
            "ioc_value": "yvlenqci.rial.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:49:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830041": [
        {
            "ioc_value": "s8a20vxh.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:35:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830026": [
        {
            "ioc_value": "4piqgfum.garatequran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:35:03",
            "last_seen_utc": "2026-06-11 10:04:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830027": [
        {
            "ioc_value": "aetherframework.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:35:01",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830028": [
        {
            "ioc_value": "ldmmsp6b.angizeshfarahani.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:35:01",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830029": [
        {
            "ioc_value": "xnvdto36.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:35:00",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830030": [
        {
            "ioc_value": "cxwqtlc8.asibshenasiyahya.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:35:00",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830031": [
        {
            "ioc_value": "rn0mptxh.anodaz.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:59",
            "last_seen_utc": "2026-06-11 10:04:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830032": [
        {
            "ioc_value": "181xlt4g.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:58",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830033": [
        {
            "ioc_value": "jqfg2zyi.ehtemalatvaamar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:58",
            "last_seen_utc": "2026-06-11 10:04:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830034": [
        {
            "ioc_value": "8t4ow8gc.azmoonhayeravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:57",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830035": [
        {
            "ioc_value": "988920lt-ublib.988920a1.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:57",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830036": [
        {
            "ioc_value": "gng97m36.angizeshfarahani.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:56",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830037": [
        {
            "ioc_value": "omeade.2k3phuchau.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:56",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830038": [
        {
            "ioc_value": "allfood.2k3phuchau.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:55",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830039": [
        {
            "ioc_value": "njjinvestments.2k3phuchau.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:55",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830040": [
        {
            "ioc_value": "cqshazxp.neural-atlas.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:34:54",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1830023": [
        {
            "ioc_value": "209.99.184.216:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 08:21:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/198830b9014d87a31306ba020ffa37eeb35adf2ed6f90e341f12ebe90fb23f48",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830024": [
        {
            "ioc_value": "209.99.184.216:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 08:21:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/198830b9014d87a31306ba020ffa37eeb35adf2ed6f90e341f12ebe90fb23f48",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830025": [
        {
            "ioc_value": "209.99.184.216:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 08:21:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/198830b9014d87a31306ba020ffa37eeb35adf2ed6f90e341f12ebe90fb23f48",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830022": [
        {
            "ioc_value": "juakvinjpo34.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-11 08:20:59",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830021": [
        {
            "ioc_value": "hzvvlqps.mechanicsayalat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 08:15:09",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830017": [
        {
            "ioc_value": "1v6le0j1.andisheeslami2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 07:52:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830016": [
        {
            "ioc_value": "http://154.198.50.76:8080/upload",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 07:49:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830015": [
        {
            "ioc_value": "45.67.222.21:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-11 07:45:08",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1830014": [
        {
            "ioc_value": "175.98.132.116:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-11 07:45:07",
            "last_seen_utc": null,
            "confidence_level": 91,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1830013": [
        {
            "ioc_value": "slojemw.leaguejazire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 07:19:48",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830009": [
        {
            "ioc_value": "kuonnjkj.masirpayambari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 06:54:05",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1830008": [
        {
            "ioc_value": "209.99.191.186:8765",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 06:53:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0dff181b29d64aa245f8da5cebc1788e7f13e2600e03574c236508659b15c16c/",
            "tags": "RustDesk",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830007": [
        {
            "ioc_value": "45.87.53.6:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:43:05",
            "last_seen_utc": "2026-09-01 02:47:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830006": [
        {
            "ioc_value": "120.55.3.157:10000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:43:04",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830005": [
        {
            "ioc_value": "117.72.220.212:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830004": [
        {
            "ioc_value": "43.136.180.88:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:48",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830002": [
        {
            "ioc_value": "43.136.180.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:47",
            "last_seen_utc": "2026-09-01 02:47:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830003": [
        {
            "ioc_value": "47.121.181.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:47",
            "last_seen_utc": "2026-09-01 02:47:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830001": [
        {
            "ioc_value": "124.220.41.22:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:46",
            "last_seen_utc": "2026-08-28 08:08:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-100000",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1830000": [
        {
            "ioc_value": "211.159.225.77:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:45",
            "last_seen_utc": "2026-06-12 07:19:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829999": [
        {
            "ioc_value": "160.202.230.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:44",
            "last_seen_utc": "2026-07-22 02:46:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829998": [
        {
            "ioc_value": "49.233.105.49:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-305419896",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829997": [
        {
            "ioc_value": "139.5.108.17:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 06:42:41",
            "last_seen_utc": "2026-07-16 08:47:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829996": [
        {
            "ioc_value": "qlvwxer.karafarini.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 06:02:39",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829990": [
        {
            "ioc_value": "ifvtbgbf.maharatmodiran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 05:52:03",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829989": [
        {
            "ioc_value": "dmwncnnnp.defamogadas.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 05:48:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829951": [
        {
            "ioc_value": "193.233.130.136:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:26:07",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829953": [
        {
            "ioc_value": "156.234.211.138:8821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:26:07",
            "last_seen_utc": "2026-07-14 10:48:37",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "138195,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1829954": [
        {
            "ioc_value": "156.234.211.165:8821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:26:06",
            "last_seen_utc": "2026-07-14 10:48:37",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "138195,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1829955": [
        {
            "ioc_value": "219.92.2.65:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:26:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "4788,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1829957": [
        {
            "ioc_value": "192.144.213.21:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:26:05",
            "last_seen_utc": "2026-09-01 02:46:58",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45090,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1829956": [
        {
            "ioc_value": "18.175.227.88:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:26:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "16509,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1829958": [
        {
            "ioc_value": "41.234.41.113:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-11 05:26:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "8452,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1829961": [
        {
            "ioc_value": "193.106.8.24:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-11 05:26:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829962": [
        {
            "ioc_value": "185.89.214.29:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-11 05:26:00",
            "last_seen_utc": null,
            "confidence_level": 99,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829968": [
        {
            "ioc_value": "b56a2ccafe31b6c664c021ec418a660661e5d6d87e1c339beba3b7a4b684d067",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-11 05:25:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "amos,osx",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829969": [
        {
            "ioc_value": "01e33f12a8ee57c89624aeeeb97e57896927483d1442eea22ec6bfddc12f8879",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-11 05:25:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "amos,osx",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829970": [
        {
            "ioc_value": "9a2869a42f54beb07d4d56a16cd56f507a1ae5a9df2e4d816776472cbf4438c6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-11 05:25:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "amos,osx",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829974": [
        {
            "ioc_value": "http://151.243.18.28/4940cc4b5ddb4a2bb8f8.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-11 05:25:55",
            "last_seen_utc": "2026-06-17 10:18:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,dark,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1829973": [
        {
            "ioc_value": "7c69d70092676725b6e9269e08f842b22a21eff319240a31b2dfc44147d05d05",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/7c69d70092676725b6e9269e08f842b22a21eff319240a31b2dfc44147d05d05",
            "tags": "a-dl,clickfix,garble,golang,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829940": [
        {
            "ioc_value": "http://5.83.134.26/ssh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:52",
            "last_seen_utc": "2026-06-11 01:50:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1829937": [
        {
            "ioc_value": "https://bw-development.app/Antibot2",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,github-releases,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829938": [
        {
            "ioc_value": "185.190.212.155:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-11 05:25:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829936": [
        {
            "ioc_value": "https://github.com/hothehottest/Recaptcha-2/releases/download/Recaptcha-2/boost.zip",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,github-releases,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829933": [
        {
            "ioc_value": "13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,remote-eval,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829932": [
        {
            "ioc_value": "8eac8373cb9b6a8004942871ebc691d900a8116c9dede5e3a222392227033245",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,remote-eval,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829934": [
        {
            "ioc_value": "07353da1a94a7dc214947fc35f134452b4dba8a6ae81464328d9cf0d1cedc6ba",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,remote-eval,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829935": [
        {
            "ioc_value": "bbc8da2cceb3a174e2b0df87bc43c54d3cf3edadb585658bb65517c8f88249b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,remote-eval,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829931": [
        {
            "ioc_value": "ghukonhgf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,remote-eval,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829928": [
        {
            "ioc_value": "45.67.84.76:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-11 05:25:43",
            "last_seen_utc": null,
            "confidence_level": 86,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829930": [
        {
            "ioc_value": "https://ghukonhgf.com/api/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-11 05:25:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/13059a7cf8cc3820f5d36262c5f5d375465297a6fff8fcefc5fd8d520030ff96",
            "tags": "ClickFix,Electron,remote-eval,trojanized-app",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1829987": [
        {
            "ioc_value": "https://sup.gasturbo88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-11 05:24:45",
            "last_seen_utc": "2026-06-11 11:24:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829988": [
        {
            "ioc_value": "sup.gasturbo88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-11 05:24:45",
            "last_seen_utc": "2026-06-11 11:24:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829986": [
        {
            "ioc_value": "rjwfiwgjr.defamogadas.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 05:17:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829985": [
        {
            "ioc_value": "1cihg2b5.anodaz.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 04:57:20",
            "last_seen_utc": "2026-06-11 10:04:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829984": [
        {
            "ioc_value": "mocauhxe.mabanishimi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 04:57:04",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829983": [
        {
            "ioc_value": "iznukhb.hesabdari2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 04:40:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829982": [
        {
            "ioc_value": "zo4t1q36.moarefeslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 04:34:14",
            "last_seen_utc": "2026-06-11 10:04:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829981": [
        {
            "ioc_value": "43.160.193.90:6666",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-11 04:05:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829980": [
        {
            "ioc_value": "m2bu2yf9.ansuyemarg.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 03:52:29",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829979": [
        {
            "ioc_value": "18.162.74.188:112",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-11 03:45:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829978": [
        {
            "ioc_value": "kpeahfhd.rial.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 03:40:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829977": [
        {
            "ioc_value": "verccbf.hesabdarinoravesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 03:23:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829972": [
        {
            "ioc_value": "lwywtkki.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 02:23:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829971": [
        {
            "ioc_value": "ewnwfae.hesabdaripishrafte.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 02:07:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829960": [
        {
            "ioc_value": "mvwrgylee.danestanihavarzeshi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 01:16:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829959": [
        {
            "ioc_value": "64.89.160.198:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-11 01:05:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/919d18568ebd2cdcde7aeb972d0ba2f8fc0596d5fc7b00d35071f131a8e5011d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829952": [
        {
            "ioc_value": "aolbzrji.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 00:59:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829950": [
        {
            "ioc_value": "sdlclrs.akhlageslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 00:51:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829949": [
        {
            "ioc_value": "8h9b5pgo.garatequran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-11 00:34:20",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829948": [
        {
            "ioc_value": "v4qu8nnt.azmoondadrasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 23:51:31",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829947": [
        {
            "ioc_value": "twvrjjcu.hugugtejarat4.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 23:46:51",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829946": [
        {
            "ioc_value": "85.137.240.208:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 23:45:53",
            "last_seen_utc": "2026-07-23 08:47:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829944": [
        {
            "ioc_value": "https://bat.glamisdunesrentals.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 23:24:53",
            "last_seen_utc": "2026-06-11 11:24:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829945": [
        {
            "ioc_value": "bat.glamisdunesrentals.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 23:24:53",
            "last_seen_utc": "2026-06-11 11:24:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829942": [
        {
            "ioc_value": "https://bat.gagahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 23:24:41",
            "last_seen_utc": "2026-06-11 04:24:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829943": [
        {
            "ioc_value": "bat.gagahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 23:24:41",
            "last_seen_utc": "2026-06-11 04:24:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829941": [
        {
            "ioc_value": "sdkymow.amoozeshtagipour.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 23:15:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829929": [
        {
            "ioc_value": "agiqsfnr.hugugnasiri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 22:25:33",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829925": [
        {
            "ioc_value": "ttsnmsv.honareslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 21:58:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829924": [
        {
            "ioc_value": "kuwwcojw.hugugmadani6.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 21:14:26",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829923": [
        {
            "ioc_value": "snvgupcvn.bookkade.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 21:09:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829918": [
        {
            "ioc_value": "wswgllp.honarcinema.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 20:41:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829917": [
        {
            "ioc_value": "b57agvqn.azmoonhayeravani.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 20:33:39",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829916": [
        {
            "ioc_value": "cwwviitu.hugugmadani3.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 20:32:37",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829915": [
        {
            "ioc_value": "w2hnzhub.fununetadris.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 20:31:07",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829910": [
        {
            "ioc_value": "1364170351-5ezc7c8ssf.ap-guangzhou.tencentscf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 19:45:25",
            "last_seen_utc": "2026-07-11 08:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829909": [
        {
            "ioc_value": "87.182.39.55:51125",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 19:45:19",
            "last_seen_utc": "2026-07-19 18:45:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829908": [
        {
            "ioc_value": "82.221.139.243:52281",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-10 19:45:15",
            "last_seen_utc": "2026-07-19 18:45:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829907": [
        {
            "ioc_value": "64.89.162.178:5902",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 19:45:10",
            "last_seen_utc": "2026-08-15 08:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829905": [
        {
            "ioc_value": "45.157.116.119:29476",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 19:44:49",
            "last_seen_utc": "2026-07-12 08:45:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829906": [
        {
            "ioc_value": "45.38.41.27:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 19:44:49",
            "last_seen_utc": "2026-07-11 08:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829904": [
        {
            "ioc_value": "45.140.14.29:1488",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 19:44:47",
            "last_seen_utc": "2026-07-15 18:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829903": [
        {
            "ioc_value": "23.235.185.43:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 19:44:35",
            "last_seen_utc": "2026-08-15 18:45:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829902": [
        {
            "ioc_value": "216.158.235.73:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-10 19:44:33",
            "last_seen_utc": "2026-08-12 08:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829900": [
        {
            "ioc_value": "198.23.185.231:20200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 19:43:55",
            "last_seen_utc": "2026-07-15 08:44:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829901": [
        {
            "ioc_value": "198.23.185.231:20800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 19:43:55",
            "last_seen_utc": "2026-07-10 18:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829899": [
        {
            "ioc_value": "193.135.137.240:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 19:43:51",
            "last_seen_utc": "2026-09-01 02:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829898": [
        {
            "ioc_value": "191.107.87.183:5471",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 19:43:49",
            "last_seen_utc": "2026-07-19 08:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829897": [
        {
            "ioc_value": "188.23.170.168:8000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.eye_pyramid",
            "malware_alias": null,
            "malware_printable": "Eye Pyramid",
            "first_seen_utc": "2026-06-10 19:43:48",
            "last_seen_utc": "2026-07-13 08:44:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,EyePyramid",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829896": [
        {
            "ioc_value": "185.33.84.183:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-10 19:43:46",
            "last_seen_utc": "2026-07-29 08:57:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829895": [
        {
            "ioc_value": "182.23.2.163:9800",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 19:43:41",
            "last_seen_utc": "2026-07-11 08:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829894": [
        {
            "ioc_value": "181.235.14.94:3588",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 19:43:38",
            "last_seen_utc": "2026-07-11 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829893": [
        {
            "ioc_value": "172.94.18.103:71",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 19:43:34",
            "last_seen_utc": "2026-09-01 02:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829892": [
        {
            "ioc_value": "170.39.185.141:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-10 19:43:32",
            "last_seen_utc": "2026-09-01 02:43:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829891": [
        {
            "ioc_value": "163.245.217.90:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-10 19:43:29",
            "last_seen_utc": "2026-07-15 08:44:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829890": [
        {
            "ioc_value": "uywdaxpat.bookdrive.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:43:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829889": [
        {
            "ioc_value": "159.69.59.93:4550",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 19:43:26",
            "last_seen_utc": "2026-07-13 08:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829888": [
        {
            "ioc_value": "153.75.249.13:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 19:43:20",
            "last_seen_utc": "2026-07-25 08:43:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829887": [
        {
            "ioc_value": "146.70.51.74:7898",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 19:43:18",
            "last_seen_utc": "2026-07-11 08:43:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829886": [
        {
            "ioc_value": "130.94.95.135:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 19:43:13",
            "last_seen_utc": "2026-07-11 08:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829885": [
        {
            "ioc_value": "mdsbgax.hesabdaripishrafte.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:40:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829884": [
        {
            "ioc_value": "uxl15txz.azmoondadrasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:33:25",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829883": [
        {
            "ioc_value": "dk2acd53.anodaz.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:28:02",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829882": [
        {
            "ioc_value": "pejfezjq.hugugdaryayi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:24:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829881": [
        {
            "ioc_value": "ktwyzyj.hesabdaripishrafte.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:24:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829880": [
        {
            "ioc_value": "pbmbrhid.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:20:29",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829879": [
        {
            "ioc_value": "ivyyokmi.hugugdaryayi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 19:09:56",
            "last_seen_utc": "2026-07-10 07:20:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829878": [
        {
            "ioc_value": "7m9gr5qr.anodaz.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 18:55:01",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829877": [
        {
            "ioc_value": "mirqics.hesabdariosmani.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 18:45:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829875": [
        {
            "ioc_value": "getbrowseronline.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 18:43:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829876": [
        {
            "ioc_value": "autoupdateing.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 18:43:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829874": [
        {
            "ioc_value": "fastonlineupdate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 18:43:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829873": [
        {
            "ioc_value": "getupdatefast.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 18:43:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829872": [
        {
            "ioc_value": "instantwebupdate.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 18:43:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829871": [
        {
            "ioc_value": "213.109.192.63:44549",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-10 18:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829870": [
        {
            "ioc_value": "herxydns.hugugbime.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 18:31:34",
            "last_seen_utc": "2026-07-13 11:19:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829868": [
        {
            "ioc_value": "https://kik.glamisdunesrentals.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 18:24:52",
            "last_seen_utc": "2026-06-10 22:24:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829869": [
        {
            "ioc_value": "kik.glamisdunesrentals.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 18:24:52",
            "last_seen_utc": "2026-06-10 22:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829866": [
        {
            "ioc_value": "https://kik.gagahsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 18:24:40",
            "last_seen_utc": "2026-06-10 22:24:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829867": [
        {
            "ioc_value": "kik.gagahsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-10 18:24:40",
            "last_seen_utc": "2026-06-10 22:24:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829865": [
        {
            "ioc_value": "5wtpqrho.azmoondadrasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 18:18:59",
            "last_seen_utc": "2026-06-21 20:22:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829864": [
        {
            "ioc_value": "kmjlrhh.hesabdarinoravesh.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 18:06:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829863": [
        {
            "ioc_value": "vkuyoujz.hugugbeynolmelal.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:57:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829862": [
        {
            "ioc_value": "mf1klp19.gavaedfagahe.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:56:57",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829861": [
        {
            "ioc_value": "qxuedtbmu.bookdrive.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:55:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829860": [
        {
            "ioc_value": "217.216.72.116:4219",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 17:40:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3d9ee40c6b7b67f193511b665d005945179f0d5a9870e8ecb4e4cef495213de6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829859": [
        {
            "ioc_value": "http://daisyz.shop:4219",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 17:40:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3d9ee40c6b7b67f193511b665d005945179f0d5a9870e8ecb4e4cef495213de6/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829858": [
        {
            "ioc_value": "ajwrgnf.hesabdarieskandari.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:28:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829857": [
        {
            "ioc_value": "172.81.130.198:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-10 17:27:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/761745042e6ba4fadd0bf1ef4a28df72d34caefddd294cd022a37cd6e282faea/",
            "tags": "PureLogStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829856": [
        {
            "ioc_value": "sdgbisna.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:14:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829855": [
        {
            "ioc_value": "xtsfgslg.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:08:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829854": [
        {
            "ioc_value": "yitqjyww.hugu2gt2ejarat.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 17:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829853": [
        {
            "ioc_value": "whtfwec.hesabdari3.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 16:49:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829852": [
        {
            "ioc_value": "www.highgradebastardbackup3.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:45:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f38f3dfb9fd8272bf10ec883a8f2d552c1380f3b2330530dc4f94b5c060a6145/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829849": [
        {
            "ioc_value": "www.highgradebastard.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:45:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f38f3dfb9fd8272bf10ec883a8f2d552c1380f3b2330530dc4f94b5c060a6145/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829850": [
        {
            "ioc_value": "www.highgradebastardbackup1.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:45:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f38f3dfb9fd8272bf10ec883a8f2d552c1380f3b2330530dc4f94b5c060a6145/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829851": [
        {
            "ioc_value": "www.highgradebastardbackup2.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:45:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f38f3dfb9fd8272bf10ec883a8f2d552c1380f3b2330530dc4f94b5c060a6145/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829848": [
        {
            "ioc_value": "llegando09328.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:45:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f78b1bc5110600861c39caea879cded379762e13098adc227159c6cf137ed115/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829847": [
        {
            "ioc_value": "http://a1158594.xsph.ru/497e8ed4.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 16:40:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829846": [
        {
            "ioc_value": "http://a1143281.xsph.ru/fd99c1a0.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 16:40:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829845": [
        {
            "ioc_value": "181.134.208.116:8010",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:40:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829844": [
        {
            "ioc_value": "172.111.169.78:65070",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:40:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829843": [
        {
            "ioc_value": "178.16.52.141:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:40:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829842": [
        {
            "ioc_value": "141.94.45.153:34951",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-10 16:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NjRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829841": [
        {
            "ioc_value": "ninarober.accesscam.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 16:35:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/76d2edaf0b7a84678b332bb884ae65612e28e7ad64e2330ee3708e311bef52f1/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829839": [
        {
            "ioc_value": "xffoobdu.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 16:33:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829817": [
        {
            "ioc_value": "45.138.64.124:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-10 16:24:30",
            "last_seen_utc": null,
            "confidence_level": 86,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1059_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829818": [
        {
            "ioc_value": "https://carreobilder.com/vaetnwuiznatbkoa",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 16:24:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/carreobilder.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1829821": [
        {
            "ioc_value": "https://sharsaruba.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 16:24:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sharsaruba.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1829829": [
        {
            "ioc_value": "154.29.73.187:63641",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 16:24:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1829838": [
        {
            "ioc_value": "2nyrkdw3.ayinzendegi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 16:18:47",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829837": [
        {
            "ioc_value": "hvqxbpp.hesabdari2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 16:11:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829836": [
        {
            "ioc_value": "fb88l.co.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 16:10:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/42d456327573520ea9f39a59f6995f4576d2c8b97b322db5100732f7a417a15f/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829835": [
        {
            "ioc_value": "31.56.209.222:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 16:08:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9b4b6476b4145b3d1d31c45bbdd8cbc604dff595062d62ade06ea89cfa455f46/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829834": [
        {
            "ioc_value": "mwo3lg6u.garatequran.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 15:56:32",
            "last_seen_utc": "2026-06-11 10:05:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829833": [
        {
            "ioc_value": "uulyqc.barnamenevisi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 15:54:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829832": [
        {
            "ioc_value": "xomvdxaa.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 15:52:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829831": [
        {
            "ioc_value": "inner-api.help",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 15:45:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829830": [
        {
            "ioc_value": "ovzweeh.amoozeshagazade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 15:33:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829820": [
        {
            "ioc_value": "oejoixm.amlakshahri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 14:55:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829819": [
        {
            "ioc_value": "iamcklbz.wrfc8.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 14:33:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829816": [
        {
            "ioc_value": "rattc2jn.asibshenasiyahya.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 14:18:22",
            "last_seen_utc": "2026-06-19 10:43:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829810": [
        {
            "ioc_value": "lzwtxwrr.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:59:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829809": [
        {
            "ioc_value": "zhfxkf.bankefile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:58:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829808": [
        {
            "ioc_value": "m47hkbcd.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:55:14",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829807": [
        {
            "ioc_value": "sk4a8369.anodaz.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:55:07",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829806": [
        {
            "ioc_value": "a2llsxm4.ganuneasasi.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:54:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829802": [
        {
            "ioc_value": "glgoowufmn.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 13:34:23",
            "last_seen_utc": "2026-06-11 15:46:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1829803": [
        {
            "ioc_value": "little.serverhostinc.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 13:34:23",
            "last_seen_utc": "2026-06-11 15:46:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1829804": [
        {
            "ioc_value": "little.serverhostinsa.ke",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 13:34:23",
            "last_seen_utc": "2026-06-11 15:46:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1829805": [
        {
            "ioc_value": "little.sesdjansa.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 13:34:23",
            "last_seen_utc": "2026-06-11 15:46:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "proxylife"
        }
    ],
    "1829801": [
        {
            "ioc_value": "veb0im5p.ansuyemarg.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:23:29",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829800": [
        {
            "ioc_value": "qmnldei.akhlagheslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:08:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829795": [
        {
            "ioc_value": "dguldnys.restaurantguideaarhus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 13:06:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829791": [
        {
            "ioc_value": "193.233.202.16:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 12:30:10",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1059_003,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1829793": [
        {
            "ioc_value": "ykjqdm.bankefile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 12:22:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829792": [
        {
            "ioc_value": "rqwkms23.anodaz.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 12:21:33",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829790": [
        {
            "ioc_value": "154.91.75.78:777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-10 12:10:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/dbf418de2f91dd227f9bb4fc7ffb8bb882729037ecb101518f87fd622f227268/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829789": [
        {
            "ioc_value": "vzyeissn.rial.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 12:05:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829788": [
        {
            "ioc_value": "sjowpfe.akhlageslami.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 12:00:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829787": [
        {
            "ioc_value": "ouqzmwvg.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 11:56:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829786": [
        {
            "ioc_value": "8.148.201.210:10553",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:46:09",
            "last_seen_utc": "2026-07-11 20:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829785": [
        {
            "ioc_value": "38.76.164.56:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:58",
            "last_seen_utc": "2026-07-11 20:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829784": [
        {
            "ioc_value": "38.14.248.138:8085",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:57",
            "last_seen_utc": "2026-07-11 20:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829779": [
        {
            "ioc_value": "185.92.190.214:5896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:53",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829780": [
        {
            "ioc_value": "185.92.190.215:5896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:53",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829781": [
        {
            "ioc_value": "185.92.190.215:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:53",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829782": [
        {
            "ioc_value": "185.92.190.216:5896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:53",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829783": [
        {
            "ioc_value": "185.92.190.217:5896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:53",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829777": [
        {
            "ioc_value": "185.92.190.213:5896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:52",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829778": [
        {
            "ioc_value": "185.92.190.213:8896",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 11:45:52",
            "last_seen_utc": "2026-08-29 18:47:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1829776": [
        {
            "ioc_value": "azj9wm5k.fununetadris.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 11:44:46",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829775": [
        {
            "ioc_value": "euggvtxb.fununetadris.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 11:43:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829774": [
        {
            "ioc_value": "llonnk.bankefile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 11:42:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1829773": [
        {
            "ioc_value": "aomfziar.shartplus.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 11:34:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1829768": [
        {
            "ioc_value": "https://www.mhsbm.gi/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 11:32:08",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.mhsbm.gi",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825891": [
        {
            "ioc_value": "2e6fbd142bd5622d2415adbb479d091d322e2f28e91ddc20e3f8b59a26b42a73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 11:31:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1829767": [
        {
            "ioc_value": "176.65.139.50:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 11:17:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825975": [
        {
            "ioc_value": "boldthrives.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-10 10:54:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/ClickFix",
            "tags": "clickfix,js",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1825935": [
        {
            "ioc_value": "xqbzvgfy.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 10:53:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825880": [
        {
            "ioc_value": "99cfd8d9b8ebba0d7cf8527eb0b63eb920fa6898f6971c53df833a85415714f6",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825881": [
        {
            "ioc_value": "4a4c286c2ee27df4c0ca597b2568986689f8fb5d0b325fdc2cf45af560b80c97",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825882": [
        {
            "ioc_value": "7b2314d6af6b3df7723dbd88439b29fb990e8133cba441c76b9683b68a5adfd1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825883": [
        {
            "ioc_value": "5a3953fc874c19e45eb8ae6479e1bca3214f8c3e828d38681b68ed4652a6fa83",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825884": [
        {
            "ioc_value": "e96dc227d4e82d1c261eff41081e1ec8de4bbcbb7e26f989f4ab10c955b93312",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825885": [
        {
            "ioc_value": "21ec3bd2644b08eb5dfea8718c98a786f11aaceb041bfa29fa550b70dc763e02",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825886": [
        {
            "ioc_value": "336cee203c92efe8a8067f9c3ad71e3d7fd2d7231e6bce8381d5ec0243bf1e60",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825888": [
        {
            "ioc_value": "6c6d2bc2d895c9e0b8946c0d1ad5611632e479eecb481031e5f3744e1a6f65b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825889": [
        {
            "ioc_value": "04a93feba4c974ab3c7fe203d68f78bc3b8b395492fdecc0b3fefadfd74dcac4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825890": [
        {
            "ioc_value": "86ad203b4dfcd43bdc93bea91e9fc01b613e4fa755fcf3b298e8d1e74e168009",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:51:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825887": [
        {
            "ioc_value": "yovejfu.amlakshahri.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 10:43:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825878": [
        {
            "ioc_value": "af4bf0887368a86ea9b3efc1c215c1e59c663de1288777b67246c4b641897bd3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:27:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825879": [
        {
            "ioc_value": "54202d955f19f8d721408471a906211833843624ecdca03ace14824c2b041d82",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:27:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825877": [
        {
            "ioc_value": "krezxpiv.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 10:14:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825872": [
        {
            "ioc_value": "5903092322871269cb4c72fd4bc706a7d7c6a12c4422e92d7729cb082a6013f8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:12:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825874": [
        {
            "ioc_value": "4183648bf9b7677843bb02cbdd90602b0708e3f76bc2f8e3d0bd805df3bedeeb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 10:12:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825876": [
        {
            "ioc_value": "5.101.81.159:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-10 10:05:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a31b27b8a41ba3387f060f9ebe9353e1fbab6b23e6b8f9ba8fb364c3c8ed5ba/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825875": [
        {
            "ioc_value": "tdfzyex.amoozeshagazade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 10:04:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825873": [
        {
            "ioc_value": "38.47.122.34:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 10:00:17",
            "last_seen_utc": "2026-08-28 08:08:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825868": [
        {
            "ioc_value": "2c4c16052c800b957945ac94afcab893e52924fc8e348154a106a3f8a31ed490",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 09:57:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825869": [
        {
            "ioc_value": "e2e85ffb029036a3449da8f65275ccfb9e77832a6085c5c26d6726dfda47a048",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 09:57:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825870": [
        {
            "ioc_value": "d5d0a96a77f93ba4dc8dc468efee0fcd99a065f665307ecc750ef36258680b39",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 09:57:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825871": [
        {
            "ioc_value": "0f7448bc71f420f7b696550a46541b9b2c9fb3808fd6dfe9b18b456a9f0cfed4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 09:57:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "mgoku"
        }
    ],
    "1825867": [
        {
            "ioc_value": "64.89.162.117:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 09:45:40",
            "last_seen_utc": "2026-09-01 02:46:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825866": [
        {
            "ioc_value": "46.246.82.4:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 09:45:22",
            "last_seen_utc": "2026-07-10 18:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825865": [
        {
            "ioc_value": "45.81.17.44:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 09:45:19",
            "last_seen_utc": "2026-07-27 18:45:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825864": [
        {
            "ioc_value": "45.147.28.58:42461",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 09:45:16",
            "last_seen_utc": "2026-07-25 08:45:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825863": [
        {
            "ioc_value": "31.76.87.188:4034",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:45:01",
            "last_seen_utc": "2026-07-20 08:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825862": [
        {
            "ioc_value": "23.95.220.192:43999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 09:44:56",
            "last_seen_utc": "2026-08-07 18:45:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825860": [
        {
            "ioc_value": "207.180.250.181:1111",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 09:44:15",
            "last_seen_utc": "2026-07-10 08:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825861": [
        {
            "ioc_value": "207.180.250.181:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 09:44:15",
            "last_seen_utc": "2026-07-10 09:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825858": [
        {
            "ioc_value": "2.27.5.120:6448",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:44:10",
            "last_seen_utc": "2026-07-19 18:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825859": [
        {
            "ioc_value": "2.27.5.236:1377",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:44:10",
            "last_seen_utc": "2026-07-10 18:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825857": [
        {
            "ioc_value": "2.26.75.249:7312",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:44:09",
            "last_seen_utc": "2026-07-19 18:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825855": [
        {
            "ioc_value": "198.23.177.222:14646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:44:08",
            "last_seen_utc": "2026-07-10 08:44:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825856": [
        {
            "ioc_value": "198.23.185.231:20100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 09:44:08",
            "last_seen_utc": "2026-07-10 18:44:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825854": [
        {
            "ioc_value": "192.3.96.82:45683",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:44:01",
            "last_seen_utc": "2026-07-12 18:44:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825853": [
        {
            "ioc_value": "192.208.12.91:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-10 09:44:00",
            "last_seen_utc": "2026-09-01 02:44:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825852": [
        {
            "ioc_value": "182.23.2.163:12489",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:43:47",
            "last_seen_utc": "2026-07-10 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825851": [
        {
            "ioc_value": "178.236.46.43:7912",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 09:43:45",
            "last_seen_utc": "2026-08-02 18:44:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825850": [
        {
            "ioc_value": "163.245.217.48:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-10 09:43:35",
            "last_seen_utc": "2026-09-01 02:43:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825849": [
        {
            "ioc_value": "158.94.210.30:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-10 09:43:31",
            "last_seen_utc": "2026-07-10 18:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825848": [
        {
            "ioc_value": "158.94.208.192:1030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 09:43:30",
            "last_seen_utc": "2026-07-13 08:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825847": [
        {
            "ioc_value": "154.83.186.106:30159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 09:43:25",
            "last_seen_utc": "2026-08-03 08:43:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825846": [
        {
            "ioc_value": "107.175.87.234:65321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-10 09:43:10",
            "last_seen_utc": "2026-09-01 02:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825845": [
        {
            "ioc_value": "107.172.133.178:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 09:43:09",
            "last_seen_utc": "2026-07-12 18:43:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825844": [
        {
            "ioc_value": "104.251.181.62:3421",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 09:43:08",
            "last_seen_utc": "2026-07-12 08:43:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825843": [
        {
            "ioc_value": "104.143.206.116:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 09:43:07",
            "last_seen_utc": "2026-07-11 20:43:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825842": [
        {
            "ioc_value": "pfyfyt.bankefiile.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 09:37:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825841": [
        {
            "ioc_value": "nljdiefg.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 09:36:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825840": [
        {
            "ioc_value": "lq8j82kc.shirbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 09:35:11",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825839": [
        {
            "ioc_value": "y5cngab5.shirbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 09:34:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825838": [
        {
            "ioc_value": "3yl7mt55.andisheeslami2.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 09:22:59",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825825": [
        {
            "ioc_value": "http://217.60.195.70:8080/x86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 09:10:17",
            "last_seen_utc": "2026-06-24 08:25:00",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "mirai,nextjs-rce,payload-host",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825826": [
        {
            "ioc_value": "217.60.195.113:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-10 09:10:17",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cve-2024-4577,redtail,scp-dist",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825827": [
        {
            "ioc_value": "http://194.238.26.34:8880/r8x4k2m9/stager_linux_amd64",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-10 09:10:17",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "boyzee,stager,teamtnt",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825828": [
        {
            "ioc_value": "updates.officehub.works",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-10 09:10:16",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "boyzee,c2,phoenix-c2",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825829": [
        {
            "ioc_value": "47.86.190.58:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-10 09:10:16",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825830": [
        {
            "ioc_value": "209.58.169.220:60137",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-10 09:10:16",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,redis,slaveof-master",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825831": [
        {
            "ioc_value": "75.119.132.109:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-10 09:10:15",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cve-2024-4577,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825832": [
        {
            "ioc_value": "138.124.242.51:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-10 09:10:15",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825833": [
        {
            "ioc_value": "161.35.169.21:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-10 09:10:14",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825824": [
        {
            "ioc_value": "xtktlprb.rial.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 09:02:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825820": [
        {
            "ioc_value": "5.101.81.224:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-10 08:56:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6fd8cf9b6c48349c807dd1f76da1a2ccf0216b7a633d5a7f6b067e38f1061e97/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825819": [
        {
            "ioc_value": "1yusfrvk.pishbinibet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 08:55:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825818": [
        {
            "ioc_value": "ithfkpx.amoozeshtagipour.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 08:54:55",
            "last_seen_utc": "2026-06-22 07:31:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825817": [
        {
            "ioc_value": "https://medcompent.com/rec.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.darkvision_rat",
            "malware_alias": null,
            "malware_printable": "DarkVision RAT",
            "first_seen_utc": "2026-06-10 08:50:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "DarkVisionRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825815": [
        {
            "ioc_value": "107.175.246.11:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 08:36:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e11a0f09c359c909dc2467c3c4e24d59a2b506188357bfdc3a5dd991a326cb1a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825816": [
        {
            "ioc_value": "31.57.184.55:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 08:36:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/868051d7394e4df3c60f1176f44e19d4b4b6eef3b096be687b61f08dd6efa18a/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825813": [
        {
            "ioc_value": "102.220.160.101:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 08:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/78a6f4da6010053bfcba304e6a01a0c47bba05bec370b775007a8a03e4150ec7/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825814": [
        {
            "ioc_value": "102.220.160.156:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 08:36:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7f0732cf9958e2cc11d689e97d1e81eed84d79acc0c025f3aab74e8d3cb44e4f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825812": [
        {
            "ioc_value": "uecvehp.amoozeshagazade.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 08:35:30",
            "last_seen_utc": "2026-06-11 05:18:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825702": [
        {
            "ioc_value": "185.89.116.55:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 08:29:51",
            "last_seen_utc": null,
            "confidence_level": 86,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825783": [
        {
            "ioc_value": "ck444app.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-10 08:29:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://yaraify.abuse.ch/scan/results/3169dfa8-648b-11f1-a8a0-42010aa4000b",
            "tags": "AsyncRAT,Decoy,microsoft",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825789": [
        {
            "ioc_value": "93.95.115.186:49384",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 08:29:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1825791": [
        {
            "ioc_value": "https://mylovedomen.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 08:29:48",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/mylovedomen.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825811": [
        {
            "ioc_value": "66.63.170.28:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 08:25:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0cda40984c73831b5181a9e9ec9e064bd62631436643d5644b49763b029ef131/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825810": [
        {
            "ioc_value": "firdgorl.restaurantguideaarhus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 08:19:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825809": [
        {
            "ioc_value": "sc.runtimeatlas.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-10 08:10:27",
            "last_seen_utc": "2026-06-10 08:10:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825808": [
        {
            "ioc_value": "ojuritosc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 08:09:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0b6ee0ce1266e4d0c4efb665b746af863994920293d1afc136a07a1f44e88b43/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825807": [
        {
            "ioc_value": "79.124.8.44:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 08:08:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0b6ee0ce1266e4d0c4efb665b746af863994920293d1afc136a07a1f44e88b43/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825806": [
        {
            "ioc_value": "45.129.231.1:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 08:07:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a152a44c91019701f0cc65ddfabf186caa376ba9e4535ac5a94e56903e0caf10/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825805": [
        {
            "ioc_value": "believedtobeclean.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-10 08:06:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b90c9b81aacb7c5050647e916f5ee5e3dc42c35fcd116ba559a8671f03de04cf/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825804": [
        {
            "ioc_value": "s4x5yd7i.anodaz.store",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 08:04:51",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825803": [
        {
            "ioc_value": "203.159.90.82:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 08:04:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a759dc81ff0574f4e255da80f0b19b2a3b176fc14442b320f95c5412cc5c1c54/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825802": [
        {
            "ioc_value": "94.141.122.148:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 08:02:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/02eabcc8164ace33666f6de0901cd13510cd8fb1b8deab757ee2d91922770b30/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825801": [
        {
            "ioc_value": "178.16.52.66:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 08:00:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8149a13d59b22fa60563c2ada80f1139189c9414ca4c2faf0b4c797308a03d63/",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825795": [
        {
            "ioc_value": "xmwofxxy.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:40:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825794": [
        {
            "ioc_value": "oxzqss.azmoonzare.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:37:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825793": [
        {
            "ioc_value": "0xln2imp.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:34:10",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825792": [
        {
            "ioc_value": "0lq2f3fa.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:33:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825790": [
        {
            "ioc_value": "rkbvh5p1.parspoker.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:26:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825788": [
        {
            "ioc_value": "34.92.128.98:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 07:18:53",
            "last_seen_utc": "2026-09-01 02:47:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825787": [
        {
            "ioc_value": "47.92.206.63:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 07:18:52",
            "last_seen_utc": "2026-06-15 06:51:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825786": [
        {
            "ioc_value": "103.230.15.38:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 07:18:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825785": [
        {
            "ioc_value": "pjekei.azmoonzare.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:13:45",
            "last_seen_utc": "2026-06-15 01:31:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825784": [
        {
            "ioc_value": "vohgvv.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:11:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825782": [
        {
            "ioc_value": "cbawrwwb.wrfc8.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 07:03:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825780": [
        {
            "ioc_value": "76.223.67.189:6584",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6cbac6bcd1acb90031a31b9595deb4e9681450b9554a9e61e4fd20d81e450a0e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825781": [
        {
            "ioc_value": "13.248.213.45:6584",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6cbac6bcd1acb90031a31b9595deb4e9681450b9554a9e61e4fd20d81e450a0e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825779": [
        {
            "ioc_value": "38.47.176.90:8938",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd8ec81fd606ec247099b58e845bb5547ee05a46fd46e732b06397587917e842/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825778": [
        {
            "ioc_value": "148.230.76.66:6390",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/630202e6856062a04b0eb9bd7c5100339d4d007f1a0d25519ae86a7edc4a3e6c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825777": [
        {
            "ioc_value": "72.62.195.74:6473",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9fc05aad8a9346451068b7e5a3bdd36c59f6865b411cf58b262c1b149078459e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825776": [
        {
            "ioc_value": "191.44.68.60:6004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9626bba0b108243a5e32a0fa648008626e8edd3d1101de8e980f15734e6b4407/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825775": [
        {
            "ioc_value": "143.244.143.195:9504",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:48:02",
            "last_seen_utc": "2026-06-10 06:48:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3a93aafe25656195c19a5627bf55356690ea96756aeda2d8e97c9db673bd025/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825773": [
        {
            "ioc_value": "ethercdnns.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 06:47:20",
            "last_seen_utc": "2026-06-23 09:58:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825774": [
        {
            "ioc_value": "http://mascard.biz:8768",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:47:20",
            "last_seen_utc": "2026-08-05 15:14:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c41bc26fc5be9c71d8df13ca5f2abcdeaa27af53a27f7ca3b63b2f964b1bba78/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825771": [
        {
            "ioc_value": "147.93.102.159:4219",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:47:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b1d954729c4aa3dcbb9e81ec47c4ae1950af995d39f7855dcbce49b989ad456/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825772": [
        {
            "ioc_value": "167.71.217.41:7538",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:47:18",
            "last_seen_utc": "2026-07-15 18:55:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2194042f5f4a385486b259dd6f174748a5fbc260dcafe8abac842382010f3b10/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825770": [
        {
            "ioc_value": "185.239.236.212:9321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:46:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d2859c43d4b0d56b9c21e9bad3ffd02b729e86e800d0f2fec725a68c7584481/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825769": [
        {
            "ioc_value": "72.60.241.82:8954",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:46:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69d92815865bea3b8266f56c096d5e4a01528aabc98dcb00ef34ea9ba77c5fdf/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825768": [
        {
            "ioc_value": "128.199.189.103:8747",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:46:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/73ca6b57bbc1288754443ad72c4c0ad272f2a718d4f11348c3725a96054709e2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825767": [
        {
            "ioc_value": "143.244.141.221:9432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:46:26",
            "last_seen_utc": "2026-06-20 10:10:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/813aeb7a3cac0a916501d370ad1f350a56b4bb36835f52b3cc92d624da728674/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825766": [
        {
            "ioc_value": "soqtorent.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 06:46:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825765": [
        {
            "ioc_value": "ledeuil.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 06:46:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825764": [
        {
            "ioc_value": "195.211.191.95:9549",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:45:14",
            "last_seen_utc": "2026-07-01 13:55:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6021c912bc8f172028992497798b0a64b577aacb46674f793d21907d9015e5c3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825763": [
        {
            "ioc_value": "180.188.198.176:8938",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:45:13",
            "last_seen_utc": "2026-06-10 06:47:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6021c912bc8f172028992497798b0a64b577aacb46674f793d21907d9015e5c3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825762": [
        {
            "ioc_value": "mylovedomen.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 06:45:05",
            "last_seen_utc": "2026-06-30 21:58:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825761": [
        {
            "ioc_value": "165.227.199.109:5789",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:44:57",
            "last_seen_utc": "2026-07-17 12:46:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ac187a01e34ba3ba6bd51326390e19f58e2de2c82646f34017628eaa9198f082/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825760": [
        {
            "ioc_value": "eaty6go0.anodaz.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 06:44:46",
            "last_seen_utc": "2026-06-19 12:37:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825759": [
        {
            "ioc_value": "195.222.53.130:5200",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:44:39",
            "last_seen_utc": "2026-08-12 02:44:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/438ddb05451660c60d9843e3a32faca34a448071c716083c96cc97c781878563/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825758": [
        {
            "ioc_value": "72.62.195.74:6590",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:44:38",
            "last_seen_utc": "2026-07-11 16:55:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d1fcd185dd9b18bd39082dd15414d70eec8324171d4583185634204c992a1ef1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825757": [
        {
            "ioc_value": "139.59.137.44:4219",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:43:03",
            "last_seen_utc": "2026-06-18 05:55:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6021c912bc8f172028992497798b0a64b577aacb46674f793d21907d9015e5c3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825756": [
        {
            "ioc_value": "3sdhx6qp.pokerbazi.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 06:31:35",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825755": [
        {
            "ioc_value": "uknwgsop.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 06:28:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825754": [
        {
            "ioc_value": "http://zsigmu.shop:7673",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:48",
            "last_seen_utc": "2026-06-10 06:48:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f718b444d39a0aa1a1635878b05c7ff7fe1528bbe63093fe20e7c6dab7ad992c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825753": [
        {
            "ioc_value": "http://tryjellie.com:5747",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:38",
            "last_seen_utc": "2026-06-10 06:48:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/85397c6e538138dfa71c4f26c572d540b52d75a7050f4fdc68bb1261267f6f13/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825751": [
        {
            "ioc_value": "http://thequarterlymethod.com:6584",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:36",
            "last_seen_utc": "2026-06-10 06:48:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6cbac6bcd1acb90031a31b9595deb4e9681450b9554a9e61e4fd20d81e450a0e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825752": [
        {
            "ioc_value": "http://tricshp.shop:4437",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:36",
            "last_seen_utc": "2026-06-10 06:48:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/84705a48cd1e868dc45ca6f42d565cf1c2a3c44def8fe25f7f15e5b3962bc5e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825750": [
        {
            "ioc_value": "http://solvueo.shop:8938",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:35",
            "last_seen_utc": "2026-06-10 06:48:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cd8ec81fd606ec247099b58e845bb5547ee05a46fd46e732b06397587917e842/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825749": [
        {
            "ioc_value": "http://socihr.lol:4219",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:34",
            "last_seen_utc": "2026-06-10 06:48:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/101eb6d5c3c5be140c681e1d23b86783f40e81552db897e253e2c29609ec11cd/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825748": [
        {
            "ioc_value": "http://sivaph.shop:6390",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:33",
            "last_seen_utc": "2026-06-10 06:48:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/630202e6856062a04b0eb9bd7c5100339d4d007f1a0d25519ae86a7edc4a3e6c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825747": [
        {
            "ioc_value": "http://shivlpf.shop:6473",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:32",
            "last_seen_utc": "2026-06-10 06:48:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9fc05aad8a9346451068b7e5a3bdd36c59f6865b411cf58b262c1b149078459e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825746": [
        {
            "ioc_value": "http://sagaraya.vip:6004",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:31",
            "last_seen_utc": "2026-06-10 06:48:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9626bba0b108243a5e32a0fa648008626e8edd3d1101de8e980f15734e6b4407/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825745": [
        {
            "ioc_value": "http://ropea.top:28313",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:29",
            "last_seen_utc": "2026-06-10 06:48:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/056f39d9f88782580e978f35ed8b50706ed9372476433b364adee36188fc5925/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825744": [
        {
            "ioc_value": "http://repqst.shop:7688",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:28",
            "last_seen_utc": "2026-06-10 06:48:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/399349b048f9c914f98e301878d67c515e96f626dc7944d4ed0793cb4c31c8a0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825743": [
        {
            "ioc_value": "http://ponzchq.shop:9504",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:27",
            "last_seen_utc": "2026-06-10 06:48:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3a93aafe25656195c19a5627bf55356690ea96756aeda2d8e97c9db673bd025/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825742": [
        {
            "ioc_value": "http://pickad.shop:8478",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:25",
            "last_seen_utc": "2026-06-10 06:48:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/89f3d018b8b0d5c789f3f72911bd91d3d6286d46aa73cddd7fe7fbb63f06bbe7/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825741": [
        {
            "ioc_value": "http://padaz.pics:4219",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:24",
            "last_seen_utc": "2026-06-10 06:47:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/002205bb150a86c419fed04d3cd85dfd67d04ff570555b0ba42d8fc171fb92fa/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825740": [
        {
            "ioc_value": "http://organp.shop:7538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:23",
            "last_seen_utc": "2026-06-10 06:47:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/07ed241e145a1057e4a409e8e0a2d3af39591e00821058de2a37c9e3b28eabdc/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825739": [
        {
            "ioc_value": "http://orderre.shop:4190",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:21",
            "last_seen_utc": "2026-07-31 16:46:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6f6f052595b109f4e8fdf42644b98f6380635f3f45f280cf85aacf6e30e30d2e/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825737": [
        {
            "ioc_value": "http://morkaj.bet:8768",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:14",
            "last_seen_utc": "2026-08-01 23:21:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/007417ff5b3a5bb2957302ee24222b00243b955871ff89600717531127c146ca/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825736": [
        {
            "ioc_value": "http://moisca.com:8938",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:13",
            "last_seen_utc": "2026-06-10 06:47:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6021c912bc8f172028992497798b0a64b577aacb46674f793d21907d9015e5c3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825735": [
        {
            "ioc_value": "http://menomou.shop:7049",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:11",
            "last_seen_utc": "2026-06-10 06:47:29",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3aca18df0426522e0c301a55dae3d892b2009719854207b4bae45f4c94403c9f/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825734": [
        {
            "ioc_value": "http://mandtar.shop:7538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:06",
            "last_seen_utc": "2026-06-10 06:47:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2194042f5f4a385486b259dd6f174748a5fbc260dcafe8abac842382010f3b10/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825733": [
        {
            "ioc_value": "http://mammeap.shop:4219",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:05",
            "last_seen_utc": "2026-06-10 06:47:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b1d954729c4aa3dcbb9e81ec47c4ae1950af995d39f7855dcbce49b989ad456/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825732": [
        {
            "ioc_value": "http://jirensolutions.com:5747",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:20:00",
            "last_seen_utc": "2026-06-10 06:47:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09e35ba6d5f8619d913903fc514e38e7bfe6ffbbcbe978d061845558e2f97557/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825731": [
        {
            "ioc_value": "http://iuta.today:8521",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:59",
            "last_seen_utc": "2026-08-01 13:41:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/101eb6d5c3c5be140c681e1d23b86783f40e81552db897e253e2c29609ec11cd/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825730": [
        {
            "ioc_value": "http://intem.lat:9592",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:58",
            "last_seen_utc": "2026-06-10 06:47:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/056f39d9f88782580e978f35ed8b50706ed9372476433b364adee36188fc5925/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825729": [
        {
            "ioc_value": "http://intelvissions.com:5747",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:57",
            "last_seen_utc": "2026-06-10 06:47:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cdd16fc0a2bf1499ba815bc95288456e46c7245b64c9d06033f2c61eb06900f5/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825728": [
        {
            "ioc_value": "http://godsblueprintforyourmarriage.com:5200",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:56",
            "last_seen_utc": "2026-06-10 06:47:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a8a02fcd5ee2939a265a72623fa5a101b5d03231306589e11254ef0c50aed375/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825727": [
        {
            "ioc_value": "http://forehia.shop:4538",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:54",
            "last_seen_utc": "2026-06-10 06:47:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a0cfb7eeaf28217684097c603669f5d429d45bf6c9e8b727ab54739f50afd9c3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825726": [
        {
            "ioc_value": "http://famwili.shop:9321",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:48",
            "last_seen_utc": "2026-06-10 06:46:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1d2859c43d4b0d56b9c21e9bad3ffd02b729e86e800d0f2fec725a68c7584481/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825725": [
        {
            "ioc_value": "http://falcoju.shop:9895",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:47",
            "last_seen_utc": "2026-06-10 06:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f3a095122d4f4fba320b319b56707fb2dc8e213b301890f9ca13918c37d39fa4/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825724": [
        {
            "ioc_value": "http://diggero.biz:8521",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:46",
            "last_seen_utc": "2026-08-01 13:41:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/630202e6856062a04b0eb9bd7c5100339d4d007f1a0d25519ae86a7edc4a3e6c/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825723": [
        {
            "ioc_value": "http://demale.shop:8954",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:45",
            "last_seen_utc": "2026-06-10 06:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/69d92815865bea3b8266f56c096d5e4a01528aabc98dcb00ef34ea9ba77c5fdf/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825722": [
        {
            "ioc_value": "http://coox.live:28313",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:44",
            "last_seen_utc": "2026-08-12 20:22:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/86d7fdb5c8a211adefdf877ecd253cae7eb1249da38c08511dd7e284fbe31761/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825721": [
        {
            "ioc_value": "http://contentremixrr.com:6584",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:43",
            "last_seen_utc": "2026-06-10 06:46:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2d0a4aba600f61d29e6de6bafedb6e3e42118d619e98004a4ed51eaef99ef1e8/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825720": [
        {
            "ioc_value": "http://consuw.shop:8753",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:42",
            "last_seen_utc": "2026-06-10 06:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/af82c1823d0a7096670cb3060f42fe6781f0eedeacd46b1ac96180ed1e33f2d0/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825719": [
        {
            "ioc_value": "http://comples.biz:8768",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:41",
            "last_seen_utc": "2026-06-10 06:46:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bb0d811fe62f5055ac5a3d675b85b2ba38ae10d7cc1f98f24b34fd068d96d758/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825718": [
        {
            "ioc_value": "http://cofaer.shop:8747",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:39",
            "last_seen_utc": "2026-06-10 06:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/73ca6b57bbc1288754443ad72c4c0ad272f2a718d4f11348c3725a96054709e2/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825717": [
        {
            "ioc_value": "http://ciuzdaw.shop:7673",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:38",
            "last_seen_utc": "2026-06-10 06:46:35",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9cedc639b3247beecb25b28b5f4a12e5586ed46db140a5f1c09ca16f2781461b/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825716": [
        {
            "ioc_value": "http://cabaretcorporation.com:9432",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:35",
            "last_seen_utc": "2026-06-10 06:46:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/813aeb7a3cac0a916501d370ad1f350a56b4bb36835f52b3cc92d624da728674/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825715": [
        {
            "ioc_value": "http://brazpi.shop:3849",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:34",
            "last_seen_utc": "2026-06-10 06:46:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/b07675273cf972fa942b988a087cf85e52eb6f4451248e49dd6827c96ac83454/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825714": [
        {
            "ioc_value": "http://baxe.pics:48261",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:32",
            "last_seen_utc": "2026-08-01 20:49:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/101eb6d5c3c5be140c681e1d23b86783f40e81552db897e253e2c29609ec11cd/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825713": [
        {
            "ioc_value": "http://ayrseu.shop:7673",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:31",
            "last_seen_utc": "2026-06-10 06:46:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5a5b337353b1a5faa9a3a18887de1235426da743fb6d77885c78b03db47b12cb/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825712": [
        {
            "ioc_value": "http://ablackb.shop:5321",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:19:27",
            "last_seen_utc": "2026-06-10 06:46:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e03dd36f22e24a323f8db11ba3a220786ea14c5617538b5433911e5a6d1f66a3/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825711": [
        {
            "ioc_value": "http://youngel.biz:8768",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:18:59",
            "last_seen_utc": "2026-08-01 04:18:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ac187a01e34ba3ba6bd51326390e19f58e2de2c82646f34017628eaa9198f082/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825710": [
        {
            "ioc_value": "http://myrtler.biz:9549",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:18:57",
            "last_seen_utc": "2026-07-30 10:31:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ac187a01e34ba3ba6bd51326390e19f58e2de2c82646f34017628eaa9198f082/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825709": [
        {
            "ioc_value": "http://manoptimal.com:5789",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:18:56",
            "last_seen_utc": "2026-06-10 06:47:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ac187a01e34ba3ba6bd51326390e19f58e2de2c82646f34017628eaa9198f082/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825708": [
        {
            "ioc_value": "http://cofasl.shop:6590",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-10 06:18:55",
            "last_seen_utc": "2026-06-10 06:46:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d1fcd185dd9b18bd39082dd15414d70eec8324171d4583185634204c992a1ef1/",
            "tags": "remus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825707": [
        {
            "ioc_value": "151.247.193.18:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-10 06:08:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/81448c97aae2455ced9cfc30883f7d67890d1faa03309344f521345dd79064d2/",
            "tags": "StealeriumStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825703": [
        {
            "ioc_value": "8.163.59.20:8008",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 06:00:25",
            "last_seen_utc": "2026-09-01 02:47:10",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825701": [
        {
            "ioc_value": "jxsofena.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 05:44:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825619": [
        {
            "ioc_value": "154.29.73.187:27615",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:38:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1825629": [
        {
            "ioc_value": "103.190.67.166:84",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 05:38:02",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825630": [
        {
            "ioc_value": "175.229.125.81:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-10 05:38:02",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825637": [
        {
            "ioc_value": "linkedlet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-10 05:38:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://app.any.run/tasks/0863c7db-88a7-4b80-8303-39c00a451f7f",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1825638": [
        {
            "ioc_value": "45.198.224.22:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:37:59",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "mirai,payload-host,rotator",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825639": [
        {
            "ioc_value": "217.154.61.249:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-10 05:37:58",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825659": [
        {
            "ioc_value": "822d5678d27c0da20502968808cfa63ac4e3fdb58620fadfd0c9f4ccfe3a6625",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-10 05:37:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3861871/",
            "tags": "MSIL,Quasar,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825641": [
        {
            "ioc_value": "175.245.184.150:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-10 05:37:57",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825660": [
        {
            "ioc_value": "217.60.195.56:61545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-10 05:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/822d5678d27c0da20502968808cfa63ac4e3fdb58620fadfd0c9f4ccfe3a6625",
            "tags": "C2,Quasar,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825661": [
        {
            "ioc_value": "32a90f26b236643efb6607fc8a02536e1df35c699ac04baee062300401b4df26",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.venom",
            "malware_alias": null,
            "malware_printable": "Venom RAT",
            "first_seen_utc": "2026-06-10 05:37:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3860887/",
            "tags": "MSIL,RAT,VenomRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825668": [
        {
            "ioc_value": "91ed53ad7977c0fa482c5a58c0590512a621852fd5bc4303e5bf209a1117b30d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 05:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/f800379c8b3b0dbf95d0cc27b27e2ddaf902203d7eae4c4320d6fd8ebd9d4aac",
            "tags": "Azalea,Azday1,duckdns,OriginLogger",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825669": [
        {
            "ioc_value": "f800379c8b3b0dbf95d0cc27b27e2ddaf902203d7eae4c4320d6fd8ebd9d4aac",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-10 05:37:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/f800379c8b3b0dbf95d0cc27b27e2ddaf902203d7eae4c4320d6fd8ebd9d4aac",
            "tags": "Azalea,Azday1,duckdns,OriginLogger",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825680": [
        {
            "ioc_value": "45.9.73.97:3389",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 05:37:55",
            "last_seen_utc": null,
            "confidence_level": 96,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825687": [
        {
            "ioc_value": "185.89.120.225:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-10 05:37:54",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825689": [
        {
            "ioc_value": "foreskin.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:37:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "katana",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825690": [
        {
            "ioc_value": "aaronweintraubwantstobecyberpolice.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:37:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "katana",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825691": [
        {
            "ioc_value": "aaronweintraubfromcogent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:37:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "katana",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825692": [
        {
            "ioc_value": "ilikecircumcised.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:37:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "katana",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825693": [
        {
            "ioc_value": "plsleavemealone.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-10 05:37:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "katana",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825700": [
        {
            "ioc_value": "rg6u6kf7.pokeray.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 05:35:10",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825699": [
        {
            "ioc_value": "yfzhr93v.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 05:24:23",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825698": [
        {
            "ioc_value": "q43myq5p.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 05:24:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825697": [
        {
            "ioc_value": "hremhf.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 05:19:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825696": [
        {
            "ioc_value": "nllxfcjp.shartbandi.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 05:14:28",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825688": [
        {
            "ioc_value": "qnsvnvkk.shartbandi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 04:36:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825686": [
        {
            "ioc_value": "vvoplgpy.bet303.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 04:01:59",
            "last_seen_utc": "2026-07-05 08:09:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825679": [
        {
            "ioc_value": "8.219.158.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 03:45:50",
            "last_seen_utc": "2026-07-15 08:48:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825678": [
        {
            "ioc_value": "218.244.142.4:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 03:45:38",
            "last_seen_utc": "2026-08-28 08:09:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825676": [
        {
            "ioc_value": "156.234.114.122:8821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 03:45:33",
            "last_seen_utc": "2026-07-14 10:48:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825677": [
        {
            "ioc_value": "156.234.211.220:8821",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 03:45:33",
            "last_seen_utc": "2026-07-14 10:48:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825675": [
        {
            "ioc_value": "google.dns-1.help",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-10 03:45:13",
            "last_seen_utc": "2026-07-19 14:46:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825674": [
        {
            "ioc_value": "8zktknmf.shirbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 03:24:09",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825673": [
        {
            "ioc_value": "8hjdsu0b.shirbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 03:23:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825672": [
        {
            "ioc_value": "vqfqrqgv.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 03:23:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825671": [
        {
            "ioc_value": "hylfko.pishbinibet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 03:14:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825670": [
        {
            "ioc_value": "46z2kbbw.shartplus.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 03:14:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825667": [
        {
            "ioc_value": "lxhcemuk.wrfc8.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 02:40:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825666": [
        {
            "ioc_value": "qpemifog.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 02:02:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825658": [
        {
            "ioc_value": "izlayynu.winsportiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 01:27:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825657": [
        {
            "ioc_value": "yhsgyl.pishbinisite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 01:18:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825656": [
        {
            "ioc_value": "o6k7lcz5.shartbazi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 01:15:08",
            "last_seen_utc": "2026-06-11 10:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825655": [
        {
            "ioc_value": "m1napmzv.shartbazi.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 01:13:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825654": [
        {
            "ioc_value": "jqjvvqpy.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 00:44:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825653": [
        {
            "ioc_value": "5ronk1lr.pointsbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 00:34:28",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825652": [
        {
            "ioc_value": "dxssnlzn.penalty.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-10 00:07:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825647": [
        {
            "ioc_value": "130.94.17.180:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 23:45:35",
            "last_seen_utc": "2026-07-11 08:46:44",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825646": [
        {
            "ioc_value": "7kblrgq1.shartbazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 23:33:09",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825645": [
        {
            "ioc_value": "h537srko.shartbazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 23:31:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825644": [
        {
            "ioc_value": "mnhunimj.persian.sex",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 23:28:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825643": [
        {
            "ioc_value": "bjyqjg.onlineshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 23:17:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825642": [
        {
            "ioc_value": "w02eza6e.plinkoirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 23:16:41",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825640": [
        {
            "ioc_value": "epxigqr.tagat120art.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 22:49:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825636": [
        {
            "ioc_value": "swzbdpb.poker-online.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 22:10:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825631": [
        {
            "ioc_value": "198.46.199.110:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 21:45:51",
            "last_seen_utc": "2026-08-24 08:48:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825628": [
        {
            "ioc_value": "wwwydzo.penaltibazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 21:32:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825627": [
        {
            "ioc_value": "56c1ukt9.shart303.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 21:32:43",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825626": [
        {
            "ioc_value": "iv63jnsk.shart303.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 21:31:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825625": [
        {
            "ioc_value": "ppwbda.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 21:13:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825621": [
        {
            "ioc_value": "srninwh.one1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 20:53:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825620": [
        {
            "ioc_value": "hqtzavl.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 20:15:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825614": [
        {
            "ioc_value": "45.87.53.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 20:00:17",
            "last_seen_utc": "2026-08-28 08:08:47",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825613": [
        {
            "ioc_value": "46.151.182.16:1011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 19:44:51",
            "last_seen_utc": "2026-09-01 02:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825612": [
        {
            "ioc_value": "202.73.4.137:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-09 19:43:58",
            "last_seen_utc": "2026-07-10 08:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825611": [
        {
            "ioc_value": "2.27.5.234:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 19:43:56",
            "last_seen_utc": "2026-07-09 18:44:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825610": [
        {
            "ioc_value": "2.26.75.243:9521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 19:43:55",
            "last_seen_utc": "2026-07-19 18:44:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825609": [
        {
            "ioc_value": "198.23.177.222:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 19:43:54",
            "last_seen_utc": "2026-07-12 08:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825608": [
        {
            "ioc_value": "182.23.2.163:15646",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 19:43:40",
            "last_seen_utc": "2026-07-09 18:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825607": [
        {
            "ioc_value": "167.160.186.140:62738",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-09 19:43:30",
            "last_seen_utc": "2026-08-07 18:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825606": [
        {
            "ioc_value": "162.35.161.101:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.chaos",
            "malware_alias": "FakeRyuk,RyukJoke,Yashma",
            "malware_printable": "Chaos",
            "first_seen_utc": "2026-06-09 19:43:28",
            "last_seen_utc": "2026-07-10 08:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CHAOS,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825605": [
        {
            "ioc_value": "107.172.135.27:14644",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 19:43:08",
            "last_seen_utc": "2026-07-12 08:43:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825604": [
        {
            "ioc_value": "104.168.0.29:52203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 19:43:06",
            "last_seen_utc": "2026-08-02 18:43:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825603": [
        {
            "ioc_value": "scvnivk.sabaad724.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 19:37:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825602": [
        {
            "ioc_value": "autoupdaters.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 19:34:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825601": [
        {
            "ioc_value": "autoupdatethis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 19:34:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825600": [
        {
            "ioc_value": "autoupdatet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 19:34:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825599": [
        {
            "ioc_value": "updateocean.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 19:34:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825598": [
        {
            "ioc_value": "jcrlq1o7.sabzbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 19:31:49",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825597": [
        {
            "ioc_value": "py3z6vqk.sabzbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 19:30:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825596": [
        {
            "ioc_value": "tmeypq.perfectgame.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 19:12:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825595": [
        {
            "ioc_value": "rywwahl.romabet90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 18:58:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825593": [
        {
            "ioc_value": "pilotkadomen.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 18:51:52",
            "last_seen_utc": "2026-06-29 13:26:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825594": [
        {
            "ioc_value": "nihaoclub.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 18:51:52",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825592": [
        {
            "ioc_value": "178.16.55.28:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 18:46:14",
            "last_seen_utc": "2026-06-10 02:45:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03af9bc830291a80063b30f4c027136ab55d5b6e86f13ebde6796650a7f3dd78/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825591": [
        {
            "ioc_value": "az2030port.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 18:45:57",
            "last_seen_utc": "2026-06-10 02:44:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/03af9bc830291a80063b30f4c027136ab55d5b6e86f13ebde6796650a7f3dd78/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825586": [
        {
            "ioc_value": "3cea9df086d111a71c24822aa626380105347dd6d458ae7971557684bf12e097",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.xtinyloader",
            "malware_alias": null,
            "malware_printable": "XTinyLoader",
            "first_seen_utc": "2026-06-09 18:45:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3861818/",
            "tags": "Amadey,loader,XTinyLoader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825587": [
        {
            "ioc_value": "34f0612b6ceff640754500f6c0f4d70e385db4cbe1807fa6974808e9b66cbb96",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-09 18:45:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3861859/",
            "tags": "Amadey,keylogger,NanoCore,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825588": [
        {
            "ioc_value": "82.22.77.179:54984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-09 18:45:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3861859/",
            "tags": "c2,NanoCore,RAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825590": [
        {
            "ioc_value": "38.49.217.157:22443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-09 18:41:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825589": [
        {
            "ioc_value": "update-svc-4853.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 18:40:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f1c7d246482af5e1100cf72da30858e48f51d63550ef7023cfa99cb8602a688e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825585": [
        {
            "ioc_value": "spasopro.at",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-09 18:36:01",
            "last_seen_utc": "2026-07-08 23:48:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=spasopro.at",
            "tags": "Amadey,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825583": [
        {
            "ioc_value": "mirroflobsny.sytes.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-09 18:30:41",
            "last_seen_utc": "2026-08-15 17:47:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4cd298a3197f1283ef907976ac01b387dc9a44c93432c3a900ba511f48c03523/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825584": [
        {
            "ioc_value": "wirroflobsny.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-09 18:30:41",
            "last_seen_utc": "2026-08-15 17:47:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4cd298a3197f1283ef907976ac01b387dc9a44c93432c3a900ba511f48c03523/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825582": [
        {
            "ioc_value": "stringcard.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-09 18:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825581": [
        {
            "ioc_value": "xepjlus.riverpoker1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 18:20:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825567": [
        {
            "ioc_value": "90fe8c831a681c8c1dc77a271bb417fd52479fe6fc79d6cb9b7ffaf13f801f93",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-09 18:18:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/6af715b5105d6d16e02ee6d1de14410a8a0fd2fb3d7b752bb24be25105fac0b2",
            "tags": "ClickFix,FakeCaptcha,KongTuke",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825568": [
        {
            "ioc_value": "6af715b5105d6d16e02ee6d1de14410a8a0fd2fb3d7b752bb24be25105fac0b2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-09 18:18:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/6af715b5105d6d16e02ee6d1de14410a8a0fd2fb3d7b752bb24be25105fac0b2",
            "tags": "ClickFix,FakeCaptcha,KongTuke",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825569": [
        {
            "ioc_value": "http://spasopro.at/Lsge63sd3/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-09 18:18:02",
            "last_seen_utc": "2026-06-12 15:45:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "amadey,c2,e7b4fe",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1825571": [
        {
            "ioc_value": "https://amazonattention.com/verify",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 18:18:02",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/amazonattention.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825580": [
        {
            "ioc_value": "1tzunno5.onexboro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 18:16:13",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825579": [
        {
            "ioc_value": "193.93.193.92:8572",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-09 18:14:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825578": [
        {
            "ioc_value": "147.45.77.20:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-09 18:12:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825577": [
        {
            "ioc_value": "155.94.163.11:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-09 18:11:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825576": [
        {
            "ioc_value": "149.56.95.179:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 18:10:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825575": [
        {
            "ioc_value": "145.239.54.167:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 18:10:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825574": [
        {
            "ioc_value": "pssoduvnzud.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.servhelper",
            "malware_alias": null,
            "malware_printable": "ServHelper",
            "first_seen_utc": "2026-06-09 18:08:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ServHelper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825572": [
        {
            "ioc_value": "dsfamsi4b.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.servhelper",
            "malware_alias": null,
            "malware_printable": "ServHelper",
            "first_seen_utc": "2026-06-09 18:08:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ServHelper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825573": [
        {
            "ioc_value": "asfjjasguasus.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.servhelper",
            "malware_alias": null,
            "malware_printable": "ServHelper",
            "first_seen_utc": "2026-06-09 18:08:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ServHelper",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825570": [
        {
            "ioc_value": "http://196.251.107.104/geter/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.xtinyloader",
            "malware_alias": null,
            "malware_printable": "XTinyLoader",
            "first_seen_utc": "2026-06-09 18:00:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3cea9df086d111a71c24822aa626380105347dd6d458ae7971557684bf12e097/",
            "tags": "XTinyLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825566": [
        {
            "ioc_value": "lrucuzu.rika90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 17:41:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825561": [
        {
            "ioc_value": "six.lxb.monster",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825562": [
        {
            "ioc_value": "six.xiaoshabi.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825563": [
        {
            "ioc_value": "xmrs.wulifang.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825564": [
        {
            "ioc_value": "tes.dashabi.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825565": [
        {
            "ioc_value": "tes.xiaoshabi.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:39:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825559": [
        {
            "ioc_value": "cat.xiaoshabi.nl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:38:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825560": [
        {
            "ioc_value": "xiaoshabi.xiaoshabi.cc",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:38:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/33f33aaad09da262eb33c93e4a874bc9b0d643abeaf0947a6e516a89005c8943/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825558": [
        {
            "ioc_value": "z08omixf.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 17:31:29",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825557": [
        {
            "ioc_value": "qu3v65kt.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 17:29:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825556": [
        {
            "ioc_value": "gabuys.perspolisbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 17:12:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825555": [
        {
            "ioc_value": "updatecurrent.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:06:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825554": [
        {
            "ioc_value": "uptodatehere.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 17:06:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825553": [
        {
            "ioc_value": "vsnsopv.winsportiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 17:03:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825548": [
        {
            "ioc_value": "fanavarietelat.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 16:50:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "bash,ClearFake,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825547": [
        {
            "ioc_value": "ehtemalatdelavar.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 16:46:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,cmd,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825517": [
        {
            "ioc_value": "https://nihaoclub.asia/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:05",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/nihaoclub.asia",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825520": [
        {
            "ioc_value": "82.198.227.229:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825521": [
        {
            "ioc_value": "https://lab99.sbs/api/terminal/script",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825522": [
        {
            "ioc_value": "https://lab99.sbs/api/terminal/connect-runner",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825523": [
        {
            "ioc_value": "https://lab99.sbs/api/terminal/windows",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825524": [
        {
            "ioc_value": "https://lab99.sbs/api/terminal/bootstrap",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825525": [
        {
            "ioc_value": "lab99.sbs",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825526": [
        {
            "ioc_value": "144.172.94.202:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825528": [
        {
            "ioc_value": "brezo.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:40:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825527": [
        {
            "ioc_value": "216.126.225.243:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825529": [
        {
            "ioc_value": "admin.brezo.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825530": [
        {
            "ioc_value": "hahaios.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825531": [
        {
            "ioc_value": "b8e9bbde0e8ce2781c5c829919461ee232b82b81e3be3a6a386cf10ed6f35a21",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825532": [
        {
            "ioc_value": "0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825533": [
        {
            "ioc_value": "48f2a3bfb7a70b97875e56d932ada0d975cd5ee154a99caf7d93550275a1548a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825534": [
        {
            "ioc_value": "c7a24e1fc68b7233e1c93c02409e9429a1ea5cf0662eb4cd03364373df7d7044",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825535": [
        {
            "ioc_value": "51e1f3a97629e8db50ca1f9a0b68c019e74c07ce5209d5eefd4a2e3f4fe62869",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825536": [
        {
            "ioc_value": "068505fab1dc1b784ddc845c9eeeba8e04da512383ecd55a7a3d076879656393",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 16:39:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/0b45d1520d0a48bcdac3ce16a3b5000dffd954abbdb1723d9215b35c554f48bb",
            "tags": "ContagiousInterview,daam-demo,DPRK,FamousChollima,OtterCookie",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825541": [
        {
            "ioc_value": "185.190.189.232:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 16:39:50",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1055,t1105",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825542": [
        {
            "ioc_value": "http://check-api.help/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 16:39:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825544": [
        {
            "ioc_value": "http://carogra.biz:4219/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 16:39:49",
            "last_seen_utc": "2026-07-30 10:31:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825546": [
        {
            "ioc_value": "prmozcj.persian.sex",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 16:24:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825543": [
        {
            "ioc_value": "ckejpbj.one1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 15:59:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825540": [
        {
            "ioc_value": "ysqxkgi.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 15:46:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825539": [
        {
            "ioc_value": "updatemsnow.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 15:43:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825538": [
        {
            "ioc_value": "jegtdzjo.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 15:30:53",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825537": [
        {
            "ioc_value": "npbb3ds2.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 15:29:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825519": [
        {
            "ioc_value": "disxya.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 15:11:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825518": [
        {
            "ioc_value": "izmxgmj.pasoor11.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 15:04:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825512": [
        {
            "ioc_value": "oxtumf.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:59:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825511": [
        {
            "ioc_value": "uktbpnp.sabaad724.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:54:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825510": [
        {
            "ioc_value": "sabaad724.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:54:14",
            "last_seen_utc": "2026-06-09 19:36:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825509": [
        {
            "ioc_value": "uckrcup.romabet90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:48:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825508": [
        {
            "ioc_value": "romabet90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:45:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825507": [
        {
            "ioc_value": "brbyxsj.riverpoker1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:36:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825506": [
        {
            "ioc_value": "riverpoker1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:33:39",
            "last_seen_utc": "2026-06-09 14:34:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825505": [
        {
            "ioc_value": "qenkzpp.rika90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:32:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825504": [
        {
            "ioc_value": "rika90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 14:31:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825498": [
        {
            "ioc_value": "ylcfeow.penalty.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:54:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825497": [
        {
            "ioc_value": "server.activeworkshops.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 13:40:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/54f31ce59673bcee805a240b73cddfa6b2966c034e17776697cab82106dd99cd/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825444": [
        {
            "ioc_value": "185.193.8.132:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-09 13:38:07",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-v13,nation-state-hunter,t1071_001,t1573_002",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825446": [
        {
            "ioc_value": "178.105.144.231:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-09 13:38:06",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825447": [
        {
            "ioc_value": "dataramara.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 13:38:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65900750c4bcf44855e5ebf9548aaaa29f9a6abd5141769f617b35fd096bb95e/",
            "tags": "c2,WallStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1825458": [
        {
            "ioc_value": "coraline-cheats.pw",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 13:38:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1825476": [
        {
            "ioc_value": "167.172.39.240:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-09 13:38:05",
            "last_seen_utc": "2026-06-15 11:55:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1825477": [
        {
            "ioc_value": "146.190.19.80:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-09 13:38:04",
            "last_seen_utc": "2026-06-15 11:55:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1825482": [
        {
            "ioc_value": "3.146.93.253:55503",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.vo1d",
            "malware_alias": null,
            "malware_printable": "vo1d",
            "first_seen_utc": "2026-06-09 13:38:04",
            "last_seen_utc": "2026-08-25 10:44:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "redirector,Vo1d",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1825496": [
        {
            "ioc_value": "09ddpfx9.parspoker.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:28:13",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825495": [
        {
            "ioc_value": "mjtcvp.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:24:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825494": [
        {
            "ioc_value": "tfqpaye.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:19:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825493": [
        {
            "ioc_value": "a98nkya7.onexprobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:16:16",
            "last_seen_utc": "2026-06-11 10:05:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825492": [
        {
            "ioc_value": "zonpvb.perfectgame.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:14:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825491": [
        {
            "ioc_value": "xtrqgv.perspolisbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 13:08:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825483": [
        {
            "ioc_value": "sedxjax.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 12:31:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825479": [
        {
            "ioc_value": "blkfazi.xenicalby6.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 11:52:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825478": [
        {
            "ioc_value": "nihaoclub.asia",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:47:02",
            "last_seen_utc": "2026-06-30 21:58:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825475": [
        {
            "ioc_value": "w18yfaze.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 11:26:40",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825474": [
        {
            "ioc_value": "veu42xr9.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 11:26:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825473": [
        {
            "ioc_value": "zlbcjre.wrfc8.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 11:14:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825472": [
        {
            "ioc_value": "gfmuomz.pinbahiis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 11:09:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825471": [
        {
            "ioc_value": "jbwjdp.rial.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 11:06:47",
            "last_seen_utc": "2026-06-10 08:57:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825470": [
        {
            "ioc_value": "clhfgcomacdn.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825468": [
        {
            "ioc_value": "hasmeverdcdn.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825469": [
        {
            "ioc_value": "hftplcnsns.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825467": [
        {
            "ioc_value": "srtydnnc.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825466": [
        {
            "ioc_value": "bhfgtrns-js.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825464": [
        {
            "ioc_value": "claufancdn.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825465": [
        {
            "ioc_value": "shkcinnc.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825463": [
        {
            "ioc_value": "japanpatagonia.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:01:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825461": [
        {
            "ioc_value": "showmecoffee.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:01:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825462": [
        {
            "ioc_value": "coffeefrombrazil.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:01:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825460": [
        {
            "ioc_value": "legitmobile.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:01:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825459": [
        {
            "ioc_value": "tommysdemons.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 11:01:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825452": [
        {
            "ioc_value": "xdavnode.pro",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 10:59:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825451": [
        {
            "ioc_value": "fithusbandplan.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 10:52:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825450": [
        {
            "ioc_value": "profilab.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 10:51:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825449": [
        {
            "ioc_value": "sampatiguide.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 10:51:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825448": [
        {
            "ioc_value": "xcoffeeteaandwatherx.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 10:51:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825445": [
        {
            "ioc_value": "salppir.red90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 10:30:20",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825438": [
        {
            "ioc_value": "whyldsf.rc395.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:51:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825437": [
        {
            "ioc_value": "rc395.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:51:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825435": [
        {
            "ioc_value": "204.194.54.9:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 09:44:07",
            "last_seen_utc": "2026-07-09 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825436": [
        {
            "ioc_value": "204.194.54.9:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 09:44:07",
            "last_seen_utc": "2026-07-09 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825434": [
        {
            "ioc_value": "204.194.54.9:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 09:44:06",
            "last_seen_utc": "2026-07-09 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825433": [
        {
            "ioc_value": "2.26.75.248:2428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 09:44:03",
            "last_seen_utc": "2026-07-09 18:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825432": [
        {
            "ioc_value": "2.26.75.241:4509",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 09:44:02",
            "last_seen_utc": "2026-07-09 18:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825430": [
        {
            "ioc_value": "194.11.246.191:4404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 09:43:58",
            "last_seen_utc": "2026-07-09 18:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825431": [
        {
            "ioc_value": "194.11.246.191:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-09 09:43:58",
            "last_seen_utc": "2026-07-09 18:44:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825429": [
        {
            "ioc_value": "182.23.2.163:10616",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 09:43:43",
            "last_seen_utc": "2026-07-09 08:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825428": [
        {
            "ioc_value": "175.178.123.42:28443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 09:43:39",
            "last_seen_utc": "2026-07-18 08:44:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825427": [
        {
            "ioc_value": "170.62.130.191:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-09 09:43:35",
            "last_seen_utc": "2026-07-21 18:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825426": [
        {
            "ioc_value": "fancystraits.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 09:37:43",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825425": [
        {
            "ioc_value": "e3giv37r.pokerpars.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:27:05",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825424": [
        {
            "ioc_value": "pokerpars.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:26:19",
            "last_seen_utc": "2026-06-09 09:26:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825422": [
        {
            "ioc_value": "xwwitjs.rayonbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:14:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825421": [
        {
            "ioc_value": "rayonbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:12:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825420": [
        {
            "ioc_value": "demfmb.restaurantguideaarhus.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 09:09:35",
            "last_seen_utc": "2026-07-10 07:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825410": [
        {
            "ioc_value": "gwjjko.onlineshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:54:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825409": [
        {
            "ioc_value": "gyayod.pishbinisite.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:45:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825408": [
        {
            "ioc_value": "gdenwcw.rabonaabet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:38:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825407": [
        {
            "ioc_value": "pishbinipartners.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:34:25",
            "last_seen_utc": "2026-06-09 08:34:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825406": [
        {
            "ioc_value": "rabonaabet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:33:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825405": [
        {
            "ioc_value": "promo.tennis",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:27:59",
            "last_seen_utc": "2026-06-09 08:28:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825404": [
        {
            "ioc_value": "cafdfe.pishbinihoshmand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:24:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825403": [
        {
            "ioc_value": "pishbinihoshmand.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:23:37",
            "last_seen_utc": "2026-06-09 08:23:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825402": [
        {
            "ioc_value": "dgxbf5rv.onexfa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:16:21",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825401": [
        {
            "ioc_value": "lplhoo.pishbinigame.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:14:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825400": [
        {
            "ioc_value": "pishbinigame.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:13:49",
            "last_seen_utc": "2026-06-09 08:13:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825399": [
        {
            "ioc_value": "mbigpi.pishbinifoori.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:09:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825398": [
        {
            "ioc_value": "pishbinifoori.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 08:04:11",
            "last_seen_utc": "2026-06-09 08:04:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825393": [
        {
            "ioc_value": "jgjuwx.pishbiniclass.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:55:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825392": [
        {
            "ioc_value": "pishbiniclass.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:55:34",
            "last_seen_utc": "2026-06-09 07:55:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825391": [
        {
            "ioc_value": "rcyrnur.pokerprado.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:50:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825390": [
        {
            "ioc_value": "pokerprado.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:49:12",
            "last_seen_utc": "2026-06-09 07:49:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825389": [
        {
            "ioc_value": "r2qz0qa2.poker-online.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:26:39",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825388": [
        {
            "ioc_value": "9r6xw7w2.poker-online.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:25:13",
            "last_seen_utc": "2026-06-09 22:10:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825386": [
        {
            "ioc_value": "rmipclt.penality.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 07:11:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825385": [
        {
            "ioc_value": "85.121.4.107:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 07:07:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-6",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825379": [
        {
            "ioc_value": "checkphoto-bookin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 06:42:56",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825380": [
        {
            "ioc_value": "keysrace.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-09 06:42:56",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825378": [
        {
            "ioc_value": "emyynld.pasur21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 06:37:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825377": [
        {
            "ioc_value": "89.40.31.72:6000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-09 06:30:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9dc57e253a48be197c9d9e6df5127bdf6dc126d2c79abfc5aa14ca4a1f62574c/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825376": [
        {
            "ioc_value": "breakthroughgee.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 06:30:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1ed84ce9d187761f9d504f78e1c6645472d0af2d6c35171c2123ddc219cab4eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825375": [
        {
            "ioc_value": "t0loka.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 06:22:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825373": [
        {
            "ioc_value": "51.195.111.212:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:30",
            "last_seen_utc": "2026-07-21 05:35:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825374": [
        {
            "ioc_value": "217.60.241.14:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:30",
            "last_seen_utc": "2026-08-08 17:35:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825366": [
        {
            "ioc_value": "51.195.111.212:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-07-11 05:55:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825367": [
        {
            "ioc_value": "217.60.241.39:427",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-07-02 11:59:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825368": [
        {
            "ioc_value": "217.60.241.14:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825369": [
        {
            "ioc_value": "51.195.111.212:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-07-21 05:35:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825370": [
        {
            "ioc_value": "217.60.241.14:418",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825371": [
        {
            "ioc_value": "51.195.111.212:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-07-13 17:07:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825372": [
        {
            "ioc_value": "217.60.241.14:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:29",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825362": [
        {
            "ioc_value": "217.60.241.17:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:28",
            "last_seen_utc": "2026-08-22 10:12:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825363": [
        {
            "ioc_value": "217.60.241.39:428",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:28",
            "last_seen_utc": "2026-07-02 11:59:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825364": [
        {
            "ioc_value": "51.195.111.212:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:28",
            "last_seen_utc": "2026-07-21 05:35:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825365": [
        {
            "ioc_value": "217.60.241.39:430",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825360": [
        {
            "ioc_value": "83.142.209.228:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:27",
            "last_seen_utc": "2026-06-14 11:58:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825361": [
        {
            "ioc_value": "217.60.241.39:424",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:27",
            "last_seen_utc": "2026-06-25 05:28:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825357": [
        {
            "ioc_value": "83.142.209.228:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:26",
            "last_seen_utc": "2026-06-14 11:58:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825358": [
        {
            "ioc_value": "217.60.241.17:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:26",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825359": [
        {
            "ioc_value": "217.60.241.39:420",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:26",
            "last_seen_utc": "2026-06-25 05:28:27",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825351": [
        {
            "ioc_value": "217.60.241.17:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:25",
            "last_seen_utc": "2026-08-22 10:12:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825352": [
        {
            "ioc_value": "83.142.209.228:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:25",
            "last_seen_utc": "2026-06-22 07:00:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825353": [
        {
            "ioc_value": "217.60.241.39:425",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:25",
            "last_seen_utc": "2026-06-22 07:00:11",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825354": [
        {
            "ioc_value": "83.142.209.228:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:25",
            "last_seen_utc": "2026-06-14 11:58:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825355": [
        {
            "ioc_value": "217.60.241.39:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:25",
            "last_seen_utc": "2026-07-02 11:59:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825356": [
        {
            "ioc_value": "217.60.241.17:431",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:25",
            "last_seen_utc": "2026-08-27 07:52:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825348": [
        {
            "ioc_value": "217.60.241.39:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:24",
            "last_seen_utc": "2026-06-22 07:00:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825349": [
        {
            "ioc_value": "217.60.241.17:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:24",
            "last_seen_utc": "2026-08-27 07:52:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825350": [
        {
            "ioc_value": "83.142.209.228:419",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-09 06:21:24",
            "last_seen_utc": "2026-06-22 07:00:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825346": [
        {
            "ioc_value": "nkfjdum.pasoor11.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:55:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825345": [
        {
            "ioc_value": "hxmhpw.pishbinibet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:55:01",
            "last_seen_utc": "2026-06-09 05:55:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825344": [
        {
            "ioc_value": "sfdwdmq.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:53:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825343": [
        {
            "ioc_value": "moisca.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:52:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825342": [
        {
            "ioc_value": "carogra.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:49:37",
            "last_seen_utc": "2026-07-27 15:54:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825341": [
        {
            "ioc_value": "brazpi.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:42:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825337": [
        {
            "ioc_value": "godsblueprintforyourmarriage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825338": [
        {
            "ioc_value": "lmc014command.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825339": [
        {
            "ioc_value": "gohan-suki.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825340": [
        {
            "ioc_value": "eurogulf-group.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-09 05:42:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825336": [
        {
            "ioc_value": "154.29.73.187:56523",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-09 05:39:03",
            "last_seen_utc": "2026-06-09 07:00:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/25f76ee983f1db74229321e36a62323007d5777c1cfd9350c80b58aef874355c/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825335": [
        {
            "ioc_value": "http://kidos-bank.ru/index.htm",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825334": [
        {
            "ioc_value": "http://kaspersky.ru/index.htm",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825332": [
        {
            "ioc_value": "http://parex-bank.ru/index.htm",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825333": [
        {
            "ioc_value": "http://gaz-prom.ru/index.htm",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825329": [
        {
            "ioc_value": "http://color-bank.ru/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825330": [
        {
            "ioc_value": "http://adult-empire.com/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825331": [
        {
            "ioc_value": "http://virus-list.com/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825328": [
        {
            "ioc_value": "http://kaspersky.ru/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825326": [
        {
            "ioc_value": "http://ros-neftbank.ru/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825327": [
        {
            "ioc_value": "http://master-x.com/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-09 05:27:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f34e1af5ffacee0810fa07121f09769d796e619e868aa20b317dbc9d72578b4/",
            "tags": "Berbew",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825325": [
        {
            "ioc_value": "ojnkoxdg.pokerbazi.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:25:48",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825324": [
        {
            "ioc_value": "pokerbazi.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:25:14",
            "last_seen_utc": "2026-06-09 05:25:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825323": [
        {
            "ioc_value": "83.168.110.191:1336",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-09 05:24:33",
            "last_seen_utc": "2026-06-27 05:08:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e7c299e0cc1dddaddae30572983c0d1fdf3b1b9f4fba6d8ad3d46299038d2405/",
            "tags": "Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825322": [
        {
            "ioc_value": "hnainyw.ninjafruitcubes.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:18:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825246": [
        {
            "ioc_value": "associationaudrey.fr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-09 05:11:29",
            "last_seen_utc": "2026-08-14 08:56:27",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "compromised,etherhiding,Polygon,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825247": [
        {
            "ioc_value": "attyx.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-09 05:11:28",
            "last_seen_utc": "2026-08-28 11:41:54",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "compromised,etherhiding,Polygon,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825258": [
        {
            "ioc_value": "noscalpelvasectomy.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-09 05:11:12",
            "last_seen_utc": "2026-08-26 21:48:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "compromised,etherhiding,Polygon,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825263": [
        {
            "ioc_value": "sharonneedles.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-09 05:11:07",
            "last_seen_utc": "2026-08-14 08:58:31",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "compromised,etherhiding,Polygon,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825265": [
        {
            "ioc_value": "swojem.pl",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-09 05:11:06",
            "last_seen_utc": "2026-08-14 08:58:33",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "compromised,etherhiding,Polygon,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825266": [
        {
            "ioc_value": "thellio.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-09 05:11:05",
            "last_seen_utc": "2026-08-14 08:58:35",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "compromised,etherhiding,Polygon,WordPress",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825293": [
        {
            "ioc_value": "8.219.158.30:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 05:11:01",
            "last_seen_utc": "2026-07-15 08:48:00",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "45102,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1825294": [
        {
            "ioc_value": "196.75.218.37:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-09 05:11:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "36903,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1825316": [
        {
            "ioc_value": "19678a2d474affb5164942a842488275dafc988bab2e5918e38422f152ecc66b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:11:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/19678a2d474affb5164942a842488275dafc988bab2e5918e38422f152ecc66b",
            "tags": "ClearFake,ClickFix,loader,rundll32,WebDAV",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825317": [
        {
            "ioc_value": "https://flzocge.penality.bet/083442ba-5bf1-4cc5-8440-04740f3ca9be/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:10:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/penality.bet",
            "tags": "ClearFake,ClickFix,rundll32,WebDAV",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825318": [
        {
            "ioc_value": "flzocge.penality.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 05:10:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/domain/penality.bet",
            "tags": "ClearFake,ClickFix,rundll32,WebDAV",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1825321": [
        {
            "ioc_value": "194.38.138.155:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 05:10:57",
            "last_seen_utc": null,
            "confidence_level": 94,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,erebus-wraith,nation-state-hunter,t1059_003,t1071_001",
            "anonymous": 0,
            "reporter": "Erebu"
        }
    ],
    "1825243": [
        {
            "ioc_value": "192.3.176.232:4099",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-09 05:10:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/skocherhan/status/2064097690796032054",
            "tags": null,
            "anonymous": 0,
            "reporter": "skocherhan"
        }
    ],
    "1825237": [
        {
            "ioc_value": "webflare.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 05:10:52",
            "last_seen_utc": "2026-06-29 13:39:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825238": [
        {
            "ioc_value": "berlof.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 05:10:51",
            "last_seen_utc": "2026-07-01 12:49:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825239": [
        {
            "ioc_value": "firazit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 05:10:50",
            "last_seen_utc": "2026-07-01 12:49:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825240": [
        {
            "ioc_value": "macerapindasi.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 05:10:49",
            "last_seen_utc": "2026-06-21 16:08:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825241": [
        {
            "ioc_value": "servupdt.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-09 05:10:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825320": [
        {
            "ioc_value": "kodhfeq.one1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 04:43:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825319": [
        {
            "ioc_value": "wsiflnb.persian.sex",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 04:04:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825315": [
        {
            "ioc_value": "mnnwpo.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 03:54:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825314": [
        {
            "ioc_value": "jjcuameq.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 03:24:29",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825313": [
        {
            "ioc_value": "rgcecjho.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 03:24:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825312": [
        {
            "ioc_value": "scsadmm.penaltibazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 03:21:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825311": [
        {
            "ioc_value": "aoeseeuk.winpars.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 03:15:02",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825310": [
        {
            "ioc_value": "winpars.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 03:14:27",
            "last_seen_utc": "2026-06-09 03:14:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "9June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825309": [
        {
            "ioc_value": "gialird.pishbini11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 02:47:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825308": [
        {
            "ioc_value": "120.55.246.213:18443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-09 02:45:24",
            "last_seen_utc": "2026-07-10 08:46:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825307": [
        {
            "ioc_value": "pishbini11.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 02:42:08",
            "last_seen_utc": "2026-06-09 02:42:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825306": [
        {
            "ioc_value": "byiuatd.pinnaclebetting.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 02:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825305": [
        {
            "ioc_value": "pinnaclebetting.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 02:03:43",
            "last_seen_utc": "2026-06-09 02:04:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825303": [
        {
            "ioc_value": "naszmks.pinbahiis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:57:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825302": [
        {
            "ioc_value": "pinbahiis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:56:16",
            "last_seen_utc": "2026-06-09 11:09:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825301": [
        {
            "ioc_value": "xgcstm.yasbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:54:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825300": [
        {
            "ioc_value": "lokino.perfectgameiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:45:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825299": [
        {
            "ioc_value": "www.yuzuapp.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-09 01:30:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5e3fd59a5159950b9937ec591ded56b5b76ce9d6c4be220d75f93f53f6547fab/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825298": [
        {
            "ioc_value": "q62sm4y0.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:24:45",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825297": [
        {
            "ioc_value": "uszq523p.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:23:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825296": [
        {
            "ioc_value": "x8igi8bm.yektbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:22:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825295": [
        {
            "ioc_value": "plyxcbx.wrfc8.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 01:22:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825292": [
        {
            "ioc_value": "pblgwhm.x50wheel.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 00:39:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825291": [
        {
            "ioc_value": "oknmhjx.xenicalby6.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-09 00:05:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825290": [
        {
            "ioc_value": "nnwhxh.pik.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:48:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825289": [
        {
            "ioc_value": "149.88.66.234:20050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 23:45:33",
            "last_seen_utc": "2026-07-12 08:46:33",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825288": [
        {
            "ioc_value": "pik.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:43:56",
            "last_seen_utc": "2026-06-08 23:44:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825287": [
        {
            "ioc_value": "deglis.perspolisbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825286": [
        {
            "ioc_value": "perspolisbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:34:24",
            "last_seen_utc": "2026-06-08 23:34:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825285": [
        {
            "ioc_value": "akvljg.perspolisbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:24:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825284": [
        {
            "ioc_value": "nlwgc0c9.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:23:56",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825283": [
        {
            "ioc_value": "frowben.yasbetapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:22:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825282": [
        {
            "ioc_value": "oxyna912.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:22:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825281": [
        {
            "ioc_value": "gsoxdy.vezaratshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:14:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825280": [
        {
            "ioc_value": "pvvvvn.perfectgame.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 23:07:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825275": [
        {
            "ioc_value": "sewgqnm.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 22:48:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825274": [
        {
            "ioc_value": "lohgcyy.winsportiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 22:33:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825273": [
        {
            "ioc_value": "e40nbbpq.winmastersbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 22:15:36",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825272": [
        {
            "ioc_value": "winmastersbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 22:14:07",
            "last_seen_utc": "2026-06-08 22:14:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825271": [
        {
            "ioc_value": "xeledkz.olabahiskayit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 21:55:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825242": [
        {
            "ioc_value": "xf4v3zjk.parspoker.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 21:22:32",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825236": [
        {
            "ioc_value": "ngieimu.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 21:17:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825235": [
        {
            "ioc_value": "zfomko.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 21:07:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825233": [
        {
            "ioc_value": "rbbhubp.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 20:42:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825228": [
        {
            "ioc_value": "ojpqxkm.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 20:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825227": [
        {
            "ioc_value": "182.23.2.163:12297",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 19:43:41",
            "last_seen_utc": "2026-07-08 18:43:56",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825226": [
        {
            "ioc_value": "155.103.70.100:13407",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 19:43:23",
            "last_seen_utc": "2026-08-14 18:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825224": [
        {
            "ioc_value": "https://gts.firesupport.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 19:25:18",
            "last_seen_utc": "2026-06-08 22:25:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825225": [
        {
            "ioc_value": "gts.firesupport.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 19:25:18",
            "last_seen_utc": "2026-06-08 22:25:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825223": [
        {
            "ioc_value": "gts.fixsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 19:25:06",
            "last_seen_utc": "2026-06-08 22:25:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825222": [
        {
            "ioc_value": "https://gts.fixsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 19:25:05",
            "last_seen_utc": "2026-06-08 22:25:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825221": [
        {
            "ioc_value": "chzldmh3.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 19:22:08",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825220": [
        {
            "ioc_value": "b8i7k0hi.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 19:21:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825219": [
        {
            "ioc_value": "pbustxk.penalty.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 19:21:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825218": [
        {
            "ioc_value": "15.235.189.218:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 19:12:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4d23299c42ea2dfe54d8105b06c9519320c3c085c55f86c0c197e6709b7527b7/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825213": [
        {
            "ioc_value": "64.95.13.15:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-08 19:03:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3ba5e5ee550ae3c50554f30fc6a1feaad9b29073c851cad57fd4d2be2f0cedb6/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825212": [
        {
            "ioc_value": "hfpfhy7zytroclo.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-08 19:03:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3ba5e5ee550ae3c50554f30fc6a1feaad9b29073c851cad57fd4d2be2f0cedb6/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825211": [
        {
            "ioc_value": "20.81.43.36:1011",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-08 19:01:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d9c239487fe177001eb83d8b750d78467205f7c20a2aef89ba23751990a1f892/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825210": [
        {
            "ioc_value": "20.81.43.36:8030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-08 18:59:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e87a0653a3a7c7873fc2df76df0202b059d0ce3f945d887172d9bebf284abe2f/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825209": [
        {
            "ioc_value": "webdot.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-08 18:59:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e87a0653a3a7c7873fc2df76df0202b059d0ce3f945d887172d9bebf284abe2f/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825208": [
        {
            "ioc_value": "pbtgvx.pablobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 18:58:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825207": [
        {
            "ioc_value": "twvjaye.penalti.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 18:47:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825206": [
        {
            "ioc_value": "aencte.oxidbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 18:44:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825205": [
        {
            "ioc_value": "zoasav.onlineshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 18:39:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825189": [
        {
            "ioc_value": "robodomain.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 18:14:02",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825204": [
        {
            "ioc_value": "zexrhdz.penaltibazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 18:07:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825202": [
        {
            "ioc_value": "persianshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 18:02:00",
            "last_seen_utc": "2026-06-09 03:59:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825192": [
        {
            "ioc_value": "sirata.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825193": [
        {
            "ioc_value": "sitepromclop.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-06-27 21:47:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825194": [
        {
            "ioc_value": "smackit.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825195": [
        {
            "ioc_value": "smesharik.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825196": [
        {
            "ioc_value": "spartanec.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825197": [
        {
            "ioc_value": "superpooper.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825198": [
        {
            "ioc_value": "webanalytics-cdn.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825199": [
        {
            "ioc_value": "whynotebanarot.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825200": [
        {
            "ioc_value": "yanepidor.mom",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825201": [
        {
            "ioc_value": "yoshicity.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:08",
            "last_seen_utc": "2026-07-16 14:49:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825179": [
        {
            "ioc_value": "myverifhouse.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825180": [
        {
            "ioc_value": "myverifyblog.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825181": [
        {
            "ioc_value": "nenadopapa.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825182": [
        {
            "ioc_value": "peachbro.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825183": [
        {
            "ioc_value": "pinokros.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-06-29 13:26:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825184": [
        {
            "ioc_value": "pohuimne.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825185": [
        {
            "ioc_value": "ponikas.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825186": [
        {
            "ioc_value": "pringlesbob.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825187": [
        {
            "ioc_value": "productionmaza.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825188": [
        {
            "ioc_value": "prokladka.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825190": [
        {
            "ioc_value": "sandman.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825191": [
        {
            "ioc_value": "sandman.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:07",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825166": [
        {
            "ioc_value": "marmelad.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825167": [
        {
            "ioc_value": "megamegalodon.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825168": [
        {
            "ioc_value": "merindashop.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825169": [
        {
            "ioc_value": "mexicodreams.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825170": [
        {
            "ioc_value": "microblogver.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825171": [
        {
            "ioc_value": "microchlen.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825172": [
        {
            "ioc_value": "microloh.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825173": [
        {
            "ioc_value": "milksos.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825174": [
        {
            "ioc_value": "mnepohui.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825175": [
        {
            "ioc_value": "mob.lanjut.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-06-29 13:26:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825176": [
        {
            "ioc_value": "myblobtop.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825177": [
        {
            "ioc_value": "mygoodblog.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825178": [
        {
            "ioc_value": "mygoodblog.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:06",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825154": [
        {
            "ioc_value": "etomoe.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825155": [
        {
            "ioc_value": "etomoidomen.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825156": [
        {
            "ioc_value": "ganiballektor.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825157": [
        {
            "ioc_value": "gdedengikarlos.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825158": [
        {
            "ioc_value": "gdelogi.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825159": [
        {
            "ioc_value": "govnol.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825160": [
        {
            "ioc_value": "gppcdnns.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825161": [
        {
            "ioc_value": "ivangay.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825162": [
        {
            "ioc_value": "lenders.digital",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825163": [
        {
            "ioc_value": "lizablud.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825164": [
        {
            "ioc_value": "mambet.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825165": [
        {
            "ioc_value": "marinaradom.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:05",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825142": [
        {
            "ioc_value": "biggestchlen.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825143": [
        {
            "ioc_value": "biletors.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825144": [
        {
            "ioc_value": "blobtop.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825145": [
        {
            "ioc_value": "bobik.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825146": [
        {
            "ioc_value": "bulletpop.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825147": [
        {
            "ioc_value": "chinabowl.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-06-29 13:26:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825148": [
        {
            "ioc_value": "chubrik.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825149": [
        {
            "ioc_value": "cloudflare-check.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825150": [
        {
            "ioc_value": "comicstar.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825151": [
        {
            "ioc_value": "corppop.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-06-25 21:13:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825152": [
        {
            "ioc_value": "cosmostars.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-06-29 13:26:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825153": [
        {
            "ioc_value": "diddyparty.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:04",
            "last_seen_utc": "2026-06-27 21:47:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825134": [
        {
            "ioc_value": "abrikos.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825135": [
        {
            "ioc_value": "anakondabob.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825136": [
        {
            "ioc_value": "ap7.supportly.au",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-06-29 13:37:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825137": [
        {
            "ioc_value": "arigatodomen.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825138": [
        {
            "ioc_value": "babybon.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825139": [
        {
            "ioc_value": "bearman.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825140": [
        {
            "ioc_value": "bigbadwolf.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825141": [
        {
            "ioc_value": "biggestchlen.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 17:54:03",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1825133": [
        {
            "ioc_value": "ikbnssq.persian.sex",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 17:24:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825132": [
        {
            "ioc_value": "persian.sex",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 17:23:38",
            "last_seen_utc": "2026-06-08 17:23:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825131": [
        {
            "ioc_value": "0fqk0ho2.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 17:22:20",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825130": [
        {
            "ioc_value": "v6o8c9xi.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 17:20:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825123": [
        {
            "ioc_value": "https://kevinfreels.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 17:18:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/kevinfreels.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825129": [
        {
            "ioc_value": "t748i6is.volleyball.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 17:14:07",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825128": [
        {
            "ioc_value": "zebswzz.one1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 17:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825127": [
        {
            "ioc_value": "chinabowl.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_webinject",
            "malware_alias": null,
            "malware_printable": "Unknown Webinject",
            "first_seen_utc": "2026-06-08 16:50:17",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825126": [
        {
            "ioc_value": "lizablud.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_webinject",
            "malware_alias": null,
            "malware_printable": "Unknown Webinject",
            "first_seen_utc": "2026-06-08 16:49:25",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ErrTraffic",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825125": [
        {
            "ioc_value": "flnntj.persianabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 16:34:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825124": [
        {
            "ioc_value": "persianabet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 16:34:05",
            "last_seen_utc": "2026-06-08 16:34:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825122": [
        {
            "ioc_value": "idwpuur.ninjafruitcubes.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 16:26:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825120": [
        {
            "ioc_value": "https://sad.firesupport.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 16:25:18",
            "last_seen_utc": "2026-06-08 18:25:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825121": [
        {
            "ioc_value": "sad.firesupport.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 16:25:18",
            "last_seen_utc": "2026-06-08 18:25:18",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825118": [
        {
            "ioc_value": "https://sad.fixsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 16:25:06",
            "last_seen_utc": "2026-06-08 18:25:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825119": [
        {
            "ioc_value": "sad.fixsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 16:25:06",
            "last_seen_utc": "2026-06-08 18:25:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "gr0u4,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825117": [
        {
            "ioc_value": "hfgzvf.perfectgameiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 16:24:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825116": [
        {
            "ioc_value": "perfectgameiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 16:24:16",
            "last_seen_utc": "2026-06-09 01:44:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1825115": [
        {
            "ioc_value": "syheuby.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 16:23:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825114": [
        {
            "ioc_value": "qcqsin.yasbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 15:45:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825113": [
        {
            "ioc_value": "vvpfsda.pasoor11.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 15:45:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825112": [
        {
            "ioc_value": "e20yl90d.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 15:20:52",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825111": [
        {
            "ioc_value": "iebtnuo1.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 15:20:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825110": [
        {
            "ioc_value": "zjuflao.pasur21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 15:20:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825097": [
        {
            "ioc_value": "souljaboynft.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-08 14:50:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/574b156255a61da989d89c6f4c6ccbaf33921c4aba9a92fbcff5de054b437e1c/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824982": [
        {
            "ioc_value": "https://tknmetal.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tknmetal.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824983": [
        {
            "ioc_value": "https://victormeloadvogado.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:29",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/victormeloadvogado.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824984": [
        {
            "ioc_value": "https://oficialwebsitepromotion.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/oficialwebsitepromotion.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824985": [
        {
            "ioc_value": "https://www.jkbuildersg.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:28",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.jkbuildersg.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824986": [
        {
            "ioc_value": "https://www.kevinfreels.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.kevinfreels.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824987": [
        {
            "ioc_value": "https://ireflect.net/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:27",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/ireflect.net",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824988": [
        {
            "ioc_value": "https://www.iconlng.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:43:26",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.iconlng.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825035": [
        {
            "ioc_value": "https://www.danielediana.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:36",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.danielediana.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825036": [
        {
            "ioc_value": "https://developmental-twins.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/developmental-twins.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825037": [
        {
            "ioc_value": "https://www.ciberci.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:35",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.ciberci.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825039": [
        {
            "ioc_value": "https://www.argirisangelopoulos.gr/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:34",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.argirisangelopoulos.gr",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825038": [
        {
            "ioc_value": "https://buktijpmaluku.info/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/buktijpmaluku.info",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825040": [
        {
            "ioc_value": "https://andreawirsum.com/de/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/andreawirsum.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825047": [
        {
            "ioc_value": "00000l.nvms9000.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825041": [
        {
            "ioc_value": "https://www.altecva.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.altecva.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825044": [
        {
            "ioc_value": "horizon.nvms9000updates.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:30",
            "last_seen_utc": "2026-06-10 07:19:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825045": [
        {
            "ioc_value": "000.nvms9000.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825046": [
        {
            "ioc_value": "0000.nvms9000.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825048": [
        {
            "ioc_value": "000.hikvision-cctv.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825049": [
        {
            "ioc_value": "0000.hikvision-cctv.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825050": [
        {
            "ioc_value": "00000.hikvision-cctv.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825051": [
        {
            "ioc_value": "0000g7bd7.hikvision-cctv.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825052": [
        {
            "ioc_value": "botdealers.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825053": [
        {
            "ioc_value": "kys.botdealers.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 14:42:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1825060": [
        {
            "ioc_value": "62.171.142.134:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-08 14:42:24",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825061": [
        {
            "ioc_value": "47.253.94.140:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 14:42:23",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825062": [
        {
            "ioc_value": "45.238.101.91:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 14:42:23",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825063": [
        {
            "ioc_value": "189.51.43.54:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 14:42:23",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825064": [
        {
            "ioc_value": "167.126.6.183:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 14:42:22",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1825094": [
        {
            "ioc_value": "https://jkylenewton.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 14:42:15",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/jkylenewton.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1825096": [
        {
            "ioc_value": "fporlgd.penality.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 14:37:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825095": [
        {
            "ioc_value": "107.175.148.82:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 14:35:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1c31cb888b12ea6f8ff24ef41df360bcdaaa148a2c0fffc6f53928a5cf6a1d4e/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825091": [
        {
            "ioc_value": "vdchddh.penaltibazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:59:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825090": [
        {
            "ioc_value": "xhfecr.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:47:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825089": [
        {
            "ioc_value": "88aavn.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-08 13:35:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/42096c25d984649b38930437d79ed3bcb3bf8e2e52aea01578fac943b793eafa/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825088": [
        {
            "ioc_value": "jwfckz.onlineshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:34:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825087": [
        {
            "ioc_value": "hexbear.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-08 13:30:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/129426e16332e5dd7f5fde56cb1c5e73666fcd4f629219effc16102cc7c083ec/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825086": [
        {
            "ioc_value": "oczvda.oxidbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:28:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825084": [
        {
            "ioc_value": "jjgnawd.penalti.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:20:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825083": [
        {
            "ioc_value": "te3znaut.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:20:46",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825082": [
        {
            "ioc_value": "hknnbq.pablobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:20:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825081": [
        {
            "ioc_value": "x3v1t7wb.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:19:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825080": [
        {
            "ioc_value": "g1rxiw6o.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 13:19:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1825072": [
        {
            "ioc_value": "104.239.66.136:2017",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 13:05:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a9533cae947e4232cc85dc368109d52c69a3b8e43e8667872671da34052304b/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825070": [
        {
            "ioc_value": "007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-08 12:05:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1825071": [
        {
            "ioc_value": "ac2248d66cadf6597f428cde47f98c1adbb382da0473cceca632dec08ecf3e06",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-08 12:05:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1825069": [
        {
            "ioc_value": "https://vrdccbank.com/Doppee12.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-08 12:04:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1825068": [
        {
            "ioc_value": "h0t75jy5.betgopro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 12:00:48",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825067": [
        {
            "ioc_value": "193.93.193.93:8822",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-08 12:00:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "TomU"
        }
    ],
    "1825066": [
        {
            "ioc_value": "zrqkapj.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 11:50:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825065": [
        {
            "ioc_value": "106.14.116.17:19443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 11:45:41",
            "last_seen_utc": "2026-07-10 18:46:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1825059": [
        {
            "ioc_value": "fhvteyb.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 11:15:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825054": [
        {
            "ioc_value": "cebsrg.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 10:55:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825043": [
        {
            "ioc_value": "hjwaxur.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 10:32:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1825042": [
        {
            "ioc_value": "gwu729hw.parspoker.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 10:32:36",
            "last_seen_utc": "2026-06-11 10:05:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824989": [
        {
            "ioc_value": "168.222.97.59:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 10:06:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c3f65d466953c1c9fff63cf8f450926b25c623a63404552e833f9c399a11907b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824977": [
        {
            "ioc_value": "84.38.129.122:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 09:55:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9e92d24fefd87f1817428ceb56e175ddcf19ecd96d80418824a553588aa6067/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824976": [
        {
            "ioc_value": "192.3.45.8:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:55:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6525f806b4c8405e1e3d0f275e06b12b2710ea562966fe3b8092913d4d3340eb/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824975": [
        {
            "ioc_value": "inmjycz.olabahiskayit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 09:54:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824967": [
        {
            "ioc_value": "135.181.224.79:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824968": [
        {
            "ioc_value": "65.21.96.131:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824969": [
        {
            "ioc_value": "135.181.224.77:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824970": [
        {
            "ioc_value": "135.181.224.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824971": [
        {
            "ioc_value": "178.105.231.90:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824972": [
        {
            "ioc_value": "135.181.224.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824973": [
        {
            "ioc_value": "135.181.224.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824974": [
        {
            "ioc_value": "135.181.224.74:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824960": [
        {
            "ioc_value": "reg.turbo88op.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824961": [
        {
            "ioc_value": "lla.firesupport.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": "2026-06-08 15:25:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824962": [
        {
            "ioc_value": "fhe.firesupport.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824963": [
        {
            "ioc_value": "pas.firesupport.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824964": [
        {
            "ioc_value": "lla.fixsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": "2026-06-08 15:25:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824965": [
        {
            "ioc_value": "fhe.fixsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824966": [
        {
            "ioc_value": "pas.fixsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:52:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824957": [
        {
            "ioc_value": "https://135.181.224.73/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824958": [
        {
            "ioc_value": "https://135.181.224.76/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824959": [
        {
            "ioc_value": "https://135.181.224.74/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:52",
            "last_seen_utc": "2026-06-09 18:37:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824951": [
        {
            "ioc_value": "https://pas.fixsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824952": [
        {
            "ioc_value": "https://135.181.224.79/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824953": [
        {
            "ioc_value": "https://65.21.96.131/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824954": [
        {
            "ioc_value": "https://135.181.224.77/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824955": [
        {
            "ioc_value": "https://135.181.224.75/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824956": [
        {
            "ioc_value": "https://178.105.231.90/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824944": [
        {
            "ioc_value": "https://telegram.me/d77xtr",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": "2026-08-20 19:34:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824945": [
        {
            "ioc_value": "https://reg.turbo88op.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824946": [
        {
            "ioc_value": "https://lla.firesupport.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": "2026-06-08 15:25:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824947": [
        {
            "ioc_value": "https://fhe.firesupport.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824948": [
        {
            "ioc_value": "https://pas.firesupport.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824949": [
        {
            "ioc_value": "https://lla.fixsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": "2026-06-08 15:25:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824950": [
        {
            "ioc_value": "https://fhe.fixsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824943": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198694566254",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-08 09:51:49",
            "last_seen_utc": "2026-08-13 11:22:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1824942": [
        {
            "ioc_value": "107.175.179.48:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:50:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e7cab9dd131c09bcc45b18e2607c1f1697c5ed798e7b44f313396a5ac68aadf0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824935": [
        {
            "ioc_value": "hakdsiwqs281ks.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824936": [
        {
            "ioc_value": "teraview.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824937": [
        {
            "ioc_value": "photforhotel.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824938": [
        {
            "ioc_value": "photo-26656.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824939": [
        {
            "ioc_value": "dsjkaksfks324das.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824940": [
        {
            "ioc_value": "photo-26653.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824941": [
        {
            "ioc_value": "photo-26652.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:54",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824918": [
        {
            "ioc_value": "havasssj291sld.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824919": [
        {
            "ioc_value": "photo-27657.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824920": [
        {
            "ioc_value": "jsdakksd283ksl.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824921": [
        {
            "ioc_value": "hotelsphotosite.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824922": [
        {
            "ioc_value": "photo-27757.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824923": [
        {
            "ioc_value": "photo-26657.cfd",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824924": [
        {
            "ioc_value": "tracerecord.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824925": [
        {
            "ioc_value": "book-photopage.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824926": [
        {
            "ioc_value": "haddjskak827sja.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824927": [
        {
            "ioc_value": "haskakwo291sa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824928": [
        {
            "ioc_value": "photohotelcheck.cloud",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824929": [
        {
            "ioc_value": "pic-imageh.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824930": [
        {
            "ioc_value": "photo-pagebook.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824931": [
        {
            "ioc_value": "hotelphotoadm.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824932": [
        {
            "ioc_value": "safehub-images.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824933": [
        {
            "ioc_value": "safepic-img.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824934": [
        {
            "ioc_value": "safegallery.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:53",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824917": [
        {
            "ioc_value": "23.95.103.219:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:45:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a8a141ade35e940a15eaec90cbb1a1ea35ab84725fb76bc82d46c3c88dadda04/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824916": [
        {
            "ioc_value": "nanacccoz.hopto.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d04bc39163620ea10c58bea4ee13e4d6b4216c6294c684031fe229722f43b13f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824915": [
        {
            "ioc_value": "94.183.232.247:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-08 09:45:29",
            "last_seen_utc": "2026-07-30 08:46:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824913": [
        {
            "ioc_value": "89.125.255.5:43026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-08 09:45:25",
            "last_seen_utc": "2026-07-08 18:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824914": [
        {
            "ioc_value": "89.125.255.5:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-08 09:45:25",
            "last_seen_utc": "2026-07-08 18:45:57",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824912": [
        {
            "ioc_value": "87.237.52.176:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 09:45:24",
            "last_seen_utc": "2026-07-08 18:45:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824911": [
        {
            "ioc_value": "rykwhjt.winsportiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 09:44:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824910": [
        {
            "ioc_value": "182.23.2.163:3252",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:43:40",
            "last_seen_utc": "2026-07-08 08:44:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824909": [
        {
            "ioc_value": "155.103.70.100:13408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:43:22",
            "last_seen_utc": "2026-08-14 18:43:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824907": [
        {
            "ioc_value": "62.102.148.212:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:40:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/485ff689cef4080138ce4736a53762d77a306ad9f00a172a549445812c267438/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824908": [
        {
            "ioc_value": "87.120.107.29:1194",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 09:40:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/59616120b2be5d3c2f79d8379c9f3fb004adaf01a81742ebd2443e28b7d5e665/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824906": [
        {
            "ioc_value": "107.175.148.82:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:40:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/98cce079164a5c1664f26841559b1d8019d146bfd6e9edc86d19c328f3ed5444/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824811": [
        {
            "ioc_value": "tviyhdt.winstone.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 09:38:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824710": [
        {
            "ioc_value": "win.tennis",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 09:32:56",
            "last_seen_utc": "2026-06-08 09:33:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824709": [
        {
            "ioc_value": "146.70.244.90:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:30:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2a412de246786b5de31cca476e2439a5a100a965739bbb1538c4b3bec367c22f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824708": [
        {
            "ioc_value": "192.3.45.8:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:25:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4d1b8646c493d3fed46745143f84d655331efb35a908297c86efcdc90fe7cecd/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824707": [
        {
            "ioc_value": "107.172.13.230:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 09:25:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cf956fe1118b0fcb053afca8bc1dd5915acb00b0f827e170f87886e2b5ec44cf/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824706": [
        {
            "ioc_value": "31.56.209.126:1996",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 09:20:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9a84871cc46be89ec120268a71d7471ebd6daabc141dd392415febca15b8200a/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824701": [
        {
            "ioc_value": "mpozwop.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 08:59:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824700": [
        {
            "ioc_value": "216.250.250.247:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 08:55:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/35f6b5905b4995c50de76e54a05e644e9d384ec0101e7160685d57df9e831584/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824699": [
        {
            "ioc_value": "https://weekfoc.cyou",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-08 08:55:33",
            "last_seen_utc": "2026-06-10 06:53:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3f7d51dd1fd7024371b155765420f2220d247a49fdc593b2eae02bc96b2a206c/",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824698": [
        {
            "ioc_value": "xzelng.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 08:54:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824697": [
        {
            "ioc_value": "151.244.232.26:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 08:50:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/67851f424ccbe66c1d79bdb2c7dac0bcb2f833d6225014ddbf143974d5d96766/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824696": [
        {
            "ioc_value": "104.168.7.208:4231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 08:50:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bd34f9019cdc446b263f2a0eee5dcdb9646fd2d6fe37ac90243982705d44b0fd/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824695": [
        {
            "ioc_value": "195.177.94.115:2037",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 08:45:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9518759689491de178398c9ddf5238f8442c6f63b08b468f938c4e6d013738af/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824694": [
        {
            "ioc_value": "107.172.13.245:7007",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 08:45:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9137813c72436292c576c8312df2a2ef14507ff4c4a885fb29362ef57e9b01cf/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824693": [
        {
            "ioc_value": "throtboy.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 08:45:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/9518759689491de178398c9ddf5238f8442c6f63b08b468f938c4e6d013738af/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824692": [
        {
            "ioc_value": "yynpur.perfectgame.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 08:44:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824691": [
        {
            "ioc_value": "93.177.75.2:2467",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 08:40:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3703d16f10ecd7ded0bb82164cdd5757d2b992cec36a4d7082beae0af3d7fe26/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824690": [
        {
            "ioc_value": "62.102.148.174:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 08:40:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2f5c8a96ff4519ae5d39f3a30cacc2d2d7064e0de52972523adeb441e4bd9389/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824689": [
        {
            "ioc_value": "31.56.209.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 08:35:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/07c3cc76765295534f20b4e5978fd5a158ef227f8c5815d3b59af0bafc9b821e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824687": [
        {
            "ioc_value": "104.168.7.219:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 08:35:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/60e6c277f91ecda36bf0892ad26c6f6ec4aa40f41c99c0b0eea8ab7b16770b1e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824688": [
        {
            "ioc_value": "107.173.63.252:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 08:35:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/644622eae00f07eb21343e138fa870edf8ca5f961f69bb8c49dfcf651764f30f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824686": [
        {
            "ioc_value": "frBvNnnFYR6XR622pBE0NQ==",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-08 08:35:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/60e6c277f91ecda36bf0892ad26c6f6ec4aa40f41c99c0b0eea8ab7b16770b1e/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824685": [
        {
            "ioc_value": "ebwgtb.vezaratshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 08:34:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824684": [
        {
            "ioc_value": "5dwz6wj9.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 08:32:21",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824683": [
        {
            "ioc_value": "anpysts.yasbetapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 08:16:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824637": [
        {
            "ioc_value": "allcountiesroofingltd.co.uk",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-08 08:02:09",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,compromised,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824639": [
        {
            "ioc_value": "amici-di-pogrande.it",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-08 08:02:08",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,compromised,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824640": [
        {
            "ioc_value": "andreawirsum.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.iclickfix",
            "malware_alias": null,
            "malware_printable": "IClickFix",
            "first_seen_utc": "2026-06-08 08:02:08",
            "last_seen_utc": "2026-08-26 21:48:09",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": "",
            "tags": "ClickFix,compromised,etherhiding,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824635": [
        {
            "ioc_value": "112.213.113.171:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:24",
            "last_seen_utc": "2026-07-07 06:45:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824633": [
        {
            "ioc_value": "8.152.2.86:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:23",
            "last_seen_utc": "2026-07-07 06:45:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824634": [
        {
            "ioc_value": "45.64.111.18:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:23",
            "last_seen_utc": "2026-07-07 06:45:22",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824632": [
        {
            "ioc_value": "38.47.226.41:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:13",
            "last_seen_utc": "2026-07-07 06:45:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824631": [
        {
            "ioc_value": "45.64.111.21:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:10",
            "last_seen_utc": "2026-07-07 06:45:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824630": [
        {
            "ioc_value": "45.64.111.19:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:09",
            "last_seen_utc": "2026-07-07 06:45:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824629": [
        {
            "ioc_value": "8.163.135.135:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:07",
            "last_seen_utc": "2026-07-07 06:45:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824628": [
        {
            "ioc_value": "45.64.111.20:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-08 07:48:05",
            "last_seen_utc": "2026-07-07 06:44:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824627": [
        {
            "ioc_value": "cqvdiki.xenicalby6.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 07:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824625": [
        {
            "ioc_value": "pmhaqci.x50wheel.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 07:11:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824621": [
        {
            "ioc_value": "qll4p9fw.one1xiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 06:59:32",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824570": [
        {
            "ioc_value": "jfdewff.link",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.fickerstealer",
            "malware_alias": null,
            "malware_printable": "Ficker Stealer",
            "first_seen_utc": "2026-06-08 06:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824571": [
        {
            "ioc_value": "musonare.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.metastealer",
            "malware_alias": null,
            "malware_printable": "MetaStealer",
            "first_seen_utc": "2026-06-08 06:36:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824572": [
        {
            "ioc_value": "http://212.192.246.217/access.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824573": [
        {
            "ioc_value": "http://45.9.20.13/partner/loot.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824574": [
        {
            "ioc_value": "http://37.0.8.39/access.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824575": [
        {
            "ioc_value": "http://the-flash-man.com/Installer_HwtcxtRp5S8kqr2V9ysBB7Utrt/UltraMediaBurner.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824576": [
        {
            "ioc_value": "http://hsiens.xyz/addInstall.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824577": [
        {
            "ioc_value": "http://194.145.227.161/partner.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824578": [
        {
            "ioc_value": "http://194.145.227.161/dlc/sharing.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824579": [
        {
            "ioc_value": "http://cleaner-partners.ltd/check.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824580": [
        {
            "ioc_value": "http://cleaner-partners.ltd/stats/save.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824581": [
        {
            "ioc_value": "http://mazama.xyz/addInstall.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824582": [
        {
            "ioc_value": "http://appwebstat.biz/stats/1.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824583": [
        {
            "ioc_value": "http://appwebstat.biz/connection",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824584": [
        {
            "ioc_value": "http://onlinehueplet.com/77_1.exe",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824585": [
        {
            "ioc_value": "http://gc-distribution.biz/pub.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.gcleaner",
            "malware_alias": null,
            "malware_printable": "GCleaner",
            "first_seen_utc": "2026-06-08 06:36:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824586": [
        {
            "ioc_value": "proxybox.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824587": [
        {
            "ioc_value": "vsttorentz.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824588": [
        {
            "ioc_value": "proxy.am",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824589": [
        {
            "ioc_value": "ejvphud.ua",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824590": [
        {
            "ioc_value": "gdpkvkr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824591": [
        {
            "ioc_value": "bwiesit.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824592": [
        {
            "ioc_value": "goeiwef.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824593": [
        {
            "ioc_value": "kruxjou.ua",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.socks5_systemz",
            "malware_alias": "ProxyBox",
            "malware_printable": "Socks5Systemz",
            "first_seen_utc": "2026-06-08 06:36:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824594": [
        {
            "ioc_value": "shadownbr.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824595": [
        {
            "ioc_value": "ricardotro.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824596": [
        {
            "ioc_value": "rjnfjrtc.pwrp.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824597": [
        {
            "ioc_value": "rdntotoso.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824598": [
        {
            "ioc_value": "phishing.two-i.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824599": [
        {
            "ioc_value": "phishing.researchinstitute.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824600": [
        {
            "ioc_value": "kad77.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824601": [
        {
            "ioc_value": "googlednsv1.gleeze.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824602": [
        {
            "ioc_value": "same53-51830.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824603": [
        {
            "ioc_value": "phishing.classofcovid.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824604": [
        {
            "ioc_value": "stoneaged.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824605": [
        {
            "ioc_value": "phishing.clubmilanovolley.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824606": [
        {
            "ioc_value": "phishing.marthasvineyardfitness.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824607": [
        {
            "ioc_value": "fuck-life007.no-ip.biz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824608": [
        {
            "ioc_value": "phishing.flyingdiscranchdates.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824609": [
        {
            "ioc_value": "hacker.two-i.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824610": [
        {
            "ioc_value": "phishing.www.cathedrale-images.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824611": [
        {
            "ioc_value": "phishing.xoilacane.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824612": [
        {
            "ioc_value": "mangy10.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-08 06:36:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824620": [
        {
            "ioc_value": "zlyupbm.wrfc8.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 06:31:24",
            "last_seen_utc": "2026-06-09 01:18:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824619": [
        {
            "ioc_value": "9t9m7lad.yektbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 06:30:51",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824618": [
        {
            "ioc_value": "bikldg.volleyball.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 06:28:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824616": [
        {
            "ioc_value": "zqzlac.vezaratshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 06:05:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824615": [
        {
            "ioc_value": "sesksz.venusbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 05:54:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824614": [
        {
            "ioc_value": "ylljjmv.wolfenm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 05:52:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824613": [
        {
            "ioc_value": "wolfenm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 05:52:15",
            "last_seen_utc": "2026-06-08 05:52:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824550": [
        {
            "ioc_value": "bzwbfps.winxbet.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 05:14:16",
            "last_seen_utc": "2026-07-13 11:17:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824547": [
        {
            "ioc_value": "gysxrbg.winstone.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 04:54:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824546": [
        {
            "ioc_value": "winstone.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 04:54:12",
            "last_seen_utc": "2026-06-08 09:34:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "8June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824545": [
        {
            "ioc_value": "pqxlboc.winsportiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 04:45:27",
            "last_seen_utc": "2026-06-08 22:34:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824544": [
        {
            "ioc_value": "33liwbcf.parspoker.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 04:30:14",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824540": [
        {
            "ioc_value": "https://45.91.81.190:8443",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 04:10:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2063834202454598012?s=20",
            "tags": null,
            "anonymous": 0,
            "reporter": "solostalking"
        }
    ],
    "1824541": [
        {
            "ioc_value": "https://103.214.174.248:8443",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 04:10:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2063834202454598012?s=20",
            "tags": null,
            "anonymous": 0,
            "reporter": "solostalking"
        }
    ],
    "1824542": [
        {
            "ioc_value": "https://108.61.193.37:8443",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 04:10:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/solostalking/status/2063834202454598012?s=20",
            "tags": null,
            "anonymous": 0,
            "reporter": "solostalking"
        }
    ],
    "1824543": [
        {
            "ioc_value": "ghbfozy.olabahiskayit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 04:07:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824539": [
        {
            "ioc_value": "iidqou.jamjahani.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:53:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824538": [
        {
            "ioc_value": "dphxsy.perfectgame.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:44:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824536": [
        {
            "ioc_value": "161.248.87.185:2844",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:41:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7258a8eec22b21345dc754e2b90b36e6faec37978ce6a8cd327767df23a5d27f/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824537": [
        {
            "ioc_value": "27.124.40.162:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:41:56",
            "last_seen_utc": "2026-06-14 11:09:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7258a8eec22b21345dc754e2b90b36e6faec37978ce6a8cd327767df23a5d27f/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824534": [
        {
            "ioc_value": "2844.xzz.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:41:34",
            "last_seen_utc": "2026-06-14 11:09:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7258a8eec22b21345dc754e2b90b36e6faec37978ce6a8cd327767df23a5d27f/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824535": [
        {
            "ioc_value": "backdoor.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:41:34",
            "last_seen_utc": "2026-06-14 11:09:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7258a8eec22b21345dc754e2b90b36e6faec37978ce6a8cd327767df23a5d27f/",
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824328": [
        {
            "ioc_value": "frostapp.fr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824329": [
        {
            "ioc_value": "kuralyok.com.tr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824330": [
        {
            "ioc_value": "blank-rfhww.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824331": [
        {
            "ioc_value": "skoch-osjdw.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824332": [
        {
            "ioc_value": "skoch-wif67.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824333": [
        {
            "ioc_value": "blank-c1vj5.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824334": [
        {
            "ioc_value": "g98546cg.beget.tech",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824335": [
        {
            "ioc_value": "shaurma.fun",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824336": [
        {
            "ioc_value": "skoch-7bced.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824337": [
        {
            "ioc_value": "o5.gg",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824338": [
        {
            "ioc_value": "blank-jknks.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824339": [
        {
            "ioc_value": "skoch-eadr7.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824340": [
        {
            "ioc_value": "brn-hacker.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824341": [
        {
            "ioc_value": "blank-1spec.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824342": [
        {
            "ioc_value": "a0928733.xsph.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824343": [
        {
            "ioc_value": "blank-actsa.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824344": [
        {
            "ioc_value": "blank-vm1ir.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824345": [
        {
            "ioc_value": "blank-iq5vj.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "py.blankgrabber",
            "malware_alias": null,
            "malware_printable": "BlankGrabber",
            "first_seen_utc": "2026-06-08 03:35:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824347": [
        {
            "ioc_value": "segurityopen12.mysynology.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-08 03:35:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824346": [
        {
            "ioc_value": "dmitrievan.temp.swtest.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-08 03:35:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824348": [
        {
            "ioc_value": "583848.clmonth.nyashteam.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-08 03:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824349": [
        {
            "ioc_value": "954591cm.nyashsens.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-08 03:35:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824350": [
        {
            "ioc_value": "bl.furries.com.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-08 03:35:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824351": [
        {
            "ioc_value": "velve12.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-08 03:35:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824352": [
        {
            "ioc_value": "logisctismes.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824353": [
        {
            "ioc_value": "marklogs.ddns.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824354": [
        {
            "ioc_value": "camtakeit.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824355": [
        {
            "ioc_value": "cfo111.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824356": [
        {
            "ioc_value": "cfo1111.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824357": [
        {
            "ioc_value": "cfo1111.hopto.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824358": [
        {
            "ioc_value": "xyzeeeee.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-08 03:35:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824359": [
        {
            "ioc_value": "alisteelhousee.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-08 03:35:07",
            "last_seen_utc": "2026-06-08 05:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824360": [
        {
            "ioc_value": "blackhills.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-08 03:35:06",
            "last_seen_utc": "2026-06-08 05:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824361": [
        {
            "ioc_value": "extensions14718.sytes.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-08 03:35:06",
            "last_seen_utc": "2026-06-08 05:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824362": [
        {
            "ioc_value": "newmone.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-08 03:35:05",
            "last_seen_utc": "2026-06-08 05:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824363": [
        {
            "ioc_value": "william1979.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-08 03:35:05",
            "last_seen_utc": "2026-06-08 05:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824364": [
        {
            "ioc_value": "adhaehaht-42050.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-08 03:35:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824365": [
        {
            "ioc_value": "vrstudio.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-08 03:35:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824366": [
        {
            "ioc_value": "gamestudio.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.donut_injector",
            "malware_alias": "Donut",
            "malware_printable": "donut_injector",
            "first_seen_utc": "2026-06-08 03:35:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824367": [
        {
            "ioc_value": "teamszs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:35:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824368": [
        {
            "ioc_value": "downcry.s3.ap-east-1.amazonaws.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:35:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824370": [
        {
            "ioc_value": "404xh.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:34:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824371": [
        {
            "ioc_value": "14cabp433878.vicp.fun",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:34:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824372": [
        {
            "ioc_value": "so-axiom.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:34:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824373": [
        {
            "ioc_value": "gusikkwski.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:34:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824375": [
        {
            "ioc_value": "wwnbslklfdsrf.cn",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:34:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824376": [
        {
            "ioc_value": "merengagoi.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:52",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824377": [
        {
            "ioc_value": "gooddogshop.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:50",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824378": [
        {
            "ioc_value": "infospi.pl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824379": [
        {
            "ioc_value": "krempie.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:47",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824380": [
        {
            "ioc_value": "productionmaza.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:46",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824381": [
        {
            "ioc_value": "mymicroblog.lat",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:46",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824382": [
        {
            "ioc_value": "bigboysclub.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:45",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824383": [
        {
            "ioc_value": "antongandon.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:45",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824384": [
        {
            "ioc_value": "productionmaza.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:44",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824385": [
        {
            "ioc_value": "mybiggestjoy.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:44",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824386": [
        {
            "ioc_value": "denegnet.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:44",
            "last_seen_utc": "2026-06-27 21:47:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824387": [
        {
            "ioc_value": "productionmaza.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:43",
            "last_seen_utc": "2026-07-16 14:49:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824388": [
        {
            "ioc_value": "blatnoitovar.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:43",
            "last_seen_utc": "2026-07-16 14:49:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824389": [
        {
            "ioc_value": "goodgoodmoon.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:43",
            "last_seen_utc": "2026-07-16 14:49:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824390": [
        {
            "ioc_value": "bestwebchlen.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:42",
            "last_seen_utc": "2026-06-27 21:47:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824391": [
        {
            "ioc_value": "beacon-mysummitfcu.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824392": [
        {
            "ioc_value": "allplanetssame.cfd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:41",
            "last_seen_utc": "2026-07-16 14:49:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824393": [
        {
            "ioc_value": "microblob.bond",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.deerstealer",
            "malware_alias": null,
            "malware_printable": "DeerStealer",
            "first_seen_utc": "2026-06-08 03:34:41",
            "last_seen_utc": "2026-07-16 14:49:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824453": [
        {
            "ioc_value": "remoteshcontrol.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:34:37",
            "last_seen_utc": "2026-06-08 21:20:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824451": [
        {
            "ioc_value": "mikelle.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:34:35",
            "last_seen_utc": "2026-06-22 11:41:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824452": [
        {
            "ioc_value": "remotesh.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:34:35",
            "last_seen_utc": "2026-06-22 11:41:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824445": [
        {
            "ioc_value": "85.209.163.250:3000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-08 03:34:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.youtube.com/watch?v=GbYuFCUh_hs",
            "tags": "chrome-extension,roblox,session-hijacking",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824422": [
        {
            "ioc_value": "134.209.87.103:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-08 03:34:32",
            "last_seen_utc": "2026-06-09 11:17:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1824421": [
        {
            "ioc_value": "167.71.5.187:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-08 03:34:31",
            "last_seen_utc": "2026-06-09 11:17:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1824369": [
        {
            "ioc_value": "teams-securecall.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-08 03:34:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824460": [
        {
            "ioc_value": "47.119.179.4:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-08 03:34:27",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-load,muhstik,redis,ssh-key-plant",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824461": [
        {
            "ioc_value": "115.231.76.176:60105",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-08 03:34:27",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "muhstik,redis,slaveof-master",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824462": [
        {
            "ioc_value": "https://121.176.14.102/sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 03:34:27",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "c2,docker-api,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824463": [
        {
            "ioc_value": "156.67.105.185:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 03:34:26",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824464": [
        {
            "ioc_value": "47.88.104.101:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-08 03:34:26",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824470": [
        {
            "ioc_value": "getalib.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:34:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,ClearFake",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824514": [
        {
            "ioc_value": "45.88.186.59:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-08 03:33:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "210558,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1824515": [
        {
            "ioc_value": "45.88.186.59:5000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-08 03:33:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "210558,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1824516": [
        {
            "ioc_value": "45.88.186.59:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-08 03:33:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "210558,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1824517": [
        {
            "ioc_value": "45.88.186.59:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-08 03:33:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "210558,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1824526": [
        {
            "ioc_value": "https://hoteldugolfe.corsica/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 03:33:33",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/hoteldugolfe.corsica",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824527": [
        {
            "ioc_value": "https://www.lorisdanesi.it/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 03:33:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/www.lorisdanesi.it",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824528": [
        {
            "ioc_value": "https://tracklifefit.com.br/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 03:33:32",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/tracklifefit.com.br",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824530": [
        {
            "ioc_value": "https://sharepoint.tu-dresden.be/tqqud08zj6yh94pf",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 03:33:31",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/sharepoint.tu-dresden.be",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824531": [
        {
            "ioc_value": "https://aboutbraces.org/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 03:33:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/aboutbraces.org",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824532": [
        {
            "ioc_value": "https://flownavalarchitect.com/",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-08 03:33:30",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://clickfix.carsonww.com/domains/flownavalarchitect.com",
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "CarsonWilliams"
        }
    ],
    "1824533": [
        {
            "ioc_value": "bdfzsbr.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 03:26:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824529": [
        {
            "ioc_value": "uadcmxt.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 02:52:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824525": [
        {
            "ioc_value": "1nmuyb5y.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 02:29:51",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824524": [
        {
            "ioc_value": "hhb3xwzf.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 02:29:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824523": [
        {
            "ioc_value": "dihsov.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 02:11:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824522": [
        {
            "ioc_value": "etpvftw.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 02:08:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824520": [
        {
            "ioc_value": "1hrrc4q6.onexboro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 01:59:20",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824519": [
        {
            "ioc_value": "eterjrb.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 01:53:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824518": [
        {
            "ioc_value": "omxvqrt.penalty.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 01:19:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824513": [
        {
            "ioc_value": "atuxkke.penalti.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 00:41:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824512": [
        {
            "ioc_value": "bl7gsqjt.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 00:30:30",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824511": [
        {
            "ioc_value": "egbofo.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 00:29:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824510": [
        {
            "ioc_value": "m5zv3oa7.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 00:29:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824509": [
        {
            "ioc_value": "pdbrpnf.penaltibazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-08 00:02:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824508": [
        {
            "ioc_value": "209.200.246.194:17568",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-07 23:45:14",
            "last_seen_utc": "2026-09-01 02:46:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824507": [
        {
            "ioc_value": "jhejjsa.penality.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 23:20:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824469": [
        {
            "ioc_value": "dfjdzmq.penality.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:41:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824468": [
        {
            "ioc_value": "krqbplar.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:29:50",
            "last_seen_utc": "2026-06-11 10:04:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824467": [
        {
            "ioc_value": "zqvol7d5.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:28:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824466": [
        {
            "ioc_value": "ygxcnh.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:24:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824465": [
        {
            "ioc_value": "utpesi.pablobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:14:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824459": [
        {
            "ioc_value": "dvciwh.oxidbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824458": [
        {
            "ioc_value": "jepbtnj.pasur21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 22:02:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824454": [
        {
            "ioc_value": "uznjkx.onlineshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 21:55:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824450": [
        {
            "ioc_value": "aylkfoq.pasoor11.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 21:24:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824449": [
        {
            "ioc_value": "uafzmeq.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 21:15:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824447": [
        {
            "ioc_value": "lxnfayp0.onexfa.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 20:58:12",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824446": [
        {
            "ioc_value": "dkfcpnk.ninjafruitcubes.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 20:41:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824444": [
        {
            "ioc_value": "k3q6fgf9.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 20:29:20",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824443": [
        {
            "ioc_value": "dhvutaee.parsbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 20:28:15",
            "last_seen_utc": "2026-06-08 19:21:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824442": [
        {
            "ioc_value": "rritelh.one1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 20:02:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824437": [
        {
            "ioc_value": "szdfpv.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 19:54:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824436": [
        {
            "ioc_value": "87.107.191.39:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-07 19:45:57",
            "last_seen_utc": "2026-07-08 14:47:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824435": [
        {
            "ioc_value": "94.183.232.247:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-07 19:45:13",
            "last_seen_utc": "2026-07-29 08:59:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mirai",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824434": [
        {
            "ioc_value": "93.127.141.93:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.hook",
            "malware_alias": null,
            "malware_printable": "Hook",
            "first_seen_utc": "2026-06-07 19:45:12",
            "last_seen_utc": "2026-07-12 18:46:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Hook",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824433": [
        {
            "ioc_value": "82.156.224.184:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-07 19:45:00",
            "last_seen_utc": "2026-09-01 02:46:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824432": [
        {
            "ioc_value": "52.90.29.87:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-07 19:44:52",
            "last_seen_utc": "2026-07-08 08:45:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824431": [
        {
            "ioc_value": "46.246.96.214:8082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-07 19:44:43",
            "last_seen_utc": "2026-07-25 08:45:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824430": [
        {
            "ioc_value": "45.38.20.122:8989",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-07 19:44:40",
            "last_seen_utc": "2026-08-09 08:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824429": [
        {
            "ioc_value": "40.83.75.96:4000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-07 19:44:35",
            "last_seen_utc": "2026-07-08 08:45:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824428": [
        {
            "ioc_value": "209.99.185.96:20100",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-07 19:43:55",
            "last_seen_utc": "2026-07-08 08:44:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824427": [
        {
            "ioc_value": "182.23.2.163:8211",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-07 19:43:38",
            "last_seen_utc": "2026-07-07 18:44:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824426": [
        {
            "ioc_value": "172.189.57.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-07 19:43:30",
            "last_seen_utc": "2026-09-01 02:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824425": [
        {
            "ioc_value": "14.128.53.229:38217",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-07 19:35:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c12d9b33c2d28dc2323bfa7db99e264fe292dca9ad1ac83f99b2e3762e67cb1/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824424": [
        {
            "ioc_value": "aeerglaeergl098.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-07 19:35:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5c12d9b33c2d28dc2323bfa7db99e264fe292dca9ad1ac83f99b2e3762e67cb1/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824423": [
        {
            "ioc_value": "ljbtuch.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 19:19:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824420": [
        {
            "ioc_value": "eqfjmvb.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 18:41:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824419": [
        {
            "ioc_value": "rsa2rwi5.parsc.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 18:28:45",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824418": [
        {
            "ioc_value": "qza78s32.parsc.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 18:27:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824417": [
        {
            "ioc_value": "parsc.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 18:27:47",
            "last_seen_utc": "2026-06-07 18:28:53",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824416": [
        {
            "ioc_value": "usghiem.olabahiskayit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 18:02:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824415": [
        {
            "ioc_value": "owmekh.yasbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 17:55:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824414": [
        {
            "ioc_value": "fellshow.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 17:33:09",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824413": [
        {
            "ioc_value": "nwdzgly.ninjafruitcubes.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 17:25:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824412": [
        {
            "ioc_value": "oregrlk.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 17:11:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824411": [
        {
            "ioc_value": "jrekcyl.pasoor11.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:29:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824410": [
        {
            "ioc_value": "rd7o3xct.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:28:42",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824408": [
        {
            "ioc_value": "u8z97prx.parsgoal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:27:38",
            "last_seen_utc": "2026-06-08 15:20:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824406": [
        {
            "ioc_value": "http://94.26.83.133/4940cc4b5ddb4a2bb8f8.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.stealc",
            "malware_alias": null,
            "malware_printable": "Stealc",
            "first_seen_utc": "2026-06-07 16:19:12",
            "last_seen_utc": "2026-06-18 16:02:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ataka0506,c2,loader,StealC,stealer",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1824398": [
        {
            "ioc_value": "shssshdscn.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:19:11",
            "last_seen_utc": "2026-07-31 16:39:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824397": [
        {
            "ioc_value": "npanssltejs.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:19:10",
            "last_seen_utc": "2026-07-31 16:39:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824395": [
        {
            "ioc_value": "2no.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:19:09",
            "last_seen_utc": "2026-06-08 21:20:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824396": [
        {
            "ioc_value": "lskannsserv.beer",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 16:19:09",
            "last_seen_utc": "2026-07-31 16:39:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Polygon",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1824404": [
        {
            "ioc_value": "xsutsu.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:58:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824403": [
        {
            "ioc_value": "po6drihx.onexprobet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:57:17",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824402": [
        {
            "ioc_value": "ddimsjy.pasoorbazi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:49:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824401": [
        {
            "ioc_value": "pasoorbazi.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:49:30",
            "last_seen_utc": "2026-06-07 15:49:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824400": [
        {
            "ioc_value": "wxjbkv.onlineshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:44:17",
            "last_seen_utc": "2026-06-08 18:34:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824399": [
        {
            "ioc_value": "whdecl.oxidbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:34:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824394": [
        {
            "ioc_value": "mutvwz.ozabet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:25:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824320": [
        {
            "ioc_value": "b4376y8b.asion.gr",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:37",
            "last_seen_utc": "2026-06-11 10:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824321": [
        {
            "ioc_value": "2jgfxx83.liketudong.biz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:36",
            "last_seen_utc": "2026-06-11 10:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824322": [
        {
            "ioc_value": "30tr04n4gr4m4.cndb-jsdelivr-net.christmas",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:36",
            "last_seen_utc": "2026-06-11 10:05:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824323": [
        {
            "ioc_value": "udyvsthy.quantum-vault.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:34",
            "last_seen_utc": "2026-06-11 10:05:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824319": [
        {
            "ioc_value": "runtime-foundry.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:32",
            "last_seen_utc": "2026-06-11 10:05:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824318": [
        {
            "ioc_value": "kernel-cascade.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:31",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824317": [
        {
            "ioc_value": "thickentributary.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:29",
            "last_seen_utc": "2026-06-11 10:05:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824316": [
        {
            "ioc_value": "j1jh2b9y.jacksorbetter.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:28",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824313": [
        {
            "ioc_value": "4bc74592e63eddfbf8d60991f1987369fd94983cbe1aea350f31f50bad2e2ccb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 15:22:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,mcjit-loader,midie,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1824315": [
        {
            "ioc_value": "container-atlas.digital",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:22:27",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1824312": [
        {
            "ioc_value": "c15b5b6667ea2766cc5e7187818414b2",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 15:22:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,mcjit-loader,midie,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1824311": [
        {
            "ioc_value": "auyflxp.emshab.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 15:22:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,mcjit-loader,midie,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1824296": [
        {
            "ioc_value": "http://78.40.117.175:8000/xmrig",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-07 15:22:24",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,docker-api,monero,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824310": [
        {
            "ioc_value": "https://auyflxp.emshab.bet/67f96131-221b-4322-8c31-cbfd82a14546",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 15:22:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,mcjit-loader,midie,webdav",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1824295": [
        {
            "ioc_value": "152.32.130.136:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 15:22:23",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824293": [
        {
            "ioc_value": "163.7.1.156:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 15:22:22",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824294": [
        {
            "ioc_value": "104.234.155.104:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 15:22:22",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824292": [
        {
            "ioc_value": "38.207.182.124:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-07 15:22:21",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,monero,xmrig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824279": [
        {
            "ioc_value": "167.172.35.253:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-07 15:22:20",
            "last_seen_utc": "2026-06-09 06:39:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1824278": [
        {
            "ioc_value": "206.189.109.161:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-07 15:22:19",
            "last_seen_utc": "2026-06-07 18:10:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1824327": [
        {
            "ioc_value": "seuvsq.pablobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:13:52",
            "last_seen_utc": "2026-06-08 18:53:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824326": [
        {
            "ioc_value": "eqzsjra.pasur21.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:11:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824324": [
        {
            "ioc_value": "quyycf.parsball.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 15:09:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824309": [
        {
            "ioc_value": "lvjekhq.penality.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 14:33:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824307": [
        {
            "ioc_value": "015bj63k.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 14:28:11",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824306": [
        {
            "ioc_value": "puygyxc6.parspoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 14:27:11",
            "last_seen_utc": "2026-06-09 03:25:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824300": [
        {
            "ioc_value": "rwnkdep.penality.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 13:54:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824299": [
        {
            "ioc_value": "penality.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 13:53:41",
            "last_seen_utc": "2026-06-07 23:20:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824298": [
        {
            "ioc_value": "qlggges.penaltibazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 13:19:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824291": [
        {
            "ioc_value": "nnunvu.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 13:04:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824288": [
        {
            "ioc_value": "wfmbnyx.penalti.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 12:39:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824286": [
        {
            "ioc_value": "penalti.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 12:38:24",
            "last_seen_utc": "2026-06-07 12:39:26",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824285": [
        {
            "ioc_value": "et8095ov.parspoker.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 12:27:36",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824284": [
        {
            "ioc_value": "jgjikxq.penalti.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 12:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824282": [
        {
            "ioc_value": "jvlckru.penalty.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 11:22:13",
            "last_seen_utc": "2026-06-08 19:20:44",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824281": [
        {
            "ioc_value": "idwfsf.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 11:06:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824280": [
        {
            "ioc_value": "et5qogz2.one1xbet.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:56:55",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824277": [
        {
            "ioc_value": "nqbecrh.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:43:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824276": [
        {
            "ioc_value": "g2z2cnlz.pascal.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:28:29",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824275": [
        {
            "ioc_value": "pascal.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:27:10",
            "last_seen_utc": "2026-06-07 10:27:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824274": [
        {
            "ioc_value": "5bksyseg.betistmobil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:06:57",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824273": [
        {
            "ioc_value": "zfrfayl.one1xbet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:05:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824272": [
        {
            "ioc_value": "l9tynneu.mybookieiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:03:38",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824271": [
        {
            "ioc_value": "ofin6ctx.mybookieiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 10:01:58",
            "last_seen_utc": "2026-06-07 10:02:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824263": [
        {
            "ioc_value": "http://176.65.139.151/Sakura.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-07 09:52:47",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "mirai,multi-arch,sakura,ssh",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824264": [
        {
            "ioc_value": "221.130.29.85:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.kinsing",
            "malware_alias": "h2miner",
            "malware_printable": "Kinsing",
            "first_seen_utc": "2026-06-07 09:52:46",
            "last_seen_utc": "2026-07-01 19:01:28",
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "chroot-escape,docker-api,Kinsing",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824265": [
        {
            "ioc_value": "107.172.252.155:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 09:52:45",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824266": [
        {
            "ioc_value": "47.253.5.130:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 09:52:44",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824267": [
        {
            "ioc_value": "118.26.111.107:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 09:52:43",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824268": [
        {
            "ioc_value": "31.77.156.62:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 09:52:42",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CVE-2017-9841,libredtail-http,redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824262": [
        {
            "ioc_value": "89.125.255.5:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-07 09:45:38",
            "last_seen_utc": "2026-07-07 18:46:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824260": [
        {
            "ioc_value": "80.253.249.67:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-07 09:45:31",
            "last_seen_utc": "2026-07-08 18:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824261": [
        {
            "ioc_value": "80.66.72.174:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-07 09:45:31",
            "last_seen_utc": "2026-07-12 08:45:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824259": [
        {
            "ioc_value": "60.191.87.107:4506",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.deimos_c2",
            "malware_alias": null,
            "malware_printable": "DeimosC2",
            "first_seen_utc": "2026-06-07 09:45:24",
            "last_seen_utc": "2026-08-22 08:46:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "Deimos,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824258": [
        {
            "ioc_value": "45.13.212.232:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-07 09:44:59",
            "last_seen_utc": "2026-07-10 08:45:43",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824256": [
        {
            "ioc_value": "43.136.92.170:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-07 09:44:57",
            "last_seen_utc": "2026-07-07 08:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824257": [
        {
            "ioc_value": "43.136.92.170:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-07 09:44:57",
            "last_seen_utc": "2026-07-07 08:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Sliver",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824255": [
        {
            "ioc_value": "31.57.184.154:2505",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-07 09:44:50",
            "last_seen_utc": "2026-09-01 02:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824254": [
        {
            "ioc_value": "209.99.188.193:4323",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-07 09:44:10",
            "last_seen_utc": "2026-09-01 02:44:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824253": [
        {
            "ioc_value": "182.23.2.163:17001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-07 09:43:45",
            "last_seen_utc": "2026-07-07 08:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824252": [
        {
            "ioc_value": "172.81.61.108:2030",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-07 09:43:38",
            "last_seen_utc": "2026-07-07 18:43:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824251": [
        {
            "ioc_value": "154.94.232.165:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-07 09:43:26",
            "last_seen_utc": "2026-08-29 08:43:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824249": [
        {
            "ioc_value": "146.70.41.174:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.evilginx",
            "malware_alias": null,
            "malware_printable": "Evilginx",
            "first_seen_utc": "2026-06-07 09:43:23",
            "last_seen_utc": "2026-07-28 18:43:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Evilginx,EvilGoPhish",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824250": [
        {
            "ioc_value": "147.124.210.158:7707",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-07 09:43:23",
            "last_seen_utc": "2026-07-07 18:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824248": [
        {
            "ioc_value": "138.9.118.222:8015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-07 09:43:17",
            "last_seen_utc": "2026-07-07 18:43:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824247": [
        {
            "ioc_value": "137.184.163.27:5613",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 09:43:16",
            "last_seen_utc": "2026-09-01 02:43:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824246": [
        {
            "ioc_value": "a96ampff.mrgreenbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 09:29:35",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824245": [
        {
            "ioc_value": "ksaj1cgw.mrgreenbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 09:28:24",
            "last_seen_utc": "2026-06-07 09:29:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824244": [
        {
            "ioc_value": "avygupe.one1xbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 09:26:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824243": [
        {
            "ioc_value": "mqbjnx.jamjahani.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 09:02:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824242": [
        {
            "ioc_value": "frans-meijers.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-07 08:50:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3fc87275954273657917b849d85fed130a8c8392950d64004f8b9fd61b97603d/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824241": [
        {
            "ioc_value": "ilmlvxt.lolsurpriseball.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 08:47:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824240": [
        {
            "ioc_value": "bvnvrjx.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 08:09:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824234": [
        {
            "ioc_value": "207.56.119.59:777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-07 07:40:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5383de5956d052794022598d14df4f8ccaf6c278f6d5b8c13dc2ec0ab6b10fe3/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824233": [
        {
            "ioc_value": "hdkkxsm.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 07:31:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824231": [
        {
            "ioc_value": "207.56.119.59:888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-07 07:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824232": [
        {
            "ioc_value": "23.160.168.174:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.raton_rat",
            "malware_alias": null,
            "malware_printable": "RatonRAT",
            "first_seen_utc": "2026-06-07 07:30:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RatonRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824230": [
        {
            "ioc_value": "3mm5jtvt.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 07:29:27",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824229": [
        {
            "ioc_value": "http://inini.kesug.com/maith.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.kimsuky",
            "malware_alias": null,
            "malware_printable": "Kimsuky",
            "first_seen_utc": "2026-06-07 07:28:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824228": [
        {
            "ioc_value": "s1s2jfjh.mrbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 07:27:55",
            "last_seen_utc": "2026-06-08 17:21:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824083": [
        {
            "ioc_value": "94.26.3.180:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824084": [
        {
            "ioc_value": "94.26.3.180:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824085": [
        {
            "ioc_value": "172.86.93.229:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824086": [
        {
            "ioc_value": "209.99.185.216:1013",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824087": [
        {
            "ioc_value": "103.97.131.179:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824088": [
        {
            "ioc_value": "94.26.3.52:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:27",
            "last_seen_utc": "2026-09-01 02:46:36",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824089": [
        {
            "ioc_value": "192.109.200.22:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824090": [
        {
            "ioc_value": "193.202.84.1:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824091": [
        {
            "ioc_value": "193.233.198.38:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824092": [
        {
            "ioc_value": "45.156.87.169:5631",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824093": [
        {
            "ioc_value": "144.31.191.160:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824094": [
        {
            "ioc_value": "116.213.43.144:444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824095": [
        {
            "ioc_value": "45.138.16.104:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824097": [
        {
            "ioc_value": "31.56.209.105:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824096": [
        {
            "ioc_value": "151.243.250.237:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:23",
            "last_seen_utc": "2026-06-06 16:20:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824098": [
        {
            "ioc_value": "77.83.39.141:56002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:22",
            "last_seen_utc": "2026-07-28 16:59:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824099": [
        {
            "ioc_value": "77.83.39.141:56003",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.pure_rat",
            "malware_alias": "PureHVNC,ResolverRAT",
            "malware_printable": "PureRAT",
            "first_seen_utc": "2026-06-07 07:23:22",
            "last_seen_utc": "2026-09-01 02:46:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "PureHVNC,PureRAT,ResolverRAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824171": [
        {
            "ioc_value": "120.55.246.213:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-07 07:23:21",
            "last_seen_utc": "2026-07-07 06:45:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "37963,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1824052": [
        {
            "ioc_value": "203.88.125.186:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-07 07:23:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Sliver",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824053": [
        {
            "ioc_value": "149.12.67.99:445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-07 07:23:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "aka,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1824068": [
        {
            "ioc_value": "169.239.130.20:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-07 07:23:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DDoS,honeypot,IoT,telnet",
            "anonymous": 0,
            "reporter": "wasuma"
        }
    ],
    "1824070": [
        {
            "ioc_value": "95.59.142.69:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-07 07:23:17",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,libredtail-http,Redtail",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824149": [
        {
            "ioc_value": "aptabase.jesfeoqrj3.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "apk.androrat",
            "malware_alias": null,
            "malware_printable": "AndroRAT",
            "first_seen_utc": "2026-06-07 07:23:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "android,c2,google-play,spyware",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824180": [
        {
            "ioc_value": "c8828efba8e167e85a1d7f4a86aa743f1bba9c19e467a4e7e50e7970d51b28a9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824181": [
        {
            "ioc_value": "f2d3905ee38b2b5c0b724d582f14eb1db7621ffb8f3826df686a20784341614c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824182": [
        {
            "ioc_value": "3eebbad99104a48977441a791829a7a442e745ee27b7ab1be7e7418b7ca3e8d9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824183": [
        {
            "ioc_value": "df9e38ea510a595071a3263a83a15753fc1b51c29655eaa9579efc8d1dff6f29",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824184": [
        {
            "ioc_value": "bantamoro.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824188": [
        {
            "ioc_value": "151.243.113.33:9000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-07 07:23:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824185": [
        {
            "ioc_value": "dataramara.icu",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824186": [
        {
            "ioc_value": "davalnd.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:23:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824187": [
        {
            "ioc_value": "151.243.113.33:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-07 07:23:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824189": [
        {
            "ioc_value": "151.243.113.57:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-07 07:23:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://otx.alienvault.com/pulse/6a23c8bd4940266d4f3ae8dd",
            "tags": null,
            "anonymous": 0,
            "reporter": "miikie"
        }
    ],
    "1824206": [
        {
            "ioc_value": "176.65.139.126:2701",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-07 07:23:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1824227": [
        {
            "ioc_value": "43.99.110.114:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-07 07:21:04",
            "last_seen_utc": "2026-06-15 06:51:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824226": [
        {
            "ioc_value": "119.91.78.3:808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-07 07:20:51",
            "last_seen_utc": "2026-06-18 06:56:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824225": [
        {
            "ioc_value": "165.154.227.66:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-07 07:20:50",
            "last_seen_utc": "2026-07-07 06:45:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824223": [
        {
            "ioc_value": "lastnight.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:06:56",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824224": [
        {
            "ioc_value": "lightsnow.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-07 07:06:56",
            "last_seen_utc": "2026-07-07 12:22:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824222": [
        {
            "ioc_value": "lbgkfp.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 07:01:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824221": [
        {
            "ioc_value": "boixyye.jogodobicho.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 06:52:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824220": [
        {
            "ioc_value": "lishman.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-07 06:50:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ab7cc466b9ef866753d53adf76f5ac36a5fe54642dcd21ee3f0b7fcdf3ac4f9a/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824219": [
        {
            "ioc_value": "172.111.169.79:9702",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-07 06:45:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824218": [
        {
            "ioc_value": "196.251.107.114:24033",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-07 06:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824217": [
        {
            "ioc_value": "38.60.250.187:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-07 06:45:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824216": [
        {
            "ioc_value": "yxjmsvr.jamjahani.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 06:18:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824215": [
        {
            "ioc_value": "ugmitqk.one1xbet.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 05:35:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824214": [
        {
            "ioc_value": "qtcfxojh.mostbetresmi.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 05:27:57",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824213": [
        {
            "ioc_value": "jqx88sge.mostbetresmi.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 05:27:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824212": [
        {
            "ioc_value": "2dz4gggg.betgopro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 05:05:53",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824211": [
        {
            "ioc_value": "avhbto.yasbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 05:05:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824210": [
        {
            "ioc_value": "aarcyyo.one1xbet.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 04:57:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824208": [
        {
            "ioc_value": "jrnxmey.one1xbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 04:19:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824207": [
        {
            "ioc_value": "one1xbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 04:18:14",
            "last_seen_utc": "2026-06-07 09:25:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824201": [
        {
            "ioc_value": "lzsmmza.one1xbet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 03:39:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824200": [
        {
            "ioc_value": "one1xbet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 03:39:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824199": [
        {
            "ioc_value": "efd7fi03.monti.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 03:28:54",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824198": [
        {
            "ioc_value": "eor4l2gc.monti.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 03:27:10",
            "last_seen_utc": "2026-06-07 03:27:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824197": [
        {
            "ioc_value": "lfrzjdk.one1x.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 03:02:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824196": [
        {
            "ioc_value": "ivqivx.xenicalby6.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 03:01:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824194": [
        {
            "ioc_value": "njhhbmh.olabahiskayit.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 02:23:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824179": [
        {
            "ioc_value": "gqmalnx.ogwil.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:47:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824177": [
        {
            "ioc_value": "ogwil.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:43:34",
            "last_seen_utc": "2026-06-07 01:43:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824175": [
        {
            "ioc_value": "oghab.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:42:26",
            "last_seen_utc": "2026-06-07 01:42:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824174": [
        {
            "ioc_value": "60hx33ds.minescasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:28:07",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824173": [
        {
            "ioc_value": "ajm1kklw.minescasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:26:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824172": [
        {
            "ioc_value": "minescasino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:26:36",
            "last_seen_utc": "2026-06-07 01:26:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824170": [
        {
            "ioc_value": "geovin.bet404farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:04:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824169": [
        {
            "ioc_value": "kvzkqjf.ninjafruitcubes.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 01:03:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824166": [
        {
            "ioc_value": "nbabet.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 00:53:54",
            "last_seen_utc": "2026-06-07 00:53:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824165": [
        {
            "ioc_value": "nbabet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 00:43:22",
            "last_seen_utc": "2026-06-07 00:44:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "7June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824163": [
        {
            "ioc_value": "mhjzma3p.betebetwin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-07 00:04:52",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824162": [
        {
            "ioc_value": "knstbms.nardtakhte.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 23:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824161": [
        {
            "ioc_value": "nardtakhte.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 23:59:03",
            "last_seen_utc": "2026-06-07 00:00:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824160": [
        {
            "ioc_value": "4h79jvxe.metrobahiscark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 23:27:45",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824159": [
        {
            "ioc_value": "5iet65p3.metrobahiscark.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 23:26:17",
            "last_seen_utc": "2026-06-06 23:26:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824158": [
        {
            "ioc_value": "lvgnygm.nannafreving.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 23:25:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824154": [
        {
            "ioc_value": "ylccwf.jamjahani.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 23:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824152": [
        {
            "ioc_value": "enkkxbi.n1betiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 22:47:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824151": [
        {
            "ioc_value": "154.198.49.31:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 22:45:25",
            "last_seen_utc": "2026-07-08 08:46:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824147": [
        {
            "ioc_value": "ybyvozc.jamjahani.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 22:04:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824145": [
        {
            "ioc_value": "dbnnsjv.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 21:56:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824144": [
        {
            "ioc_value": "md7buqog.melbetturkiye.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 21:27:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824143": [
        {
            "ioc_value": "melbetturkiye.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 21:26:22",
            "last_seen_utc": "2026-06-06 21:26:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824142": [
        {
            "ioc_value": "npawoli.jamjahani.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 21:18:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824141": [
        {
            "ioc_value": "hetljl.jamjahani.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 21:03:41",
            "last_seen_utc": "2026-06-09 15:11:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824140": [
        {
            "ioc_value": "rvlpcvr.jogodobicho.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 20:44:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824139": [
        {
            "ioc_value": "viopkdh.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 20:01:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824134": [
        {
            "ioc_value": "95.211.182.120:6794",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-06 19:44:54",
            "last_seen_utc": "2026-07-12 08:46:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824133": [
        {
            "ioc_value": "91.221.191.167:4323",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-06 19:44:51",
            "last_seen_utc": "2026-07-22 18:46:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824132": [
        {
            "ioc_value": "5.230.201.36:6606",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-06 19:44:38",
            "last_seen_utc": "2026-07-25 08:45:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824131": [
        {
            "ioc_value": "5.230.201.242:1994",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-06 19:44:37",
            "last_seen_utc": "2026-07-12 08:45:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824130": [
        {
            "ioc_value": "46.151.182.243:55380",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-06 19:44:30",
            "last_seen_utc": "2026-09-01 02:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824129": [
        {
            "ioc_value": "2.26.75.239:1971",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-06 19:43:45",
            "last_seen_utc": "2026-07-09 08:44:25",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824127": [
        {
            "ioc_value": "192.159.99.26:6969",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-06 19:43:40",
            "last_seen_utc": "2026-07-07 08:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824128": [
        {
            "ioc_value": "192.177.111.89:7788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-06 19:43:40",
            "last_seen_utc": "2026-07-07 08:44:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824126": [
        {
            "ioc_value": "185.192.124.218:2177",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-06 19:43:35",
            "last_seen_utc": "2026-07-07 08:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824125": [
        {
            "ioc_value": "158.94.211.253:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-06 19:43:22",
            "last_seen_utc": "2026-07-07 08:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824124": [
        {
            "ioc_value": "157.254.223.135:2600",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-06 19:43:21",
            "last_seen_utc": "2026-07-09 08:43:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824123": [
        {
            "ioc_value": "156.225.22.201:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-06 19:43:19",
            "last_seen_utc": "2026-07-10 18:43:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824122": [
        {
            "ioc_value": "xhqkuit.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 19:27:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824121": [
        {
            "ioc_value": "7tzr8pjb.mattheneus-healthcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 19:26:46",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824120": [
        {
            "ioc_value": "s4d36a8i.mattheneus-healthcare.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 19:25:33",
            "last_seen_utc": "2026-06-06 19:25:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824119": [
        {
            "ioc_value": "s3unirpm.bet90land.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 19:03:48",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824118": [
        {
            "ioc_value": "rxxgnn.jamjahani.cash",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 19:03:08",
            "last_seen_utc": "2026-06-08 21:06:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824113": [
        {
            "ioc_value": "194.116.236.7:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-06 18:50:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e5b2a48b132c284602d5304a46bf5f9a9691cc214cbf78e66ead55c2e6436b48/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824112": [
        {
            "ioc_value": "yghqghh.lolsurpriseball.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 18:48:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824111": [
        {
            "ioc_value": "1314180598-d1gxufiq1h.ap-guangzhou.tencentscf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 18:45:12",
            "last_seen_utc": "2026-06-14 18:45:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824110": [
        {
            "ioc_value": "zqgqzuo.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 18:38:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824107": [
        {
            "ioc_value": "eycgzaa.jamjahani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 17:55:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824106": [
        {
            "ioc_value": "is34r2fh.marc90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 17:28:13",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824105": [
        {
            "ioc_value": "z0pub8f7.marc90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 17:25:10",
            "last_seen_utc": "2026-06-06 17:25:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824104": [
        {
            "ioc_value": "fgeszrs.dahdahtoys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 17:17:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824101": [
        {
            "ioc_value": "xvbfkf.jamjahani.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 16:58:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824100": [
        {
            "ioc_value": "tvonayz.jamjahani.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 16:38:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824077": [
        {
            "ioc_value": "arihanp.jamjahani.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 15:59:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824076": [
        {
            "ioc_value": "bodegaycocina.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-06 15:55:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2966628a54237ac01ae01f1f0d2389dfd2b7d5cb4e9615679fc146a62974a016/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824075": [
        {
            "ioc_value": "66.29.148.149:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-06 15:50:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824073": [
        {
            "ioc_value": "46.33.14.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-06 15:30:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824072": [
        {
            "ioc_value": "923nr8dp.chloroquineser.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 15:25:38",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824071": [
        {
            "ioc_value": "w0vflian.chloroquineser.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 15:24:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824069": [
        {
            "ioc_value": "urdjsnn.jamjahani.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 15:21:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824063": [
        {
            "ioc_value": "rmbvag.jamjahani2026shartbandi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 14:58:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824061": [
        {
            "ioc_value": "caxvhiw.jamjahani.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 14:42:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824060": [
        {
            "ioc_value": "dkrbvhs.jamjahani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 14:04:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824059": [
        {
            "ioc_value": "po9isauo.bet90boro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 14:03:17",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824055": [
        {
            "ioc_value": "uwxrhkk.mangobetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 13:58:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824051": [
        {
            "ioc_value": "v47m17r8.cerocarey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 13:25:26",
            "last_seen_utc": "2026-06-11 10:04:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824050": [
        {
            "ioc_value": "4wuw3u19.cerocarey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 13:24:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1824049": [
        {
            "ioc_value": "nzfcrki.lolsurpriseball.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 13:20:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824044": [
        {
            "ioc_value": "dlklyo.jamjahani2026.football",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 12:57:37",
            "last_seen_utc": "2026-06-09 03:54:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824043": [
        {
            "ioc_value": "vivanuncios.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-06 12:45:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8a8b3c255a7ca0f6ef1a6b3756b1f65c8f30225bca8d8d8addc0f581cfc39139/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824042": [
        {
            "ioc_value": "errcxxn.libertabet.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 12:41:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824041": [
        {
            "ioc_value": "libertabet.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 12:41:13",
            "last_seen_utc": "2026-06-06 12:41:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824040": [
        {
            "ioc_value": "taartendoordetijd.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-06 12:25:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a33948996e02190a9c902c0547fb9cea700e1dc34061e9ba389323900851857d/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824039": [
        {
            "ioc_value": "mgyhtpm.libertabetgiris.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 12:02:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824037": [
        {
            "ioc_value": "proyectoeleuteria.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-06 12:00:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/88939ef17d58c79d48d8ee9304d1e911dc13ed4c5647646811e80018f6b84a51/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824029": [
        {
            "ioc_value": "154.12.86.154:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 11:45:14",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824030": [
        {
            "ioc_value": "154.12.86.154:8889",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 11:45:14",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824031": [
        {
            "ioc_value": "154.12.86.154:9004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 11:45:14",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824028": [
        {
            "ioc_value": "wcrvlfe.kvbel.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 11:25:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824027": [
        {
            "ioc_value": "34bbeito.canlibahis1xbet.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 11:25:45",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824025": [
        {
            "ioc_value": "wvquvzx.kenzobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 11:23:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824019": [
        {
            "ioc_value": "lfwboc.jamejahani.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 10:57:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824018": [
        {
            "ioc_value": "bdyqsrv.kbshavanese.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 10:44:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824015": [
        {
            "ioc_value": "health.hazelkit.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-06 10:41:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eb03106fc4ffe1d6580fa7a18cde415991d1a3992ce1b5d4bdb25f4906d38e5d/",
            "tags": "DocSaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824016": [
        {
            "ioc_value": "proxy.willowfleet.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-06 10:41:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eb03106fc4ffe1d6580fa7a18cde415991d1a3992ce1b5d4bdb25f4906d38e5d/",
            "tags": "DocSaStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823980": [
        {
            "ioc_value": "http://45.205.1.59/ok",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:06",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dropper,infra-rotation,Mirai,nsenter-escape,persistent-operator",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823981": [
        {
            "ioc_value": "45.205.1.59:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:04",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dropper,infra-rotation,Mirai",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823982": [
        {
            "ioc_value": "188.54.47.14:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:03",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,file-upload-backdoor,php-webshell,ubuntu-container,webshell",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823983": [
        {
            "ioc_value": "172.104.241.98:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,Linode,multi-pot,postgres,reconnaissance,redis,SOAP",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823984": [
        {
            "ioc_value": "180.189.174.146:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:02",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823985": [
        {
            "ioc_value": "83.229.8.197:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:01",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823986": [
        {
            "ioc_value": "150.241.98.49:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:38:00",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823987": [
        {
            "ioc_value": "165.154.46.183:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:37:59",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823988": [
        {
            "ioc_value": "185.177.125.71:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:37:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823989": [
        {
            "ioc_value": "143.198.199.73:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 10:37:58",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "DigitalOcean,docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1824000": [
        {
            "ioc_value": "voltrix.tv",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 10:37:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1824013": [
        {
            "ioc_value": "121.89.81.108:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824014": [
        {
            "ioc_value": "156.245.235.51:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:44",
            "last_seen_utc": "2026-07-07 06:44:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-1234567890",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824012": [
        {
            "ioc_value": "47.101.51.235:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:30",
            "last_seen_utc": "2026-09-01 02:47:05",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824011": [
        {
            "ioc_value": "39.97.243.199:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824010": [
        {
            "ioc_value": "85.121.4.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:28",
            "last_seen_utc": "2026-06-07 13:00:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-6",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824009": [
        {
            "ioc_value": "101.201.111.98:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:26",
            "last_seen_utc": "2026-07-07 06:45:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824008": [
        {
            "ioc_value": "167.71.233.187:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 10:32:23",
            "last_seen_utc": "2026-07-20 14:46:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1824007": [
        {
            "ioc_value": "jjotnoj.jojobetuyelik.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 10:06:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1824005": [
        {
            "ioc_value": "jojobetuyelik.info",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 10:05:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1824001": [
        {
            "ioc_value": "91.215.85.121:8849",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-06 09:44:56",
            "last_seen_utc": "2026-07-12 08:46:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823999": [
        {
            "ioc_value": "zvxeaqm.jogodobicho.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 09:27:43",
            "last_seen_utc": "2026-06-07 06:52:27",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823998": [
        {
            "ioc_value": "6ju7fjjz.bordoo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 09:23:58",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823997": [
        {
            "ioc_value": "jdjgvaia.bordoo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 09:23:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823996": [
        {
            "ioc_value": "i8lvkq19.bordino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 09:17:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823979": [
        {
            "ioc_value": "4lm4v3bu.bet404.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 09:03:46",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823973": [
        {
            "ioc_value": "jrpzgr.jamejahani.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 08:56:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823972": [
        {
            "ioc_value": "vvxcqgv.jamjahani.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 08:49:06",
            "last_seen_utc": "2026-06-07 06:13:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823971": [
        {
            "ioc_value": "138.124.186.2:7000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-06 08:21:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e3b824d9402d5cc6c295e1f0be9992af4e9b4bb38727e8c70caac664209c852b/",
            "tags": "dropped-by-ACRStealer,SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823970": [
        {
            "ioc_value": "xzz.proxygrid.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-06 08:20:21",
            "last_seen_utc": "2026-06-06 08:20:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e3b824d9402d5cc6c295e1f0be9992af4e9b4bb38727e8c70caac664209c852b/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823969": [
        {
            "ioc_value": "172.245.95.9:7601",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-06 08:18:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c52755dff77ce635cbfbc96ce0d74519584cef8b9721b3f48210d3a71be4ac2b/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823968": [
        {
            "ioc_value": "ubzfosw.jamjahani.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 08:11:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823967": [
        {
            "ioc_value": "jamjahani.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 08:10:19",
            "last_seen_utc": "2026-06-06 08:10:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1823963": [
        {
            "ioc_value": "ofwbhuk.jamjahani.website",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 07:32:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823961": [
        {
            "ioc_value": "zxuq0oha.bord90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 07:18:34",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823960": [
        {
            "ioc_value": "6jcq2nrd.bord90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 07:16:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823959": [
        {
            "ioc_value": "bushesbone.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-06 07:02:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823958": [
        {
            "ioc_value": "184.95.51.11:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-06 07:01:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8ad8bc3ab40d137a1213b5c6e65d0e1c060b8583ec91520c4b2a8bee96f5b485/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823957": [
        {
            "ioc_value": "194.26.192.187:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-06 07:00:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823954": [
        {
            "ioc_value": "154.88.96.41:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-06 07:00:16",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823951": [
        {
            "ioc_value": "khndao.x50wheel.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 06:56:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823950": [
        {
            "ioc_value": "posdteu.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-06 06:56:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823949": [
        {
            "ioc_value": "mathlah.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-06 06:55:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823948": [
        {
            "ioc_value": "piciidq.jamjahani.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 06:54:34",
            "last_seen_utc": "2026-06-06 22:03:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823946": [
        {
            "ioc_value": "gauravitechnologies.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-06 06:52:21",
            "last_seen_utc": "2026-06-09 05:52:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823947": [
        {
            "ioc_value": "onesevenapps.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-06 06:52:21",
            "last_seen_utc": "2026-06-09 05:52:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RemusStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823945": [
        {
            "ioc_value": "onefunnydog.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-06 06:49:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/314dfb2385d84fd279b7e297313da57e3d349711886e152d2a6e82016a657f9f/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823944": [
        {
            "ioc_value": "lowfoodanddrink.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-06 06:48:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f1b785b9f11af50a8c8ca12202676096f4ec8a93957f1aca506f722b0cbf57a2/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823941": [
        {
            "ioc_value": "u9ppj9u3hfphtv7.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-06 06:46:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6619fd64400aa38229a4dc722c9fcb8134cce199f444f766b8ac9ff59dafdfde/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823942": [
        {
            "ioc_value": "vednb0n9eo7pn6z.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-06 06:46:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6619fd64400aa38229a4dc722c9fcb8134cce199f444f766b8ac9ff59dafdfde/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823943": [
        {
            "ioc_value": "vj2k4sffbxpxhhr.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-06 06:46:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6619fd64400aa38229a4dc722c9fcb8134cce199f444f766b8ac9ff59dafdfde/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823940": [
        {
            "ioc_value": "gm0vmvr1kt1i1n8.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-06 06:46:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6619fd64400aa38229a4dc722c9fcb8134cce199f444f766b8ac9ff59dafdfde/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823939": [
        {
            "ioc_value": "pmpo.cloudvector.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-06 06:42:04",
            "last_seen_utc": "2026-06-06 06:42:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/664f2e71b527adadbe24f929057edf5a270800162dc18dca28ef49ffea5bc00d/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823938": [
        {
            "ioc_value": "gsk.scriptlattice.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-06 06:41:17",
            "last_seen_utc": "2026-06-06 06:41:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d88efdaa4d897576e5e7c8aab16068386ca4b9a4de0a1e4d17a0c4d59b48b25e/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823936": [
        {
            "ioc_value": "95.179.252.135:3334",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 06:28:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eacd44512510f9232e6605e17c4f953454840a99f73b08a204bbc2ad16c6c348/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823937": [
        {
            "ioc_value": "95.179.252.135:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 06:28:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eacd44512510f9232e6605e17c4f953454840a99f73b08a204bbc2ad16c6c348/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823934": [
        {
            "ioc_value": "webfloweu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-06 06:28:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eacd44512510f9232e6605e17c4f953454840a99f73b08a204bbc2ad16c6c348/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823935": [
        {
            "ioc_value": "webupdateflow.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.hijackloader",
            "malware_alias": "DOILoader,GHOSTPULSE,IDAT Loader,SHADOWLADDER",
            "malware_printable": "HijackLoader",
            "first_seen_utc": "2026-06-06 06:28:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eacd44512510f9232e6605e17c4f953454840a99f73b08a204bbc2ad16c6c348/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823925": [
        {
            "ioc_value": "mipcepl.jamjahani.site",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 06:19:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822888": [
        {
            "ioc_value": "34.173.83.139:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 06:03:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "aws-imds,credential-theft,docker-api,iam-theft,metadata-attack",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822889": [
        {
            "ioc_value": "94.124.119.36:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 06:03:46",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "backdoor-key,container-escape,docker-api,ssh-key-plant,ubuntu-container",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822890": [
        {
            "ioc_value": "177.104.165.104:9443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,miner,payload-host,port-9443,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822891": [
        {
            "ioc_value": "http://177.104.165.104:9443/xmrig",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,miner,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822892": [
        {
            "ioc_value": "116.34.14.135:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:45",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "credential-theft,mikrotik-recon,reconnaissance,ssh-bruteforce,telegram-stealer",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822893": [
        {
            "ioc_value": "118.182.166.128:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xorddos",
            "malware_alias": "XORDDOS",
            "malware_printable": "XOR DDoS",
            "first_seen_utc": "2026-06-06 06:03:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "BillGates,DDoS,ssh-bruteforce,XOR.DDoS",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822894": [
        {
            "ioc_value": "221.234.36.123:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "mdrfckr,mining-toolkit,Outlaw,ssh-bruteforce",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822895": [
        {
            "ioc_value": "167.71.47.6:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 06:03:44",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "DigitalOcean,dropper,Mirai,multi-hash,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822896": [
        {
            "ioc_value": "217.79.226.23:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-06 06:03:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822897": [
        {
            "ioc_value": "47.95.234.23:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-06 06:03:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822898": [
        {
            "ioc_value": "47.238.121.28:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-06 06:03:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822899": [
        {
            "ioc_value": "101.36.104.242:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-06 06:03:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CN,docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822900": [
        {
            "ioc_value": "37.255.239.81:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "reconnaissance,ssh-bruteforce",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822901": [
        {
            "ioc_value": "46.151.182.191:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,database-enumeration,postgres,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822902": [
        {
            "ioc_value": "http://45.198.224.5/ok",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-06 06:03:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,infra-rotation,Mirai,nsenter-escape,self-hosted",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822903": [
        {
            "ioc_value": "47.103.192.156:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:38",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "h2miner,module-loading,muhstik,redis,slaveof-attack,SYSTEM.EXEC",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822904": [
        {
            "ioc_value": "8.134.122.94:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-06 06:03:38",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "module-loading,muhstik,redis,slaveof-attack,SYSTEM.EXEC",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1823742": [
        {
            "ioc_value": "http://2flowers-my.xyz/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:22",
            "last_seen_utc": "2026-06-07 15:14:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823743": [
        {
            "ioc_value": "http://vipcloud-my.xyz/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:22",
            "last_seen_utc": "2026-06-07 15:14:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823744": [
        {
            "ioc_value": "http://gstatic-node.io/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:21",
            "last_seen_utc": "2026-06-07 15:14:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823745": [
        {
            "ioc_value": "http://solopodvip-my.xyz/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:21",
            "last_seen_utc": "2026-06-07 15:14:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823746": [
        {
            "ioc_value": "http://winhttp.dll/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:21",
            "last_seen_utc": "2026-06-07 15:14:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823739": [
        {
            "ioc_value": "http://82.117.255.80/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:19",
            "last_seen_utc": "2026-06-07 15:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823740": [
        {
            "ioc_value": "http://195.123.226.91/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:19",
            "last_seen_utc": "2026-06-07 15:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823741": [
        {
            "ioc_value": "http://195.123.226.167/c2sock",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-06 06:01:19",
            "last_seen_utc": "2026-06-07 15:14:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823665": [
        {
            "ioc_value": "linkedmba.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-06 06:01:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1823666": [
        {
            "ioc_value": "allenjarmon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-06 06:01:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1823667": [
        {
            "ioc_value": "writersfm.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-06 06:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1823668": [
        {
            "ioc_value": "crewlworkinew.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-06 06:01:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1823670": [
        {
            "ioc_value": "linkedwiz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-06 06:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1823671": [
        {
            "ioc_value": "amazon-cz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.castleloader",
            "malware_alias": null,
            "malware_printable": "CASTLELOADER",
            "first_seen_utc": "2026-06-06 06:01:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "castleloader,clickfix",
            "anonymous": 0,
            "reporter": "Overkill1984zzz"
        }
    ],
    "1823697": [
        {
            "ioc_value": "178.128.1.56:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 06:01:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14061,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1823698": [
        {
            "ioc_value": "44.218.174.67:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 06:01:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "14618,c2,censys,cobalt strike",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1823699": [
        {
            "ioc_value": "128.90.171.185:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-06 06:01:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "22363,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1823700": [
        {
            "ioc_value": "45.81.17.44:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-06 06:01:08",
            "last_seen_utc": "2026-07-10 08:45:51",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "211056,asyncrat,c2,censys",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1823701": [
        {
            "ioc_value": "196.75.227.199:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-06 06:01:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "36903,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1823702": [
        {
            "ioc_value": "168.245.203.112:3790",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.meterpreter",
            "malware_alias": null,
            "malware_printable": "Meterpreter",
            "first_seen_utc": "2026-06-06 06:01:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": null,
            "tags": "58580,c2,censys,metasploit",
            "anonymous": 0,
            "reporter": "sojubear"
        }
    ],
    "1823827": [
        {
            "ioc_value": "groupewadesecurity.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:39",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823828": [
        {
            "ioc_value": "saludmasculina-mx.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:39",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823829": [
        {
            "ioc_value": "sihat-alrajul-ar.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:39",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823830": [
        {
            "ioc_value": "salud-masculina-mex.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:38",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823831": [
        {
            "ioc_value": "sihat-alrajul-bro.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:38",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823832": [
        {
            "ioc_value": "sihat-alrajul-bf.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:37",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823833": [
        {
            "ioc_value": "salud-masculina-mexic.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:37",
            "last_seen_utc": "2026-06-07 15:16:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823834": [
        {
            "ioc_value": "sihat-alrajul-poc.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:36",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823835": [
        {
            "ioc_value": "reclaimremedy.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:36",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823836": [
        {
            "ioc_value": "insightinnovation.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:35",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823837": [
        {
            "ioc_value": "cipherinsight.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:35",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823838": [
        {
            "ioc_value": "sihat-alrajul-go.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:35",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823839": [
        {
            "ioc_value": "sihat-alrajul-iq.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:34",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823840": [
        {
            "ioc_value": "sihat-alrajul-aro.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:34",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823841": [
        {
            "ioc_value": "sihat-alrajul-ira.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:33",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823843": [
        {
            "ioc_value": "sihat-alrajul-pou.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:33",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823845": [
        {
            "ioc_value": "labibsyagakport.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:32",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823842": [
        {
            "ioc_value": "sihat-alrajul-qe.buzz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:31",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823844": [
        {
            "ioc_value": "refundrescue.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:31",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1823846": [
        {
            "ioc_value": "koloosdas.life",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.rhadamanthys",
            "malware_alias": null,
            "malware_printable": "Rhadamanthys",
            "first_seen_utc": "2026-06-06 06:00:30",
            "last_seen_utc": "2026-06-07 15:16:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822872": [
        {
            "ioc_value": "http://196.251.107.104/Psd8eZaW/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-06 06:00:16",
            "last_seen_utc": "2026-06-24 12:54:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "282234,amadey,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1822873": [
        {
            "ioc_value": "http://196.251.107.104/Psd8eZaW/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-06 06:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "282234,amadey,c2",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1822884": [
        {
            "ioc_value": "a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 06:00:15",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,llvm-mcjit-loader,webdav-rundll32",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822880": [
        {
            "ioc_value": "temp.logicfrontier.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 06:00:14",
            "last_seen_utc": "2026-06-07 14:40:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,llvm-mcjit-loader,webdav-rundll32",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822885": [
        {
            "ioc_value": "ea2bb5ebd6482e87f25949e792c976dfeaddc1bcb36e2c62476854e4aa22d3a7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 06:00:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,llvm-mcjit-loader,webdav-rundll32",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822886": [
        {
            "ioc_value": "7340167a765d3d005af93fd10dbd6af48abfd50055fd6b8fca987b7c1363e5d4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 06:00:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/a4225ad00fbe2123e27d25bca0988586164e2467762d2d1db304300b2d24d04b",
            "tags": "clickfix,llvm-mcjit-loader,webdav-rundll32",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1823861": [
        {
            "ioc_value": "185.102.115.93:56001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 05:56:41",
            "last_seen_utc": "2026-08-20 05:33:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c23f672216fc75e637c1b6dd66ee9753996d9d5dc123da23151fb99ba9814011/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823859": [
        {
            "ioc_value": "212.34.155.18:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-06 05:54:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/766bcde5ddd3ae6e2758c749539c5c5d83a1f8a642caeb0bc1bc2c76b5004e7a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823860": [
        {
            "ioc_value": "45.150.66.187:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-06 05:54:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/766bcde5ddd3ae6e2758c749539c5c5d83a1f8a642caeb0bc1bc2c76b5004e7a/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823858": [
        {
            "ioc_value": "mdprzinwo.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.snappy_client",
            "malware_alias": "SilabRAT",
            "malware_printable": "SnappyClient",
            "first_seen_utc": "2026-06-06 05:54:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/766bcde5ddd3ae6e2758c749539c5c5d83a1f8a642caeb0bc1bc2c76b5004e7a/",
            "tags": "SnappyClient",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823857": [
        {
            "ioc_value": "181.214.48.111:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-06 05:49:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/65e1f57be4a1efe7b1193da12707795493ea98a34d4813be912baf1df8d701d1/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823856": [
        {
            "ioc_value": "gvrrgvn.jamjahani.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 05:41:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823855": [
        {
            "ioc_value": "jamjahani.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 05:36:33",
            "last_seen_utc": "2026-06-06 05:36:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1823853": [
        {
            "ioc_value": "https://pas.sm188star.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-06 05:24:31",
            "last_seen_utc": "2026-09-01 03:22:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823854": [
        {
            "ioc_value": "pas.sm188star.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-06 05:24:31",
            "last_seen_utc": "2026-09-01 03:22:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823852": [
        {
            "ioc_value": "kaxofkea.bizbetslot.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 05:17:22",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823851": [
        {
            "ioc_value": "33aesmo5.bizbetslot.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 05:16:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823850": [
        {
            "ioc_value": "zwbnyop.jamjahani.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 05:02:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823847": [
        {
            "ioc_value": "eizgbh.xenicalby6.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 04:55:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823738": [
        {
            "ioc_value": "rmjjmzw.jamjahani.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 04:19:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823736": [
        {
            "ioc_value": "zbc7yta5.taktiik.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 04:03:19",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823730": [
        {
            "ioc_value": "101.43.103.154:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-06 03:44:58",
            "last_seen_utc": "2026-09-01 02:46:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823729": [
        {
            "ioc_value": "mltwwtn.jamjahani.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 03:41:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823728": [
        {
            "ioc_value": "jamjahani.one",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 03:40:46",
            "last_seen_utc": "2026-06-06 03:40:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "6June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1823727": [
        {
            "ioc_value": "e6ce6uwg.bingobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 03:16:03",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823726": [
        {
            "ioc_value": "q1wm6mf5.bingobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 03:15:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823725": [
        {
            "ioc_value": "kyxuncq.jamjahani.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 03:03:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823720": [
        {
            "ioc_value": "gukxgn.yasbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 02:59:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823719": [
        {
            "ioc_value": "drlycjl.jamjahani.mobi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 02:24:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823718": [
        {
            "ioc_value": "pjnmfyn.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 02:14:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823716": [
        {
            "ioc_value": "qffjprx.yektbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 02:04:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823710": [
        {
            "ioc_value": "154.88.97.62:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-06 02:00:18",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823709": [
        {
            "ioc_value": "fljmkds.venusbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 01:55:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823706": [
        {
            "ioc_value": "1822jtv8.betwoonuyelik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 01:17:41",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823705": [
        {
            "ioc_value": "hwujtlx.dahdahtoys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 01:17:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823704": [
        {
            "ioc_value": "p6p6cxqw.betwoonuyelik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 01:15:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823694": [
        {
            "ioc_value": "qyqetw.yasbetapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 00:55:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823693": [
        {
            "ioc_value": "jbwhmuq.i90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 00:34:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823691": [
        {
            "ioc_value": "aknkoyw.homa.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-06 00:24:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823685": [
        {
            "ioc_value": "gcwsnip.hokm.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 23:45:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823684": [
        {
            "ioc_value": "wp0ljlux.betwana.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 23:15:14",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823683": [
        {
            "ioc_value": "gmtzkxm.hit4bet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 23:07:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823682": [
        {
            "ioc_value": "6go1tq9f.takbet90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 23:03:16",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823676": [
        {
            "ioc_value": "lulfav.bet404farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 22:58:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823675": [
        {
            "ioc_value": "vctiae.bet360pro.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 22:45:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823674": [
        {
            "ioc_value": "nahcjeo.hezarfencrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 22:27:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823669": [
        {
            "ioc_value": "korpihy.herz-frank.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 21:49:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823664": [
        {
            "ioc_value": "mjdkxzn7.betvolleyball.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 21:15:50",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823663": [
        {
            "ioc_value": "w5x39ami.betvolleyball.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 21:14:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1823662": [
        {
            "ioc_value": "tbbhdjx.golfbetpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 21:11:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823658": [
        {
            "ioc_value": "154.88.98.55:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 21:00:14",
            "last_seen_utc": "2026-08-22 00:03:04",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823657": [
        {
            "ioc_value": "nmnntl.bet303casino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 20:44:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823656": [
        {
            "ioc_value": "zdxibl.bet212.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 20:34:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823655": [
        {
            "ioc_value": "duizlfe.funbet24.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 20:33:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823654": [
        {
            "ioc_value": "ldgssv.bazipoop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 20:29:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823648": [
        {
            "ioc_value": "154.88.98.53:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 20:00:21",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823645": [
        {
            "ioc_value": "bwqzszo.football2026.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 19:53:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823644": [
        {
            "ioc_value": "87.107.191.39:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-05 19:45:55",
            "last_seen_utc": "2026-08-06 08:48:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823643": [
        {
            "ioc_value": "wntgjbu.footbalbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 19:45:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1823642": [
        {
            "ioc_value": "ns2.newchatsits.ir",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-05 19:45:19",
            "last_seen_utc": "2026-06-22 08:46:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823641": [
        {
            "ioc_value": "ns1.newchatsits.ir",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-05 19:45:18",
            "last_seen_utc": "2026-08-06 08:48:02",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823640": [
        {
            "ioc_value": "62.109.19.44:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-05 19:44:53",
            "last_seen_utc": "2026-07-27 08:45:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823639": [
        {
            "ioc_value": "207.174.2.85:7997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-05 19:43:56",
            "last_seen_utc": "2026-07-06 08:44:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823638": [
        {
            "ioc_value": "182.23.2.163:12364",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 19:43:38",
            "last_seen_utc": "2026-07-06 08:44:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1823637": [
        {
            "ioc_value": "zttxgpqq.jacksorbetter.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 19:14:24",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822921": [
        {
            "ioc_value": "qavsqox.footbal90bet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 19:11:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822913": [
        {
            "ioc_value": "154.88.98.58:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 19:00:15",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822914": [
        {
            "ioc_value": "154.88.98.57:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 19:00:15",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822912": [
        {
            "ioc_value": "wisvfr.basketballiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 18:28:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822911": [
        {
            "ioc_value": "udqmerf.fibi-ireland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 18:28:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822910": [
        {
            "ioc_value": "wrersk.ar888starz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 18:17:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822909": [
        {
            "ioc_value": "onoizuz.fibi-ireland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 18:11:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822908": [
        {
            "ioc_value": "o2w2806g.tagat120art.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 18:02:45",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822887": [
        {
            "ioc_value": "ytmjwql.eurothrombosis2018.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 17:28:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822883": [
        {
            "ioc_value": "1v55nk51.irantennis.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 17:13:54",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822882": [
        {
            "ioc_value": "y7o5phj2.irantennis.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 17:13:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822881": [
        {
            "ioc_value": "irantennis.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 17:13:33",
            "last_seen_utc": "2026-06-05 17:14:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822878": [
        {
            "ioc_value": "154.88.99.34:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 17:00:16",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822871": [
        {
            "ioc_value": "xcaejii.enobahis.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 16:50:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822870": [
        {
            "ioc_value": "mmhaqx.sigari.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 16:21:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822869": [
        {
            "ioc_value": "trlclzb.enfejar.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 16:11:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822863": [
        {
            "ioc_value": "154.88.99.41:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 16:00:21",
            "last_seen_utc": "2026-08-22 00:03:02",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822860": [
        {
            "ioc_value": "dqgfigs.enfejarbazii.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 15:32:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822859": [
        {
            "ioc_value": "1djqvowq.iaap2019.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 15:14:30",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822858": [
        {
            "ioc_value": "nsz2gpgw.iaap2019.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 15:13:07",
            "last_seen_utc": "2026-06-05 15:13:35",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822852": [
        {
            "ioc_value": "bdbxwze.electriccrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 14:54:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822850": [
        {
            "ioc_value": "ghuctqf.ef90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 14:47:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822847": [
        {
            "ioc_value": "huyndo.shirbetfarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 14:20:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822846": [
        {
            "ioc_value": "zzvfyei.dahdahtoys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 14:08:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822836": [
        {
            "ioc_value": "usetlnl.volleyball.vip",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:54:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822835": [
        {
            "ioc_value": "mnejbrs.volleyball.vin",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:44:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822834": [
        {
            "ioc_value": "volleyball.vin",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:43:51",
            "last_seen_utc": "2026-06-08 17:04:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822828": [
        {
            "ioc_value": "torh3.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:29:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "duckdns,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822829": [
        {
            "ioc_value": "www.torh1.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:29:18",
            "last_seen_utc": "2026-06-05 13:19:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "duckdns,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822830": [
        {
            "ioc_value": "book.runds.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:29:17",
            "last_seen_utc": "2026-06-05 13:19:55",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "duckdns,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822831": [
        {
            "ioc_value": "rolex22.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:29:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "duckdns,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822832": [
        {
            "ioc_value": "ww6.runds.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "duckdns,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822833": [
        {
            "ioc_value": "mobile.runds.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:29:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "duckdns,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822827": [
        {
            "ioc_value": "pacsuhw1.pishbini90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:14:56",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822823": [
        {
            "ioc_value": "1.kurama.ltd",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:13:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822826": [
        {
            "ioc_value": "xee13c9a.pishbini90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:12:49",
            "last_seen_utc": "2026-06-05 13:12:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822825": [
        {
            "ioc_value": "ptrpzfj.volleyball.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:10:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822824": [
        {
            "ioc_value": "volleyball.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:09:36",
            "last_seen_utc": "2026-06-08 16:59:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822821": [
        {
            "ioc_value": "cc.etherstress.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 13:03:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "cnc,mirai,stresser",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822822": [
        {
            "ioc_value": "owps0tha.staffbulldesign.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 13:02:13",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822817": [
        {
            "ioc_value": "wgzufvo.volleyball.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 12:31:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822816": [
        {
            "ioc_value": "volleyball.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 12:31:20",
            "last_seen_utc": "2026-06-05 12:31:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822815": [
        {
            "ioc_value": "bnhxiy.yasbetapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 12:16:14",
            "last_seen_utc": "2026-06-08 23:22:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822814": [
        {
            "ioc_value": "www.verkeersschoolsociety.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-05 12:10:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6e3b544864d8a79ae528b6acd91bbbfc1c90bf7af52174a4c05c464ca32da82e/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822803": [
        {
            "ioc_value": "204.10.160.182:6025",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "jar.strrat",
            "malware_alias": null,
            "malware_printable": "STRRAT",
            "first_seen_utc": "2026-06-05 12:00:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "STRRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822802": [
        {
            "ioc_value": "shgaxiz.volleyball.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 11:52:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822800": [
        {
            "ioc_value": "volleyball.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 11:52:05",
            "last_seen_utc": "2026-06-05 11:52:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822799": [
        {
            "ioc_value": "137.220.133.57:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 11:40:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e02635368a39ba90646968a41cce5e827e6b88dc4d5c048d26434c1571539135/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822796": [
        {
            "ioc_value": "118.107.9.185:1115",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 11:40:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9460a533e8f214768cbfaa68c486f454083be425e41e0df63777dd41281194c/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822797": [
        {
            "ioc_value": "137.220.133.57:433",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 11:40:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e02635368a39ba90646968a41cce5e827e6b88dc4d5c048d26434c1571539135/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822798": [
        {
            "ioc_value": "137.220.133.57:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 11:40:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e02635368a39ba90646968a41cce5e827e6b88dc4d5c048d26434c1571539135/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822795": [
        {
            "ioc_value": "118.107.9.185:1113",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 11:40:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c9460a533e8f214768cbfaa68c486f454083be425e41e0df63777dd41281194c/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822794": [
        {
            "ioc_value": "vvlainw.vip.tennis",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 11:14:46",
            "last_seen_utc": "2026-06-05 11:14:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822793": [
        {
            "ioc_value": "kdk8z7k4.i90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 11:12:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822792": [
        {
            "ioc_value": "gh6fn4zq.i90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 11:12:34",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822791": [
        {
            "ioc_value": "mudeurb.vezaratshart.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 11:08:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822781": [
        {
            "ioc_value": "zltxdjx.venusbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 10:58:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822779": [
        {
            "ioc_value": "ffrpwns.vbetirani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 10:20:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822777": [
        {
            "ioc_value": "ukmcha.yasbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 10:15:06",
            "last_seen_utc": "2026-06-09 01:54:30",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822772": [
        {
            "ioc_value": "119.45.166.6:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-05 09:46:05",
            "last_seen_utc": "2026-07-07 12:46:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822771": [
        {
            "ioc_value": "64.94.85.14:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-05 09:45:27",
            "last_seen_utc": "2026-07-14 08:47:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822770": [
        {
            "ioc_value": "5.249.160.112:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-05 09:45:20",
            "last_seen_utc": "2026-07-05 18:45:49",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822769": [
        {
            "ioc_value": "195.26.86.134:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-05 09:44:00",
            "last_seen_utc": "2026-07-05 18:44:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822768": [
        {
            "ioc_value": "193.149.190.156:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-05 09:43:56",
            "last_seen_utc": "2026-07-08 08:44:21",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822767": [
        {
            "ioc_value": "182.23.2.163:58222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 09:43:46",
            "last_seen_utc": "2026-07-05 18:44:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822765": [
        {
            "ioc_value": "182.23.2.163:10401",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 09:43:44",
            "last_seen_utc": "2026-07-05 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822766": [
        {
            "ioc_value": "182.23.2.163:11742",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 09:43:44",
            "last_seen_utc": "2026-07-05 08:44:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822764": [
        {
            "ioc_value": "158.247.194.144:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-05 09:43:29",
            "last_seen_utc": "2026-08-17 08:43:59",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822763": [
        {
            "ioc_value": "nekdncv.usa2026.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 09:41:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822761": [
        {
            "ioc_value": "edfwndp0.chloroquineser.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 09:12:11",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822760": [
        {
            "ioc_value": "b25s30n3.chloroquineser.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 09:11:51",
            "last_seen_utc": "2026-06-06 15:24:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822759": [
        {
            "ioc_value": "dnmjqvy.trmegapari.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 09:07:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822755": [
        {
            "ioc_value": "154.88.96.38:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 09:00:16",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822744": [
        {
            "ioc_value": "giga.miraibotnet.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:27:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822745": [
        {
            "ioc_value": "rep.miraibotnet.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:27:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822746": [
        {
            "ioc_value": "srv.miraibotnet.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:27:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822752": [
        {
            "ioc_value": "bagkqzj.zeppelin.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 08:24:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822750": [
        {
            "ioc_value": "zeppelin.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 08:23:40",
            "last_seen_utc": "2026-06-05 08:23:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822749": [
        {
            "ioc_value": "kgebll.xenicalby6.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 08:15:30",
            "last_seen_utc": "2026-06-09 00:00:37",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822748": [
        {
            "ioc_value": "tjvdbbc.yektbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 08:14:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822739": [
        {
            "ioc_value": "bins.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:10:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822740": [
        {
            "ioc_value": "meow.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:10:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822741": [
        {
            "ioc_value": "mewo.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:10:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822742": [
        {
            "ioc_value": "retard.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:10:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822743": [
        {
            "ioc_value": "srv.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:10:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822719": [
        {
            "ioc_value": "https://zadelom.ru/auth/auth",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.berbew",
            "malware_alias": null,
            "malware_printable": "Berbew",
            "first_seen_utc": "2026-06-05 08:06:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "berbew",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1822724": [
        {
            "ioc_value": "smart.abuse.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:06:45",
            "last_seen_utc": "2026-06-05 08:04:39",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain,domain,gorilla,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822730": [
        {
            "ioc_value": "8.145.40.223:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 08:06:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822731": [
        {
            "ioc_value": "130.94.33.140:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-05 08:06:44",
            "last_seen_utc": "2026-06-06 13:00:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822733": [
        {
            "ioc_value": "154.36.188.239:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-05 08:06:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822734": [
        {
            "ioc_value": "tvt.abuse.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:06:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain,domain,gorilla",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822735": [
        {
            "ioc_value": "boom.abuse.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:06:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain,domain,gorilla",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822736": [
        {
            "ioc_value": "abusing.abuse.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:06:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain,domain,gorilla",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822737": [
        {
            "ioc_value": "fsocietyhackattack.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:06:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain,cuckbot,domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822738": [
        {
            "ioc_value": "hackattackkaboom.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 08:06:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnetdomain,cuckbot,domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822732": [
        {
            "ioc_value": "cpteijd.yekbetiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 08:04:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822728": [
        {
            "ioc_value": "kazwbt9n.2026.futbol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 08:02:33",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822727": [
        {
            "ioc_value": "lgwzmtt.yek1bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 07:59:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822725": [
        {
            "ioc_value": "yek1bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 07:59:04",
            "last_seen_utc": "2026-06-05 08:00:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822723": [
        {
            "ioc_value": "afdaqyu.yasbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 07:21:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822722": [
        {
            "ioc_value": "yasbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 07:21:03",
            "last_seen_utc": "2026-06-05 07:21:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822721": [
        {
            "ioc_value": "xcpvjq6r.cerocarey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 07:11:41",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822720": [
        {
            "ioc_value": "wyveypsx.cerocarey.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 07:11:20",
            "last_seen_utc": "2026-06-06 13:24:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822714": [
        {
            "ioc_value": "open-claw.co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-05 07:03:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1822127/",
            "tags": "clickfix,infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1822715": [
        {
            "ioc_value": "clawd-setup.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-05 07:03:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e968d-1b26-752a-a0e0-67e699a45a9e/",
            "tags": "clickfix,infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1822713": [
        {
            "ioc_value": "tqdtntx.hotbet90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 06:43:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822712": [
        {
            "ioc_value": "hotbet90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 06:42:51",
            "last_seen_utc": "2026-06-05 06:42:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822711": [
        {
            "ioc_value": "xeanui.x50wheel.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 06:34:01",
            "last_seen_utc": "2026-06-09 00:39:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822702": [
        {
            "ioc_value": "zyrec2.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822703": [
        {
            "ioc_value": "download.logltech.workers.dev",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822704": [
        {
            "ioc_value": "jaamdesign.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:09",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822705": [
        {
            "ioc_value": "stoplooking1.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:08",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822706": [
        {
            "ioc_value": "stoplooking2.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:07",
            "last_seen_utc": "2026-07-26 12:57:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822707": [
        {
            "ioc_value": "dxhook.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:07",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822708": [
        {
            "ioc_value": "fer1.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 06:11:05",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822710": [
        {
            "ioc_value": "dlkcsdq.hotbet90app.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 06:04:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822699": [
        {
            "ioc_value": "eehjqhe.homa.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 05:53:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822697": [
        {
            "ioc_value": "185.91.127.173:38014",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-05 05:46:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "MasonRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822696": [
        {
            "ioc_value": "185.91.127.173:24959",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-05 05:45:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "XWorm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822676": [
        {
            "ioc_value": "103.73.161.238:6667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 05:20:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822663": [
        {
            "ioc_value": "anvil-89.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822664": [
        {
            "ioc_value": "bloomglow9.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822665": [
        {
            "ioc_value": "alragaa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822666": [
        {
            "ioc_value": "data-hub-2312.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822667": [
        {
            "ioc_value": "167.71.70.184:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822668": [
        {
            "ioc_value": "c2b96ba6140ed15d46a7956ab2e590a39c164197",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822669": [
        {
            "ioc_value": "8a22239f95067a5a5a9520bfafa4c4b71b7cf828",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822670": [
        {
            "ioc_value": "85abca56aea793d8a45ddb747c4c4e7cf1ab21aa",
            "ioc_type": "sha1_hash",
            "threat_type": "payload",
            "malware": "osx.amos",
            "malware_alias": "Atomic macOS Stealer",
            "malware_printable": "AMOS",
            "first_seen_utc": "2026-06-05 05:19:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tea_not_stirred"
        }
    ],
    "1822533": [
        {
            "ioc_value": "goolge.mobi",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 05:19:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clearfake,clickfix",
            "anonymous": 0,
            "reporter": "tanner"
        }
    ],
    "1822534": [
        {
            "ioc_value": "searggend.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 05:19:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "clickfix",
            "anonymous": 0,
            "reporter": "tanner"
        }
    ],
    "1822537": [
        {
            "ioc_value": "91.92.42.203:5544",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "dropper,nc",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822541": [
        {
            "ioc_value": "youareall.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:21",
            "last_seen_utc": "2026-07-26 12:57:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822542": [
        {
            "ioc_value": "musika.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:20",
            "last_seen_utc": "2026-07-26 12:57:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822543": [
        {
            "ioc_value": "happytugsmassage.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:20",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822544": [
        {
            "ioc_value": "n058152033245.netvigator.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:19",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822545": [
        {
            "ioc_value": "stoplooking.botlesscucks.st",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:19",
            "last_seen_utc": "2026-06-07 07:08:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "domain,mirai",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822555": [
        {
            "ioc_value": "195.181.245.252:9443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,docker-api,miner,payload-host,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822556": [
        {
            "ioc_value": "http://195.181.245.252:9443/xmrig",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:17",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,miner,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822557": [
        {
            "ioc_value": "57.128.171.186:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:17",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "alpine-container,docker-api,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822558": [
        {
            "ioc_value": "104.236.83.40:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-05 05:19:16",
            "last_seen_utc": "2026-06-28 21:16:04",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "DigitalOcean,docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822559": [
        {
            "ioc_value": "220.162.198.142:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-05 05:19:16",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CN,docker-api,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822560": [
        {
            "ioc_value": "110.35.80.116:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:15",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822561": [
        {
            "ioc_value": "8.229.68.116:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-05 05:19:15",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822563": [
        {
            "ioc_value": "71.6.239.181:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:15",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822562": [
        {
            "ioc_value": "45.156.87.119:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:13",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822564": [
        {
            "ioc_value": "66.240.223.240:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "multi-pot,postgres,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822565": [
        {
            "ioc_value": "124.90.54.135:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,CN,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822566": [
        {
            "ioc_value": "66.132.224.234:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:12",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822567": [
        {
            "ioc_value": "b0e1ae6d73d656b203514f498b59cbcf29f067edf6fbd3803a3de7d21960848d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:11",
            "last_seen_utc": "2026-06-29 15:50:31",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,docker-api,elf,miner,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822572": [
        {
            "ioc_value": "f38504f53f6a25c405cfa272572eb0ededbbb4b9399b8aec1706d5e2b990f1c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,docker-api,elf,miner,moneroocean,truncated,x86_64,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822573": [
        {
            "ioc_value": "92.60.77.99:8888",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,docker-api,miner,moneroocean,payload-host,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822574": [
        {
            "ioc_value": "http://92.60.77.99:8888/xmrig-x86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:09",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,miner,moneroocean,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822575": [
        {
            "ioc_value": "189.110.239.137:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-05 05:19:09",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "alpine-container,docker-api,miner,moneroocean,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822675": [
        {
            "ioc_value": "pqycltd.hokm.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 05:17:55",
            "last_seen_utc": "2026-06-05 23:45:16",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822546": [
        {
            "ioc_value": "gstatic-node.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-05 05:16:04",
            "last_seen_utc": "2026-06-06 04:41:46",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822547": [
        {
            "ioc_value": "colomndead.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-05 05:16:04",
            "last_seen_utc": "2026-06-06 04:41:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822548": [
        {
            "ioc_value": "cloudsaled.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-05 05:16:03",
            "last_seen_utc": "2026-06-06 04:41:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822549": [
        {
            "ioc_value": "polandgames.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-05 05:16:03",
            "last_seen_utc": "2026-06-06 04:41:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822550": [
        {
            "ioc_value": "costexcise.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-05 05:16:03",
            "last_seen_utc": "2026-06-06 04:41:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822551": [
        {
            "ioc_value": "droppicches.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-05 05:16:02",
            "last_seen_utc": "2026-06-06 04:41:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "lumma",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822674": [
        {
            "ioc_value": "dev.useimage.sbs",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-05 05:14:52",
            "last_seen_utc": "2026-09-01 02:46:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "CobaltStrike",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822673": [
        {
            "ioc_value": "f0rfdtvf.canlibahis1xbet.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 05:11:52",
            "last_seen_utc": "2026-06-11 10:04:59",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822672": [
        {
            "ioc_value": "canlibahis1xbet.click",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 05:11:44",
            "last_seen_utc": "2026-06-06 11:24:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822671": [
        {
            "ioc_value": "https://steamcommunity.com/profiles/76561198698223785/g75rit",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-05 05:10:51",
            "last_seen_utc": "2026-06-10 06:52:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/88f5b6c7f618471993adba7fbb008cb8e2cfc5ef811a5971bc6293ba7b921db3/",
            "tags": "vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822659": [
        {
            "ioc_value": "ageqour.hit4bet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 04:43:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822657": [
        {
            "ioc_value": "vobyslb.hilo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 04:10:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822656": [
        {
            "ioc_value": "hilo.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 04:07:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822652": [
        {
            "ioc_value": "myofcdr.hezarfencrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 03:31:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822650": [
        {
            "ioc_value": "4q4880m7.bwin90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 03:12:22",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822649": [
        {
            "ioc_value": "zoqo6w5l.bwin90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 03:10:35",
            "last_seen_utc": "2026-06-05 03:10:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822648": [
        {
            "ioc_value": "88i.jp.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-05 03:05:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/972c93d7cec662851b13b110d38fb7f70cd87fd1d2ad22799f5b073dedf3c968/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822647": [
        {
            "ioc_value": "3p1x6btm.1xbet90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 03:02:15",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822642": [
        {
            "ioc_value": "youykxp.herz-frank.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 02:57:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822640": [
        {
            "ioc_value": "89.124.78.101:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-05 02:36:02",
            "last_seen_utc": "2026-07-04 23:48:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://tracker.viriback.com/index.php?q=89.124.78.101",
            "tags": "Amadey,ViriBack",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822639": [
        {
            "ioc_value": "emwzmsp.hazaratbetapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 02:21:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822634": [
        {
            "ioc_value": "demo212.jnirnportaciones.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 01:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/cb8e562490eeab0ea9cec1c405f832bafa4e4a3aae0dcf56397b4aa36e5b1ca2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822635": [
        {
            "ioc_value": "metalioncircle.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-05 01:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e4aa993ec28ad0b38368b9e29c5f714f1791ea771a504b5f84d73d63a14950f9/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822633": [
        {
            "ioc_value": "branleet.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-05 01:50:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba8d38575e15f2a8a3c819d3f2e189acdf9249c99240236c8be4f96d7284530d/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822632": [
        {
            "ioc_value": "gxtryif.hattrickbetapp.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 01:49:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822631": [
        {
            "ioc_value": "http://gxfsxs.cn:8880/getinstall64",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-05 01:45:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,ValleyRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822630": [
        {
            "ioc_value": "http://89.124.78.101/Lsge63sd3/index.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.amadey",
            "malware_alias": null,
            "malware_printable": "Amadey",
            "first_seen_utc": "2026-06-05 01:45:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Amadey",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822629": [
        {
            "ioc_value": "89.125.48.85:15649",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-05 01:45:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Arechclient2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822628": [
        {
            "ioc_value": "54.37.128.55:3041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 01:45:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822627": [
        {
            "ioc_value": "37.120.206.165:56687",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 01:45:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822626": [
        {
            "ioc_value": "196.251.107.114:24031",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 01:45:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822625": [
        {
            "ioc_value": "172.111.163.172:29810",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-05 01:45:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822624": [
        {
            "ioc_value": "95.70.188.185:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-05 01:45:09",
            "last_seen_utc": "2026-06-08 20:00:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "QuasarRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822623": [
        {
            "ioc_value": "5.35.87.192:10134",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-05 01:45:06",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822621": [
        {
            "ioc_value": "ennovar.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-05 01:40:14",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/193f74b8b5cb8c3e82bf7e33f4ee083522f2a893c7c1b6959d22188e7a5f9319/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822620": [
        {
            "ioc_value": "gqjz709j.bordoo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 01:11:36",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822619": [
        {
            "ioc_value": "b2eqaaqn.bordoo.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 01:10:05",
            "last_seen_utc": "2026-06-06 09:24:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822618": [
        {
            "ioc_value": "hwfbwco.hamvarzesh90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 01:09:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822616": [
        {
            "ioc_value": "qcwvat.1kickbet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 01:08:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822615": [
        {
            "ioc_value": "qkqxbb.doobixbet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 01:01:09",
            "last_seen_utc": "2026-06-05 14:42:33",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822612": [
        {
            "ioc_value": "zyhhuar.golfbetpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 00:33:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822610": [
        {
            "ioc_value": "dybkohl.goldenroulette.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 00:26:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822608": [
        {
            "ioc_value": "https://xmm.evosm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-05 00:24:41",
            "last_seen_utc": "2026-06-05 10:24:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822609": [
        {
            "ioc_value": "xmm.evosm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-05 00:24:41",
            "last_seen_utc": "2026-06-05 10:24:47",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822607": [
        {
            "ioc_value": "ttowige.goldenroulette.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 00:21:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822605": [
        {
            "ioc_value": "goldenroulette.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-05 00:20:13",
            "last_seen_utc": "2026-06-05 00:25:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "5June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822600": [
        {
            "ioc_value": "34.202.161.96:53",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 23:45:28",
            "last_seen_utc": "2026-09-01 02:47:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822599": [
        {
            "ioc_value": "updates.fisgloval.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 23:45:07",
            "last_seen_utc": "2026-09-01 02:46:42",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822598": [
        {
            "ioc_value": "sqzzsnr.gardune.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 23:44:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822596": [
        {
            "ioc_value": "jzl98lpw.betbuilder.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 23:10:29",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822595": [
        {
            "ioc_value": "nienzsq.funbet24.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 23:10:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822594": [
        {
            "ioc_value": "betbuilder.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 23:09:43",
            "last_seen_utc": "2026-06-04 23:09:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822589": [
        {
            "ioc_value": "iddmpon.football2026.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 22:37:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822588": [
        {
            "ioc_value": "football2026.world",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 22:33:39",
            "last_seen_utc": "2026-06-05 19:54:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822587": [
        {
            "ioc_value": "hityspe.footbalbet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 22:33:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822577": [
        {
            "ioc_value": "ne6nzi7r.1shart.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 21:59:36",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822576": [
        {
            "ioc_value": "thnivbk.footbal90bet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 21:57:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822571": [
        {
            "ioc_value": "mhepihh.footbal90bet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 21:23:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822570": [
        {
            "ioc_value": "footbal90bet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 21:22:53",
            "last_seen_utc": "2026-06-05 19:06:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822569": [
        {
            "ioc_value": "7aaxg4kb.betbatis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 21:10:49",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822568": [
        {
            "ioc_value": "8vizuy7n.betbatis.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 21:08:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822540": [
        {
            "ioc_value": "syjgiug.fibi-ireland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 20:48:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822538": [
        {
            "ioc_value": "fibi-ireland.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 20:46:47",
            "last_seen_utc": "2026-06-05 18:27:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822536": [
        {
            "ioc_value": "gbueeqa.eurothrombosis2018.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 20:12:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822532": [
        {
            "ioc_value": "bfdibp.dahdahtoys.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 20:00:30",
            "last_seen_utc": "2026-06-06 17:17:07",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822528": [
        {
            "ioc_value": "182.23.2.163:2046",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 19:43:37",
            "last_seen_utc": "2026-07-04 18:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822526": [
        {
            "ioc_value": "163.172.174.237:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-06-04 19:43:27",
            "last_seen_utc": "2026-09-01 02:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822527": [
        {
            "ioc_value": "163.172.174.237:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.brute_ratel_c4",
            "malware_alias": "BOLDBADGER,BruteRatel",
            "malware_printable": "Brute Ratel C4",
            "first_seen_utc": "2026-06-04 19:43:27",
            "last_seen_utc": "2026-09-01 02:43:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "BruteRatel,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822525": [
        {
            "ioc_value": "kihjmjx.enobahis.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 19:37:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822524": [
        {
            "ioc_value": "5ay2qa01.electriccrash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 19:37:11",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822522": [
        {
            "ioc_value": "enobahis.co",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 19:36:24",
            "last_seen_utc": "2026-06-05 16:49:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822518": [
        {
            "ioc_value": "6vk8lpd5.betball90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 19:09:42",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822517": [
        {
            "ioc_value": "betball90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 19:08:40",
            "last_seen_utc": "2026-06-04 19:08:45",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822513": [
        {
            "ioc_value": "wvvbpwt.enfejar.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 18:58:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822512": [
        {
            "ioc_value": "enfejar.game",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 18:57:51",
            "last_seen_utc": "2026-06-05 16:11:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822511": [
        {
            "ioc_value": "89.124.102.122:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 18:25:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7a4ededdbc64263754ab17b3d00d3a22c0361f14caa150332524b3332a0aef5d/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822510": [
        {
            "ioc_value": "jswnqpn.enfejarbazii.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 18:22:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822508": [
        {
            "ioc_value": "151.243.109.130:9672",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 18:09:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d451229055d8e537fd17aafc7babd3170299b1d84da5e60acb0103a0307b3035/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822456": [
        {
            "ioc_value": "e0af88c9b1278d91a30f651ba3a0e77419c010de662dd6b5b86c1d8415093bc4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:59:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822457": [
        {
            "ioc_value": "213d841404449d68dd9f50c18f7259074c43df2fd5221f0bbd34d2e89b611b73",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:59:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822458": [
        {
            "ioc_value": "7e160f885fe15d7f5b67e3d321c1bd8240a63bb80c8156f604829f0cbadba313",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:59:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822459": [
        {
            "ioc_value": "85dfef0c1b65ee9eb213ea830e0a78d471872e947e1924e90365d29cdeb64c10",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:59:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822460": [
        {
            "ioc_value": "33e78a25233a88b3ac6fd6fbe4b42b0e047a89736fd9b089628ab60b29c4dd9a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822461": [
        {
            "ioc_value": "bed1028badee2ade8a8a8edd25aa4c3e70a6beefafbdffd6426e5e467f24eb01",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822462": [
        {
            "ioc_value": "0d81cab9f7ca5ac7c201c4917dfc7beee2ea6ea5fd9f0b23e7b088f084cda92c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822463": [
        {
            "ioc_value": "f22a7dd6e64dafabcbc35cb9d56abc38392e228d7beef8ed2e71727099c31a80",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822464": [
        {
            "ioc_value": "3922ac9a1588e0d9d5946e71d95d065cc3cf64e776d792b105981e23220d096f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "wshrat",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822467": [
        {
            "ioc_value": "2c1118dd50e8501345eb3d04cd1e07eda41668e7f4379d9958405d3be6bfc45d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822469": [
        {
            "ioc_value": "150e66931f7218cc66418cd5f80b412343574a7f8c63ecf20e6eab3efaaee1d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822468": [
        {
            "ioc_value": "2cd017872d8b04b1b36e832f88cc1976492ccf5e8acea19d82af69b2c3cbe47f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822470": [
        {
            "ioc_value": "ddc089db76d5e0419e1f7d3777d2227df3a5cc4b55ea33f9616863cccad3c89f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822471": [
        {
            "ioc_value": "7f5291e4b0b175d29df2221e56185abf4f8fefc839b8cd71792b4e7b20b529e4",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822472": [
        {
            "ioc_value": "274d7502c60c6f91a4e4c083cbdf03df21a7f25079c3f92b9587740a1a274de0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:53",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822473": [
        {
            "ioc_value": "28472632ef7c1673383da89b54fb15ac46cb36ca0664f2affc7df4d5449ea590",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822474": [
        {
            "ioc_value": "e58184b737ba26eb64c827eb3ce66a6d715903fa8dea340daca3830688f6817e",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822475": [
        {
            "ioc_value": "388244583d42ba76bf6270981ddc7459f5d1a9f54acfda4efc1eed475b50a8b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822476": [
        {
            "ioc_value": "4fbd2f5b4625fa46b5706748dbb15d3f58fbeda723fc644d0db9174a78cbade1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:51",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822477": [
        {
            "ioc_value": "e8e0df835a3bedb6457ce71f4b114c01c2f4edf1d6332d224921bad5845755b7",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822478": [
        {
            "ioc_value": "5df07f2b3ddae4b24d05926167a4a5968e2748efe744e4600f968be9abd293a2",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822479": [
        {
            "ioc_value": "74adb88130f4864b40118bc65eaf73dc23c31835254bf25465be7c4a76fa2882",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822480": [
        {
            "ioc_value": "32b84d2fa205ed7c92f85c45bed6a1607004d3d75f939d343913d19f007d0506",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:49",
            "last_seen_utc": "2026-06-04 16:23:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822481": [
        {
            "ioc_value": "4b7be7782072c15a5f8e8672dee3b24864c913742e1a4b552f03aef2ed3b68c9",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:49",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822482": [
        {
            "ioc_value": "73b1bd6d589d5b4c752e380a5c9439d06d53d2b8a192fb20a9464662633b7b09",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822483": [
        {
            "ioc_value": "15cad7d81512892146c840e74150f311907f99d2758eaf3977400b9092255c53",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822484": [
        {
            "ioc_value": "381fcd4c4eef057ea509fa27a645fb7138a92317c3b21f5c5425c4cbdca122b8",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/IOC/blob/main/WSHRAT",
            "tags": "RAT,WSHRAT",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822494": [
        {
            "ioc_value": "https://fluffynoodle.xyz/ash",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 17:58:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "malwareanalayser"
        }
    ],
    "1822503": [
        {
            "ioc_value": "tiixeira.lol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-04 17:58:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3591f7f0f6c977fb1a25ec33abbb79f88833e80573b134c717c1672645630a15/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822502": [
        {
            "ioc_value": "https://tiixeira.lol/m",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.kongtuke",
            "malware_alias": "TAG-124,js.LandUpdate808",
            "malware_printable": "KongTuke",
            "first_seen_utc": "2026-06-04 17:58:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3591f7f0f6c977fb1a25ec33abbb79f88833e80573b134c717c1672645630a15/",
            "tags": "KongTuke",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822501": [
        {
            "ioc_value": "ldkrhyp.emshab.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 17:51:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822499": [
        {
            "ioc_value": "107.150.105.91:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 17:45:22",
            "last_seen_utc": "2026-07-09 08:46:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822493": [
        {
            "ioc_value": "ex7gv4y7.bet90land.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 17:24:13",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822492": [
        {
            "ioc_value": "jj5czewc.bet90land.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 17:22:27",
            "last_seen_utc": "2026-06-04 17:23:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822490": [
        {
            "ioc_value": "atnvjyj.emroze.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 17:12:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822489": [
        {
            "ioc_value": "emroze.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 17:11:16",
            "last_seen_utc": "2026-06-04 17:11:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822486": [
        {
            "ioc_value": "tpvggeb.bordino.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 16:50:26",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822466": [
        {
            "ioc_value": "amcbvlw.bordbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 16:19:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822465": [
        {
            "ioc_value": "bordbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 16:14:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822451": [
        {
            "ioc_value": "124.222.155.113:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 15:45:34",
            "last_seen_utc": "2026-07-05 08:47:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822449": [
        {
            "ioc_value": "mlcos.baidudns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 15:45:18",
            "last_seen_utc": "2026-06-11 14:45:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822448": [
        {
            "ioc_value": "api1.haedalcompany.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 15:45:16",
            "last_seen_utc": "2026-07-12 08:46:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822447": [
        {
            "ioc_value": "1314180598-04zr21qelt.ap-guangzhou.tencentscf.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 15:45:15",
            "last_seen_utc": "2026-06-06 17:45:34",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822446": [
        {
            "ioc_value": "fzgktgh.bord90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 15:40:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822444": [
        {
            "ioc_value": "contacrypto.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-04 15:35:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/bd1d6853ce58d0261b9ef4500827c448103494a6a9df6a8615fc129078204847/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822443": [
        {
            "ioc_value": "bofcv8ir.bet90boro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 15:22:22",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822442": [
        {
            "ioc_value": "gp0bowhq.bet90boro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 15:22:04",
            "last_seen_utc": "2026-06-04 15:23:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822441": [
        {
            "ioc_value": "drckscr.bizbetslot.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 15:08:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822439": [
        {
            "ioc_value": "ltncnvk.bingobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 15:00:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822427": [
        {
            "ioc_value": "3aaf5ce520c9dcd4a858c2317eb1b328",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 15:00:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Embargo%20Ransomware",
            "tags": "embargo,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822428": [
        {
            "ioc_value": "3a91156c46a8b3b9a0591c9de52a8a73",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 15:00:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Embargo%20Ransomware",
            "tags": "embargo,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822429": [
        {
            "ioc_value": "f13a40e8a94aadc0e9f71204cb300aa7",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 15:00:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Embargo%20Ransomware",
            "tags": "embargo,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822430": [
        {
            "ioc_value": "9262153dbaf6933aa73923d17e475728",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 15:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Embargo%20Ransomware",
            "tags": "embargo,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822431": [
        {
            "ioc_value": "8c8c93a6b6c6d6e632a54877fc1a209e",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Embargo%20Ransomware",
            "tags": "embargo,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822432": [
        {
            "ioc_value": "f0ac3999d4020cd051052a0627a2056d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Embargo%20Ransomware",
            "tags": "embargo,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822434": [
        {
            "ioc_value": "yertdw.3sefr3.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 14:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822433": [
        {
            "ioc_value": "5.101.80.227:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:59:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/fb2826b4e02393e9656ef4c7f3718c2d4a48c6b805cb5b3b9a5e192df1e0af20/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822426": [
        {
            "ioc_value": "80.66.84.164:1234",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-04 14:58:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/96a66d9477bd32693422ae6aefd7dbefc1d52c2e2e510bd29d3f34f910e6ff7e/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822425": [
        {
            "ioc_value": "gxhztve.bingobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 14:58:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822424": [
        {
            "ioc_value": "5.230.201.63:4841",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:57:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f17940616e9bdd1dd9d5e2103c9e39b1e8d297a885513bcde96e36e3d1defb7/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822423": [
        {
            "ioc_value": "letviotar.ydns.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:57:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5f17940616e9bdd1dd9d5e2103c9e39b1e8d297a885513bcde96e36e3d1defb7/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822421": [
        {
            "ioc_value": "45.156.87.120:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:53:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca920cb3129949fcbca852525290a21b2d27d7659aec1654bac144fc44701644/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822419": [
        {
            "ioc_value": "https://45.156.87.120/sts",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:53:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca920cb3129949fcbca852525290a21b2d27d7659aec1654bac144fc44701644/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822420": [
        {
            "ioc_value": "https://45.156.87.120/vpr-OMlTVj",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:53:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ca920cb3129949fcbca852525290a21b2d27d7659aec1654bac144fc44701644/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822418": [
        {
            "ioc_value": "https://lutkdd.corpsecs.com/?id=",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:52:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d6226ff1c96bff8cc840fb62db0a6bead9d029b7915436db87a1882332054c82/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822417": [
        {
            "ioc_value": "lutkdd.corpsecs.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:52:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/d6226ff1c96bff8cc840fb62db0a6bead9d029b7915436db87a1882332054c82/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822408": [
        {
            "ioc_value": "207.56.11.49:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 14:50:45",
            "last_seen_utc": "2026-06-04 14:47:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822409": [
        {
            "ioc_value": "137.175.102.19:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 14:50:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822410": [
        {
            "ioc_value": "104.225.153.141:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 14:50:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822411": [
        {
            "ioc_value": "51.77.84.22:30015",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 14:50:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822412": [
        {
            "ioc_value": "52.128.224.235:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 14:50:37",
            "last_seen_utc": "2026-06-23 05:00:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822413": [
        {
            "ioc_value": "94.96.163.58:82",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.extreme_rat",
            "malware_alias": "ExtRat,XTRAT",
            "malware_printable": "Xtreme RAT",
            "first_seen_utc": "2026-06-04 14:50:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "ExtRat,Xtreme RAT",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822414": [
        {
            "ioc_value": "156.234.24.48:8709",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 14:50:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822415": [
        {
            "ioc_value": "120.26.208.96:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 14:50:35",
            "last_seen_utc": "2026-09-01 02:46:50",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822416": [
        {
            "ioc_value": "106.12.20.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 14:50:33",
            "last_seen_utc": "2026-06-05 01:00:17",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822407": [
        {
            "ioc_value": "67.207.166.167:4020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 14:40:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c26f22caecd48f5046253bae219502a1758dffc701129306b41fa7f91cfcc3fd/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822406": [
        {
            "ioc_value": "3i8e3aty.ef90bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 14:35:20",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822405": [
        {
            "ioc_value": "209.99.187.200:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 14:23:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8838fe46c9aa4e8e60506e7320d34702a52539fc60cbcb03f0b8be6d8c1b4512/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822404": [
        {
            "ioc_value": "mlvzrpw.betyyy.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 14:22:19",
            "last_seen_utc": "2026-06-04 14:23:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822403": [
        {
            "ioc_value": "45.153.34.168:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 14:13:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/6ab0f40bd8ecfca5ead469824618285f058ff787995752cf7332516622459891/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822402": [
        {
            "ioc_value": "154.7.228.17:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 14:11:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a478f5057ca0f0706a61e4fc1a681090bb49a54ffe60567e5dabe1ae05d45880/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822401": [
        {
            "ioc_value": "directindustry.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 14:10:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a478f5057ca0f0706a61e4fc1a681090bb49a54ffe60567e5dabe1ae05d45880/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822392": [
        {
            "ioc_value": "https://asiudasoidu.90g90.com/Bin/ConnectWiseControl.ClientSetup.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:07:44",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e9142-e88a-7063-82ef-176734fe8d88/",
            "tags": "fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822393": [
        {
            "ioc_value": "https://asiudasoidu.90g90.com/Bin/ConnectWiseControl.ClientSetup.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:07:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e9142-e88a-7063-82ef-176734fe8d88/",
            "tags": "fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822394": [
        {
            "ioc_value": "asiudasoidu.90g90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 14:07:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e9142-e88a-7063-82ef-176734fe8d88/",
            "tags": "fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822395": [
        {
            "ioc_value": "94.140.120.193:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-04 14:06:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c3e21ea3e7ef0cd54bc3b09bde350f97e917b2da84c72c7dc3de9676a83ef934/",
            "tags": "Tsunami",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822389": [
        {
            "ioc_value": "rc.de-zahlung.eu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-04 14:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c3e21ea3e7ef0cd54bc3b09bde350f97e917b2da84c72c7dc3de9676a83ef934/",
            "tags": "Tsunami",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822390": [
        {
            "ioc_value": "rnd.exposedbotnets.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-04 14:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c3e21ea3e7ef0cd54bc3b09bde350f97e917b2da84c72c7dc3de9676a83ef934/",
            "tags": "Tsunami",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822391": [
        {
            "ioc_value": "irc.shadow-mods.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.tsunami",
            "malware_alias": "Muhstik,Radiation,Amnesia",
            "malware_printable": "Tsunami",
            "first_seen_utc": "2026-06-04 14:05:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/c3e21ea3e7ef0cd54bc3b09bde350f97e917b2da84c72c7dc3de9676a83ef934/",
            "tags": "Tsunami",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822384": [
        {
            "ioc_value": "jojxmyi.betwoonuyelik.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 13:47:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822382": [
        {
            "ioc_value": "5.230.201.245:4449",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:26:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822381": [
        {
            "ioc_value": "209.99.187.200:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:23:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822380": [
        {
            "ioc_value": "sirius.surpasstools.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:22:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822379": [
        {
            "ioc_value": "fq5lyk18.bet404.games",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 13:22:23",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822378": [
        {
            "ioc_value": "vmobqlunsw.localto.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:21:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822377": [
        {
            "ioc_value": "ptapgsl.betwana.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 13:13:00",
            "last_seen_utc": "2026-06-05 23:15:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822376": [
        {
            "ioc_value": "2.26.122.211:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:11:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5940c41ab003399680a04d726587eed242e4ad8969abe4b5617d712ff190a852/",
            "tags": "RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822375": [
        {
            "ioc_value": "104.164.46.149:56545",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:07:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7b364e0b8f5ab0857360f82b4912a18b79156c1761301aea666b2c02417b7969/",
            "tags": "RAT,SiriusRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822374": [
        {
            "ioc_value": "ixcube.ddns.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:07:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/7b364e0b8f5ab0857360f82b4912a18b79156c1761301aea666b2c02417b7969/",
            "tags": "RAT,SiriusRT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822373": [
        {
            "ioc_value": "45.156.87.226:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 13:05:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ec58532e72b95a3057b759981db907b2507b31c57d836a23d6c8b807034cdefc/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822312": [
        {
            "ioc_value": "149.56.206.68:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 13:04:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "botnet,cnc,stresser",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822313": [
        {
            "ioc_value": "nexusosint.uk",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 13:04:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "panel,stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822317": [
        {
            "ioc_value": "185.165.169.57:4443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 13:04:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "panel,rat,stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822318": [
        {
            "ioc_value": "167.172.10.118:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 13:04:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "panel,rat,stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822319": [
        {
            "ioc_value": "162.33.179.91:81",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 13:04:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "panel,rat,stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822328": [
        {
            "ioc_value": "82.25.63.213:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 13:04:10",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1822320": [
        {
            "ioc_value": "81.71.155.121:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 13:04:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "panel,rat,stealer",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822329": [
        {
            "ioc_value": "176.65.148.97:1999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 13:04:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": null,
            "tags": "mirai",
            "anonymous": 0,
            "reporter": "seckle"
        }
    ],
    "1822360": [
        {
            "ioc_value": "CDC1823F8B7B595960CCA2E4DADB1B47C0FF20F1C0563FAF9DE4F9AFCFD6A419",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822361": [
        {
            "ioc_value": "556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822362": [
        {
            "ioc_value": "a9b029504e5ad5f36d8e66b2db5b67d35582908f0474e8a2f0de4a2b0d704420",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822363": [
        {
            "ioc_value": "421bb7ec91d3ed0f18114dab6dc2eb21fc8caac060c98f6e126c3a5589467c38",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822364": [
        {
            "ioc_value": "9df80a9ef89d8a52c2104c4e00bd68908bda06c1cf29fa096337426e6f290580",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822365": [
        {
            "ioc_value": "f5cb9194e3e34f10171be656d9a55a70ca96ed1258ffe371630f1086637a8d76",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822366": [
        {
            "ioc_value": "d8219ff7bb309b660a61008793f8250aeff1133be9be3a7747fba28500b0362c",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:04:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,multi-os,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822367": [
        {
            "ioc_value": "http://77.238.248.158:9000/churl",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:03:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ArechClient2,ClickFix,FakeCloudflare,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822368": [
        {
            "ioc_value": "download-windows-update.live",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:03:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ClickFix,FakeCloudflare,multi-os,opendir,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822369": [
        {
            "ioc_value": "darkfadeson.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ClickFix,FakeCloudflare,multi-os,opendir,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822370": [
        {
            "ioc_value": "cloud-flare-authenticator.link",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:03:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ClickFix,FakeCloudflare,multi-os,opendir,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822371": [
        {
            "ioc_value": "https://cloud-flare-authenticator.link/verified.ps1",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ClickFix,FakeCloudflare,multi-os,opendir,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822372": [
        {
            "ioc_value": "193.111.117.6:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-04 13:03:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d",
            "tags": "ClickFix,FakeCloudflare,malware-hosting,opendir,SectopRAT",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822358": [
        {
            "ioc_value": "154.88.98.48:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 13:00:16",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822355": [
        {
            "ioc_value": "zchjlsi.betwana.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 12:40:25",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822353": [
        {
            "ioc_value": "yzqorlb.betvolleyball.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 12:00:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822351": [
        {
            "ioc_value": "154.88.97.45:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 12:00:24",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822346": [
        {
            "ioc_value": "154.12.86.154:44444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 11:46:46",
            "last_seen_utc": "2026-09-01 02:46:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822345": [
        {
            "ioc_value": "192.3.171.223:4445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 11:30:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aeb4249cb76547ea55f75f64eb95f4324414f17f749820e584197a4331c191f1/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822344": [
        {
            "ioc_value": "byucosm.bettime.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 11:29:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822343": [
        {
            "ioc_value": "bettime.win",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 11:25:11",
            "last_seen_utc": "2026-06-04 11:25:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822341": [
        {
            "ioc_value": "https://elo.canamrent.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-04 11:25:03",
            "last_seen_utc": "2026-06-04 17:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822342": [
        {
            "ioc_value": "elo.canamrent.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-04 11:25:03",
            "last_seen_utc": "2026-06-04 17:24:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822339": [
        {
            "ioc_value": "https://elo.dvlv88.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-04 11:24:50",
            "last_seen_utc": "2026-06-04 17:24:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822340": [
        {
            "ioc_value": "elo.dvlv88.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-04 11:24:50",
            "last_seen_utc": "2026-06-04 17:24:40",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822338": [
        {
            "ioc_value": "6dg7sjam.bet404farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 11:23:15",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822337": [
        {
            "ioc_value": "51eho90n.bet404farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 11:21:12",
            "last_seen_utc": "2026-06-04 11:21:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822324": [
        {
            "ioc_value": "coffeefromarabica.monster",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 10:58:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822323": [
        {
            "ioc_value": "lskannsserv.beer",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 10:58:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClickFix",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822322": [
        {
            "ioc_value": "clmkghe.bettime90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 10:53:32",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822321": [
        {
            "ioc_value": "bettime90.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 10:48:45",
            "last_seen_utc": "2026-06-04 10:48:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822316": [
        {
            "ioc_value": "mauriciolizcano.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-04 10:40:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa3edc3e51f643617408c856e5fcedd12d70438888c3b94359b057001384cbb4/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822315": [
        {
            "ioc_value": "m-f168.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-04 10:40:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa3edc3e51f643617408c856e5fcedd12d70438888c3b94359b057001384cbb4/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822314": [
        {
            "ioc_value": "demuntleusden.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-04 10:40:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aa3edc3e51f643617408c856e5fcedd12d70438888c3b94359b057001384cbb4/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822311": [
        {
            "ioc_value": "kfvgvcb.betrophy90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 10:18:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822308": [
        {
            "ioc_value": "swmzey.3sefr3.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 10:04:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822302": [
        {
            "ioc_value": "91.92.241.80:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-04 09:45:43",
            "last_seen_utc": "2026-07-04 18:45:53",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822301": [
        {
            "ioc_value": "82.23.246.160:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-04 09:45:35",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822300": [
        {
            "ioc_value": "206.238.68.33:8383",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 09:45:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822299": [
        {
            "ioc_value": "185.72.9.227:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-04 09:43:56",
            "last_seen_utc": "2026-07-24 18:44:23",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822298": [
        {
            "ioc_value": "182.23.2.163:49002",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:43:50",
            "last_seen_utc": "2026-07-04 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822297": [
        {
            "ioc_value": "172.238.15.96:9443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-04 09:43:40",
            "last_seen_utc": "2026-07-07 08:43:52",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822296": [
        {
            "ioc_value": "156.247.40.190:8848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-04 09:43:29",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822295": [
        {
            "ioc_value": "155.103.70.198:13408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:43:28",
            "last_seen_utc": "2026-08-14 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822294": [
        {
            "ioc_value": "140.235.16.223:7203",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-04 09:43:22",
            "last_seen_utc": "2026-07-04 18:43:24",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822293": [
        {
            "ioc_value": "ffeqlui.betrayon.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 09:42:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822292": [
        {
            "ioc_value": "betrayon.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 09:38:15",
            "last_seen_utc": "2026-06-04 09:38:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822291": [
        {
            "ioc_value": "23.95.117.252:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:30:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4491fb5046f84845c6155237059bf9d52944d3382de6a41843b1d78ba2da3ca3/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822290": [
        {
            "ioc_value": "209.54.102.152:3001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:30:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/429fd292d096a7482d4ee9dc99817c5a8d9ce48b45f59f3e671025d51086a7be/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822289": [
        {
            "ioc_value": "102.220.160.66:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:30:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/eec8491acfc02dd2c4bd62afc37eb037f2c4b57d614d572acca42f06d843d3d0/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822288": [
        {
            "ioc_value": "msedgewebview7.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-04 09:27:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4b2ce323f3eef892d7fdc6a89419b2593b7557a7e8873fa196f6e01648aa67c0/",
            "tags": "NetSupport,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822286": [
        {
            "ioc_value": "209.54.101.187:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:25:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ba6af76e2db508b15fa6ed7e81558ff0c42fea03f18f1595988ea983689bd83d/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822287": [
        {
            "ioc_value": "64.89.160.69:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 09:25:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61618b5e2e29afcdb55f5798436aea8cf7d885beeba204e1775004646b659a3b/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822285": [
        {
            "ioc_value": "103.83.86.174:2929",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 09:25:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/61fc6b901be86d151c6e61a791afa498aac8b83d631d163b7d34d49466b24488/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822284": [
        {
            "ioc_value": "t7gjz81d.bet360pro.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 09:21:17",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822283": [
        {
            "ioc_value": "ug5x33qq.bet360pro.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 09:20:48",
            "last_seen_utc": "2026-06-04 09:21:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822282": [
        {
            "ioc_value": "cmzgymj.betobet90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 09:03:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822268": [
        {
            "ioc_value": "tfx-test-1780560802405.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 08:40:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "dos"
        }
    ],
    "1822269": [
        {
            "ioc_value": "https://wittylama.com/Stub.exe",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-04 08:40:12",
            "last_seen_utc": "2026-06-04 08:29:50",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": null,
            "anonymous": 0,
            "reporter": "dos"
        }
    ],
    "1822277": [
        {
            "ioc_value": "bkbopol.betlikegirisi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 08:31:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822276": [
        {
            "ioc_value": "2.26.0.10:25565",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 08:31:09",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/13821baae673bdf8f8419614d894948f346f67c6a89b2254571e34f73304adfa/",
            "tags": "LiberiumRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822274": [
        {
            "ioc_value": "betlikegirisi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 08:26:48",
            "last_seen_utc": "2026-06-04 08:26:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822273": [
        {
            "ioc_value": "hsh1serverboarding.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 08:23:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ConnectWise,RMM,ScreenConnect",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822272": [
        {
            "ioc_value": "135.181.2.236:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 08:18:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b13637243584aabde16bb9c604a9f3e1aa067880b70861ed7c71f9784f4980e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822270": [
        {
            "ioc_value": "numerosoftware.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 08:17:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b13637243584aabde16bb9c604a9f3e1aa067880b70861ed7c71f9784f4980e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822271": [
        {
            "ioc_value": "cloud.white-monster.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 08:17:34",
            "last_seen_utc": "2026-06-04 08:17:34",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1b13637243584aabde16bb9c604a9f3e1aa067880b70861ed7c71f9784f4980e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822267": [
        {
            "ioc_value": "human2nd-confirm.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 08:03:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2491deb9264542ee81e9f1d077a00f1a7a23639c17ebbc97fc7879ac54906b8e/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822260": [
        {
            "ioc_value": "bloxstealer.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 07:57:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/36f5e773b9e9673e5689c6c20d9af0f15fdd4743dc59c417d7abc7a9e2280922/",
            "tags": "BloxStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822261": [
        {
            "ioc_value": "update.bloxstealer.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-04 07:57:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/36f5e773b9e9673e5689c6c20d9af0f15fdd4743dc59c417d7abc7a9e2280922/",
            "tags": "BloxStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822259": [
        {
            "ioc_value": "metalcrime.space",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_loader",
            "malware_alias": null,
            "malware_printable": "Unknown Loader",
            "first_seen_utc": "2026-06-04 07:55:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "OffLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822258": [
        {
            "ioc_value": "zthnnrr.betistmobil.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 07:55:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822257": [
        {
            "ioc_value": "regularizarcadastral.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:54:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e85f688dd90fdf9c7c128894dd5f79d02924babce9ada895d2b73f45d641cfc3/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822244": [
        {
            "ioc_value": "45.202.249.34:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:57",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dropper,infra-rotation,Mirai,nsenter-escape",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822245": [
        {
            "ioc_value": "http://45.202.249.34/dck",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dropper,Mirai,nsenter-escape",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822246": [
        {
            "ioc_value": "143.110.165.73:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-04 07:31:56",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "DigitalOcean,docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822247": [
        {
            "ioc_value": "79.143.178.79:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-04 07:31:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822248": [
        {
            "ioc_value": "113.214.18.234:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:55",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CN,docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822249": [
        {
            "ioc_value": "14.154.200.202:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:54",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822250": [
        {
            "ioc_value": "185.180.141.42:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:54",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ai-infra-scan,docker-api,gitmc-org-mcp-scanner,jsonrpc,MCP,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822251": [
        {
            "ioc_value": "47.86.55.200:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:53",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ssh-bruteforce",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822252": [
        {
            "ioc_value": "107.151.233.216:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 07:31:53",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "ssh-bruteforce",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822253": [
        {
            "ioc_value": "18.225.109.243:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-04 07:31:52",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "aws,bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822254": [
        {
            "ioc_value": "18.224.108.49:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-04 07:31:52",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "aws,bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822255": [
        {
            "ioc_value": "40.124.174.187:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-04 07:31:51",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "azure,bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822243": [
        {
            "ioc_value": "172.93.143.151:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-04 07:25:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f8ef2e6276195d1ee28eacdf26e9c5f4eac9a78c2a42f5896253749a7664944d/",
            "tags": "PureLogStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822242": [
        {
            "ioc_value": "ty7zctpt.bet303casino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 07:21:40",
            "last_seen_utc": "2026-06-11 10:05:00",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822241": [
        {
            "ioc_value": "3z2a3kyo.bet303casino.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 07:20:26",
            "last_seen_utc": "2026-06-04 07:21:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822240": [
        {
            "ioc_value": "5.101.84.150:4231",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.purelogs",
            "malware_alias": null,
            "malware_printable": "PureLogs Stealer",
            "first_seen_utc": "2026-06-04 07:20:24",
            "last_seen_utc": "2026-06-04 08:27:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0b5a58e5857df0a3f5c8d4be2b88dd71f5c57eaa46c59248621464fdab8df0ab/",
            "tags": "PureLogsStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822239": [
        {
            "ioc_value": "wezdgtt.betistcomgiris.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 07:15:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822237": [
        {
            "ioc_value": "betistcomgiris.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 07:13:34",
            "last_seen_utc": "2026-06-04 07:13:42",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822236": [
        {
            "ioc_value": "cxgbphg.betgopro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 07:04:33",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822234": [
        {
            "ioc_value": "95.164.53.134:4521",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 07:02:43",
            "last_seen_utc": "2026-06-10 10:09:32",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/135a58e767fa96d49e1f74068b3cb54486321595ab88a0819f5e4aa5a6e317a2/",
            "tags": "LxBaseRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822175": [
        {
            "ioc_value": "5qynbyjl4u6vbtnmpokslaxaknyicdvty7vn2qgxmaty3lb7wwxpkbid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822176": [
        {
            "ioc_value": "diyr2bnty7iktyxfd4kz65uigcfappjvux73dpgkkeocp3fmlgnuzyyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822177": [
        {
            "ioc_value": "e7a6zgqfijn2ko6lzkz53tysjpnf22fxj4h2f3saufrmsts5pbul5eid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822178": [
        {
            "ioc_value": "yxwomyfmexm3bfcuumnugrzwluol5qwsw6pmne7jklgmzthkp35l2jqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822179": [
        {
            "ioc_value": "etus2tmakckdlkyjpevoyciuao7er5fj3qm26aev3nch4fusptefiayd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822180": [
        {
            "ioc_value": "csxilwnl7orv6rwfjen5ye3tefk5shjtr4tysuykgxjsyngpvoqrvbid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822181": [
        {
            "ioc_value": "psvrn6ahevi6dgf55bzc26q3gjc7s6n7vcth34rmkl2y7e7dijhjfiqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822182": [
        {
            "ioc_value": "xsomiaq5awxh3zkzn334s3dgwuvngy6z2to7265exgovnkwk66hjypid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822183": [
        {
            "ioc_value": "m3wwhkus4dxbnxbtihexlyd2cv63qrvex6jiebc4vqe22kg2z3udebid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822184": [
        {
            "ioc_value": "glheoet37vdimgho57tqj76v7fnebnbqxn65bounxyt6hduilkso4yyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822185": [
        {
            "ioc_value": "aw6wb6lmqbtp5po7qrmvmujulbxw4eeeolpg3byva2bgoj44psdugmid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822196": [
        {
            "ioc_value": "mejouwrwja4iou7myj34rqi7cixyhn7vsa42e2n2dhxzc5mmkiaki3yd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822197": [
        {
            "ioc_value": "ltxnzpfvmr3c3rcbw5x4q2ejy6fmbp7kc35oql3gooyydg7belfmnyad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822198": [
        {
            "ioc_value": "3fg2gfwrdks46drwvejpgpak5klrflclsjjo35dxtqfk3poeez6oezad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822199": [
        {
            "ioc_value": "emdnfl2fv32jhssxcbxlo6dzg2at4d7qbw2md6inz63qzdfgyln5cwyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 07:00:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822200": [
        {
            "ioc_value": "a4vbe7yp4kluped6khuhpr5nmzshiimx2jt5j22ozriiq6ngsm3fcpyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822201": [
        {
            "ioc_value": "x3nb7qcygpem2j5xzstyzdtgzofzkwkx4eko3ug4r73i6uhcgvyffjyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822202": [
        {
            "ioc_value": "3frnhzcnlkjnw5q3tm6elzizinm2k3bmrtf2xwqjzpcxzeqwn2tv6wyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822203": [
        {
            "ioc_value": "6ft2dfh26wm3w44orpjcgviutvfp25ez2iyh5ego5egvfmifrws7vvqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822204": [
        {
            "ioc_value": "zijgmuqjzb6dc7pofxhtaiz36qqyg35lhutybmzaz6whzgei2casjgid.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822205": [
        {
            "ioc_value": "inzk64xcf3sm6qzkehmio7piwhkslhnab3rlviniyg7alcgsxvy7kcyd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822206": [
        {
            "ioc_value": "upiqcdsgvh6v5owteasjzyxbj2xug574dj4fctthehd7zjq7wmuxbwqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822207": [
        {
            "ioc_value": "psv5ejeysrncs6ltu4pkjyazswcmw3atmxi4eg44a6luudin5ufchcqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822215": [
        {
            "ioc_value": "523c501118ef5d7957ce54aee86d9b1d",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:54",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Brain%20Cipher%20Ransomware",
            "tags": "braincipher,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822216": [
        {
            "ioc_value": "http://185.228.26.16/azsxd.arm6",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:53",
            "last_seen_utc": "2026-06-04 06:40:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1822217": [
        {
            "ioc_value": "http://185.228.26.16/azsxd.arm7",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:52",
            "last_seen_utc": "2026-06-04 06:40:37",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1822218": [
        {
            "ioc_value": "http://185.228.26.16/azsxd.arm5",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:52",
            "last_seen_utc": "2026-06-04 06:40:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1822219": [
        {
            "ioc_value": "http://185.228.26.16/azsxd.mips",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:51",
            "last_seen_utc": "2026-06-04 06:40:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1822220": [
        {
            "ioc_value": "http://185.228.26.16/azsxd.x86",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1822221": [
        {
            "ioc_value": "http://185.228.26.16/azsxd.mpsl",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:59:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://greedybear.honeynet.org",
            "tags": "honeypot",
            "anonymous": 0,
            "reporter": "greedybear"
        }
    ],
    "1822228": [
        {
            "ioc_value": "bijmduj.betforward.now",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 06:58:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822227": [
        {
            "ioc_value": "betforward.now",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 06:54:19",
            "last_seen_utc": "2026-06-04 06:54:24",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822225": [
        {
            "ioc_value": "betfoot.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 06:52:09",
            "last_seen_utc": "2026-06-04 06:52:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822224": [
        {
            "ioc_value": "adwordsnetwork.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.zloader",
            "malware_alias": "DELoader,SILENTNIGHT,Terdot",
            "malware_printable": "Zloader",
            "first_seen_utc": "2026-06-04 06:47:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822223": [
        {
            "ioc_value": "107.150.105.91:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 06:42:46",
            "last_seen_utc": "2026-07-09 08:46:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822222": [
        {
            "ioc_value": "204.194.49.142:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-04 06:42:44",
            "last_seen_utc": "2026-08-28 08:08:49",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822214": [
        {
            "ioc_value": "80.76.49.132:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 06:30:48",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4ac28f1f5fe3915bec355330f85bccfa860cd43a000a33a62c7f98f0ee16dcca/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822213": [
        {
            "ioc_value": "surveillance.1qq.cam",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 06:30:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3a22a92ecc694a9830df6368f807e775c8e382874bb9b2fc1ff95166f99795f2/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822209": [
        {
            "ioc_value": "contact.Fun88kyc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-04 06:30:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aadee5080f4b1f68d333c96fed75bf3d1fc2ccb72648c3f675d28ab1ceaa02f5/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822210": [
        {
            "ioc_value": "contact.hitclub.ac",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-04 06:30:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aadee5080f4b1f68d333c96fed75bf3d1fc2ccb72648c3f675d28ab1ceaa02f5/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822211": [
        {
            "ioc_value": "contact.mansionbet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-04 06:30:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aadee5080f4b1f68d333c96fed75bf3d1fc2ccb72648c3f675d28ab1ceaa02f5/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822212": [
        {
            "ioc_value": "contact.nhyouthclimatetownhall.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-04 06:30:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/aadee5080f4b1f68d333c96fed75bf3d1fc2ccb72648c3f675d28ab1ceaa02f5/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822208": [
        {
            "ioc_value": "BiMQuT238p64emYwAjhVaw==",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 06:30:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ea84300a2c8500206df527ef2d2559a328e9b3efd41717c1a4d3e865d602c316/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822195": [
        {
            "ioc_value": "64.89.160.67:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 06:25:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/44f7bc633fb44c58c2c0060945fe0db8d3aae62c64413984f54cb59a54f51a4f/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822194": [
        {
            "ioc_value": "45.133.116.16:8823",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 06:25:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/ea84300a2c8500206df527ef2d2559a328e9b3efd41717c1a4d3e865d602c316/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822193": [
        {
            "ioc_value": "104.239.66.86:7004",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 06:25:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/288e9320f7582f388ffdd93f00efebf60bf95e672804dc703da00eac890cb661/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822186": [
        {
            "ioc_value": "757ylxaeemidrhrmmuz6rkxw5jlk65oqou3lvi6evxtrr2nhm5ytmrqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:21:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822187": [
        {
            "ioc_value": "xq5m6ofel63h57by46algju25g37zkdwoxxt7ij45b6obo4mxzc3h6id.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:21:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822188": [
        {
            "ioc_value": "q2bg7ljsrpmy6736qqmpwsnqqm3w6d3hhrokohytnmldbom7sthp4sad.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:21:19",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822189": [
        {
            "ioc_value": "peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6ujlx36mhrh57did.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:21:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822190": [
        {
            "ioc_value": "pearsmob5sn44ismokiusuld34pnfwi6ctgin3qbvonpoob4lh3rmtqd.onion",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 06:21:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://github.com/TheRavenFile/Daily-Hunt/blob/main/PEAR%20Ransomware",
            "tags": "pear,ransomware",
            "anonymous": 0,
            "reporter": "TheRavenFile"
        }
    ],
    "1822191": [
        {
            "ioc_value": "dcservices.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-04 06:20:40",
            "last_seen_utc": "2026-06-04 14:06:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/1a4456c50a0abe1860cc365c8b4de17258ae5fa4d4a791000414a598ded8fe1e/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822192": [
        {
            "ioc_value": "jempp912.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-04 06:20:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8db74756acaf39fcc57435a6f645ac40fd104caf5286bf45813c50a2bd22a1dc/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822174": [
        {
            "ioc_value": "mcqkkmc.betfootbal90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 06:16:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822155": [
        {
            "ioc_value": "92.42.100.131:4569",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 06:05:59",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,netcat",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822156": [
        {
            "ioc_value": "192.159.99.196:4569",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 06:05:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,netcat",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822157": [
        {
            "ioc_value": "185.244.182.35:14569",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 06:05:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,netcat",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822163": [
        {
            "ioc_value": "globe.cachefoundry.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-04 05:59:11",
            "last_seen_utc": "2026-06-04 05:59:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/4aa5d203dab8d9da1768b22cc90f8d716eac9f90e16e85fa9add5d1f215679ac/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822162": [
        {
            "ioc_value": "155.103.71.146:777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-04 05:50:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0bb63b72fee6437616c2df663e3248ac08ac971ef76d7dfaa6335bc33dde46f0/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822161": [
        {
            "ioc_value": "83.142.209.228:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-04 05:50:14",
            "last_seen_utc": "2026-06-22 07:00:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822158": [
        {
            "ioc_value": "64.89.161.178:480",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-04 05:50:13",
            "last_seen_utc": "2026-06-04 05:50:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822159": [
        {
            "ioc_value": "217.60.241.17:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-04 05:50:13",
            "last_seen_utc": "2026-08-08 17:35:00",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822160": [
        {
            "ioc_value": "217.60.241.39:416",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.tofsee",
            "malware_alias": "Gheg",
            "malware_printable": "Tofsee",
            "first_seen_utc": "2026-06-04 05:50:13",
            "last_seen_utc": "2026-06-22 07:00:09",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Tofsee",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822150": [
        {
            "ioc_value": "nvms.miraibotnet.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:44:34",
            "last_seen_utc": "2026-06-05 08:12:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822151": [
        {
            "ioc_value": "tvt.miraibotnet.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:44:34",
            "last_seen_utc": "2026-06-05 08:12:11",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822152": [
        {
            "ioc_value": "tvt.oceanic-node.su",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:44:34",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "mirai,mossad",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1822154": [
        {
            "ioc_value": "sfmbqki.betfa90.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 05:41:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822149": [
        {
            "ioc_value": "151.243.113.94:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 05:33:02",
            "last_seen_utc": "2026-08-24 13:22:46",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822148": [
        {
            "ioc_value": "download-windows-update.live",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 05:32:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/556d7e26039a275f61e29165700b53574f04ca451db415d8c2b5ec1533d2094d/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822147": [
        {
            "ioc_value": "209.25.140.22:1522",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 05:25:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0f0382c0a26ab086d40ed788733860d08acde953210f609e92a8da2b4112f31a/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822146": [
        {
            "ioc_value": "mineral-considerable.with.playit.plus",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-04 05:24:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/3b51ba17efe988b0a761146c74f4fdfcc7e8c17da434bee2deebe94138a6a1fd/",
            "tags": "OverlordRAT,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822145": [
        {
            "ioc_value": "gud6pt4u.bet212.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 05:21:04",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822144": [
        {
            "ioc_value": "bet212.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 05:20:24",
            "last_seen_utc": "2026-06-04 05:20:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822067": [
        {
            "ioc_value": "40279ce4de656aada27374a03062264c",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/40279ce4de656aada27374a03062264c",
            "tags": "clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822068": [
        {
            "ioc_value": "e30a11906aadffc1682a1b07934301c6b68b854c9979bc64fd65152a349ed59f",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/40279ce4de656aada27374a03062264c",
            "tags": "clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822069": [
        {
            "ioc_value": "jfbrxii.enf90.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/e30a11906aadffc1682a1b07934301c6b68b854c9979bc64fd65152a349ed59f",
            "tags": "clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822093": [
        {
            "ioc_value": "sopa1805.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:17:39",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1822094": [
        {
            "ioc_value": "194.48.251.83:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:17:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1822110": [
        {
            "ioc_value": "bf5eea26587860faa25bbff99fb0a02e434d561a28a9675c29494653ade366b0",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822111": [
        {
            "ioc_value": "601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822112": [
        {
            "ioc_value": "4af29f1dc5cacc56d2e84ba3538cb54983b71d4fe27af44c8c00dddcbd45be49",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822113": [
        {
            "ioc_value": "biddulphmuseum.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822114": [
        {
            "ioc_value": "90g90.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822115": [
        {
            "ioc_value": "uuti.biddulphmuseum.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822116": [
        {
            "ioc_value": "asiudasoidu.90g90.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822117": [
        {
            "ioc_value": "9291df53e16c7351e275c0e0b4a8a9ba",
            "ioc_type": "md5_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/dabb2cfc1da018ac3b4fd5f60f9c5e2ca096319cb67dd904ed7df7392f3d6d00",
            "tags": "ClickFix,garble,Go,loader,Vidar",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822118": [
        {
            "ioc_value": "dabb2cfc1da018ac3b4fd5f60f9c5e2ca096319cb67dd904ed7df7392f3d6d00",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/dabb2cfc1da018ac3b4fd5f60f9c5e2ca096319cb67dd904ed7df7392f3d6d00",
            "tags": "ClickFix,garble,Go,loader,Vidar",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822119": [
        {
            "ioc_value": "https://cosmostars.shop/api/index.php?a=dl&token=8caaf953d89478b8a7191eb32295c117a310b53ac9059d4ad69a1e397ec3b2d4&rv=17ff1b3d94f9144973b09f8064ba72f3&src=www.morecroft.co.nz&mode=cloudflare",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/dabb2cfc1da018ac3b4fd5f60f9c5e2ca096319cb67dd904ed7df7392f3d6d00",
            "tags": "ClickFix,garble,Go,loader,single-fire,Vidar",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822120": [
        {
            "ioc_value": "cosmostars.shop",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:20",
            "last_seen_utc": "2026-06-30 21:58:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/dabb2cfc1da018ac3b4fd5f60f9c5e2ca096319cb67dd904ed7df7392f3d6d00",
            "tags": "ClickFix,garble,Go,loader,single-fire,Vidar",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822121": [
        {
            "ioc_value": "158.94.208.186:8041",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822122": [
        {
            "ioc_value": "95.216.87.114:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:19",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/601f4ae850e192bc76300f3851f4b421ba2e05313cb3f1ace0a0c98301e237bb",
            "tags": "connectwise-control,fakeupdate,jrtech,rmm-abuse,screenconnect",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822127": [
        {
            "ioc_value": "geminicii.co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:18",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://threatfox.abuse.ch/ioc/1793001/",
            "tags": "ClickFix,infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1822070": [
        {
            "ioc_value": "modernanchorengine.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/ip-address/5.161.67.220",
            "tags": "clickfix,loader,mshta",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822071": [
        {
            "ioc_value": "049409e0f3b42355a44d1e3071da71526bae92dad9e0d70b5f3b91680f08275b",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/049409e0f3b42355a44d1e3071da71526bae92dad9e0d70b5f3b91680f08275b",
            "tags": "clickfix,fakeputty,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822072": [
        {
            "ioc_value": "18e4b37eb34c38d7d5a0a1cdec0074f14bfc189b0493c4bc18c287fc09d0e1c3",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/049409e0f3b42355a44d1e3071da71526bae92dad9e0d70b5f3b91680f08275b",
            "tags": "clickfix,fakeputty,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822073": [
        {
            "ioc_value": "966266fa8645650be30a6f2f38a40426251f3930a0ccbc4fd307d09cf31de736",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:06",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/049409e0f3b42355a44d1e3071da71526bae92dad9e0d70b5f3b91680f08275b",
            "tags": "clickfix,fakeputty,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822074": [
        {
            "ioc_value": "http://85.239.149.78:6600/p5m4i979/putty_c4078a0a07f68cb6.msi",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/966266fa8645650be30a6f2f38a40426251f3930a0ccbc4fd307d09cf31de736",
            "tags": "clickfix,fakeputty,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822075": [
        {
            "ioc_value": "http://85.239.149.78/l6WwkWNj5hC2qDlgLI",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:17:04",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/966266fa8645650be30a6f2f38a40426251f3930a0ccbc4fd307d09cf31de736",
            "tags": "clickfix,fakeputty,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822088": [
        {
            "ioc_value": "brixhub.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:16:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "lmao1010"
        }
    ],
    "1822085": [
        {
            "ioc_value": "176.65.139.131:54128",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:16:41",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1822084": [
        {
            "ioc_value": "ssh.spider-net.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:16:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": null,
            "anonymous": 0,
            "reporter": "lmao1010"
        }
    ],
    "1822052": [
        {
            "ioc_value": "fdbcff609beb437cc8c944c88e101b85a6ec0d592a9afe1c4dc6ef040e7518bd",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:16:36",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/fdbcff609beb437cc8c944c88e101b85a6ec0d592a9afe1c4dc6ef040e7518bd",
            "tags": "clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822053": [
        {
            "ioc_value": "06e395ff22a7d11297168375628f446b8e11b7cf8ab5ee2a82ab8de1bc6faf5a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:16:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/fdbcff609beb437cc8c944c88e101b85a6ec0d592a9afe1c4dc6ef040e7518bd",
            "tags": "clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822054": [
        {
            "ioc_value": "uycuyqarnyq16an.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:16:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/06e395ff22a7d11297168375628f446b8e11b7cf8ab5ee2a82ab8de1bc6faf5a",
            "tags": "clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822055": [
        {
            "ioc_value": "https://second-confirmation.top/m",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-04 05:16:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://www.virustotal.com/gui/file/06e395ff22a7d11297168375628f446b8e11b7cf8ab5ee2a82ab8de1bc6faf5a",
            "tags": "c2,clickfix,loader",
            "anonymous": 0,
            "reporter": "Lenny3BO"
        }
    ],
    "1822062": [
        {
            "ioc_value": "106.52.166.133:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 05:16:27",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822033": [
        {
            "ioc_value": "147.45.50.108:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:16:20",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822034": [
        {
            "ioc_value": "130.185.119.80:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:16:19",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822035": [
        {
            "ioc_value": "101.206.108.14:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:16:18",
            "last_seen_utc": "2026-06-26 08:50:27",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822036": [
        {
            "ioc_value": "107.189.22.137:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-04 05:16:17",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "hello-probe,reconnaissance,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822032": [
        {
            "ioc_value": "167.86.72.220:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-04 05:16:15",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822031": [
        {
            "ioc_value": "104.28.154.251:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-04 05:16:14",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "backdoor-key,cloudflare,container-escape,docker-api,nginx-alpine,ssh-key-plant",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1822019": [
        {
            "ioc_value": "45.197.36.34:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-04 05:16:13",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822009": [
        {
            "ioc_value": "157.245.52.160:37228",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-04 05:16:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "C2,Mirai",
            "anonymous": 0,
            "reporter": "botnetkiller"
        }
    ],
    "1822142": [
        {
            "ioc_value": "tegbxmn.betebetwin.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 05:10:38",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822140": [
        {
            "ioc_value": "zqhnvn.303-bet.xyz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 05:04:35",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822136": [
        {
            "ioc_value": "emkilzh.betcityiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 04:31:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822129": [
        {
            "ioc_value": "vnacwzz.basketballiran.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 03:54:52",
            "last_seen_utc": "2026-06-04 03:55:08",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822128": [
        {
            "ioc_value": "04gzr1uh.alternatifdekorasyon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 03:52:23",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822126": [
        {
            "ioc_value": "nllyafb.basketballbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 03:24:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822125": [
        {
            "ioc_value": "db7orl54.bet120xpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 03:19:51",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822124": [
        {
            "ioc_value": "4vvkeuy6.bet120xpro.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 03:19:30",
            "last_seen_utc": "2026-06-04 03:20:19",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822123": [
        {
            "ioc_value": "basketballbet.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 03:19:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822105": [
        {
            "ioc_value": "tgyltcn.basketballbet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 02:43:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822104": [
        {
            "ioc_value": "basketballbet.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 02:43:18",
            "last_seen_utc": "2026-06-04 02:43:23",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "4June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822103": [
        {
            "ioc_value": "zkvxphk.barandebash.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 02:08:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822098": [
        {
            "ioc_value": "rpvfsmg.bankiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 01:33:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822096": [
        {
            "ioc_value": "8i927m8y.bcgamefarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 01:17:17",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822095": [
        {
            "ioc_value": "s3qrni26.bcgamefarsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 01:16:21",
            "last_seen_utc": "2026-06-04 01:17:06",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822089": [
        {
            "ioc_value": "qxzwbbx.bakht.club",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 00:57:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822087": [
        {
            "ioc_value": "zkenezc.baccaratbazi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 00:21:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822083": [
        {
            "ioc_value": "gunanx.303-bet.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-04 00:08:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822078": [
        {
            "ioc_value": "kpcifot.aypoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 23:46:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822076": [
        {
            "ioc_value": "aypoker90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 23:45:38",
            "last_seen_utc": "2026-06-03 23:45:41",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822066": [
        {
            "ioc_value": "7g5swyfn.bazipoop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 23:17:27",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822065": [
        {
            "ioc_value": "r38it4zu.bazipoop.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 23:15:58",
            "last_seen_utc": "2026-06-03 23:16:21",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822063": [
        {
            "ioc_value": "gqxhbsg.asa90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 23:10:29",
            "last_seen_utc": "2026-06-03 23:10:51",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822058": [
        {
            "ioc_value": "xrb3ppl3.akharinbama.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 22:51:08",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822057": [
        {
            "ioc_value": "djkbtwq.aryabet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 22:35:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822051": [
        {
            "ioc_value": "wjsuzxt.arian90bet.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 22:04:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822041": [
        {
            "ioc_value": "pmieubk.arabs.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 21:24:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822040": [
        {
            "ioc_value": "arabs.promo",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 21:23:34",
            "last_seen_utc": "2026-06-03 21:23:38",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822039": [
        {
            "ioc_value": "zjtplqi.arabi.poker",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 21:19:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822038": [
        {
            "ioc_value": "t0uo8kf9.basketballiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 21:16:44",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822037": [
        {
            "ioc_value": "ghef1emo.basketballiran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 21:15:37",
            "last_seen_utc": "2026-06-03 21:16:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822029": [
        {
            "ioc_value": "ihmqfsm.arabicbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:48:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822028": [
        {
            "ioc_value": "arabicbet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:44:08",
            "last_seen_utc": "2026-06-03 20:44:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822026": [
        {
            "ioc_value": "effgtty.ar888starz.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:34:24",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822024": [
        {
            "ioc_value": "cxexxbb.apk.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:24:30",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822022": [
        {
            "ioc_value": "apk.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:23:43",
            "last_seen_utc": "2026-06-03 20:23:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822021": [
        {
            "ioc_value": "cxfvahh.404bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:21:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822020": [
        {
            "ioc_value": "404bet.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 20:20:25",
            "last_seen_utc": "2026-06-03 20:20:29",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822018": [
        {
            "ioc_value": "loganwolverin2040.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 19:55:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/09a778c467ba4bebfc477f8aab889aa1fb5e9e4258b347106dcec48f91f32dc5/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822017": [
        {
            "ioc_value": "khuqcze.303.audio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 19:46:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822016": [
        {
            "ioc_value": "303.audio",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 19:45:12",
            "last_seen_utc": "2026-06-03 19:45:15",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1822015": [
        {
            "ioc_value": "20.220.29.224:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-03 19:44:00",
            "last_seen_utc": "2026-08-08 18:44:36",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Havoc",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822014": [
        {
            "ioc_value": "194.26.192.57:1024",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-03 19:43:56",
            "last_seen_utc": "2026-07-04 08:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822013": [
        {
            "ioc_value": "182.23.2.163:47984",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 19:43:43",
            "last_seen_utc": "2026-07-03 18:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822012": [
        {
            "ioc_value": "172.81.61.20:7997",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-03 19:43:36",
            "last_seen_utc": "2026-07-04 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822011": [
        {
            "ioc_value": "168.144.36.228:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 19:43:33",
            "last_seen_utc": "2026-08-20 08:44:06",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822010": [
        {
            "ioc_value": "147.124.210.158:8808",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 19:43:21",
            "last_seen_utc": "2026-07-07 18:43:31",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1822008": [
        {
            "ioc_value": "8vjdfz8n.basketballiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 19:16:05",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822007": [
        {
            "ioc_value": "s35umghu.basketballiran.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 19:15:05",
            "last_seen_utc": "2026-06-03 19:15:28",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1822006": [
        {
            "ioc_value": "hekjmsa.2026.futbol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 19:10:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1822005": [
        {
            "ioc_value": "2026.futbol",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 19:09:56",
            "last_seen_utc": "2026-06-03 19:09:58",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1821983": [
        {
            "ioc_value": "http://178.16.54.109/sodola",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "win.phorpiex",
            "malware_alias": "Tldr,Trik,TwizT,phorphiex",
            "malware_printable": "Phorpiex",
            "first_seen_utc": "2026-06-03 18:58:52",
            "last_seen_utc": "2026-08-21 08:48:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "Download,Phorpiex",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1821984": [
        {
            "ioc_value": "43.111.235.219:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 18:58:52",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1822001": [
        {
            "ioc_value": "favmrwg.1xbet-official-xbet.top",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 18:34:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821999": [
        {
            "ioc_value": "qyteglr.1xbetios.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 18:27:04",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821997": [
        {
            "ioc_value": "https://qzr.canamrental.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 18:25:08",
            "last_seen_utc": "2026-06-03 21:25:12",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821998": [
        {
            "ioc_value": "qzr.canamrental.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 18:25:08",
            "last_seen_utc": "2026-06-03 21:25:13",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821995": [
        {
            "ioc_value": "https://qzr.duitsm188.top/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 18:24:56",
            "last_seen_utc": "2026-06-03 21:25:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821996": [
        {
            "ioc_value": "qzr.duitsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 18:24:56",
            "last_seen_utc": "2026-06-03 21:25:01",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "ar3k0,Vidar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821992": [
        {
            "ioc_value": "qjothjo.1xbetandroid.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 17:52:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821991": [
        {
            "ioc_value": "4ly606b9.aftabsport.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 17:51:29",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821990": [
        {
            "ioc_value": "vtqjke.1xbet1farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 17:48:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821988": [
        {
            "ioc_value": "1xbetandroid.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 17:46:49",
            "last_seen_utc": "2026-06-03 17:46:56",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1821987": [
        {
            "ioc_value": "bqm57dpz.betgit.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 17:16:43",
            "last_seen_utc": "2026-06-11 10:05:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821986": [
        {
            "ioc_value": "betgit.casino",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 17:14:53",
            "last_seen_utc": "2026-06-03 17:15:01",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1821980": [
        {
            "ioc_value": "121.127.253.248:4782",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-03 16:15:51",
            "last_seen_utc": "2026-06-07 13:00:17",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/77193b76e7142383c2fb8f4c92891fa8eb0dd0f50ed206532ebd0abb93da9bc9/",
            "tags": "quasar",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821979": [
        {
            "ioc_value": "8.217.144.219:5678",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-03 16:10:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e306f2ec7aa41e7c60802c8156990b3d9c6949451ae72409646e4a7c15b6ebff/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821977": [
        {
            "ioc_value": "47.83.123.66:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-03 16:10:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e306f2ec7aa41e7c60802c8156990b3d9c6949451ae72409646e4a7c15b6ebff/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821978": [
        {
            "ioc_value": "8.217.144.219:5677",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-03 16:10:45",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e306f2ec7aa41e7c60802c8156990b3d9c6949451ae72409646e4a7c15b6ebff/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821950": [
        {
            "ioc_value": "code-jquery.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821951": [
        {
            "ioc_value": "code-jquery.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821952": [
        {
            "ioc_value": "bootstrapccdn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821953": [
        {
            "ioc_value": "bootstrapscdn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821954": [
        {
            "ioc_value": "cdnjs.cloudflire.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821955": [
        {
            "ioc_value": "cdnjs.cloudflire.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821956": [
        {
            "ioc_value": "cdnjs.bootstrapscdn.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821957": [
        {
            "ioc_value": "ajax.googleaips.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821958": [
        {
            "ioc_value": "cdn.googleaips.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821959": [
        {
            "ioc_value": "stat.keitaro.company",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:08:09",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821960": [
        {
            "ioc_value": "mc.yadnex.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821961": [
        {
            "ioc_value": "138.68.80.126:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821962": [
        {
            "ioc_value": "164.92.242.121:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821963": [
        {
            "ioc_value": "209.38.212.9:443",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:52",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821964": [
        {
            "ioc_value": "https://code-jquery.net/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821965": [
        {
            "ioc_value": "https://code-jquery.com/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821966": [
        {
            "ioc_value": "https://bootstrapccdn.com/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821967": [
        {
            "ioc_value": "https://bootstrapscdn.com/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821969": [
        {
            "ioc_value": "https://cdnjs.cloudflire.net/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:49",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821968": [
        {
            "ioc_value": "https://cdnjs.cloudflire.com/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:48",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821970": [
        {
            "ioc_value": "https://cdnjs.bootstrapscdn.com/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821971": [
        {
            "ioc_value": "https://ajax.googleaips.net/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821972": [
        {
            "ioc_value": "https://stat.keitaro.company/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821973": [
        {
            "ioc_value": "https://mc.yadnex.net/ws",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "js.magecart",
            "malware_alias": null,
            "malware_printable": "magecart",
            "first_seen_utc": "2026-06-03 16:07:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "jquery,Magecart,skimmer,typosquat",
            "anonymous": 0,
            "reporter": "josebartos2016"
        }
    ],
    "1821946": [
        {
            "ioc_value": "116.203.3.198:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821947": [
        {
            "ioc_value": "65.21.96.135:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821948": [
        {
            "ioc_value": "65.21.96.128:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821949": [
        {
            "ioc_value": "135.181.224.72:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:42:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821944": [
        {
            "ioc_value": "https://65.21.96.128/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:41:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821945": [
        {
            "ioc_value": "https://135.181.224.72/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:41:57",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821942": [
        {
            "ioc_value": "https://116.203.3.198/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:41:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821943": [
        {
            "ioc_value": "https://65.21.96.135/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-03 15:41:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Vidar",
            "anonymous": 0,
            "reporter": "crep1x"
        }
    ],
    "1821941": [
        {
            "ioc_value": "mfepyxz.bet888starzz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 15:40:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821940": [
        {
            "ioc_value": "wydkbnq.bet888starzz.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 15:38:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821798": [
        {
            "ioc_value": "13.236.153.60:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 15:24:07",
            "last_seen_utc": "2026-09-01 02:43:28",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "asyncrat",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821815": [
        {
            "ioc_value": "206.189.84.116:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 15:24:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlquery.net/report/b7b68bee-0368-48cc-af31-5865df005da2",
            "tags": "C2,Panel",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1821817": [
        {
            "ioc_value": "165.245.161.242:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 15:24:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlquery.net/report/8757127a-db1e-4531-9e33-a9d059025bc7",
            "tags": "GhostC2,Panel",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1821816": [
        {
            "ioc_value": "165.245.167.52:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 15:23:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlquery.net/report/d2b5652d-ece6-4981-b994-907e96043cf3",
            "tags": "GhostC2,Panel",
            "anonymous": 0,
            "reporter": "BlinkzSec"
        }
    ],
    "1821844": [
        {
            "ioc_value": "47.82.234.12:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 15:23:52",
            "last_seen_utc": "2026-09-01 02:47:07",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "cobaltstrike",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821845": [
        {
            "ioc_value": "cabaretcorporation.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remus",
            "malware_alias": null,
            "malware_printable": "Remus",
            "first_seen_utc": "2026-06-03 15:23:52",
            "last_seen_utc": "2026-06-06 06:55:18",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/0a2b733519d04f2b7539935eaa3ae2199c9cbad748b808637fdfeb020f189f04/",
            "tags": "c2,RemusStealer",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1821846": [
        {
            "ioc_value": "192.159.99.196:4569",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-03 15:23:51",
            "last_seen_utc": "2026-06-04 20:45:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "dropper,mirai,netcat",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1821847": [
        {
            "ioc_value": "185.244.182.35:14569",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-03 15:23:51",
            "last_seen_utc": "2026-06-04 20:45:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "dropper,mirai,netcat",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1821848": [
        {
            "ioc_value": "92.42.100.131:4569",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-03 15:23:50",
            "last_seen_utc": "2026-06-04 20:45:57",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "dropper,mirai,netcat",
            "anonymous": 0,
            "reporter": "uwucutecatgirl"
        }
    ],
    "1821939": [
        {
            "ioc_value": "2os894vl.betfire90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 15:15:26",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821938": [
        {
            "ioc_value": "d29u9g6c.betfire90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 15:14:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821933": [
        {
            "ioc_value": "nuulycp.bet365iran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 15:03:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821932": [
        {
            "ioc_value": "uniajji.bet365iran.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 15:03:01",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821928": [
        {
            "ioc_value": "yyyf168.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:32",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821926": [
        {
            "ioc_value": "f168viet.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821927": [
        {
            "ioc_value": "ff168.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821924": [
        {
            "ioc_value": "f168lv.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821925": [
        {
            "ioc_value": "f168news.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821922": [
        {
            "ioc_value": "f168.gold",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821923": [
        {
            "ioc_value": "f168.talk",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821920": [
        {
            "ioc_value": "f168.download",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821921": [
        {
            "ioc_value": "f168.futbol",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821919": [
        {
            "ioc_value": "f168-v1.cheap",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:50:26",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/48f4e1be06c9f197a0cbd34c33cdec5ee8b1d5f55c8c27a6f3fd0eaca9d154e2/",
            "tags": "asyncrat",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821917": [
        {
            "ioc_value": "172.245.185.195:9988",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:44:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821918": [
        {
            "ioc_value": "46.8.226.70:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:44:16",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821913": [
        {
            "ioc_value": "5.180.253.105:8000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:44:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821914": [
        {
            "ioc_value": "24.12.218.134:9090",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:44:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821915": [
        {
            "ioc_value": "185.246.223.72:5000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:44:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821916": [
        {
            "ioc_value": "165.245.181.147:8000",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:44:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821912": [
        {
            "ioc_value": "hardsmi.cyou",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.lumma",
            "malware_alias": "LummaC2 Stealer",
            "malware_printable": "Lumma Stealer",
            "first_seen_utc": "2026-06-03 14:43:45",
            "last_seen_utc": "2026-06-12 13:00:40",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,lumma",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821908": [
        {
            "ioc_value": "192.227.219.79:4551",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:43:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821909": [
        {
            "ioc_value": "192.227.219.79:4553",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:43:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821910": [
        {
            "ioc_value": "209.54.103.156:465",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:43:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821911": [
        {
            "ioc_value": "31.56.209.70:3754",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:43:15",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821906": [
        {
            "ioc_value": "103.83.87.8:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:43:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821907": [
        {
            "ioc_value": "192.227.219.79:4550",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:43:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821900": [
        {
            "ioc_value": "88j.co.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:42:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821901": [
        {
            "ioc_value": "j88pro.club",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:42:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821902": [
        {
            "ioc_value": "macat433.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:42:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821903": [
        {
            "ioc_value": "orche.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:42:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821904": [
        {
            "ioc_value": "urchlogs.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:42:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821905": [
        {
            "ioc_value": "www.consultarprocesosramajudicial.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 14:42:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821895": [
        {
            "ioc_value": "loungelovers.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 14:42:25",
            "last_seen_utc": "2026-06-03 14:42:25",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821896": [
        {
            "ioc_value": "ph88phil.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 14:42:25",
            "last_seen_utc": "2026-06-03 14:42:25",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821897": [
        {
            "ioc_value": "purerawk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 14:42:25",
            "last_seen_utc": "2026-06-03 14:42:25",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821898": [
        {
            "ioc_value": "ww.maskelibros.cl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 14:42:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821899": [
        {
            "ioc_value": "www.cinehouse.my",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 14:42:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,nanocore",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821894": [
        {
            "ioc_value": "bejow65678-31238.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-03 14:42:03",
            "last_seen_utc": "2026-06-07 15:17:35",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,dcrat",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821885": [
        {
            "ioc_value": "111.90.145.42:20",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821886": [
        {
            "ioc_value": "111.90.145.42:21",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821887": [
        {
            "ioc_value": "111.90.145.42:22",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821888": [
        {
            "ioc_value": "111.90.145.42:23",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821889": [
        {
            "ioc_value": "111.90.145.42:3306",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821890": [
        {
            "ioc_value": "111.90.145.42:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821891": [
        {
            "ioc_value": "111.90.145.42:7788",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821892": [
        {
            "ioc_value": "111.90.145.42:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821893": [
        {
            "ioc_value": "111.90.145.42:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-03 14:41:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821884": [
        {
            "ioc_value": "81.180.93.249:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-03 14:40:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.180.93.249#80",
            "tags": "c2,shodan,xworm",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821883": [
        {
            "ioc_value": "2.59.219.233:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-03 14:39:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/2.59.219.233#80",
            "tags": "c2,salatstealer,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821882": [
        {
            "ioc_value": "108.187.42.63:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:39:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/108.187.42.63#8080",
            "tags": "c2,shodan,supershell",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821881": [
        {
            "ioc_value": "135.125.101.1:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-03 14:39:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/135.125.101.1#443",
            "tags": "c2,collector,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821880": [
        {
            "ioc_value": "109.123.239.180:10020",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netsupportmanager_rat",
            "malware_alias": "NetSupport",
            "malware_printable": "NetSupportManager RAT",
            "first_seen_utc": "2026-06-03 14:38:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/109.123.239.180#10020",
            "tags": "c2,NetSupport,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821879": [
        {
            "ioc_value": "103.78.149.106:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-03 14:38:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.78.149.106#1337",
            "tags": "c2,shodan,StarKillerC2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821878": [
        {
            "ioc_value": "140.150.2.105:9754",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nimplant",
            "malware_alias": null,
            "malware_printable": "Nimplant",
            "first_seen_utc": "2026-06-03 14:37:28",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/140.150.2.105#9754",
            "tags": "c2,nimplant,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821877": [
        {
            "ioc_value": "4.240.85.243:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:36:55",
            "last_seen_utc": "2026-08-26 18:45:59",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.240.85.243#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821876": [
        {
            "ioc_value": "164.90.231.249:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-03 14:36:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/164.90.231.249#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821874": [
        {
            "ioc_value": "151.243.150.40:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:36:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.243.150.40#9999",
            "tags": "c2,shodan,stealthc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821875": [
        {
            "ioc_value": "151.243.150.40:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:36:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.243.150.40#8080",
            "tags": "c2,shodan,stealthc2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821872": [
        {
            "ioc_value": "104.196.203.183:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:34:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.196.203.183#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821873": [
        {
            "ioc_value": "141.95.97.109:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:34:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/141.95.97.109#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821870": [
        {
            "ioc_value": "62.192.173.249:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-03 14:34:08",
            "last_seen_utc": "2026-08-05 08:46:40",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.192.173.249#9000",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821871": [
        {
            "ioc_value": "64.227.4.176:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-03 14:34:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.227.4.176#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821869": [
        {
            "ioc_value": "199.58.212.141:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:42",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/199.58.212.141#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821868": [
        {
            "ioc_value": "209.124.212.103:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.124.212.103#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821866": [
        {
            "ioc_value": "43.161.250.88:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:19",
            "last_seen_utc": "2026-06-03 14:33:21",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.161.250.88#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821867": [
        {
            "ioc_value": "167.172.100.54:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:19",
            "last_seen_utc": "2026-06-03 14:33:21",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.172.100.54#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821863": [
        {
            "ioc_value": "20.123.99.95:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:18",
            "last_seen_utc": "2026-06-03 14:33:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.123.99.95#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821864": [
        {
            "ioc_value": "116.202.124.165:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:18",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/116.202.124.165#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821862": [
        {
            "ioc_value": "202.144.135.78:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:33:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/202.144.135.78#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821860": [
        {
            "ioc_value": "66.42.79.185:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 14:32:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.42.79.185#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821857": [
        {
            "ioc_value": "62.192.173.249:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.192.173.249#8443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821858": [
        {
            "ioc_value": "152.136.204.200:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:12",
            "last_seen_utc": "2026-06-03 14:32:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.136.204.200#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821859": [
        {
            "ioc_value": "106.13.201.122:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:12",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/106.13.201.122#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821855": [
        {
            "ioc_value": "135.125.196.5:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/135.125.196.5#80",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821856": [
        {
            "ioc_value": "156.225.22.84:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:11",
            "last_seen_utc": "2026-06-04 11:00:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/156.225.22.84#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821853": [
        {
            "ioc_value": "135.125.196.5:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:10",
            "last_seen_utc": "2026-06-03 14:32:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/135.125.196.5#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821854": [
        {
            "ioc_value": "20.15.58.107:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:32:10",
            "last_seen_utc": "2026-06-03 14:32:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.15.58.107#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821852": [
        {
            "ioc_value": "154.89.152.200:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:31:48",
            "last_seen_utc": "2026-06-03 14:32:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/154.89.152.200#443",
            "tags": "c2,cobaltstrike,cs-watermark-1234567890,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821850": [
        {
            "ioc_value": "114.134.187.38:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:31:44",
            "last_seen_utc": "2026-07-19 14:46:55",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/114.134.187.38#8443",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821851": [
        {
            "ioc_value": "217.154.212.25:8446",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 14:31:44",
            "last_seen_utc": "2026-06-03 14:32:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/217.154.212.25#8446",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821849": [
        {
            "ioc_value": "niftxdi.bet313.app",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 14:28:05",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821843": [
        {
            "ioc_value": "liizlfb.bet30bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:52:28",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821842": [
        {
            "ioc_value": "eltyalg.bet30bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:52:07",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821841": [
        {
            "ioc_value": "ojxpecw.bet30bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:46:23",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821840": [
        {
            "ioc_value": "glwlroq.bet30bet.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:45:34",
            "last_seen_utc": "2026-06-03 13:52:13",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821839": [
        {
            "ioc_value": "5yohaely.betexper.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:14:32",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821838": [
        {
            "ioc_value": "471yebmv.betexper.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:13:31",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821837": [
        {
            "ioc_value": "mobility-aids.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 13:10:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5db6e46ae0a2f0c1c7f6f2a7ff28fa2b50f4e36b5918906111928ae6cf24ea41/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821836": [
        {
            "ioc_value": "oggo8gfy.betcompani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:08:43",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821827": [
        {
            "ioc_value": "betcompani.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 13:07:11",
            "last_seen_utc": "2026-06-03 13:07:17",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1821819": [
        {
            "ioc_value": "maskelibros.cl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 12:50:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/378ac23df0db902049109577898d2926d72e8ad6a723159dc019f99f2ccbd01a/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821818": [
        {
            "ioc_value": "83.142.209.134:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 12:45:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/20604bfb9228b92a80eace6173046f3e78ef3d539fd097bdbea3da34f675a0c4/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821814": [
        {
            "ioc_value": "rtfo.sa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 12:05:35",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30a9f9a9f677e73b8adfc87a7b426317a1e968a320f01addb0d8af794a64282d/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821813": [
        {
            "ioc_value": "77bet.africa",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-03 12:05:34",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/30a9f9a9f677e73b8adfc87a7b426317a1e968a320f01addb0d8af794a64282d/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821807": [
        {
            "ioc_value": "209.200.246.194:11544",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 11:46:25",
            "last_seen_utc": "2026-08-28 08:09:03",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821806": [
        {
            "ioc_value": "b33gup3p.betbet.city",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 11:14:39",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821805": [
        {
            "ioc_value": "ozmhw80r.adabiyat.org",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 11:14:16",
            "last_seen_utc": "2026-06-11 10:05:03",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821792": [
        {
            "ioc_value": "xxxxxx69.cn",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 10:45:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://x.com/AndrewPetrus/status/2061837991212089750?s=20",
            "tags": "Fake Antivirus,PUA,PUP",
            "anonymous": 0,
            "reporter": "andrewpetrus"
        }
    ],
    "1821797": [
        {
            "ioc_value": "91.92.41.91:2026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-03 10:09:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://urlhaus.abuse.ch/url/3857977/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821716": [
        {
            "ioc_value": "82.23.246.160:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-03 09:45:37",
            "last_seen_utc": "2026-09-01 02:46:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821715": [
        {
            "ioc_value": "204.194.50.173:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 09:44:13",
            "last_seen_utc": "2026-07-28 08:44:28",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821714": [
        {
            "ioc_value": "182.23.2.163:10399",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-03 09:43:49",
            "last_seen_utc": "2026-07-03 08:43:55",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821713": [
        {
            "ioc_value": "156.247.40.190:12159",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-03 09:43:30",
            "last_seen_utc": "2026-09-01 02:43:45",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "DCRat,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821712": [
        {
            "ioc_value": "gfrewds.bet-303.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 09:22:47",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821705": [
        {
            "ioc_value": "ledger.com.ag",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 08:38:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821706": [
        {
            "ioc_value": "ledger-shop.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 08:38:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821707": [
        {
            "ioc_value": "bet-303.fun",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 08:25:24",
            "last_seen_utc": "2026-06-03 09:20:47",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "3June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1821704": [
        {
            "ioc_value": "6aq224cu.luxerabet100.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 08:17:46",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821703": [
        {
            "ioc_value": "yr126pdf.luxerabet100.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 08:17:20",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821687": [
        {
            "ioc_value": "151.243.150.40:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 08:01:51",
            "last_seen_utc": null,
            "confidence_level": 85,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "alpine-container,cryptojacking,docker-api,escalation,fileless,inline-base64-elf,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821688": [
        {
            "ioc_value": "64.89.163.134:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 08:01:50",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,database-enumeration,postgres,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821689": [
        {
            "ioc_value": "13.58.162.150:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 08:01:49",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "aws,bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821690": [
        {
            "ioc_value": "65.49.1.222:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 08:01:49",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821691": [
        {
            "ioc_value": "98.80.4.99:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 08:01:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "aws,bruteforce,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821692": [
        {
            "ioc_value": "18.219.33.158:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 08:01:48",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "aws,reconnaissance,redis,visionheight-scanner",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821698": [
        {
            "ioc_value": "sun8i9tk.luxerabet1000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 07:57:09",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821697": [
        {
            "ioc_value": "118.89.203.103:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 07:57:06",
            "last_seen_utc": "2026-08-28 08:08:54",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821696": [
        {
            "ioc_value": "155.94.193.170:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 07:56:53",
            "last_seen_utc": "2026-06-03 17:00:14",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-666666666",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821695": [
        {
            "ioc_value": "118.89.203.103:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 07:56:52",
            "last_seen_utc": "2026-08-28 08:08:48",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-987654321",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821694": [
        {
            "ioc_value": "124.222.248.10:8088",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 07:56:48",
            "last_seen_utc": "2026-06-04 06:42:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,cs-watermark-391144938",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821693": [
        {
            "ioc_value": "4snfemll.luxerabet1000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 07:55:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821681": [
        {
            "ioc_value": "laohe4.myvnc.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.xworm",
            "malware_alias": null,
            "malware_printable": "XWorm",
            "first_seen_utc": "2026-06-03 06:40:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/e6214ec3dc86e8aa709720e5fedaee79fd70b8dc0e25fcadd80ecdde63b50451/",
            "tags": "xworm",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821680": [
        {
            "ioc_value": "144.31.6.17:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:32:33",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/2ad43dd82ee2e193cd41cfbfedb35d4306fa4160fdcf77992c8cc4ccfccb60cd/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821679": [
        {
            "ioc_value": "filezilla.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.count_loader",
            "malware_alias": null,
            "malware_printable": "CountLoader",
            "first_seen_utc": "2026-06-03 06:11:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/72abb09c4e65fe2369c3c2e328617bb44ddc12cad24181a7e5c53169b05fb543/",
            "tags": "CountLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821678": [
        {
            "ioc_value": "104.248.198.130:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.count_loader",
            "malware_alias": null,
            "malware_printable": "CountLoader",
            "first_seen_utc": "2026-06-03 06:09:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/014c9b69c6082a9b5a302605cfc95267e014a55c56ce4d0657d1251a81cbe113/",
            "tags": "CountLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821677": [
        {
            "ioc_value": "dust.packetflow.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.acr_stealer",
            "malware_alias": null,
            "malware_printable": "ACR Stealer",
            "first_seen_utc": "2026-06-03 06:08:25",
            "last_seen_utc": "2026-06-03 06:08:25",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/014c9b69c6082a9b5a302605cfc95267e014a55c56ce4d0657d1251a81cbe113/",
            "tags": "ACRStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821676": [
        {
            "ioc_value": "vdsina.vg",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.count_loader",
            "malware_alias": null,
            "malware_printable": "CountLoader",
            "first_seen_utc": "2026-06-03 06:08:02",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/014c9b69c6082a9b5a302605cfc95267e014a55c56ce4d0657d1251a81cbe113/",
            "tags": "CountLoader",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821675": [
        {
            "ioc_value": "136.243.152.105:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-03 06:05:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8f924cf70da38face250e4058a559a05785d189713959390c31ac8ffd9c81650/",
            "tags": "ZuqraStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821673": [
        {
            "ioc_value": "http://136.243.152.105/api/telemetry/file-chunk",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-03 06:05:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8f924cf70da38face250e4058a559a05785d189713959390c31ac8ffd9c81650/",
            "tags": "ZuqraStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821674": [
        {
            "ioc_value": "http://136.243.152.105/api/telemetry/event",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-03 06:05:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8f924cf70da38face250e4058a559a05785d189713959390c31ac8ffd9c81650/",
            "tags": "ZuqraStealer",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821669": [
        {
            "ioc_value": "http://213.108.20.59/api/commands/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:00:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795d9ded37f82d443e68ea31d77a4f8225ebf3ddff4add3669f8185793603861/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821670": [
        {
            "ioc_value": "http://213.108.20.59/api/results",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:00:22",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795d9ded37f82d443e68ea31d77a4f8225ebf3ddff4add3669f8185793603861/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821664": [
        {
            "ioc_value": "http://213.108.20.59/api/files/sync",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:00:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795d9ded37f82d443e68ea31d77a4f8225ebf3ddff4add3669f8185793603861/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821665": [
        {
            "ioc_value": "http://213.108.20.59/api/data",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:00:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795d9ded37f82d443e68ea31d77a4f8225ebf3ddff4add3669f8185793603861/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821667": [
        {
            "ioc_value": "http://213.108.20.59/api/register",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:00:21",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795d9ded37f82d443e68ea31d77a4f8225ebf3ddff4add3669f8185793603861/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821663": [
        {
            "ioc_value": "213.108.20.59:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 06:00:03",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/795d9ded37f82d443e68ea31d77a4f8225ebf3ddff4add3669f8185793603861/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821662": [
        {
            "ioc_value": "45.11.181.191:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-03 05:58:16",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/94fd617f2959f91be80a2b661d8202313fe78aa4975becf6d74aa7219b91a013/",
            "tags": null,
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821661": [
        {
            "ioc_value": "yzqawgz5.7lf.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 05:56:48",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821526": [
        {
            "ioc_value": "45.136.14.91:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:13",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821527": [
        {
            "ioc_value": "192.227.167.203:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821528": [
        {
            "ioc_value": "103.114.163.67:2087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:12",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821529": [
        {
            "ioc_value": "154.88.102.47:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:12",
            "last_seen_utc": "2026-06-02 22:00:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821530": [
        {
            "ioc_value": "134.122.154.92:2086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:11",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821531": [
        {
            "ioc_value": "146.56.248.54:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:10",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821532": [
        {
            "ioc_value": "198.13.38.179:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:10",
            "last_seen_utc": "2026-06-04 09:00:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821534": [
        {
            "ioc_value": "23.95.48.221:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:10",
            "last_seen_utc": "2026-06-06 00:00:26",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821533": [
        {
            "ioc_value": "8.134.70.73:8112",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:09",
            "last_seen_utc": "2026-06-06 21:00:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821535": [
        {
            "ioc_value": "107.175.81.40:7105",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821536": [
        {
            "ioc_value": "107.149.176.221:3000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821537": [
        {
            "ioc_value": "45.77.220.145:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:08",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821538": [
        {
            "ioc_value": "192.3.98.166:55555",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821539": [
        {
            "ioc_value": "116.63.105.66:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821540": [
        {
            "ioc_value": "149.28.30.98:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:07",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821541": [
        {
            "ioc_value": "8.218.114.253:35000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:05",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821542": [
        {
            "ioc_value": "154.88.99.33:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:05",
            "last_seen_utc": "2026-06-05 19:00:14",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821543": [
        {
            "ioc_value": "163.61.103.45:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821544": [
        {
            "ioc_value": "149.28.30.98:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821545": [
        {
            "ioc_value": "107.172.80.241:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:02",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821546": [
        {
            "ioc_value": "172.245.80.41:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821547": [
        {
            "ioc_value": "45.77.28.40:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:01",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821548": [
        {
            "ioc_value": "13.212.206.34:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821549": [
        {
            "ioc_value": "149.28.30.98:8090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:56:00",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821550": [
        {
            "ioc_value": "103.179.44.239:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:59",
            "last_seen_utc": "2026-07-17 00:05:05",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821551": [
        {
            "ioc_value": "149.28.30.98:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:59",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821552": [
        {
            "ioc_value": "43.247.135.106:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821553": [
        {
            "ioc_value": "45.77.28.40:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:58",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821554": [
        {
            "ioc_value": "115.29.202.62:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:58",
            "last_seen_utc": "2026-06-24 06:05:04",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821555": [
        {
            "ioc_value": "117.72.79.131:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821556": [
        {
            "ioc_value": "67.209.187.150:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:57",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821557": [
        {
            "ioc_value": "45.115.124.45:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821558": [
        {
            "ioc_value": "116.62.172.147:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:56",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821559": [
        {
            "ioc_value": "107.174.68.244:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821560": [
        {
            "ioc_value": "130.94.16.122:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821561": [
        {
            "ioc_value": "110.41.77.213:6667",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:55",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821562": [
        {
            "ioc_value": "101.132.173.235:9094",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821563": [
        {
            "ioc_value": "47.94.108.209:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:47",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821564": [
        {
            "ioc_value": "166.88.209.196:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821565": [
        {
            "ioc_value": "23.95.242.55:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:46",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821566": [
        {
            "ioc_value": "106.75.7.239:7777",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:44",
            "last_seen_utc": "2026-06-07 20:00:22",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821567": [
        {
            "ioc_value": "47.99.83.122:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821568": [
        {
            "ioc_value": "47.79.99.24:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:43",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821569": [
        {
            "ioc_value": "8.152.214.50:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821570": [
        {
            "ioc_value": "45.77.28.40:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:42",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821573": [
        {
            "ioc_value": "117.50.220.61:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:41",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821571": [
        {
            "ioc_value": "103.110.221.162:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821572": [
        {
            "ioc_value": "66.154.104.53:60001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821574": [
        {
            "ioc_value": "159.75.158.207:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821575": [
        {
            "ioc_value": "156.254.5.50:44333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:38",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821577": [
        {
            "ioc_value": "150.242.245.62:1443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:38",
            "last_seen_utc": "2026-06-25 08:05:07",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821525": [
        {
            "ioc_value": "8.163.104.36:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-03 05:55:36",
            "last_seen_utc": "2026-07-05 08:47:41",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821520": [
        {
            "ioc_value": "154.88.101.35:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:34",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821576": [
        {
            "ioc_value": "81.70.21.248:9999",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:27",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821578": [
        {
            "ioc_value": "45.202.210.114:8084",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:25",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821579": [
        {
            "ioc_value": "194.213.18.117:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821580": [
        {
            "ioc_value": "18.179.119.184:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821581": [
        {
            "ioc_value": "38.165.20.79:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:24",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821582": [
        {
            "ioc_value": "134.122.154.92:2082",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:23",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821583": [
        {
            "ioc_value": "110.42.239.240:15588",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:22",
            "last_seen_utc": "2026-06-06 22:00:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821584": [
        {
            "ioc_value": "64.111.93.243:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:22",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821585": [
        {
            "ioc_value": "202.140.142.97:2222",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821586": [
        {
            "ioc_value": "182.16.76.4:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:21",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821587": [
        {
            "ioc_value": "148.66.8.67:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821588": [
        {
            "ioc_value": "193.112.200.118:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821589": [
        {
            "ioc_value": "115.190.227.197:8001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:20",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821590": [
        {
            "ioc_value": "124.222.57.34:9998",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:19",
            "last_seen_utc": "2026-06-12 06:00:19",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821591": [
        {
            "ioc_value": "107.173.144.112:8086",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:19",
            "last_seen_utc": "2026-06-06 22:00:20",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821592": [
        {
            "ioc_value": "149.30.247.60:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821593": [
        {
            "ioc_value": "101.34.60.206:38880",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:18",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821594": [
        {
            "ioc_value": "107.175.81.40:7102",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821595": [
        {
            "ioc_value": "45.76.209.212:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:17",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "VShell",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821660": [
        {
            "ioc_value": "rp05pfgt.7lf.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 05:55:17",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821605": [
        {
            "ioc_value": "feiyuwei.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-06-03 05:55:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "Latrodectus",
            "anonymous": 0,
            "reporter": "varysz"
        }
    ],
    "1821608": [
        {
            "ioc_value": "151.243.150.40:5353",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 05:55:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "covert-channel,DNS-C2,dns-tunneling,docker-api,miner,port-5353,stealth,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821609": [
        {
            "ioc_value": "111.228.48.124:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 05:55:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "config-rce,redis,slaveof-attack,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821610": [
        {
            "ioc_value": "82.112.241.16:6379",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 05:55:08",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "config-rce,reconnaissance,redis",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821611": [
        {
            "ioc_value": "143.198.92.217:5432",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 05:55:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,DigitalOcean,letmein-bot,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821612": [
        {
            "ioc_value": "46.151.182.191:5432",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-03 05:55:07",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "bruteforce,dictionary-attack,postgres",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821613": [
        {
            "ioc_value": "167.99.72.161:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-03 05:55:06",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "DigitalOcean,docker-api,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821614": [
        {
            "ioc_value": "68.167.181.179:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-03 05:55:06",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821615": [
        {
            "ioc_value": "170.9.16.186:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-03 05:55:05",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "dropper,Mirai,web-spread",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821616": [
        {
            "ioc_value": "220.181.1.163:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.mirai",
            "malware_alias": "Katana",
            "malware_printable": "Mirai",
            "first_seen_utc": "2026-06-03 05:55:05",
            "last_seen_utc": "2026-07-01 19:01:26",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "CN,docker-api,reconnaissance",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1821624": [
        {
            "ioc_value": "154.88.102.38:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:55:01",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821633": [
        {
            "ioc_value": "154.88.102.54:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:54:59",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821635": [
        {
            "ioc_value": "154.88.102.57:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:54:57",
            "last_seen_utc": "2026-08-22 00:03:03",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821638": [
        {
            "ioc_value": "http://149.104.29.201:8111/log.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:56",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821639": [
        {
            "ioc_value": "http://149.104.29.201:8455/slt",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:55",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,go-implant,langflow,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821640": [
        {
            "ioc_value": "http://149.104.29.201:8111/set.sh",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:55",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,go-implant,langflow,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821641": [
        {
            "ioc_value": "e3455fb41ba8dce83b27931bacdd6596fd8b925305bedb5bdc00640a0e6a1839",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:54",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821642": [
        {
            "ioc_value": "39fbfcccf13ab9d65d90c38b37febef37a89ad7341900ab60eee3896123ed2d1",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:54",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821643": [
        {
            "ioc_value": "00443779c72fffed7cc6d40a6e38f32bd5559dc7382177d0866cdaa6a4fe496a",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:54",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821644": [
        {
            "ioc_value": "005161b1d1b1065b7e1621306aaa5f48fc2196f0af4b12cf7d313018101ceb7d",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:53",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821645": [
        {
            "ioc_value": "ff7a32719f16ac930510f2ab8b9131fb3ae3680338d085fc182ff05ebf97de14",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-03 05:54:53",
            "last_seen_utc": "2026-06-03 13:20:15",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://stateoftheattack.com/campaign/polydrop",
            "tags": "CVE-2025-3248,polydrop",
            "anonymous": 0,
            "reporter": "Stateoftheattack"
        }
    ],
    "1821655": [
        {
            "ioc_value": "154.88.103.40:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:54:47",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821657": [
        {
            "ioc_value": "154.88.103.41:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-03 05:54:45",
            "last_seen_utc": "2026-08-21 23:41:45",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821651": [
        {
            "ioc_value": "vrlh0wdy.eutoor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 03:56:38",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821650": [
        {
            "ioc_value": "ymihaw7a.eutoor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 03:54:40",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821632": [
        {
            "ioc_value": "b7tibc5u.luxerabet1000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 01:54:59",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821631": [
        {
            "ioc_value": "hsy1u75o.luxerabet1000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-03 01:54:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821618": [
        {
            "ioc_value": "pf6n62u7.luxerabet5.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 23:54:30",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821617": [
        {
            "ioc_value": "6rdv0wtc.luxerabet5.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 23:53:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821600": [
        {
            "ioc_value": "23q34ztp.luxerabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 21:54:03",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821599": [
        {
            "ioc_value": "ofslg5u1.luxerabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 21:54:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821598": [
        {
            "ioc_value": "luxerabet1.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 21:53:26",
            "last_seen_utc": "2026-06-02 21:53:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2June2026,ClearFake,Commandline,MacOS",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1821519": [
        {
            "ioc_value": "0u9irsk6.luxerabet10.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 19:54:47",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821518": [
        {
            "ioc_value": "zs42pkd6.luxerabet10.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 19:52:54",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821517": [
        {
            "ioc_value": "45.198.224.19:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-02 19:45:08",
            "last_seen_utc": "2026-08-29 08:46:30",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AdaptixC2,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821516": [
        {
            "ioc_value": "195.246.230.99:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 19:44:03",
            "last_seen_utc": "2026-07-03 08:44:16",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821514": [
        {
            "ioc_value": "155.103.70.198:13407",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 19:43:27",
            "last_seen_utc": "2026-08-14 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821515": [
        {
            "ioc_value": "155.103.71.115:13408",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 19:43:27",
            "last_seen_utc": "2026-07-10 18:43:38",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821473": [
        {
            "ioc_value": "my-electrum.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 19:41:15",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821474": [
        {
            "ioc_value": "electrumn.gr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821475": [
        {
            "ioc_value": "safepalwallet.co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821476": [
        {
            "ioc_value": "safepals.gr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821477": [
        {
            "ioc_value": "safe-pal.gr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:12",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821478": [
        {
            "ioc_value": "new-rabby.at",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:11",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821479": [
        {
            "ioc_value": "rabby.com.mx",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821480": [
        {
            "ioc_value": "ldgr.co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:41:10",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821481": [
        {
            "ioc_value": "ledgerlive.ldgr.co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:39:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821482": [
        {
            "ioc_value": "trust-wallet.gr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:39:44",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821483": [
        {
            "ioc_value": "new-rabby.gr.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:39:37",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821484": [
        {
            "ioc_value": "safepal-app.co.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 19:39:36",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "infostealer,stealer",
            "anonymous": 0,
            "reporter": "ninjacatcher"
        }
    ],
    "1821493": [
        {
            "ioc_value": "117.149.139.41:45350",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghostsocks",
            "malware_alias": null,
            "malware_printable": "GhostSocks",
            "first_seen_utc": "2026-06-02 19:39:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "",
            "tags": "GhostSocks",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821494": [
        {
            "ioc_value": "txtsm188.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 19:39:27",
            "last_seen_utc": "2026-06-04 03:15:09",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "stealer",
            "anonymous": 0,
            "reporter": "whoamix302"
        }
    ],
    "1821505": [
        {
            "ioc_value": "caym.africa",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 18:00:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5eb4c9e5099fd47511d7e427514e92be2a2c2c7659bd73eb15b72b4caba16b2e/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821499": [
        {
            "ioc_value": "cspzm3hg.luxerabet1068.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 17:54:02",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821498": [
        {
            "ioc_value": "dqs5h9gh.luxerabet1068.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 17:52:32",
            "last_seen_utc": "2026-06-02 17:52:43",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821491": [
        {
            "ioc_value": "lesseffort.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 16:10:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/45e106568889434be142fcf8ad56ab2b658555edd612f007ab3c5c4a926b721b/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821492": [
        {
            "ioc_value": "onrealms.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 16:10:30",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/f328ac4d4662fb2a9b2ce2ad9961c795404f62b73d4315cbcafa5779da2cb4c9/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821490": [
        {
            "ioc_value": "121.200.216.166:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 16:05:03",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "NanoCore,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821472": [
        {
            "ioc_value": "r8cgf6ux.luxerabet100.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 15:52:21",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821471": [
        {
            "ioc_value": "duafwkrh.luxerabet100.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 15:52:00",
            "last_seen_utc": "2026-06-03 08:17:40",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1821082": [
        {
            "ioc_value": "154.88.100.47:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-02 15:17:56",
            "last_seen_utc": "2026-08-22 00:26:56",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1821464": [
        {
            "ioc_value": "https://91.98.17.80/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-02 15:17:56",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3d34b24e69c72db43ff718127b6951b29e466026afd2ab12ff13d1841b4cbb7/",
            "tags": "c2,vidar",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1821465": [
        {
            "ioc_value": "91.98.17.80:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vidar",
            "malware_alias": null,
            "malware_printable": "Vidar",
            "first_seen_utc": "2026-06-02 15:17:55",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/a3d34b24e69c72db43ff718127b6951b29e466026afd2ab12ff13d1841b4cbb7/",
            "tags": "c2,vidar",
            "anonymous": 0,
            "reporter": "burger"
        }
    ],
    "1821466": [
        {
            "ioc_value": "bluespaceproperties.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 14:55:37",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75c53840ad4978faba4569f16386846a12198b82c8af1761aa7544b978248af7/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821463": [
        {
            "ioc_value": "kele12.vip",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-02 14:36:28",
            "last_seen_utc": "2026-06-07 15:20:34",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,gh0st",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821461": [
        {
            "ioc_value": "byrnewealthmanagement.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 14:36:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "MacSync",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821462": [
        {
            "ioc_value": "marbellaresales.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 14:36:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "MacSync",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821459": [
        {
            "ioc_value": "timpwpomohungn.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821460": [
        {
            "ioc_value": "trypiynchinoiiiik.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:25",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821454": [
        {
            "ioc_value": "badsaais2022.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821455": [
        {
            "ioc_value": "kleinerycstone.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821456": [
        {
            "ioc_value": "krutirurtlliagesta.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821457": [
        {
            "ioc_value": "slaloolasiksubnovayachim.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821458": [
        {
            "ioc_value": "swoonwastan.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821453": [
        {
            "ioc_value": "http://trypiynchinoiiiik.ru/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821450": [
        {
            "ioc_value": "http://slaloolasiksubnovayachim.ru/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821451": [
        {
            "ioc_value": "http://swoonwastan.site/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821452": [
        {
            "ioc_value": "http://timpwpomohungn.site/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821448": [
        {
            "ioc_value": "http://kleinerycstone.site/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821449": [
        {
            "ioc_value": "http://krutirurtlliagesta.ru/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821447": [
        {
            "ioc_value": "http://badsaais2022.site/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.smokeloader",
            "malware_alias": "Dofoil,Sharik,Smoke,Smoke Loader",
            "malware_printable": "SmokeLoader",
            "first_seen_utc": "2026-06-02 14:35:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,smokeloader",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821445": [
        {
            "ioc_value": "209.54.101.164:8686",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821446": [
        {
            "ioc_value": "31.3.152.213:37393",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821444": [
        {
            "ioc_value": "149.33.34.27:2404",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:39",
            "last_seen_utc": "2026-07-21 22:00:58",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821439": [
        {
            "ioc_value": "sex.m-u88.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821440": [
        {
            "ioc_value": "styles2026.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821441": [
        {
            "ioc_value": "ug88.eu.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821442": [
        {
            "ioc_value": "vitrinekast-expert.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821443": [
        {
            "ioc_value": "westy04.karslioglu4-tr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821423": [
        {
            "ioc_value": "burnoutbuddies.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821424": [
        {
            "ioc_value": "c2.m-u88.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821425": [
        {
            "ioc_value": "chanbomaydi.m-u88.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821426": [
        {
            "ioc_value": "coinduit.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821427": [
        {
            "ioc_value": "fdfb.io",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821428": [
        {
            "ioc_value": "hostyour.tv",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821429": [
        {
            "ioc_value": "j88.studio",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821430": [
        {
            "ioc_value": "jhx.uk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821431": [
        {
            "ioc_value": "lmat.sa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821432": [
        {
            "ioc_value": "macos.macosnimba.name",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821433": [
        {
            "ioc_value": "macos2.macosnimba2.name",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821434": [
        {
            "ioc_value": "macos3.macosnimba3.name",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821435": [
        {
            "ioc_value": "payload.m-u88.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821436": [
        {
            "ioc_value": "quotationlp.quotationlp.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821437": [
        {
            "ioc_value": "rat.m-u88.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821438": [
        {
            "ioc_value": "saamhorigheidsfonds.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821417": [
        {
            "ioc_value": "aabm.my",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821418": [
        {
            "ioc_value": "almacenoporto.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821419": [
        {
            "ioc_value": "appelhout.nl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821420": [
        {
            "ioc_value": "arvand.co.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821421": [
        {
            "ioc_value": "aseguroconfiable21.mysynology.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821422": [
        {
            "ioc_value": "bomaylaliaw.m-u88.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 14:34:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,remcos",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821404": [
        {
            "ioc_value": "f168.limo",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821405": [
        {
            "ioc_value": "f168.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821406": [
        {
            "ioc_value": "f168.town",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821407": [
        {
            "ioc_value": "f1686s.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821408": [
        {
            "ioc_value": "f1688.best",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821409": [
        {
            "ioc_value": "f1688.icu",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821410": [
        {
            "ioc_value": "f1688com.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821411": [
        {
            "ioc_value": "f168bet.me",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821412": [
        {
            "ioc_value": "f168bet.onl",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821413": [
        {
            "ioc_value": "f168n.com.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821414": [
        {
            "ioc_value": "pilgrimlutheranpreschool.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821415": [
        {
            "ioc_value": "shbet126.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": "2026-06-02 14:34:00",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821416": [
        {
            "ioc_value": "sigmaboy86868-64288.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821394": [
        {
            "ioc_value": "ae888.living",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": "2026-06-02 14:34:00",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821395": [
        {
            "ioc_value": "bilaielpilpiol-47684.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821396": [
        {
            "ioc_value": "f168-co.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821397": [
        {
            "ioc_value": "f168.black",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821398": [
        {
            "ioc_value": "f168.blue",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821399": [
        {
            "ioc_value": "f168.church",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821400": [
        {
            "ioc_value": "f168.coach",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821401": [
        {
            "ioc_value": "f168.gallery",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821402": [
        {
            "ioc_value": "f168.ing",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821403": [
        {
            "ioc_value": "f168.law",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:33:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,quasar",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821393": [
        {
            "ioc_value": "k7elan-43083.portmap.host",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.njrat",
            "malware_alias": "Bladabindi,Lime-Worm",
            "malware_printable": "NjRAT",
            "first_seen_utc": "2026-06-02 14:33:34",
            "last_seen_utc": "2026-06-08 05:47:56",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,njrat",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821391": [
        {
            "ioc_value": "167.179.102.70:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-02 14:33:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,netwire",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821392": [
        {
            "ioc_value": "62.234.24.30:8888",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-02 14:33:17",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,netwire",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821389": [
        {
            "ioc_value": "noreply2host.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-02 14:32:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,netwire",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821390": [
        {
            "ioc_value": "wire.universitynetservice1979.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.netwire",
            "malware_alias": "NetWeird,NetWire,Recam",
            "malware_printable": "NetWire RC",
            "first_seen_utc": "2026-06-02 14:32:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,netwire",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821382": [
        {
            "ioc_value": "www.uj3gb7q.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821383": [
        {
            "ioc_value": "www.usemention.ai",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821384": [
        {
            "ioc_value": "www.valentinar.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821385": [
        {
            "ioc_value": "www.venloria.us",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821386": [
        {
            "ioc_value": "www.wrqgd.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821387": [
        {
            "ioc_value": "www.yinboxops.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821388": [
        {
            "ioc_value": "www.zavixaro.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:24",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821367": [
        {
            "ioc_value": "www.ncooleyrealty.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821368": [
        {
            "ioc_value": "www.nettflex.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821369": [
        {
            "ioc_value": "www.neurowellnesslab.site",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821370": [
        {
            "ioc_value": "www.ozenziraat.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821371": [
        {
            "ioc_value": "www.park-promote-portability.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821372": [
        {
            "ioc_value": "www.pepxly.makeup",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821373": [
        {
            "ioc_value": "www.pokerdom-kasinos-site.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821374": [
        {
            "ioc_value": "www.projectyola.click",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821375": [
        {
            "ioc_value": "www.souldiggin.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821376": [
        {
            "ioc_value": "www.spectrumcomercial.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821377": [
        {
            "ioc_value": "www.sydneyjoos.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821378": [
        {
            "ioc_value": "www.taskforcebot.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821379": [
        {
            "ioc_value": "www.thousandoaksbsalandscaping.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821380": [
        {
            "ioc_value": "www.topclickgaming735.info",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821381": [
        {
            "ioc_value": "www.twgxcc.art",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:23",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821352": [
        {
            "ioc_value": "www.getscalespilot.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821353": [
        {
            "ioc_value": "www.h38zn.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821354": [
        {
            "ioc_value": "www.happybusiness.fr",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821355": [
        {
            "ioc_value": "www.heyarefamily.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821356": [
        {
            "ioc_value": "www.hup30.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821357": [
        {
            "ioc_value": "www.i4feaqo5h.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821358": [
        {
            "ioc_value": "www.inscritos20266.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821359": [
        {
            "ioc_value": "www.j3152xx.cc",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821360": [
        {
            "ioc_value": "www.jefyd.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821361": [
        {
            "ioc_value": "www.lillyandlark.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821362": [
        {
            "ioc_value": "www.maedso.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821363": [
        {
            "ioc_value": "www.marineinsurer.one",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821364": [
        {
            "ioc_value": "www.mt9sx9.asia",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821365": [
        {
            "ioc_value": "www.myleadsgen.co",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821366": [
        {
            "ioc_value": "www.naturalstone.store",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:22",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821337": [
        {
            "ioc_value": "www.carolinabiscaro.net",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821338": [
        {
            "ioc_value": "www.chipskk.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821339": [
        {
            "ioc_value": "www.clawbytes.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821340": [
        {
            "ioc_value": "www.contexception.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821341": [
        {
            "ioc_value": "www.continuumclothing.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821342": [
        {
            "ioc_value": "www.cutoffwheelsrus.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821343": [
        {
            "ioc_value": "www.dakarcocktail.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821344": [
        {
            "ioc_value": "www.dojcatena.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821345": [
        {
            "ioc_value": "www.droppingjulzz.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821346": [
        {
            "ioc_value": "www.dtu92.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821347": [
        {
            "ioc_value": "www.duo240.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821348": [
        {
            "ioc_value": "www.eqtreporting.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821349": [
        {
            "ioc_value": "www.finance77-laudantium.pro",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821350": [
        {
            "ioc_value": "www.fixitfuego.online",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821351": [
        {
            "ioc_value": "www.furbabyfortune.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821325": [
        {
            "ioc_value": "www.43dqb.top",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821326": [
        {
            "ioc_value": "www.4554.tw",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821327": [
        {
            "ioc_value": "www.911itg.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821328": [
        {
            "ioc_value": "www.adrisex.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821329": [
        {
            "ioc_value": "www.aitooling.ru",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821330": [
        {
            "ioc_value": "www.appliancerookies.shop",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821331": [
        {
            "ioc_value": "www.assessoriabr.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821332": [
        {
            "ioc_value": "www.bethq.work",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821333": [
        {
            "ioc_value": "www.biforin.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821334": [
        {
            "ioc_value": "www.bosslifesa.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821335": [
        {
            "ioc_value": "www.bythebellboxing.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821336": [
        {
            "ioc_value": "www.c8un2-bz0ox-ecsxpp.xyz",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:20",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821324": [
        {
            "ioc_value": "www.12points.se",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:32:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821323": [
        {
            "ioc_value": "http://www.zavixaro.shop/ge47",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821317": [
        {
            "ioc_value": "http://www.uj3gb7q.shop/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821318": [
        {
            "ioc_value": "http://www.usemention.ai/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821319": [
        {
            "ioc_value": "http://www.valentinar.ru/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821320": [
        {
            "ioc_value": "http://www.venloria.us/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821321": [
        {
            "ioc_value": "http://www.wrqgd.xyz/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821322": [
        {
            "ioc_value": "http://www.yinboxops.co/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821309": [
        {
            "ioc_value": "http://www.projectyola.click/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821310": [
        {
            "ioc_value": "http://www.souldiggin.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821311": [
        {
            "ioc_value": "http://www.spectrumcomercial.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821312": [
        {
            "ioc_value": "http://www.sydneyjoos.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821313": [
        {
            "ioc_value": "http://www.taskforcebot.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821314": [
        {
            "ioc_value": "http://www.thousandoaksbsalandscaping.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821315": [
        {
            "ioc_value": "http://www.topclickgaming735.info/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821316": [
        {
            "ioc_value": "http://www.twgxcc.art/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821301": [
        {
            "ioc_value": "http://www.naturalstone.store/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821302": [
        {
            "ioc_value": "http://www.ncooleyrealty.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821303": [
        {
            "ioc_value": "http://www.nettflex.site/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821304": [
        {
            "ioc_value": "http://www.neurowellnesslab.site/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821305": [
        {
            "ioc_value": "http://www.ozenziraat.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821306": [
        {
            "ioc_value": "http://www.park-promote-portability.xyz/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821307": [
        {
            "ioc_value": "http://www.pepxly.makeup/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821308": [
        {
            "ioc_value": "http://www.pokerdom-kasinos-site.ru/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821294": [
        {
            "ioc_value": "http://www.j3152xx.cc/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821295": [
        {
            "ioc_value": "http://www.jefyd.top/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821296": [
        {
            "ioc_value": "http://www.lillyandlark.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821297": [
        {
            "ioc_value": "http://www.maedso.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821298": [
        {
            "ioc_value": "http://www.marineinsurer.one/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821299": [
        {
            "ioc_value": "http://www.mt9sx9.asia/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821300": [
        {
            "ioc_value": "http://www.myleadsgen.co/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821286": [
        {
            "ioc_value": "http://www.furbabyfortune.shop/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821287": [
        {
            "ioc_value": "http://www.getscalespilot.co/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821288": [
        {
            "ioc_value": "http://www.h38zn.top/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821289": [
        {
            "ioc_value": "http://www.happybusiness.fr/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821290": [
        {
            "ioc_value": "http://www.heyarefamily.store/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821291": [
        {
            "ioc_value": "http://www.hup30.top/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821292": [
        {
            "ioc_value": "http://www.i4feaqo5h.xyz/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821293": [
        {
            "ioc_value": "http://www.inscritos20266.online/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821278": [
        {
            "ioc_value": "http://www.dakarcocktail.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821279": [
        {
            "ioc_value": "http://www.dojcatena.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821280": [
        {
            "ioc_value": "http://www.droppingjulzz.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821281": [
        {
            "ioc_value": "http://www.dtu92.top/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821282": [
        {
            "ioc_value": "http://www.duo240.top/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821283": [
        {
            "ioc_value": "http://www.eqtreporting.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821284": [
        {
            "ioc_value": "http://www.finance77-laudantium.pro/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821285": [
        {
            "ioc_value": "http://www.fixitfuego.online/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821271": [
        {
            "ioc_value": "http://www.c8un2-bz0ox-ecsxpp.xyz/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821272": [
        {
            "ioc_value": "http://www.carolinabiscaro.net/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821273": [
        {
            "ioc_value": "http://www.chipskk.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821274": [
        {
            "ioc_value": "http://www.clawbytes.xyz/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821275": [
        {
            "ioc_value": "http://www.contexception.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821276": [
        {
            "ioc_value": "http://www.continuumclothing.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821277": [
        {
            "ioc_value": "http://www.cutoffwheelsrus.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821263": [
        {
            "ioc_value": "http://www.adrisex.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821264": [
        {
            "ioc_value": "http://www.aitooling.ru/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821265": [
        {
            "ioc_value": "http://www.appliancerookies.shop/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821266": [
        {
            "ioc_value": "http://www.assessoriabr.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821267": [
        {
            "ioc_value": "http://www.bethq.work/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821268": [
        {
            "ioc_value": "http://www.biforin.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821269": [
        {
            "ioc_value": "http://www.bosslifesa.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821270": [
        {
            "ioc_value": "http://www.bythebellboxing.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821259": [
        {
            "ioc_value": "http://www.12points.se/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821260": [
        {
            "ioc_value": "http://www.43dqb.top/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821261": [
        {
            "ioc_value": "http://www.4554.tw/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821262": [
        {
            "ioc_value": "http://www.911itg.com/ge47/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.formbook",
            "malware_alias": "win.xloader",
            "malware_printable": "Formbook",
            "first_seen_utc": "2026-06-02 14:31:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,formbook",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821256": [
        {
            "ioc_value": "185.220.177.36:3232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-02 14:31:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,dcrat",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821257": [
        {
            "ioc_value": "3.124.67.191:16242",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-02 14:31:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,dcrat",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821258": [
        {
            "ioc_value": "3.124.67.191:3232",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-02 14:31:19",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "c2,dcrat",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821254": [
        {
            "ioc_value": "195.226.92.129:20188",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-02 14:30:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821255": [
        {
            "ioc_value": "77.38.89.68:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-02 14:30:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "",
            "tags": "asyncrat,c2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821249": [
        {
            "ioc_value": "https://delta-remote.web.app/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-02 14:29:04",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88bc-f1bf-7022-9785-c32140a750a9",
            "tags": "airavat,c2,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821248": [
        {
            "ioc_value": "https://mg.share-wise.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "apk.spynote",
            "malware_alias": "CypherRat",
            "malware_printable": "SpyNote",
            "first_seen_utc": "2026-06-02 14:28:21",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88bc-4882-72ff-a477-4e574e1209a4",
            "tags": "c2,spynote,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821247": [
        {
            "ioc_value": "http://165.154.236.119:8888/supershell/login",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:27:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88bb-4366-722c-9f04-19ac28a07c7f",
            "tags": "c2,supershell,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821246": [
        {
            "ioc_value": "https://www.aaa.thedevilrockfour.com/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:27:02",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88bb-1134-779f-aa3f-2d98953a9f79",
            "tags": "c2,QuantumRouteRedirect,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821245": [
        {
            "ioc_value": "https://io.lupescleaningservice.net/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:27:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88bb-0c07-75cd-a4ef-1f5e0150c833",
            "tags": "c2,QuantumRouteRedirect,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821244": [
        {
            "ioc_value": "https://ucmrent.com.mx/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:26:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88bb-0745-70ee-a925-25341c88216f",
            "tags": "c2,QuantumRouteRedirect,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821243": [
        {
            "ioc_value": "https://rolkdsgwasagt.com/work/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-06-02 14:25:28",
            "last_seen_utc": "2026-06-10 06:52:08",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5ec37444f9ead97f89b74b0b0ee6707bd67a61cb1ad1aa7f5ba85613b722cf4a/",
            "tags": "latrodectus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821242": [
        {
            "ioc_value": "https://iondrivinos34.com/work/",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.latrodectus",
            "malware_alias": "BLACKWIDOW,IceNova,Latrodectus,Lotus",
            "malware_printable": "Latrodectus",
            "first_seen_utc": "2026-06-02 14:25:27",
            "last_seen_utc": "2026-06-10 06:50:39",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/5ec37444f9ead97f89b74b0b0ee6707bd67a61cb1ad1aa7f5ba85613b722cf4a/",
            "tags": "latrodectus",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1821241": [
        {
            "ioc_value": "http://f1232411.xsph.ru/9b6d596f.php",
            "ioc_type": "url",
            "threat_type": "botnet_cc",
            "malware": "win.dcrat",
            "malware_alias": "DarkCrystal RAT",
            "malware_printable": "DCRat",
            "first_seen_utc": "2026-06-02 14:13:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://urlscan.io/result/019e88ae-ac28-74ee-be77-1087f8991fb5",
            "tags": "c2,dcrat,urlscan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821239": [
        {
            "ioc_value": "185.213.240.179:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.salatstealer",
            "malware_alias": null,
            "malware_printable": "SalatStealer",
            "first_seen_utc": "2026-06-02 14:09:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.213.240.179#80",
            "tags": "c2,salatstealer,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821237": [
        {
            "ioc_value": "135.125.101.1:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_stealer",
            "malware_alias": null,
            "malware_printable": "Unknown Stealer",
            "first_seen_utc": "2026-06-02 14:09:38",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/135.125.101.1#80",
            "tags": "c2,collector,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821236": [
        {
            "ioc_value": "45.61.130.75:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:09:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.61.130.75#443",
            "tags": "c2,pentegana,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821235": [
        {
            "ioc_value": "84.132.30.235:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.ghost_rat",
            "malware_alias": "Farfli,Gh0st RAT,PCRat",
            "malware_printable": "Ghost RAT",
            "first_seen_utc": "2026-06-02 14:08:35",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.132.30.235#80",
            "tags": "c2,gh0st,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821234": [
        {
            "ioc_value": "172.236.10.230:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.empire_downloader",
            "malware_alias": null,
            "malware_printable": "Empire Downloader",
            "first_seen_utc": "2026-06-02 14:07:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.236.10.230#1337",
            "tags": "c2,shodan,StarKillerC2",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821233": [
        {
            "ioc_value": "172.236.10.250:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.havoc",
            "malware_alias": "Havokiz",
            "malware_printable": "Havoc",
            "first_seen_utc": "2026-06-02 14:06:11",
            "last_seen_utc": "2026-08-10 18:44:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.236.10.250#443",
            "tags": "c2,havoc,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821232": [
        {
            "ioc_value": "212.192.15.73:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:05:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.192.15.73#80",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821231": [
        {
            "ioc_value": "212.192.15.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:05:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/212.192.15.73#443",
            "tags": "c2,redguard,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821230": [
        {
            "ioc_value": "27.124.20.30:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:05:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/27.124.20.30#443",
            "tags": "c2,quasar,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821228": [
        {
            "ioc_value": "27.124.20.13:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:05:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/27.124.20.13#443",
            "tags": "c2,quasar,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821229": [
        {
            "ioc_value": "27.124.20.25:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.quasar_rat",
            "malware_alias": "CinaRAT,QuasarRAT,Yggdrasil",
            "malware_printable": "Quasar RAT",
            "first_seen_utc": "2026-06-02 14:05:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/27.124.20.25#443",
            "tags": "c2,quasar,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821227": [
        {
            "ioc_value": "198.13.51.245:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-02 14:05:08",
            "last_seen_utc": "2026-09-01 02:44:37",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/198.13.51.245#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821224": [
        {
            "ioc_value": "167.179.112.133:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-02 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.179.112.133#4321",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821225": [
        {
            "ioc_value": "45.198.224.19:4444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-02 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.198.224.19#4444",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821226": [
        {
            "ioc_value": "45.125.67.171:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.adaptix_c2",
            "malware_alias": null,
            "malware_printable": "AdaptixC2",
            "first_seen_utc": "2026-06-02 14:05:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.125.67.171#443",
            "tags": "adaptixc2,c2,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821223": [
        {
            "ioc_value": "52.157.245.90:8083",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.shadowpad",
            "malware_alias": "POISONPLUG.SHADOW,XShellGhost",
            "malware_printable": "ShadowPad",
            "first_seen_utc": "2026-06-02 14:04:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.157.245.90#8083",
            "tags": "c2,shadowpad,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821221": [
        {
            "ioc_value": "34.61.52.162:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:04:12",
            "last_seen_utc": "2026-09-01 02:45:41",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.61.52.162#443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821222": [
        {
            "ioc_value": "85.117.242.132:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:04:12",
            "last_seen_utc": "2026-06-02 14:04:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/85.117.242.132#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821218": [
        {
            "ioc_value": "84.46.243.167:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:04:11",
            "last_seen_utc": "2026-06-02 14:04:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.46.243.167#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821219": [
        {
            "ioc_value": "172.237.125.146:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:04:11",
            "last_seen_utc": "2026-07-24 18:44:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.237.125.146#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821220": [
        {
            "ioc_value": "45.76.203.112:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:04:11",
            "last_seen_utc": "2026-07-04 08:45:55",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.76.203.112#7443",
            "tags": "c2,mythic,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821215": [
        {
            "ioc_value": "89.124.81.216:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-02 14:03:39",
            "last_seen_utc": "2026-06-02 16:54:48",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.124.81.216#9000",
            "tags": "c2,sectoprat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821216": [
        {
            "ioc_value": "89.124.99.84:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-02 14:03:39",
            "last_seen_utc": "2026-06-02 16:54:49",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.124.99.84#9000",
            "tags": "c2,sectoprat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821217": [
        {
            "ioc_value": "193.233.82.76:9000",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sectop_rat",
            "malware_alias": "1xxbot,ArechClient",
            "malware_printable": "SectopRAT",
            "first_seen_utc": "2026-06-02 14:03:39",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/193.233.82.76#9000",
            "tags": "c2,sectoprat,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821214": [
        {
            "ioc_value": "104.248.203.61:9090",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.248.203.61#9090",
            "tags": "c2,shodan,supershell",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821209": [
        {
            "ioc_value": "192.227.175.164:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.227.175.164#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821210": [
        {
            "ioc_value": "35.198.153.73:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.198.153.73#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821211": [
        {
            "ioc_value": "172.193.203.182:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.193.203.182#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821212": [
        {
            "ioc_value": "51.161.87.215:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.161.87.215#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821213": [
        {
            "ioc_value": "170.187.131.233:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/170.187.131.233#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821204": [
        {
            "ioc_value": "95.217.16.137:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/95.217.16.137#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821205": [
        {
            "ioc_value": "143.42.224.221:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/143.42.224.221#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821206": [
        {
            "ioc_value": "20.84.34.5:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.84.34.5#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821207": [
        {
            "ioc_value": "136.113.136.24:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/136.113.136.24#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821208": [
        {
            "ioc_value": "52.224.204.82:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.224.204.82#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821200": [
        {
            "ioc_value": "51.178.91.167:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.178.91.167#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821201": [
        {
            "ioc_value": "101.37.236.254:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.37.236.254#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821202": [
        {
            "ioc_value": "155.98.38.33:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/155.98.38.33#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821203": [
        {
            "ioc_value": "40.160.50.245:8089",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/40.160.50.245#8089",
            "tags": "c2,locust,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821197": [
        {
            "ioc_value": "44.209.114.45:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/44.209.114.45#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821198": [
        {
            "ioc_value": "134.204.28.242:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.204.28.242#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821199": [
        {
            "ioc_value": "74.163.240.30:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:02:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.163.240.30#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821193": [
        {
            "ioc_value": "178.104.45.253:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.104.45.253#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821194": [
        {
            "ioc_value": "64.39.159.147:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.39.159.147#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821195": [
        {
            "ioc_value": "23.122.192.130:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/23.122.192.130#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821196": [
        {
            "ioc_value": "64.39.159.143:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.39.159.143#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821190": [
        {
            "ioc_value": "81.10.62.145:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.10.62.145#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821191": [
        {
            "ioc_value": "52.4.51.186:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.4.51.186#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821192": [
        {
            "ioc_value": "3.22.21.33:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/3.22.21.33#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821186": [
        {
            "ioc_value": "72.35.184.226:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/72.35.184.226#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821187": [
        {
            "ioc_value": "64.60.107.131:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.60.107.131#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821188": [
        {
            "ioc_value": "152.39.93.14:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.39.93.14#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821189": [
        {
            "ioc_value": "24.233.220.142:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/24.233.220.142#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821182": [
        {
            "ioc_value": "20.229.56.135:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.229.56.135#8080",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821183": [
        {
            "ioc_value": "103.44.216.229:8445",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.44.216.229#8445",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821184": [
        {
            "ioc_value": "108.143.211.251:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/108.143.211.251#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821185": [
        {
            "ioc_value": "121.200.254.249:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/121.200.254.249#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821177": [
        {
            "ioc_value": "176.236.89.134:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/176.236.89.134#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821178": [
        {
            "ioc_value": "72.12.198.142:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/72.12.198.142#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821179": [
        {
            "ioc_value": "115.247.203.78:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/115.247.203.78#8443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821181": [
        {
            "ioc_value": "199.58.212.139:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/199.58.212.139#443",
            "tags": "c2,powersploit,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821176": [
        {
            "ioc_value": "216.128.143.167:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:34",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/216.128.143.167#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821175": [
        {
            "ioc_value": "59.110.173.112:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:33",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/59.110.173.112#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821172": [
        {
            "ioc_value": "155.138.214.84:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/155.138.214.84#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821173": [
        {
            "ioc_value": "42.118.175.124:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:32",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/42.118.175.124#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821168": [
        {
            "ioc_value": "151.158.0.137:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.158.0.137#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821169": [
        {
            "ioc_value": "98.126.237.108:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/98.126.237.108#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821170": [
        {
            "ioc_value": "98.126.237.110:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:31",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/98.126.237.110#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821166": [
        {
            "ioc_value": "45.77.124.92:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.77.124.92#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821167": [
        {
            "ioc_value": "155.138.252.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:30",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/155.138.252.76#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821165": [
        {
            "ioc_value": "207.246.119.41:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:29",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.246.119.41#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821156": [
        {
            "ioc_value": "101.200.138.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.200.138.9#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821157": [
        {
            "ioc_value": "98.126.237.109:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/98.126.237.109#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821158": [
        {
            "ioc_value": "183.131.51.229:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/183.131.51.229#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821159": [
        {
            "ioc_value": "43.162.94.11:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:27",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.162.94.11#443",
            "tags": "c2,panda,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821155": [
        {
            "ioc_value": "43.153.76.24:12498",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:14",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.153.76.24#12498",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821153": [
        {
            "ioc_value": "196.188.250.153:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/196.188.250.153#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821154": [
        {
            "ioc_value": "200.10.113.124:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:01:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/200.10.113.124#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821150": [
        {
            "ioc_value": "89.174.101.31:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.174.101.31#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821151": [
        {
            "ioc_value": "50.18.24.14:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:59",
            "last_seen_utc": "2026-06-02 14:01:14",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/50.18.24.14#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821152": [
        {
            "ioc_value": "209.99.189.104:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:59",
            "last_seen_utc": "2026-06-02 14:01:14",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.99.189.104#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821146": [
        {
            "ioc_value": "16.59.156.187:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:58",
            "last_seen_utc": "2026-06-02 14:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/16.59.156.187#80",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821147": [
        {
            "ioc_value": "68.183.122.189:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:58",
            "last_seen_utc": "2026-06-02 14:01:14",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/68.183.122.189#80",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821148": [
        {
            "ioc_value": "116.202.21.122:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/116.202.21.122#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821149": [
        {
            "ioc_value": "34.27.66.246:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.27.66.246#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821143": [
        {
            "ioc_value": "101.47.155.45:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:57",
            "last_seen_utc": "2026-06-02 14:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.47.155.45#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821144": [
        {
            "ioc_value": "103.180.240.13:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:57",
            "last_seen_utc": "2026-06-02 14:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.180.240.13#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821145": [
        {
            "ioc_value": "168.196.106.7:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:57",
            "last_seen_utc": "2026-06-02 14:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/168.196.106.7#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821139": [
        {
            "ioc_value": "89.197.167.119:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.197.167.119#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821140": [
        {
            "ioc_value": "54.72.23.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:56",
            "last_seen_utc": "2026-06-02 14:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/54.72.23.231#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821141": [
        {
            "ioc_value": "20.82.88.180:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:56",
            "last_seen_utc": "2026-06-02 14:01:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/20.82.88.180#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821142": [
        {
            "ioc_value": "104.196.220.46:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.196.220.46#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821136": [
        {
            "ioc_value": "45.63.127.65:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.63.127.65#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821137": [
        {
            "ioc_value": "172.105.185.141:80",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:55",
            "last_seen_utc": "2026-06-02 14:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.105.185.141#80",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821138": [
        {
            "ioc_value": "37.60.231.121:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.60.231.121#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821133": [
        {
            "ioc_value": "34.89.204.76:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.89.204.76#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821134": [
        {
            "ioc_value": "139.59.136.12:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:54",
            "last_seen_utc": "2026-06-02 14:01:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/139.59.136.12#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821135": [
        {
            "ioc_value": "34.128.140.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:54",
            "last_seen_utc": "2026-06-02 14:01:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.128.140.76#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821131": [
        {
            "ioc_value": "194.87.161.99:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.87.161.99#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821132": [
        {
            "ioc_value": "152.52.45.206:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:53",
            "last_seen_utc": "2026-06-02 14:01:11",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.52.45.206#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821128": [
        {
            "ioc_value": "34.89.204.76:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:52",
            "last_seen_utc": "2026-06-02 14:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.89.204.76#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821130": [
        {
            "ioc_value": "35.172.12.156:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:52",
            "last_seen_utc": "2026-06-02 14:01:10",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.172.12.156#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821123": [
        {
            "ioc_value": "147.15.78.253:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.15.78.253#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821124": [
        {
            "ioc_value": "192.64.118.148:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:51",
            "last_seen_utc": "2026-06-02 14:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.64.118.148#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821125": [
        {
            "ioc_value": "43.207.203.231:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:51",
            "last_seen_utc": "2026-06-02 14:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.207.203.231#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821126": [
        {
            "ioc_value": "34.63.108.204:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:51",
            "last_seen_utc": "2026-06-02 14:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.63.108.204#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821127": [
        {
            "ioc_value": "136.114.228.94:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:51",
            "last_seen_utc": "2026-06-02 14:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/136.114.228.94#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821119": [
        {
            "ioc_value": "206.183.130.245:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:50",
            "last_seen_utc": "2026-06-02 14:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/206.183.130.245#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821120": [
        {
            "ioc_value": "101.43.117.68:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:50",
            "last_seen_utc": "2026-06-02 14:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.43.117.68#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821121": [
        {
            "ioc_value": "172.245.210.224:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:50",
            "last_seen_utc": "2026-06-02 14:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.245.210.224#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821122": [
        {
            "ioc_value": "172.105.120.150:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:50",
            "last_seen_utc": "2026-06-02 14:01:09",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.105.120.150#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821114": [
        {
            "ioc_value": "45.198.68.141:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:49",
            "last_seen_utc": "2026-06-02 14:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.198.68.141#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821115": [
        {
            "ioc_value": "91.147.105.53:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.147.105.53#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821116": [
        {
            "ioc_value": "62.238.26.82:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:49",
            "last_seen_utc": "2026-06-02 14:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/62.238.26.82#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821117": [
        {
            "ioc_value": "38.49.209.207:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:49",
            "last_seen_utc": "2026-06-02 14:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.49.209.207#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821118": [
        {
            "ioc_value": "178.104.173.226:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:49",
            "last_seen_utc": "2026-06-02 14:01:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.104.173.226#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821110": [
        {
            "ioc_value": "31.220.87.73:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:48",
            "last_seen_utc": "2026-06-02 14:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.220.87.73#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821111": [
        {
            "ioc_value": "134.209.226.25:8181",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:48",
            "last_seen_utc": "2026-06-02 14:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.209.226.25#8181",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821112": [
        {
            "ioc_value": "51.159.172.66:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.159.172.66#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821113": [
        {
            "ioc_value": "38.76.201.199:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:48",
            "last_seen_utc": "2026-06-02 14:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.76.201.199#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821107": [
        {
            "ioc_value": "104.196.220.46:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:47",
            "last_seen_utc": "2026-06-02 14:01:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.196.220.46#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821108": [
        {
            "ioc_value": "4.239.122.1:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:47",
            "last_seen_utc": "2026-06-02 14:01:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/4.239.122.1#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821106": [
        {
            "ioc_value": "46.224.62.117:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:46",
            "last_seen_utc": "2026-06-02 14:01:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/46.224.62.117#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821102": [
        {
            "ioc_value": "52.1.50.91:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:45",
            "last_seen_utc": "2026-06-02 14:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.1.50.91#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821103": [
        {
            "ioc_value": "138.2.161.102:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:45",
            "last_seen_utc": "2026-06-02 14:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/138.2.161.102#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821104": [
        {
            "ioc_value": "159.89.210.218:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:45",
            "last_seen_utc": "2026-06-02 14:01:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.89.210.218#8443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821099": [
        {
            "ioc_value": "206.189.23.93:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:44",
            "last_seen_utc": "2026-06-02 14:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/206.189.23.93#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821100": [
        {
            "ioc_value": "192.140.167.143:13333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:44",
            "last_seen_utc": "2026-06-02 14:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.140.167.143#13333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821101": [
        {
            "ioc_value": "34.27.66.246:8080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:44",
            "last_seen_utc": "2026-06-02 14:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.27.66.246#8080",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821095": [
        {
            "ioc_value": "188.210.219.84:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/188.210.219.84#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821096": [
        {
            "ioc_value": "192.9.153.202:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.9.153.202#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821097": [
        {
            "ioc_value": "103.96.149.134:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:43",
            "last_seen_utc": "2026-06-02 14:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.96.149.134#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821098": [
        {
            "ioc_value": "38.187.1.77:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:43",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.187.1.77#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821092": [
        {
            "ioc_value": "122.51.206.236:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:42",
            "last_seen_utc": "2026-06-02 14:01:03",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/122.51.206.236#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821093": [
        {
            "ioc_value": "110.41.170.122:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:42",
            "last_seen_utc": "2026-06-02 14:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/110.41.170.122#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821094": [
        {
            "ioc_value": "144.202.27.111:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:42",
            "last_seen_utc": "2026-06-02 14:01:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/144.202.27.111#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821087": [
        {
            "ioc_value": "178.104.63.241:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:41",
            "last_seen_utc": "2026-06-02 14:01:01",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.104.63.241#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821088": [
        {
            "ioc_value": "103.204.15.102:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:41",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.204.15.102#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821089": [
        {
            "ioc_value": "34.196.2.6:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:41",
            "last_seen_utc": "2026-06-02 14:01:01",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.196.2.6#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821090": [
        {
            "ioc_value": "197.255.126.29:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:41",
            "last_seen_utc": "2026-06-02 14:01:02",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/197.255.126.29#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821091": [
        {
            "ioc_value": "66.203.67.146:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:41",
            "last_seen_utc": "2026-06-02 14:01:02",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.203.67.146#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821084": [
        {
            "ioc_value": "8.215.88.40:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:40",
            "last_seen_utc": "2026-06-02 14:01:01",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.215.88.40#443",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821085": [
        {
            "ioc_value": "24.199.81.245:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:40",
            "last_seen_utc": "2026-06-02 14:01:01",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/24.199.81.245#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821086": [
        {
            "ioc_value": "59.124.164.72:3333",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:40",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/59.124.164.72#3333",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821083": [
        {
            "ioc_value": "34.101.88.75:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 14:00:39",
            "last_seen_utc": "2026-06-02 14:01:00",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/34.101.88.75#1337",
            "tags": "c2,gophish,phishing,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821077": [
        {
            "ioc_value": "173.254.211.245:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.254.211.245#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821078": [
        {
            "ioc_value": "157.245.235.51:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.245.235.51#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821079": [
        {
            "ioc_value": "82.153.138.218:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:11",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.153.138.218#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821074": [
        {
            "ioc_value": "217.60.248.115:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/217.60.248.115#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821075": [
        {
            "ioc_value": "117.148.177.48:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/117.148.177.48#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821076": [
        {
            "ioc_value": "38.242.215.217:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:10",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.242.215.217#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821071": [
        {
            "ioc_value": "77.111.101.101:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.111.101.101#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821073": [
        {
            "ioc_value": "13.222.116.11:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:09",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/13.222.116.11#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821069": [
        {
            "ioc_value": "169.40.135.133:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/169.40.135.133#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821070": [
        {
            "ioc_value": "120.53.244.68:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.53.244.68#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821066": [
        {
            "ioc_value": "42.193.120.28:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/42.193.120.28#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821067": [
        {
            "ioc_value": "31.204.128.108:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.204.128.108#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821068": [
        {
            "ioc_value": "107.174.64.130:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.174.64.130#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821063": [
        {
            "ioc_value": "37.60.231.121:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.60.231.121#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821064": [
        {
            "ioc_value": "38.242.227.177:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.242.227.177#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821065": [
        {
            "ioc_value": "188.244.117.112:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:06",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/188.244.117.112#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821062": [
        {
            "ioc_value": "147.45.60.103:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:05",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.45.60.103#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821059": [
        {
            "ioc_value": "204.168.210.199:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/204.168.210.199#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821060": [
        {
            "ioc_value": "192.210.193.106:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.210.193.106#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821061": [
        {
            "ioc_value": "89.125.255.44:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.125.255.44#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821054": [
        {
            "ioc_value": "134.199.231.101:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/134.199.231.101#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821055": [
        {
            "ioc_value": "143.244.208.126:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/143.244.208.126#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821056": [
        {
            "ioc_value": "5.180.253.105:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.180.253.105#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821057": [
        {
            "ioc_value": "45.77.13.129:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.77.13.129#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821058": [
        {
            "ioc_value": "157.245.101.92:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 14:00:00",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/157.245.101.92#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821049": [
        {
            "ioc_value": "158.178.141.79:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/158.178.141.79#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821050": [
        {
            "ioc_value": "104.251.180.167:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.251.180.167#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821051": [
        {
            "ioc_value": "143.198.183.46:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/143.198.183.46#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821052": [
        {
            "ioc_value": "38.109.11.65:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.109.11.65#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821053": [
        {
            "ioc_value": "64.225.49.99:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:59",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.225.49.99#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821044": [
        {
            "ioc_value": "172.236.10.230:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.236.10.230#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821045": [
        {
            "ioc_value": "36.150.237.12:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/36.150.237.12#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821046": [
        {
            "ioc_value": "147.15.78.253:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.15.78.253#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821047": [
        {
            "ioc_value": "209.209.40.215:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.209.40.215#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821048": [
        {
            "ioc_value": "165.245.181.147:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/165.245.181.147#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821039": [
        {
            "ioc_value": "140.245.13.61:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/140.245.13.61#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821040": [
        {
            "ioc_value": "31.58.79.155:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.58.79.155#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821041": [
        {
            "ioc_value": "104.248.203.61:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.248.203.61#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821042": [
        {
            "ioc_value": "158.160.103.134:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/158.160.103.134#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821043": [
        {
            "ioc_value": "37.81.166.34:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/37.81.166.34#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821034": [
        {
            "ioc_value": "153.75.248.248:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/153.75.248.248#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821035": [
        {
            "ioc_value": "178.128.244.152:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/178.128.244.152#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821036": [
        {
            "ioc_value": "107.173.37.160:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.173.37.160#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821037": [
        {
            "ioc_value": "146.190.69.62:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.190.69.62#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821038": [
        {
            "ioc_value": "31.204.128.170:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.204.128.170#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821029": [
        {
            "ioc_value": "159.65.231.200:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/159.65.231.200#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821030": [
        {
            "ioc_value": "151.243.109.146:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/151.243.109.146#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821031": [
        {
            "ioc_value": "89.117.1.80:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.117.1.80#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821032": [
        {
            "ioc_value": "47.237.100.236:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.237.100.236#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821033": [
        {
            "ioc_value": "124.222.144.44:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/124.222.144.44#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821023": [
        {
            "ioc_value": "146.19.213.207:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.19.213.207#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821024": [
        {
            "ioc_value": "77.91.70.29:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/77.91.70.29#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821025": [
        {
            "ioc_value": "143.198.149.226:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/143.198.149.226#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821026": [
        {
            "ioc_value": "35.208.7.65:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/35.208.7.65#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821027": [
        {
            "ioc_value": "164.68.96.71:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/164.68.96.71#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821028": [
        {
            "ioc_value": "167.172.239.135:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.172.239.135#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821018": [
        {
            "ioc_value": "173.249.23.64:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.249.23.64#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821019": [
        {
            "ioc_value": "45.198.224.19:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.198.224.19#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821020": [
        {
            "ioc_value": "194.233.77.182:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/194.233.77.182#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821021": [
        {
            "ioc_value": "198.46.249.111:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/198.46.249.111#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821022": [
        {
            "ioc_value": "150.107.31.116:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:53",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/150.107.31.116#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821014": [
        {
            "ioc_value": "64.235.35.39:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.235.35.39#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821015": [
        {
            "ioc_value": "31.204.128.102:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/31.204.128.102#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821016": [
        {
            "ioc_value": "2.59.151.222:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/2.59.151.222#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821017": [
        {
            "ioc_value": "137.220.38.206:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:52",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/137.220.38.206#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821008": [
        {
            "ioc_value": "107.175.44.223:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.175.44.223#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821009": [
        {
            "ioc_value": "180.131.145.69:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/180.131.145.69#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821010": [
        {
            "ioc_value": "167.71.131.160:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/167.71.131.160#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821011": [
        {
            "ioc_value": "81.71.51.134:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/81.71.51.134#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821012": [
        {
            "ioc_value": "66.116.237.233:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/66.116.237.233#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821013": [
        {
            "ioc_value": "104.129.128.148:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:51",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/104.129.128.148#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821004": [
        {
            "ioc_value": "38.47.122.77:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.47.122.77#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821005": [
        {
            "ioc_value": "192.3.171.211:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/192.3.171.211#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821006": [
        {
            "ioc_value": "80.96.108.90:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/80.96.108.90#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821007": [
        {
            "ioc_value": "164.90.149.44:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:50",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/164.90.149.44#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820999": [
        {
            "ioc_value": "51.195.119.119:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/51.195.119.119#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821000": [
        {
            "ioc_value": "64.235.43.82:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/64.235.43.82#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821001": [
        {
            "ioc_value": "38.54.17.171:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.54.17.171#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821002": [
        {
            "ioc_value": "74.0.32.165:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/74.0.32.165#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1821003": [
        {
            "ioc_value": "8.162.15.76:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:49",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.162.15.76#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820994": [
        {
            "ioc_value": "119.28.101.250:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/119.28.101.250#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820995": [
        {
            "ioc_value": "172.245.185.195:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.245.185.195#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820996": [
        {
            "ioc_value": "185.139.215.144:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.139.215.144#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820997": [
        {
            "ioc_value": "172.105.103.223:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.105.103.223#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820998": [
        {
            "ioc_value": "213.209.159.254:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:48",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/213.209.159.254#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820989": [
        {
            "ioc_value": "185.132.53.76:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.132.53.76#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820990": [
        {
            "ioc_value": "195.200.28.173:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/195.200.28.173#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820991": [
        {
            "ioc_value": "5.181.181.107:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.181.181.107#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820992": [
        {
            "ioc_value": "80.71.235.233:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/80.71.235.233#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820993": [
        {
            "ioc_value": "103.232.121.241:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:47",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.232.121.241#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820983": [
        {
            "ioc_value": "147.182.231.214:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.182.231.214#1337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820984": [
        {
            "ioc_value": "85.206.164.27:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/85.206.164.27#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820985": [
        {
            "ioc_value": "89.116.31.190:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.116.31.190#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820986": [
        {
            "ioc_value": "173.214.172.247:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/173.214.172.247#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820987": [
        {
            "ioc_value": "84.32.22.235:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/84.32.22.235#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820988": [
        {
            "ioc_value": "107.172.151.87:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:46",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.172.151.87#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820978": [
        {
            "ioc_value": "146.19.213.207:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/146.19.213.207#8443",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820979": [
        {
            "ioc_value": "207.174.0.149:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/207.174.0.149#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820980": [
        {
            "ioc_value": "172.241.228.78:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/172.241.228.78#1337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820981": [
        {
            "ioc_value": "107.174.154.10:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/107.174.154.10#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820982": [
        {
            "ioc_value": "47.84.199.208:31337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:45",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.84.199.208#31337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820977": [
        {
            "ioc_value": "185.44.76.137:1337",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.sliver",
            "malware_alias": null,
            "malware_printable": "Sliver",
            "first_seen_utc": "2026-06-02 13:59:44",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/185.44.76.137#1337",
            "tags": "c2,shodan,sliver",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820975": [
        {
            "ioc_value": "106.53.61.9:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/106.53.61.9#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820976": [
        {
            "ioc_value": "47.111.227.56:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:08",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.111.227.56#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820974": [
        {
            "ioc_value": "154.194.251.43:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:07",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/154.194.251.43#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820973": [
        {
            "ioc_value": "117.72.175.125:20050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:05",
            "last_seen_utc": "2026-06-03 13:00:16",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/117.72.175.125#20050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820972": [
        {
            "ioc_value": "160.22.28.230:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:04",
            "last_seen_utc": "2026-06-02 13:59:07",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/160.22.28.230#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820969": [
        {
            "ioc_value": "116.62.31.195:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:03",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/116.62.31.195#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820970": [
        {
            "ioc_value": "49.234.199.152:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:03",
            "last_seen_utc": "2026-06-03 14:00:16",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/49.234.199.152#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820971": [
        {
            "ioc_value": "82.156.62.131:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:03",
            "last_seen_utc": "2026-06-02 13:59:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.156.62.131#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820965": [
        {
            "ioc_value": "47.104.248.7:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:01",
            "last_seen_utc": "2026-06-02 13:59:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.104.248.7#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820966": [
        {
            "ioc_value": "39.100.88.189:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:01",
            "last_seen_utc": "2026-06-03 18:00:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/39.100.88.189#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820967": [
        {
            "ioc_value": "43.138.186.157:12345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:01",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.138.186.157#12345",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820968": [
        {
            "ioc_value": "129.211.2.123:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:01",
            "last_seen_utc": "2026-06-02 13:59:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/129.211.2.123#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820961": [
        {
            "ioc_value": "120.76.143.184:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:00",
            "last_seen_utc": "2026-06-03 17:00:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.76.143.184#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820962": [
        {
            "ioc_value": "91.211.251.245:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:00",
            "last_seen_utc": "2026-06-02 13:59:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/91.211.251.245#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820963": [
        {
            "ioc_value": "209.200.246.82:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:00",
            "last_seen_utc": "2026-06-02 13:59:06",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.200.246.82#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820964": [
        {
            "ioc_value": "152.42.233.145:443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:59:00",
            "last_seen_utc": "2026-06-02 13:59:08",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/152.42.233.145#443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820958": [
        {
            "ioc_value": "8.134.70.73:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:59",
            "last_seen_utc": "2026-06-03 20:00:21",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.134.70.73#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820960": [
        {
            "ioc_value": "8.163.49.50:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:59",
            "last_seen_utc": "2026-06-03 20:00:20",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/8.163.49.50#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820954": [
        {
            "ioc_value": "139.224.23.63:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:58",
            "last_seen_utc": "2026-06-02 13:59:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/139.224.23.63#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820955": [
        {
            "ioc_value": "52.248.41.253:8443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:58",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/52.248.41.253#8443",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820956": [
        {
            "ioc_value": "111.228.4.54:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:58",
            "last_seen_utc": "2026-06-02 13:59:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/111.228.4.54#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820957": [
        {
            "ioc_value": "119.29.117.194:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:58",
            "last_seen_utc": "2026-06-03 15:00:12",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/119.29.117.194#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820949": [
        {
            "ioc_value": "5.189.140.26:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:57",
            "last_seen_utc": "2026-06-02 13:59:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/5.189.140.26#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820950": [
        {
            "ioc_value": "43.138.39.212:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:57",
            "last_seen_utc": "2026-06-02 13:59:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.138.39.212#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820951": [
        {
            "ioc_value": "45.202.249.88:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:57",
            "last_seen_utc": "2026-06-03 20:00:17",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.202.249.88#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820952": [
        {
            "ioc_value": "101.35.214.58:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:57",
            "last_seen_utc": "2026-06-02 13:59:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/101.35.214.58#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820953": [
        {
            "ioc_value": "79.174.83.7:4848",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:57",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/79.174.83.7#4848",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820944": [
        {
            "ioc_value": "147.78.2.110:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:56",
            "last_seen_utc": "2026-06-03 15:00:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/147.78.2.110#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820945": [
        {
            "ioc_value": "47.122.47.221:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:56",
            "last_seen_utc": "2026-06-03 15:00:15",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.122.47.221#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820946": [
        {
            "ioc_value": "1.92.101.103:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:56",
            "last_seen_utc": "2026-06-03 21:00:14",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/1.92.101.103#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820947": [
        {
            "ioc_value": "124.220.235.4:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:56",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/124.220.235.4#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820948": [
        {
            "ioc_value": "202.56.160.190:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:56",
            "last_seen_utc": "2026-06-02 13:59:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/202.56.160.190#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820939": [
        {
            "ioc_value": "89.124.120.221:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:55",
            "last_seen_utc": "2026-06-02 13:59:04",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/89.124.120.221#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820940": [
        {
            "ioc_value": "45.152.65.240:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/45.152.65.240#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820941": [
        {
            "ioc_value": "43.139.108.161:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:55",
            "last_seen_utc": "2026-07-16 01:05:05",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/43.139.108.161#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820942": [
        {
            "ioc_value": "82.156.219.31:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:55",
            "last_seen_utc": "2026-06-03 20:00:19",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/82.156.219.31#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820943": [
        {
            "ioc_value": "123.57.2.33:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:55",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/123.57.2.33#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820937": [
        {
            "ioc_value": "38.97.201.117:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:54",
            "last_seen_utc": null,
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/38.97.201.117#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820938": [
        {
            "ioc_value": "103.149.93.107:50050",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:54",
            "last_seen_utc": "2026-06-04 00:00:22",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/103.149.93.107#50050",
            "tags": "c2,cobaltstrike,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820936": [
        {
            "ioc_value": "47.82.234.12:8444",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:58:02",
            "last_seen_utc": "2026-08-18 11:56:18",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/47.82.234.12#8444",
            "tags": "c2,cobaltstrike,cs-watermark-1234567890,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820935": [
        {
            "ioc_value": "209.200.246.82:4321",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:57:17",
            "last_seen_utc": "2026-06-02 13:59:01",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/209.200.246.82#4321",
            "tags": "c2,cobaltstrike,cs-watermark-305419896,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820934": [
        {
            "ioc_value": "120.76.143.184:8899",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:56:46",
            "last_seen_utc": "2026-06-03 19:00:13",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/120.76.143.184#8899",
            "tags": "c2,cobaltstrike,cs-watermark-666666666,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820933": [
        {
            "ioc_value": "121.37.200.35:8098",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 13:56:36",
            "last_seen_utc": "2026-06-02 13:58:58",
            "confidence_level": 50,
            "is_compromised": false,
            "reference": "https://www.shodan.io/host/121.37.200.35#8098",
            "tags": "c2,cobaltstrike,cs-watermark-987654321,shodan",
            "anonymous": 0,
            "reporter": "juroots"
        }
    ],
    "1820932": [
        {
            "ioc_value": "t6h2yu60.luxerabet1000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:53:10",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820931": [
        {
            "ioc_value": "a8y1vw63.luxerabet1000.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:51:37",
            "last_seen_utc": "2026-06-03 01:54:10",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820930": [
        {
            "ioc_value": "gg88.hevymotors.in",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 13:50:28",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/112ef076061a1f6be03945a02d98fc6ca2ae5d97510e33d04139f929f06758f8/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820929": [
        {
            "ioc_value": "bwfmojo.tunny.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:50:07",
            "last_seen_utc": "2026-06-02 13:50:52",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820909": [
        {
            "ioc_value": "154.88.101.49:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-02 13:48:44",
            "last_seen_utc": "2026-08-21 23:41:44",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820912": [
        {
            "ioc_value": "adfa14deed04a850938bf48ef190b1f30b93d1bebe07ad2e7d0b48d8a03bdabc",
            "ioc_type": "sha256_hash",
            "threat_type": "payload",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-02 13:48:43",
            "last_seen_utc": null,
            "confidence_level": 90,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "alpine-container,cryptojacking,docker-api,elf,miner,x86_64,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820914": [
        {
            "ioc_value": "151.243.150.40:80",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-02 13:48:43",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "alpine-container,cryptojacking,docker-api,miner,payload-host,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820915": [
        {
            "ioc_value": "http://151.243.150.40/xmrig",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-02 13:48:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "alpine-container,docker-api,miner,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820916": [
        {
            "ioc_value": "http://151.243.150.40:8080/static/xmrig-linux-x64",
            "ioc_type": "url",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-02 13:48:42",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,miner,XMRig",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820917": [
        {
            "ioc_value": "169.150.198.74:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xmrig",
            "malware_alias": null,
            "malware_printable": "XMRIG",
            "first_seen_utc": "2026-06-02 13:48:41",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "cryptojacking,docker-api,kill-rivals,miner",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820918": [
        {
            "ioc_value": "47.85.8.171:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-02 13:48:41",
            "last_seen_utc": "2026-07-01 19:01:48",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820919": [
        {
            "ioc_value": "128.199.225.7:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-02 13:48:40",
            "last_seen_utc": "2026-06-20 17:37:34",
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "DigitalOcean,docker-api,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820920": [
        {
            "ioc_value": "45.94.209.196:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-02 13:48:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,dual-role,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820921": [
        {
            "ioc_value": "185.203.237.43:2375",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.redtail",
            "malware_alias": null,
            "malware_printable": "RedTail",
            "first_seen_utc": "2026-06-02 13:48:40",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "docker-api,libredtail-http,Redtail,spreader",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820922": [
        {
            "ioc_value": "188.32.210.218:22",
            "ioc_type": "ip:port",
            "threat_type": "payload_delivery",
            "malware": "elf.xorddos",
            "malware_alias": "XORDDOS",
            "malware_printable": "XOR DDoS",
            "first_seen_utc": "2026-06-02 13:48:39",
            "last_seen_utc": null,
            "confidence_level": 80,
            "is_compromised": false,
            "reference": "https://twitter.com/NullBlue67",
            "tags": "BillGates,DDoS,ssh-bruteforce,XOR.DDoS",
            "anonymous": 0,
            "reporter": "nullblue67"
        }
    ],
    "1820928": [
        {
            "ioc_value": "esbydax.tobisha.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:40:28",
            "last_seen_utc": "2026-06-02 13:41:12",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820927": [
        {
            "ioc_value": "sscedif.bahisbey90.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:30:27",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820926": [
        {
            "ioc_value": "fpaqjul.bahiscom2023.online",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:20:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820924": [
        {
            "ioc_value": "23.248.212.98:2345",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-02 13:15:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71fcb7c5b591a2459e1fb6d7ad2cb69d712dc1002efa3c275241aad8f5779594/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820925": [
        {
            "ioc_value": "23.248.212.98:2346",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.valley_rat",
            "malware_alias": "Winos",
            "malware_printable": "ValleyRAT",
            "first_seen_utc": "2026-06-02 13:15:40",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/71fcb7c5b591a2459e1fb6d7ad2cb69d712dc1002efa3c275241aad8f5779594/",
            "tags": "valleyrat_s2",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820923": [
        {
            "ioc_value": "107.173.143.23:5026",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 13:15:39",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/193dfceab5a4746393c441e2994b8b2c258ddabc1b202b6982acc854e599eb07/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820911": [
        {
            "ioc_value": "oruaaga.1xbet1farsi.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 13:05:46",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820906": [
        {
            "ioc_value": "kxlkbmz.303-bet.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 12:31:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820905": [
        {
            "ioc_value": "idyqkhp.303-bet.buzz",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 12:30:29",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820895": [
        {
            "ioc_value": "kuyquso.akharinbama.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 11:56:13",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820894": [
        {
            "ioc_value": "ps10z3qz.eutoor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 11:53:23",
            "last_seen_utc": "2026-06-11 10:05:02",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820893": [
        {
            "ioc_value": "eazcu9o7.eutoor.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 11:51:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820892": [
        {
            "ioc_value": "anxstwt.akharinbama.ir",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 11:49:14",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820891": [
        {
            "ioc_value": "xavytub.alternatifdekorasyon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 11:10:00",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820890": [
        {
            "ioc_value": "nkhxdiy.alternatifdekorasyon.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 11:08:50",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820847": [
        {
            "ioc_value": "fun88kyc.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 10:45:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": "",
            "tags": "ClearFake,Windows",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820851": [
        {
            "ioc_value": "64.89.161.167:5173",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown_rat",
            "malware_alias": null,
            "malware_printable": "Unknown RAT",
            "first_seen_utc": "2026-06-02 10:45:57",
            "last_seen_utc": "2026-08-24 13:22:54",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://infosec.exchange/@netresec/116679569279815152",
            "tags": "OverlordRAT",
            "anonymous": 0,
            "reporter": "netresec"
        }
    ],
    "1820854": [
        {
            "ioc_value": "154.88.102.34:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-02 10:45:56",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820857": [
        {
            "ioc_value": "154.88.101.61:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-02 10:45:54",
            "last_seen_utc": "2026-08-22 00:26:57",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820876": [
        {
            "ioc_value": "154.88.101.57:8884",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.vshell",
            "malware_alias": null,
            "malware_printable": "VShell",
            "first_seen_utc": "2026-06-02 10:45:53",
            "last_seen_utc": "2026-08-22 00:03:05",
            "confidence_level": 100,
            "is_compromised": true,
            "reference": null,
            "tags": "vshell",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820884": [
        {
            "ioc_value": "152.42.132.37:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-02 10:45:52",
            "last_seen_utc": "2026-06-07 10:41:31",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1820885": [
        {
            "ioc_value": "209.38.33.37:25001",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "apk.kimwolf",
            "malware_alias": null,
            "malware_printable": "Kimwolf",
            "first_seen_utc": "2026-06-02 10:45:52",
            "last_seen_utc": "2026-06-07 10:41:20",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "c2,Kimwolf",
            "anonymous": 0,
            "reporter": "Bitsight"
        }
    ],
    "1820886": [
        {
            "ioc_value": "1sun.duckdns.org",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 10:45:50",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/75a7143599bc7154f6290dac048a9a9f75065b435080e44a3cdee74b87933439/",
            "tags": "remcos",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820883": [
        {
            "ioc_value": "pyfptfv.anadoluslot.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 10:33:58",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820882": [
        {
            "ioc_value": "juwhlbr.anadoluslot.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 10:33:16",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820873": [
        {
            "ioc_value": "citnflk.arayemek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:58:51",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820872": [
        {
            "ioc_value": "iveyrtw.arayemek.com",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:57:42",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820871": [
        {
            "ioc_value": "ff4ekbmd.7lf.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:52:09",
            "last_seen_utc": "2026-06-11 10:05:04",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "clearfake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820870": [
        {
            "ioc_value": "yn9307x6.7lf.net",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:50:45",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820869": [
        {
            "ioc_value": "113.44.136.127:8087",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.cobalt_strike",
            "malware_alias": "Agentemis,BEACON,CobaltStrike,cobeacon",
            "malware_printable": "Cobalt Strike",
            "first_seen_utc": "2026-06-02 09:46:15",
            "last_seen_utc": "2026-07-04 08:46:51",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "CobaltStrike,drb-ra",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820868": [
        {
            "ioc_value": "192.159.99.21:5080",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.asyncrat",
            "malware_alias": null,
            "malware_printable": "AsyncRAT",
            "first_seen_utc": "2026-06-02 09:43:59",
            "last_seen_utc": "2026-07-02 18:44:10",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "AsyncRAT,drb-ra,RAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820867": [
        {
            "ioc_value": "182.23.2.163:9060",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "win.remcos",
            "malware_alias": "RemcosRAT,Remvio,Socmer",
            "malware_printable": "Remcos",
            "first_seen_utc": "2026-06-02 09:43:50",
            "last_seen_utc": "2026-07-02 18:43:58",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,RAT,RemcosRAT",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820866": [
        {
            "ioc_value": "15.204.255.172:7443",
            "ioc_type": "ip:port",
            "threat_type": "botnet_cc",
            "malware": "unknown",
            "malware_alias": null,
            "malware_printable": "Unknown malware",
            "first_seen_utc": "2026-06-02 09:43:26",
            "last_seen_utc": "2026-08-06 08:43:48",
            "confidence_level": 75,
            "is_compromised": false,
            "reference": null,
            "tags": "drb-ra,Mythic",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820860": [
        {
            "ioc_value": "zyiwsis.betfire90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:23:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820859": [
        {
            "ioc_value": "ysqlyfg.betfire90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:22:53",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820858": [
        {
            "ioc_value": "betfire90.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 09:22:22",
            "last_seen_utc": "2026-06-03 15:14:32",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "2June2026,ClearFake,Commandline,Windows",
            "anonymous": 0,
            "reporter": "Gi7w0rm"
        }
    ],
    "1820853": [
        {
            "ioc_value": "ysivuys.betexper.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 08:48:08",
            "last_seen_utc": null,
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 1,
            "reporter": "anonymous"
        }
    ],
    "1820852": [
        {
            "ioc_value": "gllmkzi.betexper.bet",
            "ioc_type": "domain",
            "threat_type": "payload_delivery",
            "malware": "js.clearfake",
            "malware_alias": null,
            "malware_printable": "ClearFake",
            "first_seen_utc": "2026-06-02 08:46:43",
            "last_seen_utc": "2026-06-03 13:13:50",
            "confidence_level": 100,
            "is_compromised": false,
            "reference": null,
            "tags": "ClearFake",
            "anonymous": 0,
            "reporter": "threatcat_ch"
        }
    ],
    "1820850": [
        {
            "ioc_value": "xoilacpro.com",
            "ioc_type": "domain",
            "threat_type": "botnet_cc",
            "malware": "win.nanocore",
            "malware_alias": "Nancrat,NanoCore",
            "malware_printable": "Nanocore RAT",
            "first_seen_utc": "2026-06-02 08:40:29",
            "last_seen_utc": null,
            "confidence_level": 75,
            "is_compromised": false,
            "reference": "https://bazaar.abuse.ch/sample/8316795c025f8ea8c1d65c1c791aa39c15d73191fc2e39fc59d3b78f50cc3792/",
            "tags": "nanocore",
            "anonymous": 0,
            "reporter": "abuse_ch"
        }
    ],
    "1820849": [
        {
 